Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Tools for sophisticated binary key sniffing (https://forum.exetools.com/showthread.php?t=18368)

chants 08-26-2017 00:50

Tools for sophisticated binary key sniffing
 
Given a function call e.g. de/encryption in an app, is there a way to treat it as a black box and do techniques such as:

Data tracing where input data is traced, and each data dependent on that data by arithmetic or decision operations, is also traced, leading possibly to a very large amount of data being traced. In some sort of automated and easy to control way?

Control flow and data flow differential analysis. Flip one bit, and compare detailed execution traces and how the data is different between them, and where in its execution the divergences occur and such.

These sound like quite sophisticated techniques which could take a very complex task like breaking through very mathematically complex code - well obfuscated, and simplify it towards being nearly trivial and literally trivializing very sophisticated protection schemes.

Does anyone know of such comprehensive tools? I am quite certain some unreleased ones are used by certain security researchers and such but I do not know what is out there.

chants 08-26-2017 18:17

Alluded to here as it seems like a trending research topic in the last couple years:

Differential Fault Analysis on White-box AES Implementations
Quote:

https://blog.quarkslab.com/differential-fault-analysis-on-white-box-aes-implementations.html
Unboxing the White-Box: Practical attacks against Obfuscated Ciphers
Quote:

https://www.blackhat.com/docs/eu-15/materials/eu-15-Sanfelix-Unboxing-The-White-Box-Practical-Attacks-Against-Obfuscated-Ciphers-wp.pdf
White-Box Cryptography: Don’t Forget About Grey Box Attacks
Quote:

https://eprint.iacr.org/2017/355.pdf
Analysis of Software Countermeasures for Whitebox Encryption
Quote:

https://eprint.iacr.org/2017/183.pdf
There are some GitHub projects but I have yet to see any serious and easy to use tools in this regard.


All times are GMT +8. The time now is 02:53.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX