Thread: Kanal how does signature analysis work?
View Single Post
  #29  
Old 08-07-2003, 20:47
ArC ArC is offline
VIP
  
Join Date: Jan 2003
Location: NTOSKRNL.EXE
Posts: 172
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 17 Times in 12 Posts
ArC Reputation: 1
Usually there should be an init routine
which inits the S-Box and the K field.
If you want to rip, you will have to rip the init routine as well.
However, you should trace (with a debugger) the init routine
as well since it usually contains the key.
Reply With Quote