Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

The cipher text looks like this:-

dO+4ubRqxB801u3ZLZx2A5dvmHCbw3MnQYxDkhSRLoOJ7CFiPg7Xxhzf1T8g69iB +JLEKvBlESQJTnSJkEEesgBnVAwrAz/v9MGgVp//gOV9xlyUca7UOI5kZglQq6WX 8V3NaEQmzAXFb1sMvlOukKjaQEvEGIOUxaWM5TC8f1w=

I also strongly suspect that the encrption key is

ABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCD

and the IV is

$1(_)&@!C547e1956-5ebf-4928-91cd-c1e65463efa3

Its probable that the plain text is:-

007bb0118400155d589b9c88532e7f8eece811328ab21188532e7f8eed88532e7f8ef0

I'm playing with a c++ dll in assembly trying to figure out how it's encrypting something. I strongly suspect it's using AES as I can see the following in the disassembler:

PTR to UNICODE "Microsoft Enhanced RSA and AES Cryptographic Provider"

Any advice would be great!

Ta

share|improve this question
1  
The "Cipher Text" is merely Base64 encoded text (en.wikipedia.org/wiki/Base64), and decodes to binary data, so you can't tell anything about it just based on the "Cipher Text". – gowenfawr Feb 12 at 12:46
From memory i believe that Microsoft Enhanced RSA and AES Cryptographic Provider is usually to do with code signing so its possible that decrpyting it won't produce any 'useful' data. – D3C4FF Feb 12 at 13:16

closed as too localized by Terry Chia, Gilles, Rory Alsop♦ Feb 12 at 12:55

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, see the FAQ.

Browse other questions tagged or ask your own question.