Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 655

Reverse engineering is the process of discovering the technological principles of a human made device, object or system through analysis of its structure, function and operation.

3 votes

Global check of input/output of known hash functions

You might be interested in sphlib: this is a library implementing many cryptographic hash functions under a common API, and there is a command-line tool tool which ressembles the classic md5sum / sha1 …
Thomas Pornin's user avatar
14 votes
Accepted

Reverse engineering and Java

Yes, Java class files are easy to reverse engineer. The format is very regular, and very constrained: the VM must be able to verify that the code complies to the strong typing rules of Java code. This …
Thomas Pornin's user avatar
1 vote

Identifying strange Perl CGI script

This script begins by require './lib.pl', which will read and execute the contents of the lib.pl file, from the same directory. Without seeing the contents of this file, your question is (provably) un …
Thomas Pornin's user avatar
10 votes

Is initializing variable to NULL or 0 or -1 a bad practice from security standpoint?

In many programming languages, initialization of local variables is forced, or the engine will flatly refuse to read uninitialized data. Even in languages where you can read uninitialized variables an …
Thomas Pornin's user avatar
17 votes
Accepted

Are there any dangers in exposing git sha1 commit hashes?

As explained there, the SHA-1 hashes are identifiers for the stored objects, including commits -- they are computed deterministically from the object contents. There is no secret in there. Though SHA- …
Thomas Pornin's user avatar
11 votes
Accepted

What role does cryptography play in anti-piracy?

One possible model for preventing software piracy is Trusted Computing. The hardware platform is "trusted" in that it should be tamper resistant and will refuse to run non-authorized code, or divulge …
Thomas Pornin's user avatar
4 votes

Reverse engineering (decompiling) an hackme challenge .exe file in OSX

GNU binutils include the objdump utility which can disassemble executable files into human-readable, or at least programmer-readable, assembly source code. It can do so for any supported target it has …
Thomas Pornin's user avatar
13 votes
Accepted

Any MITM tool for forcing weak SSL cipher suite?

What you are trying to do will be... difficult. The main point is that at the end of the handshake, client and server send each other Finished messages, under the protection of the just-negotiated alg …
Thomas Pornin's user avatar
4 votes

Java applet authenticity problem

Basically you cannot have such a guarantee. Your applet runs on the client machine, i.e. the attacker's machine. He can inspect the applet code as he wishes, and there is nothing which the applet can …
Thomas Pornin's user avatar
8 votes

How can I audit which type of Block Mode encryption is being used when no source code is ava...

@dr jimbob gives the right answers as to the detection of the block cipher modes. I would like to complement that with another view of the question; namely: if you cannot know what algorithm is used w …
Thomas Pornin's user avatar
81 votes
Accepted

How valuable is secrecy of an algorithm?

Much of the work on passwords and keys is related to controlling where they are stored and copied. A password is stored in the mind of a human user. It is entered on a keyboard (or equivalent) and g …
Thomas Pornin's user avatar