4 ms·
It's probably a crap hand rolled key derivation function instead of a proper hash.
by api 11y ago
It's probably a crap hand rolled key derivation function instead of a proper hash.
- CiPHPerCoder 11y agohttps://github.com/leo-stone/hack-petya/blob/master/main.go#L107-L108 https://github.com/leo-stone/hack-petya/blob/master/main.go#... Looks like it used a [1-9a-xA-X]{8} key. Even with a CSPRNG that's only 46 bits of entropy. You can brute force that in 2-3 hours with adequate hardware.
- matt_wulfeck 11y agoDon't these things generate a unique key for each file?
- AnimalMuppet 11y agoEven if they do, the per-file keys must be algorithmically-derived from the master key. (Otherwise, how can it unencrypt the files after you pay the ransom?)
- vetrom 11y agoUser-space malware, sure. Petya does a full-disk encryption.
- Godel_unicode 11y agoOff topic - this might be the single most uttered phrase in crypto reviews in the last year.