3 ms·
> We will publish publicly decryptor that decrypts files of all victims, so everyone will be able to recover from attack in less than an hour. It is possible t
by aaron695 5y ago
> We will publish publicly decryptor that decrypts files of all victims, so everyone will be able to recover from attack in less than an hour.
It is possible to use a unique key for each client and one key that decrypts them all [1]
I wonder if they did, or if they made a mistake and only used one key. They would have to be more professional than that I guess.
[1] https://stackoverflow.com/questions/597188/encryption-decryption-with-multiple-keys https://stackoverflow.com/questions/597188/encryption-decryp...
If they used this implementation then each clients data has a unique symmetric key encrypting it and attached to their data is that symmetric key encrypted in multiple instances using different keys. One key Revil uses everywhere and another unique key for each client. So Revil can hand over a global key or personal key to recover the original symmetric key which is then used to decrypt the data.
- majewsky 5y ago> They would have to be more professional than that I guess. There are news all the time of big companies making rookie mistakes of that magnitude. I don't see why it should be different for big companies of the organized-crime variant.