4 ms·
aload 0 // this LDC "AES/CBC/NoPadding" invokestatic javax/crypto/Cipher.getInstance(java/lang/String) : javax/crypto/Cipher putfield com/snda/wi
by verroq 11y ago
aload 0 // this
LDC "AES/CBC/NoPadding"
invokestatic javax/crypto/Cipher.getInstance(java/lang/String) : javax/crypto/Cipher
putfield com/snda/wifilocating/support/c.c : javax/crypto/Cipher
Nope.
- StavrosK 11y agoCBC sizes would go 32, 48, 64
- deleted 11y ago[deleted]
- StavrosK 11y agoI'm obviously talking about 128, since I can't see 32 bytes happening with AES256 CBC.
- verroq 11y agoLDC AES/CBC/NoPadding #nopadding The fact that they had #nopadding in there makes it obvious that they copy pasted this code and has literally no idea what they are doing.
- StavrosK 11y agoWhat does padding have to do with the IV?
- verroq 11y agoYou think they randomly generate a IV for every single password? Did you think they were competent or something? :) https://i.imgur.com/b6kfN7y.png https://i.imgur.com/b6kfN7y.png Anyways, it is 128 bit CBC. I incorrectly assumed 256 bit because I forgot the hex representation of a char is twice the length. Since they don't have a padding block, the shortest possible output is one block. Thus 16 bytes or a hex string of 32 characters in length.
- StavrosK 11y agoJesus Christ that's incompetent. I see what you mean, it's 32 hex chars, not binary chars. Since we have the IV and key, we can just decrypt all the passwords.