|File Search||Catalog||Content Search|
The program uses various algorythms and also performs a simple entropy test to filter out blocks that are not keys. It counts the number of repeated bytes and skips blocks that have too many repeats.
This method works even if several bits of the key schedule have been corrupted due to memory decay.
AESKeyFinder 1.0 (2008-07-18) By Nadia Heninger and Ariel Feldman This program illustrates automatic techniques for locating 128-bit and 256-bit AES keys in a captured memory image, as described in Section 6.1 of the research paper: J. A. Halderman, S. D. Schoen, N. Heninger, W. Clarkson, W. Paul, J. A. Calandrino, A. J. Feldman, J. Appelbaum, and E. W. Felten. "Lest We Remember: Cold-Boot more»
aeskeyfind(1) User Commands aeskeyfind(1) NAME aeskeyfind - Locates 128-bit and 256-bit AES keys in a cap‐ tured memory image. SYNOPSIS aeskeyfind [OPTION] MEMORY-IMAGE DESCRIPTION aeskeyfind is a tool that illustrates automatic techniques for locating 128-bit and 256-bit AES keys in a captured mem‐ ory image. OPT more»
aeskeyfind (1:1.0-1) unstable; urgency=low * Team upload. [ Daniel Baumann ] * Minimizing rules file. * Using debhelper install file rather than adding install target in upstream Makefile. [ Julien Valroff ] * Fix version number (add an epoch to ensure the new version number is higher than the previously uploaded package) * Bump debhelper compat to 8 * Bump standards more»