9 comments

[ 1.8 ms ] story [ 29.8 ms ] thread
The file header contains two 32-bit keys used to derive a substitution table index and step value for decryption.

In other words, obfuscation.

Coming from a brief failed attempt of using ghidra to see if keys were part of binary, this is a welcome news.

Next on wishlist is someone doing the same for encrypted fpga verilog blobs.

This is my work. Thanks for sharing! I'm happy to answer any questions, and feedback and requests are welcome.