Package: aeskeyfind (1:1.0-5)

[ Source: aeskeyfind  ]

tool for locating AES keys in a captured memory image

This program illustrates automatic techniques for locating 128-bit and 256-bit AES keys in a captured memory image.

The program uses various algorithms and also performs a simple entropy test to filter out blocks that are not keys. It counts the number of repeated bytes and skips blocks that have too many repeats.

This method works even if several bits of the key schedule have been corrupted due to memory decay.

This package is useful to several activities, as forensics investigations.

Tags: Implemented in: C, Role: Program

Other Packages Related to aeskeyfind

• dep: libc6 (>= 2.17) [arm64]

  GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.4) [not arm64]

Download aeskeyfind

Download for all available architectures

Architecture	Package Size	Installed Size	Files
amd64	10.2 kB	32.0 kB	[list of files]
arm64	10.3 kB	32.0 kB	[list of files]
armhf	10.4 kB	27.0 kB	[list of files]
i386	10.7 kB	35.0 kB	[list of files]