From Collaborative RCE Tool Library

Jump to: navigation, search

Crypto Libraries


Tool name: Codetective Analysis Tool
Rating: 5.0 (1 vote)
Author: Francisco Gama Tabanez Ribeiro                        
Website: https://github.com/blackthorne/Codetective
Current version: 0.8.2
Last updated: September 20, 2014
Direct D/L link: N/A
License type: GPL
Description: Sometimes we run into hashes and other artefacts and can't figure out where did they come from and how they were generated. This tool is able to recognise the output format of many different algorithms in many different possible encodings for analysis purposes. It also infers the levels of certainty for each finding based on traces of its representation .

This may be useful e.g. when you are testing systems from a security perspective and are able to grab a password file with hashed contents maybe from an exposed backup file or by dumping memory. This may also be useful as a part of a fingerprinting process or simply to verify valid implementations of different algorithms. You may also try running this tool against network traffic captures or large source code repositories to look out for interesting stuff.

You can either use a generic version or as a plugin for the Volatility framework. The usage is similar.
Currently supports:
web-cookie
mssql2000
md5
URL
md4
phone number
credit cards
mssql2005
lm hash
ntlm hash
MySQL4+
MySQL323
base64
SAM(*:ntlm)
SAM(lm:*)
SAM(lm:ntlm)
RipeMD320
sha1
sha224
sha256
sha384
sha512
whirpool
CRC
des-salt-unix
sha256-salt-django
sha256-django
sha384-salt-django
sha384-django
sha256-salt-unix
sha512-salt-unix
apr1-salt-unix
md5-salt-unix
md5-wordpress
md5-phpBB3
md5-joomla2
md5-salt-joomla2
md5-joomla1
md5-salt-joomla1
blowfish-salt-unix
uuid
Also listed in: Data Extraction Tools, Data Search and Extraction Tools, Dongle Analysis Tools, Dongle Crypto Solver Tools, Memory Data Tracing Tools, Memory Search Tools, String Finders
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: OpenSSL libcrypto
Rating: 4.0 (1 vote)
Author: The OpenSSL Software Foundation                        
Website: http://openssl.org
Current version: 1.0.1e
Last updated: February 11, 2013
Direct D/L link: http://openssl.org/source/openssl-1.0.1e.tar.gz
License type: Free / Open Source (C)
Description: Very competent crypto library used in OpenSSL.

Online documentation at:

http://www.openssl.org/docs/crypto/crypto.html
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: cryptlib
Rating: 0.0 (0 votes)
Author: Peter Gutmann (yeah, that lunatic)                        
Website: http://www.cs.auckland.ac.nz/~pgut001/cryptlib/
Current version: 3.3.1
Last updated: recent snapshots always available
Direct D/L link: http://www.cypherpunks.to/~peter/cl331.zip
License type: "GPL-compatible license", A.K.A. "Sleepycat license"...
Description: Besides very, very diverse and creative name, cryptlib comes with 400+ pages manual (...), and really fast implementations of common crypto primitives.
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Crypto++
Rating: 0.0 (0 votes)
Author: Wei Dai                        
Website: http://www.cryptopp.com
Current version: 5.5.2
Last updated: September 24, 2007
Direct D/L link: http://www.cryptopp.com/cryptopp552.zip
License type: Public Domain (!)
Description: Cross platform library with usual crypto primitives: Hashing algos, asymmetric and symmetric algorithms, MAC's and support for elliptic curve cryptography.
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: MIRACL
Rating: 0.0 (0 votes)
Author: ShamusSoftware                        
Website: http://www.shamus.ie
Current version: 5.4
Last updated: July 18, 2009
Direct D/L link: ftp://ftp.computing.dcu.ie/pub/crypto/miracl.zip
License type: Free
Description: MIRACL is a Big Number Library which implements all of the primitives necessary to design Big Number Cryptography into your real-world application. It is primarily a tool for cryptographic system implementors. RSA public key cryptography, Diffie-Hellman Key exchange, DSA digital signature, they are all just a few procedure calls away. Support is also included for even more esoteric Elliptic Curves and Lucas function based schemes. The latest version offers full support for Elliptic Curve Cryptography over GF(p) and GF(2m) - see the links on this page for more details. Less well-known techniques can also be implemented as MIRACL allows you to work directly and efficiently with the big numbers that are the building blocks of number-theoretic cryptography. Although implemented as a C library, a well-thought out C++ wrapper is provided, which greatly simplifies program development. Most example programs (25+ of them) are provided in both C and C++ versions.

MIRACL now provides more support for conventional cryptography. The latest version implements the Advanced Encryption Standard (AES), Modes of Operation, and the new hashing standards SHA-160/256/384/512.

MIRACL is compact, fast and efficient and its now easier than ever to get the same near-optimal performance from any processor. Although essentially a portable library, inline assembly and special techniques can be invoked for blistering speed. MIRACL has also been successfully used in both embedded and DSP environments where space is at a premium. A new special purpose macro assembler feature facilitates the achievement of best possible performance from your embedded processor (see embedded.doc). MIRACL is, to an extent, self-configuring. Use your compiler to compile and run a simple configuration program, which proceeds with user interaction to generate optimal settings for your environment.
Also listed in: BigNum Libraries
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: TurboPower LockBox
Rating: 0.0 (0 votes)
Author: benoram, chaoticpup, fredhuffman & tpsfadmin                         
Website: http://sourceforge.net/projects/tplockbox
Current version: 2.07
Last updated: January 21, 2003
Direct D/L link: N/A
License type: Free / Open Source
Description: LockBox is a cross-platform toolkit for data encryption. It contains routines & components for use with Borland Delphi, C++Builder, & Kylix. It provides support for Blowfish, RSA, MD5, SHA-1, DES, triple- DES, Rijndael, & digital signing of messages.
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)


RSS feed Feed containing all updates and additions for this category.

RSS feed Feed containing all updates and additions for this category, including sub-categories.





Views
Category Navigation Tree
   Code Coverage Tools  (13)
   Code Ripping Tools  (2)
   Crypto Libraries  (6)
   Helper Tools  (3)
   Hex Editors  (13)
   Memory Patchers  (7)
   Packers  (20)
   Profiler Tools  (11)
   String Finders  (10)
   Tool Hiding Tools  (7)
   Tracers  (22)
   Needs New Category  (3)