Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.misc > #12712

Re: magic number for mcrypt

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!eternal-september.org!feeder.eternal-september.org!mx02.eternal-september.org!.POSTED!not-for-mail
From Thad Floryan <thad@thadlabs.com>
Newsgroups comp.os.linux.misc
Subject Re: magic number for mcrypt
Date Sat, 15 Nov 2014 18:27:14 -0800
Organization ThadLABS
Lines 25
Message-ID <54680B82.3000700@thadlabs.com> (permalink)
References <m48nlr$2ja$1@speranza.aioe.org>
Mime-Version 1.0
Content-Type text/plain; charset=ISO-8859-1
Content-Transfer-Encoding 7bit
Injection-Info mx02.eternal-september.org; posting-host="8c9e5db8d01ced79e92159efa406567d"; logging-data="17309"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19F0hWK1q5mh1eI9IAejICNTJPe5bhQFJ0="
User-Agent Thunderbird 2.0.0.24 (Windows/20100228)
In-Reply-To <m48nlr$2ja$1@speranza.aioe.org>
Cancel-Lock sha1:/YfZ4iTcnBXeaq06AxYwohRCLUA=
Xref csiph.com comp.os.linux.misc:12712

Show key headers only | View raw


On 11/15/2014 3:30 PM, Bill Cunningham wrote:
> The 'file' command recognizes an encrypted file from mcrypt but I can't 
> find anywhere online the hex "magic number" that identifies the format. It 
> could be a long series of hex numbers or short. Does anyone know mcrypt's 
> signature?

$ man file | grep 'default magic' | head -1
/usr/share/misc/magic  Directory containing default magic files.

$ cd /usr/share/misc

$ ll
total 2336
-rw-r--r-- 1 root root  600570 Mar 15  2012 magic
-rw-r--r-- 1 root root 1786200 Mar 15  2012 magic.mgc

$ grep mcrypt *
magic:# $File: mcrypt,v 1.5 2009/09/19 16:28:10 christos Exp $
magic:# mcrypt:   file(1) magic for mcrypt 2.2.x;
magic:0 string            \0m\3     mcrypt 2.5 encrypted data,
magic:0 string            \0m\2     mcrypt 2.2 encrypted data,
Binary file magic.mgc matches


Thad

Back to comp.os.linux.misc | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-15 18:30 -0500
  Re: magic number for mcrypt Thad Floryan <thad@thadlabs.com> - 2014-11-15 18:27 -0800
    Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-15 21:54 -0500
      Re: magic number for mcrypt Thad Floryan <thad@thadlabs.com> - 2014-11-15 19:02 -0800
        Re: magic number for mcrypt Thad Floryan <thad@thadlabs.com> - 2014-11-15 19:08 -0800
          Re: magic number for mcrypt gazelle@shell.xmission.com (Kenny McCormack) - 2014-11-16 06:52 +0000
            Re: magic number for mcrypt Thad Floryan <thad@thadlabs.com> - 2014-11-16 01:10 -0800
          Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-16 14:01 -0500
            Re: magic number for mcrypt Bobbie Sellers <bliss-sf4ever@dslextreme.com> - 2014-11-16 11:56 -0800
              Re: magic number for mcrypt Robert Riches <spamtrap42@jacob21819.net> - 2014-11-18 03:50 +0000
                Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-17 23:56 -0500
            Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-16 15:34 -0500
              Re: magic number for mcrypt William Unruh <unruh@invalid.ca> - 2014-11-16 22:16 +0000
                Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-17 16:47 -0500
                Re: magic number for mcrypt William Unruh <unruh@invalid.ca> - 2014-11-17 23:43 +0000
                Re: magic number for mcrypt Tim Watts <tw_usenet@dionic.net> - 2014-11-18 00:36 +0000
                Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-17 23:02 -0500
              Re: magic number for mcrypt Keith Keller <kkeller-usenet@wombat.san-francisco.ca.us> - 2014-11-16 17:39 -0800
                Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-17 16:22 -0500
        Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-16 13:59 -0500

csiph-web