Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.misc > #12713
| From | "Bill Cunningham" <nospam@nspam.invalid> |
|---|---|
| Newsgroups | comp.os.linux.misc |
| Subject | Re: magic number for mcrypt |
| Date | 2014-11-15 21:54 -0500 |
| Organization | Aioe.org NNTP Server |
| Message-ID | <m493kl$nd4$1@speranza.aioe.org> (permalink) |
| References | <m48nlr$2ja$1@speranza.aioe.org> <54680B82.3000700@thadlabs.com> |
"Thad Floryan" <thad@thadlabs.com> wrote in message
news:54680B82.3000700@thadlabs.com...
> On 11/15/2014 3:30 PM, Bill Cunningham wrote:
>> The 'file' command recognizes an encrypted file from mcrypt but I can't
>> find anywhere online the hex "magic number" that identifies the format.
>> It
>> could be a long series of hex numbers or short. Does anyone know mcrypt's
>> signature?
>
> $ man file | grep 'default magic' | head -1
> /usr/share/misc/magic Directory containing default magic files.
>
> $ cd /usr/share/misc
>
> $ ll
> total 2336
> -rw-r--r-- 1 root root 600570 Mar 15 2012 magic
> -rw-r--r-- 1 root root 1786200 Mar 15 2012 magic.mgc
>
> $ grep mcrypt *
> magic:# $File: mcrypt,v 1.5 2009/09/19 16:28:10 christos Exp $
> magic:# mcrypt: file(1) magic for mcrypt 2.2.x;
> magic:0 string \0m\3 mcrypt 2.5 encrypted data,
> magic:0 string \0m\2 mcrypt 2.2 encrypted data,
> Binary file magic.mgc matches
I've never seen a string as a magic number in a hexdump. How and where
would that be exactly in a hexdump of a mcrypted file?
Bill
Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-15 18:30 -0500
Re: magic number for mcrypt Thad Floryan <thad@thadlabs.com> - 2014-11-15 18:27 -0800
Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-15 21:54 -0500
Re: magic number for mcrypt Thad Floryan <thad@thadlabs.com> - 2014-11-15 19:02 -0800
Re: magic number for mcrypt Thad Floryan <thad@thadlabs.com> - 2014-11-15 19:08 -0800
Re: magic number for mcrypt gazelle@shell.xmission.com (Kenny McCormack) - 2014-11-16 06:52 +0000
Re: magic number for mcrypt Thad Floryan <thad@thadlabs.com> - 2014-11-16 01:10 -0800
Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-16 14:01 -0500
Re: magic number for mcrypt Bobbie Sellers <bliss-sf4ever@dslextreme.com> - 2014-11-16 11:56 -0800
Re: magic number for mcrypt Robert Riches <spamtrap42@jacob21819.net> - 2014-11-18 03:50 +0000
Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-17 23:56 -0500
Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-16 15:34 -0500
Re: magic number for mcrypt William Unruh <unruh@invalid.ca> - 2014-11-16 22:16 +0000
Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-17 16:47 -0500
Re: magic number for mcrypt William Unruh <unruh@invalid.ca> - 2014-11-17 23:43 +0000
Re: magic number for mcrypt Tim Watts <tw_usenet@dionic.net> - 2014-11-18 00:36 +0000
Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-17 23:02 -0500
Re: magic number for mcrypt Keith Keller <kkeller-usenet@wombat.san-francisco.ca.us> - 2014-11-16 17:39 -0800
Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-17 16:22 -0500
Re: magic number for mcrypt "Bill Cunningham" <nospam@nspam.invalid> - 2014-11-16 13:59 -0500
csiph-web