01-06-2018, 04:56 PM
(This post was last modified: 01-06-2018, 04:56 PM by j45645hn45.)
(01-05-2018, 02:31 PM)philsmd Wrote: This payload data should be (look like) random data.
In your case it doesn't seem to be random data.
Is this also the case for your other examples?
The header from the original raid that I'm trying to decrypt has random data. My VM tests don't.
But I noticed that the real thing uses this cipher mode: cbc-essiv: sha256 and the VM uses xts-plain64 ... from my understanding though, that should have no impact on the randomness of the header data.
At this point, I have no idea how to proceed.