05-10-2020, 03:45 PM
(05-09-2020, 11:32 PM)Romeo3442 Wrote: Correct, I am looking for help developing a module to attack this particular implementation. Is this a good place to request or on Github? I am not savvy enough to create the module and thus seeking help from the community.
By "help", do you mean you want someone to write the whole module for you? If so, you might be waiting a while. You could, certainly, drop a "new-algorithm" issue on GitHub, but if you peruse the existing list of open "new-algorithm" issues, you'll note that there's a lot of them sitting there. Also, as philsmd says, without knowing exactly how to decide if the key is correct, it's not a lot of use to know how to generate a key. For hash cracking, it's easy -- "does the generated hash match the original?" -- but for encryption key generation, you need to decrypt the data and then look to see if it "seems OK". That's a tricky problem, and requires knowing a lot more about how the data is stored.
Because I have too much curiosity, I took a gander at the source code for BFACS. It's... really something. Mostly Object Pascal code, which is a real throwback to the good ol' days. Certainly, it's not going to be a two hour task to write a module, if for no other reason than BFACS supports more than just Blowfish -- the "Technical Reference" page suggests that it also supports CAST5, ARCFOUR, Serpent, AES, 3DES, and Twofish. If you want something that supports all those, it's going to be more of an adventure.
Do you have a specific data file that you're looking to decrypt -- perhaps the long-lost wallet of Satoshi? If so, that's a bit easier, because there'll only be one cipher to deal with.
(Also, I can't go without quoting this gem from the TechRef: "SHA-1 is the most secure hash algorithm available today.")