06-09-2023, 06:01 PM
I'm not so sure about your assumption that 1200/1248 is safe. It sounds safe intuitively but I would need to take a closer look at the format again to be sure. iirc, the enc seed contains the raw seed bytes, which you can hash with sha3 to receive your private key, but I don't remember how those are aligned or if there was other information in encseed.
As for padding checks or entropy checks, I don't have any links outside of linking you to modes in hashcat that implement those things. I think the ethereum presale mode may actually have a padding/alignment check as an early throwaway. As for entropy, the Truecrypt/Veracrypt modes all implement an entropy check on load to verify that you are loading an encrypted filer/container/etc.
As for padding checks or entropy checks, I don't have any links outside of linking you to modes in hashcat that implement those things. I think the ethereum presale mode may actually have a padding/alignment check as an early throwaway. As for entropy, the Truecrypt/Veracrypt modes all implement an entropy check on load to verify that you are loading an encrypted filer/container/etc.