wincrypto icon indicating copy to clipboard operation
wincrypto copied to clipboard

Published 20 hours ago • verified publisher icon crappycrypto

RC4 & MD5

Open zerog2k opened this issue 3 years ago • 0 comments

Discovered while reversing some stuff encrypted with WinCrypt API, that MS's actual implementation of CryptDeriveKey for RC4 (and at least MD5) just takes the first 5 bytes of the input md5 hash, and pads the remaining 11 bytes with zeros (rather than the entire md5 hash).

https://github.com/crappycrypto/wincrypto/blob/master/wincrypto/api.py#L92-L105

zerog2k avatar Nov 10 '21 01:11 zerog2k