capa-rules
capa-rules copied to clipboard
crypto algoritms from cryptopp
https://github.com/weidai11/cryptopp
A version of cryptopp is in the capa-testfiles repo 94d3c854aadbcfde46b2f82801015c31
, although it may be useful to find older/newer builds to check signatures against.
IIRC this was the file used for the SKIPJACK rule.
(partly) covered via function signatures now