Can anybody explain how the zignature work?

[yasong]

Hi, I try to figure out how the signature is made by the zignature. I found no paper about it, but only found how to use it. Is there any different from IDA F.l.i.r.t.? Thank you.

[radare]

Did you checked the book? Yes ida signtures are also supported but they are very basic compared to what we have in r2. Our signatures are easily comparable to diaphora

On 19 Sep 2019, at 04:27, gh0st [email protected] wrote:

Hi, I try to figure out how the signature is made by the zignature. I found no paper about it, but only found how to use it. Is there any different from IDA F.l.i.r.t.? Thank you.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

[yasong]

Thank you. I have read the radare2book. I will try diaphora. But I don't know the principle behind the zignature. Is there some material about it? Maybe I have to read the source code about zignature. Thank you again.

[XVilka]

I moved the issue to the book - would be awesome if you can send a pull request to the book with a few sentences describing the algorithm, if you read the code. We will appreciate this contribution!

[Maijin]

@yasong a zignature in the one you show will match on all the function that has 31ed4989d15e4889e24883e4f05... and the . means any bytes.