[ubuntu-uk] Reverse engineering data files
Paul Sladen
ubuntu at paul.sladen.org
Mon Dec 29 07:31:03 UTC 2014
On Tue, 25 Nov 2014, Paul Sladen wrote:
> On Mon, 24 Nov 2014, Gareth France wrote:
> > Sounds good. The tricky bit is they seem to have encrypted the results
> There doesn't appear to be anything encrypted.
A newer '.sss' version (found packed inside a '.gar' container format)
does appear to have been obfuscated: adding/subtracting a certain
amount to each byte from the output of a xorshift PNR, seeded from the
file-headers supplied immediately before the compressed stream:
https://github.com/sladen/pat/blob/master/gar.py#L130
https://en.wikipedia.org/wiki/Xorshift
Obfuscation (as found here) is not encryption. But neither is ROT13
encryption either:
https://en.wikipedia.org/wiki/ROT13
-Paul
More information about the ubuntu-uk
mailing list