TorgoTorgo / ghidra-findcrypt

Ghidra analysis plugin to locate cryptographic constants

https://gitlab.com/Torgo/ghidra_findcrypt

GNU General Public License v3.0

248 stars 23 forks source link

Closed TorgoTorgo closed 3 years ago

TorgoTorgo commented 3 years ago

3 refers to an unknown value in the database format. We should figure out what this is and then update the import script.

clienthax commented 3 years ago

Is this not just compressed size followed by decompressed size (currently buff_size) ? https://github.com/d3v1l401/FindCrypt-Ghidra/blob/master/FindCrypt.java#L824

TorgoTorgo commented 3 years ago

Thanks! This is closed by #5