VirusTotal / yara-x

A rewrite of YARA in Rust.
https://virustotal.github.io/yara-x/
BSD 3-Clause "New" or "Revised" License
631 stars 50 forks source link

feat: implement Authenticode parsing and verification without relying on OpenSSL #100

Closed plusvic closed 5 months ago

plusvic commented 5 months ago

Until now we were using the authenticode-parser crate for Authenticode parsing and verification. This is simply a Rust wrapper around https://github.com/avast/authenticode-parser which is written in C and uses OpenSSL under the hood. Depending on OpenSSL makes building and deploying YARA-X harder, specially when you want to integrate YARA-X in other systems.

With this change all the Authenticode parsing and validation is re-written in Rust.