Closed uzlonewolf closed 1 year ago
After spending a few hours in Ghidra I was only able to confirm it used the same GCM function for the session key calculation, it's not decompiling right so I'm not 100% positive about what IV it's using. Hopefully I guessed right.
After spending a few hours in Ghidra I was only able to confirm it used the same GCM function for the session key calculation, it's not decompiling right so I'm not 100% positive about what IV it's using. Hopefully I guessed right.