polymorf / findcrypt-yara

IDA pro plugin to find crypto constants (and more)
BSD 3-Clause "New" or "Revised" License
1.36k stars 243 forks source link

Add AES inverse S-Box #21

Closed edeca closed 5 years ago

edeca commented 5 years ago

Add the inverse S-box for Rijndael, as documented at https://en.wikipedia.org/wiki/Rijndael_S-box

Found in a recent malware sample.