search

polymorf / findcrypt-yara

IDA pro plugin to find crypto constants (and more)
BSD 3-Clause "New" or "Revised" License
1.36k stars 243 forks source link

add rule for salsa20/chacha20 #30

Closed eb-h closed 4 years ago

eb-h commented 4 years ago

salsa20, chacha20 use "expand 32-byte k" in their initial state. https://en.wikipedia.org/wiki/Salsa20