Skip to content

R
rules
Unverified Commit d2337bd7 by jovimon Committed by GitHub
Options

Update crypto_signatures.yar

parent 04c8a8e1
Showing with 2 additions and 0 deletions
Crypto/crypto_signatures.yar
...@@ -1437,6 +1437,7 @@ rule Chacha_128_constant { ...@@ -1437,6 +1437,7 @@ rule Chacha_128_constant {
author = "spelissier" author = "spelissier"
description = "Look for 128-bit key Chacha stream cipher constant" description = "Look for 128-bit key Chacha stream cipher constant"
date = "2019-12" date = "2019-12"
reference = "https://www.ecrypt.eu.org/stream/salsa20pf.html"
strings: strings:
$c0 = "expand 16-byte k" $c0 = "expand 16-byte k"
condition: condition:
...@@ -1448,6 +1449,7 @@ rule Chacha_256_constant { ...@@ -1448,6 +1449,7 @@ rule Chacha_256_constant {
author = "spelissier" author = "spelissier"
description = "Look for 256-bit key Chacha stream cipher constant" description = "Look for 256-bit key Chacha stream cipher constant"
date = "2019-12" date = "2019-12"
reference = "https://tools.ietf.org/html/rfc8439#page-8"
strings: strings:
$c0 = "expand 32-byte k" $c0 = "expand 32-byte k"
condition: condition:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment