26 reputation
5
bio website plaintext.su
location Moscow, Russia
age 28
visits member for 6 months
seen Jun 13 at 12:18

cryptography addict


May
28
awarded  Teacher
Mar
12
awarded  Supporter
Mar
11
awarded  Scholar
Mar
11
accepted Entropy test for AES Key Schedule
Mar
11
comment Entropy test for AES Key Schedule
The way you worded the question is misleading, as the entropy test is performed AFTER they have extracted an AES key from memory. I don't think so. Take a look at the function "find_keys" in aeskeyfind. At first they run this simple entropy test. As for the other part of the answer - you are quite right. They use this test not to find but to reject possible false positives. Thank you!
Mar
9
awarded  Student
Mar
9
answered How secure is this use of Ziv-Lempel encoding?
Mar
9
asked Entropy test for AES Key Schedule
Mar
9
awarded  Autobiographer