Automatic Detection and Decryption of AES Using Dynamic Analysis

Abstract In this paper we propose a set of algorithms that can automatically detect the use AES and recover both encryption key plaintext, assuming control code flow encrypting program, e.g., when an application is performing without user’s permission. The first algorithm makes fact monitor accesses to S-Box deduce desired data from these accesses; approach suitable software-based implementations, naïve optimized. To demonstrate feasibility designed tool which implements for Microsoft Windows running on Intel x86 architecture. has been successfully tested against applications using different cryptographic libraries common user applications. We also discuss options recovering same hardware-assisted implementations Intel-compatible architectures are used.