informationuf.blogg.se

A random salt of 32 bytes is generated ( RouterOS only populates the first 16 bytes, mistake?) (Fixed).

salt+password result is hashed using SHA1.RC4 cipher is used to encrypt or decrypt 0x300 (256 * 3 = 768) bytes (of arbitrary value).The first 4 bytes are decrypted and compared to 0xB1A1AC88 to check if password is correct before performing a decryption.salt+password result is hashed using SHA256.AES128-CTR cipher is keyed with the first half of the SHA256 hash.CTR mode's nonce is initialized with the first half of the salt.HMAC-SHA256 is keyed with the second half of the SHA256 hash.AES cipher is used to encrypt or decrypt 16 bytes (of arbitrary value).The HMAC result is verified against what's stored in the file when performing a decryption.In the body are saved all file pair with extension.