Method and system for recovering cryptographic operations and/or secrets

摘要

A computerized system and method for identifying one or more cryptographic operations from software code, comprising: performing processing associated with identifying, one or more cryptographic operations in the software code, the software code being run on a processor; and performing processing associated with identifying a boundary for each cryptographic operation in the software code.

主权项

1. A computerized method for identifying at least one cryptographic operation from binary software code, comprising:
performing processing associated with discovering and identifying, at least one cryptographic operation from execution of the binary software code, the binary software code being run on a processor; performing processing associated with discovering and identifying at least one buffer and at least one corresponding boundary for each identified cryptographic operation in the binary software code, the at least one buffer comprising: at least one initialization vector (IV) buffer, at least one input buffer, at least one output buffer, or at least one key buffer, or any combination thereof; performing processing associated with discovering and identifying at least one cryptographic secret, the at least one cryptographic secret being transient in memory, and/or comprising: at least one initialization vector (IV), cryptographic input, cryptographic output, or at least one cryptographic key; or any combination thereof; and performing processing associated with determining a start time and an end time for when a cryptographic secret of the identified cryptographic operation is in the at least one identified buffer.