Year: 2024
Type: conference-paper
Abstract: We identified several weaknesses in the state-of-the-art cryptographic key extraction algorithm, K-Hunt.It cannot handle code in which key loading and use are spread apart, has problems with modes such as AES CBC that use small data buffers of constant size, and with complex apps in which functionality handles both the key and data.K-Hunt++ overcomes those weaknesses.We demonstrate it on two apps that trigger them and present an ablation study and qualitative analysis of its robustness in the face of obfuscation. CCS Concepts• Security and privacy
Institution: Ghent University
Language: English
Subfield: Artificial Intelligence
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
OpenAlex ID: W4404515067