News for hackers. Stuff that matters.

A comment on Hack-petya mission accomplished – Petya ransomware decryptor. Parent comment

Re:Hack-petya mission accomplished – Petya ransomware decryptor by CiPHPerCoder on Monday April 11, 2016 @04:47PM (#11474947)
https://github.com/leo-stone/hack-petya/blob/master/main.go#...

Looks like it used a [1-9a-xA-X]{8} key. Even with a CSPRNG that's only 46 bits of entropy. You can brute force that in 2-3 hours with adequate hardware.

[ Parent | on HN ]
Re:Hack-petya mission accomplished – Petya ransomware decryptor by matt_wulfeck on Monday April 11, 2016 @05:40PM (#11475353)
Don't these things generate a unique key for each file?
[ Parent | on HN ]
Re:Hack-petya mission accomplished – Petya ransomware decryptor by vetrom on Monday April 11, 2016 @07:18PM (#11475926)
User-space malware, sure. Petya does a full-disk encryption.
[ Parent | on HN ]
Re:Hack-petya mission accomplished – Petya ransomware decryptor by AnimalMuppet on Monday April 11, 2016 @06:51PM (#11475778)
Even if they do, the per-file keys must be algorithmically-derived from the master key. (Otherwise, how can it unencrypt the files after you pay the ransom?)
[ Parent | on HN ]