On Fri, Jun 13, 2008 at 09:11:56PM -0400, Hal Vaughan wrote: > > On Friday 13 June 2008, buyoppy wrote: >> > > Is there any 'isencrypted 'function available on Debian >> > > which judges whether some data is encrypted or not? >> > > Thanks in advance. > > > > Considering one byte looks just as much like any other (with only 256 > > variations), how would anything in an OS or language know something is > > encrypted? > > > > Maybe if the encrypted bit is set in a packet in a data stream, it might > > be possible to tell. Isn't the encrypted bit the one right after the > > evil bit?
Perhaps it can do a statistical analysis of the datastream. If its random, then its either compressed or encrypted (or both). Since file can identify compressed data (by the header?) perhaps this would work. You could strongly suspect that something is encrypted if it isn't compressed yet it is incompressable. I saw a webpage of Solaris's 'isencrypted' function which inspects some data in a buffer is encrypted or not using some algorithm including statistical analysis. But now I cannot find that page on the Internet... Thanks. -------------------------------------- GANBARE! NIPPON! Chance to win 50,000 Yahoo! Points! http://pr.mail.yahoo.co.jp/ganbare-nippon/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
