mirror of
https://github.com/mandiant/capa-rules.git
synced 2026-10-12 02:18:39 +00:00
20 lines
655 B
YAML
20 lines
655 B
YAML
rule:
|
|
meta:
|
|
name: encrypt data using OpenSSL DSA
|
|
namespace: data-manipulation/encryption/dsa
|
|
authors:
|
|
- "Ana06"
|
|
scopes:
|
|
static: function
|
|
dynamic: unsupported # requires bytes features
|
|
references:
|
|
- https://github.com/openssl/openssl/blob/fdc5043d58900663b493147298e64f11353b35fe/crypto/objects/obj_dat.h
|
|
features:
|
|
- or:
|
|
- bytes: 2B 0E 03 02 0D = DSA-SHA
|
|
- bytes: 2B 0E 03 02 0C = DSA-old
|
|
- bytes: 2B 0E 03 02 1B = DSA-SHA1-old
|
|
- bytes: 2A 86 48 CE 38 04 03 = DSA-SHA1
|
|
- bytes: 60 86 48 01 65 03 04 03 01 = DSA-SHA224
|
|
- bytes: 60 86 48 01 65 03 04 03 02 = DSA-SHA256
|