[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Any isencrypted function available?



On Fri, Jun 13, 2008 at 09:11:56PM -0400, Hal Vaughan wrote:
> On Friday 13 June 2008, buyoppy wrote:
> >  Is there any 'isencrypted 'function available on Debian
> > which judges whether some data is encrypted or not?
> >  Thanks in advance.
> 
> Considering one byte looks just as much like any other (with only 256 
> variations), how would anything in an OS or language know something is 
> encrypted? 
> 
> Maybe if the encrypted bit is set in a packet in a data stream, it might 
> be possible to tell.  Isn't the encrypted bit the one right after the 
> evil bit?

Perhaps it can do a statistical analysis of the datastream.  If its
random, then its either compressed or encrypted (or both).  Since file
can identify compressed data (by the header?) perhaps this would work.

You could strongly suspect that something is encrypted if it isn't
compressed yet it is incompressable.

Doug.


Reply to: