Package rekall :: Package plugins :: Package windows :: Module lsadecryptxp
[frames] | no frames]

Module lsadecryptxp

source code

Windows NT 5.1 and 5.2 LsaEncryptMemory decryption algorithm.

Classes
  XP_DES
NT 5.1 and NT 5.2 lsasrv.dll DES decryption 32 bits implementation.
  XP_DESX
NT 5.1 and NT 5.2 lsasrv.dll DESX implementation.
  XP_CBC_DESX
NT 5.1 and NT 5.2 lsasrv.dll CBC with DESX partial implementation.
  XP_LsaDecryptMemory
Variables
  __package__ = 'rekall.plugins.windows'