KANAL

This plugin searches for known crypto algorithms inside of the specified module. Notes: 1. The detection is limited to crypto that`s possible to identify by a specific signature (such as fixed s-boxes, permutation tables, initialization values, etc). Simple mathematical algorithms, such as RSA, cannot be detected. 2. A few of the algorithms are detected by a single DWORD - so, they are susceptible to false alarms. 3. Some crypto Algorithm share a common initialization code - so if multiple crypto algorithms are present in the file, they may be "mixed up" a Little. The plugin tries to filter the results somehow (to Guess which algorithm it is from the "shared" code), but it may not be 100% of course.