Question

I have some char() fields in a DBF table that were left encrypted by a past developer in the project.

However, I know the plaintext result of the decryption of several records. How can I determine the function/algorithm/scheme to decrypt the original data? These are some sample fields:

For cryptext:

b5 01 02 c1 e3 0d 0a 

plaintext should be:

3543921 or 3.543.921 

And for cryptext:

41 c3 c5 07 17 0d 0a 

plaintext should be

1851154 or 1.851.154 

I believe 0d 0a is just padding. Was from data gathered in win-1252 encoding (dunno if matters)

EDIT: It’s for the sake of curiosity and learning. I want to be able to undestand the encryption used(seems a simple one, although is binary data) to recover the value of the fields for the tuples whose plaintext I don’t know.

EDIT 2: Added a couple samples.

Answer 1

There is no easy way in general case. This question is too general. Try posting these plain + encrypted strings.

EDIT:

• for the sake of learning you can read this article : Cryptography on Wikipedia

• if you really beleive the encryption is simple – check if it’s a byte (or word) level XOR – see the following pseudocode

  for (i in originalString) { newString[i] = originalString[i] ^ CRYPT_BYTE; }