Reference¶
Kryptoxin is supporting various encryption features and options, this section of the documentation lists and details the internal parameters of the tool.
Default Parameters¶
To keep the usage simple and streamlined, Kryptoxin implicitly uses parameters by default. Some of them have been selected due to their wide support across frameworks and operating systems. Therefore, most of the time you don't have to explicitly specify them to achieve a specific goal such as encrypting a payload.
Encryption and Decryption¶
- Encryption Algorithm:
Advanced Encryption StandardorAESCaesar Cipher
- Encryption key size:
256 bits - Block Cipher Mode of Operation:
Cipher Block ChainingorCBC - Key-Derivation Function:
PBKDF2- Hash-Based Message Authentication Code (HMAC):
SHA-1 - Iteration Count:
10000 - Derived Key Length:
32 bytes
- Hash-Based Message Authentication Code (HMAC):
- Initialization Vector (IV):
0x0(16 bytes) - IV Prepending:
Disabled(as of version 0.9.5) - Salt:
0x0(16 bytes) - Padding:
PKCS#7
Output¶
- File Encoding:
UTF-8(Linux/Unix) - Data Encoding:
base64
Supported Parameters¶
Command-line Options¶
By using the command-line options, you can control and fine tune the encryption and decryption operations.
Cryptographic Options¶
The options listed below allow you to control the various cryptographic parameters:
Recommended use of the Initialization Vector
By default, Kryptoxin uses a null or all-zero Initialization vector (IV). This is inherently insecure, but allow for a easy decryption operations when handling codes over various operating systems and frameworks. For maximum privacy and security, the use of a random IV (--random-iv option) is strongly recommended.
- Encryption Key (
-k,--key) - Key Size (
-s,--key_size)- Support between 256 and 4096 bits keys.
- Encryption Algorithms (
-a,--alg):- Advanced Encryption Standard:
AES - Caesar Cipher:
Caesar
- Advanced Encryption Standard:
- Block Cipher Mode of Operations (
-m,--mode):- Cipher Block Chaining:
CBC - Cipher Feedback:
CFB - Output FeedBack:
OFB - Encrypt-then-Authenticate-then-Translate:
EAX
- Cipher Block Chaining:
- Initialization Vector (
--iv):- Generate a random iv:
--random-iv
- Generate a random iv:
- Salt (
--salt):- Generate a random salt:
--random-salt
- Generate a random salt:
- Hash-based Message Authentication Code Algorithms (
-h,--hmac):SHA1SHA256SHA512
- PBKDF2 Iteration Count (
--iter) - Show generated AES key (
--show-key)
Templates Options¶
When using templates, you must specify the output programming language and the desired action.
- Output Programming Languages (
-l,--lang):- PowerShell:
powershell - C#:
csharp
- PowerShell:
- Actions (
-a,--action):- PowerShell Scripts:
custom: A base template for writing custom scripts.load-asm: Load a COFF-based image such as a .DLL to memory.--type: Name of the object's type to get from the library.
--method: Library object's method to invoke for execution.print: Return an UTF-8 encoded text to the console.
- C# Programs and Libraries:
custom: A base template for your custom program or library.print: A console program that print the encrypted text.load-library: This console program loads a decrypted DLL to disk and load it under an existingexplorer.exeprocess.--dllname: The file name of the DLL as written to the host's disk.--process: Existing process name to execute under.
- VBA Macro:
load-asm: Load assembly code in memory and start a new thread.
- PowerShell Scripts: