-
Notifications
You must be signed in to change notification settings - Fork 8
/
ChangeLog
71 lines (49 loc) · 2.65 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
version 1.3 - 2017-02-19
------------------------
* Newly recognized file-types: LUKS encrypted file, Chiasmus encrypted data,
Chiasmus key, mcrypt encrypted data, GNOME keyring, Mac OS X Keychain File,
Vim encrypted file data.
* Get rid of the options '-r' and '-x'. Passing a directory on a command line
is no longer valid. Recursive scanning is a difficult problem to tackle that
requires additional options on par of the program. Simply the task is beyond
the scope of TCHunt-ng. Use find(1) to pass found files to TCHunt-ng.
* Accept file names via stdin. This behavior is enabled by passing '-' as the
first non-option argument (i.e. ./command [options] -).
* Change the way exit codes are used. If an error occurs for any given file,
exit immediately with status 1. If any input file specified on a command line
is not detected as random/encrypted, exit with status 2 after processing the
rest of the files. Exit status 1 always takes precedence over status 2.
* When option '-s' is in effect, attempt to further classify the file (i.e.
[data, pgp/gpg]).
version 1.2 - 2017-01-14
------------------------
* Accept multiple files specified on a command line.
* New option '-T' to toggle the TCHunt compatibility mode. In this mode a
file's size is checked to be greater than 19 kiB and of modulo 512.
* New option '-s' to show a class to which a matching file belongs to. This
can be one of the following: 'data', 'key', 'password'.
* New option '-q' that treats no results as success. The program terminates
with exit status equal to 0 instead of 2.
* New option '-p' to preserve last access time of a file analyzed.
* New option '-x' to stay on the same device as the file from which a descent
began. This option only makes sense when recursively scanning a directory
(option '-r').
* Do not install the executable into '/usr/local/sbin', use '/usr/local/bin'
instead.
version 1.1 - 2016-12-18
------------------------
* Newly recognized file-types: OpenSSH keys (public/private), PEM private keys
(RSA/DSA/EC), Keepass password database, Password Safe V3 database, cvs
password text file.
* Ignore symbolic links when strolling through a directory.
* Do not treat ENODATA, ENOENT, EIO as an error, ignore the file instead.
These errors can be encountered when strolling through directories with
special files (i.e. /proc, /sys).
* Recognize content of different sizes. The solution is based on model data
computed from a pool of random data for individual lengths of power of 2 (2^5,
2^6,...).
* Exit gracefully when a signal is delivered to a running instance of the
program and return proper exit code.
version 1.0 - 2016-11-27
------------------------
* Initial version release.