mirror of
https://github.com/qtmleap/revkit.git
synced 2026-09-28 14:01:50 +02:00
Analyzes appboot_tfit_capture.log to identify: - TFIT chain structure: CTR entropy + KAT anchors + key-feeding PRNG - DH private key generation from AES_encrypt output stream (#87-#94) - 48B HMAC-SHA384 key origin (not captured in AES hooks) - Session key derivation: HMAC-SHA384(tfit_48B, 0x00||dh_shared) -> AES+MAC keys Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>