[File] AES Crypt magic entry

[Paul E. Jones]

Folks,

I noted on Linux, there is an entry for AES Crypt files. That's awesome, 
but it doesn't seem to work.  For a while, I had been using my own 
definition I'd place in /etc/magic, oblivious to the entry in 
/usr/share/misc/magic.  It seems the one installed makes some 
assumptions about optional file fields (e.g., CREATED_BY), though that 
can be a little dangerous since they are optional and order doesn't 
matter. That said, the magic data I have used is the one shown below. 
This should be stable (and has been) for a while.

Paul

# AES Crypt File
0x00   string AES
 >0x04  byte   <0x10
 >>0x03 byte   0x00   AES Crypt file (stream format 0)
 >0x04  byte   0x00
 >>0x03 byte   x      AES Crypt file (stream format %u)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.astron.com/pipermail/file/attachments/20260213/dd7e503e/attachment.htm>