Mark0's Forum

Software => TrID File Identifier => Topic started by: jenderek on February 13, 2020, 04:05:28 AM

Title: rsct.trid.xml for REINER SCT transfer file *.rsct
Post by: jenderek on February 13, 2020, 04:05:28 AM
Hello trid users,
some months ago i get my new person card. A new feature is the
embedded chip with my personal data. I bought a chip card reader of
company "REINER SCT" to use my card for authentication purposes.

After installing their software cyberJack Base Components on my windows
system i found some new file types with name extension rsct.
When running trid on such samples these are described as "Unknown!" (See
appended output/trid-old.txt).

So i run tridscan to generate definition file rsct.trid.xml.

By the software in Windows registry for rsct file a file type is written. So
take that text also for trid definition. This is expressed by line:
   <FileType>REINER SCT transfer file</FileType>

Unfortunately the REINER company also do not talk about security issues in
their products and seems to also believe in the motto "security by
obscurity". But strength of security is proven by saying transparently what
is it about, what encryption method is used and challenge hackers or
security experts to test or break encryption. That still in year 2020 there
exist serious security issues is visible by samba leaks found in telekom
routers at some doctor's surgeries.
So no information about that file format is found on their web server.
But luckily i found a web site with some base information. This is expressed
by line:

Starting with that information it becomes clear, what are RSCT files. Such
files just contains encrypted device updates for cyberJack chip card
readers. So mention this fact in remark line.

With the new trid definition all inspected RSCT samples are now
described ( see appended output I hope that
my XML file can be used in future version of triddefs.

With best wishes
Jörg Jenderek
Title: Re: rsct.trid.xml for REINER SCT transfer file *.rsct
Post by: Mark0 on February 13, 2020, 12:42:22 PM