Can anybody explain how the zignature work?

[yasong]

Hi, I try to figure out how the signature is made by the zignature. I found no paper about it, but only found how to use it. Is there any different from IDA F.l.i.r.t.? Thank you.

[radare]

Did you checked the book? Yes ida signtures are also supported but they are very basic compared to what we have in r2. Our signatures are easily comparable to diaphora

…

On 19 Sep 2019, at 04:27, gh0st ***@***.***> wrote: Hi, I try to figure out how the signature is made by the zignature. I found no paper about it, but only found how to use it. Is there any different from IDA F.l.i.r.t.? Thank you. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

[yasong]

Thank you. I have read the radare2book. I will try diaphora.

But I don't know the principle behind the zignature. Is there some material about it?
Maybe I have to read the source code about zignature. Thank you again.

[XVilka]

I moved the issue to the book - would be awesome if you can send a pull request to the book with a few sentences describing the algorithm, if you read the code. We will appreciate this contribution!

[Maijin]

@yasong a zignature in the one you show will match on all the function that has 31ed4989d15e4889e24883e4f05... and the . means any bytes.