Forensicsaeskeyschedulebiterrorscorrectionforensics

aesfix

aesfix corrects bit errors in AES-128 key schedules from hex-encoded files. It is designed for use with aeskeyfind output and handles unidirectional 1->0 bit errors.

Description

aesfix is a tool for correcting bit errors in an AES key schedule. This program illustrates a technique for correcting bit errors and should be used with the output of the aeskeyfind program. It is limited to AES-128 key schedules and can only correct unidirectional 1->0 bit errors. For the most part it has been optimized for readability rather than performance.

This package is useful to several activities, as forensics investigations. It corrects bit errors in an AES key schedule read from the specified hex-encoded file. The tool was written by Nadia Heninger and J. Alex Halderman, with the manual page by Jacob Appelbaum for the Debian system.

How It Works

aesfix reads a hex-encoded file containing an AES-128 key schedule with bit errors and applies a correction technique for unidirectional 1->0 bit errors. It processes the schedule to recover the correct key by exploiting properties of AES key expansion, typically following aeskeyfind output.

Installation

bash
sudo apt install aesfix

Examples

Corrects bit errors in the specified hex-encoded AES key schedule file
aesfix SCHEDULE-FILE
Processes key_schedule.hex to fix 1->0 bit errors in AES-128 schedule
aesfix key_schedule.hex
Uses output from aeskeyfind as input to correct key schedule errors
aesfix aeskeyfind_output.hex
Corrects unidirectional bit errors in the provided AES key schedule dump
aesfix dump.hex
Applies error correction to hex file from forensics investigation
aesfix forensics_aes.hex
Fixes bit flips in AES-128 key schedule for further analysis
aesfix recovered_schedule.hex
Updated 2026-04-16kali.org ↗