Software algorithm identification

• US 20080091938A1
• Filed: 10/12/2006
• Published: 04/17/2008
• Est. Priority Date: 10/12/2006
• Status: Active Grant

• Current Assignee: Software Integrity Group Incorporated
• Original Assignee: Black Duck Software, Inc. (Synopsys Incorporated)
• Inventors: Smith, John J., Golombek, David, Pedersen, Palle M., Levin, Douglas A.
• Granted Patent: US 7,681,045 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

A system and method for determining export requirements for a content file may include examining a content file to identify content used by or included in the content file that is subject to export control, determining, in response to the identified content, export requirements that are applicable to the content file, and providing an indication of the determined export requirements.

Claims

1-24. -24. (canceled)

25. A method for examining a software program to identify an algorithm used in the software program, comprising:

identifying a first portion of the software program that is similar to a portion of a comparison software program;

determining that the first portion is associated with an algorithm;

providing an indication that the software program uses the identified algorithm.

26. The method of claim 25, wherein determining that the first portion is associated with an algorithm comprises identifying characteristics of the algorithm.

27. The method of claim 25, wherein the algorithm is an encryption algorithm.

28. The method of claim 27, wherein determining that the first portion is associated with an algorithm further comprises determining the key length used by the encryption algorithm.

29. The method of claim 27, further comprising:

identifying a second portion of the software program that is similar to a portion of the comparison software program;

and wherein the determining step comprises determining whether the first portion and the second portion are associated with the same algorithm.

30. The method of claim 29, wherein the first portion comprises a an interface and second portion comprises computer code.

31. The method of claim 29, wherein the first portion comprises constants associated with the algorithm and second portion comprises computer code.

32. The method of claim 29, wherein the first portion comprises constants associated with the algorithm and second portion comprises computer code.

33. The method of claim 29, wherein the first portion comprises a subroutine call, and second portion comprises computer code.

34. The method of claim 29, wherein the first portion and the second portion are each a portion selected from the following:

an interface;

computer code;

character strings;

static data;

subroutine call;

35. The method of claim 29 wherein the indication comprises information for use in completing a document.

36. The method of claim 29, wherein the step of identifying a first portion of the software program that is similar to a portion of a comparison software program comprises identifying an interface, computer code, character strings, static data, a subroutine call, or some combination.

37. A system for examining a software program to identify an algorithm used in the software program, comprising:

a first subsystem for identifying a first portion of the software program that is similar to a portion of a comparison software program;

a second subsystem for facilitating determination that the first portion is associated with an algorithm;

a third subsystem for providing an indication that the software program uses the identified algorithm.

38. The system of claim 37, wherein the algorithm is an encryption algorithm.

39. A computer program product comprising a computer readable medium, the computer readable medium comprising instructions for a computer to examine a software program to identify an algorithm used in the software program, the instructions comprising:

first instructions for identifying a first portion of the software program that is similar to a portion of a comparison software program;

second instructions for determining that the first portion is associated with an algorithm;

third instructions for providing an indication that the software program uses the identified algorithm.