Algorithms
MemDiver ships 8 detection algorithms, discovered automatically by algorithms.registry. One requires ground-truth secrets (known_key); seven do not (unknown_key).
Algorithm |
Mode |
Purpose |
|---|---|---|
|
Literal byte-search for known-secret sequences using |
|
|
Sliding-window Shannon entropy above a threshold. |
|
|
CUSUM-based entropy-plateau detection. |
|
|
DPA-inspired cross-run byte variance. |
|
|
TLS KDF relationship verification for candidates. |
|
|
Custom regex patterns. |
|
|
Structural matching from JSON pattern definitions. |
|
|
Structure-library-backed overlay + best-match scoring. |
Contracts
All algorithms share the same interface from algorithms.base:
class BaseAlgorithm:
name: str
description: str
mode: str
def run(self, dump_data: bytes, context: AnalysisContext) -> AlgorithmResult: ...
See algorithms/ for the registry internals and Adding an algorithm for adding a new one.