QSYRUPWD, Part 2: Correcting the Rijndael Key Builder
Summary
Part 2 delivers a corrected Rijndael key-builder for IBM i's QSYRUPWD, detailing a 32-byte sorted input and the inner receiver layout. The post revisits the insertion-sort key-generation, discusses outer marker handling, and explains how the corrected key reproduces embedded usernames and NT fields across a corpus. It also covers the SHA-1 unwrap, Rijndael-256-CBC usage, and synthetic test vectors, with implications for password security auditing and potential abuse scenarios.