---
id: 3925
title: "Further Adventures in Fortinet Decryption"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/further-adventures-in-fortinet-decryption"
published_at: "2024-03-08T00:00:00Z"
tags: ["reverse-engineering", "encryption", "tooling", "fortinet", "firmware-analysis", "fortios"]
phying_url: "https://phying.com/item/3925"
lang: en
---

# Further Adventures in Fortinet Decryption

## Summary

Bishop Fox analyzed Fortinet's new FortiOS firmware encryption layer and released a tool that decrypts the root filesystem of x86-based images, detailing the ChaCha20-based scheme found in the kernel.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2024-03-08T00:00:00Z
- **Original:** https://bishopfox.com/blog/further-adventures-in-fortinet-decryption
- **Phying News:** https://phying.com/item/3925