Abstract In this paper we propose a set of algorithms that can automatically detect the use AES and recover both encryption key plaintext, assuming control code flow encrypting program, e.g., when an application is performing without user’s permission. The first algorithm makes fact monitor accesses to S-Box deduce desired data from these accesses; approach suitable software-based implementatio...