Why do all Triplesec ciphertexts start with "1c94d7de0000000"?

[firepacket]

You know some of us in the security field value not having blatantly identifiable markings in our ciphertext.

Now I understand there may be reasons for some type of header that denotes... something.

But if this text is LITERALLY ALAWAYS THE SAME why is there at all?

[AndersTornkvist]

The first four bytes (8 characters in the hex representation) is a magic marker. The next four bytes is the version number (8 characters in the hex representation). So for version 4, it will start with
1c 94 d7 de (magic)
00 00 00 04 (version 4)

You can find it in the source:

triplesec/src/enc.iced

Line 68 in a9d2897

header : [ 0x1c94d7de, 4 ] # The magic #, and also the version #

And read more about the format at Keybase TripleSec website: https://keybase.io/triplesec

[firepacket]

Read my updated complaint issue #86

I didn't even realize I had already posted this last year.