-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathITS_HA2_2_mp.py
125 lines (83 loc) · 3.85 KB
/
ITS_HA2_2_mp.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
#28 b4 3e 63 17 c3 a1 5d f5 09 68 26 50 4f dc a9 f2 1c a9 c3 e5 5e 89 1c ae 72 aa 1e 75 a9 07 46 2f dc 24 d0 be 21 b4 71 a1 2f 29 c8 13 a5 7f 41 cc 94 6b e4 1b 66 ad 10 4b 16 0f 23 06 46 dd db
#4 blocks
#1: 28 b4 3e 63 17 c3 a1 5d f5 09 68 26 50 4f dc a9
#2: f2 1c a9 c3 e5 5e 89 1c ae 72 aa 1e 75 a9 07 46
#3: 2f dc 24 d0 be 21 b4 71 a1 2f 29 c8 13 a5 7f 41
#4: cc 94 6b e4 1b 66 ad 10 4b 16 0f 23 06 46 dd db
#hallo = 68 61 6C 6C 6F 0B 0B 0B 0B 0B 0B 0B 0B 0B 0B 0B
import base64
from paramiko import SSHClient
import paramiko as paramiko
import os
import multiprocessing as mp
class HA2_2:
# def connect_to_server(adr,user,pw):
# server = SSHClient()
# server.set_missing_host_key_policy(paramiko.AutoAddPolicy())
# server.connect(adr,username=user,password=pw)
# return server
def byte_xor(ba1, ba2):
return bytes([_a ^ _b for _a, _b in zip(ba1, ba2)])
def decrypt_block(block_l,block_r,server):
for byte_no in range(16):
c1fake = bytearray(os.urandom(16))
for j in range(byte_no): #calc c1fake for valid padding
c1fake[-(j+1)] = i2[-(j+1)] ^ byte_no+1 #c'1[16] ^ i2 = 02
for test_hex in range(256): #find byte for correct padding
c2 = block_r
testbyte = test_hex
c1fake[-(byte_no+1)] = testbyte
#print(c1fake)
c1fake_c2 = bytes(c1fake) + bytes(c2) #merge
#print(c1fake_c2)
#encode
c1fake_c2_b64 = base64.b64encode(c1fake_c2)
#print(c1fake_c2_b64)
c1fake_c2_b64_str = c1fake_c2_b64.decode('utf-8')
c1fake_c2_b64_str_urlsafe = c1fake_c2_b64_str.replace('=', '%3D')
c1fake_c2_b64_str_urlsafe = c1fake_c2_b64_str_urlsafe.replace('+', '%2B')
c1fake_c2_b64_str_urlsafe = c1fake_c2_b64_str_urlsafe.replace('/', '%2F')
#print(c1fake_c2_b64_str_urlsafe)
#send to server
command = 'curl http://gruenau5.informatik.hu-berlin.de:8888/store_secret/'+c1fake_c2_b64_str_urlsafe
stdin, stdout, stderr = server.exec_command(command)
answer = stdout.readlines() #get answer
#print(answer[0])
if answer[0] == 'Secret succesfully received':
print(testbyte)
print(hex(test_hex))
print(test_hex)
#server.close()
break
c1 = block_l
i2[-(byte_no+1)] = testbyte ^ byte_no+1
p2[-(byte_no+1)] = c1[-(byte_no+1)] ^ i2[-(byte_no+1)]
print(bytes(p2))
return(bytes(p2).decode("utf-8"))
def multip(self):
jobs = []
for i in range(3):
block = mp.Process(target=self.decrypt_block, args = (blocks[-(i+2)], blocks[-(i+1)], server))
jobs.append(block)
block.start()
for proc in jobs:
proc.join()
if __name__ == "__main__":
cipher = "KLQ+YxfDoV31CWgmUE/cqfIcqcPlXokcrnKqHnWpB0Yv3CTQviG0caEvKcgTpX9BzJRr5BtmrRBLFg8jBkbd2w=="
cipher_hex = base64.b64decode(cipher)
testbyte = 0
size = 16
p2 = bytearray(size)
i2 = bytearray(size)
block1 = bytearray(cipher_hex[:16])
block2 = bytearray(cipher_hex[16:32])
block3 = bytearray(cipher_hex[32:48])
block4 = bytearray(cipher_hex[48:])
blocks = [block1,block2,block3,block4]
server = SSHClient()
server.set_missing_host_key_policy(paramiko.AutoAddPolicy())
server.connect('gruenau5.informatik.hu-berlin.de',username='radtklau',password='')
# server = connect_to_server()
message = ""
f = HA2_2()
f.multip()