1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
| from Crypto.Cipher import AES
from binascii import *
from libnum import s2n
from random import *
ciphertext=b'c82dc20b7512d03f1a0982eb8a6e855db20f6fe3ff8d202a6fb74c6522fa6e623c6abe6725cafe78f9624ad59f3e90af6f985f38f75ec4d62ff7e02bd7c2f051'
ciphertext=a2b_hex(ciphertext)
old_key = b'73E5602B54FE63A5'
old_iv = b'B435AE462FBAA662'
def add_to_16(text):
if len(text.encode('utf-8')) % 16:
add = 16 - (len(text.encode('utf-8')) % 16)
else:
add = 0
text = text + ('\0' * add)
return text.encode('utf-8')
def init():
r1 = getrandbits(64)
r2 = getrandbits(32)
m = "{:X}".format(r1).encode('utf-8')
salt = "{:X}".format(r2).encode('utf-8')
m += salt
return add_to_16(m.decode())
def encrypt(m, key, iv):
mode = AES.MODE_CBC
cryptos = AES.new(key, mode, iv)
cipher_text = cryptos.encrypt(m)
return cipher_text
def chall(key, iv):
old_m = init()
c = encrypt(old_m, key, iv)
return b2a_hex(c)
def decrypt(c, key, iv):
mode = AES.MODE_CBC
cryptos = AES.new(key, mode, iv)
plaintext= cryptos.decrypt(c)
return plaintext
f = open('msg.txt', 'r')
m=[]
prng=[]
c = a2b_hex(f.readline().strip('\n').encode())
while (c):
m.append(decrypt(c, old_key, old_iv).strip(b'\00'))
c = a2b_hex(f.readline().strip('\n').encode())
if(len(m[396//3])<24):
m[396//3]=m[396//3].decode().zfill(24).encode()
for i in m:
x = i.strip(b'\x00')
if len(x) == 24:
prng.append(int(i[8:16], 16))
prng.append(int(i[:8], 16))
prng.append(int(i[16:], 16))
else:
for _ in range(3):
prng.append(0)
print(prng)
'''
sage
#state的比特数
d=32
n=624
o=397
mask=0x9908b0df
b=2636928640
c=4022730752
#n个随机数比特向量构成的列表
x=[]
#获得d*d的单位矩阵
def get_I(d):
I=[]
for i in range(d):
temp=[0 for _ in range(d)]
temp[i]=1
I.append(temp)
return matrix(GF(2),I)
#获得>>l的变换矩阵
def get_right(l):
temp=[]
for i in range(l):
temp.append([0 for _ in range(d)])
for i in range(d-l):
k=[0 for _ in range(d)]
k[i]=1
temp.append(k)
return matrix(GF(2),temp).transpose()
#获得<<l的变换矩阵
def get_left(l):
temp=[]
for i in range(l):
temp.append([0 for _ in range(d)])
for i in range(d-l):
k=[0 for _ in range(d)]
k[i]=1
temp.append(k)
return matrix(GF(2),temp)
#获得&的变换矩阵
def get_and(a):
a=bin(a)[2:].zfill(d)
m=[]
for i in range(d):
k=[0 for _ in range(d)]
k[i]=int(a[i])
m.append(k)
return matrix(GF(2),m)
#将十进制数列表转化为二进制数矩阵列表
def bin_state(state):
new_state=[]
for i in state:
tmp=bin(i)[2:].zfill(32)
new_state.append([int(tmp[_]) for _ in range(len(tmp))])
return new_state
#将二进制数矩阵列表转化为十进制数列表
def dec_state(state):
new_state=[]
for i in state:
tmp='0b'
for j in i:
tmp+=str(j)
new_state.append((int(tmp,2)))
return new_state
def last(tmp,i):
a=1812433253
n=2**32
tmp-=i
a=inverse_mod(a,n)
tmp=(tmp*a)%n
return (tmp>>30)^^tmp
#生成变换矩阵
U=get_right(11)
S=get_left(7)
T=get_left(15)
L=get_right(18)
B=get_and(b)
C=get_and(c)
I=get_I(d)
F=(I+U)*(I+S*B)*(I+T*C)*(I+L)
rand=[]
rand=bin_state(rand)
for i in range(len(rand)):
X=matrix(GF(2),rand[i])
O=F.solve_left(X)
rand[i]=O[0]
state=dec_state(rand)
print(state)
'''
cur_state=[]
setstate((3, tuple(cur_state + [624]), None))
salt = "{:X}".format(getrandbits(32)).encode('utf-8')
key = "{:X}".format(getrandbits(64)).encode('utf-8')
iv = "{:X}".format(getrandbits(64)).encode('utf-8')
plaintext=decrypt(ciphertext, key, iv).strip(b'\x00').decode()
for i in plaintext:
if i not in salt.decode():
print(i,end='')
|