ctfshow

crypto2_月自圆

已知m长为71
加密后长度为142
flag在m中第53位置则在密文中105的位置刚好是salt的位置
可以爆破salt和a
f ⇒ 1c
l ⇒ 29
a ⇒ 56
g ⇒ 66

from itertools import *
from random import *
from string import *

def encrypt(m, a, si):
	c=""
	for i in range(len(m)):
		c+=hex(((ord(m[i])) * a + ord(next(si))) % 128)[2:].zfill(2)
	return c

if __name__ == "__main__":
	for i in range(50,100):
		for j in ascii_uppercase:
			si = cycle(j.lower())
			if encrypt('f', i, si)=='1c':
			  	print('f',i,j)
			if encrypt('l', i, si)=='29':
				print('l',i,j)
			if encrypt('a', i, si)=='56':
				print('a',i,j)

得出
a=67
salt='JESQ'
就可以去解m了

from itertools import *
from random import *
from string import *

m = '****************************************************flag{*************}'
c = '3472184e657e50561c481f5c1c4e1938163e154431015e13062c1b073d4e3a444f4a5c5c7a071919167b034e1c29566647600c4e1c2956661b6c1f50622f0016317e563546202a'

a=67
salt='JESQ'
si=cycle(salt.lower())

def encrypt(m, a, si):
    c = ""
    for i in range(len(m)):
        c += hex(((ord(m[i])) * a + ord(si)) % 128)[2:].zfill(2)
    return c
res=''
for i in range(0,len(c),2):
    ssi=next(si)
    for j in range(32,127):
        if(encrypt(chr(j),a,ssi)==c[i:i+2]):
            res+=chr(j)
print(res)

得到flag