CryptoHack_rsa_SIGNATURES PART 1

最新推荐文章于 2024-07-12 15:51:39 发布

ligangsz1

最新推荐文章于 2024-07-12 15:51:39 发布

阅读量408

点赞数

文章标签： java 服务器开发语言

本文链接：https://blog.csdn.net/ligangsz/article/details/130611825

版权

Signing Server

比较简单，给了密文，去pow d就出来了。

p = remote('socket.cryptohack.org', 13374)
a=p.recvline().strip()
p.sendline('{"option": "get_secret"}')
a=p.recvline().strip()
bb=json.loads(a.decode())
print(bb['secret'])
p.sendline('{"option": "sign", "msg": "'+bb['secret']+'"}')
c=p.recvline().strip()
bb=json.loads(c.decode())
dd=bb['signature']
print(dd)
dd=int(dd[2:],16)
print(long_to_bytes(dd))

Let's Decrypt

vefiry中N E可控，操作空间大，SIGNATURE%(SIGNATURE-digest)==digest

r = pwn.remote('socket.cryptohack.org', 13391)

def json_recv():
    line = r.recvline()
    return json.loads(line.decode())

def json_send(hsh):
    request = json.dumps(hsh).encode()
    r.sendline(request)

r.recvline()
json_send({"option": "get_signature"})
line = json_recv()
print(line)
msg = "I am Mallory own CryptoHack.org"
rr = re.match(r'^I am Mallory.*own CryptoHack.org$', msg)
print(rr)
digest = emsa_pkcs1_v15.encode(msg.encode(), 256)
json_send({"option": "verify", "msg": msg, "N" : hex(int(line["signature"], 16) - bytes_to_long(digest)), "e" : hex(1)})
received = json_recv()
print(received)

Blinding Light

获取pow(2,d,n)和pow(2*m,d,n)可以算出pow(m,d,n),解决

ADMIN_TOKEN = b"admin=True"
m0=bytes_to_long(ADMIN_TOKEN)
print(m0)
N=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
e=0x10001

r = pwn.remote('socket.cryptohack.org', 13376)

def json_recv():
    line = r.recvline()
    return json.loads(line.decode())

def json_send(hsh):
    request = json.dumps(hsh).encode()
    print(request)
    r.sendline(request)

r.recvline()
json_send({"option": "get_pubkey"})
line = json_recv()
print(line)
json_send({"option": "sign","msg":"02"})
line = json_recv()
print(line)
c0=int(line["signature"][2:],16)
print(c0)
m0=m0*2
json_send({"option": "sign","msg":hex(m0)[2:]})
line = json_recv()
print(line)
c1=int(line["signature"][2:],16)
print(c1)
c=invert(c0,N)*c1%N
json_send({"option": "verify","msg":hex(bytes_to_long(ADMIN_TOKEN))[2:],"signature":hex(c)[2:]})
line = json_recv()
print(line)