use Crypt::RC4;
use Crypt::ScryptKDF qw (scrypt_hash scrypt_b64);
use Crypt::Rijndael;
+use Crypt::Twofish;
use Crypt::Mode::ECB;
use Crypt::UnixCrypt_XS qw (crypt_rounds fold_password base64_to_int24 block_to_base64 int24_to_base64);
use MIME::Base64;
my $MAX_LEN = 55;
-my @modes = (0, 10, 11, 12, 20, 21, 22, 23, 30, 40, 50, 60, 100, 101, 110, 111, 112, 120, 121, 122, 130, 131, 132, 140, 141, 150, 160, 190, 200, 300, 400, 500, 900, 1000, 1100, 1400, 1410, 1420, 1430, 1440, 1441, 1450, 1460, 1500, 1600, 1700, 1710, 1711, 1720, 1730, 1740, 1722, 1731, 1750, 1760, 1800, 2100, 2400, 2410, 2500, 2600, 2611, 2612, 2711, 2811, 3000, 3100, 3200, 3710, 3711, 3300, 3500, 3610, 3720, 3800, 3910, 4010, 4110, 4210, 4300, 4400, 4500, 4600, 4700, 4800, 4900, 5000, 5100, 5300, 5400, 5500, 5600, 5700, 5800, 6000, 6100, 6300, 6400, 6500, 6600, 6700, 6800, 6900, 7100, 7200, 7300, 7400, 7500, 7600, 7700, 7800, 7900, 8000, 8100, 8200, 8300, 8400, 8500, 8600, 8700, 8900, 9100, 9200, 9300, 9400, 9500, 9600, 9700, 9800, 9900, 10000, 10100, 10200, 10300, 10400, 10500, 10600, 10700, 10800, 10900, 11000, 11100, 11200, 11300, 11400, 11500, 11600, 11900, 12000, 12100, 12200, 12300, 12400, 12600, 12700, 12800, 12900);
+my @modes = (0, 10, 11, 12, 20, 21, 22, 23, 30, 40, 50, 60, 100, 101, 110, 111, 112, 120, 121, 122, 130, 131, 132, 140, 141, 150, 160, 190, 200, 300, 400, 500, 900, 1000, 1100, 1400, 1410, 1420, 1430, 1440, 1441, 1450, 1460, 1500, 1600, 1700, 1710, 1711, 1720, 1730, 1740, 1722, 1731, 1750, 1760, 1800, 2100, 2400, 2410, 2500, 2600, 2611, 2612, 2711, 2811, 3000, 3100, 3200, 3710, 3711, 3300, 3500, 3610, 3720, 3800, 3910, 4010, 4110, 4210, 4300, 4400, 4500, 4600, 4700, 4800, 4900, 5000, 5100, 5300, 5400, 5500, 5600, 5700, 5800, 6000, 6100, 6300, 6400, 6500, 6600, 6700, 6800, 6900, 7100, 7200, 7300, 7400, 7500, 7600, 7700, 7800, 7900, 8000, 8100, 8200, 8300, 8400, 8500, 8600, 8700, 8900, 9100, 9200, 9300, 9400, 9500, 9600, 9700, 9800, 9900, 10000, 10100, 10200, 10300, 10400, 10500, 10600, 10700, 10800, 10900, 11000, 11100, 11200, 11300, 11400, 11500, 11600, 11900, 12000, 12100, 12200, 12300, 12400, 12600, 12700, 12800, 12900, 13000, 13100, 13200, 13300, 13400);
-my %is_unicode = map { $_ => 1 } qw(30 40 130 131 132 140 141 1000 1100 1430 1440 1441 1730 1740 1731 5500 5600 8000 9400 9500 9600 9700 9800);
+my %is_unicode = map { $_ => 1 } qw(30 40 130 131 132 133 140 141 1000 1100 1430 1440 1441 1730 1740 1731 5500 5600 8000 9400 9500 9600 9700 9800);
my %less_fifteen = map { $_ => 1 } qw(500 1600 1800 2400 2410 3200 6300 7400 10500 10700);
my %allow_long_salt = map { $_ => 1 } qw(2500 5500 5600 7100 7200 7300 9400 9500 9600 9700 9800 10400 10500 10600 10700 1100 11000 11200 11300 11400 11600 12600);
# remember always do "exists ($db->{$hash_in})" checks as soon as possible and don't forget it
# unsalted
- if ($mode == 0 || $mode == 100 || $mode == 101 || $mode == 190 || $mode == 200 || $mode == 300 || $mode == 900 || $mode == 1000 || $mode == 1400 || $mode == 1700 || $mode == 2400 || $mode == 2600 || $mode == 3000 || $mode == 3500 || $mode == 4300 || $mode == 4400 || $mode == 4500 || $mode == 4600 || $mode == 4700 || $mode == 5000 || $mode == 5100 || $mode == 5700 || $mode == 6000 || $mode == 6100 || $mode == 6900 || $mode == 8600 || $mode == 9900 || $mode == 10800 || $mode == 11500)
+ if ($mode == 0 || $mode == 100 || $mode == 101 || $mode == 133 || $mode == 190 || $mode == 200 || $mode == 300 || $mode == 900 || $mode == 1000 || $mode == 1400 || $mode == 1700 || $mode == 2400 || $mode == 2600 || $mode == 3000 || $mode == 3500 || $mode == 4300 || $mode == 4400 || $mode == 4500 || $mode == 4600 || $mode == 4700 || $mode == 5000 || $mode == 5100 || $mode == 5700 || $mode == 6000 || $mode == 6100 || $mode == 6900 || $mode == 8600 || $mode == 9900 || $mode == 10800 || $mode == 11500)
{
my $index = index ($line, ":");
next unless (exists ($db->{$hash_in}) and (! defined ($db->{$hash_in})));
}
+ elsif ($mode == 13000)
+ {
+ my $hash_line;
+
+ ($hash_line, $word) = split ":", $line;
+
+ next unless defined $hash_line;
+ next unless defined $word;
+
+ my @data = split ('\$', $hash_line);
+
+ next unless scalar @data == 8;
+
+ shift @data;
+
+ my $signature = shift @data;
+ my $salt_len = shift @data;
+ my $salt_buf = shift @data;
+ my $iterations = shift @data;
+ my $iv = shift @data;
+ my $pswcheck_len = shift @data;
+ my $pswcheck = shift @data;
+
+ next unless ($signature eq "rar5");
+ next unless ($salt_len == 16);
+ next unless ($pswcheck_len == 8);
+
+ $salt = $salt_buf;
+ $iter = $iterations;
+ $hash_in = $pswcheck;
+ $param = $iv;
+
+ next unless (exists ($db->{$hash_line}) and (! defined ($db->{$hash_line})));
+ }
+ elsif ($mode == 13100 )
+ {
+ ($hash_in, $word) = split ":", $line;
+
+ next unless defined $hash_in;
+ next unless defined $word;
+
+ my @data = split ('\$', $hash_in);
+
+ next unless scalar @data == 8;
+
+ shift @data;
+
+ my $signature = shift @data;
+ my $algorithm = shift @data;
+ my $user = shift @data;
+ $user = substr ($user, 1);
+ my $realm = shift @data;
+ my $spn = shift @data;
+ $spn = substr ($spn, 0, length ($spn) - 1);
+ my $checksum = shift @data;
+ my $edata2 = shift @data;
+
+ next unless ($signature eq "krb5tgs");
+ next unless (length ($checksum) == 32);
+ next unless (length ($edata2) >= 64);
+
+ $salt = $user . '$' . $realm . '$' . $spn . '$' . substr ($edata2, 0, 16);
+
+ next unless (exists ($db->{$hash_in}) and (! defined ($db->{$hash_in})));
+ }
+ elsif ($mode == 13200)
+ {
+ ($hash_in, $word) = split ":", $line;
+
+ next unless defined $hash_in;
+ next unless defined $word;
+
+ my @data = split ('\*', $hash_in);
+
+ next unless scalar @data == 5;
+
+ shift @data;
+
+ my $signature = shift @data;
+ my $version = shift @data;
+ my $iteration = shift @data;
+ my $mysalt = shift @data;
+ my $digest = shift @data;
+
+ next unless ($signature eq '$axcrypt$');
+ next unless (length ($mysalt) == 32);
+ next unless (length ($digest) == 48);
+
+ $salt = $iteration . '*' . $mysalt;
+
+ next unless (exists ($db->{$hash_in}) and (! defined ($db->{$hash_in})));
+ }
+ elsif ($mode == 13300)
+ {
+ ($hash_in, $word) = split ":", $line;
+
+ next unless defined $hash_in;
+ next unless defined $word;
+
+ my @data = split ('\$', $hash_in);
+
+ next unless scalar @data == 2;
+
+ shift @data;
+
+ my $signature = shift @data;
+ my $digest = shift @data;
+
+ next unless ($signature eq '$axcrypt_sha1');
+ next unless (length ($digest) == 32 || length ($digest) == 40);
+
+ next unless (exists ($db->{$hash_in}) and (! defined ($db->{$hash_in})));
+ }
+ elsif ($mode == 13400)
+ {
+ ($hash_in, $word) = split ":", $line;
+
+ next unless defined $hash_in;
+ next unless defined $word;
+
+ my @data = split ('\*', $hash_in);
+
+ next unless (scalar @data == 9 || scalar @data == 11);
+
+ my $signature = shift @data;
+ next unless ($signature eq '$keepass$');
+
+ my $version = shift @data;
+ next unless ($version == 1 || $version == 2);
+
+ my $iteration = shift @data;
+
+ my $algorithm = shift @data;
+
+ my $final_random_seed = shift @data;
+
+ if ($version == 1)
+ {
+ next unless (length ($final_random_seed) == 32);
+ }
+ elsif ($version == 2)
+ {
+ next unless (length ($final_random_seed) == 64);
+ }
+
+ my $transf_random_seed = shift @data;
+ next unless (length ($transf_random_seed) == 64);
+
+ my $enc_iv = shift @data;
+ next unless (length ($enc_iv) == 32);
+
+ if ($version == 1)
+ {
+ my $contents_hash = shift @data;
+ next unless (length ($contents_hash) == 64);
+
+ my $inline_flags = shift @data;
+ next unless ($inline_flags == 1);
+
+ my $contents_len = shift @data;
+
+ my $contents = shift @data;
+ next unless (length ($contents) == $contents_len * 2);
+ }
+ elsif ($version == 2)
+ {
+ my $expected_bytes = shift @data;
+ next unless (length ($expected_bytes) == 64);
+
+ my $contents_hash = shift @data;
+ next unless (length ($contents_hash) == 64);
+ }
+
+ $salt = substr ($hash_in, length ("*keepass*") + 1, length ($hash_in));
+
+ next unless (exists ($db->{$hash_in}) and (! defined ($db->{$hash_in})));
+ }
else
{
print "ERROR: hash mode is not supported\n";
my $key = $pbkdf2->PBKDF2 ($salt_bin, $word);
- my $cipher = Crypt::CBC->new({
+ my $cipher = Crypt::CBC->new ({
key => $key,
cipher => "Crypt::Rijndael",
iv => $salt_bin,
return unless (substr ($line, 0, $len) eq $hash_out);
}
+ elsif ($mode == 13000)
+ {
+ $hash_out = gen_hash ($mode, $word, $salt, $iter, $param);
+
+ $len = length $hash_out;
+
+ return unless (substr ($line, 0, $len) eq $hash_out);
+ }
+ elsif ($mode == 13100)
+ {
+ $hash_out = gen_hash ($mode, $word, $salt);
+
+ $len = length $hash_out;
+
+ return unless (substr ($line, 0, $len) eq $hash_out);
+ }
+ elsif ($mode == 13200)
+ {
+ $hash_out = gen_hash ($mode, $word, $salt);
+
+ $len = length $hash_out;
+
+ return unless (substr ($line, 0, $len) eq $hash_out);
+ }
+ elsif ($mode == 13400)
+ {
+ $hash_out = gen_hash ($mode, $word, $salt);
+
+ $len = length $hash_out;
+
+ return unless (substr ($line, 0, $len) eq $hash_out);
+ }
else
{
$hash_out = gen_hash ($mode, $word, $salt, $iter);
my $tmp_hash;
- if ($mode == 0 || $mode == 100 || $mode == 101 || $mode == 190 || $mode == 200 || $mode == 300 || $mode == 600 || $mode == 900 || $mode == 1000 || $mode == 1400 || $mode == 1700 || $mode == 2400 || $mode == 2600 || $mode == 3500 || $mode == 4300 || $mode == 4400 || $mode == 4500 || $mode == 4600 || $mode == 4700 || $mode == 5000 || $mode == 5100 || $mode == 6000 || $mode == 6100 || $mode == 6900 || $mode == 5700 || $mode == 9900 || $mode == 10800 || $mode == 11500)
+ if ($mode == 0 || $mode == 100 || $mode == 101 || $mode == 133 || $mode == 190 || $mode == 200 || $mode == 300 || $mode == 600 || $mode == 900 || $mode == 1000 || $mode == 1400 || $mode == 1700 || $mode == 2400 || $mode == 2600 || $mode == 3500 || $mode == 4300 || $mode == 4400 || $mode == 4500 || $mode == 4600 || $mode == 4700 || $mode == 5000 || $mode == 5100 || $mode == 6000 || $mode == 6100 || $mode == 6900 || $mode == 5700 || $mode == 9900 || $mode == 10800 || $mode == 11500 || $mode == 13300)
{
$tmp_hash = gen_hash ($mode, $word_buf, "");
}
{
$tmp_hash = gen_hash ($mode, $word_buf, substr ($salt_buf, 0, 32));
}
+ elsif ($mode == 13000)
+ {
+ $tmp_hash = gen_hash ($mode, $word_buf, substr ($salt_buf, 0, 32));
+ }
+ elsif ($mode == 13100)
+ {
+ $salt_buf = get_random_kerberos5_tgs_salt ();
+
+ $tmp_hash = gen_hash ($mode, $word_buf, $salt_buf);
+ }
+ elsif ($mode == 13200)
+ {
+ $salt_buf = get_random_axcrypt_salt ();
+
+ $tmp_hash = gen_hash ($mode, $word_buf, $salt_buf);
+ }
+ elsif ($mode == 13400)
+ {
+ $salt_buf = get_random_keepass_salt ();
+
+ $tmp_hash = gen_hash ($mode, $word_buf, $salt_buf);
+ }
else
{
print "ERROR: Unsupported hash type\n";
{
my $mode = $modes[$j];
- if ($mode == 0 || $mode == 100 || $mode == 101 || $mode == 190 || $mode == 200 || $mode == 300 || $mode == 600 || $mode == 900 || $mode == 1000 || $mode == 1400 || $mode == 1700 || $mode == 2400 || $mode == 2600 || $mode == 3500 || $mode == 4300 || $mode == 4400 || $mode == 4500 || $mode == 4600 || $mode == 4700 || $mode == 5000 || $mode == 5100 || $mode == 5300 || $mode == 5400 || $mode == 6000 || $mode == 6100 || $mode == 6600 || $mode == 6900 || $mode == 5700 || $mode == 8200 || $mode == 8300 || $mode == 9900 || $mode == 10800 || $mode == 11500)
+ if ($mode == 0 || $mode == 100 || $mode == 101 || $mode == 133 || $mode == 190 || $mode == 200 || $mode == 300 || $mode == 600 || $mode == 900 || $mode == 1000 || $mode == 1400 || $mode == 1700 || $mode == 2400 || $mode == 2600 || $mode == 3500 || $mode == 4300 || $mode == 4400 || $mode == 4500 || $mode == 4600 || $mode == 4700 || $mode == 5000 || $mode == 5100 || $mode == 5300 || $mode == 5400 || $mode == 6000 || $mode == 6100 || $mode == 6600 || $mode == 6900 || $mode == 5700 || $mode == 8200 || $mode == 8300 || $mode == 9900 || $mode == 10800 || $mode == 11500 || $mode == 13300)
{
for (my $i = 1; $i < 32; $i++)
{
}
}
}
+ elsif ($mode == 13000)
+ {
+ for (my $i = 1; $i < 32; $i++)
+ {
+ if ($len != 0)
+ {
+ rnd ($mode, $len, 32);
+ }
+ else
+ {
+ rnd ($mode, $i, 32);
+ }
+ }
+ }
+ elsif ($mode == 13100)
+ {
+ for (my $i = 1; $i < 27; $i++)
+ {
+ if ($len != 0)
+ {
+ rnd ($mode, $len, 16);
+ }
+ else
+ {
+ rnd ($mode, $i, 16);
+ }
+ }
+ }
+ elsif ($mode == 13200)
+ {
+ for (my $i = 1; $i < 32; $i++)
+ {
+ if ($len != 0)
+ {
+ rnd ($mode, $len, 32);
+ }
+ else
+ {
+ rnd ($mode, $i, 32);
+ }
+ }
+ }
+ elsif ($mode == 13400)
+ {
+ for (my $i = 1; $i < 16; $i++)
+ {
+ if ($len != 0)
+ {
+ rnd ($mode, $len, 16);
+ }
+ else
+ {
+ rnd ($mode, $i, 16);
+ }
+ }
+ }
}
}
$tmp_hash = sprintf ("0x0100%s%s", $salt_buf, $hash_buf);
}
+ elsif ($mode == 133)
+ {
+ $hash_buf = sha1 (encode ("UTF-16LE", $word_buf));
+
+ $hash_buf = encode_base64 ($hash_buf);
+ $hash_buf =~ s/[\r\n]//g;
+
+ $tmp_hash = sprintf ("%s", $hash_buf);
+ }
elsif ($mode == 140)
{
$hash_buf = sha1_hex ($salt_buf . encode ("UTF-16LE", $word_buf));
my $key = $pbkdf2->PBKDF2 ($salt, $word_buf);
- my $cipher = Crypt::CBC->new({
+ my $cipher = Crypt::CBC->new ({
key => $key,
cipher => "Crypt::Rijndael",
iv => $iv,
my $key = $pbkdf2->PBKDF2 ($salt_buf, $word_buf);
- my $cipher = Crypt::CBC->new({
+ my $cipher = Crypt::CBC->new ({
key => $key,
cipher => "Crypt::Rijndael",
iv => $iv,
my $key1 = substr ($final1, 0, 16);
my $key2 = substr ($final2, 0, 16);
- my $cipher1 = Crypt::CBC->new({
+ my $cipher1 = Crypt::CBC->new ({
key => $key1,
cipher => "Crypt::Rijndael",
iv => $salt_buf,
padding => "null",
});
- my $cipher2 = Crypt::CBC->new({
+ my $cipher2 = Crypt::CBC->new ({
key => $key2,
cipher => "Crypt::Rijndael",
iv => $salt_buf,
my $key1 = substr ($final1, 0, 32);
my $key2 = substr ($final2, 0, 32);
- my $cipher1 = Crypt::CBC->new({
+ my $cipher1 = Crypt::CBC->new ({
key => $key1,
cipher => "Crypt::Rijndael",
iv => $salt_buf,
padding => "null",
});
- my $cipher2 = Crypt::CBC->new({
+ my $cipher2 = Crypt::CBC->new ({
key => $key2,
cipher => "Crypt::Rijndael",
iv => $salt_buf,
$data .= $word_buf . $block;
}
- my $aes = Crypt::CBC->new({
+ my $aes = Crypt::CBC->new ({
key => substr ($block, 0, 16),
cipher => "Crypt::Rijndael",
iv => substr ($block, 16, 16),
my $data = get_random_string (32);
- my $aes = Crypt::CBC->new({
+ my $aes = Crypt::CBC->new ({
key => substr ($hash_buf, 0, 32),
cipher => "Crypt::Rijndael",
iv => substr ($hash_buf, 32, 16),
$salt_buf .= "\x00" x $salt_padding_len;
- my $aes = Crypt::CBC->new({
+ my $aes = Crypt::CBC->new ({
cipher => "Crypt::Rijndael",
key => $key,
keysize => 32,
{
$algorithm = strtolower ($algorithm);
- if(! in_array ($algorithm, hash_algos (), true))
+ if (! in_array ($algorithm, hash_algos (), true))
{
trigger_error ("PBKDF2 ERROR: Invalid hash algorithm.", E_USER_ERROR);
}
$output .= $xorsum;
}
- if($raw_output)
+ if ($raw_output)
{
return substr ($output, 0, $key_length);
}
my $key = $pbkdf2->PBKDF2 ($salt_buf_bin, $word_buf);
- my $cipher = Crypt::CBC->new({
+ my $cipher = Crypt::CBC->new ({
key => $key,
cipher => "Crypt::Rijndael",
iv => $salt_buf_bin,
$tmp_hash = sprintf ("%s%s%s", $salt2, $hash_hmac, $salt_buf);
}
+ elsif ($mode == 13000)
+ {
+ my $iterations = 15;
+
+ if (length ($iter))
+ {
+ $iterations = int ($iter);
+ }
+
+ my $iv = "0" x 32;
+
+ if (defined $additional_param)
+ {
+ $iv = $additional_param;
+ }
+
+ my $pbkdf2 = Crypt::PBKDF2->new
+ (
+ hasher => Crypt::PBKDF2->hasher_from_algorithm ('HMACSHA2', 256),
+ iterations => (1 << $iterations) + 32,
+ output_len => 32
+ );
+
+ my $salt_buf_bin = pack ("H*", $salt_buf);
+
+ my $hash = $pbkdf2->PBKDF2 ($salt_buf_bin, $word_buf);
+
+ my $hash_final = substr ($hash, 0, 8)
+ ^ substr ($hash, 8, 8)
+ ^ substr ($hash, 16, 8)
+ ^ substr ($hash, 24, 8);
+
+ $tmp_hash = sprintf ('$rar5$16$%s$%d$%s$8$%s', $salt_buf, $iterations, $iv, unpack ("H*", $hash_final));
+ }
+ elsif ($mode == 13100)
+ {
+ my @salt_arr = split ('\$', $salt_buf);
+
+ my $user = $salt_arr[0];
+
+ my $realm = $salt_arr[1];
+
+ my $spn = $salt_arr[2];
+
+ my $nonce = $salt_arr[3];
+
+ my $cleartext_ticket = '6381b03081ada00703050050a00000a11b3019a003020117a1'.
+ '12041058e0d77776e8b8e03991f2966939222aa2171b154d594b5242544553542e434f4e5'.
+ '44f534f2e434f4da3133011a003020102a10a30081b067472616e6365a40b3009a0030201'.
+ '01a1020400a511180f32303136303231353134343735305aa611180f32303136303231353'.
+ '134343735305aa711180f32303136303231363030343735305aa811180f32303136303232'.
+ '323134343735305a';
+
+ $cleartext_ticket = $nonce . $cleartext_ticket;
+
+ my $k = md4 (encode ("UTF-16LE", $word_buf));
+
+ my $k1 = hmac_md5 ("\x02\x00\x00\x00", $k);
+
+ my $checksum = hmac_md5 (pack ("H*", $cleartext_ticket), $k1);
+
+ my $k3 = hmac_md5 ($checksum, $k1);
+
+ my $cipher = Crypt::RC4->new ($k3);
+
+ my $edata2 = $cipher->RC4 (pack ("H*", $cleartext_ticket));
+
+ $tmp_hash = sprintf ('$krb5tgs$23$*%s$%s$%s*$%s$%s', $user, $realm, $spn, unpack ("H*", $checksum), unpack ("H*", $edata2));
+ }
+ elsif ($mode == 13200)
+ {
+ my @salt_arr = split ('\*', $salt_buf);
+
+ my $iteration = $salt_arr[0];
+
+ my $mysalt = $salt_arr[1];
+
+ $mysalt = pack ("H*", $mysalt);
+
+ my $DEK = randbytes (16);
+
+ my $iv = "a6a6a6a6a6a6a6a6";
+
+ my $KEK = sha1($word_buf);
+
+ $KEK = substr ($KEK ^ $mysalt, 0, 16);
+
+ my $aes = Crypt::Mode::ECB->new ('AES');
+
+ my @R = ('', substr(pack ("H*",$DEK),0,8), substr(pack ("H*",$DEK),8,16));
+
+ my $B;
+
+ my $A = pack ("H*", $iv);
+
+ for (my $j = 0; $j < $iteration; $j++)
+ {
+ $B = $aes->encrypt ($A . $R[1], $KEK);
+
+ $A = substr ($B, 0, 8) ^ pack ("q", (2 * $j + 1));
+
+ $R[1] = substr ($B, 8, 16);
+
+ $B = $aes->encrypt ($A . $R[2], $KEK);
+
+ $A = substr ($B, 0, 8) ^ pack ("q", (2 * $j + 2));
+
+ $R[2] = substr ($B, 8, 16);
+ }
+
+ my $wrapped_key = unpack ("H*", $A . substr ($R[1], 0 ,8) . substr ($R[2], 0 ,8));
+
+ $mysalt = unpack ("H*", $mysalt);
+
+ $tmp_hash = sprintf ('$axcrypt$*1*%s*%s*%s', $iteration, $mysalt, $wrapped_key);
+ }
+ elsif ($mode == 13300)
+ {
+ $hash_buf = sha1_hex ($word_buf);
+
+ $tmp_hash = sprintf ('$axcrypt_sha1$%s', substr ($hash_buf, 0, 32));
+ }
+
+
+ elsif ($mode == 13400)
+ {
+ my @salt_arr = split ('\*', $salt_buf);
+
+ my $version = $salt_arr[0];
+
+ my $iteration = $salt_arr[1];
+
+ my $algorithm = $salt_arr[2];
+
+ my $final_random_seed = $salt_arr[3];
+
+ my $transf_random_seed = $salt_arr[4];
+
+ my $enc_iv = $salt_arr[5];
+
+ my $contents_hash;
+
+ # specific to version 1
+ my $inline_flag;
+ my $contents_len;
+ my $contents;
+
+ # specific to version 2
+ my $expected_bytes;
+
+ $final_random_seed = pack ("H*", $final_random_seed);
+
+ $transf_random_seed = pack ("H*", $transf_random_seed);
+
+ $enc_iv = pack ("H*", $enc_iv);
+
+ my $intermediate_hash = sha256 ($word_buf);
+
+ if ($version == 1)
+ {
+ $contents_hash = $salt_arr[6];
+ $contents_hash = pack ("H*", $contents_hash);
+
+ $inline_flag = $salt_arr[7];
+
+ $contents_len = $salt_arr[8];
+
+ $contents = $salt_arr[9];
+ $contents = pack ("H*", $contents);
+ }
+ elsif ($version == 2)
+ {
+ $intermediate_hash = sha256 ($intermediate_hash);
+ }
+
+ my $aes = Crypt::Mode::ECB->new ('AES', 1);
+
+ for (my $j = 0; $j < $iteration; $j++)
+ {
+ $intermediate_hash = $aes->encrypt ($intermediate_hash, $transf_random_seed);
+
+ $intermediate_hash = substr ($intermediate_hash, 0, 32);
+ }
+
+ $intermediate_hash = sha256 ($intermediate_hash);
+
+ my $final_key = sha256 ($final_random_seed . $intermediate_hash);
+
+ my $final_algorithm;
+
+ if ($version == 1 && $algorithm == 1)
+ {
+ $final_algorithm = "Crypt::Twofish";
+ }
+ else
+ {
+ $final_algorithm = "Crypt::Rijndael";
+ }
+
+ my $cipher = Crypt::CBC->new ({
+ key => $final_key,
+ cipher => $final_algorithm,
+ iv => $enc_iv,
+ literal_key => 1,
+ header => "none",
+ keysize => 32
+ });
+
+ if ($version == 1)
+ {
+ $contents_hash = sha256 ($contents);
+
+ $contents = $cipher->encrypt($contents);
+
+ $tmp_hash = sprintf ('$keepass$*%d*%d*%d*%s*%s*%s*%s*%d*%d*%s',
+ $version,
+ $iteration,
+ $algorithm,
+ unpack ("H*", $final_random_seed),
+ unpack ("H*", $transf_random_seed),
+ unpack ("H*", $enc_iv),
+ unpack ("H*", $contents_hash),
+ $inline_flag,
+ $contents_len,
+ unpack ("H*", $contents));
+ }
+ if ($version == 2)
+ {
+ $expected_bytes = $salt_arr[6];
+
+ $contents_hash = $salt_arr[7];
+ $contents_hash = pack ("H*", $contents_hash);
+
+ $expected_bytes = $cipher->decrypt($contents_hash);
+
+ $tmp_hash = sprintf ('$keepass$*%d*%d*%d*%s*%s*%s*%s*%s',
+ $version,
+ $iteration,
+ $algorithm,
+ unpack ("H*", $final_random_seed),
+ unpack ("H*", $transf_random_seed),
+ unpack ("H*", $enc_iv),
+ unpack ("H*", $expected_bytes),
+ unpack ("H*", $contents_hash));
+ }
+ }
return ($tmp_hash);
}
{
$salt_buf = get_random_dnssec_salt ();
}
+ elsif ($mode == 13100)
+ {
+ $salt_buf = get_random_kerberos5_tgs_salt ();
+ }
+ elsif ($mode == 13200)
+ {
+ $salt_buf = get_random_axcrypt_salt ();
+ }
+ elsif ($mode == 13400)
+ {
+ $salt_buf = get_random_keepass_salt ();
+ }
else
{
my @salt_arr;
return $salt_buf;
}
+sub get_random_kerberos5_tgs_salt
+{
+ my $nonce = randbytes (8);
+
+ my $user = "user";
+ my $realm = "realm";
+ my $spn = "test/spn";
+
+ my $salt_buf = $user . "\$" . $realm . "\$" . $spn . "\$" . unpack ("H*",$nonce);
+
+ return $salt_buf;
+}
+
+sub get_random_axcrypt_salt
+{
+ my $mysalt = randbytes (16);
+
+ $mysalt = unpack ("H*", $mysalt);
+
+ my $iteration = get_random_num (6, 100000);
+
+ my $salt_buf = $iteration . '*' . $mysalt;
+
+ return $salt_buf;
+}
+
+sub get_random_keepass_salt
+{
+ my $version = get_random_num (1, 3);
+
+ my $algorithm;
+
+ my $iteration;
+
+ my $final_random_seed;
+
+ if ($version == 1)
+ {
+ $algorithm = get_random_num (0, 2);
+
+ $iteration = get_random_num (50000, 100000);
+
+ $final_random_seed = randbytes (16);
+ $final_random_seed = unpack ("H*", $final_random_seed);
+ }
+ elsif ($version == 2)
+ {
+ $algorithm = 0;
+
+ $iteration = get_random_num (6000, 100000);
+
+ $final_random_seed = randbytes (32);
+ $final_random_seed = unpack ("H*", $final_random_seed);
+ }
+
+ my $transf_random_seed = randbytes (32);
+ $transf_random_seed = unpack ("H*", $transf_random_seed);
+
+ my $enc_iv = randbytes (16);
+ $enc_iv = unpack ("H*", $enc_iv);
+
+ my $contents_hash = randbytes (32);
+ $contents_hash = unpack ("H*", $contents_hash);
+
+ my $inline_flag = 1;
+
+ my $contents_len = get_random_num (128, 500);
+
+ my $contents = randbytes ($contents_len);
+
+ $contents_len += 16 - $contents_len % 16;
+
+ $contents = unpack ("H*", $contents);
+
+ my $salt_buf;
+
+ if ($version == 1)
+ {
+ $salt_buf = $version . '*' .
+ $iteration . '*' .
+ $algorithm . '*' .
+ $final_random_seed . '*' .
+ $transf_random_seed . '*' .
+ $enc_iv . '*' .
+ $contents_hash . '*' .
+ $inline_flag . '*' .
+ $contents_len . '*' .
+ $contents;
+ }
+ elsif ($version == 2)
+ {
+ $contents = randbytes (32);
+ $contents = unpack ("H*", $contents);
+
+ $salt_buf = $version . '*' .
+ $iteration . '*' .
+ $algorithm . '*' .
+ $final_random_seed . '*' .
+ $transf_random_seed . '*' .
+ $enc_iv . '*' .
+ $contents_hash . '*' .
+ $contents;
+ }
+
+ return $salt_buf;
+}
+
sub get_random_md5chap_salt
{
my $salt_buf = shift;
projects / hashcat.git / blobdiff