pythonhacktoberfeststeamauthenticationauthenticatorsteam-authenticatorsteam-clientsteam-guard-codessteam-websteamworksvalvewebapi
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
106 lines
3.3 KiB
106 lines
3.3 KiB
"""
|
|
All function in this module take and return :class:`bytes`
|
|
"""
|
|
import sys
|
|
from os import urandom as random_bytes
|
|
from struct import pack
|
|
from base64 import b64decode
|
|
|
|
from Cryptodome.Hash import MD5, SHA1, HMAC
|
|
from Cryptodome.PublicKey.RSA import import_key as rsa_import_key, construct as rsa_construct
|
|
from Cryptodome.Cipher import PKCS1_OAEP, PKCS1_v1_5
|
|
from Cryptodome.Cipher import AES as AES
|
|
|
|
|
|
class UniverseKey(object):
|
|
"""Public keys for Universes"""
|
|
|
|
Public = rsa_import_key(b64decode("""
|
|
MIGdMA0GCSqGSIb3DQEBAQUAA4GLADCBhwKBgQDf7BrWLBBmLBc1OhSwfFkRf53T
|
|
2Ct64+AVzRkeRuh7h3SiGEYxqQMUeYKO6UWiSRKpI2hzic9pobFhRr3Bvr/WARvY
|
|
gdTckPv+T1JzZsuVcNfFjrocejN1oWI0Rrtgt4Bo+hOneoo3S57G9F1fOpn5nsQ6
|
|
6WOiu4gZKODnFMBCiQIBEQ==
|
|
"""))
|
|
|
|
BS = 16
|
|
pad = lambda s: s + (BS - len(s) % BS) * pack('B', BS - len(s) % BS)
|
|
|
|
if sys.version_info < (3,):
|
|
unpad = lambda s: s[0:-ord(s[-1])]
|
|
else:
|
|
unpad = lambda s: s[0:-s[-1]]
|
|
|
|
|
|
def generate_session_key(hmac_secret=b''):
|
|
"""
|
|
:param hmac_secret: optional HMAC
|
|
:type hmac_secret: :class:`bytes`
|
|
:return: (session_key, encrypted_session_key) tuple
|
|
:rtype: :class:`tuple`
|
|
"""
|
|
session_key = random_bytes(32)
|
|
encrypted_session_key = PKCS1_OAEP.new(UniverseKey.Public, SHA1)\
|
|
.encrypt(session_key + hmac_secret)
|
|
|
|
return (session_key, encrypted_session_key)
|
|
|
|
def symmetric_encrypt(message, key):
|
|
iv = random_bytes(BS)
|
|
return symmetric_encrypt_with_iv(message, key, iv)
|
|
|
|
def symmetric_encrypt_ecb(message, key):
|
|
return AES.new(key, AES.MODE_ECB).encrypt(pad(message))
|
|
|
|
def symmetric_encrypt_HMAC(message, key, hmac_secret):
|
|
prefix = random_bytes(3)
|
|
hmac = hmac_sha1(hmac_secret, prefix + message)
|
|
iv = hmac[:13] + prefix
|
|
return symmetric_encrypt_with_iv(message, key, iv)
|
|
|
|
def symmetric_encrypt_iv(iv, key):
|
|
return AES.new(key, AES.MODE_ECB).encrypt(iv)
|
|
|
|
def symmetric_encrypt_with_iv(message, key, iv):
|
|
encrypted_iv = symmetric_encrypt_iv(iv, key)
|
|
cyphertext = AES.new(key, AES.MODE_CBC, iv).encrypt(pad(message))
|
|
return encrypted_iv + cyphertext
|
|
|
|
def symmetric_decrypt(cyphertext, key):
|
|
iv = symmetric_decrypt_iv(cyphertext, key)
|
|
return symmetric_decrypt_with_iv(cyphertext, key, iv)
|
|
|
|
def symmetric_decrypt_ecb(cyphertext, key):
|
|
return unpad(AES.new(key, AES.MODE_ECB).decrypt(cyphertext))
|
|
|
|
def symmetric_decrypt_HMAC(cyphertext, key, hmac_secret):
|
|
""":raises: :class:`RuntimeError` when HMAC verification fails"""
|
|
iv = symmetric_decrypt_iv(cyphertext, key)
|
|
message = symmetric_decrypt_with_iv(cyphertext, key, iv)
|
|
|
|
hmac = hmac_sha1(hmac_secret, iv[-3:] + message)
|
|
|
|
if iv[:13] != hmac[:13]:
|
|
raise RuntimeError("Unable to decrypt message. HMAC does not match.")
|
|
|
|
return message
|
|
|
|
def symmetric_decrypt_iv(cyphertext, key):
|
|
return AES.new(key, AES.MODE_ECB).decrypt(cyphertext[:BS])
|
|
|
|
def symmetric_decrypt_with_iv(cyphertext, key, iv):
|
|
return unpad(AES.new(key, AES.MODE_CBC, iv).decrypt(cyphertext[BS:]))
|
|
|
|
def hmac_sha1(secret, data):
|
|
return HMAC.new(secret, data, SHA1).digest()
|
|
|
|
def sha1_hash(data):
|
|
return SHA1.new(data).digest()
|
|
|
|
def md5_hash(data):
|
|
return MD5.new(data).digest()
|
|
|
|
def rsa_publickey(mod, exp):
|
|
return rsa_construct((mod, exp))
|
|
|
|
def pkcs1v15_encrypt(key, message):
|
|
return PKCS1_v1_5.new(key).encrypt(message)
|
|
|