Python Client Examples

Example #1

File: chal37.py Project: zimolzak/crypto-challenges

#!/usr/bin/env python

#     chal37.py - Break SRP with zero key.
#
#     Copyright (C) 2015 Andrew J. Zimolzak <*****@*****.**>,
#     and licensed under GNU GPL version 3. Full notice is found in
#     the file 'LICENSE' in the same directory as this file.

from cryptopals import warn
from srp import Client, Server
from diffie_hellman import p as nist_prime
import random

me = Client(nist_prime, 2, 3, '*****@*****.**', 'PASSW0RD1')
you = Server(nist_prime, 2, 3, '*****@*****.**', 'PASSW0RD1')
print "For benign,",
me.logon_to(you)
assert me.K == you.K
assert me.salt == you.salt

failure = Client(nist_prime, 2, 3, '*****@*****.**', 'haha')
print "For built to fail,",
failure.logon_to(you)
assert failure.K != you.K

for k in range(0,11):
    pw = ''
    for i in range(8):
        pw = pw + chr(random.randint(97,122))
    print "A%N=0 password", pw,
    sneak = Client(nist_prime, 2, 3, '*****@*****.**', pw, ntimes=k)

Example #2

#!/usr/bin/env python

#     chal38.py - Offline dictionary attack on simplified SRP
#
#     Copyright (C) 2015 Andrew J. Zimolzak <*****@*****.**>,
#     and licensed under GNU GPL version 3. Full notice is found in
#     the file 'LICENSE' in the same directory as this file.

from cryptopals import warn
from srp import Client, Server
from diffie_hellman import p as nist_prime
import random

me = Client(nist_prime, 2, 3, '*****@*****.**', 'taurus', simple=True)
you = Server(nist_prime, 2, 3, '*****@*****.**', 'taurus', simple=True)
print "For benign,",
me.logon_to(you)
assert me.K == you.K
assert me.salt == you.salt

failure = Client(nist_prime, 2, 3, '*****@*****.**', 'haha', simple=True)
print "For built to fail,",
failure.logon_to(you)
assert failure.K != you.K

mallory = Server(nist_prime, 2, 3, '*****@*****.**', 'nopasswd', mitm=you)
print "\nFor MITM:"
me.logon_to(mallory)

warn("Passed assertions:", __file__)

Example #3

#!/usr/bin/env python

#     chal36.py - Implement secure remote password
#
#     Copyright (C) 2015 Andrew J. Zimolzak <*****@*****.**>,
#     and licensed under GNU GPL version 3. Full notice is found in
#     the file 'LICENSE' in the same directory as this file.

from cryptopals import warn
from srp import Client, Server
from diffie_hellman import p as nist_prime

me = Client(nist_prime, 2, 3, '*****@*****.**', 'PASSW0RD1')
you = Server(nist_prime, 2, 3, '*****@*****.**', 'PASSW0RD1')

me.logon_to(you)

#### tests
assert me.K == you.K
assert me.salt == you.salt
warn("Passed assertions:", __file__)

Example #4

#!/usr/bin/env python

#     chal37.py - Break SRP with zero key.
#
#     Copyright (C) 2015 Andrew J. Zimolzak <*****@*****.**>,
#     and licensed under GNU GPL version 3. Full notice is found in
#     the file 'LICENSE' in the same directory as this file.

from cryptopals import warn
from srp import Client, Server
from diffie_hellman import p as nist_prime
import random

me = Client(nist_prime, 2, 3, '*****@*****.**', 'PASSW0RD1')
you = Server(nist_prime, 2, 3, '*****@*****.**', 'PASSW0RD1')
print "For benign,",
me.logon_to(you)
assert me.K == you.K
assert me.salt == you.salt

failure = Client(nist_prime, 2, 3, '*****@*****.**', 'haha')
print "For built to fail,",
failure.logon_to(you)
assert failure.K != you.K

for k in range(0, 11):
    pw = ''
    for i in range(8):
        pw = pw + chr(random.randint(97, 122))
    print "A%N=0 password", pw,
    sneak = Client(nist_prime, 2, 3, '*****@*****.**', pw, ntimes=k)

Example #5

from srp import Client, Server

if __name__ == '__main__':
    client = Client()
    serv = Server()

    I = 'alice'
    P = 'password123'
    print(f'I = {I}, P = {P}')

    print('Клиент: рассчитывает верификатор')
    salt, verifier = client.compute_verifier(I, P)
    print(f'Соль: {salt}')
    print(f'Верификатор: {verifier}')

    print('Клиент передаёт I, s, v на сервер')
    print('Клиент: рассчитывает частные и публичные значения')
    A = client.compute_client_values()
    print(f'Клиент A: {A}')

    print('Клиент передаёт A на сервер')
    print('Сервер: рассчитывает частные и публичные значения')
    B = serv.compute_server_values(I, verifier)
    print(f'Сервер B: {B}')

    print('Сервер передаёт B клиенту')
    print('Клиент: рассчитывает скремблер и сессионный ключ')
    client.compute_premaster_secret(salt, B)
    M = client.compute_session_key(salt, B)

    print('Сервер: рассчитывает скремблер и сессионный ключ')