244 lines
9 KiB
Python
244 lines
9 KiB
Python
|
from Crypto.Cipher import AES
|
||
|
|
from Crypto.Util.Padding import pad, unpad
|
||
|
|
from Crypto.Util.strxor import strxor
|
||
|
|
from Crypto.Random import get_random_bytes
|
||
|
|
from hashlib import md5, sha256
|
||
|
|
import hmac
|
||
|
|
|
||
|
|
|
||
|
|
MSGTYPE_HANDSHAKE_REQUEST = 0x0
|
||
|
|
MSGTYPE_HANDSHAKE_RESPONSE = 0x1
|
||
|
|
MSGTYPE_ENCRYPTED_RESPONSE = 0x3
|
||
|
|
MSGTYPE_ENCRYPTED_REQUEST = 0x6
|
||
|
|
|
||
|
|
|
||
|
|
class CloudSecurity:
|
||
|
|
def __init__(self, login_key, iot_key, hmac_key, fixed_key=None, fixed_iv=None):
|
||
|
|
self._login_key = login_key
|
||
|
|
self._iot_key = iot_key
|
||
|
|
self._hmac_key = hmac_key
|
||
|
|
self._aes_key = None
|
||
|
|
self._aes_iv = None
|
||
|
|
self._fixed_key = format(fixed_key, 'x').encode("ascii") if fixed_key else None
|
||
|
|
self._fixed_iv = format(fixed_iv, 'x').encode("ascii") if fixed_iv else None
|
||
|
|
|
||
|
|
def sign(self, data: str, random: str) -> str:
|
||
|
|
msg = self._iot_key
|
||
|
|
msg += data
|
||
|
|
msg += random
|
||
|
|
sign = hmac.new(self._hmac_key.encode("ascii"), msg.encode("ascii"), sha256)
|
||
|
|
return sign.hexdigest()
|
||
|
|
|
||
|
|
def encrypt_password(self, login_id, data):
|
||
|
|
m = sha256()
|
||
|
|
m.update(data.encode("ascii"))
|
||
|
|
login_hash = login_id + m.hexdigest() + self._login_key
|
||
|
|
m = sha256()
|
||
|
|
m.update(login_hash.encode("ascii"))
|
||
|
|
return m.hexdigest()
|
||
|
|
|
||
|
|
def encrypt_iam_password(self, login_id, data) -> str:
|
||
|
|
raise NotImplementedError
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def get_deviceid(username):
|
||
|
|
return sha256(f"Hello, {username}!".encode("ascii")).digest().hex()[:16]
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def get_udp_id(appliance_id, method=0):
|
||
|
|
if method == 0:
|
||
|
|
bytes_id = bytes(reversed(appliance_id.to_bytes(8, "big")))
|
||
|
|
elif method == 1:
|
||
|
|
bytes_id = appliance_id.to_bytes(6, "big")
|
||
|
|
elif method == 2:
|
||
|
|
bytes_id = appliance_id.to_bytes(6, "little")
|
||
|
|
else:
|
||
|
|
return None
|
||
|
|
data = bytearray(sha256(bytes_id).digest())
|
||
|
|
for i in range(0, 16):
|
||
|
|
data[i] ^= data[i + 16]
|
||
|
|
return data[0: 16].hex()
|
||
|
|
|
||
|
|
def set_aes_keys(self, key, iv):
|
||
|
|
if isinstance(key, str):
|
||
|
|
key = key.encode("ascii")
|
||
|
|
if isinstance(iv, str):
|
||
|
|
iv = iv.encode("ascii")
|
||
|
|
self._aes_key = key
|
||
|
|
self._aes_iv = iv
|
||
|
|
|
||
|
|
def aes_encrypt_with_fixed_key(self, data):
|
||
|
|
return self.aes_encrypt(data, self._fixed_key, self._fixed_iv)
|
||
|
|
|
||
|
|
def aes_decrypt_with_fixed_key(self, data):
|
||
|
|
return self.aes_decrypt(data, self._fixed_key, self._fixed_iv)
|
||
|
|
|
||
|
|
def aes_encrypt(self, data, key=None, iv=None):
|
||
|
|
if key is not None:
|
||
|
|
aes_key = key
|
||
|
|
aes_iv = iv
|
||
|
|
else:
|
||
|
|
aes_key = self._aes_key
|
||
|
|
aes_iv = self._aes_iv
|
||
|
|
if aes_key is None:
|
||
|
|
raise ValueError("Encrypt need a key")
|
||
|
|
if isinstance(data, str):
|
||
|
|
data = bytes.fromhex(data)
|
||
|
|
if aes_iv is None: # ECB
|
||
|
|
return AES.new(aes_key, AES.MODE_ECB).encrypt(pad(data, 16))
|
||
|
|
else: # CBC
|
||
|
|
return AES.new(aes_key, AES.MODE_CBC, iv=aes_iv).encrypt(pad(data, 16))
|
||
|
|
|
||
|
|
def aes_decrypt(self, data, key=None, iv=None):
|
||
|
|
if key is not None:
|
||
|
|
aes_key = key
|
||
|
|
aes_iv = iv
|
||
|
|
else:
|
||
|
|
aes_key = self._aes_key
|
||
|
|
aes_iv = self._aes_iv
|
||
|
|
if aes_key is None:
|
||
|
|
raise ValueError("Encrypt need a key")
|
||
|
|
if isinstance(data, str):
|
||
|
|
data = bytes.fromhex(data)
|
||
|
|
if aes_iv is None: # ECB
|
||
|
|
return unpad(AES.new(aes_key, AES.MODE_ECB).decrypt(data), len(aes_key)).decode()
|
||
|
|
else: # CBC
|
||
|
|
return unpad(AES.new(aes_key, AES.MODE_CBC, iv=aes_iv).decrypt(data), len(aes_key)).decode()
|
||
|
|
|
||
|
|
|
||
|
|
class MeijuCloudSecurity(CloudSecurity):
|
||
|
|
def __init__(self, login_key, iot_key, hmac_key):
|
||
|
|
super().__init__(login_key, iot_key, hmac_key,
|
||
|
|
10864842703515613082)
|
||
|
|
|
||
|
|
def encrypt_iam_password(self, login_id, data) -> str:
|
||
|
|
md = md5()
|
||
|
|
md.update(data.encode("ascii"))
|
||
|
|
md_second = md5()
|
||
|
|
md_second.update(md.hexdigest().encode("ascii"))
|
||
|
|
return md_second.hexdigest()
|
||
|
|
|
||
|
|
|
||
|
|
class MSmartCloudSecurity(CloudSecurity):
|
||
|
|
def __init__(self, login_key, iot_key, hmac_key):
|
||
|
|
super().__init__(login_key, iot_key, hmac_key,
|
||
|
|
13101328926877700970,
|
||
|
|
16429062708050928556)
|
||
|
|
|
||
|
|
def encrypt_iam_password(self, login_id, data) -> str:
|
||
|
|
md = md5()
|
||
|
|
md.update(data.encode("ascii"))
|
||
|
|
md_second = md5()
|
||
|
|
md_second.update(md.hexdigest().encode("ascii"))
|
||
|
|
login_hash = login_id + md_second.hexdigest() + self._login_key
|
||
|
|
sha = sha256()
|
||
|
|
sha.update(login_hash.encode("ascii"))
|
||
|
|
return sha.hexdigest()
|
||
|
|
|
||
|
|
def set_aes_keys(self, encrypted_key, encrypted_iv):
|
||
|
|
key_digest = sha256(self._login_key.encode("ascii")).hexdigest()
|
||
|
|
tmp_key = key_digest[:16].encode("ascii")
|
||
|
|
tmp_iv = key_digest[16:32].encode("ascii")
|
||
|
|
self._aes_key = self.aes_decrypt(encrypted_key, tmp_key, tmp_iv).encode('ascii')
|
||
|
|
self._aes_iv = self.aes_decrypt(encrypted_iv, tmp_key, tmp_iv).encode('ascii')
|
||
|
|
|
||
|
|
|
||
|
|
class LocalSecurity:
|
||
|
|
def __init__(self):
|
||
|
|
self.blockSize = 16
|
||
|
|
self.iv = b"\0" * 16
|
||
|
|
self.aes_key = bytes.fromhex(
|
||
|
|
format(141661095494369103254425781617665632877, 'x')
|
||
|
|
)
|
||
|
|
self.salt = bytes.fromhex(
|
||
|
|
format(233912452794221312800602098970898185176935770387238278451789080441632479840061417076563, 'x')
|
||
|
|
)
|
||
|
|
self._tcp_key = None
|
||
|
|
self._request_count = 0
|
||
|
|
self._response_count = 0
|
||
|
|
|
||
|
|
def aes_decrypt(self, raw):
|
||
|
|
try:
|
||
|
|
return unpad(AES.new(self.aes_key, AES.MODE_ECB).decrypt(bytearray(raw)), 16)
|
||
|
|
except ValueError as e:
|
||
|
|
return bytearray(0)
|
||
|
|
|
||
|
|
def aes_encrypt(self, raw):
|
||
|
|
return AES.new(self.aes_key, AES.MODE_ECB).encrypt(bytearray(pad(raw, 16)))
|
||
|
|
|
||
|
|
def aes_cbc_decrypt(self, raw, key):
|
||
|
|
return AES.new(key=key, mode=AES.MODE_CBC, iv=self.iv).decrypt(raw)
|
||
|
|
|
||
|
|
def aes_cbc_encrypt(self, raw, key):
|
||
|
|
return AES.new(key=key, mode=AES.MODE_CBC, iv=self.iv).encrypt(raw)
|
||
|
|
|
||
|
|
def encode32_data(self, raw):
|
||
|
|
return md5(raw + self.salt).digest()
|
||
|
|
|
||
|
|
def tcp_key(self, response, key):
|
||
|
|
if response == b"ERROR":
|
||
|
|
raise Exception("authentication failed")
|
||
|
|
if len(response) != 64:
|
||
|
|
raise Exception("unexpected data length")
|
||
|
|
payload = response[:32]
|
||
|
|
sign = response[32:]
|
||
|
|
plain = self.aes_cbc_decrypt(payload, key)
|
||
|
|
if sha256(plain).digest() != sign:
|
||
|
|
raise Exception("sign does not match")
|
||
|
|
self._tcp_key = strxor(plain, key)
|
||
|
|
self._request_count = 0
|
||
|
|
self._response_count = 0
|
||
|
|
return self._tcp_key
|
||
|
|
|
||
|
|
def encode_8370(self, data, msgtype):
|
||
|
|
header = bytearray([0x83, 0x70])
|
||
|
|
size, padding = len(data), 0
|
||
|
|
if msgtype in (MSGTYPE_ENCRYPTED_RESPONSE, MSGTYPE_ENCRYPTED_REQUEST):
|
||
|
|
if (size + 2) % 16 != 0:
|
||
|
|
padding = 16 - (size + 2 & 0xf)
|
||
|
|
size += padding + 32
|
||
|
|
data += get_random_bytes(padding)
|
||
|
|
header += size.to_bytes(2, "big")
|
||
|
|
header += bytearray([0x20, padding << 4 | msgtype])
|
||
|
|
data = self._request_count.to_bytes(2, "big") + data
|
||
|
|
self._request_count += 1
|
||
|
|
if self._request_count >= 0xFFFF:
|
||
|
|
self._request_count = 0
|
||
|
|
if msgtype in (MSGTYPE_ENCRYPTED_RESPONSE, MSGTYPE_ENCRYPTED_REQUEST):
|
||
|
|
sign = sha256(header + data).digest()
|
||
|
|
data = self.aes_cbc_encrypt(raw=data, key=self._tcp_key) + sign
|
||
|
|
return header + data
|
||
|
|
|
||
|
|
def decode_8370(self, data):
|
||
|
|
if len(data) < 6:
|
||
|
|
return [], data
|
||
|
|
header = data[:6]
|
||
|
|
if header[0] != 0x83 or header[1] != 0x70:
|
||
|
|
raise Exception("not an 8370 message")
|
||
|
|
size = int.from_bytes(header[2:4], "big") + 8
|
||
|
|
leftover = None
|
||
|
|
if len(data) < size:
|
||
|
|
return [], data
|
||
|
|
elif len(data) > size:
|
||
|
|
leftover = data[size:]
|
||
|
|
data = data[:size]
|
||
|
|
if header[4] != 0x20:
|
||
|
|
raise Exception("missing byte 4")
|
||
|
|
padding = header[5] >> 4
|
||
|
|
msgtype = header[5] & 0xf
|
||
|
|
data = data[6:]
|
||
|
|
if msgtype in (MSGTYPE_ENCRYPTED_RESPONSE, MSGTYPE_ENCRYPTED_REQUEST):
|
||
|
|
sign = data[-32:]
|
||
|
|
data = data[:-32]
|
||
|
|
data = self.aes_cbc_decrypt(raw=data, key=self._tcp_key)
|
||
|
|
if sha256(header + data).digest() != sign:
|
||
|
|
raise Exception("sign does not match")
|
||
|
|
if padding:
|
||
|
|
data = data[:-padding]
|
||
|
|
self._response_count = int.from_bytes(data[:2], "big")
|
||
|
|
data = data[2:]
|
||
|
|
if leftover:
|
||
|
|
packets, incomplete = self.decode_8370(leftover)
|
||
|
|
return [data] + packets, incomplete
|
||
|
|
return [data], b""
|