mirror of
https://github.com/hakril/PythonForWindows
synced 2026-06-08 14:31:45 +00:00
Clement Rouault
89 lines
3.3 KiB
Python
89 lines
3.3 KiB
Python
from os import urandom
|
|
|
|
from windows import winproxy
|
|
from windows.crypto import DEFAULT_ENCODING
|
|
from windows.crypto.helper import ECRYPT_DATA_BLOB
|
|
from windows.generated_def import *
|
|
|
|
def encode_init_vector(data):
|
|
blob = ECRYPT_DATA_BLOB.from_string(data)
|
|
size = DWORD()
|
|
buf = None
|
|
winproxy.CryptEncodeObjectEx(DEFAULT_ENCODING, X509_OCTET_STRING, ctypes.byref(blob), 0, None, buf, size)
|
|
buf = (BYTE * size.value)()
|
|
winproxy.CryptEncodeObjectEx(DEFAULT_ENCODING, X509_OCTET_STRING, ctypes.byref(blob), 0, None, buf, size)
|
|
return buf[:]
|
|
|
|
|
|
class GenerateInitVector(object):
|
|
def __repr__(self):
|
|
return "GenerateInitVector()"
|
|
|
|
def generate_init_vector(self, algo):
|
|
if algo in [szOID_OIWSEC_desCBC, szOID_RSA_DES_EDE3_CBC]:
|
|
return urandom(8)
|
|
if algo in [szOID_NIST_AES128_CBC, szOID_NIST_AES192_CBC, szOID_NIST_AES256_CBC]:
|
|
return urandom(16)
|
|
return None
|
|
geninitvector = GenerateInitVector()
|
|
|
|
|
|
def encrypt(cert_or_certlist, msg, algo=szOID_RSA_DES_EDE3_CBC, initvector=geninitvector):
|
|
alg_ident = CRYPT_ALGORITHM_IDENTIFIER()
|
|
alg_ident.pszObjId = algo
|
|
# Is 'certs' an iterable ?
|
|
try:
|
|
certlist = tuple(cert_or_certlist)
|
|
except TypeError as e:
|
|
certlist = (cert_or_certlist,)
|
|
|
|
# Set (compute if needed) the IV
|
|
if initvector is None:
|
|
alg_ident.Parameters.cbData = 0
|
|
elif initvector is geninitvector:
|
|
initvector = initvector.generate_init_vector(algo)
|
|
if initvector is None:
|
|
raise ValueError("I don't know how to generate an <initvector> for <{0}> please provide one (or None)".format(algo))
|
|
initvector_encoded = encode_init_vector(initvector)
|
|
alg_ident.Parameters = ECRYPT_DATA_BLOB.from_string(initvector_encoded)
|
|
else:
|
|
initvector_encoded = encode_init_vector(initvector)
|
|
alg_ident.Parameters = ECRYPT_DATA_BLOB.from_string(initvector_encoded)
|
|
|
|
# Setup encryption parameters
|
|
param = CRYPT_ENCRYPT_MESSAGE_PARA()
|
|
param.cbSize = ctypes.sizeof(param)
|
|
param.dwMsgEncodingType = DEFAULT_ENCODING
|
|
param.hCryptProv = None
|
|
param.ContentEncryptionAlgorithm = alg_ident
|
|
param.pvEncryptionAuxInfo = None
|
|
param.dwFlags = 0
|
|
param.dwInnerContentType = 0
|
|
|
|
certs = (PCERT_CONTEXT * len(certlist))(*certlist)
|
|
#Ask the output buffer size
|
|
size = DWORD()
|
|
winproxy.CryptEncryptMessage(param, len(certs), certs, msg, len(msg), None, size)
|
|
#Encrypt the msg
|
|
buf = (BYTE * size.value)()
|
|
winproxy.CryptEncryptMessage(param, len(certs), certs, msg, len(msg), buf, size)
|
|
return bytearray(buf[:size.value])
|
|
|
|
|
|
def decrypt(cert_store, encrypted):
|
|
# Setup decryption parameters
|
|
dparam = CRYPT_DECRYPT_MESSAGE_PARA()
|
|
dparam.cbSize = ctypes.sizeof(dparam)
|
|
dparam.dwMsgAndCertEncodingType = DEFAULT_ENCODING
|
|
dparam.cCertStore = 1
|
|
dparam.rghCertStore = (cert_store,)
|
|
dparam.dwFlags = 0
|
|
|
|
#Ask the output buffer size
|
|
buf = (BYTE * len(encrypted)).from_buffer_copy(encrypted)
|
|
dcryptsize = DWORD()
|
|
winproxy.CryptDecryptMessage(dparam, buf, ctypes.sizeof(buf), None, dcryptsize, None)
|
|
#Decrypt the msg
|
|
dcryptbuff = (BYTE * dcryptsize.value)()
|
|
winproxy.CryptDecryptMessage(dparam, buf, ctypes.sizeof(buf), dcryptbuff, dcryptsize, None)
|
|
return str(bytearray(dcryptbuff[:dcryptsize.value])) |