-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathRSAalgorithm.py
More file actions
126 lines (103 loc) · 4.41 KB
/
Copy pathRSAalgorithm.py
File metadata and controls
126 lines (103 loc) · 4.41 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
import secrets
from hashlib import sha256 as sha256_hash
# Functions for the hashing of the message to check for message validation and making sure the data isn't tampered with
def sha256(data):
return sha256_hash(data).digest()
def mgf1(seed, mask_len):
mask = b""
counter = 0
while len(mask) < mask_len:
counter_bytes = counter.to_bytes(4, byteorder="big")
mask += sha256(seed + counter_bytes)
counter += 1
return mask[:mask_len]
def oaepPadding(message, hashSize, keySize):
# Making the RSAOAEP padding
label_hash = sha256(b"")
PS = b"\x00" * (keySize - len(message) - 2*hashSize - 2)
DB = label_hash + PS + b"\x01" + message
seed = secrets.token_bytes(hashSize)
dbMask = mgf1(seed, len(DB))
maskedDB = bytes(a ^ b for a, b in zip(DB, dbMask))
seedMask = mgf1(maskedDB, hashSize)
maskedSeed = bytes(a ^ b for a, b in zip(seed, seedMask))
return b"\x00" + maskedSeed + maskedDB
def oaepUnpadding(paddedMessage, hashSize, keySize):
# Unpadding the RSAOAEP encryption and validating the message
maskedSeed = paddedMessage[1:hashSize+1]
maskedDB = paddedMessage[hashSize+1:]
seedMask = mgf1(maskedDB, hashSize)
seed = bytes(a ^ b for a, b in zip(maskedSeed, seedMask))
dbMask = mgf1(seed, len(maskedDB))
DB = bytes(a ^ b for a, b in zip(maskedDB, dbMask))
label_hash = sha256(b"")
if DB[:hashSize] != label_hash:
raise ValueError("Invalid label hash")
i = hashSize
while i < len(DB) and DB[i] == 0:
i += 1
if i == len(DB) or DB[i] != 1:
raise ValueError("Invalid padding")
return DB[i+1:]
def rsaEncoding(messageInt, publicKey):
# The actual Encryption
e, n = publicKey
return pow(messageInt, e, n)
def rsaDecryption(cipherInt, privateKey):
# The actual Decryption
d, n = privateKey
return pow(cipherInt, d, n)
def rsaEncryptWithIntegrity(messageBytes, publicKey):
# Adding the RSA padding to the message
keySize = (publicKey[1].bit_length() + 7) // 8
hashSize = 32
try:
integrityPadding = oaepPadding(messageBytes, hashSize, keySize)
paddingInt = int.from_bytes(integrityPadding, byteorder="big")
encryptedPadding = rsaEncoding(paddingInt, publicKey)
encryptedMessage = rsaEncoding(int.from_bytes(messageBytes, byteorder="big"), publicKey)
return encryptedMessage.to_bytes(keySize, byteorder="big") + encryptedPadding.to_bytes(keySize, byteorder="big")
except Exception as e:
print(f"Debug - Padding error: {e}")
return None
def rsaDecryptWithIntegrity(encryptedData, privateKey):
# Getting rid of the hash and validating the messgae
try:
keySize = (privateKey[1].bit_length() + 7) // 8
hashSize = 32
encryptedMessage = encryptedData[:(keySize*2)]
encryptedPadding = encryptedData[(keySize*2):]
encryptedMessage = (encryptedMessage.decode('utf-8'))
encryptedPadding = (encryptedPadding.decode('utf-8'))
decryptedMessage = rsaDecryption(int(encryptedMessage, 16), privateKey)
decryptedPadding = rsaDecryption(int(encryptedPadding, 16), privateKey)
messageBytes = decryptedMessage.to_bytes((decryptedMessage.bit_length() + 7) // 8, byteorder="big")
paddingBytes = decryptedPadding.to_bytes(keySize, byteorder="big")
decryptedOAEP = oaepUnpadding(paddingBytes, hashSize, keySize)
if decryptedOAEP == messageBytes:
print("Data integrity verified!")
return messageBytes
print("Warning: Integrity verification failed!")
return None
except Exception as e:
print(f"Debug - Decryption error: {e}")
return None
def Encryption(message, publicKey):
messageBytes = message.to_bytes(16, byteorder="big")
encrypted_data = rsaEncryptWithIntegrity(messageBytes, publicKey)
return encrypted_data
def Decryption(encrypted_data, privateKey):
decrypted_data = rsaDecryptWithIntegrity(encrypted_data, privateKey)
if decrypted_data:
message = int.from_bytes(decrypted_data, byteorder="big")
return message
else:
print("Decryption failed - integrity check failed")
return None
def main(message, encryption, key):
if encryption:
encrypted_data = Encryption(message, key)
return encrypted_data
else:
decrypted_data = Decryption(message, key)
return decrypted_data