DokuWiki

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

====== RSA Certificados y AES ======

===== Para ver un certificado RSA =====
<code>
jorpilo@Legion:~/RSA$ openssl x509 -in cert1.pem -text -noout    
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fe:01:84:a9:f4:78:86:5a:6d:00:36:53:0a:0a:0f:ed:8d:17:24
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = ES, ST = MADRID, L = MADRID, O = HACKERS, OU = RANSOMWARE, CN = EVIL HACKER, emailAddress = GoToHell@hackers.com
        Validity
            Not Before: Mar 29 10:24:10 2019 GMT
            Not After : Apr 28 10:24:10 2019 GMT
        Subject: C = ES, ST = MADRID, L = MADRID, O = HACKERS, OU = RANSOMWARE, CN = EVIL HACKER, emailAddress = GoToHell@hackers.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e4:55:89:d4:cb:3c:e9:0d:cb:f1:9e:2d:eb:
                    f8:11:eb:98:cd:82:a8:91:b8:c2:20:ee:ed:ca:09:
                    7d:5b:36:1b:36:c5:ab:d4:3d:33:98:3a:3d:53:74:
                    d1:62:93:77:90:09:a6:4c:89:0f:20:17:b9:bf:42:
                    e9:54:a6:e5:8e:a8:21:d9:ab:75:ae:5c:3d:bd:76:
                    44:8a:4c:fe:81:c2:ab:7d:db:51:c5:63:bb:55:6d:
                    93:67:24:e0:6a:ec:37:8d:a6:b2:08:1f:b7:86:d7:
                    9f:69:0f:84:00:07:1a:ff:8d:80:e4:87:f5:97:cc:
                    b5:a3:a6:f8:d1:04:a3:cd:1e:2f:d4:af:94:2d:a7:
                    6d:d2:a7:b0:df:c4:5a:06:65:fc:82:1d:73:67:9f:
                    11:c4:b5:5e:6a:be:f9:97:53:7a:9c:9c:c9:e8:b6:
                    1f:ee:af:1d:23:eb:2c:38:e6:40:b1:51:73:60:1d:
                    36:53:91:4b:c4:9d:b8:31:ea:e2:f6:5e:9c:75:79:
                    a4:9d:6d:8c:98:00:eb:de:46:33:c8:29:2d:91:19:
                    ed:6a:a1:b9:7f:01:a4:b5:02:2e:d0:8d:5f:6e:c6:
                    bc:1c:f4:36:5b:18:09:ad:07:08:22:cb:37:e4:d2:
                    c2:28:f9:80:c3:f6:bc:6d:62:08:14:5f:07:5d:f1:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2F:19:7E:E0:C9:91:31:48:0F:DD:8A:65:2E:8A:D2:6B:49:67:E9:7F
            X509v3 Authority Key Identifier: 
                keyid:2F:19:7E:E0:C9:91:31:48:0F:DD:8A:65:2E:8A:D2:6B:49:67:E9:7F

X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:88:c8:a1:31:07:70:8b:72:af:a7:b8:38:1d:db:77:e1:
         f4:cf:5c:f1:7e:c5:f5:e6:0b:0e:70:39:f4:83:a3:f8:87:4a:
         10:90:0b:42:6a:70:3e:f4:d6:9c:3c:37:01:37:25:0b:f0:c5:
         f8:d5:0f:d5:eb:34:c4:13:78:50:15:0d:c6:7c:94:1c:29:fc:
         b5:99:5f:06:fa:b0:c5:c0:af:f5:22:96:66:99:b0:ac:28:b6:
         a2:15:ed:a6:2b:5a:db:28:cc:eb:60:16:c7:d6:56:a8:2b:af:
         91:68:53:9a:d0:d8:10:15:0f:ca:91:67:83:2a:99:35:27:d9:
         79:c4:0c:98:98:62:85:60:2c:ca:ed:0b:46:27:a5:02:69:c4:
         a3:a0:4d:75:38:ac:c9:00:26:a5:b9:51:62:6b:c4:5e:d5:9f:
         65:8e:a2:c3:c3:bf:43:09:94:ed:72:b9:4a:1f:fd:56:18:9e:
         84:ff:0d:d6:24:d2:c1:d0:89:81:2a:4a:0d:ed:3d:3b:f3:e6:
         15:43:df:b7:45:a1:4d:4a:1b:4b:a8:cf:7c:da:22:90:14:81:
         2f:33:8f:15:ea:0c:3b:7d:ab:2a:b2:50:4a:be:a7:be:47:5e:
         2c:34:26:70:4f:15:5f:61:49:6a:8c:7b:52:7d:9a:3c:33:ef:
         9f:d2:c9:1a
jorpilo@Legion:~/RSA$ cat enc2| base64 -d > b64_2
jorpilo@Legion:~/RSA$ cat enc1| base64 -d > b64_1 
jorpilo@Legion:~/RSA$ openssl rsautl -decrypt -in b64_2 -out decrypted -inkey key2.pem                    
RSA operation error
139862846772288:error:0407109F:rsa routines:RSA_padding_check_PKCS1_type_2:pkcs decoding error:../crypto/rsa/rsa_pk1.c:251:
139862846772288:error:04065072:rsa routines:rsa_ossl_private_decrypt:padding check failed:../crypto/rsa/rsa_ossl.c:483:
jorpilo@Legion:~/RSA$ openssl rsautl -decrypt -in b64_2 -out decrypted -inkey key2.pem
RSA operation error
140704978797632:error:0407109F:rsa routines:RSA_padding_check_PKCS1_type_2:pkcs decoding error:../crypto/rsa/rsa_pk1.c:251:
140704978797632:error:04065072:rsa routines:rsa_ossl_private_decrypt:padding check failed:../crypto/rsa/rsa_ossl.c:483:
jorpilo@Legion:~/RSA$ openssl x509 -in cert2.pem -text -noout                          
Can't open cert2.pem for reading, No such file or directory
139918883845184:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('cert2.pem','r')
139918883845184:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
unable to load certificate
jorpilo@Legion:~/RSA$ openssl x509 -in cert2.pem -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5f:3f:6b:0e:97:d9:42:2d:b0:91:5e:d6:ef:7c:cf:82:06:81:44
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = ES, ST = MADRID, L = MADRID, O = HACKERS, OU = RANSOMWARE, CN = EVIL HACKER, emailAddress = GoToHell@hackers.com
        Validity
            Not Before: Mar 29 10:56:01 2019 GMT
            Not After : Apr 28 10:56:01 2019 GMT
        Subject: C = ES, ST = MADRID, L = MADRID, O = HACKERS, OU = RANSOMWARE, CN = EVIL HACKER, emailAddress = GoToHell@hackers.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:df:38:2d:bb:75:f8:9c:3b:e1:a7:39:85:3b:
                    20:12:81:5d:08:67:c6:76:0c:1a:6a:7a:cb:15:79:
                    80:43:b3:04:05:8b:21:71:cb:fa:02:3c:1f:bc:4e:
                    7d:43:96:f8:b8:78:bb:37:22:37:7e:bf:6d:b6:76:
                    1a:11:36:28:8f:31:6f:42:db:06:97:0d:de:1b:a5:
                    e5:12:1a:71:0b:13:78:1a:67:93:6d:d6:6b:d2:57:
                    02:40:8f:e3:7e:ae:6c:37:cf:c3:4f:31:21:2d:f4:
                    49:cc:f9:79:73:52:46:b9:95:8d:f0:0c:d5:45:75:
                    62:4a:0a:9b:90:e3:ad:82:95:07:b8:fa:af:ba:c8:
                    07:77:67:ea:20:51:a4:50:94:99:5b:fa:d8:7d:91:
                    2c:a9:a7:c5:d8:4c:74:9c:dd:90:5b:d8:12:21:84:
                    58:9a:e3:9a:8f:65:2c:51:d0:54:87:76:f3:ec:bd:
                    72:aa:5b:9a:3c:98:7d:c3:fd:57:c7:76:85:8d:cf:
                    7d:30:46:c7:9f:60:33:f2:f2:1b:1a:ab:d5:dd:38:
                    66:4f:4a:e5:89:56:5b:f7:4c:41:f3:66:4b:ec:18:
                    1d:cd:3d:ea:67:14:48:f5:63:56:84:ed:6d:2d:37:
                    25:f1:7a:3f:49:0e:5a:40:78:4c:54:3f:a9:1f:4a:
                    dd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:2C:21:17:02:E3:CA:66:05:01:71:4E:02:57:1F:60:2C:73:33:78
            X509v3 Authority Key Identifier: 
                keyid:3A:2C:21:17:02:E3:CA:66:05:01:71:4E:02:57:1F:60:2C:73:33:78

X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         dc:0c:01:cc:64:62:ae:d2:ef:c6:94:15:af:25:42:bc:61:26:
         21:f4:8d:df:7a:87:79:b8:8c:ef:ea:ee:e8:b2:e1:30:29:c3:
         23:e4:b1:74:f5:74:13:05:bd:ee:86:8f:6d:e7:b7:09:1b:23:
         9f:2f:6f:95:2d:6e:cc:b0:ca:4e:55:e5:12:23:52:23:d8:e0:
         50:74:d0:e0:b1:82:c1:92:ed:7e:5d:92:8c:cf:77:05:68:0e:
         f8:41:ca:60:af:b2:38:75:92:b6:aa:a4:65:5c:c0:94:28:07:
         bf:d6:7b:cd:cf:c0:a8:d1:00:01:d4:16:99:d3:74:41:0f:f2:
         bc:43:d5:f6:90:d7:01:c0:53:da:e9:8f:84:10:92:27:22:5f:
         f0:29:a8:79:af:51:ce:64:61:a7:e4:96:34:ce:8e:20:e3:4e:
         40:11:f8:45:b6:e7:eb:27:f0:bb:30:c1:3c:b7:fd:8c:37:fa:
         21:5e:38:55:95:b1:21:8f:d0:a9:52:bf:60:6c:55:3e:98:f9:
         f4:c9:fe:ec:34:ca:ee:37:87:0a:72:9b:c3:62:2a:81:45:e4:
         2d:e8:17:e3:a6:7d:c5:f8:45:74:e6:74:59:54:eb:3e:f5:61:
         74:8e:76:ff:27:cd:ba:46:d3:a7:a6:cf:39:b1:4c:c2:e0:14:
         80:af:01:fa
jorpilo@Legion:~/RSA$ openssl rsautl -decrypt -in enc2 -out decrypted -inkey key2.pem                                
RSA operation error
140021743969344:error:0406506C:rsa routines:rsa_ossl_private_decrypt:data greater than mod len:../crypto/rsa/rsa_ossl.c:398:
jorpilo@Legion:~/RSA$ openssl rsautl -decrypt -in b64_2 -out decrypted -inkey key2.pem     
RSA operation error
140323614708800:error:0407109F:rsa routines:RSA_padding_check_PKCS1_type_2:pkcs decoding error:../crypto/rsa/rsa_pk1.c:251:
140323614708800:error:04065072:rsa routines:rsa_ossl_private_decrypt:padding check failed:../crypto/rsa/rsa_ossl.c:483:
jorpilo@Legion:~/RSA$ openssl rsautl -decrypt -in b64_1 -out dec_1 -inkey key2.pem       
jorpilo@Legion:~/RSA$ openssl enc -aes-256-cbc -salt -in SECRET_FILE -out SECRET_FILE.enc -pass file:./key.b^C
jorpilo@Legion:~/RSA$ ^C
jorpilo@Legion:~/RSA$ cat f1 | base64 -d > b64_f1
jorpilo@Legion:~/RSA$ openssl enc -d -aes-256-cbc -in encrypted.data -out un_encrypted.data -pass file:dec
dec_1      decrypted  
jorpilo@Legion:~/RSA$ openssl enc -d -aes-256-cbc -in encrypted.data -out un_encrypted.data -pass file:dec_1 
Can't open encrypted.data for reading, No such file or directory
140301409735744:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('encrypted.data','rb')
140301409735744:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
jorpilo@Legion:~/RSA$ openssl enc -d -aes-256-cbc -in b64 -out un_encrypted.data -pass file:dec_1               
b64     b64_1   b64_2   b64_f1  
jorpilo@Legion:~/RSA$ openssl enc -d -aes-256-cbc -in b641 -out un_encrypted.data -pass file:dec_1 
Can't open b641 for reading, No such file or directory
139675331400768:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('b641','rb')
139675331400768:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
jorpilo@Legion:~/RSA$ openssl enc -d -aes-256-cbc -in b64 -out un_encrypted.data -pass file:dec_1  
b64     b64_1   b64_2   b64_f1  
jorpilo@Legion:~/RSA$ openssl enc -d -aes-256-cbc -in b64 -out un_encrypted.data -pass file:dec_1 
b64     b64_1   b64_2   b64_f1  
jorpilo@Legion:~/RSA$ openssl enc -d -aes-256-cbc -in b64_f1 -out un_encrypted.data -pass file:dec_1 
*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
jorpilo@Legion:~/RSA$ cat un_encrypted.data 
Capacicard rocks! (capacicard.e-paths.com) 
jorpilo@Legion:~/RSA$ openssl rsautl -decrypt -in b64_2 -out decrypted -inkey key2.pem    
RSA operation error
139638472598592:error:0407109F:rsa routines:RSA_padding_check_PKCS1_type_2:pkcs decoding error:../crypto/rsa/rsa_pk1.c:251:
139638472598592:error:04065072:rsa routines:rsa_ossl_private_decrypt:padding check failed:../crypto/rsa/rsa_ossl.c:483:
jorpilo@Legion:~/RSA$ cat f2 | base64 -d > b64_file2
jorpilo@Legion:~/RSA$ cat key | base64 -d > b64_key2
cat: key: No existe el fichero o el directorio
jorpilo@Legion:~/RSA$ cat key | base64 -d > b64_key2
key1      key1.pem  key2      key2.pem  
jorpilo@Legion:~/RSA$ cat key2 | base64 -d > b64_key2
jorpilo@Legion:~/RSA$ openssl rsautl -decrypt -in b64_key2 -out decrypted -inkey key2.pem     
RSA operation error
139959729116224:error:0407109F:rsa routines:RSA_padding_check_PKCS1_type_2:pkcs decoding error:../crypto/rsa/rsa_pk1.c:251:
139959729116224:error:04065072:rsa routines:rsa_ossl_private_decrypt:padding check failed:../crypto/rsa/rsa_ossl.c:483:
jorpilo@Legion:~/RSA$ openssl rsautl -decrypt -in b64_2 -out decrypted -inkey key2.pem    
Can't open b64_2 for reading, No such file or directory
140123039626304:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('b64_2','rb')
140123039626304:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
jorpilo@Legion:~/RSA$ openssl rsautl -decrypt -in b64_key2 -out decrypted -inkey key2.pem 
RSA operation error
139846928397376:error:0407109F:rsa routines:RSA_padding_check_PKCS1_type_2:pkcs decoding error:../crypto/rsa/rsa_pk1.c:251:
139846928397376:error:04065072:rsa routines:rsa_ossl_private_decrypt:padding check failed:../crypto/rsa/rsa_ossl.c:483:
jorpilo@Legion:~/RSA$ openssl x509 -in key1.perm -text -noout                               
Can't open key1.perm for reading, No such file or directory
140651901154368:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('key1.perm','r')
140651901154368:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
unable to load certificate
jorpilo@Legion:~/RSA$ openssl x509 -in cert1.pem -text -noout         
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fe:01:84:a9:f4:78:86:5a:6d:00:36:53:0a:0a:0f:ed:8d:17:24
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = ES, ST = MADRID, L = MADRID, O = HACKERS, OU = RANSOMWARE, CN = EVIL HACKER, emailAddress = GoToHell@hackers.com
        Validity
            Not Before: Mar 29 10:24:10 2019 GMT
            Not After : Apr 28 10:24:10 2019 GMT
        Subject: C = ES, ST = MADRID, L = MADRID, O = HACKERS, OU = RANSOMWARE, CN = EVIL HACKER, emailAddress = GoToHell@hackers.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e4:55:89:d4:cb:3c:e9:0d:cb:f1:9e:2d:eb:
                    f8:11:eb:98:cd:82:a8:91:b8:c2:20:ee:ed:ca:09:
                    7d:5b:36:1b:36:c5:ab:d4:3d:33:98:3a:3d:53:74:
                    d1:62:93:77:90:09:a6:4c:89:0f:20:17:b9:bf:42:
                    e9:54:a6:e5:8e:a8:21:d9:ab:75:ae:5c:3d:bd:76:
                    44:8a:4c:fe:81:c2:ab:7d:db:51:c5:63:bb:55:6d:
                    93:67:24:e0:6a:ec:37:8d:a6:b2:08:1f:b7:86:d7:
                    9f:69:0f:84:00:07:1a:ff:8d:80:e4:87:f5:97:cc:
                    b5:a3:a6:f8:d1:04:a3:cd:1e:2f:d4:af:94:2d:a7:
                    6d:d2:a7:b0:df:c4:5a:06:65:fc:82:1d:73:67:9f:
                    11:c4:b5:5e:6a:be:f9:97:53:7a:9c:9c:c9:e8:b6:
                    1f:ee:af:1d:23:eb:2c:38:e6:40:b1:51:73:60:1d:
                    36:53:91:4b:c4:9d:b8:31:ea:e2:f6:5e:9c:75:79:
                    a4:9d:6d:8c:98:00:eb:de:46:33:c8:29:2d:91:19:
                    ed:6a:a1:b9:7f:01:a4:b5:02:2e:d0:8d:5f:6e:c6:
                    bc:1c:f4:36:5b:18:09:ad:07:08:22:cb:37:e4:d2:
                    c2:28:f9:80:c3:f6:bc:6d:62:08:14:5f:07:5d:f1:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2F:19:7E:E0:C9:91:31:48:0F:DD:8A:65:2E:8A:D2:6B:49:67:E9:7F
            X509v3 Authority Key Identifier: 
                keyid:2F:19:7E:E0:C9:91:31:48:0F:DD:8A:65:2E:8A:D2:6B:49:67:E9:7F

X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:88:c8:a1:31:07:70:8b:72:af:a7:b8:38:1d:db:77:e1:
         f4:cf:5c:f1:7e:c5:f5:e6:0b:0e:70:39:f4:83:a3:f8:87:4a:
         10:90:0b:42:6a:70:3e:f4:d6:9c:3c:37:01:37:25:0b:f0:c5:
         f8:d5:0f:d5:eb:34:c4:13:78:50:15:0d:c6:7c:94:1c:29:fc:
         b5:99:5f:06:fa:b0:c5:c0:af:f5:22:96:66:99:b0:ac:28:b6:
         a2:15:ed:a6:2b:5a:db:28:cc:eb:60:16:c7:d6:56:a8:2b:af:
         91:68:53:9a:d0:d8:10:15:0f:ca:91:67:83:2a:99:35:27:d9:
         79:c4:0c:98:98:62:85:60:2c:ca:ed:0b:46:27:a5:02:69:c4:
         a3:a0:4d:75:38:ac:c9:00:26:a5:b9:51:62:6b:c4:5e:d5:9f:
         65:8e:a2:c3:c3:bf:43:09:94:ed:72:b9:4a:1f:fd:56:18:9e:
         84:ff:0d:d6:24:d2:c1:d0:89:81:2a:4a:0d:ed:3d:3b:f3:e6:
         15:43:df:b7:45:a1:4d:4a:1b:4b:a8:cf:7c:da:22:90:14:81:
         2f:33:8f:15:ea:0c:3b:7d:ab:2a:b2:50:4a:be:a7:be:47:5e:
         2c:34:26:70:4f:15:5f:61:49:6a:8c:7b:52:7d:9a:3c:33:ef:
         9f:d2:c9:1a
</code>

===== Generar clave privada RSA sabiendo M y e =====
<code>
from Crypto.PublicKey.RSA import construct

# 65537 common public key
private_key = construct((mod1, 65537, exp1))
f = open("mykey1.pem", "wb")
f.write(private_key.exportKey("PEM"))
f.close()

</code>

==== Decode using RSA ====

<code>
cat key2 | base64 -d > b64_key2

openssl rsautl -decrypt -in b64_key2 -out decrypted -inkey key2.pem

</code>

==== Decode AES-256-CBC ====
<code>
openssl enc -d -aes-256-cbc -in b64_f1 -out un_encrypted.data -pass file:dec_1 
</code>

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Noncommercial-Share Alike 4.0 International