【3.A.S.T】网络安全爱好者 - Powered by Discuz! Board

标题: [原创文章] 关于国内某知名大学网站加密算法的研究 [打印本页]

作者: 柔肠寸断 时间: 2009-4-19 21:52 标题: 关于国内某知名大学网站加密算法的研究

原创作者：柔肠寸断 [3.A.S.T]  http://www.3ast.com.cm5 r. \' O6 @. g9 k: I
原始出处：http://www.3ast.com.cm6 I8 n% Q) k  W  m( j
5 }. ~/ P1 N8 L" B' g$ Q. Y
看不懂的直接绕过
加密前为:hwy1234569 }7 C. B6 Z1 t# H
加密后为0F9C1C7A2EE76EBB5C1F4D7526CC4F883F4E2 z2 y! a' m& c: x
8 D. n3 O' w! p/ w
============================================
上面是当时自己校内的心情。现在已经解破出来了，分享给大家
也就不隐瞒大家什么了，这个是国内某知名大学的后台加密算法
以下是RSA算法文件

文件名RSA.ASP3 A# Q0 @9 L7 X7 Z* `0 z3 M
===============================================& S' o1 p1 ^$ N9 m$ y- K7 {
<%
Class clsRSA % z- y4 l0 e5 w
Public PrivateKey
Public PublicKey
Public Modulus 2 \6 w) b1 J' f$ v
Public Function Crypt(pLngMessage, pLngKey)
On Error Resume Next
Dim lLngMod
Dim lLngResult 8 h" p! K) U; E) b- E9 p
Dim lLngIndex 7 @1 n$ |1 S: _: V% x) F2 A. F
If pLngKey Mod 2 = 0 Then
lLngResult = 1
For lLngIndex = 1 To pLngKey / 2
lLngMod = (pLngMessage ^ 2) Mod Modulus 8 h4 f! P2 j+ ?7 K
' Mod may error on key generation , p2 K/ p. f8 x' F( A  z
lLngResult = (lLngMod * lLngResult) Mod Modulus
If Err Then Exit Function
Next + R# {0 Y- a- r/ i
Else $ Q% H$ R( Q1 t; D
lLngResult = pLngMessage % n% d3 p) b& T; N& s9 z/ b
For lLngIndex = 1 To pLngKey / 2
lLngMod = (pLngMessage ^ 2) Mod Modulus 6 }+ p% f* R: D# |" a) ]/ E+ Z7 s1 W0 E( d
On Error Resume Next , f8 y; e9 w* a% O
' Mod may error on key generation 8 l- J+ b+ U. d! X5 ~  Q( }
lLngResult = (lLngMod * lLngResult) Mod Modulus
If Err Then Exit Function - J& g: i3 B1 I! x& u
Next ! }  ?1 v0 F- n* ]9 k
End If # S. |7 l- q& }
Crypt = lLngResult 4 g1 z8 U5 i6 ^- d  a. u( v$ t
End Function
$ F& ^" p, Y( T6 B% [
Public Function Encode(ByVal pStrMessage) ; l/ d: ~) Y6 U/ c2 M  D+ d
Dim lLngIndex
Dim lLngMaxIndex " z: k; I: f8 [4 @1 L$ A
Dim lBytAscii : i1 y/ N! {1 Y: v# Z9 a9 r+ e
Dim lLngEncrypted
lLngMaxIndex = Len(pStrMessage) - g8 W& @9 k3 L/ B5 I, A
If lLngMaxIndex = 0 Then Exit Function " K% I# p8 j9 J/ y- m
For lLngIndex = 1 To lLngMaxIndex , N9 L( D) P) q( ?4 ?
lBytAscii = Asc(Mid(pStrMessage, lLngIndex, 1)) 1 q5 R& ~+ M0 g, v- `
lLngEncrypted = Crypt(lBytAscii, PublicKey)
Encode = Encode & NumberToHex(lLngEncrypted, 4)
Next
End Function / Y9 X2 M: ]1 k; m4 n  X7 D
Public Function Decode(ByVal pStrMessage)
Dim lBytAscii 2 c* `/ t- x% A
Dim lLngIndex 9 |; E( e, n) A8 x7 g4 R+ i4 ]
Dim lLngMaxIndex   g; B9 N5 R% d; A: Z
Dim lLngEncryptedData / N& a  K6 @/ N6 p5 P
Decode = ""
lLngMaxIndex = Len(pStrMessage)
For lLngIndex = 1 To lLngMaxIndex Step 4 9 {+ c+ J  o9 H. ^
lLngEncryptedData = HexToNumber(Mid(pStrMessage, lLngIndex, 4))
lBytAscii = Crypt(lLngEncryptedData, PrivateKey) 1 p" n$ D- h! |( c/ W3 s
Decode = Decode & Chr(lBytAscii) ; L5 W( f3 H3 R8 |1 Q1 }
Next
End Function ' K7 l+ i" Z4 t( y7 b
Private Function NumberToHex(ByRef pLngNumber, ByRef pLngLength) 2 b" a# _9 e. v- S5 T. `
NumberToHex = Right(String(pLngLength, "0") & Hex(pLngNumber), pLngLength)
End Function / G. v+ R4 @2 ?: r) h& b; m
Private Function HexToNumber(ByRef pStrHex)
HexToNumber = CLng("&h" & pStrHex)   {0 \' G0 Q0 j" J- r  ^. x
End Function " c$ o5 x; v5 T
End Class : t/ K) p0 n9 M$ p/ x9 D; }% H
function Encryptstr(Message) ) q) P$ I* o5 f5 P2 |" `: J
Dim LngKeyE
Dim LngKeyD 1 \0 u  F% N( G: y7 V- u4 [' U; S
Dim LngKeyN
Dim StrMessage ) a: O$ J; \, I8 f" s; r: ?
Dim ObjRSA 5 V/ Q, z5 e6 B1 n3 _
LngKeyE = "32823"
LngKeyD = "20643"
LngKeyN = "29893" : p1 m& S% U# G" m& ?/ j$ h
StrMessage = Message + p4 L) }4 g: K. a& J  L; r' q% |
Set ObjRSA = New clsRSA
ObjRSA.PublicKey = LngKeyE
ObjRSA.Modulus = LngKeyN
Encryptstr = ObjRSA.Encode(StrMessage) + E4 Q4 ?( W( ]- l- o- D5 p  ]: |
Set ObjRSA = Nothing . p* R) k3 o2 t  v" E$ w2 w" u
end function% f$ U1 r" V8 k# {
Function Decryptstr(Message)
Dim LngKeyE
Dim LngKeyD
Dim LngKeyN
Dim StrMessage / _! U- z, a! g1 F$ l
Dim ObjRSA / L, A" F6 j  [  W8 N( |' l
LngKeyE = "32823"
LngKeyD = "20643" / P" i7 ~- X/ v# h9 o
LngKeyN = "29893" 5 i7 k/ L8 s+ H  Q4 N! W- x( P
StrMessage = Message
Set ObjRSA = New clsRSA 1 P+ D5 \% G5 |# {
ObjRSA.PrivateKey =LngKeyD . L6 s  L+ q! r; @; u, [3 \* O0 L
ObjRSA.Modulus=LngKeyN 7 I: S5 ]3 U2 ?6 h& O& }
decryptstr=ObjRSA.Decode(StrMessage)
Set ObjRSA = Nothing
end function
%>0 H1 n$ f  T0 ?9 ?8 H" j
===============================================

还有一个用于测试这段代码的test.asp' t. c% O1 g) T% W* W' F( W
有兴趣的自己搭建个IIS测试下7 v  W& p0 U/ U; I1 c
 2 ^4 N* l0 _5 k. Q
<%
function Encryptstr(Message) 4 B0 p$ I) V/ f* Z3 u% u3 o  _' O4 T
Dim LngKeyE % s+ i  m; Y1 T, A
Dim LngKeyD ' F- f, i1 a1 i: |
Dim LngKeyN # P& V! h0 z1 Z: F
Dim StrMessage - f' E/ v. Y, H6 L2 V0 u# c
Dim ObjRSA
LngKeyE = "32823"
LngKeyD = "20643" ) w, L$ D* I2 W  w+ {( m9 ?/ H* T6 z5 C; C4 f
LngKeyN = "29893"
StrMessage = Message " w) N4 Z) T1 P' ]: X5 k9 t8 G0 ~; U
Set ObjRSA = New clsRSA
ObjRSA.PublicKey = LngKeyE
ObjRSA.Modulus = LngKeyN ! S( g& C9 `3 f) a5 G6 u7 f  h
Encryptstr = ObjRSA.Encode(StrMessage) / n% i& _- t) Q, {! O3 k: o) x
Set ObjRSA = Nothing - D+ d% {5 F+ ]5 d9 g6 k$ i, R
end function
function decryptstr(Message)
Dim LngKeyE ) M4 i$ g. ^0 j6 }" R
Dim LngKeyD & V+ e8 |# K. A7 _% m9 g
Dim LngKeyN % n8 q. D! J3 {3 p2 ^# E/ M" O
Dim StrMessage
Dim ObjRSA 6 G: [& u$ r0 [+ ~1 N! Q
LngKeyE = "32823"
LngKeyD = "20643"
LngKeyN = "29893"
StrMessage = Message
Set ObjRSA = New clsRSA % \( D% A/ Q) D7 A: q; n
ObjRSA.PrivateKey =LngKeyD
ObjRSA.Modulus=LngKeyN 8 H. x. o" [" n( r9 R
decryptstr=ObjRSA.Decode(StrMessage)
Set ObjRSA = Nothing 0 [+ K% v' z( _4 ~
end function ' T5 ~" H; I6 ~) V3 o& Z
dim last,first , W. A  W. W1 o
first="!@#$%^&*()" 9 \8 i9 c6 a# ?4 I5 ^
Response.Write "加密前为:"&first
last=Encryptstr(first) , J6 I1 ^! z! S" W) c. T
Response.Write "加密后为"&last 9 A  w6 Z! ~& l4 J2 O
Response.Write "解密后为" &decryptstr(last)   U' o! @; Q5 R% C
%> ==============================================
剩下的就是字符的对照表了& K( J  B9 q* E0 h0 D7 M/ K
===================字符集================
1_____6EBB
2_____5C1F" [6 S% x* K* C) `% A; F
3_____4D75
4_____26CC
5_____4F88
6_____3F4E  |$ X& f5 N4 i) `$ H$ i
7_____0A9D2 @  j; c* y1 z7 h  v
8_____1A1C
9_____6D209 V5 D! p/ f( I8 W5 T& y7 a
0_____1089, j& Z. J1 s0 Z" H
a_____0F3E
b_____3159; @- f" l- l' F- o0 u7 N
c_____35170 y2 @2 m+ c# Z' \
d_____419C
e_____615C
f_____556F% v& u0 g+ d3 D, ^+ V0 f/ S3 J
g_____2B7F: w5 `- |9 z; a& q4 ~# M
h_____0F9C8 e2 K% s7 e7 Q" @( w
i_____00FA% U- S3 ?% Q2 I& F/ a
j_____5A50
k_____28506 `' `- R7 h2 r, R3 D, n$ C
l_____3E7B
m_____71C5- A2 p+ @6 v0 D' U
n_____1FC8: k' R2 t$ Y) ^4 y7 _5 [+ N: t# o
o_____74C16 r* [% K4 u, D5 A, Y7 Y3 j% C
p_____5FB87 I' t. |2 h- U! X" i
q_____6085
r_____3AC4
s_____2F50
t_____36F8
u_____7010+ Y- {* o. f- g( E9 M$ }" T7 k
v_____0B424 W7 h5 D! P* a
w_____1C7A
x_____16F8
y_____2EE79 V6 s; s: N6 b* `! F
z_____5CF3
!_____6233
@_____3A45
#_____2291) C% L8 a% ]! g2 E9 a
$_____5D5C
%_____09B9# _- Y. E+ A. m+ @/ C
^_____43EA
&_____62B9
*_____6301
(_____46596 m( ]' m4 u8 t4 t: l" T+ {! D% ]" q
)_____5C82

作者: 鱼儿无心 时间: 2011-12-4 17:17

收藏了。。。。。。。。

欢迎光临【3.A.S.T】网络安全爱好者 (http://www.3ast.com/)