fixes #546: added -m 23300 = Apple iWork cracking

tools/test_modules/m23300.pm

@@ -0,0 +1,148 @@
+#!/usr/bin/env perl
+
+##
+## Author......: See docs/credits.txt
+## License.....: MIT
+##
+
+use strict;
+use warnings;
+
+use Digest::SHA qw (sha256);
+use Crypt::PBKDF2;
+use Crypt::CBC;
+
+sub module_constraints { [[0, 256], [32, 32], [-1, -1], [-1, -1], [-1, -1]] }
+
+sub module_generate_hash
+{
+  my $word     = shift;
+  my $salt     = shift;
+  my $hash_ver = shift;
+  my $file_ver = shift;
+  my $iter     = shift;
+  my $iv       = shift;
+  my $data     = shift;
+
+  my $FORMAT = 1;
+
+  my $is_decrypt = defined ($data);
+
+  if ($is_decrypt == 0)
+  {
+    my $type = random_number (1, 2);
+
+    if ($type == 1)
+    {
+      $hash_ver = 1;
+      $file_ver = 2;
+
+      $iter = 100000;
+      $salt = substr ($salt, 0, 32); # full one
+    }
+    else
+    {
+      $hash_ver = 2;
+      $file_ver = 1;
+
+      $iter = 4000;
+      $salt = substr ($salt, 0, 16);
+    }
+
+    $salt = pack ("H*", $salt);
+
+    $iv   = random_bytes (16);
+    $data = random_bytes (32);
+
+    $data .= sha256 ($data);
+  }
+
+  my $pbkdf2 = Crypt::PBKDF2->new
+  (
+    hasher     => Crypt::PBKDF2->hasher_from_algorithm ('HMACSHA1'),
+    iterations => $iter,
+    output_len => 16,
+  );
+
+  my $key = $pbkdf2->PBKDF2 ($salt, $word);
+
+  # AES-CBC
+
+  my $cipher = Crypt::CBC->new ({
+    cipher      => "Crypt::Rijndael",
+    key         => $key,
+    iv          => $iv,
+    keysize     => 16,
+    literal_key => 1,
+    header      => "none",
+    padding     => "null"
+  });
+
+  if ($is_decrypt == 1)
+  {
+    my $hash_data = $data;
+
+    $data = "WRONG";
+
+    my $decrypted = $cipher->decrypt ($hash_data);
+
+    my $raw_data = substr ($decrypted,  0, 32);
+    my $checksum = substr ($decrypted, 32, 32);
+
+    my $sha256_of_data = sha256 ($raw_data);
+
+    if ($sha256_of_data eq $checksum)
+    {
+      $data = $decrypted;
+    }
+  }
+
+  my $encrypted = $cipher->encrypt ($data);
+
+  my $hash = sprintf ("\$iwork\$%i\$%i\$%i\$%i\$%s\$%s\$%s", $hash_ver, $file_ver, $FORMAT, $iter, unpack ("H*", $salt), unpack ("H*", $iv), unpack ("H*", $encrypted));
+
+  return $hash;
+}
+
+sub module_verify_hash
+{
+  my $line = shift;
+
+  my $idx = index ($line, ':');
+
+  return unless $idx >= 0;
+
+  my $hash = substr ($line, 0, $idx);
+  my $word = substr ($line, $idx + 1);
+
+  return unless substr ($hash, 0, 7) eq '$iwork$';
+
+  my (undef, undef, $hash_ver, $file_ver, $format, $iter, $salt, $iv, $data) = split '\$', $hash;
+
+  next unless (defined ($hash_ver));
+  next unless (defined ($file_ver));
+  next unless (defined ($format));
+  next unless (defined ($iter));
+  next unless (defined ($salt));
+  next unless (defined ($iv));
+  next unless (defined ($data));
+
+  next unless (($hash_ver eq '1') or ($hash_ver eq '2'));
+  next unless (($file_ver eq '1') or ($file_ver eq '2'));
+
+  next unless ($format eq '1');
+
+  $salt = pack ("H*", $salt);
+  $iv   = pack ("H*", $iv);
+  $data = pack ("H*", $data);
+
+  $iter = int ($iter);
+
+  my $word_packed = pack_if_HEX_notation ($word);
+
+  my $new_hash = module_generate_hash ($word_packed, $salt, $hash_ver, $file_ver, $iter, $iv, $data);
+
+  return ($new_hash, $word);
+}
+
+1;