Added hash-mode: VMware VMX (PBKDF2-HMAC-SHA1 + AES-256-CBC)

2021-07-14 19:31:21 +02:00
parent 11295e4679
commit 50aeaa299d
6 changed files with 806 additions and 0 deletions
@@ -0,0 +1,104 @@
+#!/usr/bin/env perl
+
+##
+## Author......: See docs/credits.txt
+## License.....: MIT
+##
+
+use strict;
+use warnings;
+
+use Crypt::PBKDF2;
+use Crypt::CBC;
+use Crypt::Mode::CBC;
+
+sub module_constraints { [[0, 256], [32, 32], [-1, -1], [-1, -1], [-1, -1]] }
+
+sub module_generate_hash
+{
+  my $word = shift;
+  my $salt_str = shift // random_hex_string (32);
+  my $ct_str = shift;
+
+  my $iv_str = "";
+
+  if (defined $ct_str)
+  {
+    $iv_str = substr($ct_str, 0, 32);
+  }
+  else
+  {
+    $iv_str = random_hex_string (32);
+  }
+
+  my $salt = pack ("H*", $salt_str);
+
+  my $iv = pack ("H*", $iv_str);
+
+  my $iterations = 10000;
+
+  my $hasher = Crypt::PBKDF2->hasher_from_algorithm ('HMACSHA1');
+
+  my $pbkdf2 = Crypt::PBKDF2->new (
+    hasher       => $hasher,
+    iterations   => $iterations,
+    output_len   => 32
+  );
+
+  my $key = $pbkdf2->PBKDF2 ($salt, $word);
+
+  my $cipher = Crypt::CBC->new ({
+    key         => $key,
+    cipher      => "Crypt::Rijndael",
+    iv          => $iv,
+    literal_key => 1,
+    header      => "none",
+    keysize     => 32
+  });
+
+  my $hash = "";
+
+  if (defined $ct_str)
+  {
+    my $ct_bin = pack ("H*", $ct_str);
+    my $iv_bin = substr ($ct_bin, 0, 16);
+    my $encrypted = substr ($ct_bin, 16);
+
+    $hash = sprintf ("\$vmx\$0\$%s\$%s\$%s%s", $iterations, unpack ("H*", $salt), unpack ("H*", $iv_bin), unpack ("H*", $encrypted));
+  }
+  else
+  {
+    my $data = 'type=key:cipher=';
+
+    my $encrypted = unpack ("H*", $cipher->encrypt ($data));
+
+    $hash = sprintf ("\$vmx\$0\$%s\$%s\$%s%s", $iterations, unpack ("H*", $salt), unpack ("H*", $iv), $encrypted);
+  }
+
+  return $hash;
+}
+
+sub module_verify_hash
+{
+  my $line = shift;
+
+  my ($hash, $word) = split (':', $line);
+
+  return unless defined $hash;
+  return unless defined $word;
+
+  my (undef, $signature, $version, $rounds, $salt, $ct) = split '\$', $hash;
+
+  return unless ($signature eq "vmx");
+  return unless ($version eq 0);
+  return unless ($rounds eq 10000);
+  return unless (length $ct lt 32);
+
+  my $word_packed = pack_if_HEX_notation ($word);
+
+  my $new_hash = module_generate_hash ($word_packed, $salt, $ct);
+
+  return ($new_hash, $word);
+}
+
+1;