You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
87 lines
2.3 KiB
87 lines
2.3 KiB
//go:build windows
|
|
|
|
package crypto
|
|
|
|
import (
|
|
"crypto/aes"
|
|
"crypto/cipher"
|
|
"syscall"
|
|
"unsafe"
|
|
)
|
|
|
|
func DecryptPass(key, encryptPass []byte) ([]byte, error) {
|
|
if len(encryptPass) < 15 {
|
|
return nil, errPasswordIsEmpty
|
|
}
|
|
|
|
return aesGCMDecrypt(encryptPass[15:], key, encryptPass[3:15])
|
|
}
|
|
|
|
func DecryptPassForYandex(key, encryptPass []byte) ([]byte, error) {
|
|
if len(encryptPass) < 3 {
|
|
return nil, errPasswordIsEmpty
|
|
}
|
|
// remove Prefix 'v10'
|
|
// gcmBlockSize = 16
|
|
// gcmTagSize = 16
|
|
// gcmMinimumTagSize = 12 // NIST SP 800-38D recommends tags with 12 or more bytes.
|
|
// gcmStandardNonceSize = 12
|
|
return aesGCMDecrypt(encryptPass[12:], key, encryptPass[0:12])
|
|
}
|
|
|
|
// chromium > 80 https://source.chromium.org/chromium/chromium/src/+/master:components/os_crypt/os_crypt_win.cc
|
|
func aesGCMDecrypt(crypted, key, nounce []byte) ([]byte, error) {
|
|
block, err := aes.NewCipher(key)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
blockMode, err := cipher.NewGCM(block)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
origData, err := blockMode.Open(nil, nounce, crypted, nil)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return origData, nil
|
|
}
|
|
|
|
type dataBlob struct {
|
|
cbData uint32
|
|
pbData *byte
|
|
}
|
|
|
|
func newBlob(d []byte) *dataBlob {
|
|
if len(d) == 0 {
|
|
return &dataBlob{}
|
|
}
|
|
return &dataBlob{
|
|
pbData: &d[0],
|
|
cbData: uint32(len(d)),
|
|
}
|
|
}
|
|
|
|
func (b *dataBlob) ToByteArray() []byte {
|
|
d := make([]byte, b.cbData)
|
|
copy(d, (*[1 << 30]byte)(unsafe.Pointer(b.pbData))[:])
|
|
return d
|
|
}
|
|
|
|
// DPAPI (Data Protection Application Programming Interface)
|
|
// is a simple cryptographic application programming interface
|
|
// available as a built-in component in Windows 2000 and
|
|
// later versions of Microsoft Windows operating systems
|
|
// chrome < 80 https://chromium.googlesource.com/chromium/src/+/76f496a7235c3432983421402951d73905c8be96/components/os_crypt/os_crypt_win.cc#82
|
|
func DPAPI(data []byte) ([]byte, error) {
|
|
dllCrypt := syscall.NewLazyDLL("Crypt32.dll")
|
|
dllKernel := syscall.NewLazyDLL("Kernel32.dll")
|
|
procDecryptData := dllCrypt.NewProc("CryptUnprotectData")
|
|
procLocalFree := dllKernel.NewProc("LocalFree")
|
|
var outBlob dataBlob
|
|
r, _, err := procDecryptData.Call(uintptr(unsafe.Pointer(newBlob(data))), 0, 0, 0, 0, 0, uintptr(unsafe.Pointer(&outBlob)))
|
|
if r == 0 {
|
|
return nil, err
|
|
}
|
|
defer procLocalFree.Call(uintptr(unsafe.Pointer(outBlob.pbData)))
|
|
return outBlob.ToByteArray(), nil
|
|
}
|
|
|