a k#dC @sdZddlmZzddlmZWney>ddlmZYn0ddlZddlZddl Z ddl Z ddl m Z m Z ddlmZmZddlmZddlmZdd lmZmZmZmZmZmZmZmZmZdd lm Z m!Z!m"Z"dd l#m$Z$m%Z%ddl&m'm(Z(dd l)m*Z*m+Z+m,Z,m-Z-Gd dde Z.e!e$e.ej/de!e*e.ej/de!e.e$ej0de!e.e*ej1dGddde Z2e!e$e2ej3de!e*e2ej3de!e%e2dde!e%e2ddGddde Z4e j5rddl6m7Z7ddl8m9Z9ddl:m;Z;mZ>ne?ddZ9e@Z7dZ<Z=Z>ddZAGdddeBZCd eCd dddd!iZDe=reCd"e=jEe>jFd#eDd"<d$d%ZGeCd&e=jEe>jHd'd(d)eGd*eDd&<d+d%ZIeCd,e;jJd-dd)d'd(d.eId/ eDd,<eCd0e;jKdd-d'd(d1d.eId2 eDd0<eCd3e;jLdd4d'd(d)d.eId2 eDd3<eCd5e=jMe>jFd6d7eDd5<eCd8e=jMe>jFd#eDd8<ztdd9lNmOZOe PJe jQd:eOd;eCdjFd#eDd<<eCd=e=jSe>jFd#eDd=<Wdn1s0YWneTyYn0e j5rdd>lUmVZVdd?lWmXZXdd@lYmZZZn dZVZXZZGdAdBdBe@Z[GdCdDdDeBZ\d e\d ddddEiZ]eVreZre\dFeVeZj^dGdEe]dF<e\dHeVeZj_d.dEe]dH<e\dIeVeZj`dJdEe]dI<e\dKeVeZjad4dEe]dK<e\dLeVeZjbdGdEe]dL<eXre=re\dMeXe=jEdGdNdOe]dM<dPdQZcdRZddXdTdUZeGdVdWdWeBZfdS)Ya IPsec layer =========== Example of use: >>> sa = SecurityAssociation(ESP, spi=0xdeadbeef, crypt_algo='AES-CBC', ... crypt_key=b'sixteenbytes key') >>> p = IP(src='1.1.1.1', dst='2.2.2.2') >>> p /= TCP(sport=45012, dport=80) >>> p /= Raw('testdata') >>> p = IP(raw(p)) >>> p >> # noqa: E501 >>> >>> e = sa.encrypt(p) >>> e > # noqa: E501 >>> >>> d = sa.decrypt(e) >>> d >> # noqa: E501 >>> >>> d == p True )absolute_import)gcdN)confcrypto_validator)orbraw) IP_PROTOS) log_loading) ByteEnumField ByteFieldIntField PacketField ShortFieldStrField XIntField XStrField XStrLenField)Packet bind_layersRaw)IPUDP)IPv6IPv6ExtHdrHopByHopIPv6ExtHdrDestOptIPv6ExtHdrRoutingc @seZdZdZdZddZeddeedde dde dd e d d e d ded e ddddd gZ edejiedejiedejiedejiedejiiZdS)AHzO Authentication Header See https://tools.ietf.org/rfc/rfc4302.txt cCs|jddS)z Compute the size of the ICV based on the payloadlen field. Padding size is included as it can only be known from the authentication # noqa: E501 algorithm provided by the Security Association. ) payloadlenselfr"I/var/www/html/gsl.tools/lib/python3.9/site-packages/scapy/layers/ipsec.pyZ __get_icv_lenBs zAH.__get_icv_lennhNrreservedspirseqricv)Z length_frompaddingcCsdS)Nrr")xr"r"r#Uz AH.proto)__name__ __module__ __qualname____doc__nameZ_AH__get_icv_lenr rr rrr r fields_descrsocket IPPROTO_AHrrrroverload_fieldsr"r"r"r#r9s"       r)r-)r$c @sfeZdZdZdZeddeddeddgZe de j ie d e j ie d e j ied e j ied e j iiZdS) ESPzW Encapsulated Security Payload See https://tools.ietf.org/rfc/rfc4303.txt r&rr'rdataNr-r$)r.r/r0r1r2rr rr3rr4 IPPROTO_ESPrrrrr6r"r"r"r#r7is     r7i)dport)Zsportc @sdeZdZdZdZeddeddeddedde ed de d de d de ed dgZ d dZdS) _ESPPlainz> Internal class to represent unencrypted ESP packets. r7r&rr'ivr8r)padlenr$r(cCs"t|j|jtd|j|jS)NBB)rr8r)structpackr>r$r r"r"r#data_for_encryptionsz_ESPPlain.data_for_encryptionN)r.r/r0r1r2rr rr rr r rr3rBr"r"r"r#r;s   r;) InvalidTag)default_backend)aeadCipher algorithmsmodeszQCan't import python-cryptography v1.7+. Disabled IPsec encryption/authentication.cCs.|dks|dkrdSt||t||SdS)z3 Least Common Multiple between 2 integers. rN)absr)abr"r"r#_lcmsrLc@sTeZdZdZdddZddZddZedd d Zd d Z dddZ dddZ dS) CryptAlgoz$ IPsec encryption algorithm Nc Cs||_||_||_||_d|_d|_trf|jdurDt|jtj|_n"|jt j t j t j fvrfd|_d|_|durv||_ n|dur|j d|_ nd|_ |dur|j |_n||_|dur||_n&|durtdd|jD|_nd|_|durd|_n||_| dur d d |_n| |_dS) a :param name: the name of this encryption algorithm :param cipher: a Cipher module :param mode: the mode used with the cipher module :param block_size: the length a block for this algo. Defaults to the `block_size` of the cipher. :param iv_size: the length of the initialization vector of this algo. Defaults to the `block_size` of the cipher. :param key_size: an integer or list/tuple of integers. If specified, force the secret keys length to one of the values. Defaults to the `key_size` of the cipher. :param icv_size: the length of the Integrity Check Value of this algo. Used by Combined Mode Algorithms e.g. GCM :param salt_size: the length of the salt to use as the IV prefix. Usually used by Counter modes e.g. CTR :param format_mode_iv: function to format the Initialization Vector e.g. handle the salt value Default is the random buffer from `generate_iv` FNTrcss|]}|dVqdS)rNNr").0ir"r"r# r,z%CryptAlgo.__init__..rc[s|SNr")r<kwr"r"r#r+r,z$CryptAlgo.__init__..)r2ciphermodeicv_sizeis_aeadciphers_aead_apirH issubclassZModeWithAuthenticationTagrEAESGCMAESCCMChaCha20Poly1305 block_sizeiv_sizekey_sizetupleZ key_sizes salt_size_format_mode_iv) r!r2rTrUr]r^r_rVraformat_mode_ivr"r"r#__init__sF     zCryptAlgo.__init__cCs<|jr8t||jks8t||jvs8tdt||jfdS)[ Check that the key length is valid. :param key: a byte string zinvalid key size %s, must be %sNr_len TypeErrorr!keyr"r"r# check_keys" zCryptAlgo.check_keycCs t|jS)z: Generate a random initialization vector. )osurandomr^r r"r"r# generate_ivszCryptAlgo.generate_ivcCsN|jr0|dur0t|||||t|tSt||||tSdS)a :param key: the secret key, a byte string :param mode_iv: the initialization vector or nonce, a byte string. Formatted by `format_mode_iv`. :param digest: also known as tag or icv. A byte string containing the digest of the encrypted data. Only use this during decryption! :returns: an initialized cipher object for this algo N)rWrFrTrUrgrD)r!rjmode_ivdigestr"r"r# new_ciphers zCryptAlgo.new_ciphercCst|jd}t|jd}| ||_tjd|jgtd|jdR|_t|j t|jt|jd}|ddkrt d|S)ai Add the correct amount of padding so that the data to encrypt is exactly a multiple of the algorithm's block size. Also, make sure that the total ESP packet length is a multiple of 4 bytes. :param esp: an unencrypted _ESPPlain packet :returns: an unencrypted _ESPPlain packet with valid padding rBrrzAThe size of the ESP data is not aligned to 32 bits after padding.) rgr8rLr]r>r@rAranger)r< ValueError)r!espdata_lenalignZ payload_lenr"r"r#pad2s   &" z CryptAlgo.padFrc Cs |dur|jr|jnd}|}|jr|j|||jd}d} |jrp|r^td|j||j } ntd|j|j } |j r|jt j kr|j||d} n ||} | ||| }n\|||} | } |jr| | | || }|| jd|7}n| || }t|j|j |j|dS)ar Encrypt an ESP packet :param sa: the SecurityAssociation associated with the ESP packet. :param esp: an unencrypted _ESPPlain packet with valid padding :param key: the secret key used for encryption :param icv_size: the length of the icv used for integrity check :esn_en: extended sequence number enable which allows to use 64-bit sequence number instead of 32-bit when using an AEAD algorithm :esn: extended sequence number (32 MSB) :return: a valid ESP packet encrypted with this algorithm Nr)algosar<!LLL!LLZ tag_length)r&r'r8)rWrVrBrTrbr<r@rAr&r'rXrEr[encryptrq encryptorauthenticate_additional_dataupdatefinalizetagr7) r!r{rvrjrVesn_enesnr8roaadrTrr"r"r#rUs.    zCryptAlgo.encryptc Cs|dur|jr|jnd}|jd|j}|j|jt|j|}|jt|j|d} |jr|j||d} d} |jr|rtd|j ||j } ntd|j |j } |j r|jt j kr|j||d} n ||} z| | || | }Wn.ty} zt| WYd} ~ n d} ~ 00nn||| | } | }|jrD|| z|||}Wn.ty} zt| WYd} ~ n d} ~ 00t|d}t|d}|dt||d }|t||d t|d }t|j |j |||||| d S) a Decrypt an ESP packet :param sa: the SecurityAssociation associated with the ESP packet. :param esp: an encrypted ESP packet :param key: the secret key used for encryption :param icv_size: the length of the icv used for integrity check :param esn_en: extended sequence number enable which allows to use 64-bit sequence number instead of 32-bit when using an AEAD algorithm :param esn: extended sequence number (32 MSB) :returns: a valid ESP packet encrypted with this algorithm :raise scapy.layers.ipsec.IPSecIntegrityError: if the integrity check fails with an AEAD algorithm Nr)r{r<r|r}r~rr)r&r'r<r8r)r>r$r()rWrVr8r^rgrTrbr@rAr&r'rXrEr[decryptrCIPSecIntegrityErrorrq decryptorrrrrr;)r!r{rvrjrVrrr<r8r(rorrTerrrr>r$r)r"r"r#rsR       zCryptAlgo.decrypt)NNNNNN)N)NFr)NFr) r.r/r0r1rdrkrnrrqryrrr"r"r"r#rMs D  # .rMNULL)rTrUr^zAES-CBC)rTrUcKs|j|dS)Ns crypt_saltr{r<rSr"r"r#r+r,r+zAES-CTRrrNr)rTrUr]r^rarccKs |j|SrRrrr"r"r#r+r,zAES-GCM) r)rTr_rUrar]r^rVrczAES-CCM)rTrUr_r]r^rarVrczCHACHA20-POLY1305rZDES)rN)rTrUr_Z3DES)CryptographyDeprecationWarningignore)categoryZCASTBlowfish)HMAC)CMAC)hashesc@seZdZdZdS)rz5 Error risen when the integrity check fails. N)r.r/r0r1r"r"r"r#r%src@sBeZdZdZdddZddZeddZdd d Zdd dZ dS)AuthAlgoz# IPsec integrity algorithm NcCs"||_||_||_||_||_dS)a :param name: the name of this integrity algorithm :param mac: a Message Authentication Code module :param digestmod: a Hash or Cipher module :param icv_size: the length of the integrity check value of this algo :param key_size: an integer or list/tuple of integers. If specified, force the secret keys length to one of the values. Defaults to the `key_size` of the cipher. N)r2mac digestmodrVr_)r!r2rrrVr_r"r"r#rd1s zAuthAlgo.__init__cCs.|jr*t||jvr*tdt||jfdS)rez&invalid key size %s, must be one of %sNrfrir"r"r#rkAs zAuthAlgo.check_keycCs6|jtur|||tS|||tSdS)zn :param key: a byte string :returns: an initialized mac object for this algo N)rrrrDrir"r"r#new_macKs zAuthAlgo.new_macFrcCs|js |S||}|trR|t|t|tj|d|j7_n^|t rt | dd}|rt|t d|}nt|}|||d|j|t _|S)a Sign an IPsec (ESP or AH) packet with this algo. :param pkt: a packet that contains a valid encrypted ESP or AH layer :param key: the authentication key, a byte string :param esn_en: extended sequence number enable which allows to use 64-bit sequence number instead of 32-bit :param esn: extended sequence number (32 MSB) :returns: the signed packet NTsending!L)rrhaslayerr7rrr8rrVrzero_mutable_fieldscopyr@rAr()r!pktrjrrrclonetempr"r"r#signVs   "  z AuthAlgo.signc Cs>|jr|jdkrdS||}d}t|trt|jt|j|jd}|}|jdt|j|j|_t|}n| t rt|t j |jkr|t j |jd|t _ |t j d|j|t _ |t j }t |dd}|rt|td|}nt|}|||d|j} || kr:td|| fdS)a Check that the integrity check value (icv) of a packet is valid. :param pkt: a packet that contains a valid encrypted ESP or AH layer :param key: the authentication key, a byte string :param esn_en: extended sequence number enable which allows to use 64-bit sequence number instead of 32-bit :param esn: extended sequence number (32 MSB) :raise scapy.layers.ipsec.IPSecIntegrityError: if the integrity check fails rNz not foundFrrzpkt_icv=%r, computed_icv=%r)rrVr isinstancer7r8rgrrrrr(r)rr@rArrr) r!rrjrrrZpkt_icvrrZ computed_icvr"r"r#verifyvs0        zAuthAlgo.verify)N)Fr)Fr) r.r/r0r1rdrkrrrrr"r"r"r#r,s   r)rrrVz HMAC-SHA1-96 z SHA2-256-128z SHA2-384-192rz SHA2-512-256z HMAC-MD5-96z AES-CMAC-96)r)rrrVr_cCs|t|}|j}d}|jdkrH|j}||_||`|`|||fSd}|}t|t t t frt|t rjt|t rzd}nt|t r|rq|}|j}qP|j }||_ ||` |||fSdS)a Split an IP(v6) packet in the correct location to insert an ESP or AH header. :param orig_pkt: the packet to split. Must be an IP or IPv6 packet :param transport_proto: the IPsec protocol number that will be inserted at the split position. :returns: a tuple (header, nh, payload) where nh is the protocol number of payload. NrFT) __class__rpayloadversionr-remove_payloadchksumrgrrrrr$plen)Zorig_pktZtransport_protoheadernext_hdrr$Z found_rt_hdrprevr"r"r#split_for_transports2     r)rrrrFcCs@|tr$dt|tj|t_ntd|jdkrd|_d|_d|_d|_ g}|j D]0}|j t vrr| |qX| tdt|qX||_ nd|_d|_d|_|j}t|tttfr|j|||||dS|j||||dSdS)a Encrypt (and encapsulate) an IP(v6) packet with ESP or AH according to this SecurityAssociation. :param pkt: the packet to encrypt :param seq_num: if specified, use this sequence number instead of the generated one :param esn_en: extended sequence number enable which allows to use 64-bit sequence number instead of 32-bit when using an AEAD algorithm :param esn: extended sequence number (32 MSB) :param iv: if specified, use this initialization vector for encryption instead of a random one. :returns: the encrypted/encapsulated packet z*cannot encrypt %s, supported protos are %s)rr<rr)rrrN)rSUPPORTED_PROTOSrhrr-r7rr)r!rrr<rrr"r"r#rs   zSecurityAssociation.encryptTc Cs,|t}|r&|||j||j|jj|||j|jpH|jj pH|jj |pP|j |pX|j d}|j r| |jdkr|j|_n|j|_||j}||jS|}|jdkr|j|_|`| t|t|j|_|t|}n*|j|j_|j t|jt|j|_||j}|||jSdSNrr)r7rrrrrrrrrVrrrrrr$r-Zguess_payload_classr8rrgrr underlayerrr) r!rrrrZ encryptedrvclsrr"r"r# _decrypt_esp9s>         z SecurityAssociation._decrypt_espcCs|r0|||jj||j|p"|j|p*|jd|t}|j}|d|j rR|S|}|j dkr|j |_ |` |t|t||_|t|}n(|j |j_ |jt|jt||_||SdSr)rrrrrrrrZremove_underlayerrrr$r-rrrgrrrr)r!rrrrrrrr"r"r# _decrypt_ahgs,      zSecurityAssociation._decrypt_ahcCst||js td|j|jf|jturF|trF|j||||dS|jturl|trl|j ||||dStd||jj fdS)aY Decrypt (and decapsulate) an IP(v6) packet containing ESP or AH. :param pkt: the packet to decrypt :param verify: if False, do not perform the integrity check :param esn_en: extended sequence number enable which allows to use 64-bit sequence number instead of 32-bit when using an AEAD algorithm :param esn: extended sequence number (32 MSB) :returns: the decrypted/decapsulated packet :raise scapy.layers.ipsec.IPSecIntegrityError: if the integrity check fails z*cannot decrypt %s, supported protos are %s)rrrz%s has no %s layerN) rrrhrr-r7rrrrr2)r!rrrrr"r"r#rs  zSecurityAssociation.decrypt) rNNNNNNNFr)NNNN)NFr)NNNN)TNN)TNN)TNN)r.r/r0r1rrrrdrrrrrrrr"r"r"r#rTs N : 5  . r)F)gr1 __future__rmathr ImportError fractionsrlr4r@warningsZ scapy.configrrZ scapy.compatrrZ scapy.datarZ scapy.errorr Z scapy.fieldsr r r r rrrrrZ scapy.packetrrrZscapy.layers.inetrrZscapy.libs.sixZlibsrZscapy.layers.inet6rrrrrr5 IPPROTO_IP IPPROTO_IPV6r7r9r;Z crypto_validZcryptography.exceptionsrCZcryptography.hazmat.backendsrDZ&cryptography.hazmat.primitives.ciphersrErFrGrHinfo ExceptionrLobjectrMrZAESZCBCZ_aes_ctr_format_mode_ivZCTRZ_salt_format_mode_ivrZr[r\Z TripleDESZcryptography.utilsrcatch_warningsfilterwarningsZCAST5rAttributeErrorZ#cryptography.hazmat.primitives.hmacrZ#cryptography.hazmat.primitives.cmacrZcryptography.hazmat.primitivesrrrrSHA1SHA256SHA384SHA512MD5rrrrr"r"r"r#s>    ,(               .   ~        3 H