import os import random from secret import secret assert len(secret)==32 key = secret[16:] iv = secret[:16] msg = b"the quick brown fox jumps over the lazy dog" S0 = [ 0x3E, 0x72, 0x5B, 0x47, 0xCA, 0xE0, 0x00, 0x33, 0x04, 0xD1, 0x54, 0x98, 0x09, 0xB9, 0x6D, 0xCB, 0x7B, 0x1B, 0xF9, 0x32, 0xAF, 0x9D, 0x6A, 0xA5, 0xB8, 0x2D, 0xFC, 0x1D, 0x08, 0x53, 0x03, 0x90, 0x4D, 0x4E, 0x84, 0x99, 0xE4, 0xCE, 0xD9, 0x91, 0xDD, 0xB6, 0x85, 0x48, 0x8B, 0x29, 0x6E, 0xAC, 0xCD, 0xC1, 0xF8, 0x1E, 0x73, 0x43, 0x69, 0xC6, 0xB5, 0xBD, 0xFD, 0x39, 0x63, 0x20, 0xD4, 0x38, 0x76, 0x7D, 0xB2, 0xA7, 0xCF, 0xED, 0x57, 0xC5, 0xF3, 0x2C, 0xBB, 0x14, 0x21, 0x06, 0x55, 0x9B, 0xE3, 0xEF, 0x5E, 0x31, 0x4F, 0x7F, 0x5A, 0xA4, 0x0D, 0x82, 0x51, 0x49, 0x5F, 0xBA, 0x58, 0x1C, 0x4A, 0x16, 0xD5, 0x17, 0xA8, 0x92, 0x24, 0x1F, 0x8C, 0xFF, 0xD8, 0xAE, 0x2E, 0x01, 0xD3, 0xAD, 0x3B, 0x4B, 0xDA, 0x46, 0xEB, 0xC9, 0xDE, 0x9A, 0x8F, 0x87, 0xD7, 0x3A, 0x80, 0x6F, 0x2F, 0xC8, 0xB1, 0xB4, 0x37, 0xF7, 0x0A, 0x22, 0x13, 0x28, 0x7C, 0xCC, 0x3C, 0x89, 0xC7, 0xC3, 0x96, 0x56, 0x07, 0xBF, 0x7E, 0xF0, 0x0B, 0x2B, 0x97, 0x52, 0x35, 0x41, 0x79, 0x61, 0xA6, 0x4C, 0x10, 0xFE, 0xBC, 0x26, 0x95, 0x88, 0x8A, 0xB0, 0xA3, 0xFB, 0xC0, 0x18, 0x94, 0xF2, 0xE1, 0xE5, 0xE9, 0x5D, 0xD0, 0xDC, 0x11, 0x66, 0x64, 0x5C, 0xEC, 0x59, 0x42, 0x75, 0x12, 0xF5, 0x74, 0x9C, 0xAA, 0x23, 0x0E, 0x86, 0xAB, 0xBE, 0x2A, 0x02, 0xE7, 0x67, 0xE6, 0x44, 0xA2, 0x6C, 0xC2, 0x93, 0x9F, 0xF1, 0xF6, 0xFA, 0x36, 0xD2, 0x50, 0x68, 0x9E, 0x62, 0x71, 0x15, 0x3D, 0xD6, 0x40, 0xC4, 0xE2, 0x0F, 0x8E, 0x83, 0x77, 0x6B, 0x25, 0x05, 0x3F, 0x0C, 0x30, 0xEA, 0x70, 0xB7, 0xA1, 0xE8, 0xA9, 0x65, 0x8D, 0x27, 0x1A, 0xDB, 0x81, 0xB3, 0xA0, 0xF4, 0x45, 0x7A, 0x19, 0xDF, 0xEE, 0x78, 0x34, 0x60 ] S1 = [ 0x55, 0xC2, 0x63, 0x71, 0x3B, 0xC8, 0x47, 0x86, 0x9F, 0x3C, 0xDA, 0x5B, 0x29, 0xAA, 0xFD, 0x77, 0x8C, 0xC5, 0x94, 0x0C, 0xA6, 0x1A, 0x13, 0x00, 0xE3, 0xA8, 0x16, 0x72, 0x40, 0xF9, 0xF8, 0x42, 0x44, 0x26, 0x68, 0x96, 0x81, 0xD9, 0x45, 0x3E, 0x10, 0x76, 0xC6, 0xA7, 0x8B, 0x39, 0x43, 0xE1, 0x3A, 0xB5, 0x56, 0x2A, 0xC0, 0x6D, 0xB3, 0x05, 0x22, 0x66, 0xBF, 0xDC, 0x0B, 0xFA, 0x62, 0x48, 0xDD, 0x20, 0x11, 0x06, 0x36, 0xC9, 0xC1, 0xCF, 0xF6, 0x27, 0x52, 0xBB, 0x69, 0xF5, 0xD4, 0x87, 0x7F, 0x84, 0x4C, 0xD2, 0x9C, 0x57, 0xA4, 0xBC, 0x4F, 0x9A, 0xDF, 0xFE, 0xD6, 0x8D, 0x7A, 0xEB, 0x2B, 0x53, 0xD8, 0x5C, 0xA1, 0x14, 0x17, 0xFB, 0x23, 0xD5, 0x7D, 0x30, 0x67, 0x73, 0x08, 0x09, 0xEE, 0xB7, 0x70, 0x3F, 0x61, 0xB2, 0x19, 0x8E, 0x4E, 0xE5, 0x4B, 0x93, 0x8F, 0x5D, 0xDB, 0xA9, 0xAD, 0xF1, 0xAE, 0x2E, 0xCB, 0x0D, 0xFC, 0xF4, 0x2D, 0x46, 0x6E, 0x1D, 0x97, 0xE8, 0xD1, 0xE9, 0x4D, 0x37, 0xA5, 0x75, 0x5E, 0x83, 0x9E, 0xAB, 0x82, 0x9D, 0xB9, 0x1C, 0xE0, 0xCD, 0x49, 0x89, 0x01, 0xB6, 0xBD, 0x58, 0x24, 0xA2, 0x5F, 0x38, 0x78, 0x99, 0x15, 0x90, 0x50, 0xB8, 0x95, 0xE4, 0xD0, 0x91, 0xC7, 0xCE, 0xED, 0x0F, 0xB4, 0x6F, 0xA0, 0xCC, 0xF0, 0x02, 0x4A, 0x79, 0xC3, 0xDE, 0xA3, 0xEF, 0xEA, 0x51, 0xE6, 0x6B, 0x18, 0xEC, 0x1B, 0x2C, 0x80, 0xF7, 0x74, 0xE7, 0xFF, 0x21, 0x5A, 0x6A, 0x54, 0x1E, 0x41, 0x31, 0x92, 0x35, 0xC4, 0x33, 0x07, 0x0A, 0xBA, 0x7E, 0x0E, 0x34, 0x88, 0xB1, 0x98, 0x7C, 0xF3, 0x3D, 0x60, 0x6C, 0x7B, 0xCA, 0xD3, 0x1F, 0x32, 0x65, 0x04, 0x28, 0x64, 0xBE, 0x85, 0x9B, 0x2F, 0x59, 0x8A, 0xD7, 0xB0, 0x25, 0xAC, 0xAF, 0x12, 0x03, 0xE2, 0xF2 ] D = [ 0x44D7, 0x26BC, 0x626B, 0x135E, 0x5789, 0x35E2, 0x7135, 0x09AF, 0x4D78, 0x2F13, 0x6BC4, 0x1AF1, 0x5E26, 0x3C4D, 0x789A, 0x47AC ] def addition_uint31(a, b): c = a + b return (c & 0x7FFFFFFF) + (c >> 31) def rotl_uint31(a, shift): return ((a << shift) | (a >> (31 - shift))) & 0x7FFFFFFF def rotl_uint32(a, shift): return ((a << shift) | (a >> (32 - shift))) & 0xFFFFFFFF def l1(x): return (x ^ rotl_uint32(x, 2) ^ rotl_uint32(x, 10) ^ rotl_uint32(x, 18) ^ rotl_uint32(x, 24)) def l2(x): return (x ^ rotl_uint32(x, 8) ^ rotl_uint32(x, 14) ^ rotl_uint32(x, 22) ^ rotl_uint32(x, 30)) def make_uint32(a, b, c, d): # return ((a << 24) & 0xffffffff) | ((b << 16) & 0xffffffff) | ((c << 8) & 0xffffffff) | d def make_uint31(a, b, c): return ((a << 23) & 0x7fffffff) | ((b << 8) & 0x7fffffff) | c class ZUC(object): def __init__(self, key, iv): self.r = [0, 0] self.lfsr = [0 for _ in range(16)] self.x = [0, 0, 0, 0] self.R = [[0,0]] self.WS = [] self.zuc_init(key, iv) self.SSS = [] for i in self.lfsr: self.SSS.append(i) self.W1 = [] self.W2 = [] def bit_reorganization(self): self.x[0] = ((self.lfsr[15] & 0x7FFF8000) << 1) | (self.lfsr[14] & 0xFFFF) self.x[1] = ((self.lfsr[11] & 0xFFFF) << 16) | (self.lfsr[9] >> 15) self.x[2] = ((self.lfsr[7] & 0xFFFF) << 16) | (self.lfsr[5] >> 15) self.x[3] = ((self.lfsr[2] & 0xFFFF) << 16) | (self.lfsr[0] >> 15) def lfsr_next(self): f = self.lfsr[0] v = rotl_uint31(self.lfsr[0], 8) f = addition_uint31(f, v) v = rotl_uint31(self.lfsr[4], 20) f = addition_uint31(f, v) v = rotl_uint31(self.lfsr[10], 21) f = addition_uint31(f, v) v = rotl_uint31(self.lfsr[13], 17) f = addition_uint31(f, v) v = rotl_uint31(self.lfsr[15], 15) f = addition_uint31(f, v) return f def lfsr_append(self, f): self.lfsr.append(f) if len(self.lfsr) > 16: self.lfsr.pop(0) def lfsr_init(self, u): self.lfsr_append(addition_uint31(self.lfsr_next(), u)) def lfsr_shift(self): self.lfsr_append(self.lfsr_next()) self.SSS.append(self.lfsr[-1]) def f(self): W = ((self.x[0] ^ self.r[0]) + self.r[1]) & 0xffffffff W1 = (self.r[0] + self.x[1]) & 0xffffffff W2 = self.r[1] ^ self.x[2] u = l1(((W1 & 0x0000ffff) << 16) | (W2 >> 16)) v = l2(((W2 & 0x0000ffff) << 16) | (W1 >> 16)) self.r = [make_uint32(S0[u >> 24], S1[(u >> 16) & 0xFF], S0[(u >> 8) & 0xFF], S1[u & 0xFF]), make_uint32(S0[v >> 24], S1[(v >> 16) & 0xFF], S0[(v >> 8) & 0xFF], S1[v & 0xFF])] self.WS.append([W1,W2]) self.R.append(self.r) return W def zuc_init(self, key, iv): self.lfsr = [make_uint31(key[i], D[i], iv[i]) for i in range(16)] self.r = [0, 0] for i in range(32): self.bit_reorganization() w = self.f() self.lfsr_append(self.lfsr_next()) def zuc_generate_keystream(self, length): keystream_buffer = [] self.bit_reorganization() A = (self.f()^self.x[-1]) def itor(): self.lfsr_shift() self.bit_reorganization() return self.f() ^ self.x[-1] keystream_buffer = [itor() for _ in range(length)] keystream_buffer.insert(0,A) return keystream_buffer def zuc_encrypt(self, input): length = len(input) key_stream = self.zuc_generate_keystream(length) return [inp ^ key_stream[i] for i, inp in enumerate(input)] def gift(self): print(self.SSS[5],self.SSS[6],self.SSS[7],self.SSS[9],self.SSS[10],self.SSS[12]>>15,self.SSS[13],self.SSS[15],self.SSS[16],self.SSS[18],self.SSS[19],self.SSS[20],self.SSS[21],self.R[37][0],sep=",") zuc = ZUC(key,iv) C = zuc.zuc_encrypt(msg) zuc.gift() print(C) """ 303566437,1883360648,297228587,731547160,983566302,11060,573406727,348416133,1702613960,391609640,1597220329,44401124,1469282295,2244485463 [721169895, 4225915307, 3221075992, 2917604813, 4028195894, 26647014, 715704904, 3297667964, 496081519, 2793682293, 1388766329, 1053964777, 98065092, 1041371719, 2325600248, 3428355824, 4040231430, 673657611, 951905050, 375758358, 912886203, 2654073536, 1835669631, 917557805, 3545357130, 658125088, 3892312393, 171088349, 1876687613, 1082568756, 613162561, 3301313426, 2382056118, 2696495738, 1194132717, 3740377298, 1994482912, 3399364557, 3830164734, 3794828344, 208044519, 3067347091, 3728522247] """