From f96513bfc4cbcc769564a1198e94a3877e47d80a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mateusz=20Pi=C4=85tkowski?= <matpia1@st.amu.edu.pl>
Date: Sun, 14 Apr 2024 14:22:08 +0200
Subject: [PATCH] everything is working exept for decryption

---
 .main.py.swp | Bin 0 -> 12288 bytes
 main.py      |  39 +++++++++++++++++++++++++++++++--------
 utils.py     |  21 +++++++++++++++------
 3 files changed, 46 insertions(+), 14 deletions(-)
 create mode 100644 .main.py.swp

diff --git a/.main.py.swp b/.main.py.swp
new file mode 100644
index 0000000000000000000000000000000000000000..7f7164f93459ec4518f57f41d0caa18cab936d31
GIT binary patch
literal 12288
zcmeI2zi-n(6vtnYKo}?>7?I#eL9#11iCYOlMTOFW)DG=}fC;5`a!F0%AF?l?EM;N@
zCjJT#jPMsQFfo-CHY6C4Soxk~Cus>Pj72Zfx6a+Y_x!!jJr7asRqw8?i)-a7;d7ek
z-iLFoqm<ASm&gsHP*3moY0FSW(SA`x+qz)oX4L2f$Ve-J+n!sfG?IR-A`JYn9QXIH
z!Vye>3H&pGo@&iqou-9(CwtUqN*Bf1Gk5;E3@0!FCcp%k025#WOn?b60VZ&838;9A
z9>e~jd<%Ado!WEFhkRiIOn?b60Vco%m;e)C0!)AjFaajO1P&kpw@LK+7}3MyFpvNL
z7r*~Mo+5e&y?_F!3*Cp-p(_wU-%k>KgLa_z&>LtQdH`)gH=s+<4D@rF=ri;RilEET
z*AqmapdIKX)P^>p73ey20Xh#Ifeu4I;PDIe7J3dngPuZ}_XEhDEi(Zozyz286JP>N
zfC>EX1mYx4{7{*LzlltHT~%(%M%0w1WnuS&DX}EH$g9trHCuSLXxKtlA;%UWuAyU*
z9_#PfoP&6`>o?>eW7!t2Eds0th{Q;j$V)nA%_3BFhbfMU`woIJSIX*?Y*B)N5|Lpf
zQuUHhz@&ap*DP+_X;@^)ZYmci#Au^X7UQ=>12G-#VAV`jV#d)UQ$wiLQxuiTvIU0a
zRuTnuudifkdYA&DKw4H=h6SCbY!z7Y%s<dsgzwz;toA!A9eB-X!2}9sJLzaZ)lq%G
zELPw>a7HU+%!rLBY)IiMp|<=~#1R||e8H>FGI5n`3a>9}w{8os=XcedABsS#t*8kQ
zk<x2vc2jWBhc)70F6Ubjm5LYxf&=^=fYGV$O4bmId=Q(QqfdGdUe_Yca@aCMnnkhk
z1{#AoTGkx}1OjJYOyV|$e=#eHSu*tbBNQ!=Wh`Z*x{A^ijW?dH+oElYwNS~nOeVJj
z86NIaK+k>aI&Dnnndbapd-@4NyXQgH*glFmY?F*)fC9T6=pG$+;abD4BtujEI~xPa
zc*<Zvx42lz-ghsryK1Yv(F;78q{0v4C{e`@25~**cZVx^Yud$gI3XnKmkINGYz|H?
JI{;g((l2FNp%efB

literal 0
HcmV?d00001

diff --git a/main.py b/main.py
index 28a192b..519c5ca 100644
--- a/main.py
+++ b/main.py
@@ -1,21 +1,44 @@
-from utils import generate_secret, coin_toss
-from utils import prime, FILE
+from utils import generate_secret, coin_toss, H
+from utils import prime
+from utils import encrypt, decrypt
 from Crypto.Math.Numbers import Integer
 
 def alice_1():
 	g = Integer(2)
 	a = generate_secret()
 	A_secret = pow(g, Integer(int.from_bytes(a)), prime)
-	return A_secret
+	return A_secret, a
 
 def bob_1(A_secret):
 	g = Integer(2)
 	b = generate_secret()
 	B_secret = pow(g, Integer.from_bytes(b), prime)
-	if coin_toss():
+	coin = coin_toss()
+	if coin:
 		B_secret = A_secret * B_secret
-	return B_secret
+	return B_secret, b, coin 
 
-a = alice_1()
-b = bob_1(a)
-print(b)
+def alice_2(A_secret, B_secret, a, m0, m1):
+	a = int.from_bytes(a)
+	k0 = H(str(pow(int(B_secret), a, prime)).encode())
+	k1 = H(str(pow((B_secret // A_secret), a, prime)).encode())
+	# Nonce at this point is generated by AES built-in method, not by scrypt
+	e0, e1 = encrypt(k0, m0.encode()), encrypt(k1, m1.encode())
+	return *e0, *e1
+
+def bob_2(A_secret, b, c, e0, e1, n0, n1):
+	kc = H(str(pow(int(A_secret), int.from_bytes(b), prime)).encode())
+	if c:
+		return decrypt(e1, n1, kc)
+	else:
+		return decrypt(e0, n0, kc)
+
+m0, m1 = "alice", "bob"
+
+A, a = alice_1()
+B, b, c = bob_1(A)
+e0, n0, e1, n1 = alice_2(A, B, a, m0, m1)
+result = bob_2(A, b, c, e0, e1, n0, n1)
+
+
+print(result.decode())
diff --git a/utils.py b/utils.py
index 3bbc598..4ba2bf0 100644
--- a/utils.py
+++ b/utils.py
@@ -1,11 +1,9 @@
 from Crypto.PublicKey import ECC
-from Crypto.Protocol.KDF import PBKDF2
-from Crypto.Hash import SHA512
+from Crypto.Protocol.KDF import scrypt
 from Crypto.Random import get_random_bytes
+from Crypto.Cipher import AES
 from secrets import randbelow
 
-FILE = 'exchange.bin'
-
 prime = 0xffffffffffffffffffffffffffffffff000000000000000000000001
 
 def generate_secret(c = 0):
@@ -15,8 +13,8 @@ def generate_secret(c = 0):
 def H(secret):
 	# secret should be bytearray[], pref. from generate_secret() function
 	salt = get_random_bytes(16)
-	key = PBKDF2(generate_secret(), salt, 64, count=1000000, hmac_hash_module=SHA512)
-	return key[32:] # first 32 bytes of generated key
+	key = scrypt(bytes(secret), salt, 16, N=2**14, r=8, p=1)
+	return key[:32] # first 32 bytes of generated key
 
 def coin_toss():
 	x = randbelow(2 ** 64)
@@ -24,3 +22,14 @@ def coin_toss():
 		return False
 	else:
 		return True
+
+def encrypt(key, data):
+	cipher = AES.new(key, AES.MODE_CTR)
+	ct = cipher.encrypt(data)
+	nonce = cipher.nonce
+	return ct, nonce
+
+def decrypt(ct, nonce, key):
+	cipher = AES.new(key, AES.MODE_CTR, nonce=nonce)
+	pt = cipher.decrypt(ct)
+	return pt