Decrypter | Decrypts RSDF , CFF and DLC files using a web service | Plugin library

The CoRB tasks use the method method getValueAsBytes() invokes:

In the CryptoJS code, the second parameter in crypto.AES.encrypt() is passed as a string, so it is interpreted as passphrase.

Therefore, during encryption, an eight bytes salt is first created and from this, along with the passphrase, key and IV are derived using the KDF EVP_BytesToKey().

The IV derived with createRandomIv() and explicitly passed in crypto.AES.encrypt() is ignored!

hash.ToString() returns the result in OpenSSL format consisting of the prefix Salted__ followed by the salt and by the actual ciphertext, all Base64 encoded. eHex contains the same data, but hex instead of Base64 encoded.

CryptoJS does not automatically disable padding for stream cipher modes like CTR, so the data is padded with PKCS#7, although this would not be necessary for CTR.

In the Go code, the IV that is not required must first be removed. From the remaining data, salt and ciphertext are determined.

From salt and passphrase, key and IV can be retrieved with evp.BytesToKeyAES256CBCMD5().

With key and IV the decryption with AES-CTR can be performed.

Finally, the PKCS#7 padding must be removed.

The following Go code implements these steps. The input data was generated with the NodeJS code:

Base64.decode belongs to android.util package, which you can only use in an Android application.

For using Base64 decoder in an intellij kotlin project, use Base64 decoder provided in java.util package.

Your current approach to this is to do all the input and printing within the functions dectrypter and encryptor. That means if you ever wanted to do something slightly different with the results of encrypting you'd have to rewrite those functions.

Your code would be more reusable and modular if your keep the input and printing separate for the functions which do the work, like this:

You need to grant permissions to the GCE service account (not your workload service account). The GCE service account takes the format:

The exception is thrown when trying to Utf8 decode the ciphertext. Arbitrary binary data like ciphertexts or pseudo-random data like salts or IVs cannot be decoded with charset encodings like Utf8 because the data will be corrupted, see here. Instead, a binary-to-text encoding like Base64 must be applied.

The Kotlin code Base64 encodes salt, IV and ciphertext and concatenates the portions with a separator (-). The Dart counterpart would be e.g.:

I just found out that the problem was in the MySQL Datatype.

• BLOB: Can handle up to 65,535 bytes of data.

• MEDIUMBLOB: The maximum length supported is 16,777,215 bytes.

Changing the datatype to MEDIUMBLOB in my DB makes everything work ok.

This is how I am decrypting encrypted_bytes_database and reading this .csv file as a pandas df.

Try this, make sure you are using same key for encryption and decryption

CryptoJS uses WordArrays, so that key, IV and ciphertext have to be converted accordingly. For this purpose the appropriate encoders have to be applied. Furthermore decrypt() expects the ciphertext as CipherParams object.

This results in the following possible CryptoJS implementation: