c7decrypt 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: f70de5c1f93bf9ad137dea9dd3fa33db2a793fa0
-  data.tar.gz: 5a8f766cf0de4464adf4c87f09e8148b3d8326ec
+  metadata.gz: f9b11d4c6617708dd781e31039ea82b65bb34e53
+  data.tar.gz: 5aecaa33cbaad57c2f429975d4b5d0d4023f67e6
 SHA512:
-  metadata.gz: c55ffa4cb4fa17dafd2c8e97758f057e92b3b65101c53b7c2eec05803792e5e5b32720d195c1633b4a74273a66fcf7284d9c00e8734d8210d0d7e958e6ee5543
-  data.tar.gz: 3de9b21375709c209da4fd865c33984c3700cee54df3d95d9be6c265c16c6992b6a6110f6b2f85a154c5aadd004192adcd71f520f4e59e196fd28c647f108b78
+  metadata.gz: 0724d39e013f76b882e6bf822913b81231ddb45d3b8a9a59127fa87050ce3630f4c9decb959b3dfec63c3bd123265ec31faa278495d85503358727ddfc665a81
+  data.tar.gz: 90a3fd6438c7c331ad0d0e3785d528c368b3907b54d1ea638802a9dec1961ba4ea63b2245ee25c6befce0fe5fb178a055413d5e7279c49bd72e4d36a6252d9e3

data/README.md

@@ -44,50 +44,24 @@ To use, just require
 require 'c7decrypt'
 ```
 
-Decrypt A Single Encrypted Password
+Decrypt A Cisco Type-7 Password
 
 ```ruby
 >> C7Decrypt::Type7.decrypt("060506324F41")
 => "cisco"
 ```
-
-Decrypt Array of Encrypted Passwords
-
-```ruby
->> encrypted_hashes = ["060506324F41", "0822455D0A16"]
-=> ["060506324F41", "0822455D0A16"]
->> C7Decrypt::Type7.decrypt_array(encrypted_hashes)
-=> ["cisco", "cisco"]
-```
-
-Decrypt Encrypted Passwords from Config
-
-```ruby
->> C7Decrypt::Type7.decrypt_config("cisco_config.txt")
-=> ["cisco", "Password1", "admin"]
-```
-
-Encrypt A Single Plaintext Password
+Encrypt A Cisco Type-7 Password
 
 ```ruby
 >> C7Decrypt::Type7.encrypt("cisco")
 => "02050D480809"
 ```
 
-Encrypt A Single Plaintext Password w/ Explicit Seed
-
-```ruby
->> C7Decrypt::Type7.encrypt("cisco", 6)
-=> "060506324F41"
-```
-
-Encrypt An Array of Plaintext Passwords
+Encrypt A Cisco Type-5 Password
 
 ```ruby
->> passwords = ["cisco", "password"]
-=> ["cisco", "password"]
->> C7Decrypt::Type7.encrypt_array(passwords)
-=> ["02050D480809", "021605481811003348"]
+>> C7Decrypt::Type5.encrypt("cisco")
+=> "$1$CQk2$d62sxZKKAp7PHXWq4mOPF."
 ```
 
 ## Rubies Supported

data/lib/c7decrypt/type5.rb

@@ -0,0 +1,94 @@
+require 'digest'
+require 'securerandom'
+
+module C7Decrypt
+  module Type5
+
+    # Source Reference:
+    #
+    # The Ruby logic within this module was adapted
+    # directly from https://github.com/mogest/unix-crypt
+    #
+    # Copyright (c) 2013, Roger Nesbitt
+    # All rights reserved.
+    #
+
+    module Constants
+      BYTE_INDEXES = [
+        [0, 6, 12],
+        [1, 7, 13],
+        [2, 8, 14],
+        [3, 9, 15],
+        [4, 10, 5],
+        [nil, nil, 11]
+      ]
+    end
+
+    # The Encryption Method for Cisco Type-5 Encrypted Strings
+    # @param [String] password
+    # @param [String] salt
+    # @return [String] formatted Type-5 hash
+    def self.encrypt(password, salt = generate_salt)
+      password = password.encode("UTF-8")
+      password.force_encoding("ASCII-8BIT")
+
+      b = Digest::MD5.digest("#{password}#{salt}#{password}")
+      a_string = "#{password}$1$#{salt}#{b * (password.length/16)}#{b[0...password.length % 16]}"
+
+      password_length = password.length
+      while password_length > 0
+        a_string += (password_length & 1 != 0) ? "\x0" : password[0].chr
+        password_length >>= 1
+      end
+
+      input = Digest::MD5.digest(a_string)
+
+      1000.times do |index|
+        c_string = ((index & 1 != 0) ? password : input)
+        c_string += salt unless index % 3 == 0
+        c_string += password unless index % 7 == 0
+        c_string += ((index & 1 != 0) ? input : password)
+        input = Digest::MD5.digest(c_string)
+      end
+
+      return cisco_md5_format(salt, bit_specified_base64encode(input))
+    end
+
+    # A helper method for formating Cisco Type-5 hashes
+    def self.cisco_md5_format(salt, hash)
+      return "$1$" + salt + "$" + hash
+    end
+
+    # A helper method for bit specified base64 output (the format Type-5 hashes are in)
+    # @param [String] input
+    # @return [String] encoded_input
+    def self.bit_specified_base64encode(input)
+      b64 = "./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
+      input = input.bytes.to_a
+      output = ""
+      Constants::BYTE_INDEXES.each do |i3, i2, i1|
+        b1, b2, b3 = i1 && input[i1] || 0, i2 && input[i2] || 0, i3 && input[i3] || 0
+        output <<
+          b64[  b1 & 0b00111111]         <<
+          b64[((b1 & 0b11000000) >> 6) |
+              ((b2 & 0b00001111) << 2)]  <<
+          b64[((b2 & 0b11110000) >> 4) |
+              ((b3 & 0b00000011) << 4)]  <<
+          b64[ (b3 & 0b11111100) >> 2]
+      end
+
+      remainder = 3 - (16 % 3)
+      remainder = 0 if remainder == 3
+
+      return output[0..-1-remainder]
+    end
+
+    # Generates a random salt using the same character set as the base64 encoding
+    # used by the hash encoder.
+    # @return [String] salt
+    def self.generate_salt(size = 4)
+      SecureRandom.base64((size * 6 / 8.0).ceil).tr("+", ".")[0...size]
+    end
+
+  end
+end

data/lib/c7decrypt/version.rb

@@ -1,3 +1,3 @@
 module C7Decrypt
-  VERSION = '0.3.0'
+  VERSION = '0.3.1'
 end

data/lib/c7decrypt.rb

@@ -1,2 +1,3 @@
 require 'c7decrypt/version'
-require 'c7decrypt/type7'
+require 'c7decrypt/type7'
+require 'c7decrypt/type5'

data/spec/type5_spec.rb

@@ -0,0 +1,31 @@
+require 'c7decrypt'
+require 'rspec/its'
+
+describe C7Decrypt::Type5 do
+
+  context "when encrypting single Cisco Type-5 hash" do 
+    before(:each) do
+      @password = "SECRETPASSWORD"
+      @salt = "TMnL"
+      @hash = C7Decrypt::Type5.encrypt(@password, @salt)
+    end
+  
+    subject{@hash}
+    its(:class) {should == ::String}
+    it {should == "$1$#{@salt}$iAFs16ZXx7x18vR1DeIp6/"}
+  end
+
+  context "when encrypting single Cisco Type-5 hash" do 
+    before(:each) do
+      @password = "Password123"
+      @salt = "VkQd"
+      @hash = C7Decrypt::Type5.encrypt(@password, @salt)
+    end
+  
+    subject{@hash}
+    its(:class) {should == ::String}
+    it {should == "$1$#{@salt}$Vma3sR7B1LL.v5lgy1NYc/"}
+  end
+
+
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: c7decrypt
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Jonathan Claudius
@@ -84,11 +84,13 @@ files:
 - bin/c7decrypt
 - c7decrypt.gemspec
 - lib/c7decrypt.rb
+- lib/c7decrypt/type5.rb
 - lib/c7decrypt/type7.rb
 - lib/c7decrypt/version.rb
 - spec/example_configs/bad_canned_example.txt
 - spec/example_configs/empty_example.txt
 - spec/example_configs/simple_canned_example.txt
+- spec/type5_spec.rb
 - spec/type7_spec.rb
 homepage: http://rubygems.org/gems/c7decrypt
 licenses: []