smbhash 1.0.0

data/.travis.yml

@@ -0,0 +1,10 @@
+language: ruby
+script: rake test
+rvm:
+  - ruby-head
+  - 2.1.1
+  - 2.0.0
+  - 1.9.3
+  - 1.9.2
+  - 1.8.7
+  

data/README.md

@@ -0,0 +1,29 @@
+# ruby-smbhash
+[![Build Status](https://travis-ci.org/krissi/ruby-smbhash.svg?branch=master)](https://travis-ci.org/krissi/ruby-smbhash)
+
+## Description
+ruby-smbhash is a implementation of lanman and nt md4 hash functions for use in Samba style smbpasswd entries. It was stripped from ActiveSambaLDAP (http://asl.rubyforge.org/activesambaldap/)
+
+## Tested Ruby Versions
+  * MRI 1.8.6
+  * MRI 1.9.2
+  * MRI 1.9.3
+  * MRI 2.0.0
+  * MRI 2.1.1
+
+## Usage
+    require 'samba/encrypt'
+
+    Samba::Encrypt.lm_hash    "password"
+    => "E52CAC67419A9A224A3B108F3FA6CB6D"
+
+    Samba::Encrypt.ntlm_hash  "password"
+    => "8846F7EAEE8FB117AD06BDD830B7586C"
+
+    Samba::Encrypt.ntlmgen    "password"
+    => ["E52CAC67419A9A224A3B108F3FA6CB6D", "8846F7EAEE8FB117AD06BDD830B7586C"]
+
+## Credits
+  * ActiveSambaLDAP project for sharing the code
+  * jon-mercer for porting it to ruby 1.9
+

data/Rakefile

@@ -0,0 +1,11 @@
+$:.unshift(File.join(File.dirname(__FILE__), 'lib'))
+
+require 'rubygems'
+require 'rake/testtask'
+
+Rake::TestTask.new do |t|
+  t.libs << "test"
+  t.test_files = FileList['test/test_*.rb']
+  t.verbose = false
+end
+

data/lib/smbhash/methods18.rb

@@ -0,0 +1,32 @@
+module Smbhash
+  module Methods18
+    require 'iconv'
+
+    def str_to_key(str)
+      key = "\000" * 8
+      key[0] = str[0] >> 1;
+      key[1] = ((str[0] & 0x01) << 6) | (str[1] >> 2);
+      key[2] = ((str[1] & 0x03) << 5) | (str[2] >> 3);
+      key[3] = ((str[2] & 0x07) << 4) | (str[3] >> 4);
+      key[4] = ((str[3] & 0x0F) << 3) | (str[4] >> 5);
+      key[5] = ((str[4] & 0x1F) << 2) | (str[5] >> 6);
+      key[6] = ((str[5] & 0x3F) << 1) | (str[6] >> 7);
+      key[7] = str[6] & 0x7F;
+
+      key.size.times do |i|
+        key[i] = (key[i] << 1);
+      end
+
+      key
+    end
+
+    def convert_encoding(to, from, str)
+      if same_encoding?(to, from)
+        str
+      else
+        Iconv.iconv(to, from, str).join
+      end
+    end
+
+  end
+end

data/lib/smbhash/methods19.rb

@@ -0,0 +1,29 @@
+module Smbhash
+  module Methods19
+    def str_to_key(str)
+      key = "\000" * 8
+      key.setbyte(0,  str.getbyte(0) >> 1);
+      key.setbyte(1,  ((str.getbyte(0) & 0x01) << 6) | (str.getbyte(1) >> 2));
+      key.setbyte(2,  ((str.getbyte(1) & 0x03) << 5) | (str.getbyte(2) >> 3));
+      key.setbyte(3,  ((str.getbyte(2) & 0x07) << 4) | (str.getbyte(3) >> 4));
+      key.setbyte(4,  ((str.getbyte(3) & 0x0F) << 3) | (str.getbyte(4) >> 5));
+      key.setbyte(5,  ((str.getbyte(4) & 0x1F) << 2) | (str.getbyte(5) >> 6));
+      key.setbyte(6,  ((str.getbyte(5) & 0x3F) << 1) | (str.getbyte(6) >> 7));
+      key.setbyte(7,  str.getbyte(6) & 0x7F);
+
+      key.size.times do |i|
+        key.setbyte(i, (key.getbyte(i) << 1));
+      end
+
+      key
+    end
+
+    def convert_encoding(to, from, str)
+      if same_encoding?(to, from)
+        str
+      else
+        str.encode(to, from)
+      end
+    end
+  end
+end

data/lib/smbhash.rb

@@ -0,0 +1,76 @@
+require 'openssl'
+
+module Smbhash
+  module_function
+  def lm_hash(password, encoding=nil)
+    dos_password = Private.convert_encoding("ISO-8859-1",
+                                            encoding || "UTF-8",
+                                            password.upcase)
+    if dos_password.size > 14
+      warn("password is truncated to 14 characters")
+      dos_password = dos_password[0, 14]
+    end
+    Private.encrypt_14characters(dos_password).unpack("C*").collect do |char|
+      "%02X" % char
+    end.join
+  end
+
+  def ntlm_hash(password, encoding=nil)
+    ucs2_password = Private.convert_encoding("UTF-16LE",
+                                             encoding || "UTF-8",
+                                             password)
+    if ucs2_password.size > 256
+      raise ArgumentError.new("must be <= 256 characters in UTF-16LE")
+    end
+    hex = OpenSSL::Digest::MD4.new(ucs2_password).hexdigest.upcase
+    hex
+  end
+
+  def ntlmgen(password, encoding=nil)    
+    [
+      lm_hash(password, encoding),
+      ntlm_hash(password, encoding)
+    ]
+  end
+
+  module Private
+    module_function
+
+    case RUBY_VERSION
+    when /^1\.9/, /^2/
+      require "smbhash/methods19"
+      extend Methods19
+    when /^1\.8/
+      require "smbhash/methods18"
+      extend Methods18
+    else
+      raise NotImplementedError, "Ruby #{RUBY_VERSION} is not supported"
+    end
+
+    def normalize_encoding(encoding)
+      encoding.downcase.gsub(/-/, "_")
+    end
+
+    def same_encoding?(a, b)
+      na = normalize_encoding(a)
+      nb = normalize_encoding(b)
+      na == nb or na.gsub(/_/, '') == nb.gsub(/_/, '')
+    end
+
+    def des_crypt56(input, key_str, forward_only)
+      key = str_to_key(key_str)
+      encoder = OpenSSL::Cipher::DES.new
+      encoder.encrypt
+      encoder.key = key
+      encoder.update(input)
+    end
+
+    LM_MAGIC = "KGS!@\#$%"
+    def encrypt_14characters(chars)
+      raise ArgumentError.new("must be <= 14 characters") if chars.size > 14
+      chars = chars.to_s.ljust(14, "\000")
+      des_crypt56(LM_MAGIC, chars[0, 7], true) +
+          des_crypt56(LM_MAGIC, chars[7, 7], true)
+    end
+  end
+end

data/smbhash.gemspec

@@ -0,0 +1,19 @@
+Gem::Specification.new do |s|
+  s.platform    = Gem::Platform::RUBY
+  s.name        = 'smbhash'
+  s.version     = '1.0.0'
+  s.license     = 'MIT'
+  s.summary     = "Lanman/NT hash generator"
+  s.description = "An implementation of lanman and nt md4 hash functions for use in Samba style smbpasswd entries"
+  s.homepage    = 'https://github.com/krissi/ruby-smbhash'
+  s.author      = 'Christian Haase'
+
+  s.files = `git ls-files`.split($/)
+  s.executables = s.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  s.test_files = s.files.grep(%r{^(test|spec|features)/})
+  s.require_paths = ["lib"]
+
+  s.required_ruby_version = '>= 1.8.7'
+
+  s.add_development_dependency "rake"
+end

data/test/test_samba_encrypt.rb

@@ -0,0 +1,39 @@
+require 'test/unit'
+require 'stringio'
+require 'smbhash'
+
+class SambaEncryptTest < Test::Unit::TestCase
+  def test_lm_hash
+    assert_equal("E52CAC67419A9A224A3B108F3FA6CB6D",
+                 Smbhash.lm_hash("password"))
+    assert_equal("E52CAC67419A9A224A3B108F3FA6CB6D",
+                 Smbhash.lm_hash("paSSWOrd"))
+    assert_equal("E0C510199CC66ABDE0C510199CC66ABD",
+                 Smbhash.lm_hash("abcdefgabcdefg"))
+    assert_equal("FF3750BCC2B22412C2265B23734E0DAC",
+                 Smbhash.lm_hash("SecREt01"))
+    begin
+      stderr = $stderr
+      $stderr = StringIO.new
+      assert_equal("E0C510199CC66ABDE0C510199CC66ABD",
+                   Smbhash.lm_hash("abcdefgabcdefg" + "X"))
+      assert_equal("E0C510199CC66ABDE0C510199CC66ABD",
+                   Smbhash.lm_hash("abcdefgabcdefg" + "X" * 100))
+      assert_equal("password is truncated to 14 characters\n" * 2,
+                   $stderr.string)
+    ensure
+      $stderr = stderr
+    end
+  end
+
+  def test_ntlm_hash
+    assert_equal("8846F7EAEE8FB117AD06BDD830B7586C",
+                 Smbhash.ntlm_hash("password"))
+  end
+
+  def test_ntlmgen 
+    assert_equal(["E52CAC67419A9A224A3B108F3FA6CB6D", "8846F7EAEE8FB117AD06BDD830B7586C"], 
+                 Smbhash.ntlmgen("password"))
+  end
+
+end

metadata

@@ -0,0 +1,66 @@
+--- !ruby/object:Gem::Specification
+name: smbhash
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+  prerelease: 
+platform: ruby
+authors:
+- Christian Haase
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-04-11 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: &20347200 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: *20347200
+description: An implementation of lanman and nt md4 hash functions for use in Samba
+  style smbpasswd entries
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .travis.yml
+- README.md
+- Rakefile
+- lib/smbhash.rb
+- lib/smbhash/methods18.rb
+- lib/smbhash/methods19.rb
+- smbhash.gemspec
+- test/test_samba_encrypt.rb
+homepage: https://github.com/krissi/ruby-smbhash
+licenses:
+- MIT
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: 1.8.7
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.15
+signing_key: 
+specification_version: 3
+summary: Lanman/NT hash generator
+test_files:
+- test/test_samba_encrypt.rb