加密动态密钥

Author: 4ra1n

native/encryptor.c

@@ -5,7 +5,7 @@
 #include "stdlib.h"
 #include "core_en.h"
 
-void internal(unsigned char *chars, int start) {
+void internal(unsigned char *chars, int start, unsigned char *key) {
     unsigned char first[4];
     for (int i = start; i < start + 4; i++) {
         first[i - start] = chars[i];
@@ -15,12 +15,19 @@ void internal(unsigned char *chars, int start) {
         second[i - start - 4] = chars[i];
     }
     uint32_t v[2] = {convert(first), convert(second)};
-    // key: Y4Sec-Team-4ra1n
-    // 59345365 632D5465 616D2D34 7261316E
+
+    unsigned char *key_part1 = key;
+    unsigned char *key_part2 = key + 4;
+    unsigned char *key_part3 = key + 8;
+    unsigned char *key_part4 = key + 12;
+
     uint32_t const k[4] = {
-            (unsigned int) 0x65533459, (unsigned int) 0x65542d63,
-            (unsigned int) 0X342d6d61, (unsigned int) 0x6e316172,
+            (unsigned int) convert(key_part1),
+            (unsigned int) convert(key_part2),
+            (unsigned int) convert(key_part3),
+            (unsigned int) convert(key_part4),
     };
+
     tea_encrypt(v, k);
     unsigned char first_arr[4];
     unsigned char second_arr[4];
@@ -46,7 +53,7 @@ void internal(unsigned char *chars, int start) {
 // 1. asm encrypt
 // 2. tea encrypt: {[10:14],[14:18]} {[18:22],[22:26]} {[26:30],[30:34]}
 JNIEXPORT jbyteArray JNICALL Java_org_y4sec_encryptor_core_CodeEncryptor_encrypt
-        (JNIEnv *env, jclass cls, jbyteArray text, jint length) {
+        (JNIEnv *env, jclass cls, jbyteArray text, jint length, jbyteArray key) {
     jbyte *data = (*env)->GetByteArrayElements(env, text, NULL);
     unsigned char *chars = (unsigned char *) malloc(length);
     memcpy(chars, data, length);
@@ -58,14 +65,21 @@ JNIEXPORT jbyteArray JNICALL Java_org_y4sec_encryptor_core_CodeEncryptor_encrypt
         EN_LOG("ERROR: BYTE CODE TOO SHORT");
         return text;
     }
+
+    jbyte *j_tea_key = (*env)->GetByteArrayElements(env, key, NULL);
+    unsigned char *tea_key = (unsigned char *) malloc(17);
+    memcpy(tea_key, j_tea_key, 16);
+    tea_key[17] = '\00';
+    printf("KEY: %s\n", tea_key);
+
     // {[10:14],[14:18]}
-    internal(chars, 10);
+    internal(chars, 10, tea_key);
     EN_LOG("TEA ENCRYPT #1");
     // {[18:22],[22:26]}
-    internal(chars, 18);
+    internal(chars, 18, tea_key);
     EN_LOG("TEA ENCRYPT #2");
     // {[26:30],[30:34]}
-    internal(chars, 26);
+    internal(chars, 26, tea_key);
     EN_LOG("TEA ENCRYPT #3");
     (*env)->SetByteArrayRegion(env, text, 0, length, (jbyte *) chars);
     return text;

native/encryptor.h

@@ -17,32 +17,40 @@ class PatchCommand implements Command, Constants {
     private static final Logger logger = LogManager.getLogger();
     @Parameter(names = "--jar", description = "JAR File Path", required = true)
     String jarPath;
+
+    @Parameter(names = "--key", description = "KEY", required = true)
+    String key;
     @Parameter(names = "--package", description = "Encrypt Package Name", required = true)
     String packageName;
 
     public void execute() {
-        logger.info("patch jar: {}",jarPath);
+        logger.info("patch jar: {}", jarPath);
         Path path = Paths.get(jarPath);
 
         if (!OSUtil.isArch64()) {
             System.out.println("ONLY SUPPORT ARCH 64");
             return;
         }
 
+        if (key.length() != 16) {
+            System.out.println("KEY LENGTH MUST BE 16");
+            return;
+        }
+
         Path libPath;
         Path tmp = Paths.get(TempDir);
-        if (OSUtil.isWin()){
-            JNIUtil.extractDllSo(EncryptorDLL,null,false);
+        if (OSUtil.isWin()) {
+            JNIUtil.extractDllSo(EncryptorDLL, null, false);
             libPath = tmp.resolve(EncryptorDLL);
-        }else{
-            JNIUtil.extractDllSo(EncryptorSO,null,false);
+        } else {
+            JNIUtil.extractDllSo(EncryptorSO, null, false);
             libPath = tmp.resolve(EncryptorSO);
         }
-        if(packageName == null || packageName.isEmpty()){
+        if (packageName == null || packageName.isEmpty()) {
             logger.error("need package name");
             return;
         }
 
-        PatchHelper.patchJar(path,libPath,packageName);
+        PatchHelper.patchJar(path, libPath, packageName, key.getBytes());
     }
 }

src/main/java/org/y4sec/encryptor/cli/PatchCommand.java

@@ -10,5 +10,5 @@ public class CodeEncryptor {
      * @param text ByteCode
      * @return Encrypted BytesCode
      */
-    public native static byte[] encrypt(byte[] text, int length);
+    public native static byte[] encrypt(byte[] text, int length, byte[] key);
 }

src/main/java/org/y4sec/encryptor/core/CodeEncryptor.java

@@ -18,7 +18,7 @@ public class PatchHelper implements Constants {
     private static final Logger logger = LogManager.getLogger();
 
     @SuppressWarnings("unchecked")
-    public static void patchJar(Path jarPath, Path libPath, String packageName) {
+    public static void patchJar(Path jarPath, Path libPath, String packageName,byte[] key) {
         logger.info("start patch jar");
 
         JNIUtil.loadLib(libPath.toAbsolutePath().toString());
@@ -53,7 +53,7 @@ public static void patchJar(Path jarPath, Path libPath, String packageName) {
                 if (name.startsWith(packageName)) {
                     if (name.toLowerCase().endsWith(ClassFile)) {
                         try {
-                            bytes = CodeEncryptor.encrypt(bytes, bytes.length);
+                            bytes = CodeEncryptor.encrypt(bytes, bytes.length,key);
                         } catch (Exception e) {
                             logger.error("encrypt error: {}", e.toString());
                             return;

src/main/java/org/y4sec/encryptor/core/PatchHelper.java

@@ -78,7 +78,7 @@ public MainForm() {
             new Thread(() -> {
                 JNIUtil.extractDllSo(EncryptorDLL, null, true);
                 Path libPath = Paths.get(TempDir).resolve(EncryptorDLL);
-                PatchHelper.patchJar(Paths.get(jar), libPath, packageName);
+                PatchHelper.patchJar(Paths.get(jar), libPath, packageName,new byte[]{});
             }).start();
         });