xtea broken key2 key3 overwritten lol

Author: lolololol

cpa.py

@@ -12,7 +12,7 @@
 import sparkgap.attack
 
 TRACE_OFFSET = 0
-TRACE_LENGTH = 0
+TRACE_LENGTH = None
 TRACE_MAX = 0
 
 CONFIG_PLOT = True
@@ -119,15 +119,19 @@ def usage():
     elif opt in ("-f","--file"):
       fn = arg
   print("TRACE_OFFSET = %d" % TRACE_OFFSET)
-  print("TRACE_LENGTH = %d" % TRACE_LENGTH)
+  if TRACE_LENGTH is None:
+    print("Delayed loading TRACE_LENGTH")
+  else:
+    print("TRACE_LENGTH = %d" % TRACE_LENGTH)
   if fn is None:
     print("You must specify a file with -f")
     sys.exit(0)
   print("Stage 1: Loading plaintexts...")
   tm = sparkgap.filemanager.TraceManager(fn)
   # tm.mapBlocks()
-  if TRACE_LENGTH == 0:
-    TRACE_LENGTH = tm.numPoints
+  if TRACE_LENGTH is None:
+    TRACE_LENGTH = len(tm.traces[0]) - TRACE_OFFSET
+    print("TRACE_LENGTH = %d" % TRACE_LENGTH)
   print("Stage 2: Deriving key... wish me luck!")
   if CONFIG_PLOT:
     resultViz = sparkgap.resultviz.VisualizerApp()

emu/xtea_loader.py

@@ -23,7 +23,7 @@
   elif arg in ("-f","--file"):
     CONFIG_INFILE = val
   elif arg in ("-c","--count"):
-    CONFIG_COUNT = val
+    CONFIG_COUNT = int(val)
 
 if CONFIG_INFILE is None or CONFIG_OUTFILE is None:
   print("You must populate both -f and -w")
@@ -38,13 +38,16 @@
 DOXTEA_END = 0x84c4
 
 rand_input = np.array([random.randint(0,0xFF) for i in range(0,8)],dtype=np.uint8)
-emu[KEY_ADDR] = bytes(rand_input[0:4])
-emu[KEY_ADDR+4] = bytes(rand_input[4:8])
+key_str = " ".join(["%02x" % p for p in rand_input])
+
+print("Key is %s" % key_str)
 
 for i in range(0,CONFIG_COUNT):
   emu = rainbow_arm(trace_config=TraceConfig(register=HammingWeight()))
   emu.load(CONFIG_INFILE)
   emu.setup()
+  emu[KEY_ADDR] = bytes(rand_input[0:4])
+  emu[KEY_ADDR+4] = bytes(rand_input[4:8])
   rand_input = np.array([random.randint(0,0xFF) for i in range(0,8)],dtype=np.uint8)
   emu[DATA_ADDR] = bytes(rand_input[0:4])
   emu[DATA_ADDR + 4] = bytes(rand_input[4:8])
@@ -61,3 +64,4 @@
   gc.collect()
 
 cs.save(CONFIG_OUTFILE)
+print("Reminder: Key is %s" % key_str)

time_test.py

@@ -0,0 +1,25 @@
+#!/usr/bin/env python3
+
+import cProfile
+
+in_num = 0x12345678
+
+def method1(number):
+  return bin(number).count("1")
+
+def method2(number):
+  totalI = 0
+  for i in range(0,32):
+    totalI += (number >> i) & 1
+  return totalI
+
+def test_method1():
+  for i in range(0,50000):
+    method1(0x12345678)
+
+def test_method2():
+  for i in range(0,50000):
+    method2(0x12345678)
+
+cProfile.run("test_method1()")
+cProfile.run("test_method2()")

xtea_model.py

@@ -0,0 +1,51 @@
+#!/usr/bin/env python3
+
+# XTEA needs two rounds to attack
+# try1 yields KEY0 ???1 ???2 KEY3
+# try2 yields ???0 KEY1 KEY2 ???3
+
+import numpy as np
+import math
+
+class AttackModel:
+  def __init__(self):
+    self.keyLength = 2
+    self.fragmentMax = 0x100000000
+    self.HW_LUT = [bin(x).count("1") for x in range(0,0x100)]
+
+  def loadPlaintextArray(self,plaintexts):
+    print("Loading plaintext array for XTEA HW Attack")
+    self.pt = plaintexts
+    print("[Preprocessing] creating v0 and v1 arrays...")
+    self.v0 = np.zeros(len(self.pt),np.uint32)
+    self.v1 = np.zeros(len(self.pt),np.uint32)
+    self.intval_left = np.zeros(len(self.pt),np.uint32)
+    self.intval_right = np.zeros(len(self.pt),np.uint32)
+    for tnum in range(0,len(self.pt)):
+      v0 = self.pt[tnum][0] + self.pt[tnum][1] * 0x100 + self.pt[tnum][2] * 0x10000 + self.pt[tnum][3] * 0x1000000
+      v1 = self.pt[tnum][4] + self.pt[tnum][5] * 0x100 + self.pt[tnum][6] * 0x10000 + self.pt[tnum][7] * 0x1000000
+      self.v0[tnum] = ((v1 << 4 ^ v1 >> 5) + v1)
+      self.v1[tnum] = ((v0 << 4 ^ v0 >> 5) + v0)
+    print("[Preprocessing] v0 and v1 arrays done")
+
+  def loadCiphertextArray(self,ct):
+    print("Loading plaintext array for XTEA HW Attack")
+    self.ct = ct
+
+  def genIVal(self,tnum,bnum,kguess):
+    if bnum == 0:
+      return bin(self.v0[tnum] ^ kguess).count("1")
+    else:
+      return bin(self.v1[tnum] ^ kguess).count("1")
+
+  def genIValRaw(self,tnum,bnum,kguess):
+    if bnum == 0:
+      return self.v0[tnum] ^ kguess
+    else:
+      return self.v1[tnum] ^ kguess
+
+  def distinguisher(self,tnum,bnum,kguess):
+    return self.genIValRaw(tnum,bnum,kguess) % 2 == 0
+
+if __name__ == "__main__":
+  print("This is a test file for external loading of attack models")