Encrypting credentials

Does anyone know where in the client the latest public key is, or what it is? I've seen about 4-5 different keys in various projects from 2-3 years ago.

Does anyone have a .NET example of how to encrypt the email address to a GUID that matches the client? I'm not able to generate a GUID that matches the client yet...

Originally Posted by aseikin

This goes under Help & Requests.

Also, You are trying to make it to where the client doesn't show the email when you're logged in or what?

Originally Posted by Ironik grammer Nazie

This goes under Help & Requests.

Also, You are trying to make it to where the client doesn't show the email when you're logged in or what?

Sorry, don't see a way to move it now, a mod will have to move it.

I'm making a custom client from scratch. Currently it's able to connect to the nexus and move around without being DC'd, but I'm having to connect with guid/password I sniffed from the actual flash client, would like to able to generate the guids from the email/password myself....

Originally Posted by aseikin

Take a look at SCry.java from this project.

The latest rc4 keys are:
311f80691451c71b09a13a2a6e
72c5583cafb6818995cbd74b80

The RSA key is:

Code:

MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCKFctVrhfF3m2Kes0FBL/JFeOcmNg9eJz8k/hQy1kadD+XFUpluRqa//Uxp2s9W2qE0EoUCu59ugcf/p7lGuL99UoSGmQEynkBvZct+/M40L0E0rZ4BVgzLOJmIbXMp0J4PnPcb6VLZvxazGcmSfjauC7F3yWYqUbZd/HCBtawwIDAQAB

Those are found in Parameters.class in the flash client.

The RC4 keys aren't a problem, those haven't been updated in forever, I did confirm that this is the key in the client, thanks. So clearly my encryption just isn't correct.

I'm using the bouncy castle library to do this...

Code:

        public static String encrypt(String str_)
        {
            byte[] publicKeyBytes = Convert.FromBase64String(SERVER_PUBLIC_KEY);
            AsymmetricKeyParameter asymmetricKeyParameter = PublicKeyFactory.CreateKey(publicKeyBytes);
            RsaKeyParameters rsaKeyParameters = (RsaKeyParameters)asymmetricKeyParameter;
            RSAParameters rsaParameters = new RSAParameters();
            rsaParameters.Modulus = rsaKeyParameters.Modulus.ToByteArrayUnsigned();
            rsaParameters.Exponent = rsaKeyParameters.Exponent.ToByteArrayUnsigned();
            RSACryptoServiceProvider rsa = new RSACryptoServiceProvider();
            rsa.ImportParameters(rsaParameters);

            byte[] encrypted = rsa.Encrypt(Encoding.UTF8.GetBytes(str_), false);
            return Convert.ToBase64String(encrypted);
        }

Nevermind, the code does work. I was assuming it didn't as my GUIDs weren't matching as I expected RSA to always return the same result. Apparently that's not how it works because of random data padding for added security!

Encrypting credentials

Post a Reply

Similar Threads

Tags for this Thread