beaconcrypt 0.3.11

Cryptographic transport for C2 channels
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

from beaconcrypt import BeaconCryptBeacon, BeaconCryptServer
from nacl.utils import random

SERVER_KID = 0
REGISTRATION_MESSAGE = b"registration ok"


def main():
    server_seed = random(32)
    server = BeaconCryptServer(SERVER_KID, server_seed)
    # it is assumed that the server's public key is compiled into beacons
    beacon = BeaconCryptBeacon(SERVER_KID, server.id_pk())

    # the beacon is run and registers
    b_reg_1 = beacon.generate_registration()
    # ship the registration bytes over whichever transport you like
    with open("transport", "wb") as f:
        f.write(b_reg_1)
    with open("transport", "rb") as f:
        s_reg_1 = f.read()
    # now the server has the registration message and can send some initial message if needed
    s_reg_resp = server.register_beacon(s_reg_1, REGISTRATION_MESSAGE)
    # ship the response back over your transport
    with open("transport", "wb") as f:
        f.write(s_reg_resp.serialized())
    with open("transport", "rb") as f:
        b_reg_1 = f.read()
    # do whatever you like with the initial message
    first_message = beacon.process_initial_message(b_reg_1)
    print(f"Beacon got intial message: {first_message}")
    b_ping = beacon.encrypt_to_server_signed(b"ping")
    with open("transport", "wb") as f:
        f.write(b_ping)
    with open("transport", "rb") as f:
        s_ping = f.read()
    # got the ping, maybe there's a task to send now
    ping = server.decrypt_beacon_message_signed(s_ping)
    print(f"Server got ping: {ping}")
    # The C2 needs to know what the beacon's ID is so it can encrypt to it
    s_task_0 = server.encrypt_to_beacon_signed(b"task contents", s_reg_resp.key_id())
    with open("transport", "wb") as f:
        f.write(s_task_0)
    with open("transport", "rb") as f:
        b_task_0 = f.read()
    task_0 = beacon.decrypt_server_message_signed(b_task_0)
    print(f"Beacon got first task: {task_0}")
    # process task and send the response
    b_task_1 = beacon.encrypt_to_server_signed(b"task response")
    with open("transport", "wb") as f:
        f.write(b_task_1)
    with open("transport", "rb") as f:
        s_task_1 = f.read()
    task_1 = server.decrypt_beacon_message_signed(s_task_1)
    print(f"Server got response to first task: {task_1}")


if __name__ == "__main__":
    main()