cerbero-lib 0.0.20

Kerberos protocol attacker library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

use crate::{core::KrbUser, Result};
use kerberos_crypto::{aes_hmac_sha1, rc4_hmac_md5, AesSizes};

/// Calculate the users NT (RC4) hash
///
/// # Examples
///
/// ```
/// let hash = hash_rc4("Password").expect("Failed to hash RC4 password");
/// ```
pub fn hash_rc4(password: &str) -> Result<String>
{
	let rc4_key = rc4_hmac_md5::generate_key_from_string(password);
	Ok(get_hex(&rc4_key))
}

/// Calculate the users aes128 key
///
/// # Examples
///
/// ```
/// let user: KrbUser = KrbUser::new("Username".to_string(), "DOMAIN.COM".to_string());
///
/// let hash = hash_aes128(user, "Password").expect("Failed to hash AES128 password");
/// ```
pub fn hash_aes128(user: KrbUser, password: &str) -> Result<String>
{
	let aes_salt = aes_hmac_sha1::generate_salt(&user.realm, &user.name);

	let aes_128_key = aes_hmac_sha1::generate_key_from_string(password, &aes_salt, &AesSizes::Aes128);

	Ok(get_hex(&aes_128_key))
}

/// Calculate the users aes256 key
///
/// # Examples
///
/// ```
/// let user: KrbUser = KrbUser::new("Username".to_string(), "DOMAIN.COM".to_string());
///
/// let hash = hash_aes256(user, "Password").expect("Failed to hash AES256 password");
/// ```
pub fn hash_aes256(user: KrbUser, password: &str) -> Result<String>
{
	let aes_salt = aes_hmac_sha1::generate_salt(&user.realm, &user.name);

	let aes_256_key = aes_hmac_sha1::generate_key_from_string(password, &aes_salt, &AesSizes::Aes256);

	Ok(get_hex(&aes_256_key))
}

fn get_hex(v: &[u8]) -> String
{
	let mut s = String::new();
	for x in v
	{
		s = format!("{}{:02x}", s, x)
	}

	s
}