Files
@ 3907396d80a5
Branch filter:
Location: Shamira/src/shamira.py
3907396d80a5
2.9 KiB
text/x-python
documentation
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 | import os
import sys
import re
import base64
import gf256
def _shareByte(secretB,k,n):
assert n<255
coefs=[int(secretB)]+[int(b) for b in os.urandom(k-1)]
points=[gf256.evaluate(coefs,i) for i in range(1,n+1)]
return points
def generateRaw(secret,k,n):
"""Splits secret into shares.
:param secret: (bytes)
:param k: number of shares necessary for secret recovery. 1 <= k <= n
:param n: (int) number of shares generated. 1 <= n < 255
:return: [(i, (bytes) share), ...]"""
shares=[_shareByte(b,k,n) for b in secret]
return [(i+1, bytes([s[i] for s in shares])) for i in range(n)]
def reconstructRaw(*shares):
"""Tries to recover the secret from its shares.
:param shares: ((i, (bytes) share), ...)
:return: (bytes) reconstructed secret. Too few shares returns garbage."""
secretLen=len(shares[0][1])
res=[None]*secretLen
for i in range(secretLen):
bs=[(x,s[i]) for (x,s) in shares]
res[i]=(gf256.getConstantCoef(*bs))
return bytes(res)
def generate(secret,k,n,encoding="b32"):
"""Wraps generateRaw().
:param secret: (str or bytes)
:param k: number of shares necessary for secret recovery
:param n: number of shares generated
:param encoding: {hex, b32, b64} desired output encoding. Hexadecimal, Base32 or Base64.
:return: [(str) share, ...]"""
if isinstance(secret,str):
secret=secret.encode("utf-8")
shares=generateRaw(secret,k,n)
return [encode(s,encoding) for s in shares]
def reconstruct(*shares,encoding="",raw=False):
"""Wraps reconstructRaw.
:param shares: ((str) share, ...)
:param encoding: {hex, b32, b64, ""} encoding of share strings. If not provided or empty, the function tries to guess it.
:param raw: (bool) whether to return bytes (True) or str (False)
:return: (str or bytes) reconstructed secret. Too few shares returns garbage."""
if not encoding:
encoding=detectEncoding(shares)
bs=reconstructRaw(decode(s,encoding) for s in shares)
return bs if raw else bs.decode(encoding="utf-8")
def encode(share,encoding="b32"):
if encoding=="hex": f=base64.b16encode
elif encoding=="b32": f=base64.b32encode
else: f=base64.b64encode
return ["{0}.{1}".format(i,f(bs).decode("utf8")) for (i,bs) in share]
def decode(share,encoding="b32"):
(i,_,shareStr)=share.partition(".")
if not shareStr:
raise ValueError("bad share format")
i=int(i)
if encoding=="hex": f=base64.b16decode
elif encoding=="b32": f=base64.b32decode
else: f=base64.b32decode
shareBytes=f(shareStr)
return (i,shareBytes)
def detectEncoding(shares):
classes=[
(re.compile(r"\d+\.[0-9a-f]+=*"), "hex"),
(re.compile(r"\d+\.[A-Z2-7]+=*"), "b32"),
(re.compile(r"\d+\.[A-Za-z0-9+/]+=*"), "b64")
]
for (regexp, res) in classes:
if all(regexp.fullmatch(share) for share in shares):
return res
raise ValueError("no expected encoding detected")
if __name__=="__main__":
secret=sys.argv[1].encode("utf8")
k=int(sys.argv[2])
n=int(sys.argv[3])
output=sys.argv[4] if len(sys.argv)>4 else "raw"
for share in generate(secret,k,n,output):
print(share)
|