通过公钥解密密文思路（256bits RSA）

 1 qi@zhuandshao:~/download/iscc-ctf/RSA$ openssl rsa -pubin -text -modulus -in public.pem
 2 
 3 Public-Key: (256 bit)
 4 
 5 Modulus:
 6 
 7 00:a4:10:06:de:fd:37:8b:73:95:b4:e2:eb:1e:c9:
 8 
 9 bf:56:a6:1c:d9:c3:b5:a0:a7:35:28:52:1e:eb:2f:
10 
11 b8:17:a7
12 
13 Exponent: 65537 (0x10001)　　　　　　　　　　　　　　　 #e
14 
15 Modulus=A41006DEFD378B7395B4E2EB1EC9BF56A61CD9C3B5A0A73528521EEB2FB817A7 #n
16 
17 writing RSA key
18 
19 -----BEGIN PUBLIC KEY-----
20 
21 MDwwDQYJKoZIhvcNAQEBBQADKwAwKAIhAKQQBt79N4tzlbTi6x7Jv1amHNnDtaCn
22 
23 NShSHusvuBenAgMBAAE=
24 
25 -----END PUBLIC KEY-----
26 
27 qi@zhuandshao:~/download/iscc-ctf/RSA$

 1 from Crypto.PublicKey import RSA
 2 
 3 pub = RSA.importKey(open(‘xxx\public.pem‘).read())
 4 
 5 n = long(pub.n)
 6 
 7 e = long(pub.e)
 8 
 9 print n
10 
11 print e

 1 qi@zhuandshao:~/download/iscc-ctf/RSA$ msieve 0XA41006DEFD378B7395B4E2EB1EC9BF56A61CD9C3B5A0A73528521EEB2FB817A7 -v
 2 
 3 
 4 Msieve v. 1.54 (SVN 1009)
 5 
 6 Wed May 31 17:02:38 2017
 7 
 8 random seeds: 31130210 1225946d
 9 
10 factoring 74207624142945242263057035287110983967646020057307828709587969646701361764263 (77 digits)
11 
12 no P-1/P+1/ECM available, skipping
13 
14 commencing quadratic sieve (77-digit input)
15 
16 using multiplier of 7
17 
18 using generic 32kb sieve core
19 
20 sieve interval: 12 blocks of size 32768
21 
22 processing polynomials in batches of 17
23 
24 using a sieve bound of 921409 (36471 primes)
25 
26 using large prime bound of 92140900 (26 bits)
27 
28 using trial factoring cutoff of 26 bits
29 
30 polynomial ‘A‘ values have 10 factors
31 
32 restarting with 19759 full and 186503 partial relations
33 
34 
35 36750 relations (19759 full + 16991 combined from 186503 partial), need 36567
36 
37 sieving complete, commencing postprocessing
38 
39 begin with 206262 relations
40 
41 reduce to 51619 relations in 2 passes
42 
43 attempting to read 51619 relations
44 
45 recovered 51619 relations
46 
47 recovered 38442 polynomials
48 
49 attempting to build 36750 cycles
50 
51 found 36750 cycles in 1 passes
52 
53 distribution of cycle lengths:
54 
55 length 1 : 19759
56 
57 length 2 : 16991
58 
59 largest cycle: 2 relations
60 
61 matrix is 36471 x 36750 (5.3 MB) with weight 1099597 (29.92/col)
62 
63 sparse part has weight 1099597 (29.92/col)
64 
65 filtering completed in 4 passes
66 
67 matrix is 24901 x 24965 (4.0 MB) with weight 837672 (33.55/col)
68 
69 sparse part has weight 837672 (33.55/col)
70 
71 saving the first 48 matrix rows for later
72 
73 matrix includes 64 packed rows
74 
75 matrix is 24853 x 24965 (2.6 MB) with weight 610638 (24.46/col)
76 
77 sparse part has weight 441218 (17.67/col)
78 
79 commencing Lanczos iteration
80 
81 memory use: 2.7 MB
82 
83 lanczos halted after 394 iterations (dim = 24853)
84 
85 recovered 18 nontrivial dependencies
86 
87 p39 factor: 258631601377848992211685134376492365269------------------->p
88 
89 p39 factor: 286924040788547268861394901519826758027------------------->q
90 
91 elapsed time 00:00:10
92 
93 qi@zhuandshao:~/download/iscc-ctf/RSA$

 1 import math
 2 
 3 import sys
 4 
 5 from Crypto.PublicKey import RSA
 6 
 7 
 8 keypair = RSA.generate(1024)
 9 
10 
11 keypair.p = 258631601377848992211685134376492365269           #msieve求解的ｐ
12 
13 keypair.q = 286924040788547268861394901519826758027　　　      #msieve求解的q　　　　　
14 
15 keypair.e = 65537                                             #分解出的e
16 
17 
18 keypair.n = keypair.p * keypair.q
19 
20 Qn = long((keypair.p-1) * (keypair.q-1))
21 
22 
23 i = 1
24 
25 while (True):
26 
27 x = (Qn * i ) + 1
28 
29 if (x % keypair.e == 0):
30 
31 keypair.d = x / keypair.e
32 
33 break
34 
35 i += 1
36 
37 
38 private = open(‘private.pem‘,‘w‘)
39 
40 private.write(keypair.exportKey())
41 
42 private.close()

1 　openssl rsautl -decrypt -in flag.enc -inkey private.pem -out flag

 1 $ cd msieve-code/
 2 
 3 $make
 4 
 5 to build:
 6 
 7 make all
 8 
 9 add ‘WIN=1 if building on windows
10 
11 add ‘WIN64=1 if building on 64-bit windows
12 
13 add ‘ECM=1‘ if GMP-ECM is available (enables ECM)
14 
15 add ‘CUDA=1‘ for Nvidia graphics card support
16 
17 add ‘MPI=1‘ for parallel processing using MPI
18 
19 add ‘BOINC=1‘ to add BOINC wrapper
20 
21 add ‘NO_ZLIB=1‘ if you don‘t have zlib
22 
23 $ make all ECM=1 #根据自己的配置进行选择

1 ./configure --prefix=/usr  --enable-cxx
2 make
3 make check 
4 make install