wmbusmeters/utils/kem-extract.sh

59 wiersze
1.6 KiB
Bash
Executable File

#!/bin/bash
if [ $# -lt 2 ]; then
echo "Usage: $0 [password] [kem(2)_file]"
exit 1
fi
password="$1"
file="$2"
if unzip -v "$file" > /dev/null 2>&1
then
rm -rf temp_extracting_kem
mkdir temp_extracting_kem
unzip -q -d temp_extracting_kem "$file"
file=$(echo temp_extracting_kem/*.kem)
if [ ! -f "$file" ]; then file=$(echo temp_extracting_kem/*.kem2) ; fi
fi
# The key is the supplied password as raw bytes padded with zero bytes.
# The key is also used as the iv.
key=$(echo -n "$password" | xxd -p)
key=$(printf "%-32s" "$key" | tr ' ' '0')
xml=$(cat "$file")
# Extract the Base64-encoded ciphertext from the XML
b64=$(echo "$xml" | sed -n 's/.*<CipherValue>\(.*\)<\/CipherValue>.*/\1/p')
# Decrypt the ciphertext using the key and IV
plain=$(echo "$b64" | base64 -d | openssl enc -aes-128-cbc -d -K "$key" -iv "$key" -nopad)
good=false
if echo "$plain" | grep -q "<Name>DEK</Name><Value>"
then
# kem2
meter_key=$(echo "$plain" | sed -n 's/.*<Name>DEK<\/Name><Value>\(.*\)<\/Value>.*/\1/p')
meter_id=$(echo "$plain" | sed -n 's/.*<SerialNumber>\(.*\)<\/SerialNumber>.*/\1/p')
good=true
fi
if echo "$plain" | grep -q "<DEK>"
then
# kem
meter_key=$(echo "$plain" | sed -n 's/.*<DEK>\(.*\)<\/DEK>.*/\1/p')
meter_id=$(echo "$plain" | sed -n 's/.*<SerialNo>\(.*\)<\/SerialNo>.*/\1/p')
good=true
fi
if [ "$good" = true ]
then
echo "meter id: $meter_id"
echo "meter key: $meter_key"
rm -rf temp_extracting_kem
else
echo "Error when extracting. To debug run: bash -x kem-extract $*"
echo "Collect the output and create an issue at https://github.com/wmbusmeters/wmbusmeters"
fi