TJCTF部分Crypto-wp

import hashlibSNEEZE_FORK = "AurumPotabileEtChymicumSecretum"WUMBLE_BAG = 8def glorbulate_sprockets_for_bamboozle(blorbo):    zing = {}    yarp = hashlib.sha256(blorbo.encode()).digest()    zing['flibber'] = list(yarp[:WUMBLE_BAG])    zing['twizzle'] = list(yarp[WUMBLE_BAG:WUMBLE_BAG+16])    glimbo = list(yarp[WUMBLE_BAG+16:])    snorb = list(range(256))    sploop = 0    for _ in range(256):        for z in glimbo:            wob = (sploop + z) % 256            snorb[sploop], snorb[wob] = snorb[wob], snorb[sploop]            sploop = (sploop + 1) % 256    zing['drizzle'] = snorb    return zingdef descrungle_crank(chunk, sprockets):    wiggle = sprockets['flibber']    quix = sprockets['twizzle']    drizzle = sprockets['drizzle']    # 反向排序    waggly = sorted([(wiggle[i], i) for i in range(WUMBLE_BAG)])    zort = [oof for _, oof in waggly]    unsorted = [0] * WUMBLE_BAG    for y in range(WUMBLE_BAG):        x = zort[y]        unsorted[x] = chunk[y]     splatted = bytes(unsorted)     # 异或还原    zonked = bytes([splatted[i] ^ quix[i % len(quix)] for i inrange(WUMBLE_BAG)])    # drizzle 的逆映射    drizzle_inv = [0] * 256    for i, val in enumerate(drizzle):        drizzle_inv[val] = i    # 原始数据恢复    original = bytes([drizzle_inv[b] for b in zonked])    return originaldef unsnizzle_bytegum(data, jellybean):    decrypted = b""    for i in range(0, len(data), WUMBLE_BAG):        chunk = data[i:i+WUMBLE_BAG]        decrypted += descrungle_crank(chunk, jellybean)    # 去除 PKCS#7 padding    pad_len = decrypted[-1]    if all(p == pad_len for p in decrypted[-pad_len:]):        decrypted = decrypted[:-pad_len]    return decrypteddef decrypt():    with open("encrypted.txt", "r") as f:         encrypted_hex = f.read().strip()    encrypted_bytes = bytes.fromhex(encrypted_hex)    jellybean = glorbulate_sprockets_for_bamboozle(SNEEZE_FORK)    decrypted = unsnizzle_bytegum(encrypted_bytes, jellybean)    print("Decrypted flag:", decrypted.decode())if __name__ == "__main__":  decrypt()      

from Crypto.Util.number import long_to_bytesfrom sympy.ntheory.modular import crtfrom gmpy2 import irootimport re# 读取 output.txtwith open("output.txt", "r") as f:  data = f.read()# 提取 e、n、c 值e = int(re.search(r"es*=s*(d+)", data).group(1))pairs = re.findall(r"nd+s*=s*(d+)s+cd+s*=s*(d+)", data)n_list = [int(n) for n, _ in pairs]c_list = [int(c) for _, c in pairs]# 使用中国剩余定理合并C, N = crt(n_list, c_list)# 计算 e 次根（m ≈ (C)^(1/e)）m_root, exact = iroot(C, e)if not exact:    print("Warning: root not exact, result may be incorrect.")# 转换为原始明文flag = long_to_bytes(m_root)print("Recovered flag:", flag)