obfusk

#!/bin/bash
apksigtool verify-v1 --allow-unsafe=SHA1 --signed-by=43238d512c1e5eb2d6569f4a3afbf5523418b82e0a3ed1552770abb9a9c9ccab: index-v1.jar

obfusk

#!/bin/bash
set -e
for yml in $( grep -l ^Binaries: fdroiddata/metadata/*.yml | sort ); do
  echo "==> $yml"
  base="$(basename "$yml" .yml)"
  read -r version code upstream_url < <( python3 -c '
import sys, yaml
with open(sys.argv[1]) as fh:
    m = yaml.safe_load(fh.read())
for b in reversed(m["Builds"]):

obfusk

import sys

import jpype
import jpype.imports

jpype.startJVM(classpath=["/usr/share/java/org.jpype.jar", "/usr/share/java/apksigner.jar"])

from com.android.apksig import ApkVerifier
from java.io import File

obfusk

openssl req -x509 -newkey rsa:4096 -sha512 -outform DER -out cert.der -days 10000 -nodes -subj '/CN=test key' -keyout - | openssl pkcs8 -topk8 -nocrypt -outform DER -out privkey.der

obfusk

#!/usr/bin/python3
# encoding: utf-8
# SPDX-FileCopyrightText: 2022 FC Stegerman <[email protected]>
# SPDX-License-Identifier: GPL-3.0-or-later

import sys
import zipfile
import zlib

from typing import Any, Dict

obfusk

#!/usr/bin/python3

import sys

from asn1crypto.x509 import Certificate as X509Cert
from cryptography.exceptions import InvalidSignature
from cryptography.hazmat.primitives.asymmetric.ec import ECDSA
from cryptography.hazmat.primitives.asymmetric.padding import PKCS1v15
from cryptography.hazmat.primitives.hashes import SHA1, SHA224, SHA256, SHA384, SHA512
from cryptography.hazmat.primitives.serialization import Encoding

mildsunrise

#!/usr/bin/env python3
'''
Open source implementation of FNMT's certificate configurator v4.0.6
<https://www.sede.fnmt.gob.es/descargas/descarga-software/instalacion-software-generacion-de-claves>
No warranty provided; use this ONLY if you know what you're doing.

Usage: ./fnmt_handle.py <fnmtcr URL>

Fulfills the request indicated by the URL, sending request to answer operation as completed if there are no errors.
For the fnmtcr://request phase, the generated private key is written, unencrypted, to "privkey.pem" in current directory.

obfusk

git ls-files | xargs touch -d "@$( git log -1 --pretty=%ct )"

obfusk

#!/bin/sh
unzip -p "${1:-index-v1.jar}" META-INF/"${2:-OBFUSK.RSA}" \
  | openssl pkcs7 -print_certs -inform DER \
  | openssl x509 -fingerprint -sha256 \
  | head -n1 | cut -d= -f2 | tr -d :

obfusk

TODO

-> .zip

Available on central, but broken

• https://mvnrepository.com/artifact/com.wire/cryptobox-android 1.1.2 (1.1.3 seems OK)

Available in broken wire repo only