ALERT!
Click here to register with a few steps and explore all our cool stuff we have to offer!

Jump to content



Photo

A fruit sign in m1 m2 analysis


  • Please log in to reply
A fruit sign in m1 m2 analysis

#1

sysdemo
sysdemo
    Offline
    0
    Rep
    0
    Likes

    New Member

Posts: 21
Threads: 11
Joined: Jul 23, 2024
Credits: 0
#1

A fruit's GSA login is an improvement on the standard SRP6a, It is very difficult to spell out each parameter of SRP through plain text parameters. Only by reading its js can we get the SRP login process.
The parameters are as follows:

 

N is a large prime number of 2048 bits. From RFC5054-2048. The document is big-endian. Display fixed value
g In this case, it is 2. Fixed value
salt sent by the server
username username
password password. The password involved in SRP arithmetic operations is not plain text
privateKey client private key
a client public key
b server response public key
iteration
protocol
M1,M2: verification password

 

These parameters are constantly being encrypted with sha256 combination.

The following is the result after I encrypted it and compared it with the one on the website. They are exactly the same, so the problem of m1 and m2 is solved.

 

?u=https%3A%2F%2Fimg.picgo.net%2F2024%2F

?u=https%3A%2F%2Fimg.picgo.net%2F2024%2F


  • 0


 Users browsing this thread: