example.py

#pip install pyaes
#pip install pbkdf2
#pip install pycryptodome
import hashlib
from Crypto.Hash import keccak
from Crypto.Cipher import AES
from Crypto.Util import Counter


def decrypt_key(pwd, kdfparams):
    #解密的过程调这个script就行
    dec_key = hashlib.scrypt(bytes(pwd, 'utf-8'), salt=bytes.fromhex(kdfparams['salt']), n=kdfparams['n'], r=kdfparams['r'], p=kdfparams['p'], maxmem=2000000000, dklen=kdfparams['dklen'])
    return dec_key


def verify_key(dec_key, ciphertext, mac):
    #用dec_key去加密一下ciphertext，如果和mac一样则证明是对的
    validate = dec_key[16:] + bytes.fromhex(ciphertext)
    keccak_hash=keccak.new(digest_bits=256)
    keccak_hash.update(validate)
    print(keccak_hash.hexdigest())
    if keccak_hash.hexdigest() == mac:
        return True
    return False


def get_raw_key(dec_key, iv, ciphertext):
    iv_int=int(iv, 16)
    ctr = Counter.new(AES.block_size * 8, initial_value=iv_int)
    dec_suite = AES.new(dec_key[0:16], AES.MODE_CTR, counter=ctr) #传前十六位
    plain_key = dec_suite.decrypt(bytes.fromhex(ciphertext))
    return plain_key.hex()

    
kdfparams={
         "dklen":32,
         "n":65536,
         "p":1,
         "r":8,
         "salt":"592ac5a6690e7f14a28ba5b9a023e29fa702c094cff0f78cac78d429ab95d6a1"
      }
pwd = '密码？'
ciphertext = "2c9ed7199f4d54871187e681133f41a3c8b064a76131465cbcd3db6ec5c3a29d"
mac = "f3eb4036ccd10387dc71178a4cde4fc0612924f97d3f5a52b4f7b9cbcaea0617"
iv="0e31facc70a4d98c1f5d3a0226ccdb34"

my_key = decrypt_key(pwd, kdfparams)
if verify_key(my_key, ciphertext, mac):
    print('BINGO!恭喜恭喜。')
    raw_key = get_raw_key(my_key, iv, ciphertext)
    print('KEY:')
    print(raw_key)
else:
    print('WRONG.再试试吧。')