yml/live-hub-py
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(huya): OTP差分定性 - 32hex尾=静态钥材料计算(非嵌入) + 中段=f(输入)

Browse Source
This commit is contained in:
yml2213
2026-08-29 00:13:02 +08:00
parent 92eb39cd9d
commit c2b9954214
2 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/HUYA_HDID_ALGORITHM_GEN.md
+10
View File
@@ -652,3 +652,13 @@ UdbAESUtilC1 + encrypt ← AES 层
1. OTP 输入差分 (变 in/变 key → 可变为/尾变?) 1. OTP 输入差分 (变 in/变 key → 可变为/尾变?)
2. 固定尾溯源 (8b38f1… = md5/aes(静态钥材料)?) 2. 固定尾溯源 (8b38f1… = md5/aes(静态钥材料)?)
3. 32hex-HDID32 (ed0db8) vs OTP 体系对拍 (登录帧 t1.t0 可能 = OTP 输出的某段!) 3. 32hex-HDID32 (ed0db8) vs OTP 体系对拍 (登录帧 t1.t0 可能 = OTP 输出的某段!)
### §11.19b OTP 差分定性 (2026-08-28 夜)
| in | key | 中段(输入依赖) | 32hex 尾 |
|---|---|---|---|
| abc | ZMHAV… | 0088fa6ee519d52f61348e01d6e74c81cd | 8b38f113056fe498b0c7de2ffd52c7b0 |
| abcX | ZMHAV… | 00bc4882b312f73d5c6f6dcbc15681db76 | **同** |
| abc | owNMia… | 0088fa6e…(同 abc!) | **同** (key 参数被忽略/固定位) |
- 32hex 尾 = **静态钥材料计算值** (非嵌入: so 全文件无 8b38f1/ed0db8 字节)
- 中段 = f(输入) (变输入即变) — 待定性为 md5/xxtea/AES 哪层
- 32hex-HDID32 (ed0db8) 与 OTP 尾 = 同族 MAC 理论的验证对象 (下轮)
tools/unidbg/hydev/src/hydev/AesProbe.java
+3
View File
@@ -184,6 +184,9 @@ public class AesProbe {
// hyudb_otp_encrypt@0x32fa24 (string, h,h, string,string,string, h,m, string&) // hyudb_otp_encrypt@0x32fa24 (string, h,h, string,string,string, h,m, string&)
p.callOtp("abc", "ZMHAVPRaxJ3MtXDjduUnXAKQ"); p.callOtp("abc", "ZMHAVPRaxJ3MtXDjduUnXAKQ");
p.callOtp("1e8bdf7d4f7a01d3", "KFWAH2cbkkNgFAgQPzriFPcU"); p.callOtp("1e8bdf7d4f7a01d3", "KFWAH2cbkkNgFAgQPzriFPcU");
p.callOtp("abcX", "ZMHAVPRaxJ3MtXDjduUnXAKQ");
p.callOtp("abc", "owNMiaCgcHmqoTr3iRamFuHj");
p.callOtp("", "ZMHAVPRaxJ3MtXDjduUnXAKQ");
p.emulator.close(); p.emulator.close();
p.emulator.close(); p.emulator.close();
} }