Thread: [Java] Cosmic Break KAR Encryption / Decryption Algo

I be able to compile tool, but can't check, need password. Kar files crypted with key maked from password.

Code:

	  CryptKey(String key) // key = password
	  {
		long hash = 0L;
		for (int i = 0; i < key.length(); i++) {
		  hash = 31L * hash + key.charAt(i);
		}
		setSeed(hash);
	  }

Are you sure it's source of current kar format?

I founded some differences in header. Here is right:

void readExternal(DataInput in)
throws IOException, ClassNotFoundException
{
in.readByte(); // not known, not present in default
if(in.readBoolean())
password = in.readUTF();
timestamp = in.readLong();
in.readByte(); // not known, not present in default
String deflatet = in.readUTF(); // was byte
deflate = Integer.parseInt(deflatet.substring(deflatet.index Of("=") + 1, deflatet.length() - 1)) <= 0 ? false : true;

One more interesting thing:
password digest stored in kar(password = in.readUTF() has 29 symbols "8612427997cc3b484346c73f11bba", but must be 32, coz it's md5.

Password do not match if nothing changed, password need to decrypt files. For headers is no need.

Some files from image.kar:
/arena/cg_loadingstg1_poyeen05.png
/arena/cg_room1img_a00_01.png
/mate/cg_mate2_B_angry.png
/arena/cg_loadingstg1_black02.png
/arena/cg_loadingstg1_event004.png
/other/ic_planet_flowy.png
/loading/loading_001.png

Here you are version can list files and extract one of files.

If we will found password or what's wrong i rewrite it.

Haha, there are two KarSource files, one of them only to confuse us.
For example right entry structure:

void readExternal(DataInput in) throws IOException, ClassNotFoundException
{
in.readShort();
password = in.readUTF();
timestamp = in.readLong();
int b = in.readByte();
if (b > 0) {
String ext = in.readUTF();
int i = ext.indexOf("deflate=");
if (i >= 0) {
String ls = ext.substring(i);
i = ls.indexOf(",");
if (i >= 0) {
ls = ls.substring("deflate=".length(), i);
deflevel = Integer.parseInt(ls);
}
deflater = new Deflater(deflevel);
}

}