𝐏𝐡𝐚𝐧𝐭𝐨𝐦 𝐃𝐞𝐜𝐨𝐝𝐞𝐙 (𝐂𝐡𝐚𝐧𝐧𝐞𝐥)

import sys,base64,hashlib,json,struct
from cryptography.hazmat.primitives.ciphers.aead import ChaCha20Poly1305

def b(x):return base64.urlsafe_b64decode(x+"="*(-len(x)%4))
def dec(x):
    if isinstance(x,dict):return{k:dec(v)for k,v in x.items()}
    if isinstance(x,list):return[dec(v)for v in x]
    if isinstance(x,str)and x.startswith("npvs1:"):return base64.b64decode(x[6:]).decode()
    return x

d=open(sys.argv[1],"rb").read()
hs=struct.unpack_from(">I",d,5)[0];he=9+hs
h=d[9:he];n=d[he:he+12]
cs=struct.unpack_from(">I",d,he+12)[0];ct=d[he+16:he+16+cs]
H=json.loads(h);q=H["passphrase"]

pw=input("Passphrase: ")
k=hashlib.pbkdf2_hmac("sha256",pw.encode(),b(q["salt"]),q["iters"],32)
w=b(q["wrap"])
key=ChaCha20Poly1305(k).decrypt(w[:12],w[12:],b(q["salt"]))
out=ChaCha20Poly1305(key).decrypt(n,ct,h)

try: print(json.dumps(dec(json.loads(out)),indent=2,ensure_ascii=False))
except: print(base64.b64encode(out).decode())