Python code audit of a firmware update - 34C3 CTF software_update (crypto) part 1/2

This challenge from the 34C3 CTF implemented a software update in python. In part 1/2 we try to understand the code and think about possible attacks.
software_update: https://archive.aachen.ccc.de/34c3ctf...
What is CTF? https://www.youtube.com/watch?v=8ev9Z...
Why you should play CTFs: https://www.youtube.com/watch?v=rfjV8...
tags: python,crypto,signature,rsa,sha,hash,xor
tools: sublime,python,pycrypto
--------------------------------------
Twitter: https://twitter.com/LiveOverflow
Website: http://liveoverflow.com/
Subreddit: https://www.reddit.com/r/LiveOverflow/
Facebook: https://www.facebook.com/LiveOverflow/

