j; Mo~G` d dl mZ d dlmZ d dlmZ d dlmZmZ d dl m
Z
d dl m Z d dl
mZmZ d dlmZ d Z ed
d d
Z G d de Zd ZdZdS ) ) unhexlify)ChaCha20)
_HChaCha20)Poly1305BLAKE2s)get_random_bytes)
long_to_bytes) _copy_bytesbord) is_bufferc $ t dd| S )NEnum )type)enumss /builddir/build/BUILD/imunify360-venv-2.6.2/opt/imunify360/venv/lib64/python3.11/site-packages/Crypto/Cipher/ChaCha20_Poly1305.py_enumr , s E " "" )PROCESSING_AUTH_DATAPROCESSING_CIPHERTEXTPROCESSING_DONEc ^ e Zd ZdZd Zd Zd ZddZddZd Z d Z
d
Z d Z d Z
d
Zd ZdS )ChaCha20Poly1305CipherzChaCha20-Poly1305 and XChaCha20-Poly1305 cipher object.
Do not create it directly. Use :py:func:`new` instead.
:var nonce: The nonce with length 8, 12 or 24 bytes
:vartype nonce: byte string
c d| _ t j ||t | _ t j || | _ | j d d| _ d| _ d| _ t j | _ dS )z`Initialize a ChaCha20-Poly1305 AEAD cipher object
See also `new()` at the module level.)updateencryptdecryptdigestverify)keynoncecipher)r# r$ @ r N)
_nextr newr _authenticator_cipherseek_len_aad_len_ct_mac_tag
_CipherStatusr _status)selfr# r$ s r __init__z ChaCha20Poly1305Cipher.__init__= su
'ls% Q Q Q |5999 "
$9 r c d| j vrt d | xj t | z
c_ | j | dS )a Protect the associated data.
Associated data (also known as *additional authenticated data* - AAD)
is the piece of the message that must stay in the clear, while
still allowing the receiver to verify its integrity.
An example is packet headers.
The associated data (possibly split into multiple segments) is
fed into :meth:`update` before any call to :meth:`decrypt` or :meth:`encrypt`.
If there is no associated data, :meth:`update` is not called.
:param bytes/bytearray/memoryview assoc_data:
A piece of associated data. There are no restrictions on its size.
r z update() method cannot be calledN)r' TypeErrorr, lenr) r )r1 datas r r z ChaCha20Poly1305Cipher.updateO sS 4: % % >?? ?
T"
""4(((((r c | j t j k sJ | j dz r(| j dd| j dz z
z t j | _ d S )N )r0 r/ r r, r) r r r1 s r _pad_aadz ChaCha20Poly1305Cipher._pad_aade s^ |} AAAAA =4 P & &w"
8L2M'N O O O$: r Nc v d| j vrt d | j t j k r| d| _ | j || }| xj t | z
c_ || j
| n| j
| |S )a Encrypt a piece of data.
Args:
plaintext(bytes/bytearray/memoryview): The data to encrypt, of any size.
Keyword Args:
output(bytes/bytearray/memoryview): The location where the ciphertext
is written to. If ``None``, the ciphertext is returned.
Returns:
If ``output`` is ``None``, the ciphertext is returned as ``bytes``.
Otherwise, ``None``.
r z!encrypt() method cannot be calledr r! output) r' r4 r0 r/ r r< r* r r- r5 r) r )r1 plaintextr@ results r r z ChaCha20Poly1305Cipher.encryptl s DJ & & ?@@ @ <== = = MMOOO*
%%i%?? I& > & &v . . . . & &v . . .
r c 8 d| j vrt d | j t j k r| d| _ | xj t | z
c_ | j | | j
|| S )a Decrypt a piece of data.
Args:
ciphertext(bytes/bytearray/memoryview): The data to decrypt, of any size.
Keyword Args:
output(bytes/bytearray/memoryview): The location where the plaintext
is written to. If ``None``, the plaintext is returned.
Returns:
If ``output`` is ``None``, the plaintext is returned as ``bytes``.
Otherwise, ``None``.
r z!decrypt() method cannot be calledr r" r? ) r' r4 r0 r/ r r< r- r5 r) r r* r )r1
ciphertextr@ s r r z ChaCha20Poly1305Cipher.decrypt s DJ & & ?@@ @ <== = = MMOOO*
J' "":...|##Jv#>>>r c t | j r | j t j k sJ | j S | j t j k sJ | j t j k r| | j dz r(| j dd| j dz z
z t j | _ | j t | j
d ddd | j t | j d ddd | j | _ | j S )z=Finalize the cipher (if not done already) and return the MAC.r8 r9 r: N) r. r0 r/ r r r< r- r) r r r, r! r; s r _compute_macz#ChaCha20Poly1305Cipher._compute_mac s = !<=#@@@@@= |} <<<<< <== = = MMOOO <$ O & &w" t8K2L'M N N N$4 ""= #B#B44R4#HIII ""= q#A#A$$B$#GHHH +2244
} r c h d| j vrt d d| _ | S )zgCompute the *binary* authentication tag (MAC).
:Return: the MAC tag, as 16 ``bytes``.
r! z digest() method cannot be called)r! )r' r4 rI r; s r r! z ChaCha20Poly1305Cipher.digest s9 4: % % >?? ?
"""r c d d d | D S )zCompute the *printable* authentication tag (MAC).
This method is like :meth:`digest`.
:Return: the MAC tag, as a hexadecimal string.
c 2 g | ]}d t | z S )z%02x)r ).0xs r
z4ChaCha20Poly1305Cipher.hexdigest.. s# @@@Qa(@@@r )joinr! r; s r hexdigestz ChaCha20Poly1305Cipher.hexdigest s- ww@@$++--@@@AAAr c b d| j vrt d d| _ t d }| t j d|| j }t j d|| }| | k rt d dS ) a Validate the *binary* authentication tag (MAC).
The receiver invokes this method at the very end, to
check if the associated data (if any) and the decrypted
messages are valid.
:param bytes/bytearray/memoryview received_mac_tag:
This is the 16-byte *binary* MAC, as received from the sender.
:Raises ValueError:
if the MAC does not match. The message has been tampered with
or the key is incorrect.
r" z3verify() cannot be called when encrypting a message)r" r: ) digest_bitsr# r6 zMAC check failedN) r' r4 r rI r r( r. r!
ValueError)r1 received_mac_tagsecretmac1mac2s r r" z ChaCha20Poly1305Cipher.verify s 4: % % 9 : :
:
!"%% {s $
/ / /{s 02 2 2 ;;==DKKMM ) ) /00 0 * )r c J | t | dS )a@ Validate the *printable* authentication tag (MAC).
This method is like :meth:`verify`.
:param string hex_mac_tag:
This is the *printable* MAC.
:Raises ValueError:
if the MAC does not match. The message has been tampered with
or the key is incorrect.
N)r" r )r1 hex_mac_tags r hexverifyz ChaCha20Poly1305Cipher.hexverify s$
Ik**+++++r c T | | | fS )aH Perform :meth:`encrypt` and :meth:`digest` in one step.
:param plaintext: The data to encrypt, of any size.
:type plaintext: bytes/bytearray/memoryview
:return: a tuple with two ``bytes`` objects:
- the ciphertext, of equal length as the plaintext
- the 16-byte MAC tag
r> )r1 rA s r encrypt_and_digestz)ChaCha20Poly1305Cipher.encrypt_and_digest s# ||I&&
55r c Z | | }| | |S )a Perform :meth:`decrypt` and :meth:`verify` in one step.
:param ciphertext: The piece of data to decrypt.
:type ciphertext: bytes/bytearray/memoryview
:param bytes received_mac_tag:
This is the 16-byte *binary* MAC, as received from the sender.
:return: the decrypted data (as ``bytes``)
:raises ValueError:
if the MAC does not match. The message has been tampered with
or the key is incorrect.
rD )r1 rE rW rA s r decrypt_and_verifyz)ChaCha20Poly1305Cipher.decrypt_and_verify s. LL,, $%%%r )N)__name__
__module__ __qualname____doc__r2 r r< r r rI r! rR r" r] r_ ra r r r r r 5 s : : :$) ) ),; ; ; :? ? ? ?2 ,
#
#
#B B B 1 1 1> , , , 6 6 6 r r c | d }n$# t $ r}t d|z d}~ww xY wt | dk rt d | dd }|t d }t | dv r|}nHt | d k r&t ||dd
}d |d
d z }nt d t | st d
| r t dt | z t || }t dd| |_ |S )a Create a new ChaCha20-Poly1305 or XChaCha20-Poly1305 AEAD cipher.
:keyword key: The secret key to use. It must be 32 bytes long.
:type key: byte string
:keyword nonce:
A value that must never be reused for any other encryption
done with this key.
For ChaCha20-Poly1305, it must be 8 or 12 bytes long.
For XChaCha20-Poly1305, it must be 24 bytes long.
If not provided, 12 ``bytes`` will be generated randomly
(you can find them back in the ``nonce`` attribute).
:type nonce: bytes, bytearray, memoryview
:Return: a :class:`Crypto.Cipher.ChaCha20.ChaCha20Poly1305Cipher` object
r# zMissing parameter %sN zKey must be 32 bytes longr$ )rG rh r: s z$Nonce must be 8, 12 or 24 bytes longz,nonce must be bytes, bytearray or memoryviewzUnknown parameters: )popKeyErrorr4 r1 r- r5 rA rV r r r strr r
r$ )kwargsr# er$ chacha20_poly1305_noncer% s r r( r( sc *'jj ' ' '.2333'
3xx2~~4555 JJw % %E } $$
5zzW "' Ur eCRCj))"5bcc
"B ?@@@ U HFGGG
>.V<===
#C)@
A
AF tT511FL Ms
949rg N)binasciir
Crypto.Cipherr Crypto.Cipher.ChaCha20r Crypto.Hashr r
Crypto.Randomr Crypto.Util.numberr Crypto.Util.py3compatr
r Crypto.Util._raw_apir r r/ objectr r( key_sizer r r rz s > " " " " " " - - - - - - ) ) ) ) ) ) ) ) * * * * * * , , , , , , 3 3 3 3 3 3 3 3 * * * * * *# # # 1,-&') ) )
a a a a aV a a aH3 3 3n r