՟ oO d dl mZ d dlmZ d dlmZ d dlmZmZ d dl m
Z
m Z m Z d dl
mZ dZd
dZ G d d
e Z dd ZdS ) ) unhexlify)BLAKE2s)strxor)
long_to_bytes
bytes_to_long)bordtobytes _copy_bytes)get_random_bytesNc t | dz |z }t |t | t | d S )N )r r len)bsxor_lsbnums r/builddir/build/BUILD/imunify360-venv-2.6.2/opt/imunify360/venv/lib64/python3.11/site-packages/Crypto/Hash/CMAC.py _shift_bytesr $ s@ !W
,C c"gg & &Bxyy 11 c F e Zd ZdZdZd Zd Zd Zd Zd Z d Z
d Z d
Z dS ) CMACzA CMAC hash object.
Do not instantiate directly. Use the :func:`new` function.
:ivar digest_size: the size in bytes of the resulting MAC tag
:vartype digest_size: integer
Nc h || _ t d d | | _ || _ || _ |j x| _ }d | _ || _ |dk r
d}d| _ n"|dk r
d}d| _ nt d|z d|z } |j ||j fi | j | _
| j
| }
t |
d d
z rt! |
| | _ nt! |
| _ t | j d d
z rt! | j | | _ nt! | j | _ |j ||j | fi | j | _ t+ | | _ d | _ | | _ d | _ d | _ |r| | d S d S ) N i l zACMAC requires a cipher with a block size of 8 or 16 bytes, not %d r ) digest_sizer
_key_factory_cipher_params
block_size _block_size_mac_tag_update_after_digest _max_size TypeErrornewMODE_ECB_ecbencryptr r _k1_k2MODE_CBC_cbc bytearray_cache_cache_n_last_ct_last_pt
_data_sizeupdate) selfkeymsg ciphermod
cipher_paramsmac_lenupdate_after_digestr const_Rb
zero_blockLs r __init__z
CMAC.__init__3 s # dC00 !
+ ) 442
$7! 77H *DNN
2XXH +DNN 8:< = > >
> r\
!IM#"+"49 9$($79 9
I j ) ) !:: '#Ax00DHH#ADH t # .#DHh77DHH#DH--DH "IM#"+"4",9 9 %)$79 9 mm
#
KK r c | j | j st d | xj t | z
c_ | j }| j dk rt || j z
t | }|d| | j | j | j |z < | xj |z
c_ | j |k r| S t | |d }|
| j d| _ t | |z }|dk r4|
|d| || d | j d|< n|
| || _ | S )zAuthenticate the next chunk of message.
Args:
data (byte string/byte array/memoryview): The next chunk of data
Nz4update() cannot be called after digest() or verify()r ) r$ r% r' r5 r r# r2 minr1
memoryview_update)r7 r9 r fillerremains r r6 z CMAC.updateo sL = $T-F $ RSS S 3s88#
=1 dm+SXX66F>A'6'lDK
dmF&:: ; MMV #MM}r!! S//&''*C LL % % % DMSB A:: LLXvgX ' ' '#&wxx=DK LL
r c R | j }t | |z dk sJ t | dk rdS | j | }t | |k r| j }n|| dz | }|| d | _ t ||| d | _ dS )z,Update a block aligned to the block boundaryr N )r# r r/ r+ r3 r r4 )r7
data_blockr ct second_lasts r rE z CMAC._update s
:#q(((( z??a F
Y
z
*
* z??b -KK bSUB3Y-KB344
{Jstt,<==
r c , | t }| j |_ | j j | j | j j | j fi | j |_
| j dd |_ | j dd |_ |S )a+ Return a copy ("clone") of the CMAC object.
The copy will have the same internal state as the original CMAC
object.
This can be used to efficiently compute the MAC tag of byte
strings that share a common initial substring.
:return: An :class:`CMAC`
N) __new__r __dict__copyr r( r r. r3 r! r/ r1 )r7 objs r rP z CMAC.copy s ll4 }))++ $4=$TY%)]%;%)]< < (,':< < [^
}QQQ'
r c | j }| j | j s| j S | j | j k rt d | j dk r&| j dk rt | j | j }nT| j
dd }dd|| j z
dz
z z || j d< t t | j | | j }| j
| d| j | _ | j S )zReturn the **binary** (non-printable) MAC tag of the message
that has been authenticated so far.
:return: The MAC tag, computed over the data processed so far.
Binary form.
:rtype: byte string
Nz MAC is unsafe for this messager r r
)r# r$ r% r5 r&
ValueErrorr2 r r4 r, r1 r3 r- r* r+ r )r7 r ptpartials r digestz CMAC.digest s
= $T-F $= ?T^ + + =>> > =A $/A"5"5
tx00BB k!!!nG&-2
;MPQ;Q0R&RGDMNN #t}g66AAB ))"--.?t/?.?@
} r c ~ d d t | D S )Return the **printable** MAC tag of the message authenticated so far.
:return: The MAC tag, computed over the data processed so far.
Hexadecimal encoded.
:rtype: string
c 2 g | ]}d t | z S )z%02x)r ).0xs r
z"CMAC.hexdigest.. s3 7 7 7 a( 7 7 7r )jointuplerW )r7 s r hexdigestzCMAC.hexdigest sF ww 7 7!&t{{}}!5!57 7 7 8 8 8r c t d }t j d|| }t j d|| }| | k rt d dS )ag Verify that a given **binary** MAC (computed by another party)
is valid.
Args:
mac_tag (byte string/byte array/memoryview): the expected MAC of the message.
Raises:
ValueError: if the MAC does not match. It means that the message
has been tampered with or that the MAC key is incorrect.
r ) digest_bitsr8 datazMAC check failedN)r r r( rW rT )r7 mac_tagsecretmac1mac2s r verifyz CMAC.verify sw ""%%{sWEEE{sT[[]]KKK ;;==DKKMM ) ) /00 0 * )r c d | t t | dS )rY N)rj r r )r7 hex_mac_tags r hexverifyzCMAC.hexverify s,
Igk 2 23344444r )
__name__
__module__ __qualname____doc__r rA r6 rE rP rW ra rj rm r r r r ) s K: : : x D> > >" * < 8 8 81 1 1(5 5 5 5 5r r Fc |t d |i nt | }||j }|dk rt d ||j k rt d|j z t | ||||| S )a
Create a new MAC object.
Args:
key (byte string/byte array/memoryview):
key for the CMAC object.
The key must be valid for the underlying cipher algorithm.
For instance, it must be 16 bytes long for AES-128.
ciphermod (module):
A cipher module from :mod:`Crypto.Cipher`.
The cipher's block size has to be 128 bits,
like :mod:`Crypto.Cipher.AES`, to reduce the probability
of collisions.
msg (byte string/byte array/memoryview):
Optional. The very first chunk of the message to authenticate.
It is equivalent to an early call to `CMAC.update`. Optional.
cipher_params (dict):
Optional. A set of parameters to use when instantiating a cipher
object.
mac_len (integer):
Length of the MAC, in bytes.
It must be at least 4 bytes long.
The default (and recommended) length matches the size of a cipher block.
update_after_digest (boolean):
Optional. By default, a hash object cannot be updated anymore after
the digest is computed. When this flag is ``True``, such check
is no longer enforced.
Returns:
A :class:`CMAC` object
Nz%ciphermod must be specified (try AES) z,MAC tag length must be at least 4 bytes longz>MAC tag length cannot be larger than a cipher block (%d) bytes)r' dictr" rT r )r8 r9 r: r; r< r= s r r( r( s @ ?@@@'/BBT-5H5HM&{{GHHH%%%Y\e\ppqqq S)]G# % % %r )r )NNNNF)binasciir Crypto.Hashr Crypto.Util.strxorr Crypto.Util.numberr r Crypto.Util.py3compatr r r
Crypto.Randomr r r objectr r( rr r r r} s . % % % % % % ; ; ; ; ; ; ; ; < < < < < < < < < < * * * * * * 2 2 2 2
S5 S5 S5 S5 S56 S5 S5 S5l DH !/% /% /% /% /% /%r