,1 ʆ d dl mZ d dlmZ d dlmZ d dlmZ d dlm Z d dl
m Z ddgZ G d de
Z G d
d e Z G d d
e Z G d de ZddZdS ) ) DerSequence)
long_to_bytes)Integer)HMAC)EccKey)DsaKey DssSigSchemenewc 6 e Zd ZdZd Zd Zd Zd Zd Zd Z dS ) r zkA (EC)DSA signature object.
Do not instantiate directly.
Use :func:`Crypto.Signature.DSS.new`.
c || _ || _ || _ | j | _ | j dz
dz dz | _ dS )zCreate a new Digital Signature Standard (DSS) object.
Do not instantiate this object directly,
use `Crypto.Signature.DSS.new` instead.
N)_key _encoding_order size_in_bits _order_bits _order_bytes)selfkeyencodingorders v/builddir/build/BUILD/imunify360-venv-2.6.2/opt/imunify360/venv/lib64/python3.11/site-packages/Crypto/Signature/DSS.py__init__zDssSigScheme.__init__3 sO ! ;3355 ! - 1a 7! ; c 4 | j S )zRReturn ``True`` if this signature object can be used
for signing messages.)r has_private)r s r can_signzDssSigScheme.can_signA s y$$&&&r c t d Nz To be provided by subclassesNotImplementedErrorr msg_hashs r _compute_noncezDssSigScheme._compute_nonceG !"@AAAr c t d r r! r# s r _valid_hashzDssSigScheme._valid_hashJ r& r c j st d | st d | }t
j | d j } j
|| } j dk r"d fd|D }n!t | }|S )a Compute the DSA/ECDSA signature of a message.
Args:
msg_hash (hash object):
The hash that was carried out over the message.
The object belongs to the :mod:`Crypto.Hash` package.
Under mode ``'fips-186-3'``, the hash must be a FIPS
approved secure hash (SHA-2 or SHA-3).
:return: The signature as ``bytes``
:raise ValueError: if the hash algorithm is incompatible to the (EC)DSA key
:raise TypeError: if the (EC)DSA key has no private half
z Private key is needed to sign Hash is not sufficiently strongNbinaryr c : g | ]}t |j S )r r ).0xr s r
z%DssSigScheme.sign..k s6 2 2 2#$ -Q0A B B 2 2 2r )r r TypeErrorr(
ValueErrorr% r
from_bytesdigestr _signr joinr encode)r r$ noncezsig_pairoutputs ` r signzDssSigScheme.signM s y$$&& = ;<< < )) @ >?? ? ##H--
x 0 01C$2C1C D E E9??1e,, >X % %XX 2 2 2 2(0 2 2 2 3 3FF !**1133F
r c | | st d | j dk rVt | d| j z k rt d d |d| j || j d fD \ }}n t |d }n$# t t f$ r t d w xY wt | dk s| st d
t |d t |d }}d |cxk r | j
k rn nd |cxk r | j
k sn t d
t j | d| j }| j
|||f }|st d dS )a Check if a certain (EC)DSA signature is authentic.
Args:
msg_hash (hash object):
The hash that was carried out over the message.
This is an object belonging to the :mod:`Crypto.Hash` module.
Under mode ``'fips-186-3'``, the hash must be a FIPS
approved secure hash (SHA-2 or SHA-3).
signature (``bytes``):
The signature that needs to be validated.
:raise ValueError: if the signature is not authentic
r* r+ z'The signature is not authentic (length)c 6 g | ]}t j | S r- )r r3 )r. r/ s r r0 z'DssSigScheme.verify.. s9 J J J$% !( 21 5 5 J J Jr NT)strictz$The signature is not authentic (DER)z,The signature is not authentic (DER content)r r
z"The signature is not authentic (d)z The signature is not authenticF)r( r2 r lenr r decode
IndexError hasOnlyIntsr r r3 r4 r _verify)r r$ signaturer_primes_primeder_seqr9 results r verifyzDssSigScheme.verifyz s
)) @ >?? ? >X % %9~~!d&7"788 !JKKK J J*34FT5F4F*G*3D4E4F4F*G*I J J J GWW
I%--..y.FF
+
I
I
I !GHHH
I7||q (;(;(=(= !OPPP &wqz 2 2GGAJ4G4GWGG))))dk)))))1w3L3L3L3L3L3L3L3L ABB B x 0 01C$2C1C D E E""1w&899 ? =>> >us #B+ +!C N)
__name__
__module__ __qualname____doc__r r r% r( r< rK r- r r r r - s
< < < ' ' ' B B BB B B+ + +Z* * * * *r c < e Zd Z fdZd Zd Zd Zd Zd Z xZ S )DeterministicDsaSigSchemec j t t | ||| || _ d S N)superrQ r _private_key)r r r r private_key __class__s r r z"DeterministicDsaSigScheme.__init__ s4
'..77XuMMM 'r c t j | }| j }t | dz }||k r|||z
z }|S )zSee 2.3.2 in RFC6979r )r r3 r r rA )r bstrrJ q_lenb_lens r _bits2intz#DeterministicDsaSigScheme._bits2int sR #D)) ((**D A
5==
&F
r c X d|cxk r | j k sn J t || j S )zSee 2.3.3 in RFC6979r )r r r )r int_mod_qs r _int2octetsz%DeterministicDsaSigScheme._int2octets s> 9****t{****** Y(9:::r c | | }|| j k r|}n
|| j z
}| | S )zSee 2.3.4 in RFC6979)r\ r r_ )r rY z1z2s r _bits2octetsz&DeterministicDsaSigScheme._bits2octets sI ^^D
!
!
BBdk!B ###r c X | }d|j z }d|j z }dD ]}t j |||z | | j z | | z | }t j ||| }d}d|cxk r | j k sn |dk rSt j ||dz | }t j ||| }d}t | | j k rEt j ||| }||z
}t | | j k E|
| }d|cxk r | j k n |S )z!Generate k in a deterministic way )rf re r r ) r4 digest_sizer r
r_ rU rc r rA r r\ )r mhashh1mask_vnonce_kint_octr8 mask_ts r r% z(DeterministicDsaSigScheme._compute_nonce s
\\^^5,,E --) ? ?Ghw % / # / /0A B B C # 0 0 4 4 56;= = >DVXX
Xgvu55<<>>FFu****t{****{{ (7FW,<#(* **0&(( '6599@@BB F f++ 111 '6599@@BB& f++ 111
NN6**E! u****t{*****" r c dS )NTr- r# s r r( z%DeterministicDsaSigScheme._valid_hash s tr )
rL rM rN r r\ r_ rc r% r(
__classcell__rW s @r rQ rQ s ( ( ( ( ( ; ; ; $ $ $& & &P r rQ c . e Zd ZdZ fdZd Zd Z xZS )FipsDsaSigScheme))i ) )ru )i rw c t t | ||| || _ t |j }|| j f| j vrd|| j fz }t | d S )Nz+L/N (%d, %d) is not compliant to FIPS 186-3)
rT rs r _randfuncr pr r _fips_186_3_L_Nr2 )r r r r randfuncLerrorrW s r r zFipsDsaSigScheme.__init__ s
%%..sHeDDD! CENN ' ' ) )
t (< < <B4+,-E U## # = >ABBB
c#344 &&&(h{KKK
c6 " " D%c8UHEE E#C5(CC C047888r )r+ N)Crypto.Util.asn1r Crypto.Util.numberr Crypto.Math.Numbersr Crypto.Hashr Crypto.PublicKey.ECCr Crypto.PublicKey.DSAr __all__objectr rQ rs r r
r- r r r se D ) ( ( ( ( ( , , , , , , ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' 5
!w w w w w6 w w wtK K K K K K K K\ B B B B B| B B BD >]9 ]9 ]9 ]9 ]9 ]9r