z d dl mZ d dlmZmZ d dlmZmZ d dlm Z m
Z
m Z m Z d Z
d Z G d de Zd d
Zd S ) )Integer)SHA512SHAKE256)bchris_bytes)EccKey construct_import_ed25519_public_key_import_ed448_public_keyc t | dk rt | \ }}d}nGt | dk rt | \ }}d}n t dt | z t ||| S )a Create a new Ed25519 or Ed448 public key object,
starting from the key encoded as raw ``bytes``,
in the format described in RFC8032.
Args:
encoded (bytes):
The EdDSA public key to import.
It must be 32 bytes for Ed25519, and 57 bytes for Ed448.
Returns:
:class:`Crypto.PublicKey.EccKey` : a new ECC key object.
Raises:
ValueError: when the given key cannot be parsed.
Ed255199 Ed448zNot an EdDSA key (%d bytes))curvepoint_xpoint_y)lenr
r
ValueErrorr )encodedxy
curve_names x/builddir/build/BUILD/imunify360-venv-2.6.2/opt/imunify360/venv/lib64/python3.11/site-packages/Crypto/Signature/eddsa.pyimport_public_keyr ) s " 7||r)'221
W '001
6W EFFF :q! < < << c t | dk rd}n%t | dk rd}nt d t | | S )a Create a new Ed25519 or Ed448 private key object,
starting from the key encoded as raw ``bytes``,
in the format described in RFC8032.
Args:
encoded (bytes):
The EdDSA private key to import.
It must be 32 bytes for Ed25519, and 57 bytes for Ed448.
Returns:
:class:`Crypto.PublicKey.EccKey` : a new ECC key object.
Raises:
ValueError: when the given key cannot be parsed.
r
ed25519r ed448z8Incorrect length. Only EdDSA private keys are supported.)seedr )r r r )r r s r import_private_keyr! E sX " 7||r
W
STTT
' 4 4 44r c B e Zd ZdZd Zd Zd Zd Zd Zd Z d Z
d Z d
S ) EdDSASigSchemezlAn EdDSA signature object.
Do not instantiate directly.
Use :func:`Crypto.Signature.eddsa.new`.
c v || _ || _ | | _ |j j | _ dS )zCreate a new EdDSA object.
Do not instantiate this object directly,
use `Crypto.Signature.DSS.new` instead.
N)_key_context
_export_eddsa_A_curveorder_order)selfkeycontexts r __init__zEdDSASigScheme.__init__i s5
##%%j& r c 4 | j S )zRReturn ``True`` if this signature object can be used
for signing messages.)r% has_private)r, s r can_signzEdDSASigScheme.can_signu s y$$&&&r c | j st d | j j j dk rBt |t j }|s t | st d | j }nf| j j j dk rBt |t j }|s t | st d | j }nt d ||| S )aJ Compute the EdDSA signature of a message.
Args:
msg_or_hash (bytes or a hash object):
The message to sign (``bytes``, in case of *PureEdDSA*) or
the hash that was carried out over the message (hash object, for *HashEdDSA*).
The hash object must be :class:`Crypto.Hash.SHA512` for Ed25519,
and :class:`Crypto.Hash.SHAKE256` object for Ed448.
:return: The signature as ``bytes``. It is always 64 bytes for Ed25519, and 114 bytes for Ed448.
:raise TypeError: if the EdDSA key has no private half
z Private key is needed to signr -'msg_or_hash' must be bytes of a SHA-512 hashr .'msg_or_hash' must be bytes of a SHAKE256 hashIncorrect curve for EdDSA)r% r1 TypeErrorr) name
isinstancer
SHA512Hashr
_sign_ed25519r SHAKE256_XOF _sign_ed448r )r, msg_or_hashpheddsa_sign_methods r signzEdDSASigScheme.sign{ s y$$&& = ;<< < 9 I - -K):;;B
Q(;//
Q OPPP $ 2
Y
"g
-
-K)>??B
R(;//
R PQQQ $ 0 899 9 b111r c | j s|rLt | }dt | z t t | j z | j z }nd}|r| n|}t j || j j z |z }t j
|d | j z }t || j j
j z }t j ||z | j z |z } t j
| d | j z }
||
| j j z z | j z } || dd z S )N SigEd25519 no Ed25519 collisionsr littlepointr
)r& intr r digestr newr% _prefixr
from_bytesr+ r r) Gr' r( dto_bytes) r, r> r? flagdom2PHMr_hashrR_pkk_hashkss r r; z EdDSASigScheme._sign_ed25519 sZ = B r77D6dCDM**++,.2mA 0 2 2333AACCD4K$' 1C 788??AA vx 0 04; >
TY[
DK /ajjX....r c t | }dt | z t t | j z | j z }|r| d n|}t j || j j z |z d }t j
|d | j z }t || j j
j z }t j ||z | j z |z d } t j
| d | j z }
||
| j j z z | j z } || dd z S )N SigEd448@ r rD rE r )rG r r r& readr rI r% rJ r rK r+ r r) rL r' r( rM rN ) r, r> r? rO dom4rQ rR rS rT rU rV rW s r r= zEdDSASigScheme._sign_ed448 sH 2wwT$ZZ'C
&&''(*.-8 ')9k r"""k
dTY%6 6 <==BB3GG vx 0 04; >A 0 2 2333AACC dTkDG 3c 9::??DD vx 0 04; >
TY[
DK /ajjX....r c | j j j dk rBt |t j }|s t
| st d | j }nf| j j j dk rBt |t j
}|s t
| st d | j }nt d |||| S )a Check if an EdDSA signature is authentic.
Args:
msg_or_hash (bytes or a hash object):
The message to verify (``bytes``, in case of *PureEdDSA*) or
the hash that was carried out over the message (hash object, for *HashEdDSA*).
The hash object must be :class:`Crypto.Hash.SHA512` object for Ed25519,
and :class:`Crypto.Hash.SHAKE256` for Ed448.
signature (``bytes``):
The signature that needs to be validated.
It must be 64 bytes for Ed25519, and 114 bytes for Ed448.
:raise ValueError: if the signature is not authentic
r r4 r r5 r6 )
r% r) r8 r9 r r: r r7 _verify_ed25519r r<
_verify_ed448r )r, r> signaturer? eddsa_verify_methods r verifyzEdDSASigScheme.verify s $ 9 I - -K):;;B
Q(;//
Q OPPP"&"6
Y
"g
-
-K)>??B
R(;//
R PQQQ"&"4 899 9""; 2>>>r c F t | dk rt d | j s|rLt | }dt | z t t | j z | j z }nd}|r| n|} t
|d d j }n # t $ r t d w xY wt j |dd d }|| j
k rt d t j ||d d z | j
z |z } t j | d | j
z }
|d z | j j j z } d |z |
d z | j j z z } | | k rt d
d S ) NrZ 'The signature is not authentic (length)rC r r
"The signature is not authentic (R)rD "The signature is not authentic (S) The signature is not authentic)r r r& rG r rH r pointQr rK r+ r rI r( r% r) rL )
r, r> ra r? rO rP rQ RrW rU rV point1point2s
r r_ z EdDSASigScheme._verify_ed25519 s y>>R FGG G = B r77D6dCDM**++,.2m 1DG ;c ABBIIKK vx 0 04; >Q)++ QQ!111 V =>> > s B0 0C
c 2 t | dk rt d t | }dt | z t t | j z | j z }|r| d n|} t
|d d j }n # t $ r t d w xY wt j |dd d }|| j
k rt d t j ||d d z | j
z |z d } t j | d | j
z }
|d z | j j j z } d |z |
d z | j j z z } | | k rt d
d S ) Nr[ re rY rZ r rf rD rg rh ri )r r rG r r& r\ r rj r rK r+ r rI r( r% r) rL )
r, r> ra r? rO r] rQ rk rW rU rV rl rm s
r r` z EdDSASigScheme._verify_ed448 s y>>S FGG G2wwT$ZZ'C
&&''(*.-8 ')9k r"""k
C!)CRC.118AA C C C ABB B C y~x 8 8 t{?? ABB B dYss^ 3dg = CDDII#NN vx 0 04; >Q)++ QQ!111 V =>> > s B% %B?N) __name__
__module__ __qualname____doc__r/ r2 rA r; r= rc r_ r` r r r# r# c s
'
'
'' ' ' !2 !2 !2F/ / /6/ / /0!? !? !?F!? !? !?F ? ? ? ? ?r r# Nc
t | t r| st d |dk rt d |d}n"t | dk rt d t | | S )a Create a signature object :class:`EdDSASigScheme` that
can perform or verify an EdDSA signature.
Args:
key (:class:`Crypto.PublicKey.ECC` object):
The key to use for computing the signature (*private* keys only)
or for verifying one.
The key must be on the curve ``Ed25519`` or ``Ed448``.
mode (string):
This parameter must be ``'rfc8032'``.
context (bytes):
Up to 255 bytes of `context `_,
which is a constant byte string to segregate different protocols or
different applications of the same key.
z&EdDSA can only be used with EdDSA keysrfc8032zMode must be 'rfc8032'Nr z3Context for EdDSA must not be longer than 255 bytes)r9 r _is_eddsar r r# )r- moder. s r rI rI 9 s & c6 " " C#--// CABBB y1222 W NOOO #w ' ''r )N)Crypto.Math.Numbersr Crypto.Hashr r Crypto.Util.py3compatr r Crypto.PublicKey.ECCr r r
r r r! objectr# rI rs r r r~ s > ( ' ' ' ' ' ( ( ( ( ( ( ( ( 0 0 0 0 0 0 0 0< < < < < < < < < < < < = = =85 5 5