a
a.2 @ s d dl mZ d dlmZmZmZ d dlmZmZm Z m
Z
d dl m Z m
Z
d dlmZmZmZ ejdddZd d
Zd d Zd
d Zdd Zdd ZG dd deZG dd deZG dd dejZ G dd dej Z dS ) )utils)InvalidSignatureUnsupportedAlgorithm_Reasons) _calculate_digest_and_algorithm_check_not_prehashed_evp_pkey_derive _warn_sign_verify_deprecated)hashes
serialization)AsymmetricSignatureContext AsymmetricVerificationContextecsignature_algorithmc C s t | tjstdtjd S )Nz/Unsupported elliptic curve signature algorithm.)
isinstancer ZECDSAr r Z UNSUPPORTED_PUBLIC_KEY_ALGORITHMr r M/usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/ec.py_check_signature_algorithm s
r c C s | j |}| || jjk | j |}|| j jkr>td| j js^| j |dkr^td| j
|}| || jjk | j | d}|S )Nz@ECDSA keys with explicit parameters are unsupported at this timer ascii)
_libEC_KEY_get0_groupopenssl_assert_ffiNULLEC_GROUP_get_curve_nameZ NID_undef
ValueErrorZCRYPTOGRAPHY_IS_LIBRESSLZEC_GROUP_get_asn1_flagZ
OBJ_nid2snstringdecode)backendZec_keygroupZnidZ
curve_namesnr r r _ec_key_curve_sn$ s$ r" c C s | j || j j dS )z
Set the named curve flag on the EC_KEY. This causes OpenSSL to
serialize EC keys along with their curve OID which makes
deserialization easier.
N)r ZEC_KEY_set_asn1_flagZOPENSSL_EC_NAMED_CURVE)r Zec_cdatar r r _mark_asn1_named_ec_curveB s r# c C s8 zt j| W S ty2 td|tjY n0 d S )Nz${} is not a supported elliptic curve)r Z _CURVE_TYPESKeyErrorr formatr ZUNSUPPORTED_ELLIPTIC_CURVE)r r! r r r _sn_to_elliptic_curveN s r& c C sz | j |j}| |dk | jd|}| jdd}| j d|t||||j}| |dk | j|d |d S )Nr zunsigned char[]zunsigned int[] ) r Z
ECDSA_size_ec_keyr r newZ
ECDSA_signlenbuffer)r private_keydataZmax_sizeZsigbufZ
siglen_ptrresr r r _ecdsa_sig_signX s r/ c C s8 | j d|t||t||j}|dkr4| td S )Nr r' )r Z ECDSA_verifyr* r( Z_consume_errorsr )r
public_key signaturer- r. r r r _ecdsa_sig_verifye s r2 c @ s> e Zd ZejejdddZeddddZ edd d
Z
dS ) _ECDSASignatureContext)r, algorithmc C s || _ || _t||| _d S N)_backend _private_keyr
Hash_digest)selfr r, r4 r r r __init__o s z _ECDSASignatureContext.__init__Nr- returnc C s | j | d S r5 r9 updater: r- r r r r? y s z _ECDSASignatureContext.updater= c C s | j }t| j| j|S r5 )r9 finalizer/ r6 r7 r: Zdigestr r r rB | s
z _ECDSASignatureContext.finalize) __name__
__module__ __qualname__r EllipticCurvePrivateKeyr
HashAlgorithmr; bytesr? rB r r r r r3 n s
r3 c @ s@ e Zd ZejeejdddZeddddZ ddd d
Z
dS ) _ECDSAVerificationContext)r0 r1 r4 c C s$ || _ || _|| _t||| _d S r5 )r6 _public_key
_signaturer
r8 r9 )r: r r0 r1 r4 r r r r; s z"_ECDSAVerificationContext.__init__Nr< c C s | j | d S r5 r> r@ r r r r? s z _ECDSAVerificationContext.updaterA c C s" | j }t| j| j| j| d S r5 )r9 rB r2 r6 rK rL rC r r r verify s
z _ECDSAVerificationContext.verify) rD rE rF r EllipticCurvePublicKeyrI r
rH r; r? rM r r r r rJ s rJ c @ s e Zd Zdd ZedZeedddZ e
j e ddd Z
e
je
jed
d d Ze
jdd
dZe
jdddZejejejedddZee
j edddZdS )_EllipticCurvePrivateKeyc C s6 || _ || _|| _t||}t||| _t|| d S r5 r6 r( _evp_pkeyr" r& _curver# r: r Z ec_key_cdataevp_pkeyr! r r r r; s
z!_EllipticCurvePrivateKey.__init__rR rA c C s | j jS r5 curvekey_sizer: r r r rW s z!_EllipticCurvePrivateKey.key_size)r r= c C s: t t| t|j t|jtjs*J t| j| |jS r5 ) r r r r4 r r
rH r3 r6 )r: r r r r signer s
z _EllipticCurvePrivateKey.signer)r4 peer_public_keyr= c C sD | j || js tdtj|jj| jjkr4tdt| j | j |S )Nz1This backend does not support the ECDH algorithm.z2peer_public_key and self are not on the same curve)
r6 Z+elliptic_curve_exchange_algorithm_supportedrV r r Z UNSUPPORTED_EXCHANGE_ALGORITHMnamer r rQ )r: r4 rZ r r r exchange s z!_EllipticCurvePrivateKey.exchangec C s | j j| j}| j || j jjk | j j|}| j |}| j j | j}| j || j jjk | j j
||}| j |dk | j |}t | j ||S )Nr' )
r6 r r r( r r r r Z_ec_key_new_by_curve_nidEC_KEY_get0_public_keyZEC_KEY_set_public_keyZ_ec_cdata_to_evp_pkey_EllipticCurvePublicKey)r: r Z curve_nidZ
public_ec_keypointr. rT r r r r0 s z#_EllipticCurvePrivateKey.public_keyc C s2 | j j| j}| j |}tj|| dS )N)
private_valuepublic_numbers) r6 r ZEC_KEY_get0_private_keyr(
_bn_to_intr EllipticCurvePrivateNumbersr0 ra )r: Zbnr` r r r private_numbers s
z(_EllipticCurvePrivateKey.private_numbers)encodingr% encryption_algorithmr= c C s | j |||| | j| jS r5 )r6 Z_private_key_bytesrQ r( )r: re r% rf r r r
private_bytes s z&_EllipticCurvePrivateKey.private_bytes)r- r r= c C s* t | t| j||j\}}t| j| |S r5 )r r r6
_algorithmr/ )r: r- r r4 r r r sign s z _EllipticCurvePrivateKey.signN)rD rE rF r; r read_only_propertyrV propertyintrW r EllipticCurveSignatureAlgorithmr rY ZECDHrN rI r\ r0 rc rd r EncodingZ
PrivateFormatZKeySerializationEncryptionrg ri r r r r rO s*
rO c @ s e Zd Zdd ZedZeedddZ e
e j e
ddd Ze jdd
d Zeje
d d
dZejeje
dddZe
e
e j ddddZdS )r^ c C s6 || _ || _|| _t||}t||| _t|| d S r5 rP rS r r r r; s
z _EllipticCurvePublicKey.__init__rR rA c C s | j jS r5 rU rX r r r rW s z _EllipticCurvePublicKey.key_size)r1 r r= c C sH t td| t| t|j t|jtjs6J t | j
| ||jS )Nr1 ) r r _check_bytesr r r4 r r
rH rJ r6 )r: r1 r r r r verifier s
z _EllipticCurvePublicKey.verifierc
C s | j | j\}}| j j| j}| j || j jjk | j d}| j j |}| j j |}||||||}| j |dk | j
|}| j
|} W d n1 s0 Y t j || | j
dS )Nr' )xyrV )r6 Z _ec_key_determine_group_get_funcr( r r] r r r _tmp_bn_ctxZ
BN_CTX_getrb r EllipticCurvePublicNumbersrR )
r: Zget_funcr r_ bn_ctxZbn_xZbn_yr. rq rr r r r ra s *z&_EllipticCurvePublicKey.public_numbers)r% r= c C s& |t jju r| jjj}n|t jju s(J | jjj}| jj| j }| j
|| jj j k | jj
| j }| j
|| jj j k | j v}| jj|||| jj j d|}| j
|dk | jj d|}| jj||||||}| j
||k W d n1 s0 Y | jj |d d S )Nr zchar[])r PublicFormatCompressedPointr6 r ZPOINT_CONVERSION_COMPRESSEDUncompressedPointZ POINT_CONVERSION_UNCOMPRESSEDr r( r r r r] rs ZEC_POINT_point2octr) r+ ) r: r%
conversionr r_ ru buflenbufr. r r r
_encode_point2 s&
0z%_EllipticCurvePublicKey._encode_point)re r% r= c C sp |t jju s$|t jju s$|t jju rV|t jjusD|t jjt jjfvrLtd| |S | j ||| | j
d S d S )NzKX962 encoding must be used with CompressedPoint or UncompressedPoint format) r rn ZX962rv rw rx r r| r6 Z_public_key_bytesrQ )r: re r% r r r public_bytesJ s"
z$_EllipticCurvePublicKey.public_bytesN)r1 r- r r= c C s0 t | t| j||j\}}t| j| || d S r5 )r r r6 rh r2 )r: r1 r- r r4 r r r rM c s z _EllipticCurvePublicKey.verify)rD rE rF r; r rj rV rk rl rW rI r rm r
rp rt ra r rv r| rn r} rM r r r r r^ s&
r^ N) Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r r r Z cryptography.hazmat.primitivesr
r Z)cryptography.hazmat.primitives.asymmetricr r
r rm r r" r# r& r/ r2 r3 rJ rG rO rN r^ r r r r s
f