a
hS @ sZ d dl Z d dlmZ d dlmZmZmZ d dlmZm Z m
Z
d dl m Z m
Z
d dlmZmZmZ d dlmZmZmZmZmZmZ d dlmZmZm Z m Z ee j ee f e j e d d
d Z!e j d e"ee"d
ddZ#e j d e"e ee"dddZ$dd Z%dd Z&dd Z'dd Z(dd Z)G d d d eZ*G d d d eZ+G d!d" d"eZ,G d#d$ d$e Z-dS )% N)utils)InvalidSignatureUnsupportedAlgorithm_Reasons) _calculate_digest_and_algorithm_check_not_prehashed _warn_sign_verify_deprecated)hashes
serialization)AsymmetricSignatureContext AsymmetricVerificationContextr )AsymmetricPaddingMGF1OAEPPKCS1v15PSS calculate_max_pss_salt_length)
RSAPrivateKeyRSAPrivateNumbers RSAPublicKeyRSAPublicNumbers)psskeyhash_algorithmreturnc C s, | j }|tju s|tju r$t||S |S d S N)Z _salt_lengthr Z
MAX_LENGTHr r )r r r Zsalt r N/usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/rsa.py_get_rsa_pss_salt_length) s
r )_RSAPrivateKey
_RSAPublicKey)r datapaddingr c C s t |tstdt |tr&| jj}nVt |trh| jj}t |jt sPt
dt j |
|s|t
dt jnt
d|jt jt| ||||S )Nz1Padding must be an instance of AsymmetricPadding.'Only MGF1 is supported by this backend.zPThis combination of padding and hash algorithm is not supported by this backend.${} is not supported by this backend.)
isinstancer
TypeErrorr _libRSA_PKCS1_PADDINGr ZRSA_PKCS1_OAEP_PADDING_mgfr r r UNSUPPORTED_MGFZrsa_padding_supportedUNSUPPORTED_PADDINGformatname_enc_dec_rsa_pkey_ctx)backendr r! r" padding_enumr r r _enc_dec_rsa6 s*
r1 )r r! r0 r" r c C s
t |tr | jj}| jj}n| jj}| jj}| j|j| j j
}| || j j
k | j || jj
}||}| |dk | j||}| |dk | j|j} | | dk t |tr| jjr| |jj}
| j||
}| |dk | |j} | j|| }| |dk t |tr|jd urt|jdkr| jt|j} | | | j j
k | j | |jt|j | j|| t|j}| |dk | j d| }
| j d| }||||
|t|}| j |d |
d }| j |dkrt d|S )N r size_t *unsigned char[]z Encryption/decryption failed.) r% r r' ZEVP_PKEY_encrypt_initZEVP_PKEY_encryptZEVP_PKEY_decrypt_initZEVP_PKEY_decryptEVP_PKEY_CTX_new _evp_pkey_ffiNULLopenssl_assertgcEVP_PKEY_CTX_free EVP_PKEY_CTX_set_rsa_padding
EVP_PKEY_sizer Z Cryptography_HAS_RSA_OAEP_MD _evp_md_non_null_from_algorithmr)
_algorithm EVP_PKEY_CTX_set_rsa_mgf1_mdZ EVP_PKEY_CTX_set_rsa_oaep_mdZ_labellenZOPENSSL_mallocZmemmoveZ EVP_PKEY_CTX_set0_rsa_oaep_labelnewbufferERR_clear_error
ValueError)r/ r r! r0 r" initZcryptpkey_ctxresZbuf_sizemgf1_mdZoaep_mdZlabelptrZoutlenbufresbufr r r r. Z sX
r. c C s t |tstd| j|j}| |dk t |trB| jj}nnt |t rt |j
t sdt dt
jt |tjsxtd||j d dk rtd| jj}nt d|jt
j|S )Nz'Expected provider of AsymmetricPadding.r r# z*Expected instance of hashes.HashAlgorithm. zDDigest too large for key size. Use a larger key or different digest.r$ )r% r
r& r' r= r6 r9 r r( r r) r r r r* r
HashAlgorithmZ digest_sizerE ZRSA_PKCS1_PSS_PADDINGr, r- r+ )r/ r r" algorithmZ pkey_sizer0 r r r _rsa_sig_determine_padding s0
rO c C s< t | |||}| j|j| jj}| || jjk | j|| jj}||}|dkrh| }t
d||d ur| |} | j || }|dkr| t
d|jtj| j||}|dkr| t
d|jtjt|tr8| j|t|||}| |dk | |jj}
| j||
}| |dk |S )Nr2 z#Unable to sign/verify with this keyr z4{} is not supported by this backend for RSA signing.z4{} is not supported for the RSA signature operation.)rO r' r5 r6 r7 r8 r9 r: r; _consume_errorsrE r> Z EVP_PKEY_CTX_set_signature_mdr r, r- r ZUNSUPPORTED_HASHr< r+ r% r Z EVP_PKEY_CTX_set_rsa_pss_saltlenr r) r? r@ ) r/ r" rN r Z init_funcr0 rG rH errorsZevp_mdrI r r r _rsa_sig_setup sN
rR c
C s t | |||| jj}| jd}| j|| jj||t|}| |dk | jd|d }| j||||t|}|dkr| } t
d| | j |d d S )Nr3 r2 r4 r zuDigest or salt length too long for key size. Use a larger key or shorter salt length if you are specifying a PSS salt) rR r' ZEVP_PKEY_sign_initr7 rB Z
EVP_PKEY_signr8 rA r9 _consume_errors_with_textrE rC )
r/ r" rN private_keyr! rG buflenrH rJ rQ r r r
_rsa_sig_sign s* rV c C sV t | |||| jj}| j||t||t|}| |dk |dkrR| td S )Nr )rR r' ZEVP_PKEY_verify_initZEVP_PKEY_verifyrA r9 rP r )r/ r" rN
public_key signaturer! rG rH r r r _rsa_sig_verify
s rY c C s t | |||| jj}| j|j}| |dk | jd|}| jd|}| j||||t |} | j
|d |d }
| j | dkrt |
S )Nr r4 r3 r2 )
rR r' Z EVP_PKEY_verify_recover_initr= r6 r9 r7 rB ZEVP_PKEY_verify_recoverrA rC rD r ) r/ r" rN rW rX rG maxlenrJ rU rH rK r r r _rsa_sig_recover! s&
r[ c @ s> e Zd ZeeejdddZeddddZ edd d
Z
dS ) _RSASignatureContext)rT r" rN c C s< || _ || _t|||| || _|| _t| j| j | _d S r )_backend _private_keyrO _paddingr? r Hash _hash_ctx)selfr/ rT r" rN r r r __init__@ s z _RSASignatureContext.__init__Nr! r c C s | j | d S r ra updaterb r! r r r rf R s z_RSASignatureContext.updater c C s t | j| j| j| j| j S r )rV r] r_ r? r^ ra finalizerb r r r ri U s z _RSASignatureContext.finalize) __name__
__module__ __qualname__r r
r rM rc bytesrf ri r r r r r\ ? s r\ c @ s@ e Zd ZeeeejdddZeddddZ ddd d
Z
dS ) _RSAVerificationContext)rW rX r" rN c C sF || _ || _|| _|| _t|||| |}|| _t| j| j | _d S r ) r] _public_key
_signaturer_ rO r? r r` ra )rb r/ rW rX r" rN r r r rc ` s z _RSAVerificationContext.__init__Nrd c C s | j | d S r re rg r r r rf u s z _RSAVerificationContext.updaterh c C s" t | j| j| j| j| j| j S r )rY r] r_ r? rp rq ra ri rj r r r verifyx s z _RSAVerificationContext.verify) rk rl rm r rn r
r rM rc rf rr r r r r ro _ s ro c @ s e Zd Zdd ZedZeej e
dddZ e ee ddd Z
ed
d d Zed
d
dZejejeje dddZe eejejej f e dddZdS )r c C s |s*|j |}|dkr*| }td||j ||jj}||dk || _|| _ || _
| jj d}| jj | j || jjj| jjj | j|d | jjjk | jj
|d | _d S )Nr2 zInvalid private key BIGNUM **r )r' Z
RSA_check_keyrS rE ZRSA_blinding_onr7 r8 r9 r]
_rsa_cdatar6 rB RSA_get0_key BN_num_bits _key_size)rb r/ rsa_cdataevp_pkeyZ_skip_check_keyrH rQ nr r r rc s&
z_RSAPrivateKey.__init__rw )r" rN r c C s t t| t| j| ||S r )r r r\ r] )rb r" rN r r r signer s z_RSAPrivateKey.signer)
ciphertextr" r c C s2 | j d d }|t|kr"tdt| j| ||S )N z,Ciphertext length must be equal to key size.)key_sizerA rE r1 r] )rb r| r" Zkey_size_bytesr r r decrypt s z_RSAPrivateKey.decryptrh c C sV | j j| j}| j || j jjk | j j|| j jj}| j |}t
| j ||S r ) r] r' ZRSAPublicKey_duprt r9 r7 r8 r: ZRSA_freeZ_rsa_cdata_to_evp_pkeyr )rb ctxry r r r rW s
z_RSAPrivateKey.public_keyc
C s | j jd}| j jd}| j jd}| j jd}| j jd}| j jd}| j jd}| j jd}| j j| j||| | j |d | j jjk | j |d | j jjk | j |d | j jjk | j j| j|| | j |d | j jjk | j |d | j jjk | j j | j||| | j |d | j jjk | j |d | j jjk | j |d | j jjk t
| j |d | j |d | j |d | j |d | j |d | j |d t | j |d | j |d ddS )Nrs r erz )pqddmp1dmq1iqmppublic_numbers)
r] r7 rB r' ru rt r9 r8 ZRSA_get0_factorsZRSA_get0_crt_paramsr
_bn_to_intr ) rb rz r r r r r r r r r r private_numbers sB
z _RSAPrivateKey.private_numbers)encodingr, encryption_algorithmr c C s | j |||| | j| jS r )r] Z_private_key_bytesr6 rt )rb r r, r r r r
private_bytes s z _RSAPrivateKey.private_bytes)r! r" rN r c C s$ t | j||\}}t| j||| |S r )r r] rV )rb r! r" rN r r r sign s z_RSAPrivateKey.signN) rk rl rm rc r read_only_propertyr r
r rM r r{ rn r r rW r r r
EncodingZ
PrivateFormatZKeySerializationEncryptionr typingUnion
asym_utils Prehashedr r r r r r s$
% r c @ s e Zd Zdd ZedZeee j
e dddZ eeeddd Z
ed
d d Zejejed
ddZeeeejeje j
f ddddZeeeje j
edddZdS )r c C st || _ || _|| _| j jd}| j j| j|| j jj| j jj | j |d | j jjk | j j |d | _
d S )Nrs r ) r] rt r6 r7 rB r' ru r8 r9 rv rw )rb r/ rx ry rz r r r rc s z_RSAPublicKey.__init__rw )rX r" rN r c C s, t td| t| t| j| |||S )NrX )r r _check_bytesr ro r] rb rX r" rN r r r verifier
s z_RSAPublicKey.verifier) plaintextr" r c C s t | j| ||S r )r1 r] )rb r r" r r r encrypt s z_RSAPublicKey.encryptrh c C s | j jd}| j jd}| j j| j||| j jj | j |d | j jjk | j |d | j jjk t| j |d | j |d dS )Nrs r r )
r] r7 rB r' ru rt r8 r9 r r )rb rz r r r r r s z _RSAPublicKey.public_numbers)r r, r c C s | j ||| | j| jS r )r] Z_public_key_bytesr6 rt )rb r r, r r r public_bytes( s z_RSAPublicKey.public_bytesN)rX r! r" rN r c C s& t | j||\}}t| j||| ||S r )r r] rY )rb rX r! r" rN r r r rr 1 s z_RSAPublicKey.verifyc C s t | t| j||| |S r )r r[ r] r r r r recover_data_from_signature? s z)_RSAPublicKey.recover_data_from_signature)rk rl rm rc r r r rn r
r rM r r r r r r
r Z PublicFormatr r r r r rr Optionalr r r r r r s0
r ).r Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r r Z cryptography.hazmat.primitivesr r
Z)cryptography.hazmat.primitives.asymmetricr r r Z1cryptography.hazmat.primitives.asymmetric.paddingr
r r r r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r r rM intr rn r1 r. rO rR rV rY r[ r\ ro r r r r r r s@ & A+- $u