a
a: & @ s4 U d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZm Z d dl
m Z m Z mZ
G dd deZG dd d e jd
ZG d d d e jd
ZG d
d de jd
ZeZG dd de jd
ZeZG dd deZG dd deZG dd deZG dd deZG dd deZG dd d eZ G d d d eZ G d d d eZ G d!d" d"eZ G d#d$ d$eZ G d%d& d&eZ!G d'd( d(eZ"G d)d* d*eZ#G d+d, d,eZ$G d-d. d.eZ%G d/d0 d0eZ&G d1d2 d2eZ'G d3d4 d4eZ(G d5d6 d6eZ)e&e#e&e%e#e"e!e$e e e e e eeeeee'e(e)d7Z*ej+e,ej-e f e.d8< G d9d: d:eZ/dJeej0ed;dd?d@Z3G dAdB dBeZ4G dCdD dDeZ5G dEdF dFeZ6ej&e&ej%e%ej$e$ej#e#ej"e"ej!e!ej7e'ej8e(ej9e)ej e ejeej e ejeej e ejeej e ejeej e ejeiZ:eej-e dGdHdIZ;dS )L N)utils)ObjectIdentifier)_serializationhashes)AsymmetricSignatureContext AsymmetricVerificationContextr c @ s e Zd ZedZedZedZedZedZedZ edZ
edZ ed Z ed
Z
ed Zed Zed
ZedZedZedZedZedZedZdS )EllipticCurveOIDz1.2.840.10045.3.1.1z 1.3.132.0.33z 1.3.132.0.10z1.2.840.10045.3.1.7z 1.3.132.0.34z 1.3.132.0.35z1.3.36.3.3.2.8.1.1.7z1.3.36.3.3.2.8.1.1.11z1.3.36.3.3.2.8.1.1.13z 1.3.132.0.1z 1.3.132.0.15z 1.3.132.0.26z 1.3.132.0.27z 1.3.132.0.16z 1.3.132.0.17z 1.3.132.0.36z 1.3.132.0.37z 1.3.132.0.38z 1.3.132.0.39N)__name__
__module__ __qualname__r SECP192R1 SECP224R1 SECP256K1 SECP256R1 SECP384R1 SECP521R1BRAINPOOLP256R1BRAINPOOLP384R1BRAINPOOLP512R1 SECT163K1 SECT163R2 SECT233K1 SECT233R1 SECT283K1 SECT283R1 SECT409K1 SECT409R1 SECT571K1 SECT571R1 r r R/usr/lib64/python3.9/site-packages/cryptography/hazmat/primitives/asymmetric/ec.pyr s& r c @ s4 e Zd ZejedddZejedddZdS )
EllipticCurvereturnc C s dS )z8
The name of the curve. e.g. secp256r1.
Nr selfr r r name+ s zEllipticCurve.namec C s dS z<
Bit size of a secret scalar for the curve.
Nr r$ r r r key_size1 s zEllipticCurve.key_sizeN) r r
r abcabstractpropertystrr& intr( r r r r r! * s r! ) metaclassc @ s. e Zd Zejejeje j
f dddZ dS ) EllipticCurveSignatureAlgorithmr" c C s dS )z@
The digest algorithm used with this signature.
Nr r$ r r r algorithm9 s z)EllipticCurveSignatureAlgorithm.algorithmN) r r
r r) r* typingUnion
asym_utils Prehashedr
HashAlgorithmr/ r r r r r. 8 s r. c @ s e Zd ZejeedddZejddedddZ ejdd d
d Z
ej e d d d
Z
ej ed ddZejeeedddZejdd ddZejejejejedddZdS )EllipticCurvePrivateKey)signature_algorithmr# c C s dS )zN
Returns an AsymmetricSignatureContext used for signing data.
Nr )r% r6 r r r signerC s z EllipticCurvePrivateKey.signerECDHEllipticCurvePublicKey)r/ peer_public_keyr# c C s dS )z}
Performs a key exchange operation using the provided algorithm with the
provided peer's public key.
Nr )r% r/ r: r r r exchangeL s z EllipticCurvePrivateKey.exchanger" c C s dS )zB
The EllipticCurvePublicKey for this private key.
Nr r$ r r r
public_keyU s z"EllipticCurvePrivateKey.public_keyc C s dS z8
The EllipticCurve that this key is on.
Nr r$ r r r curve[ s z EllipticCurvePrivateKey.curvec C s dS r' r r$ r r r r( a s z EllipticCurvePrivateKey.key_size)datar6 r# c C s dS )z
Signs the data
Nr )r% r? r6 r r r signg s z EllipticCurvePrivateKey.signEllipticCurvePrivateNumbersc C s dS )z9
Returns an EllipticCurvePrivateNumbers.
Nr r$ r r r private_numbersq s z'EllipticCurvePrivateKey.private_numbers)encodingformatencryption_algorithmr# c C s dS z6
Returns the key serialized as bytes.
Nr )r% rC rD rE r r r
private_bytesw s z%EllipticCurvePrivateKey.private_bytesN)r r
r r) abstractmethodr. r r7 bytesr; r< r* r! r> r, r( r@ rB r EncodingZ
PrivateFormatZKeySerializationEncryptionrG r r r r r5 B s6 r5 c @ s e Zd ZejeeedddZej e
dddZ ej e dddZ
ejd dd
d Zejejejed d
dZejeeeddddZee
ed dddZdS )r9 ) signaturer6 r# c C s dS )zQ
Returns an AsymmetricVerificationContext used for signing data.
Nr )r% rK r6 r r r verifier s z EllipticCurvePublicKey.verifierr" c C s dS r= r r$ r r r r> s z EllipticCurvePublicKey.curvec C s dS r' r r$ r r r r( s z EllipticCurvePublicKey.key_sizeEllipticCurvePublicNumbersc C s dS )z8
Returns an EllipticCurvePublicNumbers.
Nr r$ r r r public_numbers s z%EllipticCurvePublicKey.public_numbers)rC rD r# c C s dS rF r )r% rC rD r r r public_bytes s z#EllipticCurvePublicKey.public_bytesN)rK r? r6 r# c C s dS )z5
Verifies the signature of the data.
Nr )r% rK r? r6 r r r verify s z EllipticCurvePublicKey.verifyr> r? r# c C s^ t d| t|ts tdt|dkr2td|d dvrFtdddlm} | ||S )Nr? 'curve must be an EllipticCurve instancer z%data must not be an empty byte string) %Unsupported elliptic curve point typebackend)
r _check_bytes
isinstancer! TypeErrorlen
ValueError,cryptography.hazmat.backends.openssl.backendrX Z load_elliptic_curve_public_bytes)clsr> r? rX r r r from_encoded_point s
z)EllipticCurvePublicKey.from_encoded_point)r r
r r) rH rI r. r rL r* r! r> r, r( rN r rJ Z PublicFormatrO rP classmethodr` r r r r r9 s4
r9 c @ s e Zd ZdZdZdS )r sect571r1i: Nr r
r r& r( r r r r r s r c @ s e Zd ZdZdZdS )r sect409r1 Nrc r r r r r s r c @ s e Zd ZdZdZdS )r sect283r1 Nrc r r r r r s r c @ s e Zd ZdZdZdS )r sect233r1 Nrc r r r r r s r c @ s e Zd ZdZdZdS )r sect163r2 Nrc r r r r r s r c @ s e Zd ZdZdZdS )r sect571k1i; Nrc r r r r r s r c @ s e Zd ZdZdZdS )r sect409k1re Nrc r r r r r s r c @ s e Zd ZdZdZdS )r sect283k1rg Nrc r r r r r s r c @ s e Zd ZdZdZdS )r sect233k1ri Nrc r r r r r s r c @ s e Zd ZdZdZdS )r sect163k1rk Nrc r r r r r s r c @ s e Zd ZdZdZdS )r secp521r1i Nrc r r r r r s r c @ s e Zd ZdZdZdS )r secp384r1 Nrc r r r r r s r c @ s e Zd ZdZdZdS )r secp256r1 Nrc r r r r r s r c @ s e Zd ZdZdZdS )r secp256k1ru Nrc r r r r r s r c @ s e Zd ZdZdZdS )r
secp224r1 Nrc r r r r r
s r
c @ s e Zd ZdZdZdS )r secp192r1 Nrc r r r r r s r c @ s e Zd ZdZdZdS )BrainpoolP256R1brainpoolP256r1ru Nrc r r r r r{ s r{ c @ s e Zd ZdZdZdS )BrainpoolP384R1brainpoolP384r1rs Nrc r r r r r} $ s r} c @ s e Zd ZdZdZdS )BrainpoolP512R1brainpoolP512r1i Nrc r r r r r ) s r )Z
prime192v1Z
prime256v1ry rw rt rr rq rv rp ro rn rm rl rj rh rf rd rb r| r~ r _CURVE_TYPESc @ sH e Zd Zejejejf dddZ e
ejejejf dddZ dS )ECDSA)r/ c C s
|| _ d S NZ
_algorithm)r% r/ r r r __init__H s zECDSA.__init__r" c C s | j S r r r$ r r r r/ N s zECDSA.algorithmN) r r
r r0 r1 r2 r3 r r4 r propertyr/ r r r r r G s
r )r> rX r# c C s ddl m} || S Nr rW )r^ rX Z#generate_elliptic_curve_private_key)r> rX osslr r r generate_private_keyU s r )
private_valuer> rX r# c C sL ddl m} t| ts td| dkr.tdt|ts@td|| |S )Nr rW z&private_value must be an integer type.z)private_value must be a positive integer./curve must provide the EllipticCurve interface.)r^ rX rZ r, r[ r] r! Z!derive_elliptic_curve_private_key)r r> rX r r r r derive_private_key] s
r c @ s e Zd ZeeedddZdejedddZ e
dd d
Z e ee
d d d d
Z
edd Zedd Zedd Zdd Zdd Zdd Zdd ZdS )rM )xyr> c C sD t |trt |ts tdt |ts.td|| _|| _|| _d S )Nzx and y must be integers.r )rZ r, r[ r! _y_x_curve)r% r r r> r r r r q s
z#EllipticCurvePublicNumbers.__init__NrX r# c C s ddl m} || S r )r^ rX Z"load_elliptic_curve_public_numbersr% rX r r r r r< | s z%EllipticCurvePublicNumbers.public_keyr" c C sB t jdtjdd | jjd d }dt| j| t| j| S )Nzencode_point has been deprecated on EllipticCurvePublicNumbers and will be removed in a future version. Please use EllipticCurvePublicKey.public_bytes to obtain both compressed and uncompressed point encoding.rS
stacklevel ) warningswarnr PersistentlyDeprecated2019r> r( Z int_to_bytesr r )r% byte_lengthr r r encode_point s z'EllipticCurvePublicNumbers.encode_pointrQ c C s t |tstdtjdtjdd |dr|jd d }t |d| d krt
|d|d d }t
||d d d }| |||S t d
nt d d S ) NrR zSupport for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_pointrS r r r r bigz(Invalid elliptic curve point data lengthrV )
rZ r! r[ r r r r
startswithr( r\ r,
from_bytesr] )r_ r> r? r r r r r r r` s
z-EllipticCurvePublicNumbers.from_encoded_pointc C s | j S r )r r$ r r r z#EllipticCurvePublicNumbers.c C s | j S r )r r$ r r r r r c C s | j S r )r r$ r r r r r c C sF t |tstS | j|jkoD| j|jkoD| jj|jjkoD| jj|jjkS r )rZ rM NotImplementedr r r> r& r( r% otherr r r __eq__ s
z!EllipticCurvePublicNumbers.__eq__c C s
| |k S r r r r r r __ne__ s z!EllipticCurvePublicNumbers.__ne__c C s t | j| j| jj| jjfS r )hashr r r> r& r( r$ r r r __hash__ s z#EllipticCurvePublicNumbers.__hash__c C s
d | S )NzC)rD r$ r r r __repr__ s z#EllipticCurvePublicNumbers.__repr__)N)r r
r r, r! r r0 Anyr9 r< rI r ra r` r r> r r r r r r r r r r rM p s rM c @ s` e Zd ZeedddZdejedddZ e
dd Z e
d
d Z d d Z
d
d Zdd ZdS )rA )r rN c C s4 t |tstdt |ts$td|| _|| _d S )Nz!private_value must be an integer.z>public_numbers must be an EllipticCurvePublicNumbers instance.)rZ r, r[ rM _private_value_public_numbers)r% r rN r r r r s
z$EllipticCurvePrivateNumbers.__init__Nr c C s ddl m} || S r )r^ rX Z#load_elliptic_curve_private_numbersr r r r private_key s z'EllipticCurvePrivateNumbers.private_keyc C s | j S r )r r$ r r r r r z$EllipticCurvePrivateNumbers.c C s | j S r )r r$ r r r r r c C s& t |tstS | j|jko$| j|jkS r )rZ rA r r rN r r r r r s
z"EllipticCurvePrivateNumbers.__eq__c C s
| |k S r r r r r r r s z"EllipticCurvePrivateNumbers.__ne__c C s t | j| jfS r )r r rN r$ r r r r s z$EllipticCurvePrivateNumbers.__hash__)N)r r
r r, rM r r0 r r5 r r r rN r r r r r r r rA s rA c @ s e Zd ZdS )r8 N)r r
r r r r r r8 s r8 )oidr# c C s* z
t | W S ty$ tdY n0 d S )NzCThe provided object identifier has no matching elliptic curve class)
_OID_TO_CURVEKeyError LookupError)r r r r get_curve_for_oid s
r )N)N) s
AF [,