a
Me @ s d dl mZ d dlmZ d dlmZmZ d dlmZm Z d dl
m Z d dl m
Z
G dd de ZG d d
d
eZG d d d eZG d
d deZG dd deZG dd deZdS ) )default_backend)hashes)ecutils)CryptographyPrivateKeyCryptographyPublicKey) Algorithm)DNSKEYc @ sv e Zd ZU ejed< ejZeed< ej ed< ej
ed< e ed< e e dddd Z
e d
d d Zeed d
ddZdS ) PublicECDSAkey algorithm chosen_hashcurveoctetsN) signaturedatareturnc C sT |d| j }|| j d }tt|dt|d}| j||t| j d S )Nr big)
r r Zencode_dss_signatureint
from_bytesr verifyr ECDSAr
)selfr r Zsig_rZsig_sZsig r 8/usr/lib/python3.9/site-packages/dns/dnssecalgs/ecdsa.pyr s zPublicECDSA.verifyr c C s* | j }|j| jd|j| jd S )z,Encode a public key per RFC 6605, section 4.r )r Zpublic_numbersxto_bytesr y)r Zpnr r r encode_key_bytes s
z PublicECDSA.encode_key_bytes)r r c C s` | | |jd| j }|j| j| jd }| tj| jt|dt|ddt dS )Nr r )r r r r )
Z!_ensure_algorithm_key_combinationr r r ZEllipticCurvePublicNumbersr r r
public_keyr )clsr Zecdsa_xZecdsa_yr r r from_dnskey s
zPublicECDSA.from_dnskey)__name__
__module__ __qualname__r ZEllipticCurvePublicKey__annotations__key_clsr r Z
HashAlgorithmZ
EllipticCurver bytesr r classmethodr r$ r r r r r
s
r
c @ sH e Zd ZU ejed< ejZeZd
e e
e dddZ e d dddZ
d S ) PrivateECDSAr F)r r r c C sf | j |t| jj}t|\}}tj || jj
ddtj || jj
dd }|rb| || |S )z1Sign using a private key per RFC 6605, section 4.r )length byteorder)
r signr r
public_clsr
r Zdecode_dss_signaturer r r r" r )r r r Z
der_signatureZdsa_rZdsa_sr r r r r/ 2 s
zPrivateECDSA.signr c C s | t j| jjt ddS )N)r Zbackendr! )r Zgenerate_private_keyr0 r r )r# r r r generate= s
zPrivateECDSA.generateN)F)r% r& r' r ZEllipticCurvePrivateKeyr( r) r
r0 r* boolr/ r+ r1 r r r r r, - s
r, c @ s& e Zd ZejZe Ze
Z dZ dS )PublicECDSAP256SHA256 N)
r% r& r' r ZECDSAP256SHA256r r ZSHA256r
r Z SECP256R1r r r r r r r3 F s r3 c @ s e Zd ZeZdS )PrivateECDSAP256SHA256N)r% r& r' r3 r0 r r r r r5 M s r5 c @ s& e Zd ZejZe Ze
Z dZ dS )PublicECDSAP384SHA3840 N)
r% r& r' r ZECDSAP384SHA384r r ZSHA384r
r Z SECP384R1r r r r r r r6 Q s r6 c @ s e Zd ZeZdS )PrivateECDSAP384SHA384N)r% r& r' r6 r0 r r r r r8 X s r8 N)Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zdns.dnssecalgs.cryptographyr r Zdns.dnssectypesr Zdns.rdtypes.ANY.DNSKEYr r
r, r3 r5 r6 r8 r r r r s #