U
vff( @ sv U d dl mZ d dlmZ d dlmZmZ d dlm Z e
Z e e
d< e d Ze e
d< e Ze e
d< e Ze e
d < e Ze e
d
< e Ze e
d < eeef d d
dZeeeef dddZeeedddZeeedddZeedddZ eedd d Z eedd d Z eedd d!Z G d"d# d#Z e ed$d%d&d'Z!e eed(d)d*Z"e eee#d+d,d-Z$d$S ). )Tuple)
exceptions)ffilib)ensurecrypto_sign_BYTES crypto_sign_SEEDBYTEScrypto_sign_PUBLICKEYBYTEScrypto_sign_SECRETKEYBYTES crypto_sign_curve25519_BYTES crypto_sign_ed25519ph_STATEBYTESreturnc C s` t dt} t dt}t| |}t|dkdtjd t | tdd t |tdd fS )zu
Returns a randomly generated public key and secret key.
:rtype: (bytes(public_key), bytes(secret_key))
unsigned char[]r Unexpected library errorZraisingN)
r newr
r r crypto_sign_keypairr exc RuntimeErrorbuffer)pkskrc r L/opt/alt/python38/lib64/python3.8/site-packages/nacl/bindings/crypto_sign.pyr s r )seedr c C sx t | tkrtdtdt}tdt}t ||| }t
|dkdtj d t |tdd t |tdd fS )z
Computes and returns the public key and secret key using the seed ``seed``.
:param seed: bytes
:rtype: (bytes(public_key), bytes(secret_key))
z Invalid seedr r r r N)
lenr r
ValueErrorr r r
r r crypto_sign_seed_keypairr r r )r r r r r r r r 2 s
r )messager r c C s` t dt| t }t d}t||| t| |}t|dkdtjd t ||d dd S )z
Signs the message ``message`` using the secret key ``sk`` and returns the
signed message.
:param message: bytes
:param sk: bytes
:rtype: bytes
r unsigned long long *r r r N)
r r r r r crypto_signr r r r )r! r signedZ
signed_lenr r r r r# H s
r# )r$ r r c C sV t dt| }t d}t||| t| |dkr>tdt ||d dd S )z
Verifies the signature of the signed message ``signed`` using the public
key ``pk`` and returns the unsigned message.
:param signed: bytes
:param pk: bytes
:rtype: bytes
r r" r Signature was forged or corruptN)r r r r crypto_sign_openr BadSignatureErrorr )r$ r r! Z message_lenr r r r& Z s
r& )public_key_bytesr c C sZ t | tkrtdt}td|}t|| }t |dkdtj
d t ||dd S )a
Converts a public Ed25519 key (encoded as bytes ``public_key_bytes``) to
a public Curve25519 key as bytes.
Raises a ValueError if ``public_key_bytes`` is not of length
``crypto_sign_PUBLICKEYBYTES``
:param public_key_bytes: bytes
:rtype: bytes
zInvalid curve public keyr r r r N) r r
r r r r r r $crypto_sign_ed25519_pk_to_curve25519r r r )r( Zcurve_public_key_lenZcurve_public_keyr r r r r) o s
r) )secret_key_bytesr c C sZ t | tkrtdt}td|}t|| }t |dkdtj
d t ||dd S )a
Converts a secret Ed25519 key (encoded as bytes ``secret_key_bytes``) to
a secret Curve25519 key as bytes.
Raises a ValueError if ``secret_key_bytes``is not of length
``crypto_sign_SECRETKEYBYTES``
:param secret_key_bytes: bytes
:rtype: bytes
zInvalid curve secret keyr r r r N) r r r r r r r r $crypto_sign_ed25519_sk_to_curve25519r r r )r* Zcurve_secret_key_lenZcurve_secret_keyr r r r r+ s
r+ c C s" t | tkrtd| td S )a
Extract the public Ed25519 key from a secret Ed25519 key (encoded
as bytes ``secret_key_bytes``).
Raises a ValueError if ``secret_key_bytes``is not of length
``crypto_sign_SECRETKEYBYTES``
:param secret_key_bytes: bytes
:rtype: bytes
Invalid secret keyNr r r r r r* r r r crypto_sign_ed25519_sk_to_pk s
r/ c C s" t | tkrtd| dt S )z
Extract the seed from a secret Ed25519 key (encoded
as bytes ``secret_key_bytes``).
Raises a ValueError if ``secret_key_bytes``is not of length
``crypto_sign_SECRETKEYBYTES``
:param secret_key_bytes: bytes
:rtype: bytes
r, Nr- r. r r r crypto_sign_ed25519_sk_to_seed s
r0 c @ s$ e Zd ZdZdgZddddZdS )crypto_sign_ed25519ph_statezO
State object wrapping the sha-512 state used in ed25519ph computation
stateNr c C s2 t dt| _t| j}t|dkdtjd d S )Nr r r r ) r r r
r2 r Zcrypto_sign_ed25519ph_initr r r )selfr r r r __init__ s z$crypto_sign_ed25519ph_state.__init__)__name__
__module__ __qualname____doc__ __slots__r4 r r r r r1 s r1 N)edphpmsgr c C sX t t| tdtjd t t|tdtjd t| j|t |}t |dkdtj
d dS )z
Update the hash state wrapped in edph
:param edph: the ed25519ph state being updated
:type edph: crypto_sign_ed25519ph_state
:param pmsg: the partial message
:type pmsg: bytes
:rtype: None
/edph parameter must be a ed25519ph_state objectr z%pmsg parameter must be a bytes objectr r N) r
isinstancer1 r TypeErrorbytesr crypto_sign_ed25519ph_updater2 r r )r: r; r r r r r@ s r@ )r: r r c C s t t| tdtjd t t|tdtjd t t|tkdttjd t
dt }t
| j|t j|}t |dkdtjd t |t dd S ) aR
Create a signature for the data hashed in edph
using the secret key sk
:param edph: the ed25519ph state for the data
being signed
:type edph: crypto_sign_ed25519ph_state
:param sk: the ed25519 secret part of the signing key
:type sk: bytes
:return: ed25519ph signature
:rtype: bytes
r< r z+secret key parameter must be a bytes objectz secret key must be {} bytes longr r r N)r r= r1 r r> r? r r formatr r r r "crypto_sign_ed25519ph_final_creater2 ZNULLr r )r: r signaturer r r r rB s4
rB )r: rC r r c C s t t| tdtjd t t|tdtjd t t|tkdttjd t t|tdtjd t t|t kdt tjd t
| j ||}|dkrt
dd S )
a
Verify a prehashed signature using the public key pk
:param edph: the ed25519ph state for the data
being verified
:type edph: crypto_sign_ed25519ph_state
:param signature: the signature being verified
:type signature: bytes
:param pk: the ed25519 public part of the signing key
:type pk: bytes
:return: True if the signature is valid
:rtype: boolean
:raises exc.BadSignatureError: if the signature is not valid
r< r z*signature parameter must be a bytes objectz signature must be {} bytes longz+public key parameter must be a bytes objectz public key must be {} bytes longr r% T)r r= r1 r r> r? r r rA r
r "crypto_sign_ed25519ph_final_verifyr2 r' )r: rC r r r r r rD s>
rD )%typingr Znaclr r Z nacl._sodiumr r Znacl.exceptionsr Zcrypto_sign_bytesr int__annotations__Zcrypto_sign_secretkeybytesr Zcrypto_sign_publickeybytesr
r Zcrypto_box_secretkeybytesr Z crypto_sign_ed25519ph_statebytesr
r? r r r# r& r) r+ r/ r0 r1 r@ rB boolrD r r r r s@ *