U
vf- @ s d Z ddlmZmZ ddlmZ ddlmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ G d d
d
ZG dd dZG dd deZdS )z
ECDSA keys
)InvalidSignatureUnsupportedAlgorithm)default_backend)hashes
serialization)ec)decode_dss_signatureencode_dss_signature) four_byte)Message)PKey) SSHException) deflate_longc @ s e Zd ZdZdd ZdS ) _ECDSACurvez
Represents a specific ECDSA Curve (nistp256, nistp384, etc).
Handles the generation of the key format identifier and the selection of
the proper hash function. Also grabs the proper curve from the 'ecdsa'
package.
c C sT || _ |j| _d| j | _| jdkr.tj| _n | jdkrBtj| _ntj| _|| _ d S )N ecdsa-sha2- i )
nist_namekey_size
key_lengthkey_format_identifierr SHA256 hash_objectSHA384SHA512 curve_class)selfr r r B/opt/alt/python38/lib/python3.8/site-packages/paramiko/ecdsakey.py__init__0 s
z_ECDSACurve.__init__N)__name__
__module__ __qualname____doc__r r r r r r ' s r c @ s8 e Zd ZdZdd Zdd Zdd Zdd Zd
d Zd S )
_ECDSACurveSetz
A collection to hold the ECDSA curves. Allows querying by oid and by key
format identifier. The two ways in which ECDSAKey needs to be able to look
up curves.
c C s
|| _ d S N ecdsa_curves)r r& r r r r I s z_ECDSACurveSet.__init__c C s dd | j D S )Nc S s g | ]
}|j qS r )r ).0curver r r
M s zA_ECDSACurveSet.get_key_format_identifier_list..r% r r r r get_key_format_identifier_listL s z-_ECDSACurveSet.get_key_format_identifier_listc C s" | j D ]}|j|kr| S qd S r$ )r& r )r r r( r r r get_by_curve_classO s
z!_ECDSACurveSet.get_by_curve_classc C s" | j D ]}|j|kr| S qd S r$ )r& r )r r r( r r r get_by_key_format_identifierT s
z+_ECDSACurveSet.get_by_key_format_identifierc C s" | j D ]}|j|kr| S qd S r$ )r& r )r r r( r r r get_by_key_lengthY s
z _ECDSACurveSet.get_by_key_lengthN) r r r! r" r r+ r, r- r. r r r r r# B s r# c @ s e Zd ZdZeeejdeejdeej dgZ
d-ddZ e d d
Z
e d d Zd
d Zdd Zedd Zdd Zdd Zdd Zd.ddZdd Zd/d d Zd0d d Ze e ddfd!d"Zd#d$ Zd%d& Z d'd( Z d)d* Z d+d, Z dS )1ECDSAKeyz\
Representation of an ECDSA key which can be used to sign and verify SSH2
data.
Znistp256Znistp384Znistp521NTc C sT d | _ d | _d | _|d k r*| || d S |d k rB| || d S |d krZ|d k rZt|}|d k r|\| _| _ | jjj}| j || _
n| } d}
| |
r| d t
|
} | j| | _
| j } dd | D } | j|| | d | }
|
| j
jkr
td|
| }z tj| j
|}|| _ W n tk
rN tdY nX d S )Nz-cert-v01@openssh.comc S s g | ]}d |qS )z{}-cert-v01@openssh.com)format)r' xr r r r) s z%ECDSAKey.__init__..)msgkey_typeZ cert_typez Can't handle curve of type {}zInvalid public key)
verifying_key signing_keyZ public_blob_from_private_key_from_private_key_filer r( __class__
_ECDSA_CURVESr, ecdsa_curveget_textendswithlenr- r+ Z_check_type_and_load_certr r
r0
get_binaryr ZEllipticCurvePublicKeyZfrom_encoded_pointr
ValueError)r r2 datafilenamepasswordvalsfile_objZvalidate_pointZc_classr3 suffixZ key_typesZ
cert_typesZ curvenameZ pointinfokeyr r r r m sZ
zECDSAKey.__init__c C s
| j S r$ )r9 r+ clsr r r identifiers s zECDSAKey.identifiersc C s | S r$ )rI rG r r r supported_key_format_identifiers s z)ECDSAKey.supported_key_format_identifiersc C s | j }t }|| jj || jj | }|jjd d }t |j
dd}d|t | | }t |j dd}d|t | | }t
| | }|| | S )N F)Zadd_sign_padding )r4 r
add_stringr: r r public_numbersr( r r r1 r= yr
asbytes)r rF mnumbersZkey_size_bytesZx_bytesZy_bytesZ point_strr r r rQ s
zECDSAKey.asbytesc C s | S r$ )rQ r* r r r __str__ s zECDSAKey.__str__c C s | | j j| j jfS r$ )get_namer4 rO r1 rP r* r r r _fields s
zECDSAKey._fieldsc C s | j jS r$ )r: r r* r r r rU s zECDSAKey.get_namec C s | j jS r$ )r: r r* r r r get_bits s zECDSAKey.get_bitsc C s
| j d k S r$ )r5 r* r r r can_sign s zECDSAKey.can_signc C sT t | j }| j||}t|\}}t }|| jj ||
|| |S r$ ) r ECDSAr: r r5 signr r rN r
_sigencode)r r@ algorithmZecdsasigrsrR r r r
sign_ssh_data s zECDSAKey.sign_ssh_datac C st | | jjkrdS | }| |\}}t||}z | j||t | j
W n t k
rj Y dS X dS d S )NFT) r; r: r r>
_sigdecoder r4 verifyr rY r r )r r@ r2 r] ZsigRZsigS signaturer r r verify_ssh_sig s
zECDSAKey.verify_ssh_sigc C s | j || jtjj|d d S N)rB )Z_write_private_key_filer5 r
PrivateFormatTraditionalOpenSSL)r rA rB r r r write_private_key_file s z ECDSAKey.write_private_key_filec C s | j || jtjj|d d S re )Z_write_private_keyr5 r rf rg )r rD rB r r r write_private_key s zECDSAKey.write_private_keyc C sT |dk r2| j |}|dkr*td|| }tj|t d}t|| fdS )a
Generate a new private ECDSA key. This factory function can be used to
generate a new host key or authentication key.
:param progress_func: Not used for this type of key.
:returns: A new private key (`.ECDSAKey`) object
Nz Unsupported key length: {:d})backend)rC )
r9 r. r? r0 r r Zgenerate_private_keyr r/
public_key)rH r( Z
progress_funcbitsZ private_keyr r r generate s zECDSAKey.generatec C s | d||}| | d S NZEC)Z_read_private_key_file _decode_key)r rA rB r@ r r r r7 s z ECDSAKey._from_private_key_filec C s | d||}| | d S rn )Z_read_private_keyro )r rD rB r@ r r r r6 s zECDSAKey._from_private_keyc C s* |\}}|| j krbztj|d t d}W n6 ttttfk
r^ } ztt |W 5 d }~X Y nX n|| j
krzXt |}| }|
}| }d| } | j| }
|
stdt||
t }W n. tk
r } ztt |W 5 d }~X Y nX n
| | || _| | _|jj} | j| | _ d S )N)rB rj r z Invalid key curve identifier) Z _PRIVATE_KEY_FORMAT_ORIGINALr Zload_der_private_keyr r? AssertionError TypeErrorr r
strZ_PRIVATE_KEY_FORMAT_OPENSSHr r; r> get_mpintr9 r- r Zderive_private_keyr ExceptionZ_got_bad_key_format_idr5 rk r4 r( r8 r, r: ) r r@ ZpkformatrF er2 Z
curve_nameZverkeyZsigkeynamer( r r r r ro " sJ
zECDSAKey._decode_keyc C s" t }|| || | S r$ )r Z add_mpintrQ )r r^ r_ r2 r r r r[ I s
zECDSAKey._sigencodec C s t |}| }| }||fS r$ )r rs )r r] r2 r^ r_ r r r ra O s zECDSAKey._sigdecode)NNNNNNT)N)N)N) r r r! r" r# r r Z SECP256R1Z SECP384R1Z SECP521R1r9 r classmethodrI rJ rQ rT propertyrV rU rW rX r` rd rh ri rm r7 r6 ro r[ ra r r r r r/ _ sJ
>
'r/ N)r" Zcryptography.exceptionsr r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr Z/cryptography.hazmat.primitives.asymmetric.utilsr r Zparamiko.commonr
Zparamiko.messager Z
paramiko.pkeyr Zparamiko.ssh_exceptionr
Z
paramiko.utilr r r# r/ r r r r s