3
ꅭh! @ s d dl mZmZmZ d dlmZ d dlmZmZm Z d dl
m Z d dl m
Z
eje jeje jeje jeje jG dd deZdS ) )absolute_importdivisionprint_function)utils)
InvalidTagUnsupportedAlgorithm_Reasons)ciphers)modesc @ sR e Zd ZdZdZdZdd Zdd Zd d
Zd d Z d
d Z
dd Z e j
dZdS )_CipherContext r c C s || _ || _|| _|| _d | _t| jtjr<| jjd | _ nd| _ | j j
j }| j j j
|| j j
j}| j j}y|t|t|f }W n4 tk
r tdj|j|r|jn|tjY nX || j ||}|| j j jkrdj|} |d k r| dj|7 } | dj| j j 7 } t| tjt|tjr8| j j j|j }
njt|tj rX| j j j|j }
nJt|tj rx| j j j|j }
n*t|tj r| j j j|j }
n
| j j j}
| j j
j!||| j j j| j j j| j j j|} | j j"| dk | j j
j#|t$|j%} | j j"| dk t|tj&r| j j
j'|| j j
j(t$|
| j j j} | j j"| dk |j)d k r| j j
j'|| j j
j*t$|j)|j)} | j j"| dk |j)| _| j j
j!|| j j j| j j j| j j j|j%|
|} | j j"| dk | j j
j+|d || _,d S )N r z6cipher {} in {} mode is not supported by this backend.zcipher {0.name} zin {0.name} mode z_is not supported by this backend (Your version of OpenSSL may be too old. Current version: {}.)r )-_backendZ_cipher_mode
_operation_tag
isinstancer ZBlockCipherAlgorithmZ
block_size_block_size_bytes_libZEVP_CIPHER_CTX_new_ffigcZEVP_CIPHER_CTX_freeZ_cipher_registrytypeKeyErrorr formatnamer ZUNSUPPORTED_CIPHERNULLZopenssl_version_textr
Z ModeWithInitializationVector from_bufferZinitialization_vectorZ
ModeWithTweakZtweakZ
ModeWithNonceZnonceZEVP_CipherInit_exopenssl_assertZ EVP_CIPHER_CTX_set_key_lengthlenkeyGCMEVP_CIPHER_CTX_ctrlZEVP_CTRL_AEAD_SET_IVLENtagEVP_CTRL_AEAD_SET_TAGZEVP_CIPHER_CTX_set_padding_ctx) selfZbackendZciphermodeZ operationZctxregistryZadapterZ
evp_ciphermsgZiv_nonceres r, /usr/lib64/python3.6/ciphers.py__init__ s
z_CipherContext.__init__c C s2 t t|| j d }| j||}t|d | S )Nr ) bytearrayr r update_intobytes)r' databufnr, r, r- updatez s z_CipherContext.updatec
C s t |}t ||| j d k r:tdjt || j d d}d}| jjjd}| jjj|dd}| jjj|}xh||kr|| } || }
t| j || } | jj
j | j | ||
| } | jj
| dk || 7 }||d 7 }qrW |S )Nr z1buffer must be at least {} bytes for this payloadr zint *T)Zrequire_writable)r r
ValueErrorr r r newr min_MAX_CHUNK_SIZEr EVP_CipherUpdater& r )
r' r2 r3 Ztotal_data_lenZdata_processedZ total_outoutlenZ
baseoutbufZ baseinbufZoutbufZinbufZinlenr+ r, r, r- r0 s(
z_CipherContext.update_intoc C sh | j | jkr,t| jtjr,| jd kr,td| jj j
d| j }| jj j
d}| jj j
| j||}|dkr| jj }| rt| jtjrt| jj|d j| jj j| jj j|d tdt| jtjo| j | jkr.| jj j
d| j }| jj j| j| jj j| j |}| jj|dk | jj j|d d | _| jj j| j}| jj|dk | jj j|d |d S )Nz4Authentication tag must be provided when decrypting.zunsigned char[]zint *r )errorszFThe length of the provided data is not a multiple of the block length.r ) r _DECRYPTr r r
ZModeWithAuthenticationTagr$ r6 r r r7 r r ZEVP_CipherFinal_exr& Z_consume_errorsr" r r Z_lib_reason_matchZ ERR_LIB_EVPZ'EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH_ENCRYPTr# ZEVP_CTRL_AEAD_GET_TAGbufferr ZEVP_CIPHER_CTX_cleanup)r' r3 r; r+ r< Ztag_bufr, r, r- finalize sB
z_CipherContext.finalizec C s` t || jjk r"tdj| jj| jjj| j| jjj t ||}| jj
|dk || _ | j S )Nz.Authentication tag must be {} bytes or longer.r )
r r Z_min_tag_lengthr6 r r r r# r& r% r r r@ )r' r$ r+ r, r, r- finalize_with_tag s z _CipherContext.finalize_with_tagc C sN | j jjd}| j jj| j| j jj|| j jj|t|}| j j |dk d S )Nzint *r )
r r r7 r r: r& r r r r )r' r2 r; r+ r, r, r- authenticate_additional_data s
z+_CipherContext.authenticate_additional_datar Ni @i?)__name__
__module__ __qualname__r> r= r9 r. r5 r0 r@ rA rB r Zread_only_propertyr$ r, r, r, r- r
s d 3 r N)Z
__future__r r r Z cryptographyr Zcryptography.exceptionsr r r Z cryptography.hazmat.primitivesr Z&cryptography.hazmat.primitives.ciphersr
Zregister_interfaceZ
CipherContextZAEADCipherContextZAEADEncryptionContextZAEADDecryptionContextobjectr r, r, r, r- s