3
y_5/ @ s d dl mZmZmZ d dlmZ d dlmZmZm Z d dl
m Z m Z m
Z
d dlmZmZ d dlmZmZmZ dd Zd d
Zd d Zd
d Zdd Zdd ZejeG dd de Z ejeG dd de Z ejej G dd de Z ejej!G dd de Z"dS ) )absolute_importdivisionprint_function)utils)InvalidSignatureUnsupportedAlgorithm_Reasons) _calculate_digest_and_algorithm_check_not_prehashed _warn_sign_verify_deprecated)hashes
serialization)AsymmetricSignatureContext AsymmetricVerificationContextecc C s t | tjstdtjd S )Nz/Unsupported elliptic curve signature algorithm.)
isinstancer ZECDSAr r Z UNSUPPORTED_PUBLIC_KEY_ALGORITHM)signature_algorithm r /usr/lib64/python3.6/ec.py_check_signature_algorithm s r c C s | j j|}| j|| jjk | j j|}|| j jkr>td| j jr^| j j |dkr^td| j j
|}| j|| jjk | jj |j d}|S )Nz;ECDSA keys with unnamed curves are unsupported at this timer ascii)
_libEC_KEY_get0_groupopenssl_assert_ffiNULLEC_GROUP_get_curve_nameZ NID_undefNotImplementedErrorZ$CRYPTOGRAPHY_OPENSSL_102U_OR_GREATERZEC_GROUP_get_asn1_flagZ
OBJ_nid2snstringdecode)backendZec_keygroupZnidZ
curve_namesnr r r _ec_key_curve_sn" s r# c C s | j j|| j j dS )z
Set the named curve flag on the EC_KEY. This causes OpenSSL to
serialize EC keys along with their curve OID which makes
deserialization easier.
N)r ZEC_KEY_set_asn1_flagZOPENSSL_EC_NAMED_CURVE)r Zec_cdatar r r _mark_asn1_named_ec_curve@ s r$ c C s8 y t j| S tk
r2 tdj|tjY nX d S )Nz${} is not a supported elliptic curve)r Z _CURVE_TYPESKeyErrorr formatr ZUNSUPPORTED_ELLIPTIC_CURVE)r r" r r r _sn_to_elliptic_curveL s r' c C sz | j j|j}| j|dk | jjd|}| jjdd}| j jd|t||||j}| j|dk | jj|d |d S )Nr zunsigned char[]zunsigned int[] ) r Z
ECDSA_size_ec_keyr r newZ
ECDSA_signlenbuffer)r private_keydataZmax_sizeZsigbufZ
siglen_ptrresr r r _ecdsa_sig_signV s r0 c C s8 | j jd|t||t||j}|dkr4| j td S )Nr r( )r Z ECDSA_verifyr+ r) Z_consume_errorsr )r
public_key signaturer. r/ r r r _ecdsa_sig_verifyc s
r3 c @ s$ e Zd Zdd Zdd Zdd ZdS )_ECDSASignatureContextc C s || _ || _tj||| _d S )N)_backend _private_keyr Hash_digest)selfr r- algorithmr r r __init__n s z _ECDSASignatureContext.__init__c C s | j j| d S )N)r8 update)r9 r. r r r r< s s z _ECDSASignatureContext.updatec C s | j j }t| j| j|S )N)r8 finalizer0 r5 r6 )r9 digestr r r r= v s
z _ECDSASignatureContext.finalizeN)__name__
__module__ __qualname__r; r< r= r r r r r4 l s r4 c @ s$ e Zd Zdd Zdd Zdd ZdS )_ECDSAVerificationContextc C s$ || _ || _|| _tj||| _d S )N)r5 _public_key
_signaturer r7 r8 )r9 r r1 r2 r: r r r r; ~ s z"_ECDSAVerificationContext.__init__c C s | j j| d S )N)r8 r< )r9 r. r r r r< s z _ECDSAVerificationContext.updatec C s" | j j }t| j| j| j| d S )N)r8 r= r3 r5 rC rD )r9 r> r r r verify s
z _ECDSAVerificationContext.verifyN)r? r@ rA r; r< rE r r r r rB | s rB c @ sZ e Zd Zdd ZejdZedd Zdd Z dd Z
d
d Z d d
Z dd Z
dd ZdS )_EllipticCurvePrivateKeyc C s6 || _ || _|| _t||}t||| _t|| d S )N)r5 r) _evp_pkeyr# r' _curver$ )r9 r ec_key_cdataevp_pkeyr" r r r r; s
z!_EllipticCurvePrivateKey.__init__rH c C s | j jS )N)curvekey_size)r9 r r r rL s z!_EllipticCurvePrivateKey.key_sizec C s( t t| t|j t| j| |jS )N)r r r
r: r4 r5 )r9 r r r r signer s
z _EllipticCurvePrivateKey.signerc C s | j j|| js tdtj|jj| jjkr4td| j jj | j
}| j jj |d d }| j j |dk | j j
jd|}| j jj|j
}| j jj|||| j
| j j
j}| j j |dk | j j
j|d | S )Nz1This backend does not support the ECDH algorithm.z2peer_public_key and self are not on the same curve r z uint8_t[])r5 Z+elliptic_curve_exchange_algorithm_supportedrK r r Z UNSUPPORTED_EXCHANGE_ALGORITHMname
ValueErrorr r r) ZEC_GROUP_get_degreer r r* EC_KEY_get0_public_keyZECDH_compute_keyr r, )r9 r: Zpeer_public_keyr! Zz_lenZz_bufZpeer_keyrr r r exchange s$
z!_EllipticCurvePrivateKey.exchangec C s | j jj| j}| j j|| j jjk | j jj|}| j j|}| j jj | j}| j j|| j jjk | j jj
||}| j j|dk | j j |}t | j ||S )Nr( )
r5 r r r) r r r r Z_ec_key_new_by_curve_nidrR ZEC_KEY_set_public_keyZ_ec_cdata_to_evp_pkey_EllipticCurvePublicKey)r9 r! Z curve_nidZ
public_ec_keypointr/ rJ r r r r1 s z#_EllipticCurvePrivateKey.public_keyc C s2 | j jj| j}| j j|}tj|| j j dS )N)
private_valuepublic_numbers) r5 r ZEC_KEY_get0_private_keyr)
_bn_to_intr ZEllipticCurvePrivateNumbersr1 rX )r9 ZbnrW r r r private_numbers s
z(_EllipticCurvePrivateKey.private_numbersc C s | j j|||| | j| jS )N)r5 Z_private_key_bytesrG r) )r9 encodingr& Zencryption_algorithmr r r
private_bytes s z&_EllipticCurvePrivateKey.private_bytesc C s* t | t| j||j\}}t| j| |S )N)r r r5
_algorithmr0 )r9 r. r r: r r r sign s z _EllipticCurvePrivateKey.signN)r? r@ rA r; r read_only_propertyrK propertyrL rM rT r1 rZ r\ r^ r r r r rF s
rF c @ sR e Zd Zdd ZejdZedd Zdd Z dd Z
d
d Z d d
Z dd Z
dS )rU c C s6 || _ || _|| _t||}t||| _t|| d S )N)r5 r) rG r# r' rH r$ )r9 r rI rJ r" r r r r; s
z _EllipticCurvePublicKey.__init__rH c C s | j jS )N)rK rL )r9 r r r rL s z _EllipticCurvePublicKey.key_sizec C s6 t tjd| t| t|j t| j| ||jS )Nr2 )r r _check_bytesr r
r: rB r5 )r9 r2 r r r r verifier s
z _EllipticCurvePublicKey.verifierc
C s | j j| j\}}| j jj| j}| j j|| j jjk | j j Z}| j jj |}| j jj |}||||||}| j j|dk | j j
|}| j j
|} W d Q R X t j || | j
dS )Nr( )xyrK )r5 Z _ec_key_determine_group_get_funcr) r rR r r r _tmp_bn_ctxZ
BN_CTX_getrY r ZEllipticCurvePublicNumbersrH )
r9 Zget_funcr! rV bn_ctxZbn_xZbn_yr/ rc rd r r r rX s z&_EllipticCurvePublicKey.public_numbersc C s |t jjkr| jjj}n
| jjj}| jjj| j}| jj || jj
j k | jjj | j}| jj || jj
j k | jj
l}| jjj|||| jj
j d|}| jj |dk | jj
jd|}| jjj||||||}| jj ||k W d Q R X | jj
j|d d S )Nr zchar[])r
PublicFormatCompressedPointr5 r ZPOINT_CONVERSION_COMPRESSEDZ POINT_CONVERSION_UNCOMPRESSEDr r) r r r rR re ZEC_POINT_point2octr* r, ) r9 r& Z
conversionr! rV rf ZbuflenZbufr/ r r r
_encode_point s
z%_EllipticCurvePublicKey._encode_pointc C sp |t jjks$|t jjks$|t jjkrV|t jjk sD|t jjt jjfkrLtd| j|S | jj ||| | j
d S d S )NzKX962 encoding must be used with CompressedPoint or UncompressedPoint format) r
ZEncodingZX962rg rh ZUncompressedPointrQ ri r5 Z_public_key_bytesrG )r9 r[ r& r r r public_bytes6 s
z$_EllipticCurvePublicKey.public_bytesc C s0 t | t| j||j\}}t| j| || d S )N)r r r5 r] r3 )r9 r2 r. r r: r r r rE L s z _EllipticCurvePublicKey.verifyN)r? r@ rA r; r r_ rK r` rL rb rX ri rj rE r r r r rU s
rU N)#Z
__future__r r r Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r
r Z cryptography.hazmat.primitivesr r
Z)cryptography.hazmat.primitives.asymmetricr r r r r# r$ r' r0 r3 Zregister_interfaceobjectr4 rB Z(EllipticCurvePrivateKeyWithSerializationrF Z'EllipticCurvePublicKeyWithSerializationrU r r r r s&
a