3
l_C @ s< d dl mZmZmZ d dlmZ d dlmZmZm Z d dl
m Z m Z m
Z
d dlmZ d dlmZmZmZ d dlmZmZmZmZmZmZ d dlm Z m Z d d
Z d d Z d
d Z dd Z!dd Z"dd Z#dd Z$ej%eG dd de&Z'ej%eG dd de&Z(ej%e G dd d e&Z)ej%e G d d d e&Z*d S ) )absolute_importdivisionprint_function)utils)InvalidSignatureUnsupportedAlgorithm_Reasons) _calculate_digest_and_algorithm_check_not_prehashed _warn_sign_verify_deprecated)hashes)AsymmetricSignatureContext AsymmetricVerificationContextrsa)AsymmetricPaddingMGF1OAEPPKCS1v15PSS calculate_max_pss_salt_length) RSAPrivateKeyWithSerialization RSAPublicKeyWithSerializationc C s, | j }|tjks|tjkr$t||S |S d S )N)Z _salt_lengthr Z
MAX_LENGTHr r )ZpsskeyZhash_algorithmZsalt r /usr/lib64/python3.6/rsa.py_get_rsa_pss_salt_length& s
r c C s t |tstdt |tr&| jj}nVt |trh| jj}t |jt sPt
dt j | j
|s|t
dt jnt
dj|jt jt| ||||S )Nz1Padding must be an instance of AsymmetricPadding.z'Only MGF1 is supported by this backend.zPThis combination of padding and hash algorithm is not supported by this backend.z${} is not supported by this backend.)
isinstancer TypeErrorr _libRSA_PKCS1_PADDINGr ZRSA_PKCS1_OAEP_PADDING_mgfr r r UNSUPPORTED_MGFZrsa_padding_supportedUNSUPPORTED_PADDINGformatname_enc_dec_rsa_pkey_ctx)backendr datapadding padding_enumr r r _enc_dec_rsa/ s$
r* c C s t |tr | jj}| jj}n| jj}| jj}| jj|j| j j
}| j || j j
k | j j || jj
}||}| j |dk | jj||}| j |dk | jj|j} | j | dk t |to| jjr| j|jj}
| jj||
}| j |dk | j|j} | jj|| }| j |dk t |tr|jd k rt|jdkr| jjt|j} | j | | j j
k | j j| |jt|j | jj|| t|j}| j |dk | j j d| }
| j j d| }||||
|t|}| j j |d |
d }| jj |dkrt d|S )N r zsize_t *zunsigned char[]z Encryption/decryption failed.) r
_RSAPublicKeyr ZEVP_PKEY_encrypt_initZEVP_PKEY_encryptZEVP_PKEY_decrypt_initZEVP_PKEY_decryptEVP_PKEY_CTX_new _evp_pkey_ffiNULLopenssl_assertgcEVP_PKEY_CTX_free EVP_PKEY_CTX_set_rsa_padding
EVP_PKEY_sizer Z Cryptography_HAS_RSA_OAEP_MD _evp_md_non_null_from_algorithmr
_algorithm EVP_PKEY_CTX_set_rsa_mgf1_mdZ EVP_PKEY_CTX_set_rsa_oaep_mdZ_labellenZOPENSSL_mallocZmemmoveZ EVP_PKEY_CTX_set0_rsa_oaep_labelnewbufferZERR_clear_error
ValueError)r& r r' r) r( ZinitZcryptpkey_ctxresZbuf_sizemgf1_mdZoaep_mdZlabelptrZoutlenbufZresbufr r r r% N sN
r% c C s t |tstd| jj|j}| j|dk t |trB| jj}nZt |t rt |j
t sdt dt
j||j d dk r~td| jj}nt dj|jt
j|S )Nz'Expected provider of AsymmetricPadding.r z'Only MGF1 is supported by this backend. zDDigest too large for key size. Use a larger key or different digest.z${} is not supported by this backend.)r r r r r5 r. r1 r r r r r r r r! Z digest_sizer< ZRSA_PKCS1_PSS_PADDINGr# r$ r" )r& r r( algorithmZ pkey_sizer) r r r _rsa_sig_determine_padding s&
rC c C s t | |||}| j|}| jj|j| jj}| j|| jjk | jj|| jj }||} | j| dk | jj
||} | dkr| j t dj
|jtj| jj||} | j| dk t|tr| jj|t|||} | j| dk | j|jj}
| jj||
} | j| dk |S )Nr+ r z4{} is not supported by this backend for RSA signing.)rC r6 r r- r. r/ r0 r1 r2 r3 Z EVP_PKEY_CTX_set_signature_md_consume_errorsr r# r$ r ZUNSUPPORTED_HASHr4 r r Z EVP_PKEY_CTX_set_rsa_pss_saltlenr r r7 r8 ) r& r( rB r r' Z init_funcr) Zevp_mdr= r> r? r r r _rsa_sig_setup s2
rE c
C s t | ||||| jj}| jjd}| jj|| jj||t|}| j|dk | jjd|d }| jj||||t|}|dkr| j } t
d| | jj |d d S )Nzsize_t *r+ zunsigned char[]r zuDigest or salt length too long for key size. Use a larger key or shorter salt length if you are specifying a PSS salt) rE r ZEVP_PKEY_sign_initr/ r: Z
EVP_PKEY_signr0 r9 r1 _consume_errors_with_textr< r; )
r& r( rB private_keyr' r= Zbuflenr> r@ errorsr r r
_rsa_sig_sign s&
rI c C sX t | ||||| jj}| jj||t||t|}| j|dk |dkrT| j td S )Nr )rE r ZEVP_PKEY_verify_initZEVP_PKEY_verifyr9 r1 rD r )r& r( rB
public_key signaturer' r= r> r r r _rsa_sig_verify s
rL c @ s$ e Zd Zdd Zdd Zdd ZdS )_RSASignatureContextc C s< || _ || _t|||| || _|| _tj| j| j | _d S )N)_backend _private_keyrC _paddingr7 r Hash _hash_ctx)selfr& rG r( rB r r r __init__ s z _RSASignatureContext.__init__c C s | j j| d S )N)rR update)rS r' r r r rU s z_RSASignatureContext.updatec C s t | j| j| j| j| jj S )N)rI rN rP r7 rO rR finalize)rS r r r rV s z _RSASignatureContext.finalizeN)__name__
__module__ __qualname__rT rU rV r r r r rM s rM c @ s$ e Zd Zdd Zdd Zdd ZdS )_RSAVerificationContextc C sF || _ || _|| _|| _t|||| |}|| _tj| j| j | _d S )N) rN _public_key
_signaturerP rC r7 r rQ rR )rS r& rJ rK r( rB r r r rT s z _RSAVerificationContext.__init__c C s | j j| d S )N)rR rU )rS r' r r r rU ( s z _RSAVerificationContext.updatec C s" t | j| j| j| j| j| jj S )N)rL rN rP r7 r[ r\ rR rV )rS r r r verify+ s z _RSAVerificationContext.verifyN)rW rX rY rT rU r] r r r r rZ s rZ c @ sN e Zd Zdd ZejdZdd Zdd Zdd Z d
d Z
d d
Z dd Z dS )_RSAPrivateKeyc C s |j j|}|dkr&|j }td||j j||jj}|j|dk || _|| _ || _
| jjj d}| jj j | j || jjj| jjj | jj|d | jjjk | jj j
|d | _d S )Nr+ zInvalid private keyz BIGNUM **r )r Z
RSA_check_keyrF r< ZRSA_blinding_onr/ r0 r1 rN
_rsa_cdatar. r: RSA_get0_key BN_num_bits _key_size)rS r& rsa_cdataevp_pkeyr> rH nr r r rT 8 s"
z_RSAPrivateKey.__init__rb c C s t t| t| j| ||S )N)r r
rM rN )rS r( rB r r r signerS s z_RSAPrivateKey.signerc C s2 | j d d }|t|kr"tdt| j| ||S )N z,Ciphertext length must be equal to key size.)key_sizer9 r< r* rN )rS Z
ciphertextr( Zkey_size_bytesr r r decryptX s z_RSAPrivateKey.decryptc C sV | j jj| j}| j j|| j jjk | j jj|| j jj}| j j |}t
| j ||S )N) rN r ZRSAPublicKey_dupr_ r1 r/ r0 r2 ZRSA_freeZ_rsa_cdata_to_evp_pkeyr, )rS Zctxrd r r r rJ _ s
z_RSAPrivateKey.public_keyc C s | j jjd}| j jjd}| j jjd}| j jjd}| j jjd}| j jjd}| j jjd}| j jjd}| j jj| j||| | j j|d | j jjk | j j|d | j jjk | j j|d | j jjk | j jj| j|| | j j|d | j jjk | j j|d | j jjk | j jj | j||| | j j|d | j jjk | j j|d | j jjk | j j|d | j jjk t
j | j j |d | j j |d | j j |d | j j |d | j j |d | j j |d t
j
| j j |d | j j |d ddS )Nz BIGNUM **r )ere )pqddmp1dmq1iqmppublic_numbers)rN r/ r: r r` r_ r1 r0 ZRSA_get0_factorsZRSA_get0_crt_paramsr ZRSAPrivateNumbers
_bn_to_intRSAPublicNumbers) rS re rk rn rl rm ro rp rq r r r private_numbersf s< z _RSAPrivateKey.private_numbersc C s | j j|||| | j| jS )N)rN Z_private_key_bytesr. r_ )rS encodingr# Zencryption_algorithmr r r
private_bytes s z _RSAPrivateKey.private_bytesc C s$ t | j||\}}t| j||| |S )N)r rN rI )rS r' r( rB r r r sign s z_RSAPrivateKey.signN)
rW rX rY rT r read_only_propertyri rf rj rJ ru rw rx r r r r r^ 6 s
#
r^ c @ sF e Zd Zdd ZejdZdd Zdd Zdd Z d
d Z
d d
Z dS )r, c C st || _ || _|| _| j jjd}| j jj| j|| j jj| j jj | j j|d | j jjk | j jj |d | _
d S )Nz BIGNUM **r ) rN r_ r. r/ r: r r` r0 r1 ra rb )rS r& rc rd re r r r rT s z_RSAPublicKey.__init__rb c C s, t tjd| t| t| j| |||S )NrK )r r _check_bytesr
rZ rN )rS rK r( rB r r r verifier s
z_RSAPublicKey.verifierc C s t | j| ||S )N)r* rN )rS Z plaintextr( r r r encrypt s z_RSAPublicKey.encryptc C s | j jjd}| j jjd}| j jj| j||| j jj | j j|d | j jjk | j j|d | j jjk tj | j j
|d | j j
|d dS )Nz BIGNUM **r )rk re ) rN r/ r: r r` r_ r0 r1 r rt rs )rS re rk r r r rr s z _RSAPublicKey.public_numbersc C s | j j||| | j| jS )N)rN Z_public_key_bytesr. r_ )rS rv r# r r r public_bytes s z_RSAPublicKey.public_bytesc C s& t | j||\}}t| j||| ||S )N)r rN rL )rS rK r' r( rB r r r r] s z_RSAPublicKey.verifyN) rW rX rY rT r ry ri r{ r| rr r} r] r r r r r, s
r, N)+Z
__future__r r r Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r
r Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr
r r Z1cryptography.hazmat.primitives.asymmetric.paddingr r r r r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r* r% rC rE rI rL Zregister_interfaceobjectrM rZ r^ r, r r r r s, ;"" c