3 lá˜_þ(ã @sTddlmZmZmZddlZyddlmZWn ek rLddlmZYnXddl Z ddl mZddlm Z mZddlmZddlmZe jejƒGdd „d eƒƒZe jejƒGd d„deƒƒZe jejƒGdd „d eƒƒZeZd%dd„Zdd„Zdd„Zdd„Zdd„Zdd„Zdd„Z dd„Z!dZ"dd „Z#Gd!d"„d"eƒZ$Gd#d$„d$eƒZ%dS)&é)Úabsolute_importÚdivisionÚprint_functionN)Úgcd)Úutils)ÚUnsupportedAlgorithmÚ_Reasons)Ú_get_backend)Ú RSABackendc@sReZdZejdd„ƒZejdd„ƒZejdd„ƒZejdd„ƒZ ejd d „ƒZ dS)Ú RSAPrivateKeycCsdS)zN Returns an AsymmetricSignatureContext used for signing data. N©)ÚselfÚpaddingÚ algorithmrrú/usr/lib64/python3.6/rsa.pyÚsignerszRSAPrivateKey.signercCsdS)z3 Decrypts the provided ciphertext. Nr)r Z ciphertextrrrrÚdecryptszRSAPrivateKey.decryptcCsdS)z7 The bit length of the public modulus. Nr)r rrrÚkey_size%szRSAPrivateKey.key_sizecCsdS)zD The RSAPublicKey associated with this private key. Nr)r rrrÚ public_key+szRSAPrivateKey.public_keycCsdS)z! Signs the data. Nr)r ÚdatarrrrrÚsign1szRSAPrivateKey.signN)Ú__name__Ú __module__Ú__qualname__ÚabcÚabstractmethodrrÚabstractpropertyrrrrrrrrs rc@s(eZdZejdd„ƒZejdd„ƒZdS)ÚRSAPrivateKeyWithSerializationcCsdS)z/ Returns an RSAPrivateNumbers. Nr)r rrrÚprivate_numbers:sz.RSAPrivateKeyWithSerialization.private_numberscCsdS)z6 Returns the key serialized as bytes. Nr)r ÚencodingÚformatZencryption_algorithmrrrÚ private_bytes@sz,RSAPrivateKeyWithSerialization.private_bytesN)rrrrrrr!rrrrr8src@s`eZdZejdd„ƒZejdd„ƒZejdd„ƒZejdd„ƒZ ejd d „ƒZ ejdd„ƒZd S)ÚRSAPublicKeycCsdS)zY Returns an AsymmetricVerificationContext used for verifying signatures. Nr)r Ú signaturerrrrrÚverifierIszRSAPublicKey.verifiercCsdS)z/ Encrypts the given plaintext. Nr)r Z plaintextrrrrÚencryptOszRSAPublicKey.encryptcCsdS)z7 The bit length of the public modulus. Nr)r rrrrUszRSAPublicKey.key_sizecCsdS)z- Returns an RSAPublicNumbers Nr)r rrrÚpublic_numbers[szRSAPublicKey.public_numberscCsdS)z6 Returns the key serialized as bytes. Nr)r rr rrrÚpublic_bytesaszRSAPublicKey.public_bytescCsdS)z5 Verifies the signature of the data. Nr)r r#rrrrrrÚverifygszRSAPublicKey.verifyN)rrrrrr$r%rrr&r'r(rrrrr"Gsr"cCs4t|ƒ}t|tƒstdtjƒ‚t||ƒ|j||ƒS)Nz-Backend object does not implement RSABackend.)r Ú isinstancer rrZBACKEND_MISSING_INTERFACEÚ_verify_rsa_parametersZgenerate_rsa_private_key)Úpublic_exponentrÚbackendrrrÚgenerate_private_keyqs r-cCs$|dkrtdƒ‚|dkr tdƒ‚dS)Néézopublic_exponent must be either 3 (for legacy compatibility) or 65537. Almost everyone should choose 65537 here!iz#key_size must be at least 512-bits.)r.r/)Ú ValueError)r+rrrrr*}s r*cCsÜ|dkrtdƒ‚||kr tdƒ‚||kr0tdƒ‚||kr@tdƒ‚||krPtdƒ‚||kr`tdƒ‚||krptdƒ‚|dks€||krˆtd ƒ‚|d @dkrœtdƒ‚|d @dkr°td ƒ‚|d @dkrÄtdƒ‚|||krØtdƒ‚dS)Nr.zmodulus must be >= 3.zp must be < modulus.zq must be < modulus.zdmp1 must be < modulus.zdmq1 must be < modulus.ziqmp must be < modulus.z#private_exponent must be < modulus.z+public_exponent must be >= 3 and < modulus.érzpublic_exponent must be odd.zdmp1 must be odd.zdmq1 must be odd.zp*q must equal modulus.)r0)ÚpÚqÚprivate_exponentÚdmp1Údmq1Úiqmpr+ÚmodulusrrrÚ_check_private_key_componentsˆs0r9cCs@|dkrtdƒ‚|dks ||kr(tdƒ‚|d@dkr= 3.ze must be >= 3 and < n.r1rze must be odd.)r0)ÚeÚnrrrÚ_check_public_key_components°sr<c CsVd\}}||}}x:|dkrLt||ƒ\}}|||}||||f\}}}}qW||S)zO Modular Multiplicative Inverse. Returns x such that: (x*e) mod m == 1 r1r)r1r)Údivmod) r:ÚmZx1Zx2ÚaÚbr3ÚrZxnrrrÚ_modinv»s rBcCs t||ƒS)zF Compute the CRT (q ** -1) % p value from RSA primes p and q. )rB)r2r3rrrÚrsa_crt_iqmpÈsrCcCs||dS)zg Compute the CRT private_exponent % (p - 1) value from the RSA private_exponent (d) and p. r1r)r4r2rrrÚrsa_crt_dmp1ÏsrDcCs||dS)zg Compute the CRT private_exponent % (q - 1) value from the RSA private_exponent (d) and q. r1r)r4r3rrrÚrsa_crt_dmq1×srEiècCsâ||d}|}x|ddkr(|d}qWd}d}xx|rª|tkrª|}xX||kržt|||ƒ}|dkr”||dkr”t|d|ƒdkr”t|d|ƒ} d}P|d9}qHW|d7}q4W|s¸tdƒ‚t|| ƒ\} }t| | fdd\} } | | fS)z¡ Compute factors p and q from the private exponent d. We assume that n has no more than two factors. This function is adapted from code in PyCrypto. r1érFTz2Unable to compute factors p and q from exponent d.)Úreverse)Ú_MAX_RECOVERY_ATTEMPTSÚpowrr0r=Úsorted)r;r:ÚdZktotÚtZspottedr?ÚkZcandr2r3rArrrÚrsa_recover_prime_factorsås* $rNc@s|eZdZdd„ZejdƒZejdƒZejdƒZejdƒZ ejdƒZ ejdƒZejd ƒZddd„Z d d„Zdd„Zdd„Zd S)ÚRSAPrivateNumberscCsœt|tjƒsTt|tjƒsTt|tjƒsTt|tjƒsTt|tjƒsTt|tjƒr\tdƒ‚t|tƒsntdƒ‚||_||_||_||_||_ ||_ ||_dS)NzNRSAPrivateNumbers p, q, d, dmp1, dmq1, iqmp arguments must all be an integers.zFRSAPrivateNumbers public_numbers must be an RSAPublicNumbers instance.)r)ÚsixÚ integer_typesÚ TypeErrorÚRSAPublicNumbersÚ_pÚ_qÚ_dÚ_dmp1Ú_dmq1Ú_iqmpÚ_public_numbers)r r2r3rKr5r6r7r&rrrÚ__init__s$ zRSAPrivateNumbers.__init__rTrUrVrWrXrYrZNcCst|ƒ}|j|ƒS)N)r Zload_rsa_private_numbers)r r,rrrÚprivate_key5szRSAPrivateNumbers.private_keycCsbt|tƒstS|j|jko`|j|jko`|j|jko`|j|jko`|j|jko`|j|jko`|j |j kS)N) r)rOÚNotImplementedr2r3rKr5r6r7r&)r ÚotherrrrÚ__eq__9s zRSAPrivateNumbers.__eq__cCs ||kS)Nr)r r^rrrÚ__ne__GszRSAPrivateNumbers.__ne__cCs$t|j|j|j|j|j|j|jfƒS)N)Úhashr2r3rKr5r6r7r&)r rrrÚ__hash__JszRSAPrivateNumbers.__hash__)N)rrrr[rÚread_only_propertyr2r3rKr5r6r7r&r\r_r`rbrrrrrOs rOc@sReZdZdd„ZejdƒZejdƒZddd„Zdd „Z d d„Z dd „Zdd„ZdS)rScCs4t|tjƒst|tjƒr$tdƒ‚||_||_dS)Nz,RSAPublicNumbers arguments must be integers.)r)rPrQrRÚ_eÚ_n)r r:r;rrrr[Ys zRSAPublicNumbers.__init__rdreNcCst|ƒ}|j|ƒS)N)r Zload_rsa_public_numbers)r r,rrrreszRSAPublicNumbers.public_keycCs dj|ƒS)Nz$)r )r rrrÚ__repr__iszRSAPublicNumbers.__repr__cCs&t|tƒstS|j|jko$|j|jkS)N)r)rSr]r:r;)r r^rrrr_ls zRSAPublicNumbers.__eq__cCs ||kS)Nr)r r^rrrr`rszRSAPublicNumbers.__ne__cCst|j|jfƒS)N)rar:r;)r rrrrbuszRSAPublicNumbers.__hash__)N) rrrr[rrcr:r;rrfr_r`rbrrrrrSXs rS)N)&Z __future__rrrrZmathrÚImportErrorZ fractionsrPZcryptographyrZcryptography.exceptionsrrZcryptography.hazmat.backendsr Z'cryptography.hazmat.backends.interfacesr Z add_metaclassÚABCMetaÚobjectrrr"ZRSAPublicKeyWithSerializationr-r*r9r<rBrCrDrErHrNrOrSrrrrÚs: & ( +H