3
}:a @ s d Z ddlZddlZddlmZmZ ddlZddlm Z ddl
m Z ddl
m Z ddl
mZmZ ddlmZ dd lmZ dd
lmZmZmZ dd lmZ ejeZG d d
d
ej Z G dd de eZ G dd de Z G dd dZ G dd de e Z!G dd de e Z"G dd de Z#e j$e de j%Z&e j$e de j'Z(e j$e d e j)Z*e j$e!d e j%Z+e j$e!d e j'Z,e j$e!d e j)Z-e j$e"d e j%Z.e j$e"d!e j'Z/e j$e"d"e j)Z0e j$e#d#e j%Z1e j$e#d$e j'Z2e j$e#d%e j)Z3dS )&zZJSON Web Algorithms.
https://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-40
N)DictType)default_backend)hashes)hmac)paddingec)decode_dss_signature)encode_dss_signature)errors
interfacesjwk)Hashablec @ s e Zd ZdZdS )JWAzJSON Web Algorithm.N)__name__
__module__ __qualname____doc__ r r /usr/lib/python3.6/jwa.pyr s r c @ s~ e Zd ZU dZi Zeeef dd Zdd Z dd Z
e dd Z d
d Z
e d d
Zejdd Zejdd Zdd ZdS ) JWASignaturez-Base class for JSON Web Signature Algorithms.c C s
|| _ d S )N)name)selfr r r r __init__$ s zJWASignature.__init__c C s t |tstS | j|jkS )N)
isinstancer NotImplementedr )r otherr r r __eq__' s
zJWASignature.__eq__c C s t | j| jfS )N)hash __class__r )r r r r __hash__, s zJWASignature.__hash__c C s || j |j< |S )z(Register class for JSON deserialization.)
SIGNATURESr )clsZ
signature_clsr r r register/ s zJWASignature.registerc C s | j S )N)r )r r r r to_partial_json5 s z JWASignature.to_partial_jsonc C s
| j | S )N)r! )r" Zjobjr r r from_json8 s zJWASignature.from_jsonc C s
t dS )z Sign the ``msg`` using ``key``.N)NotImplementedError)r keymsgr r r sign< s zJWASignature.signc C s
t dS )z-Verify the ``msg`` and ``sig`` using ``key``.N)r& )r r' r( sigr r r verifyA s zJWASignature.verifyc C s | j S )N)r )r r r r __repr__F s zJWASignature.__repr__N)r r r r r! r strr r r r classmethodr# r$ r% abcabstractmethodr) r+ r, r r r r r s
r c s2 e Zd ZejZ fddZdd Zdd Z Z S )_JWAHSc s t j| | | _d S )N)superr r )r r hash_)r r r r M s z_JWAHS.__init__c C s& t j|| jt d}|j| |j S )N)backend)r HMACr r updatefinalize)r r' r( signerr r r r) Q s
z _JWAHS.signc C sh t j|| jt d}|j| y|j| W n2 tjjk
r^ } zt j
|dd dS d }~X nX dS d S )N)r4 T)exc_infoF) r r5 r r r6 r+ cryptography
exceptionsInvalidSignatureloggerdebug)r r' r( r* verifiererrorr r r r+ V s
z
_JWAHS.verify)
r r r r
ZJWKOctktyr r) r+
__classcell__r r )r r r1 J s r1 c @ s* e Zd ZejZeZeZdd Z dd Z
dS )_JWARSAc C s t |d}y*|r"|j|| j| jS |j| j| j}W nv tk
rn } z tj|dd tj dW Y dd}~X n> t
k
r } z"tj|dd tj t |W Y dd}~X nX |j | y|j
S t
k
r } z"tj|dd tj t |W Y dd}~X nX dS )z Sign the ``msg`` using ``key``.r) T)r9 z%Public key cannot be used for signingN)hasattrr) r r r8 AttributeErrorr= r> r Error
ValueErrorr- r6 r7 )r r' r( new_apir8 r@ r r r r) g s"
z _JWARSA.signc C s t |d}|s*|j|| j| j}|j| y&|rF|j||| j| j n|j W n2 tjjk
r } zt j
|dd dS d}~X nX dS dS )z,Verify the ``msg` and ``sig`` using ``key``.r+ T)r9 FN) rD r? r r r6 r+ r: r; r< r= r> )r r' r( r* rH r? r@ r r r r+ | s
z_JWARSA.verifyN) r r r r
ZJWKRSArA r r r r) r+ r r r r rC b s
rC c s e Zd Z fddZ ZS )_JWARSc s" t j| tj | _| | _d S )N)r2 r r ZPKCS1v15r )r r r3 )r r r r s
z_JWARS.__init__)r r r r rB r r )r r rI s rI c s e Zd Z fddZ ZS )_JWAPSc s4 t j| tjtj| tjjd| _| | _d S )N)ZmgfZ salt_length)r2 r r ZPSSZMGF1Z
MAX_LENGTHr )r r r3 )r r r r s
z_JWAPS.__init__)r r r r rB r r )r r rJ s rJ c sB e Zd ZejZ fddZdd Zdd Zdd Z d d
Z
Z S ) _JWAECc s t j| | | _d S )N)r2 r r )r r r3 )r r r r s z_JWAEC.__init__c C sB | j ||}t|\}}tjj|j}|j|dd|j|dd S )z Sign the ``msg`` using ``key``.big)length byteorder)_signr r
JWKECexpected_length_for_curvecurveto_bytes)r r' r( r* ZdrZdsrM r r r r) s
z _JWAEC.signc C s t |d}y.|r$|j|tj| jS |jtj| j}W nv tk
rr } z tj|dd t j
dW Y d d }~X n> t k
r } z"tj|dd t j
t |W Y d d }~X nX |j
| y|j S t k
r } z"tj|dd t j
t |W Y d d }~X nX d S )Nr) T)r9 z%Public key cannot be used for signing)rD r) r ECDSAr r8 rE r= r> r rF rG r- r6 r7 )r r' r( rH r8 r@ r r r rO s"
z _JWAEC._signc C s^ t jj|j}t|d| kr"dS ttj|d| ddtj||d dd}| j|||S )z,Verify the ``msg` and ``sig`` using ``key``. Fr rL )rN N) r
rP rQ rR lenr
int
from_bytes_verify)r r' r( r* Zrlenasn1sigr r r r+ s z
_JWAEC.verifyc C s t |d}|s,|j|tj| j}|j| y(|rJ|j||tj| j n|j W n2 tjj k
r } zt
j |dd dS d }~X nX dS d S )Nr+ T)r9 F) rD r? r rT r r6 r+ r: r; r< r= r> )r r' r( rZ rH r? r@ r r r rY s
z_JWAEC._verify) r r r r
rP rA r r) rO r+ rY rB r r )r r rK s rK HS256HS384HS512RS256RS384RS512PS256PS384PS512ES256ES384ES512)4r r/ ZloggingZtypingr r Zcryptography.exceptionsr: Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r Z/cryptography.hazmat.primitives.asymmetric.utilsr r
Zjosepyr r r
collections.abcr Z getLoggerr r= ZJSONDeSerializabler r r1 rC rI rJ rK r# ZSHA256r[ ZSHA384r\ ZSHA512r] r^ r_ r` ra rb rc rd re rf r r r r s@
*-
B