3
}:ay4 @ s d Z ddlZddlZddlZddlZddlmZmZmZm Z m
Z
ddl Z ddl
mZ ddlmZ ddlmZ ddlmZ ddlmZ dd lmZmZmZ ejeZG d
d d ej ej d Z e j G d
d de Z e j G dd de Z!e j G dd de Z"dS )z
JSON Web Key. N)DictOptionalSequenceTypeUnion)default_backend)hashes)
serialization)ec)rsa)errors json_utilutilc @ s e Zd ZU dZdZi Zeeef f Z e
e e Z e
e ddddZ
eeeee e
e ef f
ejfdd Zejd
d Zedd d
ZedddZdS )JWKz
JSON Web Key.ZktyN,:T)indentZ
separatorsZ sort_keysc sJ t j| t d}|jtj fdd j j D f jj |j
S )zgCompute JWK Thumbprint.
https://tools.ietf.org/html/rfc7638
:returns: bytes
)backendc s i | ]\}}| j kr||qS )required).0kv)selfr /usr/lib/python3.6/jwk.py
4 s z"JWK.thumbprint..) r ZHashr updatejsondumpsZto_jsonitems _thumbprint_json_dumps_paramsencodefinalize)r Z
hash_functionZdigestr )r r
thumbprint* s
zJWK.thumbprintc C s
t dS )ziGenerate JWK with public key.
For symmetric cryptosystems, this would return ``self``.
N)NotImplementedError)r r r r
public_key9 s zJWK.public_keyc C s |d krt n|}i }xVtjtjfD ]F}y ||||S tttjjfk
rh } z|||< W Y d d }~X q$X q$W xRtj tj
fD ]B}y
|||S ttjjfk
r } z|||< W Y d d }~X q|X q|W t j dj
|d S )Nz Unable to deserialize key: {0})r r Zload_pem_private_keyZload_der_private_key
ValueError TypeError cryptography
exceptionsZUnsupportedAlgorithmZload_pem_public_keyZload_der_public_keyr Errorformat)clsdatapasswordr r) loadererrorr r r _load_cryptography_keyB s"
zJWK._load_cryptography_keyc C s y| j |||}W n4 tjk
rF } ztjd| t|dS d}~X nX | jtk rvt|| j rvtjdj
|j | j x(| j j
D ]}t||j r||dS qW tjdj
|j dS )a Load serialized key as JWK.
:param str data: Public or private key serialized as PEM or DER.
:param str password: Optional password.
:param backend: A `.PEMSerializationBackend` and
`.DERSerializationBackend` provider.
:raises errors.Error: if unable to deserialize, or unsupported
JWK algorithm
:returns: JWK of an appropriate type.
:rtype: `JWK`
z,Loading symmetric key, asymmetric failed: %s)keyNz"Unable to deserialize {0} into {1}zUnsupported algorithm: {0})r1 r r* loggerdebugJWKOcttypNotImplemented
isinstancecryptography_key_typesr+ __class__TYPESvalues)r, r- r. r r2 r0 Zjwk_clsr r r load\ s zJWK.load)r r )NN)NN)__name__
__module__ __qualname____doc__type_field_namer; r strr r9 r r7 r r r r intboolr ZSHA256r# abcabstractmethodr% classmethodr1 r= r r r r r s
& r ) metaclassc @ s> e Zd ZdZdZd ZdejfZdd Z e
dd Z d d
Z d S )
r5 zSymmetric JWK.octr2 r c C s dt j| jiS )Nr )r
encode_b64joser2 )r r r r fields_to_partial_json s z JWKOct.fields_to_partial_jsonc C s | t j|d dS )Nr )r2 )r
decode_b64jose)r, jobjr r r fields_from_json s zJWKOct.fields_from_jsonc C s | S )Nr )r r r r r% s zJWKOct.public_keyN)r2 )
r> r? r@ rA r6 __slots__r rB r rL rH rO r% r r r r r5 | s
r5 c st e Zd ZdZdZejejfZdZ de
j dfZ fddZ
edd Zed
d Zd d
Zedd Zdd Z ZS )JWKRSAzRSA JWK.
:ivar key: :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPrivateKey`
or :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey` wrapped
in :class:`~josepy.util.ComparableRSAKey`
ZRSAr2 enc s> d|kr,t |d tj r,tj|d |d< t j|| d S )Nr2 )r8 r ZComparableRSAKeysuper__init__)r argskwargs)r: r r rU s
zJWKRSA.__init__c C s0 t |j d}tj|d }tj|jd|dS )zOEncode Base64urlUInt.
:type data: long
:rtype: unicode
big) byteorderlength)max
bit_lengthmathZceilr
rK to_bytes)r, r- r[ r r r
_encode_param s zJWKRSA._encode_paramc C sF y$t j|}|stj tj|ddS tk
r@ tj Y nX dS )zDecode Base64urlUInt.rY )rZ N)r
rM r DeserializationErrorrD
from_bytesr& )r, r- binaryr r r
_decode_param s
zJWKRSA._decode_paramc C s t | | jj dS )N)r2 )typer2 r% )r r r r r% s zJWKRSA.public_keyc
sB fdddD \}}t j||d}dkr>|jt } n jd }dks|dks|d ks|d
ks|d ks|d krtfd
ddD \}}} }
} } tdd | D rtjdj| t fdd| D \}}} }
} n6t j |||\}}t j
||} t j ||}
t j ||} t j
|||| |
| |jt } |dS )Nc 3 s | ]} j | V qd S )N)rd )r x)r, rN r r s z*JWKRSA.fields_from_json..rS rR )rR rS dpqdpdqqiZothc 3 s | ]} j |V qd S )N)get)r rf )rN r r rg s c s s | ]}|d kr|V qd S )Nr )r Zparamr r r rg s z(Some private parameters are missing: {0}c 3 s | ]} j |V qd S )N)rd )r rf )r, r r rg s )r2 )rS rR )ri rj rk rl rm )r ZRSAPublicNumbersr% r rd tupler r* r+ Zrsa_recover_prime_factorsZ rsa_crt_dmp1Z rsa_crt_dmq1Z rsa_crt_iqmpZRSAPrivateNumbers private_key)
r, rN rS rR public_numbersr2 rh ri rj rk rl rm Z
all_paramsr )r, rN r rO s. " zJWKRSA.fields_from_jsonc s~ t jjtjr* jj }|j|jd}n> jj } jj j }|j|j|j
|j |j |j
|j|jd} fdd|j D S )N)rS rR )rS rR rh ri rj rk rl rm c s i | ]\}} j ||qS r )r` )r r2 value)r r r r s z1JWKRSA.fields_to_partial_json..)r8 r2 _wrappedr RSAPublicKeyrq rS rR private_numbersr% rh ri rj Zdmp1Zdmq1Ziqmpr )r Znumbersparamsprivatepublicr )r r rL s
z JWKRSA.fields_to_partial_json)r2 )r> r? r@ rA r6 r rt Z
RSAPrivateKeyr9 rP r rB r rU rH r` rd r% rO rL
__classcell__r r )r: r rQ s
'rQ c s e Zd ZdZdZdZejejfZ de
j ddfZ fddZ
ed d
Zed d Zed
d Zedd Zedd Zdd Zedd Zdd Z ZS )JWKECzEC JWK.
:ivar key: :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey`
or :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey` wrapped
in :class:`~josepy.util.ComparableRSAKey`
ZECr2 crvrf yc s> d|kr,t |d tj r,tj|d |d< t j|| d S )Nr2 )r8 r ZComparableECKeyrT rU )r rV rW )r: r r rU
s
zJWKEC.__init__c C s t j|jd|dS )zlEncode Base64urlUInt.
:type data: long
:type key_size: long
:rtype: unicode
rY )rZ r[ )r
rK r_ )r, r- r[ r r r r` s zJWKEC._encode_paramc C s` y>t j|}t||kr2tjdj||t|dtj|ddS tk
rZ tj Y nX dS )zDecode Base64urlUInt.ziExpected parameter "{name}" to be {valid_lengths} bytes after base64-decoding; got {length} bytes instead)nameZ
valid_lengthsr[ rY )rZ N) r
rM lenr ra r+ rD rb r& )r, r- r} Z valid_lengthrc r r r rd s
zJWKEC._decode_paramc C s0 |dkr dS |dkrdS |dkr$dS t j d S )NZ secp256r1zP-256Z secp384r1zP-384Z secp521r1zP-521)r SerializationError)r, Z
curve_namer r r _curve_name_to_crv+ s zJWKEC._curve_name_to_crvc C s< |dkrt j S |dkr t j S |dkr0t j S tj d S )NzP-256zP-384zP-521)r
SECP256R1 SECP384R1 SECP521R1r ra )r, r{ r r r
_crv_to_curve5 s zJWKEC._crv_to_curvec C s4 t |tjrdS t |tjr dS t |tjr0dS d S )N 0 B )r8 r
r r r )r, curver r r expected_length_for_curve@ s z JWKEC.expected_length_for_curvec s i }t jjtjr jj n>t jjtjrTjj }jj j |j |d< n
t
j d j |d< j
|d< fdd|j D }j jj|d< |S )Nrh zRSupplied key is neither of type EllipticCurvePublicKey nor EllipticCurvePrivateKeyrf r| c s& i | ] \}}j |j j|qS r )r` r r )r r2 rr )rx r r r r V s z0JWKEC.fields_to_partial_json..r{ )r8 r2 rs r
EllipticCurvePublicKeyrq EllipticCurvePrivateKeyru r% Z
private_valuer r rf r| r r r r} )r rv rw r )rx r r rL I s
z JWKEC.fields_to_partial_jsonc s j d } j| fddd D \}}tj|||d}dkrX|jt }n& jd d}tj||jt } |dS )
Nr{ c 3 s | ]} j | |V qd S )N)rd )r rS )r, expected_lengthrN r r rg _ s z)JWKEC.fields_from_json..rf r| )rf r| r rh )r2 )rf r| ) r r r
ZEllipticCurvePublicNumbersr% r rd ZEllipticCurvePrivateNumbersrp )r, rN r rf r| rq r2 rh r )r, r rN r rO Z s
zJWKEC.fields_from_jsonc C s8 t | jdr| jj }n| jj jt }t| |dS )Nr% )r2 )hasattrr2 r% rq r re )r r2 r r r r% i s zJWKEC.public_key)r2 )r> r? r@ rA r6 rP r
r r r9 r rB r rU rH r` rd r r r rL rO r% ry r r )r: r rz s
rz )#rA rF r Zloggingr^ Ztypingr r r r r Zcryptography.exceptionsr( Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr
r Zjosepyr r
r Z getLoggerr> r3 ZTypedJSONObjectWithFieldsABCMetar registerr5 rQ rz r r r r s(
gk