Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/Cryptodome/PublicKey/__pycache__/DSA.cpython-39.pyc
Ðазад
a b�h[W � @ s g d �Z ddlZddlZddlZddlmZmZmZmZm Z ddl m Z ddl m Z mZ ddlmZ ddlmZmZmZmZmZ ddlmZ dd lmZmZm Z dd l m Z m Z m Z G d d � d e!�Z"d d� Z#d!dd�Z$d"dd�Z%dd� Z&dd� Z'dd� Z(dd� Z)d d � Z*d#d d �Z+e+Z,d Z-dS )$)�generate� construct�DsaKey� import_key� N)�bchr�bord�tobytes�tostr� iter_range)�Random)�PKCS8�PEM)�SHA256)� DerObject� DerSequence� DerInteger� DerObjectId� DerBitString)�Integer)�test_probable_prime� COMPOSITE�PROBABLY_PRIME)� _expand_subject_public_key_info� _create_subject_public_key_info� _extract_subject_public_key_infoc @ s� e Zd ZdZg d�Zdd� Zdd� Zdd� Zd d � Zd d � Z d d� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zdd � Zd/d d �ZeZd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd S )0r a� Class defining an actual DSA key. Do not instantiate directly. Use :func:`generate`, :func:`construct` or :func:`import_key` instead. :ivar p: DSA modulus :vartype p: integer :ivar q: Order of the subgroup :vartype q: integer :ivar g: Generator :vartype g: integer :ivar y: Public key :vartype y: integer :ivar x: Private key :vartype x: integer ��y�g�p�q�xc C sp t |�� �}t d�}|�|�s2tdt|| � ��|| }|rb|t d�krbtdt|t d� � ��t|�| _d S )N�r r r r z$Some DSA components are missing = %s�r zUnknown DSA components = %s)�set�keys�issubset� ValueError�str�dict�_key)�self�key_dictZ input_setZ public_setZ extra_set� r, ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/Cryptodome/PublicKey/DSA.py�__init__e s ��zDsaKey.__init__c s� � � � std��d| k r&� jk s0n td��� fdd�dD �\}}}}tjd|d�}|| �|�}|| } t|||�| } ||| | | | } tt | | f�S )Nz)DSA public key cannot be used for signing� zk is not between 2 and q-1c s g | ]}� j | �qS r, �r) ��.0�comp�r* r, r- � <listcomp>w � z DsaKey._sign.<locals>.<listcomp>)r r r r )Z min_inclusiveZ max_exclusive) � has_private� TypeErrorr r& r Z random_range�inverse�pow�map�int) r* �m�kr r r r Z blind_factorZ inv_blind_kZblind_x�r�sr, r4 r- �_signq s �z DsaKey._signc s� |\}}� fdd�dD �\}}}}d| k r6|k rPn nd| k rN|k sTn dS t |��|�} | | | } | | | } t|| |�t|| |� | | } | |kS )Nc s g | ]}� j | �qS r, r0 r1 r4 r, r- r5 � r6 z"DsaKey._verify.<locals>.<listcomp>)r r r r r F)r r9 r: ) r* r= �sigr? r@ r r r r �w�u1�u2�vr, r4 r- �_verify� s . zDsaKey._verifyc C s d| j v S )z!Whether this is a DSA private keyr r0 r4 r, r, r- r7 � s zDsaKey.has_privatec C s dS )NFr, r4 r, r, r- � can_encrypt� s zDsaKey.can_encryptc C s dS )NTr, r4 r, r, r- �can_sign� s zDsaKey.can_signc s t � fdd�dD ��}t|�S )z^A matching DSA public key. Returns: a new :class:`DsaKey` object c 3 s | ]}|� j | fV qd S �Nr0 )r2 r> r4 r, r- � <genexpr>� r6 z#DsaKey.publickey.<locals>.<genexpr>r! )r( r )r* Zpublic_componentsr, r4 r- � publickey� s zDsaKey.publickeyc C sP t | �� �t |�� �kr dS d}| jD ]$}|oHt| j|d �t|j|d �k}q&|S )NFT)�boolr7 �_keydata�getattrr) )r* �other�resultr3 r, r, r- �__eq__� s �z DsaKey.__eq__c C s | � |� S rJ )rR )r* rP r, r, r- �__ne__� s z DsaKey.__ne__c C s ddl m} |�d S )Nr )� PicklingError)�picklerT )r* rT r, r, r- � __getstate__� s zDsaKey.__getstate__c s � fdd�dD �S )zPThe DSA domain parameters. Returns tuple : (p,q,g) c s g | ]}t � j| ��qS r, )r< r) r1 r4 r, r- r5 � r6 z!DsaKey.domain.<locals>.<listcomp>)r r r r, r4 r, r4 r- �domain� s z DsaKey.domainc C sz g }| j D ]@}|dkr6t| j��� }|�d|f � q t| |�r |�|� q | �� r^|�d� d| jjt | �d� |�f S )Nr zp(%d)�privatez <%s @0x%x %s>�,) rN r r � size_in_bits�append�hasattrr7 � __class__�__name__�id�join)r* �attrsr> �bitsr, r, r- �__repr__� s zDsaKey.__repr__c C s0 zt | j| �W S ty* t|��Y n0 d S rJ )r< r) �KeyError�AttributeError)r* �itemr, r, r- � __getattr__� s zDsaKey.__getattr__r Nc s� |durt |�}|du r tj}|dkr��fdd�dD �}dd� � � fdd�|D �}d g| }d �d d� |D ��} d t�| �dd � S t�j�j�j g�} �� � �r8|du r�d}|r�|s�d}t �j �� � } tj| t||| |d�} |r�d} nd} d}nB|dk�r |�r td��d�j�j�j �j�j g}t|�� � } d} n$|�rFtd��ttt �j�| �} d} |dk�rj| S |dk�r�t� | | d ||�}t |�S td| ��dS ) a� Export this DSA key. Args: format (string): The encoding for the output: - *'PEM'* (default). ASCII as per `RFC1421`_/ `RFC1423`_. - *'DER'*. Binary ASN.1 encoding. - *'OpenSSH'*. ASCII one-liner as per `RFC4253`_. Only suitable for public keys, not for private keys. passphrase (string): *Private keys only*. The pass phrase to protect the output. pkcs8 (boolean): *Private keys only*. If ``True`` (default), the key is encoded with `PKCS#8`_. If ``False``, it is encoded in the custom OpenSSL/OpenSSH container. protection (string): *Only in combination with a pass phrase*. The encryption scheme to use to protect the output. If :data:`pkcs8` takes value ``True``, this is the PKCS#8 algorithm to use for deriving the secret and encrypting the private DSA key. For a complete list of algorithms, see :mod:`Cryptodome.IO.PKCS8`. The default is *PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC*. If :data:`pkcs8` is ``False``, the obsolete PEM encryption scheme is used. It is based on MD5 for key derivation, and Triple DES for encryption. Parameter :data:`protection` is then ignored. The combination ``format='DER'`` and ``pkcs8=False`` is not allowed if a passphrase is present. randfunc (callable): A function that returns random bytes. By default it is :func:`Cryptodome.Random.get_random_bytes`. Returns: byte string : the encoded key Raises: ValueError : when the format is unknown or when you try to encrypt a private key with *DER* format and OpenSSL/OpenSSH. .. warning:: If you don't provide a pass phrase, the private key will be exported in the clear! .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _RFC4253: http://www.ietf.org/rfc/rfc4253.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt NZOpenSSHc s g | ]}� j | �� �qS r, )r) �to_bytes�r2 r r4 r, r- r5 r6 z%DsaKey.export_key.<locals>.<listcomp>)r r r r c S s$ t | d �d@ r td�| S | S d S )Nr � )r r r" r, r, r- �func s z DsaKey.export_key.<locals>.funcc s g | ] }� |��qS r, r, ri )rk r, r- r5 r6 � ssh-dssr6 c S s g | ]}t �d t|��| �qS )�>I)�struct�pack�len)r2 �kpr, r, r- r5 r6 � ssh-dss ���Tz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC)Z key_params�randfunczENCRYPTED PRIVATEZPRIVATEr z#DSA private key cannot be encryptedr z DSA PRIVATEz*PKCS#8 is only meaningful for private keysZPUBLICZDERz KEYz3Unknown key format '%s'. Cannot export the DSA key.)r r �get_random_bytesr` �binascii� b2a_base64r r r r r7 r r �encoder �wrap�oidr& r r r )r* �formatZpkcs8� passphraseZ protectionrt Ztup1Ztup2�keyparts� keystring�paramsZ private_keyZ binary_keyZkey_typeZintsZpem_strr, )rk r* r- � export_key� sd ; � � � �zDsaKey.export_keyc C s t d��d S �Nz+Use module Cryptodome.Signature.DSS instead��NotImplementedError)r* �M�Kr, r, r- �signR s z DsaKey.signc C s t d��d S r� r� )r* r� � signaturer, r, r- �verifyU s z DsaKey.verifyc C s t �d S rJ r� )r* Z plaintextr� r, r, r- �encryptX s zDsaKey.encryptc C s t �d S rJ r� )r* Z ciphertextr, r, r- �decrypt[ s zDsaKey.decryptc C s t �d S rJ r� �r* r� �Br, r, r- �blind^ s z DsaKey.blindc C s t �d S rJ r� r� r, r, r- �unblinda s zDsaKey.unblindc C s t �d S rJ r� r4 r, r, r- �sized s z DsaKey.size)r NNNN)r^ � __module__� __qualname__�__doc__rN r. rA rG r7 rH rI rL rR rS rV rW rc rg r� Z exportKeyr� r� r� r� r� r� r� r, r, r, r- r N s4 � ~r c s dddd�� | �}|du r&td| ��tjd �| � d � d }| d |� }td �}d|d > }t||�tkr�|d ��t�t���� � �|d @ }||B dB }qh|� � |ks�J �d�d| d > }��fd d �t |d �D �� d d � � D �� t � �fdd �t |�D �� | d|> d @ d|� > �}t|| �} | � � | k�sJJ �| |d } | | d } | � � | k�r�t| |�tk�r��q��|d 7 �q�| d | } t �d�D ]R} �d td� t| ��� }t�t�|�� � �}t|| | �}|dk�r� �q��q�| ||�fS )z+Generate a new set of DSA domain parameters� �� � )� � � NzInvalid modulus length (%d)� r/ � �@ c s* g | ]"}t ��t� | ��� ��� �qS r, )r �newr rh �digest)r2 �j)�offset�seedr, r- r5 � s �z$_generate_domain.<locals>.<listcomp>c S s g | ]}t �|��qS r, �r � from_bytes)r2 rF r, r, r- r5 � r6 c s g | ]}� | d |� > �qS )r/ r, )r2 �i)�V�outlenr, r- r5 � r6 � s ggen)�getr& r � digest_sizer r r r� r� r� rZ r �sum� itertools�countr rh r: )�Lrt �N�nZb_r Z upper_bit�U�W�X�cr �er� r r, )r� r� r� r� r- �_generate_domainh sN � � � r� c C s> |du rt j}|r�tt|�\}}}t|�tk}t|�tk}||d | dkO }||dkp^||kO }|t|||�dkO }|r�td��nt| |�\}}}}|� � }|� � } || kr�td|| f ��|| fdvr�td|| f ��d| k r�|k s�n td��tj | d |d �} | |d d } t|| |�} | |||| d �} t | �S ) a� Generate a new DSA key pair. The algorithm follows Appendix A.1/A.2 and B.1 of `FIPS 186-4`_, respectively for domain generation and key pair generation. Args: bits (integer): Key length, or size (in bits) of the DSA modulus *p*. It must be 1024, 2048 or 3072. randfunc (callable): Random number generation function; it accepts a single integer N and return a string of random data N bytes long. If not specified, :func:`Cryptodome.Random.get_random_bytes` is used. domain (tuple): The DSA domain parameters *p*, *q* and *g* as a list of 3 integers. Size of *p* and *q* must comply to `FIPS 186-4`_. If not specified, the parameters are created anew. Returns: :class:`DsaKey` : a new DSA key object Raises: ValueError : when **bits** is too little, too big, or not a multiple of 64. .. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf Nr/ r z Invalid DSA domain parametersz?Mismatch between size of modulus (%d) and 'bits' parameter (%d)))r� r� )r� r� )r� r� )r� r� z;Lengths of p and q (%d, %d) are not compatibleto FIPS 186-3zIncorrent DSA generatorr� )Z exact_bitsrt r ) r ru r; r r r r: r& r� rZ �randomr )rb rt rW r r r � fmt_error�_r� r� r� r r r+ r, r, r- r � s: � � r Tc C s� t tdtt| ���}t|�}d}|r�t|j�tk}t|j�tk}||jd |j dkO }||j dkpn|j |jkO }|t |j |j|j�dkO }||j dkp�|j |jkO }t |d�r�||j dkp�|j |jkO }|t |j |j |j�|j kO }|r�td��|S )a� Construct a DSA key from a tuple of valid DSA components. Args: tup (tuple): A tuple of long integers, with 4 or 5 items in the following order: 1. Public key (*y*). 2. Sub-group generator (*g*). 3. Modulus, finite field order (*p*). 4. Sub-group order (*q*). 5. Private key (*x*). Optional. consistency_check (boolean): If ``True``, the library will verify that the provided components fulfil the main DSA properties. Raises: ValueError: when the key being imported fails the most basic DSA validity checks. Returns: :class:`DsaKey` : a DSA key object r Fr/ r r zInvalid DSA key components)r( �zipr; r r r r r r r r: r r\ r r& )�tupZconsistency_checkr+ �keyr� r, r, r- r � s r c sL |r t d��t� j| ddd�� � d dkr2t d��� fdd�d D �}t|�S ) Nz-DSA private key already comes with parameters� T)Z nr_elementsZonly_ints_expectedr zNo version foundc s g | ] }� | �qS r, r, r1 ��derr, r- r5 $ r6 z+_import_openssl_private.<locals>.<listcomp>)r� � r/ r� � )r& r �decoder )�encodedr| r r� r, r� r- �_import_openssl_private s r� c C sj t | �\}}}|tkr td��|r.|r.td��t� �|�j}tt� �|pJ|��\}}} || ||f} t| �S )NzNo DSA subjectPublicKeyInfozToo many DSA parameters) r rz r& r r� �value�listr r ) r� r| r ZalgoidZ encoded_keyZ emb_paramsr r r r r� r, r, r- � _import_subjectPublicKeyInfo( s r� c C s t | �}t|d |�S rJ )r r� )r� r| r Zsp_infor, r, r- �_import_x509_cert6 s r� c C sv |r t d��t�| |�}|d tkr,t d��t� �|d �j}tt� �|d ��\}}}t |||�||||f}t |�S )Nz"PKCS#8 already includes parametersr zNo PKCS#8 encoded DSA keyr/ r� ) r& r �unwraprz r r� r� r� r r: r ) r� r| r r> r r r r r� r, r, r- � _import_pkcs8< s r� c C sH t tttf}|D ]*}z|| ||�W S ty8 Y q0 qtd��dS )z?Import a DSA key (public or private half), encoded in DER form.� DSA key format is not supportedN)r� r� r� r� r& )Zkey_datar| r Z decodingsZdecodingr, r, r- �_import_key_derH s � r� c s t | �} |durt |�}| �d�rLt�t| �|�\}}}|r@d}t||d�S | �d�r�t�| �d�d �}g � t |�dkr�t � d|dd� �d }� � |dd| � � |d| d� }qn� d d kr� fd d �d D �}t |�S t | �dk�r t| d �d k�r t| |d�S td��dS )a� Import a DSA key. Args: extern_key (string or byte string): The DSA key to import. The following formats are supported for a DSA **public** key: - X.509 certificate (binary DER or PEM) - X.509 ``subjectPublicKeyInfo`` (binary DER or PEM) - OpenSSH (ASCII one-liner, see `RFC4253`_) The following formats are supported for a DSA **private** key: - `PKCS#8`_ ``PrivateKeyInfo`` or ``EncryptedPrivateKeyInfo`` DER SEQUENCE (binary or PEM) - OpenSSL/OpenSSH custom format (binary or PEM) For details about the PEM encoding, see `RFC1421`_/`RFC1423`_. passphrase (string): In case of an encrypted private key, this is the pass phrase from which the decryption key is derived. Encryption may be applied either at the `PKCS#8`_ or at the PEM level. Returns: :class:`DsaKey` : a DSA key object Raises: ValueError : when the given key cannot be parsed (possibly because the pass phrase is wrong). .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _RFC4253: http://www.ietf.org/rfc/rfc4253.txt .. _PKCS#8: http://www.ietf.org/rfc/rfc5208.txt Ns -----rr � r/ r� rm r rl c s g | ]}t �� | ��qS r, r� ri �r} r, r- r5 � r6 z import_key.<locals>.<listcomp>)r� r� r/ r� �0 r� )r � startswithr r� r r� rv � a2b_base64�splitrp rn �unpackr[ r r r& )Z extern_keyr| r� �markerZenc_flagr~ �lengthr� r, r� r- r Y s* ( r z1.2.840.10040.4.1)NN)T)N).�__all__rv rn r� ZCryptodome.Util.py3compatr r r r r Z Cryptodomer Z Cryptodome.IOr r ZCryptodome.Hashr ZCryptodome.Util.asn1r r r r r ZCryptodome.Math.Numbersr ZCryptodome.Math.Primalityr r r ZCryptodome.PublicKeyr r r �objectr r� r r r� r� r� r� r� r Z importKeyrz r, r, r, r- �<module> s2 5 I 8 G
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка