Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/Cryptodome/PublicKey/__pycache__/ECC.cpython-39.pyc
Ðазад
a b�hE� � @ s$ d dl mZ d dlZd dlZd dlZd dlZd dlmZ d dlm Z m Z m Z m Z m Z d dlmZmZ d dlmZ d dlmZmZmZmZ d dlmZmZmZ d d l m Z m Z m Z m Z m!Z!m"Z" d d l#m$Z$ d d l%m&Z& e d d �Z'edd�Z(i Z)g d�a*dd� Z+e+� [+g d�a,dd� Z-e-� [-g d�a.dd� Z/e/� [/G dd� de0�Z1G dd � d e2�Z3e3e)d j4e)d j5d �Z6e)d j7e6d �Z8e)�9e:�;t*e8�� [6[8b*e3e)d j4e)d j5d �Z<e)d j7e<d �Z=e)�9e:�;t,e=�� [<[=b,e3e)d j4e)d j5d �Z>e)d j7e>d �Z?e)�9e:�;t.e?�� [>[?b.G d!d"� d"e2�Z@d#d$� ZAd%d&� ZBd'd(� ZCd)d*� ZDd@d+d,�ZEd-d.� ZFd/d0� ZGd1d2� ZHd3d4� ZId5d6� ZJdAd7d8�ZKeLd9k�r d dlMZMd:ZNe)d jO�P� ZQd;ZReM�M� ZSeTeR�D ]ZUeQeN ZV�q�eWd<eM�M� eS eR d= d>� eM�M� ZSeTeR�D ]ZUeVeN ZV�q�eWd?eM�M� eS eR d= d>� dS )B� )�print_functionN)� namedtuple)�bord�tobytes�tostr�bchr� is_string)� bytes_to_long� long_to_bytes)�Integer)� DerObjectId�DerOctetString� DerSequence� DerBitString)� _expand_subject_public_key_info� _create_subject_public_key_info� _extract_subject_public_key_info)�load_pycryptodome_raw_lib� VoidPointer� SmartPointer�c_size_t� c_uint8_ptr� c_ulonglong)�get_random_bytes)� getrandbitszCryptodome.PublicKey._ec_wsav typedef void EcContext; typedef void EcPoint; int ec_ws_new_context(EcContext **pec_ctx, const uint8_t *modulus, const uint8_t *b, const uint8_t *order, size_t len, uint64_t seed); void ec_free_context(EcContext *ec_ctx); int ec_ws_new_point(EcPoint **pecp, const uint8_t *x, const uint8_t *y, size_t len, const EcContext *ec_ctx); void ec_free_point(EcPoint *ecp); int ec_ws_get_xy(uint8_t *x, uint8_t *y, size_t len, const EcPoint *ecp); int ec_ws_double(EcPoint *p); int ec_ws_add(EcPoint *ecpa, EcPoint *ecpb); int ec_ws_scalar(EcPoint *ecp, const uint8_t *k, size_t len, uint64_t seed); int ec_ws_clone(EcPoint **pecp2, const EcPoint *ecp); int ec_ws_copy(EcPoint *ecp1, const EcPoint *ecp2); int ec_ws_cmp(const EcPoint *ecp1, const EcPoint *ecp2); int ec_ws_neg(EcPoint *p); int ec_ws_normalize(EcPoint *ecp); int ec_ws_is_pai(EcPoint *ecp); �_Curvez7p b order Gx Gy G modulus_bits oid context desc openssh)�p256� NIST P-256zP-256Z prime256v1Z secp256r1Znistp256c C s� d} d}d}d}d}t | d�}t |d�}t |d�}t� }t�|�� t|�t|�t|�tt|��tt d���} | r|t d| ��t |� � tj �} tt| �t|�t|�t|�t|�d d d | d d � } t�t�t| �� d S ) Nl ������? @�� l K`�O�pq^cv 3,�e< 1�U�]>{|R�*��Zl Q%�x +� Oh�bi+}s����� @�� l �B11e %:f=K`�wr�H�7g�HK8�hkl �Q~o��]�l+f�Ug+< �)Z?�8�O�?q!�O� �@ z#Error %d initializing P-256 context� z1.2.840.10045.3.1.7r zecdsa-sha2-nistp256)r r �_ec_lib�ec_ws_new_context� address_ofr r �lenr r � ImportErrorr �get�ec_free_contextr r �_curves�update�dict�fromkeys� p256_names) �p�b�order�Gx�GyZ p256_modulusZp256_bZ p256_orderZec_p256_context�result�contextr � r4 ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/Cryptodome/PublicKey/ECC.py� init_p256d s@ � � r6 )�p384� NIST P-384zP-384Z prime384v1Z secp384r1Znistp384c C s� d} d}d}d}d}t | d�}t |d�}t |d�}t� }t�|�� t|�t|�t|�tt|��tt d���} | r|t d| ��t |� � tj �} tt| �t|�t|�t|�t|�d d d | d d � } t�t�t| �� d S ) Nl �� ���~�����������������l �*�'�#.T��Ebc +�Z'@=D 1 "(�?7N 2Z�_+��|��S/1fl s)��e`g�w�l X_[n�lv|�������������l � �d�x�R��joyU8T( :�ss�"� n�Z�L�8 k�&�"_�Ul _�!�uR��/�sX0 @qa�N�Q�N�B&J��xS8KJ�E�Y� � K%�l �0 r z#Error %d initializing P-384 contexti� z 1.3.132.0.34r8 zecdsa-sha2-nistp384)r r r! r" r# r r r$ r r r% r r& r' r r r( r) r* r+ � p384_names) r- r. r/ r0 r1 Z p384_modulusZp384_bZ p384_orderZec_p384_contextr2 r3 r7 r4 r4 r5 � init_p384� s@ � � r; )�p521� NIST P-521zP-521Z prime521v1Z secp521r1Znistp521c C s� d} d}d}d}d}t | d�}t |d�}t |d�}t� }t�|�� t|�t|�t|�tt|��tt d���} | r|t d| ��t |� � tj �} tt| �t|�t|�t|�t|�d d d | d d � } t�t�t| �� d S ) Nl# �����������������������������������l# ?�VQ(z O�%b�95~c�te1oR {� V��;�LH w>�l�-rZE]�"Sr�&Ga9}*Fl# dp"z\}[�z�3"n�Z;PK�# `�7�r�o�C�Q������������������l# f=��x�K�)H-apY$3^Q� n�%k�{;/K!u{4-{�?$�O� �d8�V 1�l�3s:� l# Pf�?�Q�E$XN�!8 5aZ��U ��WL9�YL� �h�z �f�$Du13otc!�%� p MxjRr`�B r z#Error %d initializing P-521 contexti z 1.3.132.0.35r= zecdsa-sha2-nistp521)r r r! r" r# r r r$ r r r% r r& r' r r r( r) r* r+ � p521_names) r- r. r/ r0 r1 Z p521_modulusZp521_bZ p521_orderZec_p521_contextr2 r3 r< r4 r4 r5 � init_p521� s@ � � r@ c @ s e Zd ZdS )�UnsupportedEccFeatureN)�__name__� __module__� __qualname__r4 r4 r4 r5 rA � s rA c @ s� e Zd ZdZd(dd�Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z e dd� �Z e dd� �Z e dd� �Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'S ))�EccPointa= A class to abstract a point over an Elliptic Curve. The class support special methods for: * Adding two points: ``R = S + T`` * In-place addition: ``S += T`` * Negating a point: ``R = -T`` * Comparing two points: ``if S == T: ...`` * Multiplying a point by a scalar: ``R = S*k`` * In-place multiplication by a scalar: ``T *= k`` :ivar x: The affine X-coordinate of the ECC point :vartype x: integer :ivar y: The affine Y-coordinate of the ECC point :vartype y: integer :ivar xy: The tuple with X- and Y- coordinates r c C s� zt | | _W n" ty0 tdt|� ��Y n0 || _| �� }| jj}t||�}t||�}t |�|kstt |�|kr|td��t � | _ t � | j �� t|�t|�t|�|�� �}|r�|dkr�td��td| ��t| j �� t j�| _ d S )NzUnknown curve name %szIncorrect coordinate length� z)The EC point does not belong to the curvez(Error %d while instantiating an EC point)r( �_curve�KeyError� ValueError�str� _curve_name� size_in_bytesr3 r r$ r �_pointr! Zec_ws_new_pointr# r r r& r � ec_free_point) �self�x�y�curve� modulus_bytesr3 �xb�ybr2 r4 r4 r5 �__init__ s2 � �zEccPoint.__init__c C sH t � | _t�| j�� |j�� �}|r0td| ��t| j�� tj�| _| S )Nz"Error %d while cloning an EC point) r rM r! Z ec_ws_cloner# r& rI r rN �rO �pointr2 r4 r4 r5 �set# s � �z EccPoint.setc C s dt �| j�� |j�� �kS �Nr )r! Z ec_ws_cmprM r& )rO rX r4 r4 r5 �__eq__. s zEccPoint.__eq__c C s, | � � }t�|j�� �}|r(td| ��|S )Nz$Error %d while inverting an EC point)�copyr! Z ec_ws_negrM r& rI )rO �npr2 r4 r4 r5 �__neg__1 s zEccPoint.__neg__c C s | j \}}t||| j�}|S )z Return a copy of this point.)�xyrE rK )rO rP rQ r] r4 r4 r5 r\ 8 s z EccPoint.copyc C s | j dkS )z*``True`` if this is the point-at-infinity.)r r �r_ �rO r4 r4 r5 �is_point_at_infinity> s z EccPoint.is_point_at_infinityc C s t dd| j�S )z<Return the point-at-infinity for the curve this point is on.r )rE rK ra r4 r4 r5 �point_at_infinityB s zEccPoint.point_at_infinityc C s | j d S rZ r` ra r4 r4 r5 rP F s z EccPoint.xc C s | j d S )N� r` ra r4 r4 r5 rQ J s z EccPoint.yc C sb | � � }t|�}t|�}t�t|�t|�t|�| j�� �}|rJtd| ��t t |��t t |��fS )Nz#Error %d while encoding an EC point) rL � bytearrayr! Z ec_ws_get_xyr r rM r& rI r r )rO rS rT rU r2 r4 r4 r5 r_ N s � z EccPoint.xyc C s | � � d d S )z"Size of each coordinate, in bytes.� � )� size_in_bitsra r4 r4 r5 rL \ s zEccPoint.size_in_bytesc C s | j jS )z!Size of each coordinate, in bits.)rG � modulus_bitsra r4 r4 r5 rh ` s zEccPoint.size_in_bitsc C s$ t �| j�� �}|r td| ��| S )z�Double this point (in-place operation). :Return: :class:`EccPoint` : this same object (to enable chaining) z#Error %d while doubling an EC point)r! Z ec_ws_doublerM r& rI )rO r2 r4 r4 r5 �doubled s zEccPoint.doublec C s< t �| j�� |j�� �}|r8|dkr,td��td| ��| S )z Add a second point to this one� z#EC points are not on the same curvez#Error %d while adding two EC points)r! Z ec_ws_addrM r& rI rW r4 r4 r5 �__iadd__p s zEccPoint.__iadd__c C s | � � }||7 }|S )z8Return a new point, the addition of this one and another�r\ )rO rX r] r4 r4 r5 �__add__z s zEccPoint.__add__c C sV |dk rt d��t|�}t�| j�� t|�tt|��t t d���}|rRt d| ��| S )z Multiply this point by a scalarr z?Scalar multiplication is only defined for non-negative integersr z%Error %d during scalar multiplication) rI r r! Z ec_ws_scalarrM r& r r r$ r r )rO �scalar�sbr2 r4 r4 r5 �__imul__� s � zEccPoint.__imul__c C s | � � }||9 }|S )z2Return a new point, the scalar product of this onerm )rO ro r] r4 r4 r5 �__mul__� s zEccPoint.__mul__c C s | � |�S �N)rr )rO Z left_handr4 r4 r5 �__rmul__� s zEccPoint.__rmul__N)r )rB rC rD �__doc__rV rY r[ r^ r\ rb rc �propertyrP rQ r_ rL rh rj rl rn rq rr rt r4 r4 r4 r5 rE � s, rE r )�Gr7 r< c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z e dd� �Z e dd� �Z dd� Z dd� Zd(dd�Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'S ))�EccKeya� Class defining an ECC key. Do not instantiate directly. Use :func:`generate`, :func:`construct` or :func:`import_key` instead. :ivar curve: The name of the ECC as defined in :numref:`curve_names`. :vartype curve: string :ivar pointQ: an ECC point representating the public component :vartype pointQ: :class:`EccPoint` :ivar d: A scalar representating the private component :vartype d: integer c K s� t |�}|�dd�}|�dd�| _|�dd�| _|rDtdt|� ��|tvrVtd|��t| | _| jdu r~| jdu r�td��n0t | j�| _d| j kr�| jj k s�n td ��| jj | _ dS ) a� Create a new ECC key Keywords: curve : string It must be *"p256"*, *"P-256"*, *"prime256v1"* or *"secp256r1"*. d : integer Only for a private key. It must be in the range ``[1..order-1]``. point : EccPoint Mandatory for a public key. If provided for a private key, the implementation will NOT check whether it matches ``d``. rR N�drX �Unknown parameters: zUnsupported curve (%s)zBEither private or public ECC component must be specified, not bothrd z Invalid ECC private component) r* �pop�_drM � TypeErrorrJ r( rI rG r r/ �descrR )rO �kwargsZkwargs_� curve_namer4 r4 r5 rV � s zEccKey.__init__c C s |� � | � � krdS |j| jkS )NF)� has_private�pointQ)rO �otherr4 r4 r5 r[ � s z EccKey.__eq__c C s< | � � rdt| j� }nd}| jj\}}d| jj|||f S )Nz, d=%d� z,EccKey(curve='%s', point_x=%d, point_y=%d%s))r� �intr| r� r_ rG r~ )rO �extrarP rQ r4 r4 r5 �__repr__� s zEccKey.__repr__c C s | j duS )zJ``True`` if this key can be used for making signatures or decrypting data.N)r| ra r4 r4 r5 r� � s zEccKey.has_privatec C s~ d| k r| j jk s n J �| j j}tjd|d�}| j| }|| �|�}| j j| j| }||| || | }||fS )Nr rd )� min_inclusive� max_exclusive)rG r/ r � random_ranger| �inverserw rP ) rO �z�kr/ ZblindZblind_dZ inv_blind_k�r�sr4 r4 r5 �_sign� s � z EccKey._signc C sR | j j}|d �|�}| j j|| | }| j||d | }|| j|d kS )Nrd r )rG r/ r� rw r� rP )rO r� �rsr/ ZsinvZpoint1Zpoint2r4 r4 r5 �_verify� s zEccKey._verifyc C s | � � std��| jS )Nz This is not a private ECC key)r� rI r| ra r4 r4 r5 ry s zEccKey.dc C s | j d u r| jj| j | _ | j S rs )rM rG rw r| ra r4 r4 r5 r� s z EccKey.pointQc C s t | jj| jd�S )z^A matching ECC public key. Returns: a new :class:`EccKey` object )rR rX )rx rG r~ r� ra r4 r4 r5 � public_key s zEccKey.public_keyc C sn | j �� }|r6d| j j�� }t|�| j j�|� }n d| j j�|� | j j�|� }d}t||t| j j ��S )N� � �1.2.840.10045.2.1) r� rL rQ �is_oddr rP �to_bytesr r rG �oid)rO �compressrS � first_byter� �unrestricted_oidr4 r4 r5 � _export_subjectPublicKeyInfo s � � � �z#EccKey._export_subjectPublicKeyInfoTc C sx | � � s J �| j�� }d| jj�|� | jj�|� }dt| j�|��t| j j dd�t |dd�g}|sl|d= t |�� � S )Nr� rd r ��explicitr� )r� r� rL rP r� rQ r ry r rG r� r r �encode)rO �include_ec_paramsrS r� �seqr4 r4 r5 �_export_private_der3 s � � �zEccKey._export_private_derc K s` ddl m} |�dd �d ur,d|vr,td��d}| jdd�}|j||fd t| jj�i|��}|S ) Nr ��PKCS8� passphrase� protection�5At least the 'protection' parameter should be presentr� F)r� Z key_params) � Cryptodome.IOr� r& rI r� �wrapr rG r� )rO r r� r� � private_keyr2 r4 r4 r5 � _export_pkcs8N s � ��zEccKey._export_pkcs8c C s" ddl m} | �|�}|�|d�S )Nr ��PEMz PUBLIC KEY)r� r� r� r� )rO r� r� � encoded_derr4 r4 r5 �_export_public_pem\ s zEccKey._export_public_pemc K s* ddl m} | �� }|j|d|fi |��S )Nr r� zEC PRIVATE KEY)r� r� r� r� �rO r� r r� r� r4 r4 r5 �_export_private_pemb s zEccKey._export_private_pemc C s ddl m} | �� }|�|d�S )Nr r� z PRIVATE KEY)r� r� r� r� )rO r� r� r4 r4 r5 �(_export_private_clear_pkcs8_in_clear_pemh s z/EccKey._export_private_clear_pkcs8_in_clear_pemc K sD ddl m} |sJ �d|vr$td��| jf d|i|��}|�|d�S )Nr r� r� r� r� zENCRYPTED PRIVATE KEY)r� r� rI r� r� r� r4 r4 r5 �,_export_private_encrypted_pkcs8_in_clear_pemn s z3EccKey._export_private_encrypted_pkcs8_in_clear_pemc C s� | � � rtd��| jj}| j�� }|rNd| jj�� }t|�| jj � |� }n d| jj � |� | jj� |� }|� d�d }t |�t |�|f}d� dd� |D ��}|d tt�|�� S ) Nz"Cannot export OpenSSH private keysr� r� �-� c S s g | ]}t �d t|��| �qS )�>I)�struct�packr$ )�.0rP r4 r4 r5 � <listcomp>� r� z*EccKey._export_openssh.<locals>.<listcomp>� )r� rI rG �opensshr� rL rQ r� r rP r� �splitr �joinr �binascii� b2a_base64) rO r� r~ rS r� r� �middle�compsZblobr4 r4 r5 �_export_opensshw s$ � � �zEccKey._export_opensshc K s: |� � }|�d�}|dvr&td| ��|�dd�}| �� r�|�dd�}t|�rbt|�}|sbtd��|�d d �}|d kr�|r�|r�| j|fi |��S | �� S q�| j|fi |��S nB|d kr�|r�|s�td ��|r�| j f d|i|��S | � � S ntd��nD|�rtd| ��|d k�r| � |�S |d k�r,| � |�S | � |�S dS )a� Export this ECC key. Args: format (string): The format to use for encoding the key: - ``'DER'``. The key will be encoded in ASN.1 DER format (binary). For a public key, the ASN.1 ``subjectPublicKeyInfo`` structure defined in `RFC5480`_ will be used. For a private key, the ASN.1 ``ECPrivateKey`` structure defined in `RFC5915`_ is used instead (possibly within a PKCS#8 envelope, see the ``use_pkcs8`` flag below). - ``'PEM'``. The key will be encoded in a PEM_ envelope (ASCII). - ``'OpenSSH'``. The key will be encoded in the OpenSSH_ format (ASCII, public keys only). passphrase (byte string or string): The passphrase to use for protecting the private key. use_pkcs8 (boolean): Only relevant for private keys. If ``True`` (default and recommended), the `PKCS#8`_ representation will be used. If ``False``, the much weaker `PEM encryption`_ mechanism will be used. protection (string): When a private key is exported with password-protection and PKCS#8 (both ``DER`` and ``PEM`` formats), this parameter MUST be present and be a valid algorithm supported by :mod:`Cryptodome.IO.PKCS8`. It is recommended to use ``PBKDF2WithHMAC-SHA1AndAES128-CBC``. compress (boolean): If ``True``, a more compact representation of the public key with the X-coordinate only is used. If ``False`` (default), the full public key will be exported. .. warning:: If you don't provide a passphrase, the private key will be exported in the clear! .. note:: When exporting a private key with password-protection and `PKCS#8`_ (both ``DER`` and ``PEM`` formats), any extra parameters to ``export_key()`` will be passed to :mod:`Cryptodome.IO.PKCS8`. .. _PEM: http://www.ietf.org/rfc/rfc1421.txt .. _`PEM encryption`: http://www.ietf.org/rfc/rfc1423.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt .. _OpenSSH: http://www.openssh.com/txt/rfc5656.txt .. _RFC5480: https://tools.ietf.org/html/rfc5480 .. _RFC5915: http://www.ietf.org/rfc/rfc5915.txt Returns: A multi-line string (for PEM and OpenSSH) or bytes (for DER) with the encoded key. �format)r� �DERZOpenSSHzUnknown format '%s'r� Fr� NzEmpty passphrase� use_pkcs8Tr� r� z8Private keys can only be encrpyted with DER using PKCS#8z1Private keys cannot be exported in OpenSSH formatzUnexpected parameters: '%s')r\ r{ rI r� r r r� r� r� r� r� r� r� r� )rO r �argsZ ext_formatr� r� r� r4 r4 r5 � export_key� s@ < zEccKey.export_keyN)T)rB rC rD ru rV r[ r� r� r� r� rv ry r� r� r� r� r� r� r� r� r� r� r� r4 r4 r4 r5 rx � s* " rx c K sP | � d�}t| }| � dt�}| r2tdt| � ��tjd|j|d�}t||d�S )a: Generate a new private key on the given curve. Args: curve (string): Mandatory. It must be a curve name defined in :numref:`curve_names`. randfunc (callable): Optional. The RNG to read randomness from. If ``None``, :func:`Cryptodome.Random.get_random_bytes` is used. rR �randfuncrz rd )r� r� r� )rR ry ) r{ r( r r} rJ r r� r/ rx )r r� rR r� ry r4 r4 r5 �generate� s �r� c K s� | d }t | }| �dd�}| �dd�}d| v r8td��d||fvrTt|||�| d< | �dd�}|dur�d| v r�|j| }|j||fkr�td��tf i | ��S ) a( Build a new ECC key (private or public) starting from some base components. Args: curve (string): Mandatory. It must be a curve name defined in :numref:`curve_names`. d (integer): Only for a private key. It must be in the range ``[1..order-1]``. point_x (integer): Mandatory for a public key. X coordinate (affine) of the ECC point. point_y (integer): Mandatory for a public key. Y coordinate (affine) of the ECC point. Returns: :class:`EccKey` : a new ECC key object rR �point_xN�point_yrX zUnknown keyword: pointry z(Private and public ECC keys do not match) r( r{ r} rE r& rw r_ rI rx )r r� rR r� r� ry Zpub_keyr4 r4 r5 � construct s r� c C s: t �� D ]\}}|j| kr q,qtd| ��|j�� }t|d �}|dkr�t|�dd| krftd��t � |d|d � �}t � ||d d� �}n�|dv �r$t|�d| kr�td��t � |dd� �}|d |d |j � |j�}|dk�r|� � �r|j| }|d k�r,|�� �r,|j| }ntd ��t|||d �S ) z�Convert an encoded EC point into an EccKey object curve_name: string with the OID of the curve ec_point: byte string with the EC point (not DER encoded) � Unsupported ECC curve (OID: %s)r � rd r� zIncorrect EC point lengthN)r� � r� zIncorrect EC point encoding)rR r� r� )r( �itemsr� rA r- rL r r$ rI r � from_bytesr. �sqrtr� Zis_evenr� )� curve_oid�ec_pointr� rR rS Z point_typerP rQ r4 r4 r5 �_import_public_der9 s, r� c G sX t | �\}}}d}d}d}||||fvr4td| ��|s@td��t� �|�j}t||�S )z4Convert a subjectPublicKeyInfo into an EccKey objectr� � 1.3.132.1.12� 1.3.132.1.13�!Unsupported ECC purpose (OID: %s)zMissing ECC parameters)r rA rI r �decode�valuer� ) �encodedr r� r� �paramsr� �ecdh_oid� ecmqv_oidr� r4 r4 r5 � _import_subjectPublicKeyInfoh s r� c C s< t � j| dd�}|d dkr$td��z6tdd��|d �j}|d urT||krTtd��|}W n tyl Y n0 |d u r~td ��t�� D ]\}}|j|kr� q�q�td | ��t � �|d �j }|j � � }t |�|kr�td ��t�|�} t |�d k�r$tdd��|d �j} t|| �} | jj} | jj} nd } } t|| | | d�S )N)r� r� )Z nr_elementsr rd z!Incorrect ECC private key versionr� r� zCurve mismatchzNo curve foundr� zPrivate key is too smallr� r� )rR ry r� r� )r r� rI r r� r( r� r� rA r �payloadr- rL r$ r r� r r� r� rP rQ r� )r� r� r� r� � parametersr� rR Z scalar_bytesrS ry Zpublic_key_encr� r� r� r4 r4 r5 �_import_private_der� s8 r� c C s^ ddl m} |�| |�\}}}d}d}d}||||fvrDtd| ��t� �|�j} t||| �S )Nr r� r� r� r� r� )r� r� �unwraprA r r� r� r� ) r� r� r� Zalgo_oidr� r� r� r� r� r� r4 r4 r5 � _import_pkcs8� s r� c G s t | �}t|�S rs )r r� )r� r Zsp_infor4 r4 r5 �_import_x509_cert� s r� c C s@ z t | |�W S ty4 } z|�W Y d }~n d }~0 tttfyJ Y n0 z t| |�W S ty� } z|�W Y d }~n d }~0 tttfy� Y n0 z t| |�W S ty� } z|�W Y d }~n d }~0 tttfy� Y n0 z t| |�W S t�y } z|�W Y d }~n"d }~0 tttf�y2 Y n0 td��d S )NzNot an ECC DER key)r� rA rI r} � IndexErrorr� r� r� )r� r� �errr4 r4 r5 � _import_der� s2 r� c C s� t �| �d�d �}g }t|�dkrdt�d|d d� �d }|�|dd| � � |d| d � }qt�� D ],\}}t |j �d�d �}|d |krl q�qlt d��t |j |d �S ) N� rd r� r� r r� r� zUnsupported ECC curve)r� � a2b_base64r� r$ r� �unpack�appendr( r� r r� rI r� r� )r� Z keystringZkeypartsZlkr� rR r� r4 r4 r5 �_import_openssh_public s r� c C s ddl m}m}m}m} || |�\}}||�\}}|tvrFtd| ��t| } | jd d } ||�\} }t| d �dkr�t d��t | �d | d kr�t d ��t � | dd| � �} t � | d| d � �} t | | |d �}||�\}}t � |�}||�\}}||� t|||d �S ) Nrd )� import_openssh_private_generic� read_bytes� read_string� check_paddingzUnsupported ECC curve %srf rg r r� z/Only uncompressed OpenSSH EC keys are supportedr� zIncorrect public key length)rR )rR ry rX )Z_opensshr� r� r� r� r( rA ri r rI r$ r r� rE rx )�data�passwordr� r� r� r� Zssh_nameZ decrypted�namerR rS r� r� r� rX r� ry �_�paddedr4 r4 r5 �_import_openssh_private_ecc s( r� c C sZ ddl m} t| �} |dur$t|�}| �d�rVt| �}|�||�\}}}t||�}|S | �d��rt| �}tjdd� dkr�d}d } t j |d | d |t j d �}|�||�\} }}|r�d}zt | |�}W nB t y� } z| �W Y d} ~ n$d} ~ 0 t�y td ��Y n0 |S | �d��r$t| �S t| �dk�rNt| d �dk�rNt | |�S td��dS )a� Import an ECC key (public or private). Args: encoded (bytes or multi-line string): The ECC key to import. An ECC **public** key can be: - An X.509 certificate, binary (DER) or ASCII (PEM) - An X.509 ``subjectPublicKeyInfo``, binary (DER) or ASCII (PEM) - An OpenSSH line (e.g. the content of ``~/.ssh/id_ecdsa``, ASCII) An ECC **private** key can be: - In binary format (DER, see section 3 of `RFC5915`_ or `PKCS#8`_) - In ASCII format (PEM or `OpenSSH 6.5+`_) Private keys can be in the clear or password-protected. For details about the PEM encoding, see `RFC1421`_/`RFC1423`_. passphrase (byte string): The passphrase to use for decrypting a private key. Encryption may be applied protected at the PEM level or at the PKCS#8 level. This parameter is ignored if the key in input is not encrypted. Returns: :class:`EccKey` : a new ECC key object Raises: ValueError: when the given key cannot be parsed (possibly because the pass phrase is wrong). .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _RFC5915: http://www.ietf.org/rfc/rfc5915.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt .. _`OpenSSH 6.5+`: https://flak.tedunangst.com/post/new-openssh-key-format-and-bcrypt-pbkdf r r� Ns -----BEGIN OPENSSH PRIVATE KEYs -----r� )r� � z -----BEGIN EC PARAMETERS-----z-----END EC PARAMETERS-----z.*?r� )�flagsz(Invalid DER encoding inside the PEM files ecdsa-sha2-r9 z ECC key format is not supported)r� r� r � startswithr r� r� �sys� version_info�re�sub�DOTALLr� rA rI r� r$ r ) r� r� r� Z text_encodedZopenssh_encoded�markerZenc_flagr2 Zecparams_startZ ecparams_endZ der_encodedZuefr4 r4 r5 � import_key6 sB ) � r �__main__l ��_,)�N�$�c� hKf-5lk<X�k�# E i� z (P-256 G)i� �msz(P-256 arbitrary point))N)N)X� __future__r r� r� r� r� � collectionsr ZCryptodome.Util.py3compatr r r r r ZCryptodome.Util.numberr r ZCryptodome.Math.Numbersr ZCryptodome.Util.asn1r r r r ZCryptodome.PublicKeyr r r ZCryptodome.Util._raw_apir r r r r r ZCryptodome.Randomr ZCryptodome.Random.randomr r! r r( r, r6 r: r; r? r@ rI rA �objectrE r0 r1 Zp256_G�_replacer r) r* r+ Zp384_Gr7 Zp521_Gr< rx r� r� r� r� r� r� r� r� r� r� r rB �timery rw r\ rX �count�start�rangerP ZpointX�printr4 r4 r4 r5 �<module> s� " &&& . J,/' 2!! Y
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка