Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/twisted/conch/ssh/__pycache__/keys.cpython-39.pyc
Ðазад
a k�h� � @ s� U d Z ddlZddlZddlZddlZddlZddlmZmZm Z ddl m Z m Z ddl mZmZ ddlZddlmZ ddlmZ ddlmZ dd lmZmZ dd lmZm Z m Z m Z m Z dd l m!Z!m"Z"m#Z# dd l$m%Z%m&Z& dd l'm(Z)m*Z+ ddl,m-Z- ddl.m/Z/ ddl0m1Z1m2Z2 ddl3m4Z4 ddl5m6Z6 ddl7m8Z8m9Z9 ddl:m;Z;m<Z< ddl=m>Z> zddl?m@Z@mAZA W n$ eB�y� ddl?mCZ@mDZA Y n0 e �E� e �F� e �G� d�ZHdddd �ZIeee jJ eKd < eee jL eKd < e� �M� �r�e jJZJe jLZLn2zdd lNmLZLmJZJ W n eB�y& dZJdZLY n0 G d d!� d!eO�ZPG d"d#� d#eO�ZQG d$d%� d%eO�ZRG d&d'� d'eO�ZSG d(d)� d)e<�ZTG d*d+� d+eO�ZUd,d-� ZVG d.d/� d/�ZWd3d1d2�ZXdS )4z0 Handling of RSA, DSA, ECDSA, and Ed25519 keys. � N)� b64encode� decodebytes� encodebytes)�md5�sha256)�Optional�Type)�utils)�InvalidSignature)�default_backend)�hashes� serialization)�dsa�ec�ed25519�padding�rsa)�Cipher� algorithms�modes)�load_pem_private_key�load_ssh_public_key)�decoder�encoder)� PyAsn1Error)�univ)�common�sexpy)� int_to_bytes)� randbytes)� iterbytes� nativeString)� NamedConstant�Names)�_mutuallyExclusiveArguments)�decode_dss_signature�encode_dss_signature)�decode_rfc6979_signature�encode_rfc6979_signature)s ecdsa-sha2-nistp256s ecdsa-sha2-nistp384s ecdsa-sha2-nistp521s nistp256s nistp384s nistp521)s secp256r1s secp384r1s secp521r1�Ed25519PublicKey�Ed25519PrivateKey)r* r) c @ s e Zd ZdZdS )� BadKeyErrorzj Raised when a key isn't what we expected from it. XXX: we really need to check for bad keys N��__name__� __module__� __qualname__�__doc__� r1 r1 ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/twisted/conch/ssh/keys.pyr+ U s r+ c @ s e Zd ZdZdS )�BadSignatureAlgorithmErrorzi Raised when a public key signature algorithm name isn't defined for this public key format. Nr, r1 r1 r1 r2 r3 ] s r3 c @ s e Zd ZdZdS )�EncryptedKeyErrorzb Raised when an encrypted key is presented to fromString/fromFile without a password. Nr, r1 r1 r1 r2 r4 d s r4 c @ s e Zd ZdZdS )�BadFingerPrintFormatzS Raises when unsupported fingerprint formats are presented to fingerprint. Nr, r1 r1 r1 r2 r5 k s r5 c @ s e Zd ZdZe� Ze� ZdS )�FingerprintFormatsa� Constants representing the supported formats of key fingerprints. @cvar MD5_HEX: Named constant representing fingerprint format generated using md5[RFC1321] algorithm in hexadecimal encoding. @type MD5_HEX: L{twisted.python.constants.NamedConstant} @cvar SHA256_BASE64: Named constant representing fingerprint format generated using sha256[RFC4634] algorithm in base64 encoding @type SHA256_BASE64: L{twisted.python.constants.NamedConstant} N)r- r. r/ r0 r" �MD5_HEX� SHA256_BASE64r1 r1 r1 r2 r6 q s r6 c @ s e Zd ZdZdS )� PassphraseNormalizationErrorz� Raised when a passphrase contains Unicode characters that cannot be normalized using the available Unicode character database. Nr, r1 r1 r1 r2 r9 � s r9 c C s< t | t�r4tdd� | D ��r"t� �t�d| ��d�S | S dS )a� Normalize a passphrase, which may be Unicode. If the passphrase is Unicode, this follows the requirements of U{NIST 800-63B, section 5.1.1.2<https://pages.nist.gov/800-63-3/sp800-63b.html#memsecretver>} for Unicode characters in memorized secrets: it applies the Normalization Process for Stabilized Strings using NFKC normalization. The passphrase is then encoded using UTF-8. @type passphrase: L{bytes} or L{unicode} or L{None} @param passphrase: The passphrase to normalize. @return: The normalized passphrase, if any. @rtype: L{bytes} or L{None} @raises PassphraseNormalizationError: if the passphrase is Unicode and cannot be normalized using the available Unicode character database. c s s | ]}t �|�d kV qdS )�CnN)� unicodedata�category)�.0�cr1 r1 r2 � <genexpr>� � z'_normalizePassphrase.<locals>.<genexpr>�NFKCzUTF-8N)� isinstance�str�anyr9 r; � normalize�encode�� passphraser1 r1 r2 �_normalizePassphrase� s rI c @ s� e Zd ZdZedXdd��ZedYdd��Zedd� �Zed d � �Zed d � �Z ed d� �Z edd� �Z edd� �Z edd� �Z edd� �Zedd� �Zedd� �ZedZdd ��Zed[d d ��Zed\d d ��Zed]d!d"��Zed^d#d$��Zd%d&� Zeed'�d(d)�Zed*�d+d,�Zd-d.� Z d/d0� Z e j fd1d2�Z d3d4� Z!d5d6� Z"d7d8� Z#d9d:� Z$d;d<� Z%d=d>� Z&d?d@� Z'dAdB� Z(e)dCdDgdCdEgg�d_dFdG��Z*d`dHdI�Z+dadJdK�Z,dbdLdM�Z-dcdNdO�Z.dPdQ� Z/dRdS� Z0dddTdU�Z1dVdW� Z2dS )e�Keyau An object representing a key. A key can be either a public or private key. A public key can verify a signature; a private key can create or verify a signature. To generate a string that can be stored on disk, use the toString method. If you have a private key, but want the string representation of the public key, use Key.public().toString(). Nc C s@ t |d��"}| �|�� ||�W d � S 1 s20 Y dS )a� Load a key from a file. @param filename: The path to load key data from. @type type: L{str} or L{None} @param type: A string describing the format the key data is in, or L{None} to attempt detection of the type. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if there is no encryption. @rtype: L{Key} @return: The loaded key. �rbN)�open� fromString�read)�cls�filename�typerH �fr1 r1 r2 �fromFile� s z Key.fromFilec C s� t |t�r|�d�}t|�}|du r.| �|�}|du rDtd|����t| d|�� � �d�}|du rptd|� ���|jj dkr�|r�td��||�S |||�S dS )a Return a Key object corresponding to the string data. type is optionally the type of string, matching a _fromString_* method. Otherwise, the _guessStringType() classmethod will be used to guess a type. If the key is encrypted, passphrase is used as the decryption key. @type data: L{bytes} @param data: The key data. @type type: L{str} or L{None} @param type: A string describing the format the key data is in, or L{None} to attempt detection of the type. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if there is no encryption. @rtype: L{Key} @return: The loaded key. �utf-8Nzcannot guess the type of Z _fromString_zno _fromString method for � zkey not encrypted) rB rC rF rI �_guessStringTyper+ �getattr�upper�__code__� co_argcount)rO �datarQ rH �methodr1 r1 r2 rM � s zKey.fromStringc C s� t �|�\}}|dkr@t �|d�\}}}| t�||��t� ��S |dkr�t �|d�\}}}} }| tj| tj |||d�d��t� ��S |t v r�| t j � t | t �|d�d ��S |dkr�t �|�\} }| �| �S td |� ���d S ) a� Return a public key object corresponding to this public key blob. The format of a RSA public key blob is:: string 'ssh-rsa' integer e integer n The format of a DSA public key blob is:: string 'ssh-dss' integer p integer q integer g integer y The format of ECDSA-SHA2-* public key blob is:: string 'ecdsa-sha2-[identifier]' integer x integer y identifier is the standard NIST curve name. The format of an Ed25519 public key blob is:: string 'ssh-ed25519' string a @type blob: L{bytes} @param blob: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type (the first string) is unknown. � ssh-rsarU � ssh-dss� ��p�q�g��y�parameter_numbers� � ssh-ed25519�unknown blob type: N)r �getNS�getMPr �RSAPublicNumbers� public_keyr r �DSAPublicNumbers�DSAParameterNumbers� _curveTabler �EllipticCurvePublicKey�from_encoded_point�_fromEd25519Componentsr+ ) rO �blob�keyType�rest�e�nra rb rc re �ar1 r1 r2 �_fromString_BLOB� s. "����� zKey._fromString_BLOBc C s$ t �|�\}}|dkrDt �|d�\}}}}}} }| j||||| d�S |dkrxt �|d�\}} } } } }| j| | || | d�S |tv r�t| } t �|d�\}} }|t| j�d� kr�t d ||f ��t �|�\}}| j | ||d �S |d k�rt �|d�\}}}|d d � }| j ||d�S t d|� ���d S )a6 Return a private key object corresponding to this private key blob. The blob formats are as follows: RSA keys:: string 'ssh-rsa' integer n integer e integer d integer u integer p integer q DSA keys:: string 'ssh-dss' integer p integer q integer g integer y integer x EC keys:: string 'ecdsa-sha2-[identifier]' string identifier string q integer privateValue identifier is the standard NIST curve name. Ed25519 keys:: string 'ssh-ed25519' string a string k || a @type blob: L{bytes} @param blob: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * the key type (the first string) is unknown * the curve name of an ECDSA key does not match the key type r] � �rx rw �dra rb r^ � �re rc ra rb �xrU �asciiz.ECDSA curve name %r does not match key type %r)� encodedPoint�curve� privateValuerh N� )�kri ) r rj rk �_fromRSAComponents�_fromDSAComponentsrp � _secToNist�namerF r+ �_fromECEncodedPointrs )rO rt ru rv rx rw r} �ura rb rc re r� r� Z curveNamer� ry �combinedr� r1 r1 r2 �_fromString_PRIVATE_BLOB' s2 .��� z Key._fromString_PRIVATE_BLOBc C s4 |� d�r| t|t� ��S t|�� d �}| �|�S )a� Return a public key object corresponding to this OpenSSH public key string. The format of an OpenSSH public key string is:: <key type> <base64-encoded public key blob> @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the blob type is unknown. s ecdsa-sha2rg )� startswithr r r �splitrz )rO r[ rt r1 r1 r2 �_fromString_PUBLIC_OPENSSHr s z Key._fromString_PUBLIC_OPENSSHc C s |� � �� }td�|dd� ��}|�d�s4td��|td�d� }t�|d�\}}}}t � d|dd � �d } | dkr�td ��t�|d d� d �\} } } |d k�r�|s�t d��|dv r�t j } d} t|dd� �d }| }ntd|����|dk�r4t�|�\}}t � d|dd � �d }tj|||| |dd�}ntd|����t| �| d k�r\td��t| |d|� �t�|||| � �t� d��� }|�| �|�� }n |d k�r�td|f ��| }t � d|dd � �d }t � d|d d� �d }||k�rtd||f ��| �|dd� �S ) a* Return a private key object corresponding to this OpenSSH private key string, in the "openssh-key-v1" format introduced in OpenSSH 6.5. The format of an openssh-key-v1 private key string is:: -----BEGIN OPENSSH PRIVATE KEY----- <base64-encoded SSH protocol string> -----END OPENSSH PRIVATE KEY----- The SSH protocol string is as described in U{PROTOCOL.key<https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/PROTOCOL.key>}. @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the SSH protocol encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key r@ rg ���� openssh-key-v1 z"unknown OpenSSH private key formatN� �!Lr_ r zDonly OpenSSH private key files containing a single key are supportedrU � none�0Passphrase must be provided for an encrypted key)s aes128-ctrs aes192-ctr� aes256-ctr� r{ � �unknown encryption type � bcryptT)Zignore_few_roundszunknown KDF type z bad padding��backendz*private key specifies KDF %r but no cipherz#check values do not match: %d != %d)�strip� splitlinesr �joinr� r+ �lenr rj �struct�unpackr4 r �AES�int�bcrypt�kdfr r �CTRr � decryptor�update�finalizer� )rO r[ rH �linesZkeyList�cipherr� � kdfOptionsrv rx �_�encPrivKeyList�algorithmClass� blockSize�keySize�ivSize�salt�rounds�decKeyr� � privKeyListZcheck1Zcheck2r1 r1 r2 �_fromPrivateOpenSSH_v1� sh � � � � � zKey._fromPrivateOpenSSH_v1c sV |� � �� }|d dd� }|d �d��r�|s8td��z,|d �dd�\}}|�� �d d�\}� W n$ ty� td |d ����Y n0 |d v r�tj }t |�d �d �d } t � �dkr�td��n6|dkr�tj }d} t � �dkr�td��ntd|����t t� fdd�tdt � �d�D ���} t|| dd � ��� } t| | | dd � ��� } | | d| � } td�|dd� ��}t|| �t�| �t� d��� }|�|�|�� }t|dd� �}|d| � }nd�|dd� �}t|�}zt � |�d }W n4 t �y* } ztd |� ���W Y d}~n d}~0 0 |d k�rH| t ||t� ��S |d k�r�t |�dk�rh|d }t |�d k �r~td ��d!d� |dd"� D �\}}}}}}}}| t j!||||||t j"||d#�d$��#t� ��S |d%k�rDd&d� |dd � D �\}}} } } t |�d k �rtd'��| t$j%| t$j&| t$j'||| d(�d)�d*�j#t� d��S td+|� ���dS ),a� Return a private key object corresponding to this OpenSSH private key string, in the old PEM-based format. The format of a PEM-based OpenSSH private key string is:: -----BEGIN <key type> PRIVATE KEY----- [Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,<initialization value>] <base64-encoded ASN.1 structure> ------END <key type> PRIVATE KEY------ The ASN.1 structure of a RSA key is:: (0, n, e, d, p, q) The ASN.1 structure of a DSA key is:: (0, p, q, g, y, x) The ASN.1 structure of a ECDSA key is:: (ECParameters, OID, NULL) @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the ASN.1 encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key r � ���rg � Proc-Type: 4,ENCRYPTEDr� rU � � ,zinvalid DEK-info )s AES-128-CBCs AES-256-CBC� -r� r� z AES encrypted key with a bad IVs DES-EDE3-CBC� r� z DES encrypted key with a bad IVr� c 3 s$ | ] }t � ||d � d�V qdS )rU r� N�r� �r= �i�Zivdatar1 r2 r? # r@ z.Key._fromPrivateOpenSSH_PEM.<locals>.<genexpr>Nr@ r� r� r� z(Failed to decode key (Bad Passphrase?): s ECs RSAr{ z!RSA key failed to decode properlyc s s | ]}t |�V qd S �Nr� �r= �valuer1 r1 r2 r? C r@ � �rw rx �ra rb r} �dmp1�dmq1�iqmp�public_numberss DSAc s s | ]}t |�V qd S r� r� r� r1 r1 r2 r? P r@ z!DSA key failed to decode properlyr` rd �r� r� �unknown key type )(r� r� r� r4 r� �rstrip� ValueErrorr+ r r� r� r� � TripleDES�bytes� bytearray�ranger �digestr r� r r �CBCr r� r� r� �ord� berDecoder�decoder r r �RSAPrivateNumbersrl � private_keyr �DSAPrivateNumbersrn ro ) rO r[ rH r� �kindr� Z cipherIVInfor� r� r� �iv�ba�bbr� �b64Datar� �keyDataZ removeLenZ decodedKeyZ asn1Errorrx rw r} ra rb r� r� r� rc re r� r1 r� r2 �_fromPrivateOpenSSH_PEM� s� % � � � $ & ��� ���� zKey._fromPrivateOpenSSH_PEMc C s8 |� � �� d dd� dkr(| �||�S | �||�S dS )a� Return a private key object corresponding to this OpenSSH private key string. If the key is encrypted, passphrase MUST be provided. Providing a passphrase for an unencrypted key is an error. @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key r r� r� s OPENSSHN)r� r� r� r� )rO r[ rH r1 r1 r2 �_fromString_PRIVATE_OPENSSH^ s z Key._fromString_PRIVATE_OPENSSHc C s� t �t|dd� ��}|d dks&J �i }|d dd� D ] \}}t�t�|��d ||< q:|d d dkr�| j|d |d |d |d d �S |d d d kr�| j|d |d d�S td|d d � ���dS )a Return a public key corresponding to this LSH public key string. The LSH public key string format is:: <s-expression: ('public-key', (<key type>, (<name, <value>)+))> The names for a RSA (key type 'rsa-pkcs1-sha1') key are: n, e. The names for a DSA (key type 'dsa') key are: y, g, p, q. @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type is unknown rg r� r � public-keyN� dsa� y� g� p� q�re rc ra rb � rsa-pkcs1-sha1� n� e�rx rw �unknown lsh key type ) r �parser r rk �NSr� r� r+ �rO r[ Zsexp�kdr� r1 r1 r2 �_fromString_PUBLIC_LSH{ s �zKey._fromString_PUBLIC_LSHc C s6 t �|�}|d dksJ �i }|d dd� D ] \}}t�t�|��d ||< q.|d d dkr�t|�dksxJ t|���| j|d |d |d |d |d d �S |d d d k�r t|�dks�J t|���|d |d kr�|d |d |d < |d < | j|d |d |d |d |d d�S td|d d � ���dS )a+ Return a private key corresponding to this LSH private key string. The LSH private key string format is:: <s-expression: ('private-key', (<key type>, (<name>, <value>)+))> The names for a RSA (key type 'rsa-pkcs1-sha1') key are: n, e, d, p, q. The names for a DSA (key type 'dsa') key are: y, g, p, q, x. @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type is unknown r � private-keyrg Nr� r~ r� r� r� r� � xr � rsa-pkcs1r� r� r� � dr| r� ) r r� r rk r� r� r� r� r+ r� r1 r1 r2 �_fromString_PRIVATE_LSH� s$ � �zKey._fromString_PRIVATE_LSHc C s� t �|�\}}|dkrpt �|�\}}t �|�\}}t �|�\}}t �|�\}}t �|�\}}| j|||||d�S |dkr�t �|�\}}t �|�\} }t �|�\} }t �|�\} }t �|�\}}t �|�\}}| j| || ||| d�S td|� ���dS )a� Return a private key object corresponsing to the Secure Shell Key Agent v3 format. The SSH Key Agent v3 format for a RSA key is:: string 'ssh-rsa' integer e integer d integer n integer u integer p integer q The SSH Key Agent v3 format for a DSA key is:: string 'ssh-dss' integer p integer q integer g integer y integer x @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type (the first string) is unknown r^ r r] �rx rw r} ra rb r� r� N)r rj rk r� r� r+ ) rO r[ ru ra rb rc re r� rw r} rx r� r1 r1 r2 �_fromString_AGENTV3� s" zKey._fromString_AGENTV3c C s� |� d�s|� d�rdS |� d�r&dS |� d�r4dS |� d�rBd S |� d �s`|� d �s`|� d �r�t�|�\}}d }|r�|d7 }t�|�\}}qr|dkr�dS dS dS )z� Guess the type of key in data. The types map to _fromString_* methods. @type data: L{bytes} @param data: The key data. s ssh-� ecdsa-sha2-Zpublic_opensshs -----BEGINZprivate_openssh� {Z public_lsh� (Z private_lshs ssh-s ecdsa-s ssh-ed25519r rg r_ Zagentv3rt N)r� r rj rk )rO r[ Zignoredrv �countr1 r1 r2 rV � s, ���zKey._guessStringTypec C sh t j||d�}|du r$|�t� �}n<t j|||t �||�t �||�t �||�|d�} | �t� �}| |�S )a� Build a key from RSA numerical components. @type n: L{int} @param n: The 'n' RSA variable. @type e: L{int} @param e: The 'e' RSA variable. @type d: L{int} or L{None} @param d: The 'd' RSA variable (optional for a public key). @type p: L{int} or L{None} @param p: The 'p' RSA variable (optional for a public key). @type q: L{int} or L{None} @param q: The 'q' RSA variable (optional for a public key). @type u: L{int} or L{None} @param u: The 'u' RSA variable. Ignored, as its value is determined by p and q. @rtype: L{Key} @return: An RSA key constructed from the values as given. r� Nr� ) r rl rm r r� Z rsa_crt_dmp1Z rsa_crt_dmq1� rsa_crt_iqmpr� ) rO rx rw r} ra rb r� � publicNumbers� keyObject�privateNumbersr1 r1 r2 r� s � zKey._fromRSAComponentsc C sR t j|t j|||d�d�}|du r0|�t� �}nt j||d�}|�t� �}| |�S )a Build a key from DSA numerical components. @type y: L{int} @param y: The 'y' DSA variable. @type p: L{int} @param p: The 'p' DSA variable. @type q: L{int} @param q: The 'q' DSA variable. @type g: L{int} @param g: The 'g' DSA variable. @type x: L{int} or L{None} @param x: The 'x' DSA variable (optional for a public key) @rtype: L{Key} @return: A DSA key constructed from the values as given. r` rd Nr� )r rn ro rm r r� r� ) rO re ra rb rc r� r r r r1 r1 r2 r� ? s � zKey._fromDSAComponentsc C sL t j||t| d�}|du r*|�t� �}nt j||d�}|�t� �}| |�S )a� Build a key from EC components. @param x: The affine x component of the public point used for verifying. @type x: L{int} @param y: The affine y component of the public point used for verifying. @type y: L{int} @param curve: NIST name of elliptic curve. @type curve: L{bytes} @param privateValue: The private value. @type privateValue: L{int} �r� re r� N)� private_valuer� )r ZEllipticCurvePublicNumbersrp rm r ZEllipticCurvePrivateNumbersr� )rO r� re r� r� r r r r1 r1 r2 �_fromECComponentsb s �� zKey._fromECComponentsc C s8 |du r t j�t| |�}nt �|t| t� �}| |�S )aa Build a key from an EC encoded point. @param encodedPoint: The public point encoded as in SEC 1 v2.0 section 2.3.3. @type encodedPoint: L{bytes} @param curve: NIST name of elliptic curve. @type curve: L{bytes} @param privateValue: The private value. @type privateValue: L{int} N)r rq rr rp Zderive_private_keyr )rO r� r� r� r r1 r1 r2 r� � s � �zKey._fromECEncodedPointc C s> t du stdu rtd��|du r,t �|�}n t�|�}| |�S )a Build a key from Ed25519 components. @param a: The Ed25519 public key, as defined in RFC 8032 section 5.1.5. @type a: L{bytes} @param k: The Ed25519 private key, as defined in RFC 8032 section 5.1.5. @type k: L{bytes} Nz)Ed25519 keys not supported on this system)r) r* r+ Zfrom_public_bytesZfrom_private_bytes)rO ry r� r r1 r1 r2 rs � s zKey._fromEd25519Componentsc C s || _ dS )z� Initialize with a private or public C{cryptography.hazmat.primitives.asymmetric} key. @param keyObject: Low level key. @type keyObject: C{cryptography.hazmat.primitives.asymmetric} key. N)� _keyObject)�selfr r1 r1 r2 �__init__� s z Key.__init__)�other�returnc C s2 t |t�r*| �� |�� ko(| �� |�� kS tS dS )zN Return True if other represents an object with the same key. N)rB rJ rQ r[ �NotImplemented)r r r1 r1 r2 �__eq__� s z Key.__eq__)r c C s� | � � dkr�| �� }|d �d�}| �� r@d|dd� � d�}nd|dd� � d�}t|�� �D ]4\}}|dkr�|d |� �7 }q`|d |� d |� �7 }q`|d S d t| � � �| �� r�dp�d| �� f g}t| �� �� �D ]�\}}|�d|� d�� | � � dk�r|nt � |�dd� }|r�|dd� }|dd� }d} t |�D ]} | t | �d�d� } �q<t |�dk �rr| dd� } |�d| � �qq�|d d |d< d �|�S dS )z@ Return a pretty representation of this object. �ECr� rT z <Elliptic Curve Public Key (���Nz bits)z <Elliptic Curve Private Key (z curve: � z: z> z<%s %s (%s bits)z Public Keyz Private Keyzattr �:�Ed25519r_ � � �02xr� � �>)rQ r[ r� �isPublic�sorted�itemsr! �size�appendr �MPr r� r� r� ) r r[ r� �outr� �vr� Zby�m�or> r1 r1 r2 �__repr__� s@ ���$ z Key.__repr__c C s t | jtjtjtjtj f�S )zl Check if this instance is a public key. @return: C{True} if this is a public key. ) rB r r � RSAPublicKeyr � DSAPublicKeyr rq r r) �r r1 r1 r2 r � s ��z Key.isPublicc C s | � � r | S t| j�� �S dS )z� Returns a version of this key containing only the public key data. If this is a public key, this may or may not be the same object as self. @rtype: L{Key} @return: A public key. N)r rJ r rm r) r1 r1 r2 �public s z Key.publicc C sf |t ju r"ttt| �� ��� ��S |t ju rTtd�dd� t t | �� ��� �D ���S t d|� ���dS )aO The fingerprint of a public key consists of the output of the message-digest algorithm in the specified format. Supported formats include L{FingerprintFormats.MD5_HEX} and L{FingerprintFormats.SHA256_BASE64} The input to the algorithm is the public key data as specified by [RFC4253]. The output of sha256[RFC4634] algorithm is presented to the user in the form of base64 encoded sha256 hashes. Example: C{US5jTUa0kgX5ZxdqaGF0yGRu8EgKXHNmoT8jHKo1StM=} The output of the MD5[RFC1321](default) algorithm is presented to the user as a sequence of 16 octets printed as hexadecimal with lowercase letters and separated by colons. Example: C{c1:b1:30:29:d7:b8:de:6c:97:77:10:d7:46:41:63:87} @param format: Format for fingerprint generation. Consists hash function and representation format. Default is L{FingerprintFormats.MD5_HEX} @since: 8.2 @return: the user presentation of this L{Key}'s fingerprint, as a string. @rtype: L{str} � :c S s g | ]}t �|��qS r1 )�binascii�hexlify�r= r� r1 r1 r2 � <listcomp>4 r@ z#Key.fingerprint.<locals>.<listcomp>z Unsupported fingerprint format: N) r6 r8 r! r r rt r� r7 r� r r r5 )r �formatr1 r1 r2 � fingerprint s ��zKey.fingerprintc C st t | jtjtjf�rdS t | jtjtjf�r0dS t | jtj tj f�rHdS t | jt j t j f�r`dS td| j����dS )z� Return the type of the object we wrap. Currently this can only be 'RSA', 'DSA', 'EC', or 'Ed25519'. @rtype: L{str} @raises RuntimeError: If the object type is unknown. �RSA�DSAr r zunknown type of object: N)rB r r r' � RSAPrivateKeyr r( � DSAPrivateKeyr rq �EllipticCurvePrivateKeyr r) r* � RuntimeErrorr) r1 r1 r2 rQ : s ��zKey.typec C s< | � � dkr$dt| jjj�d� S dddd�| � � S dS ) a� Get the type of the object we wrap as defined in the SSH protocol, defined in RFC 4253, Section 6.6 and RFC 8332, section 4 (this is a public key format name, not a public key algorithm name). Currently this can only be b'ssh-rsa', b'ssh-dss', b'ecdsa-sha2-[identifier]' or b'ssh-ed25519'. identifier is the standard NIST curve name @return: The key type format. @rtype: L{bytes} r r r� r] r^ rh )r2 r3 r N)rQ r� r r� r� rF r) r1 r1 r2 �sshTypeQ s ���z Key.sshTypec C s" | � � dkrg d�S | �� gS dS )z� Get the public key signature algorithms supported by this key. @return: A list of supported public key signature algorithm names. @rtype: L{list} of L{bytes} r2 )� rsa-sha2-512� rsa-sha2-256r] N)rQ r8 r) r1 r1 r2 � supportedSignatureAlgorithmsi s z Key.supportedSignatureAlgorithmsc C s� | � � dkrP|| �� krJ| �� }|dkr0t�� S |dkr@t�� S t�� S q�dS n2t�� t�� t�� t�� t�� d��| � � |f�S dS )z� Return a hash algorithm for this key type given an SSH signature algorithm name, or L{None} if no such hash algorithm is defined for this key type. r � i� N))r2 r] )r2 r: )r2 r9 )r3 r^ )r rh ) rQ r8 r r �SHA256�SHA384�SHA512�SHA1�get)r � signatureTyper� r1 r1 r2 �_getHashAlgorithmu s" � �zKey._getHashAlgorithmc C s< | j du rdS | �� dkr$| j jjS | �� dkr4dS | j jS )zv Return the size of the object we wrap. @return: The size of the key. @rtype: L{int} Nr r r r< )r rQ r� �key_sizer) r1 r1 r2 r � s zKey.sizec C s� t | jtj�r&| j�� }|j|jd�S t | jtj�rj| j�� }|jj|jj|j |j |j t� |j |j �d�S t | jt j�r�| j�� }|j|jj|jj |jj d�S t | jt j�r�| j�� }|j|jj|jjj|jjj |jjj d�S t | jtj��r | j�� }|j|j| �� d�S t | jtj��rB| j�� }|jj|jj|j| �� d�S t | jtj��rld| j�t j j t j j �iS t | jtj ��r�| j�!� �t j j t j j �| j�"t j j t j#j t �$� �d�S t%d | j� ���d S ) z_ Return the values of the public key as a dictionary. @rtype: L{dict} r� r� r� )r� re rc ra rb r )r� re r� r� ry )ry r� zUnexpected key type: N)&rB r r r' r� rx rw r4 Zprivate_numbersr} ra rb r r r( re rf rc r5 r� r rq r8 r6 r r r) � public_bytesr �EncodingZRaw� PublicFormatr* rm � private_bytes� PrivateFormat� NoEncryptionr7 )r �numbersr1 r1 r2 r[ � st � � � � � � �� ��� zKey.datac C s$ | � � }| �� }|dkr>t�d�t�|d � t�|d � S |dkr�t�d�t�|d � t�|d � t�|d � t�|d � S |d kr�| jjjd d }t�|d �t�|d dd� � t�dt� |d |� t� |d |� � S |dk�rt�d�t�|d � S t d|� ���dS )a� Return the public key blob for this key. The blob is the over-the-wire format for public keys. SECSH-TRANS RFC 4253 Section 6.6. RSA keys:: string 'ssh-rsa' integer e integer n DSA keys:: string 'ssh-dss' integer p integer q integer g integer y EC keys:: string 'ecdsa-sha2-[identifier]' integer x integer y identifier is the standard NIST curve name Ed25519 keys:: string 'ssh-ed25519' string a @rtype: L{bytes} r2 r] rw rx r3 r^ ra rb rc re r � r� r� ���N� r� r rh ry �unknown key type: ) rQ r[ r r� r! r r� rD r r r+ )r rQ r[ Z byteLengthr1 r1 r2 rt � s@ & � � � �� ������ zKey.blobc C s� | � � }| �� }|dkr�t�|d |d �}t�d�t�|d � t�|d � t�|d � t�|� t�|d � t�|d � S |dkr�t�d �t�|d � t�|d � t�|d � t�|d � t�|d � S |d k�r>| j�� � t j j t j j�}t�|d �t�|d dd� � t�|� t�|d � S |dk�rvt�d�t�|d � t�|d |d � S td|� ���dS )a1 Return the private key blob for this key. The blob is the over-the-wire format for private keys: Specification in OpenSSH PROTOCOL.agent RSA keys:: string 'ssh-rsa' integer n integer e integer d integer u integer p integer q DSA keys:: string 'ssh-dss' integer p integer q integer g integer y integer x EC keys:: string 'ecdsa-sha2-[identifier]' integer x integer y integer privateValue identifier is the NIST standard curve name. Ed25519 keys:: string 'ssh-ed25519' string a string k || a r2 ra rb r] rx rw r} r3 r^ rc re r� r r� rM Nr� r rh ry r� rO )rQ r[ r r r r� r! r rm rE r rF ZX962rG ZUncompressedPointr+ )r rQ r[ r� ZencPubr1 r1 r2 � privateBlob' sh ) � � �� � �� � � � � �� � �� �� ���zKey.privateBlob�extra�commentrH c C s� |dur*t jdtdd� | �� r&|}n|}t|t�r>|�d�}t|�}t| d|� � � �d�}|du rrt d|� ���||||d�S ) a Create a string representation of this key. If the key is a private key and you want the representation of its public key, use C{key.public().toString()}. type maps to a _toString_* method. @param type: The type of string to emit. Currently supported values are C{'OPENSSH'}, C{'LSH'}, and C{'AGENTV3'}. @type type: L{str} @param extra: Any extra data supported by the selected format which is not part of the key itself. For public OpenSSH keys, this is a comment. For private OpenSSH keys, this is a passphrase to encrypt with. (Deprecated since Twisted 20.3.0; use C{comment} or C{passphrase} as appropriate instead.) @type extra: L{bytes} or L{unicode} or L{None} @param subtype: A subtype of the requested C{type} to emit. Only supported for private OpenSSH keys, for which the currently supported subtypes are C{'PEM'} and C{'v1'}. If not given, an appropriate default is used. @type subtype: L{str} or L{None} @param comment: A comment to include with the key. Only supported for OpenSSH keys. Present since Twisted 20.3.0. @type comment: L{bytes} or L{unicode} or L{None} @param passphrase: A passphrase to encrypt the key with. Only supported for private OpenSSH keys. Present since Twisted 20.3.0. @type passphrase: L{bytes} or L{unicode} or L{None} @rtype: L{bytes} Nz�The 'extra' argument to twisted.conch.ssh.keys.Key.toString was deprecated in Twisted 20.3.0; use 'comment' or 'passphrase' instead.r� )� stacklevelrT Z _toString_rO )�subtyperR rH ) �warnings�warn�DeprecationWarningr rB rC rF rI rW rX r+ )r rQ rQ rT rR rH r\ r1 r1 r2 �toStringz s -� z Key.toStringc C sn | � � dkr6|sd}| j�tjjtjj�d | �� S t| � � �� dd�}|sRd}| � � d | d | �� S )a Return a public OpenSSH key string. See _fromString_PUBLIC_OPENSSH for the string format. @type comment: L{bytes} or L{None} @param comment: A comment to include with the key, or L{None} to omit the comment. r r@ r� � ) rQ r rE r rF ZOpenSSHrG r� r rt �replacer8 )r rR r� r1 r1 r2 �_toPublicOpenSSH� s ����zKey._toPublicOpenSSHc s� |rJt j}d}d}|jd }d}|}t�|�} d} t�| �t�d| � } nd}d}d}d} t�d �} | | | � � t�|p|d� } d }t | �| r�|d 7 }| t |d @ f�7 } q�|�rt � || || d�}t||d |� �t�|||| � �t� d��� }|�| �|�� }n| }dt�|� t�|� t�| � t�dd � t�| �� � t�|� }t|��dd�� dg� fdd�td t � �d�D � dg }d�|�d S )aP Return a private OpenSSH key string, in the "openssh-key-v1" format introduced in OpenSSH 6.5. See _fromPrivateOpenSSH_v1 for the string format. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase to encrypt the key with, or L{None} if it is not encrypted. r� r� r� r� �d r� r� r@ r_ r rg � Nr� r� rY s# -----BEGIN OPENSSH PRIVATE KEY-----c s g | ]}� ||d � �qS ��@ r1 r� �r� r1 r2 r/ r@ z,Key._toPrivateOpenSSH_v1.<locals>.<listcomp>r_ s! -----END OPENSSH PRIVATE KEY-----)r r� � block_sizer � secureRandomr r� r� �packrP r� r� r� r� r r r� r � encryptorr� r� rt r rZ r� r� )r rR rH r� Z cipherNameZkdfNamer� r� r� r� r� r� �checkr� ZpadByte�encKeyrd r� rt r� r1 r` r2 �_toPrivateOpenSSH_v1� sf � ��� � ��� ���zKey._toPrivateOpenSSH_v1c sn | � � dkr<|st�� }n t�|�}| j�tjjtjj |�S | � � dkrPt d��| � � }d� d| � � � d�df�g}| � � dkr�|d |d }}t�||�}d |d |d |d |||d |d |d |d |f }n$d |d |d |d |d |d f}t�� } tt�� |�D ] \} } | �| t�| �� �qt� | �} |�rt�d�} d� dd� t| �D ��}|� d�}|�d� |�d| d � t || �� � }t || | �� � }|| dd� }dt | �d }| t |f�| 7 } t t!�"|�t#�$| �t%� d ��&� }|�'| �|�(� } t)| ��*dd�� |� fd d�t+d t � �d �D �7 }|�d� d | � � � d�df�� d� |�S ) a, Return a private OpenSSH key string, in the old PEM-based format. See _fromPrivateOpenSSH_PEM for the string format. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase to encrypt the key with, or L{None} if it is not encrypted. r r zBcannot serialize Ed25519 key to OpenSSH PEM format; use v1 insteadr@ s -----BEGIN r� s PRIVATE KEY-----r2 ra rb r rx rw r} rg rc re r� r� r c S s g | ]}t |�d ��qS )Z02X)r� r. r1 r1 r2 r/ L r@ z-Key._toPrivateOpenSSH_PEM.<locals>.<listcomp>r� s DEK-Info: DES-EDE3-CBC,rY Nr� r� c s g | ]}� ||d � �qS r^ r1 r� r` r1 r2 r/ ] r@ r_ s -----END ),rQ r rJ ZBestAvailableEncryptionr rH rF �PEMrI �TraditionalOpenSSLr� r[ r� rF r r r �Sequence�zip� itertoolsr ZsetComponentByPosition�Integer� berEncoderr rb r r r r� r� r� r r r� r r� r rd r� r� r rZ r� )r rH rd r[ r� ra rb r� ZobjDataZ asn1Sequence�indexr� Zasn1Datar� Zhexivr� r� rf ZpadLenr1 r` r2 �_toPrivateOpenSSH_PEM sr � ��� � $ � "�zKey._toPrivateOpenSSH_PEMc C sl | � � r| j|d�S |dks0|du r>| �� dkr>| j||d�S |du sN|dkrZ| j|d�S td|� ���dS ) ar Return a public or private OpenSSH string. See L{_fromString_PUBLIC_OPENSSH} and L{_fromPrivateOpenSSH_PEM} for the string formats. @param subtype: A subtype to emit. Only supported for private keys, for which the currently supported subtypes are C{'PEM'} and C{'v1'}. If not given, an appropriate default is used. @type subtype: L{str} or L{None} @param comment: Comment for a public key. @type comment: L{bytes} @param passphrase: Passphrase for a private key. @type passphrase: L{bytes} @rtype: L{bytes} )rR Zv1Nr )rR rH rh rG zunknown subtype )r r[ rQ rg rp r� )r rT rR rH r1 r1 r2 �_toString_OPENSSHc s zKey._toString_OPENSSHc K s� | � � }| �� }| �� �r|dkrft�dddt�|d �dd� gdt�|d �dd� gggg�}n�|d kr�t�dd d t�|d �dd� gdt�|d �dd� gdt�|d �dd� gdt�|d �dd� gggg�}ntd|� ���dt|�� dd� d S |dk�r|d |d }}t � ||�}t�dddt�|d �dd� gdt�|d �dd� gdt�|d �dd� gd t�|�dd� gdt�|�dd� gd t�|d |d �dd� gd t�|d |d �dd� gd t�|�dd� gg gg�S |d k�r�t�dd d t�|d �dd� gdt�|d �dd� gdt�|d �dd� gdt�|d �dd� gd!t�|d" �dd� gggg�S td|� d#���dS )$z� Return a public or private LSH key. See _fromString_PUBLIC_LSH and _fromString_PRIVATE_LSH for the key formats. @rtype: L{bytes} r2 r� r� r� rx r_ Nr� rw r3 r� r� ra r� rb r� rc r� re r� r rY r@ � }r� r� r� r} � arg � b� cr� r� �') r[ rQ r r rc r r! r+ r rZ r r )r �kwargsr[ rQ r� ra rb r� r1 r1 r2 � _toString_LSH� sv ���� ���� ���� ����zKey._toString_LSHc K s� | � � }| �� s�| �� dkrF|d |d |d |d |d |d f}n.| �� dkrt|d |d |d |d |d f}t�| �� �d �ttj|�� S d S )z� Return a private Secure Shell Agent v3 key. See _fromString_AGENTV3 for the key format. @rtype: L{bytes} r2 rw r} rx r� ra rb r3 rc re r� r@ N) r[ r rQ r r� r8 r� �mapr! )r rw r[ �valuesr1 r1 r2 �_toString_AGENTV3� s � "zKey._toString_AGENTV3c C s� | � � }|du r| �� }| �|�}|du r@td|� d|� d���|dkrj| j�|t�� |�}t� |�}�n$|dkr�| j�||�}t |�\}}t� t |d�t |d� �}n�|dk�rr| j�|t � |��} t | �\}}t |�} t |�} t | d �tu �rt| d �} n| d } | d @ �r d | } t | d �tu �r<t| d �} n| d } | d @ �rVd | } t� t� | �t� | � �}n |d k�r�t� | j�|��}t� |�| S ) a� Sign some data with this key. SECSH-TRANS RFC 4253 Section 6.6. @type data: L{bytes} @param data: The data to sign. @type signatureType: L{bytes} @param signatureType: The SSH public key algorithm name to sign this data with, or L{None} to use a reasonable default for the key. @rtype: L{bytes} @return: A signature for the given data. Nz public key signature algorithm z is not defined for z keysr2 r3 � r r � � r )rQ r8 rC r3 r �signr �PKCS1v15r r� r% r r �ECDSArC r� )r r[ rB ru � hashAlgorithm�sig�ret�r�s� signaturerK �sbZrcompZscompr1 r1 r2 r � sH �� zKey.signc C s� t |�dkr dt�|� }}nt�|�\}}| �|�}|du rBdS | �� }|dkr�| j}| �� sh|�� }t�|�d |t � � |f}�n|dkr�t�|�d }t � |dd� d �} t � |dd� d �} t | | �}| j}| �� s�|�� }|||f}n�|d k�rft�|�d }t�|d �\} } } t � | d �} t � | d �} t | | �}| j}| �� �sT|�� }||t�|�f}n4|d k�r�| j}| �� �s�|�� }t�|�d |f}z|j|� W n t�y� Y dS 0 d S dS )a Verify a signature using this key. @type signature: L{bytes} @param signature: The signature to verify. @type data: L{bytes} @param data: The signed data. @rtype: L{bool} @return: C{True} if the signature is valid. �( r^ NFr2 r r3 r| �bigr rU r T)r� r r� rj rC rQ r r rm r r� r� � from_bytesr& r r� �verifyr )r r� r[ rB r� ru r� �argsZconcatenatedSignaturer� r� ZrstrZsstrrv r1 r1 r2 r� 4 sZ � z Key.verify)NN)NN)NNNN)N)N)N)N)NNNN)N)NN)N)NNN)N)3r- r. r/ r0 � classmethodrS rM rz r� r� r� r� r� r� r� r� rV r� r� r r� rs r �object�boolr rC r& r r* r6 r7 r1 rQ r8 r; rC r r[ rt rP r$ rX r[ rg rp rq rx r{ r r� r1 r1 r1 r2 rJ � s~ ' 8 J X } % 0 , " ,( L<S�� < > O R LrJ � c C s� | � � jdd� | �� sPtjd|t� d�}|jtjj tj j t� � d�}| � |� | �d��.}tj|�� dt� d�}t|�W d � S 1 s�0 Y dS ) a� This function returns a persistent L{Key}. The key is loaded from a PEM file in C{location}. If it does not exist, a key with the key size of C{keySize} is generated and saved. @param location: Where the key is stored. @type location: L{twisted.python.filepath.FilePath} @param keySize: The size of the key, if it needs to be generated. @type keySize: L{int} @returns: A persistent key. @rtype: L{Key} T)ZignoreExistingDirectoryi )Zpublic_exponentrD r� )�encodingr0 Zencryption_algorithmrK N)�passwordr� )�parent�makedirs�existsr Zgenerate_private_keyr rH r rF rh rI ri rJ Z setContentrL r rN rJ )�locationr� Z privateKey�pemZkeyFiler1 r1 r2 �_getPersistentRSAKey{ s �� �r� )r� )Yr0 r, rl r� r; rU �base64r r r �hashlibr r �typingr r r� Z cryptographyr Zcryptography.exceptionsr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r r r r Z&cryptography.hazmat.primitives.ciphersr r r Z,cryptography.hazmat.primitives.serializationr r Zpyasn1.codec.berr r� r rn Z pyasn1.errorr Z pyasn1.typer Ztwisted.conch.sshr r Ztwisted.conch.ssh.commonr Ztwisted.pythonr Ztwisted.python.compatr r! Ztwisted.python.constantsr" r# Ztwisted.python.deprecater$ Z/cryptography.hazmat.primitives.asymmetric.utilsr% r& � ImportErrorr' r( Z SECP256R1Z SECP384R1Z SECP521R1rp r� r) �__annotations__r* Zed25519_supportedZ twisted.conch.ssh._keys_pynacl� Exceptionr+ r3 r4 r5 r6 r9 rI rJ r� r1 r1 r1 r2 �<module> s� �� `
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка