File: //lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/__pycache__/ec.cpython-39.pyc
a
�a.2 � @ s� d dl mZ d dlmZmZmZ d dlmZmZm Z m
Z
d dl m Z m
Z
d dlmZmZmZ ejd�dd�Zd d
� Zd d � Zd
d� Zdd� Zdd� ZG dd� de�ZG dd� de�ZG dd� dej�Z G dd� dej �Z dS ) � )�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed�_evp_pkey_derive� _warn_sign_verify_deprecated)�hashes�
serialization)�AsymmetricSignatureContext� AsymmetricVerificationContext�ec��signature_algorithmc C s t | tj�stdtj��d S )Nz/Unsupported elliptic curve signature algorithm.)�
isinstancer ZECDSAr r Z UNSUPPORTED_PUBLIC_KEY_ALGORITHMr � r �M/usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/ec.py�_check_signature_algorithm s
�r c C s� | j �|�}| �|| jjk� | j �|�}|| j jkr>td��| j js^| j � |�dkr^td��| j �
|�}| �|| jjk� | j� |�� d�}|S )Nz@ECDSA keys with explicit parameters are unsupported at this timer �ascii)
�_lib�EC_KEY_get0_group�openssl_assert�_ffi�NULL�EC_GROUP_get_curve_nameZ NID_undef�
ValueErrorZCRYPTOGRAPHY_IS_LIBRESSLZEC_GROUP_get_asn1_flagZ
OBJ_nid2sn�string�decode)�backendZec_key�groupZnidZ
curve_name�snr r r �_ec_key_curve_sn$ s$ ���� r" c C s | j �|| j j� dS )z�
Set the named curve flag on the EC_KEY. This causes OpenSSL to
serialize EC keys along with their curve OID which makes
deserialization easier.
N)r ZEC_KEY_set_asn1_flagZOPENSSL_EC_NAMED_CURVE)r Zec_cdatar r r �_mark_asn1_named_ec_curveB s �r# c C s8 zt j| � W S ty2 td�|�tj��Y n0 d S )Nz${} is not a supported elliptic curve)r Z _CURVE_TYPES�KeyErrorr �formatr ZUNSUPPORTED_ELLIPTIC_CURVE)r r! r r r �_sn_to_elliptic_curveN s �r& c C sz | j �|j�}| �|dk� | j�d|�}| j�dd�}| j �d|t|�|||j�}| �|dk� | j�|�d |d � S )Nr zunsigned char[]zunsigned int[]� ) r Z
ECDSA_size�_ec_keyr r �newZ
ECDSA_sign�len�buffer)r � private_key�dataZmax_sizeZsigbufZ
siglen_ptr�resr r r �_ecdsa_sig_signX s �r/ c C s8 | j �d|t|�|t|�|j�}|dkr4| �� t�d S )Nr r' )r Z ECDSA_verifyr* r( Z_consume_errorsr )r �
public_key� signaturer- r. r r r �_ecdsa_sig_verifye s �r2 c @ s> e Zd Zejejd�dd�Zedd�dd�Z ed�d d
�Z
dS ) �_ECDSASignatureContext)r, � algorithmc C s || _ || _t�||�| _d S �N)�_backend� _private_keyr
�Hash�_digest)�selfr r, r4 r r r �__init__o s z _ECDSASignatureContext.__init__N�r- �returnc C s | j �|� d S r5 �r9 �update�r: r- r r r r? y s z _ECDSASignatureContext.update�r= c C s | j �� }t| j| j|�S r5 )r9 �finalizer/ r6 r7 �r: Zdigestr r r rB | s
z _ECDSASignatureContext.finalize) �__name__�
__module__� __qualname__r �EllipticCurvePrivateKeyr
�
HashAlgorithmr; �bytesr? rB r r r r r3 n s
�
r3 c @ s@ e Zd Zejeejd�dd�Zedd�dd�Z dd�d d
�Z
dS ) �_ECDSAVerificationContext)r0 r1 r4 c C s$ || _ || _|| _t�||�| _d S r5 )r6 � _public_key�
_signaturer
r8 r9 )r: r r0 r1 r4 r r r r; � s z"_ECDSAVerificationContext.__init__Nr< c C s | j �|� d S r5 r> r@ r r r r? � s z _ECDSAVerificationContext.updaterA c C s" | j �� }t| j| j| j|� d S r5 )r9 rB r2 r6 rK rL rC r r r �verify� s
�z _ECDSAVerificationContext.verify) rD rE rF r �EllipticCurvePublicKeyrI r
rH r; r? rM r r r r rJ � s � rJ c @ s� e Zd Zdd� Ze�d�Zeed�dd��Z e
j e d�dd �Z
e
je
jed
�d d �Ze
jd�d
d�Ze
jd�dd�Zejejejed�dd�Zee
j ed�dd�ZdS )�_EllipticCurvePrivateKeyc C s6 || _ || _|| _t||�}t||�| _t||� d S r5 �r6 r( � _evp_pkeyr" r& �_curver# �r: r Z ec_key_cdata�evp_pkeyr! r r r r; � s
z!_EllipticCurvePrivateKey.__init__rR rA c C s | j jS r5 ��curve�key_size�r: r r r rW � s z!_EllipticCurvePrivateKey.key_size)r r= c C s: t � t|� t|j� t|jtj�s*J �t| j| |j�S r5 ) r r r r4 r r
rH r3 r6 )r: r r r r �signer� s
�z _EllipticCurvePrivateKey.signer)r4 �peer_public_keyr= c C sD | j �|| j�s tdtj��|jj| jjkr4td��t| j | j |�S )Nz1This backend does not support the ECDH algorithm.z2peer_public_key and self are not on the same curve)
r6 Z+elliptic_curve_exchange_algorithm_supportedrV r r Z UNSUPPORTED_EXCHANGE_ALGORITHM�namer r rQ )r: r4 rZ r r r �exchange� s ����z!_EllipticCurvePrivateKey.exchangec C s� | j j�| j�}| j �|| j jjk� | j j�|�}| j �|�}| j j� | j�}| j �|| j jjk� | j j�
||�}| j �|dk� | j � |�}t | j ||�S )Nr' )
r6 r r r( r r r r Z_ec_key_new_by_curve_nid�EC_KEY_get0_public_keyZEC_KEY_set_public_keyZ_ec_cdata_to_evp_pkey�_EllipticCurvePublicKey)r: r Z curve_nidZ
public_ec_key�pointr. rT r r r r0 � s z#_EllipticCurvePrivateKey.public_keyc C s2 | j j�| j�}| j �|�}tj|| �� �� d�S )N)�
private_value�public_numbers) r6 r ZEC_KEY_get0_private_keyr( �
_bn_to_intr �EllipticCurvePrivateNumbersr0 ra )r: Zbnr` r r r �private_numbers� s
�z(_EllipticCurvePrivateKey.private_numbers)�encodingr% �encryption_algorithmr= c C s | j �|||| | j| j�S r5 )r6 Z_private_key_bytesrQ r( )r: re r% rf r r r �
private_bytes� s �z&_EllipticCurvePrivateKey.private_bytes)r- r r= c C s* t |� t| j||j�\}}t| j| |�S r5 )r r r6 �
_algorithmr/ )r: r- r r4 r r r �sign� s �z _EllipticCurvePrivateKey.signN)rD rE rF r; r �read_only_propertyrV �property�intrW r � EllipticCurveSignatureAlgorithmr rY ZECDHrN rI r\ r0 rc rd r �EncodingZ
PrivateFormatZKeySerializationEncryptionrg ri r r r r rO � s*
�
�
� �rO c @ s� e Zd Zdd� Ze�d�Zeed�dd��Z e
e j e
d�dd �Ze jd�d
d �Zeje
d �d
d�Zejeje
d�dd�Ze
e
e j dd�dd�ZdS )r^ c C s6 || _ || _|| _t||�}t||�| _t||� d S r5 rP rS r r r r; s
z _EllipticCurvePublicKey.__init__rR rA c C s | j jS r5 rU rX r r r rW s z _EllipticCurvePublicKey.key_size)r1 r r= c C sH t � t�d|� t|� t|j� t|jtj�s6J �t | j
| ||j�S )Nr1 ) r r � _check_bytesr r r4 r r
rH rJ r6 )r: r1 r r r r �verifier s
�z _EllipticCurvePublicKey.verifierc
C s� | j �| j�\}}| j j�| j�}| j �|| j jjk� | j �� �d}| j j� |�}| j j� |�}||||||�}| j �|dk� | j �
|�}| j �
|�} W d � n1 s�0 Y t j || | j
d�S )Nr' )�x�yrV )r6 Z _ec_key_determine_group_get_funcr( r r] r r r � _tmp_bn_ctxZ
BN_CTX_getrb r �EllipticCurvePublicNumbersrR )
r: Zget_funcr r_ �bn_ctxZbn_xZbn_yr. rq rr r r r ra s � *z&_EllipticCurvePublicKey.public_numbers)r% r= c C s& |t jju r| jjj}n|t jju s(J �| jjj}| jj�| j �}| j�
|| jj j k� | jj�
| j �}| j�
|| jj j k� | j�� �v}| jj�|||| jj j d|�}| j�
|dk� | jj �d|�}| jj�||||||�}| j�
||k� W d � n1 �s0 Y | jj �|�d d � S )Nr zchar[])r � PublicFormat�CompressedPointr6 r ZPOINT_CONVERSION_COMPRESSED�UncompressedPointZ POINT_CONVERSION_UNCOMPRESSEDr r( r r r r] rs ZEC_POINT_point2octr) r+ ) r: r% �
conversionr r_ ru �buflen�bufr. r r r �
_encode_point2 s&
� �0z%_EllipticCurvePublicKey._encode_point)re r% r= c C sp |t jju s$|t jju s$|t jju rV|t jjusD|t jjt jjfvrLtd��| �|�S | j� ||| | j
d �S d S )NzKX962 encoding must be used with CompressedPoint or UncompressedPoint format) r rn ZX962rv rw rx r r| r6 Z_public_key_bytesrQ )r: re r% r r r � public_bytesJ s"
�
�
���
�z$_EllipticCurvePublicKey.public_bytesN)r1 r- r r= c C s0 t |� t| j||j�\}}t| j| ||� d S r5 )r r r6 rh r2 )r: r1 r- r r4 r r r rM c s �z _EllipticCurvePublicKey.verify)rD rE rF r; r rj rV rk rl rW rI r rm r
rp rt ra r rv r| rn r} rM r r r r r^ � s&
� � �r^ N) Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r r r Z cryptography.hazmat.primitivesr
r Z)cryptography.hazmat.primitives.asymmetricr r
r rm r r" r# r& r/ r2 r3 rJ rG rO rN r^ r r r r �<module> s �
f