File: //lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/__pycache__/rsa.cpython-39.pyc
a
���h�S � @ sZ d dl Z d dlmZ d dlmZmZmZ d dlmZm Z m
Z
d dl m Z m
Z
d dlmZmZmZ d dlmZmZmZmZmZmZ d dlmZmZm Z m Z ee j ee f e j e d �d
d �Z!e j d e"ee"d
�dd�Z#e j d e"e ee"d�dd�Z$dd� Z%dd� Z&dd� Z'dd� Z(dd � Z)G d d � d e�Z*G d d � d e�Z+G d!d"� d"e�Z,G d#d$� d$e �Z-dS )%� N)�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed� _warn_sign_verify_deprecated)�hashes�
serialization)�AsymmetricSignatureContext� AsymmetricVerificationContextr )�AsymmetricPadding�MGF1�OAEP�PKCS1v15�PSS� calculate_max_pss_salt_length)�
RSAPrivateKey�RSAPrivateNumbers� RSAPublicKey�RSAPublicNumbers)�pss�key�hash_algorithm�returnc C s, | j }|tju s|tju r$t||�S |S d S �N)Z _salt_lengthr Z
MAX_LENGTHr r )r r r Zsalt� r �N/usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/rsa.py�_get_rsa_pss_salt_length) s
r )�_RSAPrivateKey�
_RSAPublicKey)r �data�paddingr c C s� t |t�std��t |t�r&| jj}nVt |t�rh| jj}t |jt �sPt
dt j ��| �
|�s|t
dt j��nt
d�|j�t j��t| ||||�S )Nz1Padding must be an instance of AsymmetricPadding.�'Only MGF1 is supported by this backend.zPThis combination of padding and hash algorithm is not supported by this backend.�${} is not supported by this backend.)�
isinstancer
� TypeErrorr �_lib�RSA_PKCS1_PADDINGr ZRSA_PKCS1_OAEP_PADDING�_mgfr r r �UNSUPPORTED_MGFZrsa_padding_supported�UNSUPPORTED_PADDING�format�name�_enc_dec_rsa_pkey_ctx)�backendr r! r" � padding_enumr r r � _enc_dec_rsa6 s*
�
�
�r1 )r r! r0 r" r c C s
t |t�r | jj}| jj}n| jj}| jj}| j�|j| j j
�}| � || j j
k� | j � || jj
�}||�}| � |dk� | j�||�}| � |dk� | j�|j�} | � | dk� t |t��r| jj�r| �|jj�}
| j�||
�}| � |dk� | �|j�} | j�|| �}| � |dk� t |t��r�|jd u�r�t|j�dk�r�| j�t|j��} | � | | j j
k� | j �| |jt|j�� | j�|| t|j��}| � |dk� | j � d| �}
| j � d| �}||||
|t|��}| j � |�d |
d � }| j� � |dk�rt d��|S )N� r �size_t *�unsigned char[]z Encryption/decryption failed.) r% r r' ZEVP_PKEY_encrypt_initZEVP_PKEY_encryptZEVP_PKEY_decrypt_initZEVP_PKEY_decrypt�EVP_PKEY_CTX_new� _evp_pkey�_ffi�NULL�openssl_assert�gc�EVP_PKEY_CTX_free� EVP_PKEY_CTX_set_rsa_padding�
EVP_PKEY_sizer Z Cryptography_HAS_RSA_OAEP_MD� _evp_md_non_null_from_algorithmr) �
_algorithm� EVP_PKEY_CTX_set_rsa_mgf1_mdZ EVP_PKEY_CTX_set_rsa_oaep_mdZ_label�lenZOPENSSL_mallocZmemmoveZ EVP_PKEY_CTX_set0_rsa_oaep_label�new�buffer�ERR_clear_error�
ValueError)r/ r r! r0 r" �initZcrypt�pkey_ctx�resZbuf_size�mgf1_mdZoaep_mdZlabelptrZoutlen�buf�resbufr r r r. Z sX
� �� � �
r. c C s� t |t�std��| j�|j�}| �|dk� t |t�rB| jj}nnt |t �r�t |j
t �sdt dt
j��t |tj�sxtd��||j d dk r�td��| jj}nt d�|j�t
j��|S )Nz'Expected provider of AsymmetricPadding.r r# z*Expected instance of hashes.HashAlgorithm.� zDDigest too large for key size. Use a larger key or different digest.r$ )r% r
r& r' r= r6 r9 r r( r r) r r r r* r �
HashAlgorithmZ digest_sizerE ZRSA_PKCS1_PSS_PADDINGr, r- r+ )r/ r r" � algorithmZ pkey_sizer0 r r r �_rsa_sig_determine_padding� s0
� �
�rO c C s< t | |||�}| j�|j| jj�}| �|| jjk� | j�|| jj�}||�}|dkrh| � � }t
d|��|d ur�| � |�} | j� || �}|dkr�| � � t
d�|j�tj��| j�||�}|dkr�| � � t
d�|j�tj��t|t��r8| j�|t|||��}| �|dk� | � |jj�}
| j�||
�}| �|dk� |S )Nr2 z#Unable to sign/verify with this keyr z4{} is not supported by this backend for RSA signing.z4{} is not supported for the RSA signature operation.)rO r' r5 r6 r7 r8 r9 r: r; �_consume_errorsrE r> Z EVP_PKEY_CTX_set_signature_mdr r, r- r ZUNSUPPORTED_HASHr< r+ r% r Z EVP_PKEY_CTX_set_rsa_pss_saltlenr r) r? r@ ) r/ r" rN r Z init_funcr0 rG rH �errorsZevp_mdrI r r r �_rsa_sig_setup� sN
���� ��rR c
C s� t | |||| jj�}| j�d�}| j�|| jj||t|��}| �|dk� | j�d|d �}| j�||||t|��}|dkr�| � � } t
d| ��| j� |�d d � S )Nr3 r2 r4 r zuDigest or salt length too long for key size. Use a larger key or shorter salt length if you are specifying a PSS salt) rR r' ZEVP_PKEY_sign_initr7 rB Z
EVP_PKEY_signr8 rA r9 �_consume_errors_with_textrE rC )
r/ r" rN � private_keyr! rG �buflenrH rJ rQ r r r �
_rsa_sig_sign� s* � ��rV c C sV t | |||| jj�}| j�||t|�|t|��}| �|dk� |dkrR| �� t�d S )Nr )rR r' ZEVP_PKEY_verify_initZEVP_PKEY_verifyrA r9 rP r )r/ r" rN �
public_key� signaturer! rG rH r r r �_rsa_sig_verify
s ��rY c C s� t | |||| jj�}| j�|j�}| �|dk� | j�d|�}| j�d|�}| j�||||t |��} | j�
|�d |d � }
| j� � | dkr�t �|
S )Nr r4 r3 r2 )
rR r' Z EVP_PKEY_verify_recover_initr= r6 r9 r7 rB ZEVP_PKEY_verify_recoverrA rC rD r ) r/ r" rN rW rX rG �maxlenrJ rU rH rK r r r �_rsa_sig_recover! s& �
�
r[ c @ s> e Zd Zeeejd�dd�Zedd�dd�Z ed�d d
�Z
dS ) �_RSASignatureContext)rT r" rN c C s< || _ || _t||||� || _|| _t�| j| j �| _d S r )�_backend� _private_keyrO �_paddingr? r �Hash� _hash_ctx)�selfr/ rT r" rN r r r �__init__@ s z _RSASignatureContext.__init__N�r! r c C s | j �|� d S r �ra �update�rb r! r r r rf R s z_RSASignatureContext.update�r c C s t | j| j| j| j| j�� �S r )rV r] r_ r? r^ ra �finalize�rb r r r ri U s �z _RSASignatureContext.finalize) �__name__�
__module__� __qualname__r r
r rM rc �bytesrf ri r r r r r\ ? s � r\ c @ s@ e Zd Zeeeejd�dd�Zedd�dd�Z dd�d d
�Z
dS ) �_RSAVerificationContext)rW rX r" rN c C sF || _ || _|| _|| _t||||� |}|| _t�| j| j �| _d S r ) r] � _public_key�
_signaturer_ rO r? r r` ra )rb r/ rW rX r" rN r r r rc ` s z _RSAVerificationContext.__init__Nrd c C s | j �|� d S r re rg r r r rf u s z _RSAVerificationContext.updaterh c C s" t | j| j| j| j| j| j�� �S r )rY r] r_ r? rp rq ra ri rj r r r �verifyx s �z _RSAVerificationContext.verify) rk rl rm r rn r
r rM rc rf rr r r r r ro _ s � ro c @ s� e Zd Zdd� Ze�d�Zeej e
d�dd�Z e ee d�dd �Z
ed
�d d �Zed
�d
d�Zejejeje d�dd�Ze eejejej f e d�dd�ZdS )r c C s� |s*|j �|�}|dkr*|�� }td|��|j �||jj�}|�|dk� || _|| _ || _
| jj� d�}| jj � | j || jjj| jjj� | j�|d | jjjk� | jj �
|d �| _d S )Nr2 zInvalid private key� BIGNUM **r )r' Z
RSA_check_keyrS rE ZRSA_blinding_onr7 r8 r9 r] �
_rsa_cdatar6 rB � RSA_get0_key� BN_num_bits� _key_size)rb r/ � rsa_cdata�evp_pkeyZ_skip_check_keyrH rQ �nr r r rc � s&
�z_RSAPrivateKey.__init__rw )r" rN r c C s t � t|� t| j| ||�S r )r r r\ r] )rb r" rN r r r �signer� s z_RSAPrivateKey.signer)�
ciphertextr" r c C s2 | j d d }|t|�kr"td��t| j| ||�S )N� � z,Ciphertext length must be equal to key size.)�key_sizerA rE r1 r] )rb r| r" Zkey_size_bytesr r r �decrypt� s z_RSAPrivateKey.decryptrh c C sV | j j�| j�}| j �|| j jjk� | j j�|| j jj�}| j � |�}t
| j ||�S r ) r] r' ZRSAPublicKey_duprt r9 r7 r8 r: ZRSA_freeZ_rsa_cdata_to_evp_pkeyr )rb �ctxry r r r rW � s
z_RSAPrivateKey.public_keyc
C s� | j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�| j|||� | j �|d | j jjk� | j �|d | j jjk� | j �|d | j jjk� | j j�| j||� | j �|d | j jjk� | j �|d | j jjk� | j j� | j|||� | j �|d | j jjk� | j �|d | j jjk� | j �|d | j jjk� t
| j � |d �| j � |d �| j � |d �| j � |d �| j � |d �| j � |d �t | j � |d �| j � |d �d�d�S )Nrs r ��erz )�p�q�d�dmp1�dmq1�iqmp�public_numbers)
r] r7 rB r' ru rt r9 r8 ZRSA_get0_factorsZRSA_get0_crt_paramsr �
_bn_to_intr ) rb rz r� r� r� r� r� r� r� r r r �private_numbers� sB
���z _RSAPrivateKey.private_numbers)�encodingr, �encryption_algorithmr c C s | j �|||| | j| j�S r )r] Z_private_key_bytesr6 rt )rb r� r, r� r r r �
private_bytes� s �z _RSAPrivateKey.private_bytes)r! r" rN r c C s$ t | j||�\}}t| j||| |�S r )r r] rV )rb r! r" rN r r r �sign� s �z_RSAPrivateKey.signN) rk rl rm rc r �read_only_propertyr r
r rM r r{ rn r� r rW r r� r
�EncodingZ
PrivateFormatZKeySerializationEncryptionr� �typing�Union�
asym_utils� Prehashedr� r r r r r � s$
� %� �r c @ s� e Zd Zdd� Ze�d�Zeee j
e d�dd�Z eeed�dd �Z
ed
�d d �Zejejed
�dd�Zeeeejeje j
f dd�dd�Zeeeje j
ed�dd�ZdS )r c C st || _ || _|| _| j j�d�}| j j�| j|| j jj| j jj� | j �|d | j jjk� | j j� |d �| _
d S )Nrs r ) r] rt r6 r7 rB r' ru r8 r9 rv rw )rb r/ rx ry rz r r r rc � s �z_RSAPublicKey.__init__rw )rX r" rN r c C s, t � t�d|� t|� t| j| |||�S )NrX )r r � _check_bytesr ro r] �rb rX r" rN r r r �verifier
s �z_RSAPublicKey.verifier)� plaintextr" r c C s t | j| ||�S r )r1 r] )rb r� r" r r r �encrypt s z_RSAPublicKey.encryptrh c C s� | j j�d�}| j j�d�}| j j�| j||| j jj� | j �|d | j jjk� | j �|d | j jjk� t| j � |d �| j � |d �d�S )Nrs r r� )
r] r7 rB r' ru rt r8 r9 r r� )rb rz r� r r r r� s ��z _RSAPublicKey.public_numbers)r� r, r c C s | j �||| | j| j�S r )r] Z_public_key_bytesr6 rt )rb r� r, r r r � public_bytes( s �z_RSAPublicKey.public_bytesN)rX r! r" rN r c C s& t | j||�\}}t| j||| ||�S r )r r] rY )rb rX r! r" rN r r r rr 1 s ��z_RSAPublicKey.verifyc C s t |� t| j||| |�S r )r r[ r] r� r r r �recover_data_from_signature? s �z)_RSAPublicKey.recover_data_from_signature)rk rl rm rc r r� r rn r
r rM r r� r� r r� r
r� Z PublicFormatr� r� r� r� r� rr �Optionalr� r r r r r � s0
� � �
�r ).r� Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r r Z cryptography.hazmat.primitivesr r
Z)cryptography.hazmat.primitives.asymmetricr r r� Z1cryptography.hazmat.primitives.asymmetric.paddingr
r r r r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r r� rM �intr rn r1 r. rO rR rV rY r[ r\ ro r r r r r r �<module> s@ � � &� A+- $u