File: //lib/python3/dist-packages/cryptography/hazmat/backends/openssl/__pycache__/rsa.cpython-310.pyc
o
�)%a�Q �
@ sn d dl Z d dlmZ d dlmZmZmZ d dlmZm Z m
Z
d dl m Z m
Z
d dlmZmZmZ d dlmZmZmZmZmZmZ d dlmZmZm Z m Z d ed
e j ee f d e j d e fd
d�Z!d
e j d de"ded e"fdd�Z#d
e j d de"de ded e"f
dd�Z$dd� Z%dd� Z&dd � Z'd d � Z(d d � Z)G d!d"� d"e�Z*G d#d$� d$e�Z+G d%d&� d&e�Z,G d'd(� d(e �Z-dS ))� N)�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed� _warn_sign_verify_deprecated)�hashes�
serialization)�AsymmetricSignatureContext� AsymmetricVerificationContextr )�AsymmetricPadding�MGF1�OAEP�PKCS1v15�PSS� calculate_max_pss_salt_length)�
RSAPrivateKey�RSAPrivateNumbers� RSAPublicKey�RSAPublicNumbers�pss�key�hash_algorithm�returnc C s( | j }|tju s
|tju rt||�S |S �N)� _salt_lengthr �
MAX_LENGTHr r )r r r �salt� r �J/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/rsa.py�_get_rsa_pss_salt_length) s
r! )�_RSAPrivateKey�
_RSAPublicKey�data�paddingc C s� t |t�s td��t |t�r| jj}n+t |t�r4| jj}t |jt �s(t
dt j ��| �
|�s3t
dt j��n
t
d�|j�t j��t| ||||�S )Nz1Padding must be an instance of AsymmetricPadding.�'Only MGF1 is supported by this backend.zPThis combination of padding and hash algorithm is not supported by this backend.�${} is not supported by this backend.)�
isinstancer
� TypeErrorr �_lib�RSA_PKCS1_PADDINGr �RSA_PKCS1_OAEP_PADDING�_mgfr r r �UNSUPPORTED_MGF�rsa_padding_supported�UNSUPPORTED_PADDING�format�name�_enc_dec_rsa_pkey_ctx)�backendr r$ r% � padding_enumr r r � _enc_dec_rsa6 s,
�
��
�r6 r5 c C s� t |t�r| jj}| jj}n| jj}| jj}| j�|j| j j
�}| � || j j
k� | j � || jj
�}||�}| � |dk� | j�||�}| � |dk� | j�|j�} | � | dk� t |t�r�| jjr�| �|jj�}
| j�||
�}| � |dk� | �|j�} | j�|| �}| � |dk� t |t�r�|jd ur�t|j�dkr�| j�t|j��} | � | | j j
k� | j �| |jt|j�� | j�|| t|j��}| � |dk� | j � d| �}
| j � d| �}||||
|t|��}| j � |�d |
d � }| j� � |dkr�t d��|S )N� r �size_t *�unsigned char[]z Encryption/decryption failed.) r( r# r* �EVP_PKEY_encrypt_init�EVP_PKEY_encrypt�EVP_PKEY_decrypt_init�EVP_PKEY_decrypt�EVP_PKEY_CTX_new� _evp_pkey�_ffi�NULL�openssl_assert�gc�EVP_PKEY_CTX_free� EVP_PKEY_CTX_set_rsa_padding�
EVP_PKEY_sizer � Cryptography_HAS_RSA_OAEP_MD� _evp_md_non_null_from_algorithmr- �
_algorithm� EVP_PKEY_CTX_set_rsa_mgf1_md� EVP_PKEY_CTX_set_rsa_oaep_md�_label�len�OPENSSL_malloc�memmove� EVP_PKEY_CTX_set0_rsa_oaep_label�new�buffer�ERR_clear_error�
ValueError)r4 r r$ r5 r% �init�crypt�pkey_ctx�res�buf_size�mgf1_md�oaep_md�labelptr�outlen�buf�resbufr r r r3 Z sT
� �
�
r3 c C s� t |t�s td��| j�|j�}| �|dk� t |t�r"| jj}|S t |t �rPt |j
t �s3t dt
j��t |tj�s=td��||j d dk rJtd��| jj}|S t d�|j�t
j��)Nz'Expected provider of AsymmetricPadding.r r& z*Expected instance of hashes.HashAlgorithm.� zDDigest too large for key size. Use a larger key or different digest.r' )r( r
r) r* rF r? rB r r+ r r- r r r r. r �
HashAlgorithm� digest_sizerT �RSA_PKCS1_PSS_PADDINGr1 r2 r0 )r4 r r% � algorithm� pkey_sizer5 r r r �_rsa_sig_determine_padding� s2
� � ��
�rf c
C s. t | |||�}| j�|j| jj�}| �|| jjk� | j�|| jj�}||�}| �|dk� |d urP| � |�}| j�
||�}|dkrP| � � t d�
|j�tj��| j�||�}|dkri| � � t d�
|j�tj��t|t�r�| j�|t|||��}| �|dk� | � |jj�} | j�|| �}| �|dk� |S )Nr7 r z4{} is not supported by this backend for RSA signing.z4{} is not supported for the RSA signature operation.)rf r* r> r? r@ rA rB rC rD rH � EVP_PKEY_CTX_set_signature_md�_consume_errorsr r1 r2 r �UNSUPPORTED_HASHrE r0 r( r � EVP_PKEY_CTX_set_rsa_pss_saltlenr! r- rI rJ )
r4 r% rd r � init_funcr5 rW rX �evp_mdrZ r r r �_rsa_sig_setup� sJ
����
��rm c
C s� t | |||| jj�}| j�d�}| j�|| jj||t|��}| �|dk� | j�d|d �}| j�||||t|��}|dkrG| � � } t
d| ��| j� |�d d � S )Nr8 r7 r9 r zuDigest or salt length too long for key size. Use a larger key or shorter salt length if you are specifying a PSS salt) rm r* �EVP_PKEY_sign_initr@ rQ �
EVP_PKEY_signrA rM rB �_consume_errors_with_textrT rR )
r4 r% rd � private_keyr$ rW �buflenrX r^ �errorsr r r �
_rsa_sig_sign� s* � ��rt c C sV t | |||| jj�}| j�||t|�|t|��}| �|dk� |dkr)| �� t�d S )Nr )rm r* �EVP_PKEY_verify_init�EVP_PKEY_verifyrM rB rh r )r4 r% rd �
public_key� signaturer$ rW rX r r r �_rsa_sig_verify
s ���ry c C s� t | |||| jj�}| j�|j�}| �|dk� | j�d|�}| j�d|�}| j�||||t |��} | j�
|�d |d � }
| j� � | dkrIt �|
S )Nr r9 r8 r7 )
rm r* � EVP_PKEY_verify_recover_initrF r? rB r@ rQ �EVP_PKEY_verify_recoverrM rR rS r ) r4 r% rd rw rx rW �maxlenr^ rr rX r_ r r r �_rsa_sig_recover s& �
�
r} c @ sD e Zd Zdededejfdd�Zdeddfd d
�Z defd d �Z
dS )
�_RSASignatureContextrq r% rd c C s< || _ || _t||||� || _|| _t�| j| j �| _d S r )�_backend� _private_keyrf �_paddingrI r �Hash� _hash_ctx)�selfr4 rq r% rd r r r �__init__= s z _RSASignatureContext.__init__r$ r Nc C � | j �|� d S r �r� �update�r� r$ r r r r� O � z_RSASignatureContext.updatec C s t | j| j| j| j| j�� �S r )rt r r� rI r� r� �finalize�r� r r r r� R s �z _RSASignatureContext.finalize) �__name__�
__module__� __qualname__r r
r ra r� �bytesr� r� r r r r r~ < s ��
�r~ c @ sD e Zd Zdedededejfdd�Zdedd fd
d �Z dd d
�Z
d S )�_RSAVerificationContextrw rx r% rd c C sF || _ || _|| _|| _t||||� |}|| _t�| j| j �| _d S r ) r � _public_key�
_signaturer� rf rI r r� r� )r� r4 rw rx r% rd r r r r� ] s z _RSAVerificationContext.__init__r$ r Nc C r� r r� r� r r r r� r r� z _RSAVerificationContext.updatec C s" t | j| j| j| j| j| j�� �S r )ry r r� rI r� r� r� r� r� r r r �verifyu s �z _RSAVerificationContext.verify)r N) r� r� r� r r� r
r ra r� r� r� r r r r r� \ s ���
�r� c @ s� e Zd Zdd� Ze�d�Zdedej de
fdd�Z d e dede fd
d �Z
defd d
�Zdefdd�Zdejdejdejde fdd�Zde dedejejej f de fdd�ZdS )r" c C s� |j �|�}|dkr|�� }td|��|j �||jj�}|�|dk� || _|| _ || _
| jj� d�}| jj � | j || jjj| jjj� | j�|d | jjjk� | jj �
|d �| _d S )Nr7 zInvalid private key� BIGNUM **r )r* �
RSA_check_keyrp rT �RSA_blinding_onr@ rA rB r �
_rsa_cdatar? rQ � RSA_get0_key� BN_num_bits� _key_size)r� r4 � rsa_cdata�evp_pkeyrX rs �nr r r r� � s$
�z_RSAPrivateKey.__init__r� r% rd r c C s t � t|� t| j| ||�S r )r r r~ r )r� r% rd r r r �signer� s z_RSAPrivateKey.signer�
ciphertextc C s2 | j d d }|t|�krtd��t| j| ||�S )N� � z,Ciphertext length must be equal to key size.)�key_sizerM rT r6 r )r� r� r% �key_size_bytesr r r �decrypt� s z_RSAPrivateKey.decryptc C sV | j j�| j�}| j �|| j jjk� | j j�|| j jj�}| j � |�}t
| j ||�S r ) r r* �RSAPublicKey_dupr� rB r@ rA rC �RSA_free�_rsa_cdata_to_evp_pkeyr# )r� �ctxr� r r r rw � s
z_RSAPrivateKey.public_keyc
C s� | j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�| j|||� | j �|d | j jjk� | j �|d | j jjk� | j �|d | j jjk� | j j�| j||� | j �|d | j jjk� | j �|d | j jjk� | j j� | j|||� | j �|d | j jjk� | j �|d | j jjk� | j �|d | j jjk� t
| j � |d �| j � |d �| j � |d �| j � |d �| j � |d �| j � |d �t | j � |d �| j � |d �d�d�S )Nr� r ��er� )�p�q�d�dmp1�dmq1�iqmp�public_numbers)
r r@ rQ r* r� r� rB rA �RSA_get0_factors�RSA_get0_crt_paramsr �
_bn_to_intr ) r� r� r� r� r� r� r� r� r� r r r �private_numbers� sB
���z _RSAPrivateKey.private_numbers�encodingr1 �encryption_algorithmc C s | j �|||| | j| j�S r )r �_private_key_bytesr? r� )r� r� r1 r� r r r �
private_bytes� s �z _RSAPrivateKey.private_bytesr$ c C s$ t | j||�\}}t| j||| |�S r )r r rt )r� r$ r% rd r r r �sign� s �z_RSAPrivateKey.signN) r� r� r� r� r �read_only_propertyr� r
r ra r r� r� r� r rw r r� r
�Encoding�
PrivateFormat�KeySerializationEncryptionr� �typing�Union�
asym_utils� Prehashedr� r r r r r" � s>
��
�#���
�����r" c
@ s� e Zd Zdd� Ze�d�Zdedede j
de fdd �Z d
ededefd d �Z
defd
d�Zdejdejdefdd�Zdedededejeje j
f ddf
dd�Zdededeje j
defdd�ZdS )r# c C st || _ || _|| _| j j�d�}| j j�| j|| j jj| j jj� | j �|d | j jjk� | j j� |d �| _
d S )Nr� r ) r r� r? r@ rQ r* r� rA rB r� r� )r� r4 r� r� r� r r r r� � s �z_RSAPublicKey.__init__r� rx r% rd r c C s, t � t�d|� t|� t| j| |||�S )Nrx )r r � _check_bytesr r� r �r� rx r% rd r r r �verifier s �z_RSAPublicKey.verifier� plaintextc C s t | j| ||�S r )r6 r )r� r� r% r r r �encrypt r� z_RSAPublicKey.encryptc C s� | j j�d�}| j j�d�}| j j�| j||| j jj� | j �|d | j jjk� | j �|d | j jjk� t| j � |d �| j � |d �d�S )Nr� r r� )
r r@ rQ r* r� r� rA rB r r� )r� r� r� r r r r� s ��z _RSAPublicKey.public_numbersr� r1 c C s | j �||| | j| j�S r )r �_public_key_bytesr? r� )r� r� r1 r r r � public_bytes s �z_RSAPublicKey.public_bytesr$ Nc C s& t | j||�\}}t| j||| ||�S r )r r ry )r� rx r$ r% rd r r r r� ( s ��z_RSAPublicKey.verifyc C s t |� t| j||| |�S r )r r} r r� r r r �recover_data_from_signature6 s �z)_RSAPublicKey.recover_data_from_signature)r� r� r� r� r r� r� r� r
r ra r r� r� r r� r
r� � PublicFormatr� r� r� r� r� r� �Optionalr� r r r r r# � sR
���
�
��
� ����
���
��r# ).r� � cryptographyr �cryptography.exceptionsr r r �*cryptography.hazmat.backends.openssl.utilsr r r � cryptography.hazmat.primitivesr r
�)cryptography.hazmat.primitives.asymmetricr r r� �1cryptography.hazmat.primitives.asymmetric.paddingr
r r r r r �-cryptography.hazmat.primitives.asymmetric.rsar r r r r� ra �intr! r� r6 r3 rf rm rt ry r} r~ r� r" r# r r r r �<module> s\ � ��
�
���
�$����
�A+* $o