o qhq@sdZddlmZmZmZmZddlZddlZddlm Z m Z m Z m Z m Z mZmZddlmZddlmZmZmZddlmZmZmZmZdd lmZmZmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*dd l+m,Z,m-Z-Gd d d e(Z.Gd dde)Z/Gddde Z0Gddde(Z1Gddde(Z2Gddde(Z3GdddZ4Gddde%e4Z5Gddde$e4Z6Gddde Z7Gdd d e#Z8Gd!d"d"e#Z9Gd#d$d$e(Z:Gd%d&d&e(Z;Gd'd(d(e(ZGd-d.d.e#Z?Gd/d0d0eZ@Gd1d2d2e ZAGd3d4d4e(ZBGd5d6d6e(ZCGd7d8d8e(ZDGd9d:d:e*ZEGd;d<dd>ee(ZGGd?d@d@e(ZHGdAdBdBe(ZIGdCdDdDe(ZJGdEdFdFe(ZKGdGdHdHe#ZLGdIdJdJee(ZMGdKdLdLe(ZNdS)Ma' ASN.1 type classes for public and private keys. Exports the following items: - DSAPrivateKey() - ECPrivateKey() - EncryptedPrivateKeyInfo() - PrivateKeyInfo() - PublicKeyInfo() - RSAPrivateKey() - RSAPublicKey() Other type classes are defined that help compose the types listed above. )unicode_literalsdivisionabsolute_importprint_functionN)SECP192R1_BASE_POINTSECP224R1_BASE_POINTSECP256R1_BASE_POINTSECP384R1_BASE_POINTSECP521R1_BASE_POINT PrimeCurve PrimePoint)unwrap) type_namestr_clsbyte_cls)_ForceNullParametersDigestAlgorithmEncryptionAlgorithmRSAESOAEPParams)Any Asn1Value BitStringChoiceIntegerIntegerOctetStringNullObjectIdentifierOctetBitString OctetStringParsableOctetStringParsableOctetBitStringSequence SequenceOfSetOf)int_from_bytes int_to_bytesc@&eZdZdZdefdefdefgZdS)OtherPrimeInfo= Source: https://tools.ietf.org/html/rfc3447#page-46 primeexponent coefficientN__name__ __module__ __qualname____doc__r_fieldsr3r3A/var/www/html/env/lib/python3.10/site-packages/asn1crypto/keys.pyr(6 r(c@eZdZdZeZdS)OtherPrimeInfosr)N)r.r/r0r1r( _child_specr3r3r3r4r7Br7c@eZdZdZdddZdS)RSAPrivateKeyVersionzX Original Name: Version Source: https://tools.ietf.org/html/rfc3447#page-45 z two-primemulti)rrNr.r/r0r1_mapr3r3r3r4r;J  r;c @sVeZdZdZdefdefdefdefdefdefdefd efd efd ed d ifg ZdS) RSAPrivateKeyz= Source: https://tools.ietf.org/html/rfc3447#page-45 versionmoduluspublic_exponentprivate_exponentprime1prime2 exponent1 exponent2r,other_prime_infosoptionalTN)r.r/r0r1r;rr7r2r3r3r3r4r@Vs r@c@s eZdZdZdefdefgZdS) RSAPublicKeyz= Source: https://tools.ietf.org/html/rfc3447#page-44 rBrCNr-r3r3r3r4rKi rKc@s8eZdZdZdefdefdefdefdefdefgZdS) DSAPrivateKeya& The ASN.1 structure that OpenSSL uses to store a DSA private key that is not part of a PKCS#8 structure. Reversed engineered from english-language description on linked OpenSSL documentation page. Original Name: None Source: https://www.openssl.org/docs/apps/dsa.html rApqg public_key private_keyNr-r3r3r3r4rMts rMc@s$eZdZdZeddZddZdS)_ECPointa  In both PublicKeyInfo and PrivateKeyInfo, the EC public key is a byte string that is encoded as a bit string. This class adds convenience methods for converting to and from the byte string to a pair of integers that are the X and Y coordinates. cCsjttt|dd}ttt|dd}t||}d}|t||d7}|t||d7}||S)a Creates an ECPoint object from the X and Y integer coordinates of the point :param x: The X coordinate, as an integer :param y: The Y coordinate, as an integer :return: An ECPoint object g @)width)intmathceillogmaxr&)clsxyx_bytesy_bytes num_bytes byte_stringr3r3r4 from_coordss z_ECPoint.from_coordscCs|j}|dd}|dkr-|dd}t|d}t|d|}t||d}||fS|tddgvr;ttdttd ) z Returns the X and Y coordinates for this EC point, as native Python integers :return: A 2-element tuple containing integers (X, Y) rrrUNrTzQ Invalid EC public key - first byte is incorrect z| Compressed representations of EC public keys are not supported due to patent US6252960 )nativelenr%set ValueErrorr)selfdata first_byte remaining field_lenr]r^r3r3r4 to_coordss   z_ECPoint.to_coordsN)r.r/r0r1 classmethodrcror3r3r3r4rSs   rSc@ eZdZdS)ECPointNr.r/r0r3r3r3r4rrrrc@rq)ECPointBitStringNrsr3r3r3r4rurtruc@eZdZdZddddZdS)SpecifiedECDomainVersion: Source: http://www.secg.org/sec1-v2.pdf page 104 ecdpVer1ecdpVer2ecdpVer3)rrTNr=r3r3r3r4rws  rwc@r:) FieldTypezR Original Name: None Source: http://www.secg.org/sec1-v2.pdf page 101 prime_fieldcharacteristic_two_field)z1.2.840.10045.1.1z1.2.840.10045.1.2Nr=r3r3r3r4r}r?r}c@rv)CharacteristicTwoBasiszR Original Name: None Source: http://www.secg.org/sec1-v2.pdf page 102 gn_basistp_basispp_basis)z1.2.840.10045.1.2.1.1z1.2.840.10045.1.2.1.2z1.2.840.10045.1.2.1.3Nr=r3r3r3r4rs  rc@r') Pentanomial: Source: http://www.secg.org/sec1-v2.pdf page 102 k1k2k3Nr-r3r3r3r4rr5rc@s6eZdZdZdefdefdefgZdZe ee dZ dS)CharacteristicTwoz` Original Name: Characteristic-two Source: http://www.secg.org/sec1-v2.pdf page 101 mbasis parameters)rr)rrrN) r.r/r0r1rrrr2 _oid_pairrr _oid_specsr3r3r3r4rs rc@s.eZdZdZdefdefgZdZee dZ dS)FieldIDz: Source: http://www.secg.org/sec1-v2.pdf page 100 field_typer)rr)r~rN) r.r/r0r1r}rr2rrrrr3r3r3r4rs rc@s,eZdZdZdefdefdeddifgZdS)CurverxabseedrJTN)r.r/r0r1rrr2r3r3r3r4r-s  rc @sJeZdZdZdefdefdefdefdefdedd ifd e dd ifgZ d S) SpecifiedECDomainz: Source: http://www.secg.org/sec1-v2.pdf page 103 rAfield_idcurvebaseordercofactorrJThashN) r.r/r0r1rwrrrrrrr2r3r3r3r4r9s  rc@seZdZdZidddddddd d d d d ddddddddddddddddddd d!d"d#id$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;dd?d@dAdBdCdDdEdFdGdHdIdJdKdLZdMS)N NamedCurvez Various named curves Original Name: None Source: https://tools.ietf.org/html/rfc3279#page-23, https://tools.ietf.org/html/rfc5480#page-5 z1.2.840.10045.3.0.1 c2pnb163v1z1.2.840.10045.3.0.2 c2pnb163v2z1.2.840.10045.3.0.3 c2pnb163v3z1.2.840.10045.3.0.4 c2pnb176w1z1.2.840.10045.3.0.5 c2tnb191v1z1.2.840.10045.3.0.6 c2tnb191v2z1.2.840.10045.3.0.7 c2tnb191v3z1.2.840.10045.3.0.8 c2onb191v4z1.2.840.10045.3.0.9 c2onb191v5z1.2.840.10045.3.0.10 c2pnb208w1z1.2.840.10045.3.0.11 c2tnb239v1z1.2.840.10045.3.0.12 c2tnb239v2z1.2.840.10045.3.0.13 c2tnb239v3z1.2.840.10045.3.0.14 c2onb239v4z1.2.840.10045.3.0.15 c2onb239v5z1.2.840.10045.3.0.16 c2pnb272w1z1.2.840.10045.3.0.17 c2pnb304w1z1.2.840.10045.3.0.18 c2tnb359v1z1.2.840.10045.3.0.19 c2pnb368w1z1.2.840.10045.3.0.20 c2tnb431r1z1.2.840.10045.3.1.2 prime192v2z1.2.840.10045.3.1.3 prime192v3z1.2.840.10045.3.1.4 prime239v1z1.2.840.10045.3.1.5 prime239v2z1.2.840.10045.3.1.6 prime239v3z 1.3.132.0.1 sect163k1z 1.3.132.0.15 sect163r2z1.2.840.10045.3.1.1 secp192r1z 1.3.132.0.33 secp224r1z 1.3.132.0.26 sect233k1z1.2.840.10045.3.1.7 secp256r1z 1.3.132.0.27 sect233r1z 1.3.132.0.16 sect283k1z 1.3.132.0.17 sect283r1 secp384r1 sect409k1 sect409r1 secp521r1 sect571k1 sect571r1)z 1.3.132.0.34z 1.3.132.0.36z 1.3.132.0.37z 1.3.132.0.35z 1.3.132.0.38z 1.3.132.0.39Nr=r3r3r3r4rIs      !"#$% rc@s&eZdZdZdefdefdefgZdS)ECDomainParametersr specifiednamed implicit_caN)r.r/r0r1rrr _alternativesr3r3r3r4rr5rc@seZdZdZddiZdS)ECPrivateKeyVersionzR Original Name: None Source: http://www.secg.org/sec1-v2.pdf page 108 r ecPrivkeyVer1Nr=r3r3r3r4rsrc@s<eZdZdZdefdefdedddfded ddfgZd S) ECPrivateKeyz: Source: http://www.secg.org/sec1-v2.pdf page 108 rArRrrT)explicitrJrQrN) r.r/r0r1rrrrur2r3r3r3r4rsrc@r') DSAParamsz Parameters for a DSA public or private key Original Name: Dss-Parms Source: https://tools.ietf.org/html/rfc3279#page-9 rNrOrPNr-r3r3r3r4rs rc@s&eZdZdZdefdedeifgZdS) Attributezq Source: https://www.itu.int/rec/dologin_pub.asp?lang=e&id=T-REC-X.501-198811-S!!PDF-E&type=items page 8 typevaluesspecN)r.r/r0r1rr$rr2r3r3r3r4rs  rc@r6) Attributes< Source: https://tools.ietf.org/html/rfc5208#page-3 N)r.r/r0r1rr8r3r3r3r4rr9rc@rv)PrivateKeyAlgorithmIdz These OIDs for various public keys are reused when storing private keys inside of a PKCS#8 structure Original Name: None Source: https://tools.ietf.org/html/rfc3279 rsadsaec)1.2.840.113549.1.1.11.2.840.10040.4.11.2.840.10045.2.1Nr=r3r3r3r4rs   rc@s4eZdZdZdefdeddifgZdZee dZ dS) PrivateKeyAlgorithmzm Original Name: PrivateKeyAlgorithmIdentifier Source: https://tools.ietf.org/html/rfc5208#page-3 algorithmrrJTrr)rrN) r.r/r0r1rrr2rrrrr3r3r3r4rs  rc@seZdZdZdefdefdefdedddfgZd d Z de iZ d Z d Z d Z d Zed d ZddZddZeddZeddZeddZeddZeddZeddZeddZed d!Zd S)"PrivateKeyInforrAprivate_key_algorithmrR attributesrT)implicitrJcCs|ddj}tttd|S)Nrr)rrr)rfr@rrrjrr3r3r4_private_key_specsz PrivateKeyInfo._private_key_specNcCs>t|tst|tsttdt||dkr%t|ts!t|}t}nP|dkrQt|t s3t |}t }|d|d<|d|d<|d|d<|d}|d}n$|d krlt|t s`t |}n| }|d }|d =n t td t|t}t||d <||d <|}||_td |d<||d<||d<|dkr||_|S)a' Wraps a private key in a PrivateKeyInfo structure :param private_key: A byte string or Asn1Value object of the private key :param algorithm: A unicode string of "rsa", "dsa" or "ec" :return: A PrivateKeyInfo object zX private_key must be a byte string or Asn1Value, not %s rrrNrOrPrQrRrrzU algorithm must be one of "rsa", "dsa", "ec", not %s rrrAr) isinstancerr TypeErrorrrr@loadrrMrrcopyrireprrr _algorithmr _public_key)r\rRrparamsrQprivate_key_algo containerr3r3r4wrapsN            zPrivateKeyInfo.wrapc Cs^|jdkr|dd}tt|dj|djj|djS|jdkr2|dj}t|d|d d S|jd kr|j\}}|d krFttd |dkr|dddkrXttdt |ddt |ddt |dd}|ddj d \}}t |||}n|dkr|dvrttd|tttttd|}||djdj} t| j| jSdS)z Computes the public key corresponding to the current private key. :return: For RSA keys, an RSAPublicKey object. For DSA keys, an Integer object. For EC keys, an ECPointBitString. rrrrPrRrNrrBrC)rBrCrrz Unable to compute public key for EC key using Implicit CA parameters rrrrz Unable to compute public key for EC key over a characteristic two field rrrrr)rrrrrz Unable to compute public key for EC named curve %s, parameters not currently included N)rrpowrfparsedrKrrirr r%chosenror rrr r r rurcr]r^) rjrkey curve_typedetailsrbase_xbase_y base_point public_pointr3r3r4_compute_public_keyLs`        z"PrivateKeyInfo._compute_public_keycCs|jdkr |djS|jdkr*|dd}td|d|d|d |j|djd S|jd krC|dj}|dd|d<|j|d <|Sd S)z Unwraps the private key into an RSAPrivateKey, DSAPrivateKey or ECPrivateKey object :return: An RSAPrivateKey, DSAPrivateKey or ECPrivateKey object rrRrrrrrNrOrP)rArNrOrPrQrRrrQN)rrrMrQ)rjroutputr3r3r4rs$     zPrivateKeyInfo.unwrapcCP|jdkrttd|j|dd}|j}|jdkr d}n|j}|j|fS)# Returns information about the curve used for an EC key :raises: ValueError - when the key is not an EC key :return: A two-element tuple, with the first element being a unicode string of "implicit_ca", "specified" or "named". If the first element is "implicit_ca", the second is None. If "specified", the second is an OrderedDict that is the native version of SpecifiedECDomain. If "named", the second is a unicode string of the curve name. rK Only EC keys have a curve, this key is %s rrrNrrirupperrnamerfrjrrvaluer3r3r4r    zPrivateKeyInfo.curvecCsL|jdkrttd|jt|dddjdd}|dkr$d Sd S) z Returns the name of the family of hash algorithms used to generate a DSA key :raises: ValueError - when the key is not a DSA key :return: A unicode string of "sha1" or "sha2" rt Only DSA keys are generated using a hash algorithm, this key is %s rrrOrTsha1sha2)rrirrrXrZrf)rjbyte_lenr3r3r4 hash_algos zPrivateKeyInfo.hash_algocCs |jdur |ddj|_|jS)O :return: A unicode string of "rsa", "dsa" or "ec" Nrrrrfrjr3r3r4r zPrivateKeyInfo.algorithmcCs|jdurM|jdkr|djdj}n|jdkr"|dddj}n |jd kr/|djdj}ttt|d |_|jd }|d krM|jd |7_|jS) zU :return: The bit size of the private key, as an integer NrrRrBrrrrNrrTrr) _bit_sizerrrfrWrXrYrZrjr*rBr3r3r4bit_sizes     zPrivateKeyInfo.bit_sizecCtt|jdS)zV :return: The byte size of the private key, as an integer rrWrXrYrrr3r3r4 byte_size zPrivateKeyInfo.byte_sizecCsZ|jdur*|jdkr%|dj}|dr|d|_|jS||_|jS||_|jS)z :return: If an RSA key, an RSAPublicKey object. If a DSA key, an Integer object. If an EC key, an ECPointBitString object. NrrRrQ)rrruntagr)rjrr3r3r4rQs     zPrivateKeyInfo.public_keycCs t|j|ddd|jdS)z\ :return: A PublicKeyInfo object derived from this private key. rrr)rrQ) PublicKeyInforrQrr3r3r4public_key_info*s  zPrivateKeyInfo.public_key_infocCsb|jdur|dd}|dj}|jdkr"d|dj|djf}nz|jd kr=|j}d |d j|d j|d j|jf}n_|jdkr|dj}|durO|jj}|jdkrdd|jj}|d}||7}n8|jdkrl|}n0|jdkrd|jddj}|d}|d|jddj7}|d|jddj7}||7}t|t r|d}t | |_|jS)aY Creates a fingerprint that can be compared with a public key to see if the two form a pair. This fingerprint is not compatible with fingerprints generated by any other software. :return: A byte string that is a sha256 hash of selected components (based on the key type) NrrrRr%d:%drBrCr %d:%d:%d:%drNrOrPrrQr%s:utf-8rrr:rrr) _fingerprintrrrfrQrrencoderrhashlibsha256digest)rjrrto_hashrQr3r3r4 fingerprint9sH                zPrivateKeyInfo.fingerprint)r.r/r0r1rrr rr2r_spec_callbacksrrrrrprrrpropertyrr rrrrQrr%r3r3r3r4rsD  CI !      rc@ eZdZdZdefdefgZdS)EncryptedPrivateKeyInfoz< Source: https://tools.ietf.org/html/rfc5208#page-4 encryption_algorithmencrypted_dataN)r.r/r0r1rrr2r3r3r3r4r)vrLr)c@r()ValidationParms= Source: https://tools.ietf.org/html/rfc3279#page-10 r pgen_counterN)r.r/r0r1rrr2r3r3r3r4r,rLr,c@s>eZdZdZdefdefdefdeddifdeddifgZd S) DomainParametersr-rNrPrOjrJTvalidation_paramsN)r.r/r0r1rr,r2r3r3r3r4r/s  r/c@s eZdZdZddddddZdS) PublicKeyAlgorithmIdzM Original Name: None Source: https://tools.ietf.org/html/rfc3279 r rsaes_oaeprrdh)rz1.2.840.113549.1.1.7rrz1.2.840.10046.2.1Nr=r3r3r3r4r2s r2c@s8eZdZdZdefdeddifgZdZee e e dZ dS) PublicKeyAlgorithmzd Original Name: AlgorithmIdentifier Source: https://tools.ietf.org/html/rfc5280#page-18 rrrJTr)rrr4r3N) r.r/r0r1r2rr2rrrr/rrr3r3r3r4r5s  r5c@seZdZdZdefdefgZddZdeiZdZ dZ dZ dZ dZ eddZd d Zed d Zed dZeddZeddZeddZeddZeddZeddZdS)rze Original Name: SubjectPublicKeyInfo Source: https://tools.ietf.org/html/rfc5280#page-17 rrQcCs&|ddj}ttttdftd|S)Nr)rr3rrr4)rfrKrrurr3r3r4_public_key_specszPublicKeyInfo._public_key_specNcCst|tst|tsttdt||dkr ttdt|t}t ||d<t |d<|}||d<t|tr@| }t ||d<|S)a Wraps a public key in a PublicKeyInfo structure :param public_key: A byte string or Asn1Value object of the public key :param algorithm: A unicode string of "rsa" :return: A PublicKeyInfo object zW public_key must be a byte string or Asn1Value, not %s rz> algorithm must "rsa", not %s rrrQ)rrrrrrrirr5r2rrdumpr!)r\rQralgorr3r3r4rs&     zPublicKeyInfo.wrapcCs>|jdkr |djS|j}|dkrdnd}ttd||)z Unwraps an RSA public key into an RSAPublicKey object. Does not support DSA or EC public keys since they do not have an unwrapped form. :return: An RSAPublicKey object rrQECanrzj Only RSA public keys may be unwrapped - this key is %s %s public key )rrrrir)rjkey_typea_anr3r3r4rs  zPublicKeyInfo.unwrapcCr)rrrrrrNrrr3r3r4r'rzPublicKeyInfo.curvecCs^|jdkrttd|j|dd}|jdurdSt|djdd}|d kr-d Sd S) a# Returns the name of the family of hash algorithms used to generate a DSA key :raises: ValueError - when the key is not a DSA key :return: A unicode string of "sha1" or "sha2" or None if no parameters are present rrrrNrOrTrrrr )rrirrrfrXrZ)rjrr r3r3r4r Is   zPublicKeyInfo.hash_algocCs |jdur |ddj|_|jS)r Nrr rr3r3r4rhrzPublicKeyInfo.algorithmcCs|jdurU|jdkrt|djddd|_|jS|jdkr)|djdj}n|jd kr7|d d d j}ttt|d|_|jd}|d krU|jd|7_|jS)zT :return: The bit size of the public key, as an integer NrrQrrTrrrBrrrrNr) rrrgrfrrWrXrYrZrr3r3r4rss     zPublicKeyInfo.bit_sizecCr)zU :return: The byte size of the public key, as an integer rrrr3r3r4rrzPublicKeyInfo.byte_sizecC(|jdurtt|d|_|jS)ze :return: The SHA1 hash of the DER-encoded bytes of this public key info NrQ)_sha1r!rrr#rr3r3r4r zPublicKeyInfo.sha1cCr=)zh :return: The SHA-256 hash of the DER-encoded bytes of this public key info NrQ)_sha256r!r"rr#rr3r3r4r"r?zPublicKeyInfo.sha256cCsb|jdur|ddj}|dd}|dkr(|dj}d|dj|djf}nt|d krD|dj}d |d j|d j|d j|jf}nX|dkr|d}|jdkrbd|jj}|d}||j7}n:|jdkrk|j}n1|jdkrd|jddj}|d}|d|jddj7}|d|jddj7}||j7}t|tr|d}t | |_|jS)aZ Creates a fingerprint that can be compared with a private key to see if the two form a pair. This fingerprint is not compatible with fingerprints generated by any other software. :return: A byte string that is a sha256 hash of selected components (based on the key type) NrrrrQrrBrCrrrNrOrPrrrrrrrrrrr) rrfrrrr rrr!r"r#)rjr;rrr$r3r3r4r%sF              zPublicKeyInfo.fingerprint)r.r/r0r1r5r!r2r6r&rrrr>r@rprrr'rr rrrrr"r%r3r3r3r4rs@  * !       r)Or1 __future__rrrrr!rX_elliptic_curverrr r r r r _errorsr_typesrrralgosrrrrcorerrrrrrrrrrr r!r"r#r$utilr%r&r(r7r;r@rKrMrSrrrurwr}rrrrrrrrrrrrrrrrr)r,r/r2r5rr3r3r3r4s\$ D   F     7