| Current File : //lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/__pycache__/ec.cpython-39.pyc |
a
�a.2 � @ s� d dl mZ d dlmZmZmZ d dlmZmZm Z m
Z
d dl m Z m
Z
d dlmZmZmZ ejd�dd�Zd d
� Zd d � Zd
d� Zdd� Zdd� ZG dd� de�ZG dd� de�ZG dd� dej�Z G dd� dej �Z dS ) � )�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed�_evp_pkey_derive� _warn_sign_verify_deprecated)�hashes�
serialization)�AsymmetricSignatureContext� AsymmetricVerificationContext�ec��signature_algorithmc C s t | tj�stdtj��d S )Nz/Unsupported elliptic curve signature algorithm.)�
isinstancer ZECDSAr r Z UNSUPPORTED_PUBLIC_KEY_ALGORITHMr � r �M/usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/ec.py�_check_signature_algorithm s
�r c C s� | j �|�}| �|| jjk� | j �|�}|| j jkr>td��| j js^| j � |�dkr^td��| j �
|�}| �|| jjk� | j� |�� d�}|S )Nz@ECDSA keys with explicit parameters are unsupported at this timer �ascii)
�_lib�EC_KEY_get0_group�openssl_assert�_ffi�NULL�EC_GROUP_get_curve_nameZ NID_undef�
ValueErrorZCRYPTOGRAPHY_IS_LIBRESSLZEC_GROUP_get_asn1_flagZ
OBJ_nid2sn�string�decode)�backendZec_key�groupZnidZ
curve_name�snr r r �_ec_key_curve_sn$ s$ ���� r" c C s | j �|| j j� dS )z�
Set the named curve flag on the EC_KEY. This causes OpenSSL to
serialize EC keys along with their curve OID which makes
deserialization easier.
N)r ZEC_KEY_set_asn1_flagZOPENSSL_EC_NAMED_CURVE)r Zec_cdatar r r �_mark_asn1_named_ec_curveB s �r# c C s8 zt j| � W S ty2 td�|�tj��Y n0 d S )Nz${} is not a supported elliptic curve)r Z _CURVE_TYPES�KeyErrorr �formatr ZUNSUPPORTED_ELLIPTIC_CURVE)r r! r r r �_sn_to_elliptic_curveN s �r& c C sz | j �|j�}| �|dk� | j�d|�}| j�dd�}| j �d|t|�|||j�}| �|dk� | j�|�d |d � S )Nr zunsigned char[]zunsigned int[]� ) r Z
ECDSA_size�_ec_keyr r �newZ
ECDSA_sign�len�buffer)r � private_key�dataZmax_sizeZsigbufZ
siglen_ptr�resr r r �_ecdsa_sig_signX s �r/ c C s8 | j �d|t|�|t|�|j�}|dkr4| �� t�d S )Nr r' )r Z ECDSA_verifyr* r( Z_consume_errorsr )r �
public_key� signaturer- r. r r r �_ecdsa_sig_verifye s �r2 c @ s> e Zd Zejejd�dd�Zedd�dd�Z ed�d d
�Z
dS ) �_ECDSASignatureContext)r, � algorithmc C s || _ || _t�||�| _d S �N)�_backend� _private_keyr
�Hash�_digest)�selfr r, r4 r r r �__init__o s z _ECDSASignatureContext.__init__N�r- �returnc C s | j �|� d S r5 �r9 �update�r: r- r r r r? y s z _ECDSASignatureContext.update�r= c C s | j �� }t| j| j|�S r5 )r9 �finalizer/ r6 r7 �r: �digestr r r rB | s
z _ECDSASignatureContext.finalize) �__name__�
__module__� __qualname__r �EllipticCurvePrivateKeyr
�
HashAlgorithmr; �bytesr? rB r r r r r3 n s
�
r3 c @ s@ e Zd Zejeejd�dd�Zedd�dd�Z dd�d d
�Z
dS ) �_ECDSAVerificationContext)r0 r1 r4 c C s$ || _ || _|| _t�||�| _d S r5 )r6 � _public_key�
_signaturer
r8 r9 )r: r r0 r1 r4 r r r r; � s z"_ECDSAVerificationContext.__init__Nr< c C s | j �|� d S r5 r> r@ r r r r? � s z _ECDSAVerificationContext.updaterA c C s" | j �� }t| j| j| j|� d S r5 )r9 rB r2 r6 rL rM rC r r r �verify� s
�z _ECDSAVerificationContext.verify) rE rF rG r �EllipticCurvePublicKeyrJ r
rI r; r? rN r r r r rK � s � rK c @ s� e Zd Zdd� Ze�d�Zeed�dd��Z e
j e d�dd �Z
e
je
jed
�d d �Ze
jd�d
d�Ze
jd�dd�Zejejejed�dd�Zee
j ed�dd�ZdS )�_EllipticCurvePrivateKeyc C s6 || _ || _|| _t||�}t||�| _t||� d S r5 �r6 r( � _evp_pkeyr" r& �_curver# �r: r Z ec_key_cdata�evp_pkeyr! r r r r; � s
z!_EllipticCurvePrivateKey.__init__rS rA c C s | j jS r5 ��curve�key_size�r: r r r rX � s z!_EllipticCurvePrivateKey.key_size)r r= c C s: t � t|� t|j� t|jtj�s*J �t| j| |j�S r5 ) r r r r4 r r
rI r3 r6 )r: r r r r �signer� s
�z _EllipticCurvePrivateKey.signer)r4 �peer_public_keyr= c C sD | j �|| j�s tdtj��|jj| jjkr4td��t| j | j |�S )Nz1This backend does not support the ECDH algorithm.z2peer_public_key and self are not on the same curve)
r6 Z+elliptic_curve_exchange_algorithm_supportedrW r r Z UNSUPPORTED_EXCHANGE_ALGORITHM�namer r rR )r: r4 r[ r r r �exchange� s ����z!_EllipticCurvePrivateKey.exchangec C s� | j j�| j�}| j �|| j jjk� | j j�|�}| j �|�}| j j� | j�}| j �|| j jjk� | j j�
||�}| j �|dk� | j � |�}t | j ||�S )Nr' )
r6 r r r( r r r r Z_ec_key_new_by_curve_nid�EC_KEY_get0_public_keyZEC_KEY_set_public_keyZ_ec_cdata_to_evp_pkey�_EllipticCurvePublicKey)r: r Z curve_nidZ
public_ec_key�pointr. rU r r r r0 � s z#_EllipticCurvePrivateKey.public_keyc C s2 | j j�| j�}| j �|�}tj|| �� �� d�S )N)�
private_value�public_numbers) r6 r ZEC_KEY_get0_private_keyr( �
_bn_to_intr �EllipticCurvePrivateNumbersr0 rb )r: Zbnra r r r �private_numbers� s
�z(_EllipticCurvePrivateKey.private_numbers)�encodingr% �encryption_algorithmr= c C s | j �|||| | j| j�S r5 )r6 Z_private_key_bytesrR r( )r: rf r% rg r r r �
private_bytes� s �z&_EllipticCurvePrivateKey.private_bytes)r- r r= c C s* t |� t| j||j�\}}t| j| |�S r5 )r r r6 �
_algorithmr/ )r: r- r r4 r r r �sign� s �z _EllipticCurvePrivateKey.signN)rE rF rG r; r �read_only_propertyrW �property�intrX r � EllipticCurveSignatureAlgorithmr rZ ZECDHrO rJ r] r0 rd re r �EncodingZ
PrivateFormatZKeySerializationEncryptionrh rj r r r r rP � s*
�
�
� �rP c @ s� e Zd Zdd� Ze�d�Zeed�dd��Z e
e j e
d�dd �Ze jd�d
d �Zeje
d �d
d�Zejeje
d�dd�Ze
e
e j dd�dd�ZdS )r_ c C s6 || _ || _|| _t||�}t||�| _t||� d S r5 rQ rT r r r r; s
z _EllipticCurvePublicKey.__init__rS rA c C s | j jS r5 rV rY r r r rX s z _EllipticCurvePublicKey.key_size)r1 r r= c C sH t � t�d|� t|� t|j� t|jtj�s6J �t | j
| ||j�S )Nr1 ) r r � _check_bytesr r r4 r r
rI rK r6 )r: r1 r r r r �verifier s
�z _EllipticCurvePublicKey.verifierc
C s� | j �| j�\}}| j j�| j�}| j �|| j jjk� | j �� �d}| j j� |�}| j j� |�}||||||�}| j �|dk� | j �
|�}| j �
|�} W d � n1 s�0 Y t j || | j
d�S )Nr' )�x�yrW )r6 Z _ec_key_determine_group_get_funcr( r r^ r r r � _tmp_bn_ctxZ
BN_CTX_getrc r �EllipticCurvePublicNumbersrS )
r: Zget_funcr r` �bn_ctxZbn_xZbn_yr. rr rs r r r rb s � *z&_EllipticCurvePublicKey.public_numbers)r% r= c C s& |t jju r| jjj}n|t jju s(J �| jjj}| jj�| j �}| j�
|| jj j k� | jj�
| j �}| j�
|| jj j k� | j�� �v}| jj�|||| jj j d|�}| j�
|dk� | jj �d|�}| jj�||||||�}| j�
||k� W d � n1 �s0 Y | jj �|�d d � S )Nr zchar[])r � PublicFormat�CompressedPointr6 r ZPOINT_CONVERSION_COMPRESSED�UncompressedPointZ POINT_CONVERSION_UNCOMPRESSEDr r( r r r r^ rt ZEC_POINT_point2octr) r+ ) r: r% �
conversionr r` rv �buflen�bufr. r r r �
_encode_point2 s&
� �0z%_EllipticCurvePublicKey._encode_point)rf r% r= c C sp |t jju s$|t jju s$|t jju rV|t jjusD|t jjt jjfvrLtd��| �|�S | j� ||| | j
d �S d S )NzKX962 encoding must be used with CompressedPoint or UncompressedPoint format) r ro ZX962rw rx ry r r} r6 Z_public_key_bytesrR )r: rf r% r r r � public_bytesJ s"
�
�
���
�z$_EllipticCurvePublicKey.public_bytesN)r1 r- r r= c C s0 t |� t| j||j�\}}t| j| ||� d S r5 )r r r6 ri r2 )r: r1 r- r r4 r r r rN c s �z _EllipticCurvePublicKey.verify)rE rF rG r; r rk rW rl rm rX rJ r rn r
rq ru rb r rw r} ro r~ rN r r r r r_ � s&
� � �r_ N) Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r r r Z cryptography.hazmat.primitivesr
r Z)cryptography.hazmat.primitives.asymmetricr r
r rn r r" r# r& r/ r2 r3 rK rH rP rO r_ r r r r �<module> s �
f