/var/opt/nydus/ops/cryptography/hazmat/backends/openssl/__pycache__
Edit: /var/opt/nydus/ops/cryptography/hazmat/backends/openssl/__pycache__/backend.cpython-312.pyc (130192B)
O jt d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZmZ d dl m
Z
m Z d dl m
Z
d dlmZ d dlmZ d dlmZmZmZmZ d d lmZmZmZ d d
lm Z m Z d d l m Z m Z m!Z! d d l"m#Z#m$Z$ d d
l%m&Z& d dl'm(Z( d dl)m*Z*m+Z+ d dl,m-Z-m.Z. d dl/m0Z0m1Z1 d dl2m3Z3m4Z4 d dl5mZ6 d dl7m8Z8 d dl9m:Z:m;Z; d dl
m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZF d dlGmHZHmIZImJZJmKZK d dlLmMZMmNZNmOZO d dlPmQZQmRZR d dlSmTZTmUZUmVZVmWZWmXZXmYZYmZZZm[Z[m\Z\m]Z]m^Z^m_Z_ d d l`maZambZbmcZcmdZdmeZemfZfmgZgmhZhmiZi d d ljmkZk d d llmmZm d d lnmoZompZpmqZqmrZrmsZs e j d d!d"g Zu G d# d$ Zv G d% d& Zw G d' d( Zxd)ewd*eTfd+Zy ew Zzy), N)contextmanager)utilsx509)UnsupportedAlgorithm_Reasons)aead)_CipherContext _CMACContext)_dh_params_dup
_DHParameters
_DHPrivateKey _DHPublicKey)_DSAParameters_DSAPrivateKey
_DSAPublicKey)_EllipticCurvePrivateKey_EllipticCurvePublicKey)_ED448_KEY_SIZE_Ed448PrivateKey_Ed448PublicKey)_Ed25519PrivateKey_Ed25519PublicKey _HashContext _HMACContext)_POLY1305_KEY_SIZE_Poly1305Context)_RSAPrivateKey
_RSAPublicKey)_X448PrivateKey_X448PublicKey)_X25519PrivateKey_X25519PublicKey)r )binding)hashes
serialization)AsymmetricPadding)dhdsaeced448ed25519rsax448x25519)MGF1OAEPPSSPKCS1v15)#CERTIFICATE_ISSUER_PUBLIC_KEY_TYPESPRIVATE_KEY_TYPESPUBLIC_KEY_TYPES)BlockCipherAlgorithmCipherAlgorithm) AESAES128AES256ARC4SM4CamelliaChaCha20 TripleDES_BlowfishInternal_CAST5Internal
_IDEAInternal
_SEEDInternal) CBCCFBCFB8CTRECBGCMOFBXTSMode)scrypt)ssh)_ALLOWED_PKCS12_TYPES_PKCS12_CAS_TYPESPBESPKCS12CertificatePKCS12KeyAndCertificates
_MemoryBIObiochar_ptrc e Zd Zy)_RC2N)__name__
__module__ __qualname__ ]/opt/nydus/tmp/pip-target-a90h98xg/lib/python/cryptography/hazmat/backends/openssl/backend.pyr[ r[ s r` r[ c \ e Zd ZdZdZh dZefZej ej ej ej ej ej ej ej ej" ej$ ej& ej( f Zej. ej0 ej2 ej4 fZdZ dZ ddz Z dZ de z Z d Z!de"fd Z# dd e$d e%jL e%jN e(jR dd
fd
Z*de$fdZ+ddZ,ddZ-e.j^ d Z0ddZ1de"fdZ2de"fdZ3de4fdZ5de6dejn de8fdZ9dejn fdZ:dejn fdZ;dejn de$fdZdejn de$fd Z?dejn dej fd ZAd eBd!eCde$fd"ZDd# ZEdd$ZFd eBd!eCdeGfd%ZHd eBd!eCdeGfd&ZIdejn de$fd'ZJdejn d(e4d)e6d*e4d+e6de6f d,ZKde%jN e(jR fd-ZLde%jN e(j fd.ZNde4fd/ZOdd0e4fd1ZPd2e4d3e4deQj fd4ZSd2e4d3e4de$fd5ZTd6eQj d7e$deQj fd8ZVd6eQj deQj fd9ZYd: ZZd; Z[d Z]de6fd?Z^d7e$de_fd@Z`deafdAZbdejn de$fdBZcdCedde$fdDZed3e4defj fdEZhdFefj defj fdGZjd3e4defj fdHZkdI Zld6efj defj fdJZnd6efj defj fdKZqd6efj defj fdLZsdM Ztde$fdNZudejn de$fdOZvde$fdPZwdexdeyfdQZzd aes-128-ccm aes-128-gcm aes-192-ccm aes-192-gcm aes-256-ccm aes-256-gcm i c X t j | _ | j j | _ | j j
| _ | j | _ i | _ | j | j r1| j j rt j dt n| j | j j g| _ | j j$ r0| j" j' | j j( y y )Nz)formatopenssl_version_textru ro _legacy_provider_loadedr s ra __repr__zBackend.__repr__ s7 DKK % % ' MM 1 1
r` Nokerrorsc F t j | j || S )N)r )r& _openssl_assertrs )r r r s ra openssl_assertzBackend.openssl_assert s
&&tyy"VDDr` c | j j r0| j j | j j }n| j j }|dk( r| j j
t | S Nr )rs Cryptography_HAS_300_FIPS&EVP_default_properties_is_fips_enabledrq NULL FIPS_modeERR_clear_errorbool)r modes ra rt zBackend._is_fips_enabled sc 99 . .99CC D 99&&(D 19 II % % 'Dzr` c | j j | j sJ | j | _ y N)ro _enable_fipsrt ru r s ra r zBackend._enable_fips s7
""$$$&&& ! 2 2 4r` c | j j r| j j }|| j j k7 r| j j | | j j
| j j }| j |dk( | j j | }| j |dk( y y y Nrl ) rs rx ENGINE_get_default_RANDrq r ENGINE_unregister_RANDRAND_set_rand_methodr
ENGINE_finishr eress ra activate_builtin_randomz Backend.activate_builtin_random s 99 7 7 113ADIINN" 003ii44TYY^^D##C1H-ii--a0##C1H- # 8r` c # K | j j | j j }| j || j j
k7 | j j
| }| j |dk( | | j j | }| j |dk( | j j | }| j |dk( y # | j j | }| j |dk( | j j | }| j |dk( w xY wwr ) rs ENGINE_by_id Cryptography_osrandom_engine_idr rq r ENGINE_init ENGINE_freer r s ra _get_osurandom_enginez Backend._get_osurandom_engine s
II " "499#L#L M A /0ii##A& C1H% *G ))''*C q )))))!,C q ) ))''*C q )))))!,C q )s BE
C- A E-A E
Ec | j j r| j | j 5 }| j j | }| j |dk( d d d | j j
| j j }| j |dk( y y # 1 sw Y NxY wr ) rs rx r r ENGINE_set_default_RANDr r rq r r s ra r| z Backend.activate_osrandom_engine s 99 7 7 ( ( *++-ii77:##C1H- .
))00 @C q ) 8 .-s 0B44B=c z | j j dd }| j 5 }| j j |dt | || j j d }| j |dkD d d d | j j | j d S # 1 sw Y 3xY w)Nchar[]@ s get_implementationr ascii)
rq newr rs ENGINE_ctrl_cmdlenr r stringdecode)r bufr r s ra osrandom_engine_implementationz&Backend.osrandom_engine_implementation s iimmHb)
'
'
)Q))++(#c(C C
a ( *
yy $++G44 *
)s AB11B:c | j j | j j | j j j d S )z
Friendly string name of the loaded OpenSSL library. This is not
necessarily the same version as it was compiled against.
Example: OpenSSL 1.1.1d 10 Sep 2019
r )rq r rs OpenSSL_versionOPENSSL_VERSIONr r s ra r z Backend.openssl_version_text! s@ yy II % %dii&?&? @
&/ r` c 6 | j j S r )rs OpenSSL_version_numr s ra openssl_version_numberz Backend.openssl_version_number, s yy,,..r` key algorithmc t | || S r r )r r r s ra create_hmac_ctxzBackend.create_hmac_ctx/ s D#y11r` c |j dk( s|j dk( r9dj |j |j dz j d }n|j j d }| j j | }|S )Nblake2bblake2sz{}{} r )namer digest_sizeencoders EVP_get_digestbyname)r r algevp_mds ra _evp_md_from_algorithmz Backend._evp_md_from_algorithm4 sv >>Y &)..I*E-- 5 5 9fWo
..''0C//4
r` c x | j | }| j || j j k7 |S r )r r rq r r r r s ra _evp_md_non_null_from_algorithmz'Backend._evp_md_non_null_from_algorithm? s2 ,,Y7 Fdiinn 45
r` c | j rt || j sy| j | }|| j j
k7 S NF)ru
isinstance _fips_hashesr rq r r s ra hash_supportedzBackend.hash_supportedD s@ jD j( 23r` c t t t fD ]H }t t t
t t t t fD ] }| j ||t d J t t t
t t fD ]" }| j t |t d $ t t t t fD ]" }| j t |t d $ | j t t
t d | j t t d t d | j t t t" t
t t t t fD ]" }| j t$ |t d $ | j& j( s| j* j, s!t t t t
fD ]" }| j t. |t d $ t t t t
fD ]" }| j t0 |t d $ t3 j4 t6 t8 gt t t t
g D ]! \ }}| j ||t d # | j t: t d t d | j t< t d t d
y y ) Nz+{cipher.name}-{cipher.key_size}-{mode.name}zdes-ede3-{mode.name}zdes-ede3chacha20zsm4-{mode.name}zbf-{mode.name}zseed-{mode.name}z{cipher.name}-{mode.name}rc4rc2) r; r< r= rG rJ rK rM rH rI rL r GetCipherByNamer@ rB rA r rN _get_xts_cipherr? ro r rs #CRYPTOGRAPHY_OPENSSL_300_OR_GREATERrC rF itertoolsproductrD rE r> r[ )r r r s ra rw z!Backend._register_default_ciphers} sC /J #sCdC @,, #E A 0 c3S1H ( ( MN
2 c4-H ( (8_5K%L
.
$$ sOJ 7
$$ d4j/*"=
$$S#? c3S1H ( (X/@ A
2
MM 1 199@@ #sC 0,,% #$45 1 !#sC 0,,! #$67 1 )2(9(9 /c3$)$
H ,, #$?@ )
( (d4j/%"8
( (d4j/%"8
7 Ar` c : t | ||t j S r )r _ENCRYPTr r r s ra create_symmetric_encryption_ctxz'Backend.create_symmetric_encryption_ctx dFD.2I2IJJr` c : t | ||t j S r )r _DECRYPTr s ra create_symmetric_decryption_ctxz'Backend.create_symmetric_decryption_ctx r r` c $ | j | S r )r r s ra pbkdf2_hmac_supportedz Backend.pbkdf2_hmac_supported s ""9--r` lengthsalt
iterations key_materialc
^ | j j d| }| j | }| j j | }| j j |t
| |t
| |||| } | j | dk( | j j | d d S )Nunsigned char[]rl ) rq r r from_bufferrs PKCS5_PBKDF2_HMACr r buffer)
r r r r r r r r key_material_ptrr s
ra derive_pbkdf2_hmaczBackend.derive_pbkdf2_hmac s iimm -v655i@ 9900 >ii)) I
C1H%yy $Q''r` c @ t j | j S r )r& _consume_errorsrs r s ra r zBackend._consume_errors s &&tyy11r` c @ t j | j S r )r& _consume_errors_with_textrs r s ra r z!Backend._consume_errors_with_text s 00;;r` c || j j k7 sJ | j | j j | | j j | }| j j
d| }| j j || }| j |dk\ t j | j j | d | d }|S )Nr r big) rq r r rs BN_is_negative BN_num_bytesr BN_bn2binint
from_bytesr )r bn bn_num_bytesbin_ptrbin_lenvals ra
_bn_to_intzBackend._bn_to_int s TYY^^### 8 8 < <=yy--b1 ))-- 1<@))%%b'2 GqL)nnTYY - -g 6x @%H
r` numc j ||| j j k7 sJ || j j }|j t |j dz dz d }| j
j
|t | | }| j || j j k7 |S )a
Converts a python integer to a BIGNUM. The returned BIGNUM will not
be garbage collected (to support adding them to structs that take
ownership of the object). Be sure to register it for GC if it will
be discarded after use.
g @rl r ) rq r to_bytesr
bit_lengthrs BN_bin2bnr r )r r r binarybn_ptrs ra
_int_to_bnzBackend._int_to_bn s zR499>> 111
: B c#.."2S"81"< =uE$$VS["= Fdiinn 45
r` public_exponentkey_sizec ` t j || | j j }| j || j
j k7 | j
j || j j }| j | }| j
j || j j }| j j |||| j
j }| j |dk( | j | }t | ||d S )Nrl T unsafe_skip_rsa_key_validation)r/ _verify_rsa_parametersrs RSA_newr rq r gcRSA_freer& BN_freeRSA_generate_key_ex_rsa_cdata_to_evp_pkeyr )r r' r( rsa_cdatar r evp_pkeys ra generate_rsa_private_keyz Backend.generate_rsa_private_key s ""?H=II%%' I 78IILLDII,>,>?
___
-
YY\\"dii / /
0ii++ xTYY^^
C1H%..y9 )Xd
r` c . |dk\ xr |dz dk7 xr |dk\ S )N rl r i r_ )r r' r( s ra !generate_rsa_parameters_supportedz)Backend.generate_rsa_parameters_supported" s/
q
!#q(
C
r` numbersr+ c
( t j |j |j |j |j
|j |j |j j |j j | j j }| j || j j k7 | j j! || j j" }| j% |j }| j% |j }| j% |j }| j% |j
}| j% |j }| j% |j } | j% |j j }
| j% |j j } | j j' ||| } | j | dk( | j j) || |
| } | j | dk( | j j+ |||| } | j | dk( | j- | }
t/ | ||
| S )Nrl r* )r/ _check_private_key_componentspqddmp1dmq1iqmppublic_numbersr nrs r- r rq r r. r/ r& RSA_set0_factors RSA_set0_keyRSA_set0_crt_paramsr2 r )r r9 r+ r3 r< r= r> r? r@ rA r rC r r4 s ra load_rsa_private_numbersz Backend.load_rsa_private_numbers+ s
)) II II II LL LL LL " " $ $ " " $ $
II%%' I 78IILLDII,>,>? OOGII & OOGII & OOGII &w||,w||,w||, OOG 2 2 4 4 5 OOG 2 2 4 4 5ii((Aq9 C1H%ii$$Y1a8 C1H%ii++ItT4H C1H%..y9 +I
r` c n t j |j |j | j j }| j
|| j j k7 | j j || j j }| j |j }| j |j }| j j |||| j j }| j
|dk( | j | }t | || S r )r/ _check_public_key_componentsr rC rs r- r rq r r. r/ r& rE r2 r! )r r9 r3 r rC r r4 s ra load_rsa_public_numbersz Backend.load_rsa_public_numbersT s ((GII>II%%' I 78IILLDII,>,>? OOGII & OOGII &ii$$Y1diinnE C1H%..y9 T9h77r` c | j j }| j || j j k7 | j j || j j }|S r )rs EVP_PKEY_newr rq r r.
EVP_PKEY_freer r4 s ra _create_evp_pkey_gczBackend._create_evp_pkey_gcc sR 99))+ H 6799<<$))*A*ABr` c | j }| j j || }| j |dk( |S r )rO rs EVP_PKEY_set1_RSAr )r r3 r4 r s ra r2 z Backend._rsa_cdata_to_evp_pkeyi = ++-ii))(I> C1H%r` datac F | j j | }| j j |t | }| j || j j k7 t | j j || j j | S )z
Return a _MemoryBIO namedtuple of (BIO, char*).
The char* is the storage for the BIO and it must stay alive until the
BIO is finished with.
)
rq r rs BIO_new_mem_bufr r r rW r. BIO_free)r rS data_ptrrX s ra
_bytes_to_biozBackend._bytes_to_bioo ss 99((.ii''#d)< C499>> 12$)),,sDII,>,>?JJr` c p | j j }| j || j j k7 | j j | }| j || j j k7 | j j
|| j j }|S )z.
Creates an empty memory BIO.
)rs BIO_s_memr rq r BIO_newr. rV )r
bio_methodrX s ra _create_mem_bio_gczBackend._create_mem_bio_gc| s YY((*
J$)).. 89ii
+ C499>> 12iill3 2 23
r` c 6 | j j d }| j j || }| j |dkD | j |d | j j
k7 | j j
|d | dd }|S )zE
Reads a memory BIO. This only works on memory BIOs.
zchar **r N)rq r rs BIO_get_mem_datar r r )r rX r buf_lenbio_datas ra
_read_mem_biozBackend._read_mem_bio s iimmI&)),,S#6 GaK( CFdiinn 4599##CFG4Q7r` c | j j | }|| j j k( r| j j | }| j || j
j k7 | j
j || j j }t | ||| S || j j k( r| j j s| j j s| j j s| j j | }| j || j
j k7 | j
j || j j }| j }| j j || }| j |dk( | j! | j# | d| S || j j$ k( r| j j' | }| j || j
j k7 | j
j || j j( }t+ | || S || j j, k( r| j j/ | }| j || j
j k7 | j
j || j j0 }t3 | || S || j4 v r| j j7 | } | j | | j
j k7 | j
j | | j j8 } t; | | | S |t= | j dd k( r t? | | S |t= | j dd k( r tA | | S || j jB k( r tE | | S |t= | j dd k( r tG | | S tI d ) zd
Return the appropriate type of PrivateKey given an evp_pkey cdata
pointer.
r* rl N)passwordr+ EVP_PKEY_ED25519
EVP_PKEY_X448EVP_PKEY_ED448Unsupported key type.)%rs EVP_PKEY_id EVP_PKEY_RSAEVP_PKEY_get1_RSAr rq r r. r/ r EVP_PKEY_RSA_PSSCRYPTOGRAPHY_IS_LIBRESSLCRYPTOGRAPHY_IS_BORINGSSL#CRYPTOGRAPHY_OPENSSL_LESS_THAN_111Er] i2d_RSAPrivateKey_bioload_der_private_keyrb EVP_PKEY_DSAEVP_PKEY_get1_DSADSA_freer EVP_PKEY_ECEVP_PKEY_get1_EC_KEY EC_KEY_freer r~ EVP_PKEY_get1_DHDH_freer getattrr r" EVP_PKEY_X25519r$ r r )
r r4 r+ key_typer3 rX r dsa_cdataec_cdatadh_cdatas
ra _evp_pkey_to_private_keyz Backend._evp_pkey_to_private_key sU 99((2 tyy-- - 33H=I TYY^^ ; < Y 0B0BCI!/M
22 2II66II77IIAA 33H=I TYY^^ ; < Y 0B0BCI))+C))11#yAC q ),,""3' /M -
//
/ 33H=I TYY^^ ; < Y 0B0BCI!$ 8< <
..
.yy55h?H DIINN : ;yy||Hdii.C.CDH+D(HE E
'yy11(;H DIINN : ;yy||Hdii.?.?@H x: :
,>E
E%dH5 5
OTB
B"42 2
22
2$T84 4
,? ?r` c | j j | }|| j j k( r| j j | }| j || j
j k7 | j
j || j j }t | || S || j j k( r| j j s| j j s| j j s| j j | }| j || j
j k7 | j
j || j j }| j }| j j || }| j |dk( | j! | j# | S || j j$ k( r| j j' | }| j || j
j k7 | j
j || j j( }t+ | || S || j j, k( r| j j/ | }|| j
j k( r | j1 }t3 d| | j
j || j j4 }t7 | || S || j8 v r| j j; | } | j | | j
j k7 | j
j | | j j< } t? | | | S |tA | j dd k( r tC | | S |tA | j dd k( r tE | | S || j jF k( r tI | | S |tA | j dd k( r tK | | S tM d )zc
Return the appropriate type of PublicKey given an evp_pkey cdata
pointer.
rl zUnable to load EC keyre Nrf rg rh )'rs ri rj rk r rq r r. r/ r! rl rm rn ro r] i2d_RSAPublicKey_bioload_der_public_keyrb rr rs rt r ru rv r r rw r r~ rx ry r rz r r# r{ r% r r )
r r4 r| r3 rX r r} r~ r r s
ra _evp_pkey_to_public_keyz Backend._evp_pkey_to_public_key sF 99((2 tyy-- - 33H=I TYY^^ ; < Y 0B0BCI y(; ; 22 2II66II77IIAA 33H=I TYY^^ ; < Y 0B0BCI))+C))00i@C q )++D,>,>s,CD D
//
/ 33H=I TYY^^ ; < Y 0B0BCI y(; ;
..
.yy55h?H499>>) 779 !8&AAyy||Hdii.C.CDH*48D D
'yy11(;H DIINN : ;yy||Hdii.?.?@H h9 9
,>E
E$T84 4
OTB
B!$1 1
22
2#D(3 3
,? ?r` c t |t j t j t j t j
t j f S r )r r' r SHA224SHA256SHA384SHA512r s ra _oaep_hash_supportedz Backend._oaep_hash_supported s:
r` paddingc t |t ryt |t rzt |j t r`| j
r/t |j j t j ry| j |j j S t |t r\t |j t rB| j |j j xr | j |j S y)NTF) r r5 r4 _mgfr2 ru
_algorithmr' r r r3 r )r r s ra rsa_padding_supportedz Backend.rsa_padding_supported s gx (
%*W\\4*H !!j ''' **7<<+B+BCC
&:gllD+I,, '' @++G,>,>?
@ r` c & |dvr t d | j j }| j || j j
k7 | j j
|| j j }| j j ||| j j
d| j j
| j j
| j j
}| j |dk( t | | S )N)i rk i i z0Key size must be 1024, 2048, 3072, or 4096 bits.r rl )
r rs DSA_newr rq r r. rt DSA_generate_parameters_exr )r r( ctxr s ra generate_dsa_parametersz Backend.generate_dsa_parameters0 s 3 3 B
ii ! C499>> 12iill3 2 23ii22 IINN
IINN IINN IINN
C1H% dC((r`
parametersc n | j j |j }| j || j j
k7 | j j
|| j j }| j j | | j | }t | || S r ) rs
DSAparams_dup
_dsa_cdatar rq r r. rt DSA_generate_key_dsa_cdata_to_evp_pkeyr )r r r r4 s ra generate_dsa_private_keyz Backend.generate_dsa_private_keyH s ii%% ! !
C499>> 12iill3 2 23 ""3'..s3 dC22r` c F | j | }| j | S r )r r )r r( r s ra 'generate_dsa_private_key_and_parametersz/Backend.generate_dsa_private_key_and_parametersU s% 11(;
,,Z88r` c | j j |||| }| j |dk( | j j ||| }| j |dk( y r )rs DSA_set0_pqgr DSA_set0_key)r r} r< r= gpub_keypriv_keyr s ra _dsa_cdata_set_valuesz Backend._dsa_cdata_set_values[ sX ii$$Y1a8 C1H%ii$$YB C1H%r` c t j | |j j }| j j }| j
|| j j k7 | j j || j j }| j |j }| j |j }| j |j }| j |j j }| j |j }| j# |||||| | j% | } t' | || S r )r+ _check_dsa_private_numbersrB parameter_numbersrs r r rq r r. rt r& r< r= r yxr r r )
r r9 r r} r< r= r r r r4 s
ra load_dsa_private_numbersz Backend.load_dsa_private_numbersa s &&w/ # 2 2 D DII%%' I 78IILLDII,>,>? OO - / / 0 OO - / / 0 OO - / / 0//'"8"8":":;??799- ""9aAwI..y9 dIx88r` c t j |j | j j }| j || j j k7 | j j || j j }| j |j j }| j |j j }| j |j j }| j |j }| j j }| j |||||| | j! | }t# | || S r )r+ _check_dsa_parametersr rs r r rq r r. rt r& r< r= r r r r r ) r r9 r} r< r= r r r r4 s ra load_dsa_public_numbersz Backend.load_dsa_public_numbersv s !!'";";<II%%' I 78IILLDII,>,>? OOG 5 5 7 7 8 OOG 5 5 7 7 8 OOG 5 5 7 7 8//')),99>> ""9aAwI..y9 T9h77r` c . t j | | j j }| j || j
j k7 | j
j || j j }| j |j }| j |j }| j |j }| j j |||| }| j |dk( t | | S r )r+ r rs r r rq r r. rt r& r< r= r r r )r r9 r} r< r= r r s ra load_dsa_parameter_numbersz"Backend.load_dsa_parameter_numbers s !!'*II%%' I 78IILLDII,>,>? OOGII & OOGII & OOGII &ii$$Y1a8 C1H% dI..r` c | j }| j j || }| j |dk( |S r )rO rs EVP_PKEY_set1_DSAr )r r} r4 r s ra r z Backend._dsa_cdata_to_evp_pkey rR r` c | j S r )ru r s ra
dsa_supportedzBackend.dsa_supported s %%%%r` c F | j sy| j | S r )r r r s ra dsa_hash_supportedzBackend.dsa_hash_supported s" !!#,,Y77r` c R | j |t d|j z S )N )r rG
block_sizer s ra cmac_algorithm_supportedz Backend.cmac_algorithm_supported s* $$ s7Y%9%99:
r` c t | | S r r
r s ra create_cmac_ctxzBackend.create_cmac_ctx s D),,r` rd c R | j | j j ||| S r ) _load_keyrs PEM_read_bio_PrivateKey)r rS rd r+ s ra load_pem_private_keyz Backend.load_pem_private_key s+ ~~ II - - *
r` c 8 | j | }| j j d }| j j |j
| j j | j j | j j d | }|| j j k7 rA| j j || j j }| j | S | j | j j |j
}| j |dk( | j j |j
| j j | j j | j j d | }|| j j k7 rN| j j || j j }| j# | }t% | || S | j' y )N CRYPTOGRAPHY_PASSWORD_DATA * Cryptography_pem_password_cbrl )rX rq r rs PEM_read_bio_PUBKEYrX r addressof
_original_libr. rM r r BIO_resetr PEM_read_bio_RSAPublicKeyr/ r2 r! _handle_key_loading_error)r rS mem_biouserdatar4 r r3 s ra load_pem_public_keyzBackend.load_pem_public_key s $$T* 99==!?@9900 KK IINN II '')G
tyy~~ %yy||Hdii.E.EFH//9 9
"))%%gkk2C q ) ;; ##II++-K
I DIINN* IILLDII4F4F G 66yA$T9h??..0r` c | j | }| j j |j | j j
| j j
| j j
}|| j j
k7 r<| j j
|| j j }t | | S | j y r )
rX rs PEM_read_bio_DHparamsrX rq r r. ry r
r )r rS r r s ra load_pem_parameterszBackend.load_pem_parameters s $$T*9922 KK
tyy~~ %yy||Hdii.?.?@H x0 0 * * ,r` c | j | }| j || }|r| j || S | j | j j
||| S r )rX "_evp_pkey_from_der_traditional_keyr r rs d2i_PKCS8PrivateKey_bio)r rS rd r+ ra r s ra rq z Backend.load_der_private_key sk %%d+55hI 003
>> 11.
r` c H | j j |j | j j }|| j j k7 r?| j j || j j }| t d |S | j y )N4Password was given but private key is not encrypted.) rs d2i_PrivateKey_biorX rq r r. rM TypeErrorr )r ra rd r s ra r z*Backend._evp_pkey_from_der_traditional_key s~ ii**8<< H $)).. )),,sDII$;$;>J tyy~~ %yy||Hdii.?.?@H x0 0
YY
4
4 "))%%gkk2C q )yy227;; OH499>>) 99<<$))2C2CD$T844 &&(r` certc |j t j j }| j | }| j
j
|j | j j }| j || j j k7 | j j || j
j }|S r )
public_bytesr( EncodingDERrX rs d2i_X509_biorX rq r r r. X509_free)r r rS r r s ra
_cert2osslzBackend._cert2osslC s !7!7!;!;<$$T*yy%%gkk499>>B DDIINN 23yy||D$))"5"56 r` r c | j }| j j || }| j |dk( t j
| j
| S r )r] rs i2d_X509_bior rust_x509load_der_x509_certificaterb )r r rX r s ra
_ossl2certzBackend._ossl2certK sT %%'ii$$S$/ C1H%2243E3Ec3JKKr` csrc |j t j j }| j | }| j
j
|j | j j }| j || j j k7 | j j || j
j }|S r )
r r( r r rX rs d2i_X509_REQ_biorX rq r r r.
X509_REQ_free)r r rS r x509_reqs ra _csr2osslzBackend._csr2osslQ
6 6 : :;$$T*99--gkk499>>J H 6799<<$))*A*ABr` crlc |j t j j }| j | }| j
j
|j | j j }| j || j j k7 | j j || j
j }|S r )
r r( r r rX rs d2i_X509_CRL_biorX rq r r r.
X509_CRL_free)r r rS r x509_crls ra _crl2osslzBackend._crl2osslY r r`
public_keyc t |t t t f s t d | j | }| j j ||j }|dk7 r| j yy)NzGExpecting one of DSAPublicKey, RSAPublicKey, or EllipticCurvePublicKey.rl FT)
r r r! r r r rs X509_CRL_verify _evp_pkeyr )r r r r r s ra _crl_is_signature_validz Backend._crl_is_signature_valida sv
'
.
>>#&ii''*2F2FG !8 "r` c p | j | }| j j | }| j || j j
k7 | j j
|| j j }| j j || }|dk7 r| j yy)Nrl FT)
r rs X509_REQ_get_pubkeyr rq r r. rM X509_REQ_verifyr )r r r pkeyr s ra _csr_is_signature_validz Backend._csr_is_signature_valid{ s >>#&yy,,X6 DDIINN 23yy||D$))"9"9:ii''$7 !8 "r` c | j j |j |j dk7 r t d y )Nrl zKeys do not correspond)rs EVP_PKEY_cmpr r )r key1key2s ra _check_keys_correspondz Backend._check_keys_correspond s5 99 ! !$..$.. AQ F 56 6 Gr` c | j | }| j j d }|Ht j d| | j j | }||_ t | |_ ||j | j j | j j | j j d | }|| j j k( r|j dk7 rb| j |j dk( r t! d |j dk( sJ t# dj% |j& d z
| j) | j j+ || j j, }||j. dk( r t! d
||j. d k( s|J | j1 || S ) Nr rd r r z3Password was not given but private key is encryptedzAPasswords longer than {} bytes are not supported by this backend.rl r )rX rq r r _check_bytesliker rd r r rX r r rs r errorr r r r maxsizer r. rM calledr ) r openssl_read_funcrS rd r+ r r password_ptrr4 s ra r zBackend._load_key s $$T*99==!?@ " ":x 8 9900:L ,H !(mHO$ KK IINN II '')G
tyy~~ %~~"$$&>>R'#M $>>R///$++16(2B2BQ2F+G
..099<<$))*A*AB HOOq$8F
X__%9
,, 4
r` c n j }|s t d |d j j j j j
s|d j j j j j sS j j rH|d j j j j j r t d t fd|D r t d t j | }t d| )Nz|Could not deserialize key data. The data may be in an incorrect format or it may be encrypted with an unsupported algorithm.r z Bad decrypt. Incorrect password?c 3 K | ]> }|j j j j j @ y wr )_lib_reason_matchrs ERR_LIB_EVP'EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM).0r
r s ra z4Backend._handle_key_loading_error.. sB
# # %% AA
s AAz!Unsupported public key algorithm.zCould not deserialize key data. The data may be in an incorrect format, it may be encrypted with an unsupported algorithm, or it may be an unsupported key type (e.g. EC curves with explicit parameters).)r r r rs r EVP_R_BAD_DECRYPTERR_LIB_PKCS12!PKCS12_R_PKCS12_CIPHERFINAL_ERRORCryptography_HAS_PROVIDERS ERR_LIB_PROVPROV_R_BAD_DECRYPTanyr& _errors_with_text)r r errors_with_texts ` ra r z!Backend._handle_key_loading_error s %%'
1I ' ' %%tyy'B'B
ay** (( ;;
441I//II**II00 ?@ @
@A A ' 8 8 @ 4 !
r` curvec | j | }| j j | }|| j
j k( r| j y| j || j j k7 | j j | y# t $ r | j j }Y w xY w)NFT)
_elliptic_curve_to_nidr rs NID_undefEC_GROUP_new_by_curve_namerq r r r
EC_GROUP_free)r r curve_nidgroups ra elliptic_curve_supportedz Backend.elliptic_curve_supported s , 33E:I 44Y? DIINN " " TYY-@-@ @ A II # #E * $ , ++I ,s B B>=B>signature_algorithmc Z t |t j sy| j | S r )r r, ECDSAr' )r r( r s ra ,elliptic_curve_signature_algorithm_supportedz4Backend.elliptic_curve_signature_algorithm_supported s' -rxx8,,U33r` c F | j | r^| j | }| j j | }| j |dk( | j | }t
| || S t dj |j t j )z@
Generate a new private key on the named curve.
rl z#Backend object does not support {}.) r' _ec_key_new_by_curvers EC_KEY_generate_keyr _ec_cdata_to_evp_pkeyr r r r r UNSUPPORTED_ELLIPTIC_CURVE)r r r~ r r4 s ra #generate_elliptic_curve_private_keyz+Backend.generate_elliptic_curve_private_key s ( ( /007H))//9C q )11(;H+D(HE E&5< C1H%--h7&tXx@@
s
A E88Fr4 c | j | }| j | \ }}| j j | }| j || j
j k7 | j
j || j j }| j | }| j
j || j j }| j 5 }| j j |||| j
j | j
j | } | j | dk( | j j | }
| j j | } ||||
| | } | dk7 r| j t d d d d | j j! || } | j | dk( | j | } | j
j | | j j } | j j# || } | j | dk( | j% | }
t' | ||
S # 1 sw Y xY w)Nrl z'Unable to derive key from private_value)r- _ec_key_determine_group_get_funcrs r? r rq r r. r@ r& r5 rA EC_POINT_mul
BN_CTX_getr r rC r6 r/ r )r r4 r r~ get_funcr& rD valuerE r bn_xbn_yprivater4 s ra !derive_elliptic_curve_private_keyz)Backend.derive_elliptic_curve_private_keyZ s ,,U3 ??I% &&u- ETYY^^ 34 UDII$;$;<
. UDII$;$;<
6))((ueTYY^^TYY^^VC
q )99''/D99''/D5%tV C1H%//-0)),,w (?(?@ii..xA C1H%--h7'hAA/
s
*B?I11I:c F | j | }| j | S r )r! _ec_key_new_by_curve_nid)r r r% s ra r- z Backend._ec_key_new_by_curve s# //6 ,,Y77r` r% c | j j | }| j || j j k7 | j j || j j S r )rs EC_KEY_new_by_curve_namer rq r r. rw )r r% r~ s ra rR z Backend._ec_key_new_by_curve_nid sP 9955i@ H 67yy||Hdii&;&;<
II(():):)<= ++ +&6==ejjI33
r` c # K | j j }| j || j j k7 | j j || j j }| j j | | | j j | y # | j j | w xY wwr ) rs
BN_CTX_newr rq r r. BN_CTX_free BN_CTX_start
BN_CTX_end)r rE s ra rA zBackend._tmp_bn_ctx s %%' Fdiinn 45 fdii&;&;< v& )L II (DII (s BCB1 C1 CCc
| j || j j k7 | j j d }| j || j j
k7 | j j
| }| j || j j k7 | j j | }| j || j j k7 | j j | }| j || j j
k7 ||k( r-| j j r| j j }n| j j }|sJ ||fS )zu
Given an EC_KEY determine the group and what function is required to
get point coordinates.
s characteristic-two-field) r rq r rs ra r" r> EC_GROUP_method_ofEC_METHOD_get_field_typeCryptography_HAS_EC2M$EC_POINT_get_affine_coordinates_GF2m#EC_POINT_get_affine_coordinates_GFp)r r
nid_two_fieldr& methodnidrK s ra rH z(Backend._ec_key_determine_group_get_func s#
C499>> 12 ,,-HI
MTYY-@-@ @A ++C0 ETYY^^ 34--e4 Fdiinn 45ii008 C499#6#6 67 - DII$C$CyyEEHyyDDHx r` r r c |dk s|dk r t d | j j | j | | j j
}| j j | j | | j j
}| j j
||| }|dk7 r| j t d y)zg
Sets the public key point in the EC_KEY context to the affine x and y
values.
r z2Invalid EC key. Both x and y must be non-negative.rl r3 N)r rq r. r& rs r0 (EC_KEY_set_public_key_affine_coordinatesr )r r r r r s ra r7 z1Backend._ec_key_set_public_key_affine_coordinates s
q5AE D
IILL +TYY->-> ? IILL +TYY->-> ?ii@@aK !8 " ./ / r` encodingr encryption_algorithmc t |t j s t d t |t j s t d t |t j
s t d t |t j rd}nt |t j r%|j }t | dkD rut d t |t j rE|j |cxu r t j j u rn t d |j }n t d |t j j u r|t j j u r| j j" }n>|t j j$ u r| j j& }n t d | j) ||| S |t j j* u r| j, r%t |t j s t d | j j/ | } |t j j u r| | j j0 k( r| j j2 }nk| | j j4 k( r| j j6 }n;| | j j8 k( r| j j: }n t d
| j) ||| S |t j j$ u r|r t d | | j j0 k( r| j j< }nk| | j j8 k( r| j j> }n;| | j j4 k( r| j j@ }n t d
| jC || S t d |t j j u r>|t j j u rtE jF ||| S t d
t d )N/encoding must be an item from the Encoding enumz2format must be an item from the PrivateFormat enumzBEncryption algorithm must be a KeySerializationEncryption instancer` i zBPasswords longer than 1023 bytes are not supported by this backendzUnsupported encryption typez Unsupported encoding for PKCS8zCEncrypted traditional OpenSSL format is not supported in FIPS mode.z+Unsupported key type for TraditionalOpenSSLzDEncryption is not supported for DER encoded traditional OpenSSL keysz+Unsupported encoding for TraditionalOpenSSLz=OpenSSH private key format can only be used with PEM encoding format is invalid with this key)$r r( r r
PrivateFormatKeySerializationEncryption NoEncryptionBestAvailableEncryptionrd r r _KeySerializationEncryption_formatOpenSSHPKCS8PEMrs PEM_write_bio_PKCS8PrivateKeyr i2d_PKCS8PrivateKey_bio_private_key_bytes_via_bioTraditionalOpenSSLru ri rj PEM_write_bio_RSAPrivateKeyrr PEM_write_bio_DSAPrivateKeyru PEM_write_bio_ECPrivateKeyrp i2d_ECPrivateKey_bioi2d_DSAPrivateKey_bio_bio_func_outputrQ _serialize_ssh_private_key)
r rt r ru r r4 cdatard write_bior| s
ra _private_key_byteszBackend._private_key_bytes s (M$:$:; MN N&-"="=>D
-"J"J
*M,F,F GH
-"G"G
,44H8}t# #
$m&O&O
%,,3 **223 :; ; ,44H :; ; ]0066 6=11555 II C C ] 3 3 7 77 II = = !ABB228X
]00CC C!!*$m&@&@+ !. yy,,X6H=11555tyy 5 55 $ E EI !7!77 $ E EI !6!66 $ D DI$E 66 uh =11555$3 tyy 5 55 $ ? ?I !6!66 $ > >I !7!77 $ ? ?I$E ,,Y>> JK K ]0088 8=1155555#7 %
:;;r` c |s| j j }n| j j d }| j ||||t | | j j | j j S )Ns aes-256-cbc)rq r rs EVP_get_cipherbynamer r )r r r4 rd r s ra r z"Backend._private_key_bytes_via_bio` sd J 77GJ$$ M IINN IINN
r` c ~ | j } ||g| }| j |dk( | j | S r )r] r rb )r r argsrX r s ra r zBackend._bio_func_outputq sB %%'#d# C1H%!!#&&r` c V t |t j s t d t |t j s t d |t j j
u r|t j j u r| j j }n>|t j j u r| j j }n t d | j || S |t j j u r| j j | }|| j j k7 r t d |t j j u r| j j }n>|t j j u r| j j" }n t d | j || S |t j j$ u r<|t j j$ u rt' j( | S t d t d )Nrw z1format must be an item from the PublicFormat enumz8SubjectPublicKeyInfo works only with PEM or DER encodingz+PKCS1 format is supported only for RSA keysz)PKCS1 works only with PEM or DER encodingz1OpenSSH format must be used with OpenSSH encodingrx )r r( r r PublicFormatSubjectPublicKeyInfor rs PEM_write_bio_PUBKEYr i2d_PUBKEY_bior r PKCS1ri rj PEM_write_bio_RSAPublicKeyr r rQ serialize_ssh_public_key)r rt r r r4 r r r| s ra _public_key_byteszBackend._public_key_bytesw s (M$:$:; MN N&-"<"<=C
]//DD D=11555 II : : ] 3 3 7 77 II 4 4 N ((H= = ]//55 5yy,,X6H499111 !NOO=11555 II @ @ ] 3 3 7 77 II : : !LMM((E: : ]//77 7=1199933C88 C
:;;r` c 0 | j j S r rs rn r s ra dh_supportedzBackend.dh_supported 996666r` generatorc 8 |t j k r(t dj t j |dvr t d | j j }| j
|| j j k7 | j j || j j }| j j |||| j j }|dk7 r | j }t d| t | | S )Nz$DH key_size must be at least {} bits) zDH generator must be 2 or 5rl z Unable to generate DH parameters)r* _MIN_MODULUS_SIZEr r rs DH_newr rq r r. ry DH_generate_parameters_exr r
)r r r( dh_param_cdatar r s ra generate_dh_parametersz Backend.generate_dh_parameters s b** * 6==((
F " :; ; ))+ Ndiinn <= ndii6G6GHii11 Hi
!8335F ?H H T>22r` c | j }| j j || }| j |dk( |S r )rO rs EVP_PKEY_set1_DHr )r r r4 r s ra _dh_cdata_to_evp_pkeyz Backend._dh_cdata_to_evp_pkey s= ++-ii((8< C1H%r` c t |j | }| j j | }| j |dk( | j | }t
| || S r )r _dh_cdatars DH_generate_keyr r r )r r dh_key_cdatar r4 s ra generate_dh_private_keyz Backend.generate_dh_private_key s` & $
ii'' 5 C1H%--l; T<::r` c D | j | j || S r )r r )r r r( s ra &generate_dh_private_key_and_parametersz.Backend.generate_dh_private_key_and_parameters s' ++ ' ' 8 <
r` c |j j }| j j }| j || j
j k7 | j
j || j j }| j |j }| j |j }|j | j |j }n| j
j }| j |j j }| j |j }| j j |||| } | j | dk( | j j! ||| } | j | dk( | j
j# dd }
| j j% ||
} | j | dk( |
d dk7 r9|j dk( r |
d | j j& z dk( s t) d | j+ | } t- | || S )Nrl int[]r r z.DH private numbers did not pass safety checks.)rB r rs r r rq r r. ry r& r< r r= r r DH_set0_pqg DH_set0_keyr DH_checkDH_NOT_SUITABLE_GENERATORr r r ) r r9 r r r< r r= r r r codesr4 s ra load_dh_private_numbersz Backend.load_dh_private_numbers s $ 2 2 D D99##% H 6799<<$))*;*;< OO - / / 0 OO - / / 0 * 1 3 34A A//'"8"8":":;??799-ii##HaA6 C1H%ii##Hgx@ C1H%
gq)ii 51 C1H% 8q= 1 $a499>>>!C MN N--h7 T8X66r` c F | j j }| j || j j k7 | j j || j j }|j }| j |j }| j |j }|j | j |j }n| j j }| j |j }| j j |||| }| j |dk( | j j ||| j j }| j |dk( | j | } t! | || S r )rs r r rq r r. ry r r& r< r r= r r r r r )
r r9 r r r< r r= r r r4 s
ra load_dh_public_numbersz Backend.load_dh_public_numbers sB 99##% H 6799<<$))*;*;< # 5 5 OO - / / 0 OO - / / 0 * 1 3 34A A//')),ii##HaA6 C1H%ii##Hgtyy~~F C1H%--h7D(H55r` c J | j j }| j || j j k7 | j j || j j }| j |j }| j |j }|j | j |j }n| j j }| j j |||| }| j |dk( t | | S r )
rs r r rq r r. ry r& r< r r= r r
)r r9 r r< r r= r s ra load_dh_parameter_numbersz!Backend.load_dh_parameter_numbers3 s 99##% H 6799<<$))*;*;< OOGII & OOGII & 99 *A Aii##HaA6 C1H% T8,,r` r< r r= c | j j }| j || j j k7 | j j || j j }| j | }| j | }|| j | }n| j j }| j j |||| }| j |dk( | j j dd }| j j || }| j |dk( |d dk( S )Nrl r r ) rs r r rq r r. ry r& r r r )r r< r r= r r r s ra dh_parameters_supportedz Backend.dh_parameters_supportedG s 99##% H 6799<<$))*;*;< OOA OOA ="A Aii##HaA6 C1H%
gq)ii 51 C1H%Qx1} r` c 4 | j j dk( S r )rs r r s ra dh_x942_serialization_supportedz'Backend.dh_x942_serialization_supported_ s yy66!;;r` c h t | dk7 r t d | j }| j j || j j
}| j
|dk( | j j ||t | }| j
|dk( t | | S )N z%An X25519 public key is 32 bytes longrl ) r r rO rs EVP_PKEY_set_type
NID_X25519r EVP_PKEY_set1_tls_encodedpointr% )r rS r4 r s ra x25519_load_public_bytesz Backend.x25519_load_public_bytesb s t9? DE E++-ii))(DII4H4HI C1H%ii66 dCI
C1H% h//r` c x t | dk7 r t d d}| j d 5 }||dd ||dd | j | }| j j |j | j j }d d d | j | j j k7 | j j || j j }| j | j j | | j j k( t | | S # 1 sw Y xY w)Nr z&An X25519 private key is 32 bytes longs 0. 0+en" 0 r )r r _zeroed_bytearrayrX rs r rX rq r r r. rM ri r{ r$ )r rS pkcs8_prefixbarX r4 s ra x25519_load_private_bytesz!Backend.x25519_load_private_bytesq s & t9? EF FB
#
#B
'2#BqHBrsG$$R(Cyy33CGGTYY^^LH (
H 6799<<$))*A*AB II ! !( +tyy/H/H H
!x00 (
's AD00D9c | j j || j j }| j || j j k7 | j j || j j }| j j | }| j |dk( | j j d }| j j || }| j |dk( | j |d | j j k7 | j j |d | j j }|S )Nrl EVP_PKEY **r ) rs EVP_PKEY_CTX_new_idrq r r r. EVP_PKEY_CTX_freeEVP_PKEY_keygen_initr EVP_PKEY_keygenrM )r rq evp_pkey_ctxr evp_ppkeyr4 s ra _evp_pkey_keygen_gczBackend._evp_pkey_keygen_gc s yy44S$))..I LDIINN :;yy||L$))2M2MN ii,,\: C1H%IIMM-0 ii'' i@ C1H% IaLDIINN :;99<< ! dii.E.EFr` c d | j | j j }t | | S r )r rs r r$ rN s ra x25519_generate_keyzBackend.x25519_generate_key s) ++DII,@,@A x00r` c J | j ry| j j S r )ru rs rm r s ra x25519_supportedzBackend.x25519_supported s! 995555r` c t | dk7 r t d | j j | j j | j
j |t | }| j || j
j k7 | j
j || j j }t | | S )N8 z#An X448 public key is 56 bytes long) r r rs EVP_PKEY_new_raw_public_keyNID_X448rq r r r. rM r# r rS r4 s ra x448_load_public_bytesz Backend.x448_load_public_bytes s t9? BC C9988 II c$i
H 6799<<$))*A*AB dH--r` c t | dk7 r t d | j j | }| j j | j j | j j |t | }| j || j j k7 | j j || j j }t | | S )Nr z$An X448 private key is 56 bytes long) r r rq r rs EVP_PKEY_new_raw_private_keyr r r r. rM r" r rS rW r4 s ra x448_load_private_bytesz Backend.x448_load_private_bytes s t9? CD D99((.9999 II #d)
H 6799<<$))*A*AB tX..r` c d | j | j j }t | | S r )r rs r r" rN s ra x448_generate_keyzBackend.x448_generate_key s) ++DII,>,>? tX..r` c | | j ry| j j xr | j j S r )ru rs rm rn r s ra x448_supportedzBackend.x448_supported s8 22 2
8II777
r` c H | j ry| j j S r )ru rs CRYPTOGRAPHY_HAS_WORKING_ED25519r s ra ed25519_supportedzBackend.ed25519_supported s yy999r` c t j d| t | t j k7 r t d | j j | j j | j j |t | }| j || j j k7 | j j || j j }t | | S )NrS z&An Ed25519 public key is 32 bytes long)r _check_bytesr r. _ED25519_KEY_SIZEr rs r NID_ED25519rq r r r. rM r r s ra ed25519_load_public_bytesz!Backend.ed25519_load_public_bytes s 64( t911 1 EF F9988 II ! !499>>4T
H 6799<<$))*A*AB x00r` c t | t j k7 r t d t j
d| | j j | }| j j | j j | j j |t | }| j || j j k7 | j j || j j }t | | S )Nz'An Ed25519 private key is 32 bytes longrS )r r. r r r r rq r rs r r r r r. rM r r s ra ed25519_load_private_bytesz"Backend.ed25519_load_private_bytes s t911 1 FG G
vt,99((.9999 II ! !499>>8SY
H 6799<<$))*A*AB!$11r` c d | j | j j }t | | S r )r rs r r rN s ra ed25519_generate_keyz Backend.ed25519_generate_key s) ++DII,A,AB!$11r` c | | j ry| j j xr | j j S r )ru rs #CRYPTOGRAPHY_OPENSSL_LESS_THAN_111Brn r s ra ed448_supportedzBackend.ed448_supported s8 == =
8II777
r` c t j d| t | t k7 r t d | j
j
| j
j | j j |t | }| j || j j k7 | j j || j
j }t | | S )NrS z$An Ed448 public key is 57 bytes long)r r r r r rs r NID_ED448rq r r r. rM r r s ra ed448_load_public_bytesz Backend.ed448_load_public_bytes s
64( t9 ' CD D9988 II s4y
H 6799<<$))*A*AB tX..r` c t j d| t | t k7 r t d | j
j
| }| j j | j j | j
j |t | }| j || j
j k7 | j
j || j j }t | | S )NrS z%An Ed448 private key is 57 bytes long)r r r r r rq r rs r r r r r. rM r r s ra ed448_load_private_bytesz Backend.ed448_load_private_bytes s
vt, t9 ' DE E99((.9999 II 3t9
H 6799<<$))*A*AB h//r` c d | j | j j }t | | S r )r rs r r rN s ra ed448_generate_keyzBackend.ed448_generate_key s) ++DII,?,?@ h//r` rC rc | j j d| }| j j | }| j j |t | |t | |||t j ||
} | dk7 r6| j }
d|z |z dz } t dj | |
| j j | d d S )Nr rl i zJNot enough memory to derive key. These parameters require {} MB of memory.) rq r r rs EVP_PBE_scryptr rP
_MEM_LIMITr MemoryErrorr r ) r r r r rC r r< r r r r
min_memorys ra
derive_scryptzBackend.derive_scrypt s iimm -v6 9900 >ii&& I
!8335F q11J $$*F:$6
yy $Q''r` c t j | }| j r|| j vry|j d r| j
j dk( S | j
j | | j j k7 S )NFs -sivrl )
r _aead_cipher_nameru
_fips_aeadendswithrs r r rq r )r r cipher_names ra aead_cipher_supportedz Backend.aead_cipher_supportedA st ,,V4 +T__"D (99@@AE E ..{;tyy~~M
r` c # ~ K t | } | | j || y# | j || w xY ww)z
This method creates a bytearray, which we copy data into (hopefully
also from a mutable buffer that can be dynamically erased!), and then
zero when we're done.
N) bytearray
_zero_data)r r r s ra r zBackend._zeroed_bytearrayO s8 v
(H OOB 'DOOB 's =& =:=c . t | D ] }d||< y r )range)r rS r is ra r zBackend._zero_data\ s v ADG r` c # K || j j yt | }| j j d|dz }| j j ||| | | j | j j
d| | y# | j | j j
d| | w xY ww)a
This method takes bytes, which can be a bytestring or a mutable
buffer like a bytearray, and yields a null-terminated version of that
data. This is required because PKCS12_parse doesn't take a length with
its password char * and ffi.from_buffer doesn't provide null
termination. So, to support zeroing the data via bytearray we
need to build this ridiculous construct that copies the memory, but
zeroes it after use.
Nr rl z uint8_t *)rq r r r memmover cast)r rS data_lenr s ra _zeroed_null_terminated_bufz#Backend._zeroed_null_terminated_bufc s <)).. 4yH))--(Q,7C II c4 2
L {C @(K {C @(Ks A#C&B *-C.CCc | j || }|j |j r|j j nd |j D cg c] }|j c}fS c c}w r ) load_pkcs12r r certificateadditional_certs)r rS rd pkcs12r s ra %load_key_and_certificates_from_pkcs12z-Backend.load_key_and_certificates_from_pkcs12z sb !!$1 JJ'-{{FKK # #*0*A*A B*A$T
*A B
Cs A&c |t j d| | j | }| j j |j
| j j }|| j j k( r| j t d | j j || j j }| j j d }| j j d }| j j d }| j | 5 }| j j ||||| } d d d dk( r| j t d d }
d } g } |d | j j k7 rF| j j |d | j j }
| j! |
d } |d | j j k7 r| j j |d | j j" }| j% | }d }| j j' || j j }|| j j k7 r| j j) | }t+ || }
|d | j j k7 r| j j |d | j j, }| j j/ |d }| j j0 s| j j2 r t5 | }nt7 t5 | }|D ] }| j j9 || }| j; || j j k7 | j j || j j" }| j% | }d }| j j' || j j }|| j j k7 r| j j) | }| j= t+ || t? | |
| S # 1 sw Y :xY w)
Nrd z!Could not deserialize PKCS12 datar zX509 **z Cryptography_STACK_OF_X509 **r z Invalid password or PKCS12 dataFr* ) r r rX rs d2i_PKCS12_biorX rq r r r r. PKCS12_freer r PKCS12_parserM r r r X509_alias_get0r rU sk_X509_free sk_X509_numr rn r reversed
sk_X509_valuer r rV )r rS rd rX p12 evp_pkey_ptrx509_ptr sk_x509_ptr password_bufr r r additional_certificatesr4 r cert_objr
maybe_namesk_x509r indicesr addl_cert addl_names ra r zBackend.load_pkcs12 s| " ":x 8 &ii&&sww ? $)).. " @A Aiill3 5 56yy}}]3 99==+iimm$CD
-
-h
7<))((\<;C 8 !8 " >? ?"$ ?diinn ,yy||LOTYY5L5LMH // 0 C A;$)).. (99<< TYY-@-@ADt,HD 224 HJTYY^^+yy''
3$Xt4D q>TYY^^ +iill;q>4993I3IJG))'' A7C ==9966 *"5:. yy..w:##DDIINN$:;yy||D$))*=*=> OOD 1 !YY 6 6tTYY^^ L
/ $ 0 0 }
g }|D ] }t |t@ rs|jB }| jE |jF }| jI | 5 }| j jK ||d }| j3 |dk( d d d n| jE | }|jM | | j jO |
| }tP j3 |dk\ | jI | 5 }| jI | 5 }|r| jE | n| j
j }|
|jR }n| j
j }| j jU |||||
||| |
d
}d d d | j j. rN| | j
j k7 r5| j jW |d| j
j d|
| d d d | j3 | j
j k7 | j
j= || j jX }| j[ }| j j] || }| j3 |dkD | j_ | S # 1 sw Y xY w# 1 sw Y ,xY w# 1 sw Y xY w) Nr r r i N rl z2PBESv2 is not supported by this version of OpenSSLzBSetting MAC algorithm is not supported by this version of OpenSSL.z Unsupported key encryption type)0r r r r( r{ rq r r| rs r NID_aes_256_cbc&NID_pbe_WithSHA1And3_Key_TripleDES_CBCrd r} r~ ry PKCS12_key_cert_algorithmrT PBESv1SHA1And3KeyTripleDESCBCPBESv2SHA256AndAES256CBCr
_hmac_hash Cryptography_HAS_PKCS12_SET_MACr r _kdf_roundsr r sk_X509_new_nullr. r& rU
friendly_namer r r X509_alias_set1r sk_X509_pushbackendr
PKCS12_createPKCS12_set_macr# r] i2d_PKCS12_biorb )r r r r r6 ru rd nid_certnid_key pkcs12_itermac_itermac_alg
keycertalgr2 ossl_cascaca_aliasossl_ca ca_name_bufr r. name_buf ossl_certr4 r* rX s ra (serialize_key_and_certificates_to_pkcs12z0Backend.serialize_key_and_certificates_to_pkcs12 s vt , *M,F,F GHGKHiinnG
-"G"G
yy<< 9944 ))33 99KK ))JJ K HiinnG+44H $m&O&O
%,, **112
HG KH+44H-AAJT ? ?? 99KK ))JJt < <<yyDD.L 9944 ))33!))) $..:yy@@.. >>(33 ##Gtyy~~$=> ))..#//; 2 > > >? ? ;#c(a-iinnGii002Giill7DII,B,BCG H b"34 ! / /H "oobnn =G 99 $ "ii 7 7 #[" ++C1H5
#oob 1G(ii,,Wg>&&sax0 "
-
-h
7<11$7859DOOD 1tyy~~ ? "}}H #yy~~Hii-- 8* 99tyy~~- (( IINN 3 8F
C499>> 12iill3 5 56%%'ii&&sC0 C!G$!!#&&m 87 8
7s2 72V=W-A3W
A,W=W
W WW c N | j ry| j j dk( S r )ru rs Cryptography_HAS_POLY1305r s ra poly1305_supportedzBackend.poly1305_supportedp s# yy22a77r` c t j d| t | t k7 r t d t | | S )Nr z A poly1305 key is 32 bytes long)r r r r r r )r r s ra create_poly1305_ctxzBackend.create_poly1305_ctxu s8
uc* s8) ) >? ? c**r` c 0 | j j S r r r s ra pkcs7_supportedzBackend.pkcs7_supported| r r` c t j d| | j | }| j j |j
| j j | j j | j j }|| j j k( r| j t d | j j || j j }| j | S NrS zUnable to parse PKCS7 data)
r r rX rs PEM_read_bio_PKCS7rX rq r r r r.
PKCS7_free_load_pkcs7_certificatesr rS rX p7s ra load_pem_pkcs7_certificatesz#Backend.load_pem_pkcs7_certificates s 64( &
YY
)
) GGTYY^^TYY^^TYY^^
" 9: :
YY\\"dii 2 2
3,,R00r` c t j d| | j | }| j j |j
| j j }|| j j k( r| j t d | j j || j j }| j | S r_ )
r r rX rs
d2i_PKCS7_biorX rq r r r r. ra rb rc s ra load_der_pkcs7_certificatesz#Backend.load_der_pkcs7_certificates s 64( &
YY
$
$SWWdiinn
=
" 9: :
YY\\"dii 2 2
3,,R00r` c H | j j |j }| j || j j k7 || j j
k7 r)t
dj | t j |j j j }| j j | }g }t | D ] }| j j || }| j || j j" k7 | j j% | }| j |dk( | j j' || j j( }| j+ | } |j- | |S )NzNOnly basic signed structures are currently supported. NID for this data was {}rl )rs OBJ_obj2nidr r r" NID_pkcs7_signedr r r UNSUPPORTED_SERIALIZATIONr> signr r' r r) rq r X509_up_refr. r r r )
r rd rq r2 r certsr r r r s
ra rb z Backend._load_pkcs7_certificates s= ii##BGG, C499#6#6 67 $)),, ,&((.s 22
$$))..ii##G,sA99**7A6D 6 7))''-C q )99<<dii&9&9:D??4(D LL r` r )r N)r\ r] r^ __doc__r r r; r r' r r r r
SHA512_224
SHA512_256SHA3_224SHA3_256SHA3_384SHA3_512SHAKE128SHAKE256r r, SECP224R1 SECP256R1 SECP384R1 SECP521R1rV _fips_rsa_min_key_size _fips_rsa_min_public_exponent_fips_dsa_min_modulus_fips_dh_min_key_size_fips_dh_min_modulusr strr r typingOptionalListr&
_OpenSSLErrorr rt r r
contextlibr r r| r r r r bytes
HashAlgorithmr r r r r r r r HashContextr r: rO r r rw r r r r r
r _OpenSSLErrorWithTextr r r& r/
RSAPrivateKeyr5 r8 RSAPrivateNumbersrG RSAPublicNumbers RSAPublicKeyrJ rO r2 rX r] rb r7 r r8 r r r) r r+
DSAParametersr
DSAPrivateKeyr r r DSAPrivateNumbersr DSAPublicNumbers DSAPublicKeyr DSAParameterNumbersr r r r r r9 r r r r r* DHParametersr rq r r r r CertificateAnyr r CertificateSigningRequestr CertificateRevocationListr r6 r r r r NoReturnr
EllipticCurver' EllipticCurveSignatureAlgorithmr+ EllipticCurvePrivateKeyr1 EllipticCurvePrivateNumbersr9 EllipticCurvePublicNumbersEllipticCurvePublicKeyr; rF rP r- rR rW rX r/ r! rA rH r7 r( r ry rz r r r r r r r r DHPrivateKeyr r DHPrivateNumbersr DHPublicNumbers DHPublicKeyr DHParameterNumbersr r r r1 X25519PublicKeyr X25519PrivateKeyr r r r r0
X448PublicKeyr X448PrivateKeyr r r r r. Ed25519PublicKeyr Ed25519PrivateKeyr r r r- Ed448PublicKeyr Ed448PrivateKeyr r r r Iteratorr r r r Tupler rV r rR rS rV rY r r[ r] re rh rb r_ r` ra rc rc s
D J FM
L
"$)! I 55:&
#
GKE E G,A,A BCE
E $ 5 . * *&
*5 5 c / /22%+%9%92 2
0D0D 9M9M
((<(< ( (. --.
.:$ : .(<(< . .- --- -
, ,d ,t , >BHK%K-1K K
K%K-1K K
.v/C/C . .(''( ( (
(
(
(02W-B-B!C 2< W22 3<
c "
"
.1
.
"
.1
'
&&'
)-'
'
R
8++
8
8 K% K E D@8<D@ D@L7@3C 7@r
f.B.B
t
-> 4 &) )8I8I )0 3 ++ 3 399 9 & 9,,9 9*8++8 8&/../ / &t &8F,@,@ 8T 8
T
-)= -, -
//%(
)-
(1 (12B (1T
-
-"//
- //%( )-
4 1 12B 1.) )"// )$t / / FJJ Lvzz Ld.>.> L T ; ;
T ; ;
+
+ 8
4
11
72
h-6?? -^b.>.> 4 4 ? ? 4 4
4%% # #,B55B # #B. A44 A " " AA%%A49A " "A,%B %B)+)9)9%B # #%BN8"*:*: 8=# =
)+)9)9
B,<,< " ) ) 80 0 0$x< ((x< ++x< , F F x<
x r? r@ rA rB rC rD rE rF ,cryptography.hazmat.primitives.ciphers.modesrG rH rI rJ rK rL rM rN rO "cryptography.hazmat.primitives.kdfrP ,cryptography.hazmat.primitives.serializationrQ 3cryptography.hazmat.primitives.serialization.pkcs12rR rS rT rU rV
namedtuplerW r[ rc r r rE r_ r` ra r s5
% $ B 5 G B
E B A 8 @ H
6 < $[
#
#L5*2E
F
m$ m$`I 2JW Jc J
)r`