/var/opt/nydus/ops/oscrypto/__pycache__
Edit: /var/opt/nydus/ops/oscrypto/__pycache__/_asymmetric.cpython-312.pyc (32030B)
N jx h d dl mZmZmZmZ d dlZd dlZd dlZd dlZddl m
Z
m Z m Z m
Z
mZmZmZmZmZmZmZmZmZmZmZ ddlmZmZm Z ddl m Z m Z m Z m!Z!m"Z" ddl#m$Z$ ddl%m&Z& dd l'm(Z(m)Z)m*Z* G d
d Z+ G d d
Z, G d d Z-d Z.d Z/e e!e e"e dZ0d Z1d Z2ddZ3ddZ4d Z5d Z6d Z7d Z8y) )unicode_literalsdivisionabsolute_importprint_functionN )CertBag Certificate
DSAPrivateKey ECPrivateKey
EncryptedDataEncryptedPrivateKeyInfoInteger OctetStringPfxPrivateKeyInfo
PublicKeyInfo
RSAPrivateKey RSAPublicKey SafeContentsunarmor)pbkdf1pbkdf2
pkcs12_kdf)aes_cbc_pkcs7_decryptdes_cbc_pkcs5_decryptrc2_cbc_pkcs5_decrypt rc4_decrypttripledes_cbc_pkcs5_decrypt)constant_compare)pretty_message)byte_clsstr_cls type_namec Z e Zd ZdZdZd Zed Zed Zed Z ed Z
y)_PrivateKeyBaseNc | j dk( r| j d j S | j dk( r\| j d d }t d|d |d |d | j j | j d j d
S | j d k( rM| j d j }| j d d |d< | j j |d < |S y
)a.
Unwraps the private key into an asn1crypto.keys.RSAPrivateKey,
asn1crypto.keys.DSAPrivateKey or asn1crypto.keys.ECPrivateKey object
:return:
An asn1crypto.keys.RSAPrivateKey, asn1crypto.keys.DSAPrivateKey or
asn1crypto.keys.ECPrivateKey object
rsa private_keydsaprivate_key_algorithm
parametersr pqgversionr, r- r.
public_keyr( ecr1 N) algorithmasn1parsedr
r1 unwrap)selfparamsoutputs E/opt/nydus/tmp/pip-target-a90h98xg/lib/python/oscrypto/_asymmetric.pyr6 z_PrivateKeyBase.unwrap- s >>U "99]+22 2 >>U "YY 67 EF C[C[C[ "oo 4 4 6 #yy 7 > >
"
>>T !YY}-44F#'99-D#El#SF< #'??#9#9#;F< M " c . | j j S zO
:return:
A unicode string of "rsa", "dsa" or "ec"
r4 r3 r7 s r: r3 z_PrivateKeyBase.algorithmK yy"""r; c 4 | j j d S H
:return:
A unicode string of EC curve name
r r4 curver? s r: rE z_PrivateKeyBase.curveT yyq!!r; c . | j j S zS
:return:
The number of bits in the key, as an integer
r4 bit_sizer? s r: rJ z_PrivateKeyBase.bit_size] yy!!!r; c . | j j S zT
:return:
The number of bytes in the key, as an integer
r4 byte_sizer? s r: rO z_PrivateKeyBase.byte_sizef r@ r; ) __name__
__module__ __qualname__r4 _fingerprintr6 propertyr3 rE rJ rO r; r: r% r% ( sa DL < # # " " " " # #r; r% c j e Zd ZdZdZd Zed Zed Zed Z ed Z
ed Z y)_PublicKeyBaseNc p | j dk( r| j d S | j d j S )a7
Unwraps a public key into an asn1crypto.keys.RSAPublicKey,
asn1crypto.core.Integer (for DSA) or asn1crypto.keys.ECPointBitString
object
:return:
An asn1crypto.keys.RSAPublicKey, asn1crypto.core.Integer or
asn1crypto.keys.ECPointBitString object
r2 r1 )r3 r4 r5 r? s r: r6 z_PublicKeyBase.unwrapu s4 >>T !99\* *yy &---r; c h | j t | j d | _ | j S )aZ
Creates a fingerprint that can be compared with a private key to see if
the two form a pair.
This fingerprint is not compatible with fingerprints generated by any
other software.
:return:
A byte string that is a sha256 hash of selected components (based
on the key type)
N)rS r4 r? s r: fingerprintz_PublicKeyBase.fingerprint s/ $ ,TYY =D r; c . | j j S r= r> r? s r: r3 z_PublicKeyBase.algorithm r@ r; c 4 | j j d S rB rD r? s r: rE z_PublicKeyBase.curve rF r; c . | j j S rH rI r? s r: rJ z_PublicKeyBase.bit_size rK r; c . | j j S rM rN r? s r: rO z_PublicKeyBase.byte_size r@ r; ) rP rQ rR r4 rS r6 rT rZ r3 rE rJ rO rU r; r: rW rW p su DL
. ! !" # # " " " " # #r; rW c P e Zd ZdZed Zed Zed Zed Zy)_CertificateBaseNc . | j j S r= )r1 r3 r? s r: r3 z_CertificateBase.algorithm (((r; c . | j j S )rC )r1 rE r? s r: rE z_CertificateBase.curve s $$$r; c . | j j S )zZ
:return:
The number of bits in the public key, as an integer
)r1 rJ r? s r: rJ z_CertificateBase.bit_size s '''r; c . | j j S )z[
:return:
The number of bytes in the public key, as an integer
)r1 rO r? s r: rO z_CertificateBase.byte_size rb r; ) rP rQ rR r4 rT r3 rE rJ rO rU r; r: r` r` sU D
) ) % % ( ( ) )r; r` c | j }|dk( s|dk( r| d j S |dk( rj| d d }| d j }t d|d |d |d
t t |d
j
|j
|d j
|d S |d k( r | d j }| d d |d< |S t
d
| j z )a
Unwraps an asn1crypto.keys.PrivateKeyInfo object into an
asn1crypto.keys.RSAPrivateKey, asn1crypto.keys.DSAPrivateKey
or asn1crypto.keys.ECPrivateKey.
:param key_info:
An asn1crypto.keys.PrivateKeyInfo object
:return:
One of:
- asn1crypto.keys.RSAPrivateKey
- asn1crypto.keys.DSAPrivateKey
- asn1crypto.keys.ECPrivateKey
r'
rsassa_pssr( r) r* r+ r r, r- r. r/ r2 z#Unsupported key_info.algorithm "%s")r3 r5 r
r pownative
ValueError)key_infokey_algr8 r5 s r: _unwrap_private_key_inform s G%7l2
&---%12<@-(// !#s ""
s ""#
"
$-(// '(? @ N|
:X=O=OO
PPr; c t | t r| d j }| j dk( r#d|d j |d j fz }n| j dk( r| d d }t t
|d j | d j j |d
j }d |d
j |d j |d j |j fz }n}| j d
k( rn|d j }|5 || j }|j d j j }d| j d z }|j d }||z
}t t r|j d }t j | j S t | t r+| j dk( r1| d j }d|d j |d j fz }n| j dk( rR| d j }| d d }d |d
j |d j |d j |j fz }nF| j d
k( r7| d j }d| j d z }|j d }||z
}t t r|j d }t j | j S t! t# dt% | )a5
Returns a fingerprint used for correlating public keys and private keys
:param key_object:
An asn1crypto.keys.PrivateKeyInfo or asn1crypto.keys.PublicKeyInfo
:raises:
ValueError - when the key_object is not of the proper type
;return:
A byte string fingerprint
r( r' z%d:%dmoduluspublic_exponentr) r* r+ r. r, z %d:%d:%d:%dr- r2 r1 z%s:r zutf-8r3 z
key_object must be an instance of the
asn1crypto.keys.PrivateKeyInfo or asn1crypto.keys.PublicKeyInfo
classes, not %s
)
isinstancer r5 r3 ri r rh r1 r4 rE encoder" hashlibsha256digestr rj r r# )
key_objectload_private_keykeyto_hashr8 r1 public_key_objects r: rS rS s *n- '.. 5 ( I%%%&--! G
!
!U
* 78 FF s ""=)0077s """ J $s ""s ""s ""!! ' G
!
!T
) \*11J! %5Z$@$K$K! . 3 3L A H H O O
j . .q 11G nnW-G z !G gw ' nnW-G~~g&--//*m, 5 ( \*11C I%%%&--! G
!
!U
* \*11C ,\:F#s ""s ""s ""
' G
!
!T
)#L188Jj . .q 11G nnW-G z !G gw ' nnW-G~~g&--//
^
*
r; )rc2rc4des tripledesaesc t | t s t t dt | d}t j d| Ct | \ }}} |dk( rt t d |dk( rt j | d S ||dk( r$ t j | }|j |S ||dk( r t j | }|d d
}|S t d # t $ r Y nw xY w t j | }|j t j |d S # t $ r Y w xY w# t $ r
Y t d w xY w) a
Loads a public key from a DER or PEM-formatted file. Supports RSA, DSA and
EC public keys. For RSA keys, both the old RSAPublicKey and
SubjectPublicKeyInfo structures are supported. Also allows extracting a
public key from an X.509 certificate.
:param data:
A byte string to load the public key from
:raises:
ValueError - when the data does not appear to contain a public key
:return:
An asn1crypto.keys.PublicKeyInfo object
<
data must be a byte string, not %s
N \s*----- private keyz
The data specified does not appear to be a public key or
certificate, but rather a private key
r'
public key certificatetbs_certificatesubject_public_key_infozQThe data specified does not appear to be a known public key or certificate format)rq r! TypeErrorr r# rematch _unarmor_pemrj r wraploadri r r )datakey_typealgopkirpk parsed_certrk s r: parse_publicr ~ s " dH %
dO
H
xx d#/ +D 1 $ } $ ^
5= %%dE2 28|3 $$T*C JJJ 8}4 %**40K"#456OPHO h
ii' ##D)C JJ %%c51 1
h
ii s6 "C' = D= ' C32C376D. . D:9D:= EEc t | t s t t dt | d}t j d| At | \ }}} |dk( rt t d |dk( rt t d ||dk( r t j | S t t d # t $ r Y w xY w)
a@
Loads a certificate from a DER or PEM-formatted file. Supports X.509
certificates only.
:param data:
A byte string to load the certificate from
:raises:
ValueError - when the data does not appear to contain a certificate
:return:
An asn1crypto.x509.Certificate object
r Nr r z
The data specified does not appear to be a certificate, but
rather a private key
r z
The data specified does not appear to be a certificate, but
rather a public key
r zU
The data specified does not appear to be a known certificate format
) rq r! r r r# r r r rj r r )r r _s r: parse_certificater s dH %
dO
H
xx d#/ ( .!T } $ ^
| # ^
8}4 ##D) ) ^ s B9 9 CCc | t | t s t t dt | |.t |t s t t dt | d}t j d| Bt | | \ }}} |dk( rt t d |dk( rt t d t j | }|j |S # t $ r Y nw xY w t j | }|d }|d
j }t ||| }t j | }|j |S # t $ r Y nw xY w t j | } | j t j | d S # t $ r Y nw xY w t! j | } | j t j | d S # t $ r Y nw xY w t# j | } | j t j | d
S # t $ r Y nw xY wt t d )a%
Loads a private key from a DER or PEM-formatted file. Supports RSA, DSA and
EC private keys. Works with the follow formats:
- RSAPrivateKey (PKCS#1)
- ECPrivateKey (SECG SEC1 V2)
- DSAPrivateKey (OpenSSL)
- PrivateKeyInfo (RSA/DSA/EC - PKCS#8)
- EncryptedPrivateKeyInfo (RSA/DSA/EC - PKCS#8)
- Encrypted RSAPrivateKey (PEM only, OpenSSL)
- Encrypted DSAPrivateKey (PEM only, OpenSSL)
- Encrypted ECPrivateKey (PEM only, OpenSSL)
:param data:
A byte string to load the private key from
:param password:
The password to unencrypt the private key
:raises:
ValueError - when the data does not appear to contain a private key, or the password is invalid
:return:
An asn1crypto.keys.PrivateKeyInfo object
r H
password must be a byte string, not %s
r; r r z
The data specified does not appear to be a private key, but
rather a public key
r z
The data specified does not appear to be a private key, but
rather a certificate
encryption_algorithmencrypted_datar' r) r2 zU
The data specified does not appear to be a known private key format
)rq r! r r r# r r r rj r r ri r
_decrypt_encrypted_datar r r
r )
r passwordr r r parsed_wrapperencryption_algorithm_infor decrypted_datar5 s
r:
parse_privater sW 6 dH %
dO
(H-N (#
xx d#/ (x 8!T | # ^
} $ ^
!!$'
055d;$23I$J!'(89@@01JN\de !!.1
##D)
""6511
##D)
""6511
""4(
""6400
^ s[ :"C C)(C)-AE EE6F
FF 6G G G $6H H'&H'c t | \ }}}d}t j || }|st t d |j d }| j
} |t g d v r/|j d j }d|t ||| fS |j } d}| dk( rd} n | d k( rd
} d }| ||fS ) a3
Removes PEM-encoding from a public key, private key or certificate. If the
private key is encrypted, the password will be used to decrypt it.
:param data:
A byte string of the PEM-encoded data
:param password:
A byte string of the encryption password, or None
:return:
A 3-element tuple in the format: (key_type, algorithm, der_bytes). The
key_type will be a unicode string of "public key", "private key" or
"certificate". The algorithm will be a unicode string of "rsa", "dsa"
or "ec".
zc^((DSA|EC|RSA) PRIVATE KEY|ENCRYPTED PRIVATE KEY|PRIVATE KEY|PUBLIC KEY|RSA PUBLIC KEY|CERTIFICATE)zx
data does not seem to contain a PEM-encoded certificate, private
key or public key
r )zRSA PRIVATE KEYzDSA PRIVATE KEYzEC PRIVATE KEY r Nzencrypted private keyzrsa public keyr r' )
r r r rj r groupstripsetlower _unarmor_pem_openssl_private)
r r object_typeheaders der_bytes
type_regex
armor_type
pem_headerr r s
r: r r v s $ '.dm#K)vJ*k2J
!!!$J ::
| d }|j d dk7 r#|j j d \ }}nd}|s|S |r$t j |j d }|j
}i ddd dd
d d d d
ddddddddddddddddddd dd dd d dddd | }t j ||d d z j }|t | kD r>|t j ||z |d d z j z
}|t | kD r>|d | }i dd d d d
d d d d
d dd dddddddddddddddd dd dd d d d!d!d | } t | }
| dk( r |
|| S |
||| S )"a
Parses a PKCS#1 private key, or encrypted private key
:param headers:
A dict of "Name: Value" lines from right after the PEM header
:param data:
A byte string of the DER-encoded PKCS#1 private key
:param password:
A byte string of the password to use if the private key is encrypted
:return:
A byte string of the DER-encoded private key
NzDEK-Info,RC4asciiz aes-128-cbc zaes-128z aes-192-cbc zaes-192z aes-256-cbc zaes-256r| zrc4-64 zrc4-40 z
rc2-64-cbcz
rc2-40-cbczrc2-cbcr{ z des-ede3-cbczdes-ede3des3z des-ede-cbc)zdes-cbcr} r r r~ r} ) findr splitbinascii unhexlifyrr r rs md5ru len crypto_funcs) r r r enc_algo
enc_iv_hexenc_ivr8 enc_key_lengthenc_key
enc_algo_name decrypt_funcs r: r r s " HJ
FW $ ;;s r !#)<<>#7#7#< Hj H ##J$5$5g$>?~~ Hr2 r 2
r 2
r ! ! a a 2 r B !" r#$ '( )N, kk(VAa[0188:G
3w<
'7;;w 1F1QK ?@GGII 3w<
'a'Gu5 u 5
u 5
u % % e e 5 u K !" {#$ '( )M*
.L GT** v ..r; c n t | t s t t dt | |.t |t s t t dt | d}i }i }t j | }|d }|d j dk7 rt t d |j }|d }|r|d
d d j } d
ddddddd| }
t | ||d j |d j |
d } t t | } t j | |d j | j! }
|d
d j }t# |
| s t d |D ] }|d }t |t$ rt' |j |||| 2t |t( r6|d }|d }|d j }t+ ||| }t' ||||| xt t d t- |j/ }t- |j/ }t1 t3 ||z }d}d}g }t5 | d k\ r,|d }|| }|| }|D cg c]
} | |k7 s || }} |||fS t5 | d kD r*t1 t3 |j/ d } || }t5 | d kD r-t1 t3 |j/ d } || }|| = t5 | d kD r%t1 t3 |j7 d }|||fS c c} w )!aY
Parses a PKCS#12 ANS.1 DER-encoded structure and extracts certs and keys
:param data:
A byte string of a DER-encoded PKCS#12 file
:param password:
A byte string of the password to any encrypted data
:param load_private_key:
A callable that will accept a byte string and return an
oscrypto.asymmetric.PrivateKey object
:raises:
ValueError - when any of the parameters are of the wrong type or value
OSError - when an error is returned by one of the OS decryption functions
:return:
A three-element tuple of:
1. An asn1crypto.keys.PrivateKeyInfo object
2. An asn1crypto.x509.Certificate object
3. A list of zero or more asn1crypto.x509.Certificate objects that are
"extra" certificates, possibly intermediates from the cert chain
r Nr r; auth_safe content_typer zV
Only password-protected PKCS12 files are currently supported
mac_datamacdigest_algorithmr3 r 0 @ )sha1sha224rt sha384sha512
sha512_224
sha512_256mac_salt
iterations contentru z Password provided is invalidencrypted_content_info content_encryption_algorithmencrypted_contentz[
Public-key-based PKCS12 files are not currently supported
r r c . | j j S N)subjecthuman_friendly)cs r: z _parse_pkcs12.. s AYAYr; )rx ) rq r! r r r# r r ri rj authenticated_safer getattrrs hmacnewcontentsru r r _parse_safe_contentsr r r keyssortedlistr values) r r rw certs private_keyspfxr r r mac_algo
key_lengthmac_keyhash_mod
computed_hmac stored_hmac content_infor r r r decrypted_contentkey_fingerprintscert_fingerprintscommon_fingerprintsrx cert other_certsrZ f first_keys r:
_parse_pkcs12r s 4 dH %
dO
(H-N (#
EL
((4.CK I ''61
//:HE?#56{CJJ
Z ' ' \ " ) )
7H- )I*>*G*GRYY[
uoh/66
{; ;< <* y) g{ + hP` a
/%,-E%F "(>?](^ % 67J K R R 78QSdfn o !2E<Sc d ^
! +, <,,./EJJL) &69J&J!KL
C DK
1$)!, ;'[!).CA!{2BuQx CT;''
<1 4 1 1 345a8 9%
5zA~4
-.q1 Y )
5zA~ T%,,. 17YZ { ## Ds .
L29L2c @ t | t rt j | } | D ] }|d }t |t rG|d j
dk( s+|d j }|d d }|d j |t |d < _t |t r||t || < t |t rF|d } |d j
}
t | |
| } t j | } | |t | | < t |t rt ||||| y)
a&
Parses a SafeContents PKCS#12 ANS.1 structure and extracts certs and keys
:param safe_contents:
A byte string of ber-encoded SafeContents, or a asn1crypto.pkcs12.SafeContents
parsed object
:param certs:
A dict to store certificates in
:param keys:
A dict to store keys in
:param password:
A byte string of the password to any encrypted data
:param load_private_key:
A callable that will accept a byte string and return an
oscrypto.asymmetric.PrivateKey object
bag_valuecert_idx509
cert_valuer r Nr r ) rq r! r r r ri r5 rS r r
r r )
safe_contentsr r r rw safe_bagr r public_key_infor encrypted_key_bytesdecrypted_key_bytesr( s
r: r r s& , -*$))-8
! [) i )#**f4 .55"&'8"9:S"T=F|=T=[=[l?D9:
>
2FOL i1AB C
#:
;(12H(I %"+,<"="D"D "9:SUhjr"s (--.ABKHSL k3CD E
<
0 E<K[ \
1 "r; c 2 t | j }| j dk( rr| j dk( rt t d t | j || j | j | j }| j } |||| }|S | j dk( rPt | j || j | j | j dz }|dd }|dd } |||| }|S | j dk( rt | j || j | j | j d }| j d
k( r ||| }|S t | j || j | j | j d } |||| }S ) al
Decrypts encrypted ASN.1 data
:param encryption_algorithm_info:
An instance of asn1crypto.pkcs5.Pkcs5EncryptionAlgorithm
:param encrypted_content:
A byte string of the encrypted content
:param password:
A byte string of the encrypted content's password
:return:
A byte string of the decrypted plaintext
r rc5zc
PBES2 encryption scheme utilizing RC5 encryption is not supported
r r r r r r r| r )r encryption_cipherkdfrj r r kdf_hmackdf_saltkdf_iterationsr
encryption_ivr r encryption_block_size)r r r r r r plaintextderived_outputs r: r r s " 9 K KLL !$$0 $ 6 6% ? ^
% . . % . . % 4 4 % 0 0
+88 *;VD P M
# & &( 2 % . . % . . % 4 4 % 0 01 4
!1% "% *;VD 6 3
# & &, 6 % . . % . . % 4 4 % 0 0
% 6 6% ?$W.?@I )22)22)88)??
F %W.?HI r; r )9
__future__r r r r rs r r r _asn1r r r
r r r
r r r r r r r r r r r r r symmetricr r r r r utilr _errorsr _typesr! r" r# r% rW r` rm rS r r r r r r r r r rU r; r: r s R R $ , + # # 0 0E# E#PH# H#V&) &)R*QZaJ ! , FjR7trj0'fX/vG$T1hNr;