관리-도구
편집 파일: ec.cpython-39.opt-1.pyc
a �a.2 � @ s� d dl mZ d dlmZmZmZ d dlmZmZm Z m Z d dl m Z m Z d dlmZmZmZ ejd�dd�Zd d � Zd d � Zd d� Zdd� Zdd� ZG dd� de�ZG dd� de�ZG dd� dej�Z G dd� dej �Z dS ) � )�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed�_evp_pkey_derive� _warn_sign_verify_deprecated)�hashes� serialization)�AsymmetricSignatureContext� AsymmetricVerificationContext�ec��signature_algorithmc C s t | tj�stdtj��d S )Nz/Unsupported elliptic curve signature algorithm.)� isinstancer ZECDSAr r Z UNSUPPORTED_PUBLIC_KEY_ALGORITHMr � r �M/usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/ec.py�_check_signature_algorithm s �r c C s� | j �|�}| �|| jjk� | j �|�}|| j jkr>td��| j js^| j � |�dkr^td��| j � |�}| �|| jjk� | j� |�� d�}|S )Nz@ECDSA keys with explicit parameters are unsupported at this timer �ascii) �_lib�EC_KEY_get0_group�openssl_assert�_ffi�NULL�EC_GROUP_get_curve_nameZ NID_undef� ValueErrorZCRYPTOGRAPHY_IS_LIBRESSLZEC_GROUP_get_asn1_flagZ OBJ_nid2sn�string�decode)�backendZec_key�groupZnidZ curve_name�snr r r �_ec_key_curve_sn$ s$ ���� r" c C s | j �|| j j� dS )z� Set the named curve flag on the EC_KEY. This causes OpenSSL to serialize EC keys along with their curve OID which makes deserialization easier. N)r ZEC_KEY_set_asn1_flagZOPENSSL_EC_NAMED_CURVE)r Zec_cdatar r r �_mark_asn1_named_ec_curveB s �r# c C s8 zt j| � W S ty2 td�|�tj��Y n0 d S )Nz${} is not a supported elliptic curve)r Z _CURVE_TYPES�KeyErrorr �formatr ZUNSUPPORTED_ELLIPTIC_CURVE)r r! r r r �_sn_to_elliptic_curveN s �r& c C sz | j �|j�}| �|dk� | j�d|�}| j�dd�}| j �d|t|�|||j�}| �|dk� | j�|�d |d � S )Nr zunsigned char[]zunsigned int[]� ) r Z ECDSA_size�_ec_keyr r �newZ ECDSA_sign�len�buffer)r � private_key�dataZmax_sizeZsigbufZ siglen_ptr�resr r r �_ecdsa_sig_signX s �r/ c C s8 | j �d|t|�|t|�|j�}|dkr4| �� t�d S )Nr r' )r Z ECDSA_verifyr* r( Z_consume_errorsr )r � public_key� signaturer- r. r r r �_ecdsa_sig_verifye s �r2 c @ s> e Zd Zejejd�dd�Zedd�dd�Z ed�d d �Z dS ) �_ECDSASignatureContext)r, � algorithmc C s || _ || _t�||�| _d S �N)�_backend� _private_keyr �Hash�_digest)�selfr r, r4 r r r �__init__o s z _ECDSASignatureContext.__init__N�r- �returnc C s | j �|� d S r5 �r9 �update�r: r- r r r r? y s z _ECDSASignatureContext.update�r= c C s | j �� }t| j| j|�S r5 )r9 �finalizer/ r6 r7 �r: �digestr r r rB | s z _ECDSASignatureContext.finalize) �__name__� __module__� __qualname__r �EllipticCurvePrivateKeyr � HashAlgorithmr; �bytesr? rB r r r r r3 n s � r3 c @ s@ e Zd Zejeejd�dd�Zedd�dd�Z dd�d d �Z dS ) �_ECDSAVerificationContext)r0 r1 r4 c C s$ || _ || _|| _t�||�| _d S r5 )r6 � _public_key� _signaturer r8 r9 )r: r r0 r1 r4 r r r r; � s z"_ECDSAVerificationContext.__init__Nr< c C s | j �|� d S r5 r> r@ r r r r? � s z _ECDSAVerificationContext.updaterA c C s" | j �� }t| j| j| j|� d S r5 )r9 rB r2 r6 rL rM rC r r r �verify� s �z _ECDSAVerificationContext.verify) rE rF rG r �EllipticCurvePublicKeyrJ r rI r; r? rN r r r r rK � s � rK c @ s� e Zd Zdd� Ze�d�Zeed�dd��Z e j e d�dd �Z e je jed �d d �Ze jd�d d�Ze jd�dd�Zejejejed�dd�Zee j ed�dd�ZdS )�_EllipticCurvePrivateKeyc C s6 || _ || _|| _t||�}t||�| _t||� d S r5 �r6 r( � _evp_pkeyr" r& �_curver# �r: r Z ec_key_cdata�evp_pkeyr! r r r r; � s z!_EllipticCurvePrivateKey.__init__rS rA c C s | j jS r5 ��curve�key_size�r: r r r rX � s z!_EllipticCurvePrivateKey.key_size)r r= c C s( t � t|� t|j� t| j| |j�S r5 )r r r r4 r3 r6 )r: r r r r �signer� s �z _EllipticCurvePrivateKey.signer)r4 �peer_public_keyr= c C sD | j �|| j�s tdtj��|jj| jjkr4td��t| j | j |�S )Nz1This backend does not support the ECDH algorithm.z2peer_public_key and self are not on the same curve) r6 Z+elliptic_curve_exchange_algorithm_supportedrW r r Z UNSUPPORTED_EXCHANGE_ALGORITHM�namer r rR )r: r4 r[ r r r �exchange� s ����z!_EllipticCurvePrivateKey.exchangec C s� | j j�| j�}| j �|| j jjk� | j j�|�}| j �|�}| j j� | j�}| j �|| j jjk� | j j� ||�}| j �|dk� | j � |�}t | j ||�S )Nr' ) r6 r r r( r r r r Z_ec_key_new_by_curve_nid�EC_KEY_get0_public_keyZEC_KEY_set_public_keyZ_ec_cdata_to_evp_pkey�_EllipticCurvePublicKey)r: r Z curve_nidZ public_ec_key�pointr. rU r r r r0 � s z#_EllipticCurvePrivateKey.public_keyc C s2 | j j�| j�}| j �|�}tj|| �� �� d�S )N)� private_value�public_numbers) r6 r ZEC_KEY_get0_private_keyr( � _bn_to_intr �EllipticCurvePrivateNumbersr0 rb )r: Zbnra r r r �private_numbers� s �z(_EllipticCurvePrivateKey.private_numbers)�encodingr% �encryption_algorithmr= c C s | j �|||| | j| j�S r5 )r6 Z_private_key_bytesrR r( )r: rf r% rg r r r � private_bytes� s �z&_EllipticCurvePrivateKey.private_bytes)r- r r= c C s* t |� t| j||j�\}}t| j| |�S r5 )r r r6 � _algorithmr/ )r: r- r r4 r r r �sign� s �z _EllipticCurvePrivateKey.signN)rE rF rG r; r �read_only_propertyrW �property�intrX r � EllipticCurveSignatureAlgorithmr rZ ZECDHrO rJ r] r0 rd re r �EncodingZ PrivateFormatZKeySerializationEncryptionrh rj r r r r rP � s* � � � �rP c @ s� e Zd Zdd� Ze�d�Zeed�dd��Z e e j e d�dd �Ze jd�d d �Zeje d �d d�Zejeje d�dd�Ze e e j dd�dd�ZdS )r_ c C s6 || _ || _|| _t||�}t||�| _t||� d S r5 rQ rT r r r r; s z _EllipticCurvePublicKey.__init__rS rA c C s | j jS r5 rV rY r r r rX s z _EllipticCurvePublicKey.key_size)r1 r r= c C s6 t � t�d|� t|� t|j� t| j| ||j�S )Nr1 )r r � _check_bytesr r r4 rK r6 )r: r1 r r r r �verifier s �z _EllipticCurvePublicKey.verifierc C s� | j �| j�\}}| j j�| j�}| j �|| j jjk� | j �� �d}| j j� |�}| j j� |�}||||||�}| j �|dk� | j � |�}| j � |�} W d � n1 s�0 Y t j || | j d�S )Nr' )�x�yrW )r6 Z _ec_key_determine_group_get_funcr( r r^ r r r � _tmp_bn_ctxZ BN_CTX_getrc r �EllipticCurvePublicNumbersrS ) r: Zget_funcr r` �bn_ctxZbn_xZbn_yr. rr rs r r r rb s � *z&_EllipticCurvePublicKey.public_numbers)r% r= c C s |t jju r| jjj}n | jjj}| jj�| j�}| j� || jj j k� | jj� | j�}| j� || jj j k� | j� � �v}| jj�|||| jj j d|�}| j� |dk� | jj �d|�}| jj�||||||�}| j� ||k� W d � n1 s�0 Y | jj �|�d d � S )Nr zchar[])r � PublicFormat�CompressedPointr6 r ZPOINT_CONVERSION_COMPRESSEDZ POINT_CONVERSION_UNCOMPRESSEDr r( r r r r^ rt ZEC_POINT_point2octr) r+ ) r: r% � conversionr r` rv �buflen�bufr. r r r � _encode_point2 s$ � �.z%_EllipticCurvePublicKey._encode_point)rf r% r= c C sp |t jju s$|t jju s$|t jju rV|t jjusD|t jjt jjfvrLtd��| �|�S | j� ||| | j d �S d S )NzKX962 encoding must be used with CompressedPoint or UncompressedPoint format) r ro ZX962rw rx ZUncompressedPointr r| r6 Z_public_key_bytesrR )r: rf r% r r r � public_bytesJ s" � � ��� �z$_EllipticCurvePublicKey.public_bytesN)r1 r- r r= c C s0 t |� t| j||j�\}}t| j| ||� d S r5 )r r r6 ri r2 )r: r1 r- r r4 r r r rN c s �z _EllipticCurvePublicKey.verify)rE rF rG r; r rk rW rl rm rX rJ r rn r rq ru rb r rw r| ro r} rN r r r r r_ � s& � � �r_ N) Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r r r Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r r rn r r" r# r& r/ r2 r3 rK rH rP rO r_ r r r r �<module> s � f