관리-도구
편집 파일: rsa.cpython-39.opt-1.pyc
a ope�S � @ sZ d dl Z d dlmZ d dlmZmZmZ d dlmZm Z m Z d dl m Z m Z d dlmZmZmZ d dlmZmZmZmZmZmZ d dlmZmZm Z m Z ee j ee f e j e d �d d �Z!e j d e"ee"d �dd�Z#e j d e"e ee"d�dd�Z$dd� Z%dd� Z&dd� Z'dd� Z(dd � Z)G d d � d e�Z*G d d � d e�Z+G d!d"� d"e�Z,G d#d$� d$e �Z-dS )%� N)�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed� _warn_sign_verify_deprecated)�hashes� serialization)�AsymmetricSignatureContext� AsymmetricVerificationContextr )�AsymmetricPadding�MGF1�OAEP�PKCS1v15�PSS� calculate_max_pss_salt_length)� RSAPrivateKey�RSAPrivateNumbers� RSAPublicKey�RSAPublicNumbers)�pss�key�hash_algorithm�returnc C s, | j }|tju s|tju r$t||�S |S d S �N)Z _salt_lengthr Z MAX_LENGTHr r )r r r Zsalt� r �N/usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/rsa.py�_get_rsa_pss_salt_length) s r )�_RSAPrivateKey� _RSAPublicKey)r �data�paddingr c C s� t |t�std��t |t�r&| jj}nVt |t�rh| jj}t |jt �sPt dt j ��| � |�s|t dt j��nt d�|j�t j��t| ||||�S )Nz1Padding must be an instance of AsymmetricPadding.�'Only MGF1 is supported by this backend.zPThis combination of padding and hash algorithm is not supported by this backend.�${} is not supported by this backend.)� isinstancer � TypeErrorr �_lib�RSA_PKCS1_PADDINGr ZRSA_PKCS1_OAEP_PADDING�_mgfr r r �UNSUPPORTED_MGFZrsa_padding_supported�UNSUPPORTED_PADDING�format�name�_enc_dec_rsa_pkey_ctx)�backendr r! r" � padding_enumr r r � _enc_dec_rsa6 s* � � �r1 )r r! r0 r" r c C s t |t�r | jj}| jj}n| jj}| jj}| j�|j| j j �}| � || j j k� | j � || jj �}||�}| � |dk� | j�||�}| � |dk� | j�|j�} | � | dk� t |t��r| jj�r| �|jj�} | j�|| �}| � |dk� | �|j�} | j�|| �}| � |dk� t |t��r�|jd u�r�t|j�dk�r�| j�t|j��} | � | | j j k� | j �| |jt|j�� | j�|| t|j��}| � |dk� | j � d| �} | j � d| �}|||| |t|��}| j � |�d | d � }| j� � |dk�rt d��|S )N� r �size_t *�unsigned char[]z Encryption/decryption failed.) r% r r' ZEVP_PKEY_encrypt_initZEVP_PKEY_encryptZEVP_PKEY_decrypt_initZEVP_PKEY_decrypt�EVP_PKEY_CTX_new� _evp_pkey�_ffi�NULL�openssl_assert�gc�EVP_PKEY_CTX_free� EVP_PKEY_CTX_set_rsa_padding� EVP_PKEY_sizer Z Cryptography_HAS_RSA_OAEP_MD� _evp_md_non_null_from_algorithmr) � _algorithm� EVP_PKEY_CTX_set_rsa_mgf1_mdZ EVP_PKEY_CTX_set_rsa_oaep_mdZ_label�lenZOPENSSL_mallocZmemmoveZ EVP_PKEY_CTX_set0_rsa_oaep_label�new�buffer�ERR_clear_error� ValueError)r/ r r! r0 r" �initZcrypt�pkey_ctx�resZbuf_size�mgf1_mdZoaep_mdZlabelptrZoutlen�buf�resbufr r r r. Z sX � �� � � r. c C s� t |t�std��| j�|j�}| �|dk� t |t�rB| jj}nnt |t �r�t |j t �sdt dt j��t |tj�sxtd��||j d dk r�td��| jj}nt d�|j�t j��|S )Nz'Expected provider of AsymmetricPadding.r r# z*Expected instance of hashes.HashAlgorithm.� zDDigest too large for key size. Use a larger key or different digest.r$ )r% r r& r' r= r6 r9 r r( r r) r r r r* r � HashAlgorithm� digest_sizerE ZRSA_PKCS1_PSS_PADDINGr, r- r+ )r/ r r" � algorithmZ pkey_sizer0 r r r �_rsa_sig_determine_padding� s0 � � �rP c C s< t | |||�}| j�|j| jj�}| �|| jjk� | j�|| jj�}||�}|dkrh| � � }t d|��|d ur�| � |�} | j� || �}|dkr�| � � t d�|j�tj��| j�||�}|dkr�| � � t d�|j�tj��t|t��r8| j�|t|||��}| �|dk� | � |jj�} | j�|| �}| �|dk� |S )Nr2 z#Unable to sign/verify with this keyr z4{} is not supported by this backend for RSA signing.z4{} is not supported for the RSA signature operation.)rP r' r5 r6 r7 r8 r9 r: r; �_consume_errorsrE r> Z EVP_PKEY_CTX_set_signature_mdr r, r- r ZUNSUPPORTED_HASHr< r+ r% r Z EVP_PKEY_CTX_set_rsa_pss_saltlenr r) r? r@ ) r/ r" rO r Z init_funcr0 rG rH �errorsZevp_mdrI r r r �_rsa_sig_setup� sN ���� ��rS c C s� t | |||| jj�}| j�d�}| j�|| jj||t|��}| �|dk� | j�d|d �}| j�||||t|��}|dkr�| � � } t d| ��| j� |�d d � S )Nr3 r2 r4 r zuDigest or salt length too long for key size. Use a larger key or shorter salt length if you are specifying a PSS salt) rS r' ZEVP_PKEY_sign_initr7 rB Z EVP_PKEY_signr8 rA r9 �_consume_errors_with_textrE rC ) r/ r" rO � private_keyr! rG �buflenrH rJ rR r r r � _rsa_sig_sign� s* � ��rW c C sV t | |||| jj�}| j�||t|�|t|��}| �|dk� |dkrR| �� t�d S )Nr )rS r' ZEVP_PKEY_verify_initZEVP_PKEY_verifyrA r9 rQ r )r/ r" rO � public_key� signaturer! rG rH r r r �_rsa_sig_verify s ��rZ c C s� t | |||| jj�}| j�|j�}| �|dk� | j�d|�}| j�d|�}| j�||||t |��} | j� |�d |d � } | j� � | dkr�t �| S )Nr r4 r3 r2 ) rS r' Z EVP_PKEY_verify_recover_initr= r6 r9 r7 rB ZEVP_PKEY_verify_recoverrA rC rD r ) r/ r" rO rX rY rG �maxlenrJ rV rH rK r r r �_rsa_sig_recover! s& � � r\ c @ s> e Zd Zeeejd�dd�Zedd�dd�Z ed�d d �Z dS ) �_RSASignatureContext)rU r" rO c C s< || _ || _t||||� || _|| _t�| j| j �| _d S r )�_backend� _private_keyrP �_paddingr? r �Hash� _hash_ctx)�selfr/ rU r" rO r r r �__init__@ s z _RSASignatureContext.__init__N�r! r c C s | j �|� d S r �rb �update�rc r! r r r rg R s z_RSASignatureContext.update�r c C s t | j| j| j| j| j�� �S r )rW r^ r` r? r_ rb �finalize�rc r r r rj U s �z _RSASignatureContext.finalize) �__name__� __module__� __qualname__r r r rM rd �bytesrg rj r r r r r] ? s � r] c @ s@ e Zd Zeeeejd�dd�Zedd�dd�Z dd�d d �Z dS ) �_RSAVerificationContext)rX rY r" rO c C sF || _ || _|| _|| _t||||� |}|| _t�| j| j �| _d S r ) r^ � _public_key� _signaturer` rP r? r ra rb )rc r/ rX rY r" rO r r r rd ` s z _RSAVerificationContext.__init__Nre c C s | j �|� d S r rf rh r r r rg u s z _RSAVerificationContext.updateri c C s" t | j| j| j| j| j| j�� �S r )rZ r^ r` r? rq rr rb rj rk r r r �verifyx s �z _RSAVerificationContext.verify) rl rm rn r ro r r rM rd rg rs r r r r rp _ s � rp c @ s� e Zd Zdd� Ze�d�Zeej e d�dd�Z e ee d�dd �Z ed �d d �Zed �d d�Zejejeje d�dd�Ze eejejej f e d�dd�ZdS )r c C s� |s*|j �|�}|dkr*|�� }td|��|j �||jj�}|�|dk� || _|| _ || _ | jj� d�}| jj � | j || jjj| jjj� | j�|d | jjjk� | jj � |d �| _d S )Nr2 zInvalid private key� BIGNUM **r )r' Z RSA_check_keyrT rE ZRSA_blinding_onr7 r8 r9 r^ � _rsa_cdatar6 rB � RSA_get0_key� BN_num_bits� _key_size)rc r/ � rsa_cdata�evp_pkeyZ_skip_check_keyrH rR �nr r r rd � s& �z_RSAPrivateKey.__init__rx )r" rO r c C s t � t|� t| j| ||�S r )r r r] r^ )rc r" rO r r r �signer� s z_RSAPrivateKey.signer)� ciphertextr" r c C s2 | j d d }|t|�kr"td��t| j| ||�S )N� � z,Ciphertext length must be equal to key size.)�key_sizerA rE r1 r^ )rc r} r" Zkey_size_bytesr r r �decrypt� s z_RSAPrivateKey.decryptri c C sV | j j�| j�}| j �|| j jjk� | j j�|| j jj�}| j � |�}t | j ||�S r ) r^ r' ZRSAPublicKey_dupru r9 r7 r8 r: ZRSA_freeZ_rsa_cdata_to_evp_pkeyr )rc �ctxrz r r r rX � s z_RSAPrivateKey.public_keyc C s� | j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�| j|||� | j �|d | j jjk� | j �|d | j jjk� | j �|d | j jjk� | j j�| j||� | j �|d | j jjk� | j �|d | j jjk� | j j� | j|||� | j �|d | j jjk� | j �|d | j jjk� | j �|d | j jjk� t | j � |d �| j � |d �| j � |d �| j � |d �| j � |d �| j � |d �t | j � |d �| j � |d �d�d�S )Nrt r ��er{ )�p�q�d�dmp1�dmq1�iqmp�public_numbers) r^ r7 rB r' rv ru r9 r8 ZRSA_get0_factorsZRSA_get0_crt_paramsr � _bn_to_intr ) rc r{ r� r� r� r� r� r� r� r r r �private_numbers� sB ���z _RSAPrivateKey.private_numbers)�encodingr, �encryption_algorithmr c C s | j �|||| | j| j�S r )r^ Z_private_key_bytesr6 ru )rc r� r, r� r r r � private_bytes� s �z _RSAPrivateKey.private_bytes)r! r" rO r c C s$ t | j||�\}}t| j||| |�S r )r r^ rW )rc r! r" rO r r r �sign� s �z_RSAPrivateKey.signN) rl rm rn rd r �read_only_propertyr� r r rM r r| ro r� r rX r r� r �EncodingZ PrivateFormatZKeySerializationEncryptionr� �typing�Union� asym_utils� Prehashedr� r r r r r � s$ � %� �r c @ s� e Zd Zdd� Ze�d�Zeee j e d�dd�Z eeed�dd �Z ed �d d �Zejejed �dd�Zeeeejeje j f dd�dd�Zeeeje j ed�dd�ZdS )r c C st || _ || _|| _| j j�d�}| j j�| j|| j jj| j jj� | j �|d | j jjk� | j j� |d �| _ d S )Nrt r ) r^ ru r6 r7 rB r' rv r8 r9 rw rx )rc r/ ry rz r{ r r r rd � s �z_RSAPublicKey.__init__rx )rY r" rO r c C s, t � t�d|� t|� t| j| |||�S )NrY )r r � _check_bytesr rp r^ �rc rY r" rO r r r �verifier s �z_RSAPublicKey.verifier)� plaintextr" r c C s t | j| ||�S r )r1 r^ )rc r� r" r r r �encrypt s z_RSAPublicKey.encryptri c C s� | j j�d�}| j j�d�}| j j�| j||| j jj� | j �|d | j jjk� | j �|d | j jjk� t| j � |d �| j � |d �d�S )Nrt r r� ) r^ r7 rB r' rv ru r8 r9 r r� )rc r{ r� r r r r� s ��z _RSAPublicKey.public_numbers)r� r, r c C s | j �||| | j| j�S r )r^ Z_public_key_bytesr6 ru )rc r� r, r r r � public_bytes( s �z_RSAPublicKey.public_bytesN)rY r! r" rO r c C s& t | j||�\}}t| j||| ||�S r )r r^ rZ )rc rY r! r" rO r r r rs 1 s ��z_RSAPublicKey.verifyc C s t |� t| j||| |�S r )r r\ r^ r� r r r �recover_data_from_signature? s �z)_RSAPublicKey.recover_data_from_signature)rl rm rn rd r r� r� ro r r rM r r� r� r r� r r� Z PublicFormatr� r� r� r� r� rs �Optionalr� r r r r r � s0 � � � �r ).r� Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r r Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r r� Z1cryptography.hazmat.primitives.asymmetric.paddingr r r r r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r r� rM �intr ro r1 r. rP rS rW rZ r\ r] rp r r r r r r �<module> s@ � � &� A+- $u