]j? d dl mZ d dlmZmZmZmZ d dlmZm Z d dl
m Z m Z m
Z
mZmZmZ d dlmZmZmZmZ d dlmZmZmZ dZdZd Z d
Z d Z d Z d
Z dZ!dZ"dZ#dZ$dZ%dZ&dZ'dZ(dZ) G d de* Z+ G d de, Z- G d d e, Z.d S ) )Random) DerSequenceDerOctetString DerObjectId
DerInteger)padunpad)MD5SHA1SHA224SHA256SHA384SHA512)DESARC2DES3AES)PBKDF1PBKDF2scryptz1.2.840.113549.1.5.3z1.2.840.113549.1.5.6z1.2.840.113549.1.5.10z1.2.840.113549.1.5.11z1.2.840.113549.1.5.13z1.2.840.113549.1.5.12z1.3.6.1.4.1.11591.4.111.2.840.113549.2.7z1.2.840.113549.2.8z1.2.840.113549.2.9z1.2.840.113549.2.10z1.2.840.113549.2.11z1.2.840.113549.3.7z2.16.840.1.101.3.4.1.2z2.16.840.1.101.3.4.1.22z2.16.840.1.101.3.4.1.42c e Zd ZdS ) PbesErrorN)__name__
__module__ __qualname__ q/builddir/build/BUILD/imunify360-venv-2.6.3/opt/imunify360/venv/lib64/python3.11/site-packages/Crypto/IO/_PBES.pyr r C s Dr r c ( e Zd ZdZed ZdS )PBES1zDeprecated encryption scheme with password-based key derivation
(originally defined in PKCS#5 v1.5, but still present in `v2.0`__).
.. __: http://www.ietf.org/rfc/rfc2898.txt
c t | }t |d }t |d j }t |d j }i }|t k rt }t }ng|t k rt }t }d|d< nH|t k rt }t }n.|t k rt }t }d|d< nt d t |d d } t | d j }
| d } t ||
d| | } | d d
| d
d }}
|j |
|j |fi |}| | }t' ||j S ) ax Decrypt a piece of data using a passphrase and *PBES1*.
The algorithm to use is automatically detected.
:Parameters:
data : byte string
The piece of data to decrypt.
passphrase : byte string
The passphrase to use for decrypting the data.
:Returns:
The decrypted data, as a binary string.
r @ effective_keylenzUnknown OID for PBES1 nr_elements N )r decoder payloadr value _OID_PBE_WITH_MD5_AND_DES_CBCr
r _OID_PBE_WITH_MD5_AND_RC2_CBCr _OID_PBE_WITH_SHA1_AND_DES_CBCr _OID_PBE_WITH_SHA1_AND_RC2_CBCr r newMODE_CBCdecryptr
block_size)data
passphraseenc_private_key_infoencrypted_algorithmencrypted_datapbe_oid
cipher_paramshashmod ciphermod
pbe_paramssalt
iterationskey_ivkeyivcipherpts r r4 z
PBES1.decrypty s +}} 3 3D 9 9 )mm 2 23G3J K K'))001Ea1HIIQ --&&':1'=>>D
3 3 3GII
5
5
5G I02M, - -
6
6
6GII
6
6
6G I02M, - - 344 4 ]]))*=a*@a)PP
&&z!}55= ]
D"j'BB!*fQRRjR sI$6LLmLL
^^N
+
+R*+++r N)r r r __doc__ staticmethodr4 r r r r! r! r s9 2, 2, \2, 2, 2,r r! c @ e Zd ZdZedd Zed ZdS )PBES2zEncryption scheme with password-based key derivation
(defined in `PKCS#5 v2.0`__).
.. __: http://www.ietf.org/rfc/rfc2898.txt.Nc |i }|t j j }|dk r d}t }t j }t
}nr|dv r d}t }t j }t }nQ|dv r d}t }t j }t }n0|dv r d}t }t j }t }nt d ||j } || d
d }
|
d ru| d
d } t ||
|| } t t! t" t t% |
t' | g g }
n| d
d } | dd }| dd }t) ||
|| || } t t! t* t t% |
t' | t' | t' | g g }
| | || }| t/ | |j }t t! | t% | g }t t t! t0 t |
|g g t% | g }| S )a Encrypt a piece of data using a passphrase and *PBES2*.
:Parameters:
data : byte string
The piece of data to encrypt.
passphrase : byte string
The passphrase to use for encrypting the data.
protection : string
The identifier of the encryption algorithm to use.
The default value is '``PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC``'.
prot_params : dictionary
Parameters of the protection algorithm.
+------------------+-----------------------------------------------+
| Key | Description |
+==================+===============================================+
| iteration_count | The KDF algorithm is repeated several times to|
| | slow down brute force attacks on passwords |
| | (called *N* or CPU/memory cost in scrypt). |
| | |
| | The default value for PBKDF2 is 1 000. |
| | The default value for scrypt is 16 384. |
+------------------+-----------------------------------------------+
| salt_size | Salt is used to thwart dictionary and rainbow |
| | attacks on passwords. The default value is 8 |
| | bytes. |
+------------------+-----------------------------------------------+
| block_size | *(scrypt only)* Memory-cost (r). The default |
| | value is 8. |
+------------------+-----------------------------------------------+
| parallelization | *(scrypt only)* CPU-cost (p). The default |
| | value is 1. |
+------------------+-----------------------------------------------+
randfunc : callable
Random number generation function; it should accept
a single integer N and return a string of random data,
N bytes long. If not specified, a new RNG will be
instantiated from ``Crypto.Random``.
:Returns:
The encrypted data, as a binary string.
Nz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC )z PBKDF2WithHMAC-SHA1AndAES128-CBCzscryptAndAES128-CBCr) )z PBKDF2WithHMAC-SHA1AndAES192-CBCzscryptAndAES192-CBC)z PBKDF2WithHMAC-SHA1AndAES256-CBCzscryptAndAES256-CBC zUnknown PBES2 mode salt_sizer* r iteration_counti i @ r5 parallelizationr# )r r2 readr r3 _OID_DES_EDE3_CBCr _OID_AES128_CBC_OID_AES192_CBC_OID_AES256_CBC
ValueErrorr5 get
startswithr r r _OID_PBKDF2r r r _OID_SCRYPTencryptr
_OID_PBES2encode)r6 r7
protection prot_paramsrandfunckey_sizemodule cipher_modeenc_oidrD r@ countrC kdf_infoscrypt_rscrypt_prE r: enc_infor8 s r r[ z
PBES2.encrypt s ^ K z||(H = = =HF -K'GG
' ' 'HF ,K%GG
' ' 'HF ,K%GG
' ' 'HF ,K%GG 122 2 Xf'
(
(x Q7788 * * OO$5t<<ET8U;;C" ,, &t,,"5))! $ HH OO$5u==E"|Q77H"'8!<<HT8 (4 4C" ,, &t,,"5))"8,,"8,, ! $ H Cb11 D&2C(D(DEE G$$ r""
+ J''
> * *
,
$**,,,r c t | d }t |d }t |d j }t |d j }|t k rt d t |d d }t |d d }t |d j }d} |t k rt |d d }
t |
d j } |
d } t |
dz
}
d}|
dk r' |
| dz
} |
dz }
|dz
}n# t $ r Y nw xY wd}|
dk rSt |
| }t |d j }n|t k rt |d d t d j } fd
d D \ } }}t d k r d } nd} nt d
t |d }t |d j }|t k r
t }d}nN|t k r
t }d}n9|t k r
t }d}n$|t" k r
t }d}nt d | r| |k rt d t |d j }|t k r|t$ k rt& }n^|t( k rt* }nK|t, k rt. }n8|t0 k rt2 }n%|t4 k rt6 }nt d|z t9 || || | }nt; || || || }| ||j | }| | }tC ||j" S )ax Decrypt a piece of data using a passphrase and *PBES2*.
The algorithm to use is automatically detected.
:Parameters:
data : byte string
The piece of data to decrypt.
passphrase : byte string
The passphrase to use for decrypting the data.
:Returns:
The decrypted data, as a binary string.
r& r' r r# zNot a PBES2 objectN)r& r )rl c g | ]
}| S r r ).0x
scrypt_paramss r
<listcomp>z!PBES2.decrypt.<locals>.<listcomp>u s5 3G 3G 3G78 4A3C 3G 3G 3Gr )r# r& rk rl zUnsupported PBES2 KDFrL r) rM zUnsupported PBES2 cipherz9Mismatch between PBES2 KDF parameters and selected cipherzUnsupported HMAC %s)hmac_hash_module)#r r+ r r, r r- r\ r rY len TypeErrorrZ rR r rS r rT rU _OID_HMAC_SHA1r _OID_HMAC_SHA224r _OID_HMAC_SHA256r
_OID_HMAC_SHA384r _OID_HMAC_SHA512r r r r2 r3 r4 r r5 ) r6 r7 r8 enc_algor: r; pbes2_paramsrf kdf_oidkdf_key_length
pbkdf2_paramsr@ rO leftidxpbkdf2_prf_oidpbkdf2_prf_algo_idrg rh ri rd r> ra IVrs rC rE rF rq s @r r4 z
PBES2.decrypt: s +}} 3 3Da 3 H H ==''(<Q(?@@'))001Ea1HIIQ --&&x{339 j 011 1"}}++HQKQ+GG =='' QQ'GG --&&x{339 k ! ! 'MM 0 0!) 0 T TM!##**=+;<<DD +A .O}%%)DCaxx%23%7!%;NAID1HCC D 2Naxx%0]]%9%9-:L%M%M"!, !5!56H6K!L!L!R
#
# 'MM 0 0!& 0 Q QM!##**=+;<<DD3G 3G 3G 3G<E3G 3G 3G /OXx=!!A%%!.q!1!% 344 4 =='' Q88 --&&x{339 ' ' ' IHH
'
'IHH
'
'IHH
'
'IHH 677 7 4n 8 8 3 4 4
4
$
$Xa[
1
1
9 k ! ! //#' #333#) #333#) #333#) #333#) 5 FGGGT8_*:< < <CC T8_!8- -C sI$6;; ^^N
+
+R*+++s G
G$#G$)NN)r r r rG rH r[ r4 r r r rJ rJ sc 3 3
B- B- B- \B-H x, x, \x, x, x,r rJ N)/Cryptor Crypto.Util.asn1r r r r Crypto.Util.Paddingr r Crypto.Hashr
r r r
r r
Crypto.Cipherr r r r Crypto.Protocol.KDFr r r r. r/ r0 r1 r\ rY rZ rv rw rx ry rz rR rS rT rU rV r objectr! rJ r r r <module>r s D
+ * * * * * * * A A A A A A A A A A A A A A A A . . . . . . . . . . . . 6 6 6 6 6 6 6 6 6 6 6 6 !8 !8
$
% & %' ' ( ( ( *++
^:, :, :, :, :,F :, :, :,zD, D, D, D, D,F D, D, D, D, D,r