]jjW g d Z ddlZddlZddlZddlmZmZmZmZm Z ddl
m Z ddl m
Z
mZ ddlmZ ddlmZmZmZmZmZ ddlmZ dd lmZmZm Z dd
l m Z m Z m Z G d d e! Z"d
Z#ddZ$ddZ%d Z&d Z'd Z(d Z)d Z*ddZ+e+Z,dZ-dS ))generate constructDsaKey
import_key N)bchrbordtobytestostr
iter_range)Random)PKCS8PEM)SHA256) DerObject DerSequence
DerInteger DerObjectId DerBitString)Integer)test_probable_prime COMPOSITEPROBABLY_PRIME) _expand_subject_public_key_info _create_subject_public_key_info _extract_subject_public_key_infoc e Zd ZdZg dZd Zd Zd Zd Zd Z d Z
d Z d
Z d Z
d Zd
Zd Zd Z ddZeZe Zd Zd Zd Zd Zd Zd Zd ZdS )r a Class defining an actual DSA key.
Do not instantiate directly.
Use :func:`generate`, :func:`construct` or :func:`import_key` instead.
:ivar p: DSA modulus
:vartype p: integer
:ivar q: Order of the subgroup
:vartype q: integer
:ivar g: Generator
:vartype g: integer
:ivar y: Public key
:vartype y: integer
:ivar x: Private key
:vartype x: integer
:undocumented: exportKey, publickey
ygpqxc t | }t d }| | s"t dt ||z
z ||z
}|rB|t d k r/t dt |t d z
z t | | _ d S )Nr r r r! z$Some DSA components are missing = %sr" zUnknown DSA components = %s)setkeysissubset
ValueErrorstrdict_key)selfkey_dict input_set
public_set extra_sets v/builddir/build/BUILD/imunify360-venv-2.6.3/opt/imunify360/venv/lib64/python3.11/site-packages/Crypto/PublicKey/DSA.py__init__zDsaKey.__init__g s
(( .//
""9-- : C i!7 8 8 9 : :
:
* ;c&kk11 : S[[!8 9 9 : ; ;
;NN c st d d|cxk r j k sn t d fddD \ }}}}t j d| }||z | }||z } t ||| |z }
|||z | |
z z z |z } t t |
| f S )Nz)DSA public key cannot be used for signing zk is not between 2 and q-1c * g | ]}j | S r, .0compr- s r2
<listcomp>z DsaKey._sign.<locals>.<listcomp>y GGG$dioGGGr4 )r" r! r r )
min_inclusive
max_exclusive)
has_private TypeErrorr! r) r random_rangeinversepowmapint) r- mkr" r! r r blind_factor inv_blind_kblind_xrss ` r2 _signz DsaKey._signs s !! I GHH HA 9:: :GGGG2FGGG
1a +!9:< < < #a'0033 l" 1aLL1
L1 ,w{ :
;q @3A r4 c 8 |\ }} fddD \ }}}}d|cxk r|k rn nd|cxk r|k sn dS t | | } | |z |z }
| |z |z } t ||
| t || | z |z |z } | |k S )Nc * g | ]}j | S r8 r9 r: s r2 r= z"DsaKey._verify.<locals>.<listcomp> r> r4 )r r! r r r F)r rD rE )
r- rH sigrM rN r r! r r wu1u2vs
` r2 _verifyzDsaKey._verify s 1GGGG2FGGG
1aA 1q9999199995 AJJ q ! !!eq[!eq[
B]]SB]]
*Q
.! 3Av
r4 c d| j v S )z!Whether this is a DSA private keyr" r9 r- s r2 rA zDsaKey.has_private s di r4 c dS )NFr8 rY s r2 can_encryptzDsaKey.can_encrypt s ur4 c dS )NTr8 rY s r2 can_signzDsaKey.can_sign s tr4 c X t fddD }t | S )z^A matching DSA public key.
Returns:
a new :class:`DsaKey` object
c 3 6 K | ]}|j | fV d S Nr9 )r; rI r- s r2 <genexpr>z$DsaKey.public_key.<locals>.<genexpr> s. Q Qq!TYq\!2 Q Q Q Q Q Qr4 r$ )r+ r )r- public_componentss ` r2
public_keyzDsaKey.public_key s8 ! Q Q Q Q<P Q Q Q Q Q'(((r4 c
t | t | k rdS d}| j D ]2}|o-t | j |d t |j |d k }3|S )NFT)boolrA _keydatagetattrr, )r- otherresultr< s r2 __eq__z
DsaKey.__eq__ s "" # #tE,=,=,?,?'@'@ @ @5M B BD BD$!?!?!(T4!@!@"AFF
r4 c . | | S r` )rj )r- rh s r2 __ne__z
DsaKey.__ne__ s ;;u%%%%r4 c ddl m} |)Nr )
PicklingError)picklern )r- rn s r2 __getstate__zDsaKey.__getstate__ s ((((((r4 c fddD S )zPThe DSA domain parameters.
Returns
tuple : (p,q,g)
c D g | ] }t j | S r8 )rG r, r: s r2 r= z!DsaKey.domain.<locals>.<listcomp> s' AAADIdO$$AAAr4 )r r! r r8 rY s `r2 domainz
DsaKey.domain s BAAA AAAAr4 c g }| j D ]m}|dk r@t | j }| d|fz Ht | | r| | n| r| d d| j j t | d
| fz S )Nr zp(%d)privatez
<%s @0x%x %s>,) rf r r size_in_bitsappendhasattrrA __class____name__idjoin)r- attrsrI bitss r2 __repr__zDsaKey.__repr__ s ACxx tv3355 Ww .////q!!
Q $ LL # # # $."92d88SXXe__!UUUr4 c r t | j | S # t $ r t | w xY wr` )rG r, KeyErrorAttributeError)r- items r2 __getattr__zDsaKey.__getattr__ sD 'ty'' ' ' ' ' && & 's 6r Nc |t | }| t j }|dk rc fddD }d fd|D }dg|z }d d |D } d
t j | dd z S t
j j j g }
r|d }|rS|sd
}t j
} t j | t |||
| } |rd}
nd}
d}n|dk r|rt# d d j j j j j g}t
|
} d}
n;|rt# d t' t t j |
} d}
|dk r| S |dk r)t) j
| |
dz || }t | S t# d|z )a Export this DSA key.
Args:
format (string):
The encoding for the output:
- *'PEM'* (default). ASCII as per `RFC1421`_/ `RFC1423`_.
- *'DER'*. Binary ASN.1 encoding.
- *'OpenSSH'*. ASCII one-liner as per `RFC4253`_.
Only suitable for public keys, not for private keys.
passphrase (string):
*Private keys only*. The pass phrase to protect the output.
pkcs8 (boolean):
*Private keys only*. If ``True`` (default), the key is encoded
with `PKCS#8`_. If ``False``, it is encoded in the custom
OpenSSL/OpenSSH container.
protection (string):
*Only in combination with a pass phrase*.
The encryption scheme to use to protect the output.
If :data:`pkcs8` takes value ``True``, this is the PKCS#8
algorithm to use for deriving the secret and encrypting
the private DSA key.
For a complete list of algorithms, see :mod:`Crypto.IO.PKCS8`.
The default is *PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC*.
If :data:`pkcs8` is ``False``, the obsolete PEM encryption scheme is
used. It is based on MD5 for key derivation, and Triple DES for
encryption. Parameter :data:`protection` is then ignored.
The combination ``format='DER'`` and ``pkcs8=False`` is not allowed
if a passphrase is present.
randfunc (callable):
A function that returns random bytes.
By default it is :func:`Crypto.Random.get_random_bytes`.
Returns:
byte string : the encoded key
Raises:
ValueError : when the format is unknown or when you try to encrypt a private
key with *DER* format and OpenSSL/OpenSSH.
.. warning::
If you don't provide a pass phrase, the private key will be
exported in the clear!
.. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt
.. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt
.. _RFC4253: http://www.ietf.org/rfc/rfc4253.txt
.. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt
NOpenSSHc N g | ]!}j | "S r8 )r, to_bytes)r; r" r- s r2 r= z%DsaKey.export_key.<locals>.<listcomp> s+ JJJDIaL))++JJJr4 )r r! r r c Z t | d dz rt d | z S | S )Nr )r r r% s r2 funcz DsaKey.export_key.<locals>.func s. 1JJ% 77Q;& Hr4 c & g | ]
} | S r8 r8 )r; r" r s r2 r= z%DsaKey.export_key.<locals>.<listcomp> s! ***DDGG***r4 ssh-dssr4 c X g | ]'}t j d t | |z (S )>I)structpacklen)r; kps r2 r= z%DsaKey.export_key.<locals>.<listcomp> s/ P P PV[s2ww 7 7" < P P Pr4 ssh-dss Tz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC)
key_paramsrandfunczENCRYPTED PRIVATEPRIVATEr z#DSA private key cannot be encryptedr z DSA PRIVATEz*PKCS#8 is only meaningful for private keysPUBLICDERz KEYz3Unknown key format '%s'. Cannot export the DSA key.)r r get_random_bytesr} binascii
b2a_base64r r r! r rA r r" encoder
wrapoidr) r r r )r- formatpkcs8
passphrase
protectionr tup1tup2keyparts keystringparams private_key
binary_keykey_typeintspem_strr s ` @r2
export_keyzDsaKey.export_key sg v ! ,,J .H Y JJJJ5IJJJD
+***T***D"|d*H P Px P P P I !4Y!?!?!DD D dfdfdf 566 }
)! F!EJ ( 0 0 7 7 9 9 "Z +S* *v)1 " " "
) 2HH (H !
U??z?$%JKKK4646464646B ( . . 5 5 7 7
(
O !MNNN8 *46 2 2F< <J H U?? U??j *Hv,= *H G 7## #NQWWXXXr4 c t d Nz'Use module Crypto.Signature.DSS insteadNotImplementedError)r- MKs r2 signz DsaKey.signU !"KLLLr4 c t d r r )r- r signatures r2 verifyz
DsaKey.verifyX r r4 c t r` r )r- plaintextr s r2 encryptzDsaKey.encrypt[ !!r4 c t r` r )r-
ciphertexts r2 decryptzDsaKey.decrypt^ r r4 c t r` r r- r Bs r2 blindz DsaKey.blinda r r4 c t r` r r s r2 unblindzDsaKey.unblindd r r4 c t r` r rY s r2 sizez DsaKey.sizeg r r4 )r NNNN) r{
__module__ __qualname____doc__rf r3 rO rW rA r[ r] rc rj rl rp rs r r r exportKey publickeyr r r r r r r r8 r4 r2 r r N s , )((H
#
#
# "
) ) ) & & &
B B B V V V' ' ' ?C,0{Y {Y {Y {Y| IIM M MM M M" " "" " "" " "" " "" " " " "r4 r c T dddd | }|t d| z t j dz | z dz
z dz
}| dz
|z z
}t d }d|dz
z }t || t k rj |d
t j t j |dz
z }||z dz }t || t k j|
|k sJ dd| dz
z } fd t |dz D d
D t fdt | D | d|z dz
z d|z z z }t ||z } |
| k sJ | |dz z }
| |
dz
z
} |
| k rt | | t k rn |dz z
| dz
|z } t j d D ]}
dz t d z t |
z }t j t j | }t# || | }|dk r n| ||fS )z+Generate a new set of DSA domain parameters ) NzInvalid modulus length (%d) r6 @ Tc g | ]M}t j t |z z NS r8 )r newr r digest)r; joffsetseeds r2 r= z$_generate_domain.<locals>.<listcomp> s\
+
+
+ j
3 3 < < > >>??FFHH
+
+
+r4 c 6 g | ]}t j | S r8 r
from_bytes)r; rV s r2 r= z$_generate_domain.<locals>.<listcomp> s# 0 0 0g ## 0 0 0r4 c 2 g | ]}| d |z z z S )r6 r8 )r; iVoutlens r2 r= z$_generate_domain.<locals>.<listcomp> s+ CCC1q6z*+CCCr4 s ggen)getr) r digest_sizer r r r r r rw r sum itertoolscountr r rE )Lr Nnb_r! upper_bitUWXcr er r r r r r s @@@@r2 _generate_domainr k s 3((,,Q//Ay6:;;;
!
#F
Va F"Q&A
Q!f* B
Aa!e I
a
*
*n
<
<x|| vz$ / / 6 6 8 8 9 9Y] K
MA a
*
*n
<
<
>> q Fa!e I
+
+
+
+
+!!a%((
+
+
+ 0 0Q 0 0 0 CCCCCZ]]CCC1!r'Q 'A!f*,=>
@
@
A M " "~~ 1$$$$
QK
QK >> q q( + +~ = =!a% $
Q1 A ## 7NT!WW $wu~~'>'>'@'@ @ vz!}} 3 3 5 5 6 6 1aLL 66 E
q!T?r4 c | t j }|rt t | \ }}}t | t
k }|t | t
k z }||dz
|z dk z }||dk p||k z }|t
||| dk z }|rt d nt | | \ }}}}| }| } || k rt d|| fz || fdvrt d|| fz d|cxk r|k sn t d t j
| d z |
}
|
|dz
z dz } t
|| | } | |||| d }
t |
S ) a Generate a new DSA key pair.
The algorithm follows Appendix A.1/A.2 and B.1 of `FIPS 186-4`_,
respectively for domain generation and key pair generation.
Args:
bits (integer):
Key length, or size (in bits) of the DSA modulus *p*.
It must be 1024, 2048 or 3072.
randfunc (callable):
Random number generation function; it accepts a single integer N
and return a string of random data N bytes long.
If not specified, :func:`Crypto.Random.get_random_bytes` is used.
domain (tuple):
The DSA domain parameters *p*, *q* and *g* as a list of 3
integers. Size of *p* and *q* must comply to `FIPS 186-4`_.
If not specified, the parameters are created anew.
Returns:
:class:`DsaKey` : a new DSA key object
Raises:
ValueError : when **bits** is too little, too big, or not a multiple of 64.
.. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf
Nr6 r z Invalid DSA domain parametersz?Mismatch between size of modulus (%d) and 'bits' parameter (%d)))r r )r r )r r )r r z;Lengths of p and q (%d, %d) are not compatibleto FIPS 186-3zIncorrent DSA generatorr )
exact_bitsr r ) r r rF r r r rE r) r rw randomr )r r rs r r! r fmt_error_r r r r" r r. s r2 r r s < *
6gv&&1a (**i7 (++y88 q1uka'' Q!V%qAv% SAq\\Q&& > <== = > &dH55
1a A ADyy 69:D B C C C
1v 0 0 0 ),-q62 3 3 3
q9999199992333 !b&8<<<A QU aA Aq! AA1!44H ( r4 Tc t t dt t | }t | }d}|rt |j t k }|t |j t k z }||j dz
|j z dk z }||j dk p|j |j k z }|t |j |j |j dk z }||j dk p|j |j k z }t |d rJ||j
dk p|j
|j k z }|t |j |j
|j |j k z }|rt d |S )a Construct a DSA key from a tuple of valid DSA components.
Args:
tup (tuple):
A tuple of long integers, with 4 or 5 items
in the following order:
1. Public key (*y*).
2. Sub-group generator (*g*).
3. Modulus, finite field order (*p*).
4. Sub-group order (*q*).
5. Private key (*x*). Optional.
consistency_check (boolean):
If ``True``, the library will verify that the provided components
fulfil the main DSA properties.
Raises:
ValueError: when the key being imported fails the most basic DSA validity checks.
Returns:
:class:`DsaKey` : a DSA key object
r Fr6 r r" zInvalid DSA key components)r+ ziprF r r r r r r! r rE r ry r" r) )tupconsistency_checkr. keyr s r2 r r sS 2 C13w3D3DEEFFH
CI ;'..); (//9<< suqyCE)a// SUaZ135CE>1 Ssu--22 SUaZ135CE>1 3 ; !5su~ 5I SUCE3511SU: :I 75666 Jr4 c |rt d t | dd d dk rt d fddD }t | S ) Nz-DSA private key already comes with parameters T) nr_elementsonly_ints_expectedr zNo version foundc g | ]
}| S r8 r8 )r; r< ders r2 r= z+_import_openssl_private.<locals>.<listcomp>' s
1
1
13t9
1
1
1r4 )r r6 r )r) r decoder )encodedr r r r s @r2 _import_openssl_privater ! sz
JHIII
--
wA$
O
OC
1v{{+,,,
1
1
1
1
1
1
1C S>>r4 c ` t | \ }}}|t k rt d |r|rt d t | j }t
t |p| \ }}} || ||f}
t |
S )NzNo DSA subjectPublicKeyInfozToo many DSA parameters) r r r) r r
valuelistr r ) r r r algoid encoded_key
emb_paramsr r r! r r s r2 _import_subjectPublicKeyInfor + s 'Fw'O'O#FK
}}6777
4* 42333 K((.A;==''(<*==>>GAq! aA,C S>>r4 c B t | }t |d | S r` )r r )r r r sp_infos r2 _import_x509_certr 9 s! .w77G 'v > >>r4 c |rt d t j | | }|d t k rt d t |d j }t t |d \ }}}t ||| ||||f}t | S )Nz"PKCS#8 already includes parametersr zNo PKCS#8 encoded DSA keyr6 r ) r) r
unwrapr r r
r r r rE r ) r r r rI r" r r! r r s r2
_import_pkcs8r ? s
?=>>>
Wj))Ats{{4555 AaD!!'A;==''!--..GAq! q!Q<<Aq!
$C S>>r4 c t t t t f}|D ]!} || || c S # t $ r Y w xY wt d )z?Import a DSA key (public or private half), encoded in DER form. DSA key format is not supported)r r r r r) )key_datar r decodingsdecodings r2 _import_key_derr K sx )-" I
8Hj&99 9 9 9 D 6
7
77s /
<<c B t | } |t | }| d r;t j t | | \ }}}|rd}t ||d S | d rt
j | d d }g t | dk rct j d|dd d } |dd|z |d|z d }t | dk cd d k r fd
d D }t | S t | dk r*t | d d k rt | |d S t d
)a Import a DSA key.
Args:
extern_key (string or byte string):
The DSA key to import.
The following formats are supported for a DSA **public** key:
- X.509 certificate (binary DER or PEM)
- X.509 ``subjectPublicKeyInfo`` (binary DER or PEM)
- OpenSSH (ASCII one-liner, see `RFC4253`_)
The following formats are supported for a DSA **private** key:
- `PKCS#8`_ ``PrivateKeyInfo`` or ``EncryptedPrivateKeyInfo``
DER SEQUENCE (binary or PEM)
- OpenSSL/OpenSSH custom format (binary or PEM)
For details about the PEM encoding, see `RFC1421`_/`RFC1423`_.
passphrase (string):
In case of an encrypted private key, this is the pass phrase
from which the decryption key is derived.
Encryption may be applied either at the `PKCS#8`_ or at the PEM level.
Returns:
:class:`DsaKey` : a DSA key object
Raises:
ValueError : when the given key cannot be parsed (possibly because
the pass phrase is wrong).
.. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt
.. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt
.. _RFC4253: http://www.ietf.org/rfc/rfc4253.txt
.. _PKCS#8: http://www.ietf.org/rfc/rfc5208.txt
Ns -----r r6 r r r r c D g | ] }t j | S r8 r )r; r" r s r2 r= z import_key.<locals>.<listcomp> s( IIIq7%hqk22IIIr4 )r r r6 r 0 r )r
startswithr r
r
r r
a2b_base64splitr r unpackrx r r r) )
extern_keyr r markerenc_flagr lengthr r s @r2 r r \ s P $$J Z((
X&& 6"%*U:->->
"K"K fh J sJ555 [))
" '
(8(8(>(>q(ABB )nnq ]42A2 77:F OOIaF
l 3 4 4 4!!f*++.I )nnq A;* $ $IIIILIIIC S>> !
:tJqM 2 2d : : z:t<<<
6
7
77r4 z1.2.840.10040.4.1)NN)Tr` ).__all__r r r Crypto.Util.py3compatr r r r
r Cryptor Crypto.IOr
r Crypto.Hashr Crypto.Util.asn1r r r r r Crypto.Math.Numbersr Crypto.Math.Primalityr r r Crypto.PublicKeyr r r objectr r r r r r r r r r importKeyr r8 r4 r2 <module>r7 sF 2 =
<
<
H H H H H H H H H H H H H H ( ' ' ' ' '3 3 3 3 3 3 3 3 3 3@ @ @ @ @ @ @ @ @ @@Z" Z" Z" Z" Z"V Z" Z" Z"z2 2 2jF F F F R. . . .p ? ? ? 8 8 8"C8 C8 C8 C8N
r4