]ju g d Z ddlZddlZddlmZ ddlmZmZmZ ddl m
Z
m Z ddl m
Z
ddlmZmZmZ ddlmZmZmZ G d d
e Zdd ZddZd Zd Zd Z d Z d Z d Z d Z ddZ!e!Z"dZ#dS ))generate construct
import_keyRsaKeyoid N)Random)tobytesbordtostr) DerSequenceDerNull)Integer)test_probable_primegenerate_probable_prime COMPOSITE) _expand_subject_public_key_info _create_subject_public_key_info _extract_subject_public_key_infoc e Zd ZdZd Zed Zed Zed Zed Z ed Z
ed Z ed Z ed
Z
ed Zed Zd
Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Z d%d Z e Z eZ d Z d Z!d Z"d! Z#d" Z$d# Z%d$ Z&dS )&r a Class defining an actual RSA key.
Do not instantiate directly.
Use :func:`generate`, :func:`construct` or :func:`import_key` instead.
:ivar n: RSA modulus
:vartype n: integer
:ivar e: RSA public exponent
:vartype e: integer
:ivar d: RSA private exponent
:vartype d: integer
:ivar p: First factor of the RSA modulus
:vartype p: integer
:ivar q: Second factor of the RSA modulus
:vartype q: integer
:ivar invp: Chinese remainder component (:math:`p^{-1} \text{mod } q`)
:vartype invp: integer
:ivar invq: Chinese remainder component (:math:`q^{-1} \text{mod } p`)
:vartype invq: integer
:ivar u: Same as ``invp``
:vartype u: integer
:undocumented: exportKey, publickey
c t | }t d }|t d z }|||fvrt d | D ]\ }}t | d|z | ||k r7| j | j dz
z | _ | j | j dz
z | _ d| _
dS dS )a. Build an RSA key.
:Keywords:
n : integer
The modulus.
e : integer
The public exponent.
d : integer
The private exponent. Only required for private keys.
p : integer
The first factor of the modulus. Only required for private keys.
q : integer
The second factor of the modulus. Only required for private keys.
u : integer
The CRT coefficient (inverse of p modulo q). Only required for
private keys.
ne)pqduz Some RSA components are missing_ N) setkeys
ValueErroritemssetattr_d_p_dp_q_dq_invq)selfkwargs input_set
public_set private_set componentvalues v/builddir/build/BUILD/imunify360-venv-2.6.3/opt/imunify360/venv/lib64/python3.11/site-packages/Crypto/PublicKey/RSA.py__init__zRsaKey.__init__S s &
&& __
3';#<#<< [* 5 5 5 >?? ? & 2 2 Iu D# /5 1 1 1 1 # #w$'A+.DHw$'A+.DH DJJJ $ # c * t | j S N)int_nr+ s r2 r zRsaKey.nr 47||r4 c * t | j S r6 )r7 _er9 s r2 r zRsaKey.ev r: r4 c p | st d t | j S )Nz-No private exponent available for public keys) has_privateAttributeErrorr7 r% r9 s r2 r zRsaKey.dz s4 !! R !PQQ Q47||r4 c p | st d t | j S )Nz.No CRT component 'p' available for public keys)r> r? r7 r& r9 s r2 r zRsaKey.p 4 !! S !QRR R47||r4 c p | st d t | j S )Nz.No CRT component 'q' available for public keys)r> r? r7 r( r9 s r2 r zRsaKey.q rA r4 c p | st d t | j S )Nz/No CRT component 'dp' available for public keys)r> r? r7 r' r9 s r2 dpz RsaKey.dp 4 !! T !RSS S48}} r4 c p | st d t | j S )Nz/No CRT component 'dq' available for public keys)r> r? r7 r) r9 s r2 dqz RsaKey.dq rE r4 c | st d | j $| j | j | _ t
| j S )Nz1No CRT component 'invq' available for public keys)r> r? r* r( inverser& r7 r9 s r2 invqz RsaKey.invq sS !! V !TUU U : 11DJ4: r4 c | j S r6 )r r9 s r2 invpz RsaKey.invp s v
r4 c p | st d t | j S )Nz.No CRT component 'u' available for public keys)r> r? r7 _ur9 s r2 r zRsaKey.u rA r4 c 4 | j S )z Size of the RSA modulus in bitsr8 size_in_bitsr9 s r2 rQ zRsaKey.size_in_bits s w##%%%r4 c F | j dz
dz dz S )z9The minimal amount of bytes that can hold the RSA modulusr rP r9 s r2
size_in_byteszRsaKey.size_in_bytes s% $$&&*q0144r4 c d|cxk r | j k sn t d t t t | | j | j S )Nr zPlaintext too large)r8 r" r7 powr r< )r+ plaintexts r2 _encryptzRsaKey._encrypt sX I'''''''' 233 33wy))47DG<<===r4 c d|cxk r | j k sn t d | st d t j d| j }t | t
|| j | j z | j z }t
|| j | j }t
|| j
| j }||z
| j z | j z }|| j z |z }|
| j |z | j z }|t
|| j | j k rt d |S )Nr zCiphertext too largezThis is not a private keyr )
min_inclusive
max_exclusivez Fault detected in RSA decryption)r8 r" r> TypeErrorr random_rangerV r< r' r& r) r( rN rI ) r+
ciphertextrcpm1m2hmpresults r2 _decryptzRsaKey._decrypt s6 J(((((((( 344 4 !! 9 788 8
q H H H
Z
3q$'47#;#;
;dg
E
TXtw
'
'
TXtw
'
'2g
DG +
[2
))DG$$r)TW4 VTWdg66 6 6 ?@@ @
r4 c " t | d S )z"Whether this is an RSA private keyr% )hasattrr9 s r2 r> zRsaKey.has_private s tT"""r4 c dS NT r9 s r2 can_encryptzRsaKey.can_encrypt tr4 c dS rj rk r9 s r2 can_signzRsaKey.can_sign rm r4 c 8 t | j | j S )z^A matching RSA public key.
Returns:
a new :class:`RsaKey` object
r )r r8 r< r9 s r2
public_keyzRsaKey.public_key s 47++++r4 c | | k rdS | j |j k s| j |j k rdS | sdS | j |j k S )NFT)r> r r r r+ others r2 __eq__z
RsaKey.__eq__ st !2!2!4!4 4 45 6UW %' 1 15 !! 4%'!"r4 c | |k S r6 rk rs s r2 __ne__z
RsaKey.__ne__ s EM""r4 c ddl m} |)Nr )
PicklingError)picklery )r+ ry s r2 __getstate__zRsaKey.__getstate__ s ((((((r4 c * | rRdt | j t | j t | j t | j fz }nd}dt | j t | j |fz S )Nz, d=%d, p=%d, q=%d, u=%d zRsaKey(n=%d, e=%d%s))r> r7 r% r& r( rN r8 r< )r+ extras r2 __repr__zRsaKey.__repr__ s{ .#dg,,DG 25dg,,DG 2N NEE E%TW s47||U(KKKr4 c \ | rd}nd}d|t | fz S )NPrivatePublicz%s RSA key at 0x%X)r> id)r+ key_types r2 __str__zRsaKey.__str__ s8 HH H#xD&:::r4 PEMNr c
|t | }| t j }|dk rd | j | j fD \ }}t |d dz rd|z }t |d dz rd|z }d||g}d d |D } d
t j | dd z S | r t d| j | j | j
| j | j | j
| j d z
z | j
| j d z
z t! | j | j g }
|d k rd
} |dk r|rt' d nddlm} |dk r/|-d} | |
t. dt1 }
nqd} |sd}| |
t. ||t1 }
d}n=d} t3 t. t | j | j g t1 }
|dk r|
S |dk r-ddlm}
|
|
| || }t | S t' d|z )a% Export this RSA key.
Args:
format (string):
The format to use for wrapping the key:
- *'PEM'*. (*Default*) Text encoding, done according to `RFC1421`_/`RFC1423`_.
- *'DER'*. Binary encoding.
- *'OpenSSH'*. Textual encoding, done according to OpenSSH specification.
Only suitable for public keys (not private keys).
passphrase (string):
(*For private keys only*) The pass phrase used for protecting the output.
pkcs (integer):
(*For private keys only*) The ASN.1 structure to use for
serializing the key. Note that even in case of PEM
encoding, there is an inner ASN.1 DER structure.
With ``pkcs=1`` (*default*), the private key is encoded in a
simple `PKCS#1`_ structure (``RSAPrivateKey``).
With ``pkcs=8``, the private key is encoded in a `PKCS#8`_ structure
(``PrivateKeyInfo``).
.. note::
This parameter is ignored for a public key.
For DER and PEM, an ASN.1 DER ``SubjectPublicKeyInfo``
structure is always used.
protection (string):
(*For private keys only*)
The encryption scheme to use for protecting the private key.
If ``None`` (default), the behavior depends on :attr:`format`:
- For *'DER'*, the *PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC*
scheme is used. The following operations are performed:
1. A 16 byte Triple DES key is derived from the passphrase
using :func:`Crypto.Protocol.KDF.PBKDF2` with 8 bytes salt,
and 1 000 iterations of :mod:`Crypto.Hash.HMAC`.
2. The private key is encrypted using CBC.
3. The encrypted key is encoded according to PKCS#8.
- For *'PEM'*, the obsolete PEM encryption scheme is used.
It is based on MD5 for key derivation, and Triple DES for encryption.
Specifying a value for :attr:`protection` is only meaningful for PKCS#8
(that is, ``pkcs=8``) and only if a pass phrase is present too.
The supported schemes for PKCS#8 are listed in the
:mod:`Crypto.IO.PKCS8` module (see :attr:`wrap_algo` parameter).
randfunc (callable):
A function that provides random bytes. Only used for PEM encoding.
The default is :func:`Crypto.Random.get_random_bytes`.
Returns:
byte string: the encoded key
Raises:
ValueError:when the format is unknown or when you try to encrypt a private
key with *DER* format and PKCS#1.
.. warning::
If you don't provide a pass phrase, the private key will be
exported in the clear!
.. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt
.. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt
.. _`PKCS#1`: http://www.ietf.org/rfc/rfc3447.txt
.. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt
NOpenSSHc 6 g | ]}| S rk )to_bytes.0xs r2
<listcomp>z%RsaKey.export_key.<locals>.<listcomp>V s I I I
I I Ir4 r s ssh-rsar4 c X g | ]'}t j d t | |z (S )>I)structpacklen)r kps r2 r z%RsaKey.export_key.<locals>.<listcomp>\ s/ !U!U!Ub&+dCGG"<"<r"A!U!U!Ur4 ssh-rsa r zRSA PRIVATE KEYDERz&PKCS#1 private key cannot be encryptedPKCS8r z PRIVATE KEY)
key_paramszENCRYPTED PRIVATE KEYz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBCz
PUBLIC KEYr z3Unknown key format '%s'. Cannot export the RSA key.)r r get_random_bytesr< r8 r
joinbinascii
b2a_base64r> r r r r r r r rI encoder" Crypto.IOr wrapr r
r r )r+ format
passphrasepkcs
protectionrandfunce_bytesn_byteskeyparts keystring
binary_keyr r r pem_strs r2
export_keyzRsaKey.export_key s Z ! ,,J .H Y I Itw6H I I I GWGAJ $&
,!G+GAJ $&
,!G+"GW5H!U!UH!U!U!UVVI !4Y!?!?!DD D $ ;$a&*f&*f&*f&*f&*f&*fq&9&*fq&9&-dfoo&=&=df&E&E &( ) ) *0
qyy,U??z?$%MNNN++++++U??z'9 ,H!&JT7>yy ", "B "BJJ 7H% J%I
!&J,6
7>yy ", "B "BJ "&JJ#H89DdfFJfFN :O :O9@; ;J U?? U?? % % % % % %jjXz8LLG7## #NQWWXXXr4 c t d Nz,Use module Crypto.Signature.pkcs1_15 insteadNotImplementedError)r+ MKs r2 signz RsaKey.sign !"PQQQr4 c t d r r )r+ r signatures r2 verifyz
RsaKey.verify r r4 c t d Nz+Use module Crypto.Cipher.PKCS1_OAEP insteadr )r+ rW r s r2 encryptzRsaKey.encrypt !"OPPPr4 c t d r r )r+ r^ s r2 decryptzRsaKey.decrypt r r4 c t r6 r r+ r Bs r2 blindz RsaKey.blind !!r4 c t r6 r r s r2 unblindzRsaKey.unblind r r4 c t r6 r r9 s r2 sizez RsaKey.size r r4 )r Nr NN)'__name__
__module__ __qualname____doc__r3 propertyr r r r r rD rG rJ rL r rQ rT rX rf r> rl ro rq ru rw r{ r r r exportKey publickeyr r r r r r r rk r4 r2 r r 3 s > > X X X
X
X
X
X
X X X
& & &5 5 5> > >
0# # #
, , ,# # ## # #
L L L; ; ; >?-1MY MY MY MY` IIR R RR R RQ Q QQ Q Q" " "" " "" " " " "r4 r c
| dk rt d dz dk sdk rt d | t j }t d x}}t | | k r|d| dz z k r
| dz }| |z
}t d d|z dz
z x
||k r*t d d|z dz
z
fd }t
|||
t d | dz d z
z fd }t
|||
} | z }dz
| dz
}
|
}| | k r
|d| dz z k
| k r| c} | } t ||| |
S )a0 Create a new RSA key pair.
The algorithm closely follows NIST `FIPS 186-4`_ in its
sections B.3.1 and B.3.3. The modulus is the product of
two non-strong probable primes.
Each prime passes a suitable number of Miller-Rabin tests
with random bases and a single Lucas test.
Args:
bits (integer):
Key length, or size (in bits) of the RSA modulus.
It must be at least 1024, but **2048 is recommended.**
The FIPS standard only defines 1024, 2048 and 3072.
randfunc (callable):
Function that returns random bytes.
The default is :func:`Crypto.Random.get_random_bytes`.
e (integer):
Public RSA exponent. It must be an odd positive integer.
It is typically a small number with very few ones in its
binary representation.
The FIPS standard requires the public exponent to be
at least 65537 (the default).
Returns: an RSA key object (:class:`RsaKey`, with private key).
.. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf
i z"RSA modulus length must be >= 1024 r zBRSA public exponent must be a positive, odd integer larger than 2.Nr c H | k o| dz
dk S Nr )gcd) candidater min_ps r2 filter_pzgenerate.<locals>.filter_p s* u$D)a-)<)<Q)?)?1)D Dr4 )
exact_bitsr prime_filterd c t | k o1| dz
dk ot | z
k S r )r abs)r r min_distancemin_qr s r2 filter_qzgenerate.<locals>.filter_q sH % 6 ]''**a/6 A
&& 5
7r4 r r r r r r )
r" r r r rQ sqrtr lcmrI r )bitsr r r r size_qsize_pr r r r r r r r r s ` @@@@r2 r r sB : d{{=>>>1uzzQUU]^^^* AJJA
A
..
d
"
"qA$!),<'='= F
Q7==??? V QZZAJN399;;E E E E E E E
$v-519
;
;
; qzzdai#o6 7 7 7 7 7 7 7 7
$v-519
;
;
;
E1ukk!a%
IIcNN? ..
d
"
"qA$!),<'='=B 1uu!1 ! A Aa1Q / / //r4 Tc 6 G d dt } | }t d| D ]#\ }}t ||t | $|j }|j }t
|d st || }nM|j } t
|d r|j }
|j
} n| |z dz
} | }
|
dz d k r|
dz }
|
dz d k d
}t d }|s|d k rt |
}|| k rht ||| }|dk rF||dz
k r=t |d| dk r(t | |dz }
d }n |dz }|| k h|dz
}|s|d k |st d
||
z d k sJ ||
z } t
|d r|j }n|
| }t ||| |
| | }|r|dk s||k rt d t | | dk rt d |dz st d | rM| dk s| |k rt d t | | dk rt d |
| z |k rt d t# |
t$ k rt d t# | t$ k rt d |
dz
| dz
z }||
dz
| dz
z }|| z t' | z dk rt d t
|d r6|dk s|| k rt d |
|z | z dk rt d |S )a! Construct an RSA key from a tuple of valid RSA components.
The modulus **n** must be the product of two primes.
The public exponent **e** must be odd and larger than 1.
In case of a private key, the following equations must apply:
.. math::
\begin{align}
p*q &= n \\
e*d &\equiv 1 ( \text{mod lcm} [(p-1)(q-1)]) \\
p*u &\equiv 1 ( \text{mod } q)
\end{align}
Args:
rsa_components (tuple):
A tuple of integers, with at least 2 and no
more than 6 items. The items come in the following order:
1. RSA modulus *n*.
2. Public exponent *e*.
3. Private exponent *d*.
Only required if the key is private.
4. First factor of *n* (*p*).
Optional, but the other factor *q* must also be present.
5. Second factor of *n* (*q*). Optional.
6. CRT coefficient *q*, that is :math:`p^{-1} \text{mod }q`. Optional.
consistency_check (boolean):
If ``True``, the library will verify that the provided components
fulfil the main RSA properties.
Raises:
ValueError: when the key being imported fails the most basic RSA validity checks.
Returns: An RSA key object (:class:`RsaKey`).
c e Zd ZdS ) construct.<locals>.InputCompsN)r r r rk r4 r2
InputCompsr % s r4 r r r r r r r r Fr Tz2Unable to compute factors p and q from exponent d.r zInvalid RSA public exponentz-RSA public exponent is not coprime to moduluszRSA modulus is not oddz Invalid RSA private exponentz.RSA private exponent is not coprime to modulusz RSA factors do not match moduluszRSA factor p is compositezRSA factor q is compositezInvalid RSA conditionzInvalid RSA component uz Invalid RSA component u with p)objectzipr$ r r r rh r r r r rV r r" r rI r> r r r7 )rsa_componentsconsistency_checkr input_compscompr1 r r keyr r r ktottspottedakcandr phir s r2 r r s1 P
V
*,,K ;^LL 3 3
u T75>>2222
A
A ; $ $ 33qA M ; $ $ '
A
AA
q519D Aa%1**a a%1** G
A
!c''AJJ$hh q!Q<<DqyyTa!e__T1a A9M9M $AJJNN4!8 4 4"& FA $hh Q
!c''
W !UVVVUqLLLLQA ; $ $
AA ! A qAa1222 #G
66Q!VV :;; ; 1::>>! ! ! LMM M 1u 7 566 6 ?? GAvva !?@@@qzz~~a A%% !QRRR1uzz !CDDD"1%%22 !<==="1%%22 !<===q5QU#C!a%QU+++CAC Q&& !8999sC
G66Q!VV$%>???EAI!##$%EFFF Jr4 c t | dd }|d dk rt d t |dd t |d |d gz S )
N T nr_elementsonly_ints_expectedr z(No PKCS#1 encoding of an RSA private keyr )r decoder" r r rI encodedr, ders r2 _import_pkcs1_privater sx --
wA$
O
OC
1v{{CDDD S1XQ !8!8Q!@!@ AA B BBr4 c h t | dd }t | S )Nr Tr )r r r r s r2 _import_pkcs1_publicr
s.
--
wA$
O
OC S>>r4 c ~ t | \ }}}|t k s|t d t | S )NzNo RSA subjectPublicKeyInfo)r r r" r
)r r, algoid encoded_keyparamss r2 _import_subjectPublicKeyInfor sA "A'"J"J FK
}}*6777 , ,,r4 c > t | }t | S r6 )r r )r r, sp_infos r2 _import_x509_certr s .w77G ' 0 00r4 c ddl m} | | | }|d t k rt d t |d | S )Nr r zNo PKCS#8 encoded RSA keyr )r r unwrapr r" _import_keyDER)r r r r s r2
_import_pkcs8r sW
Wj))Ats{{4555 !A$
+ ++r4 c t t t t t f}|D ] } || | c S # t
$ r Y w xY wt d )z@Import an RSA key (public or private half), encoded in DER form. RSA key format is not supported)r r
r r r r" )
extern_keyr decodingsdecodings r2 r r sy '%-" I 8J
33 3 3 3 D 6
7
77s 4
A Ac ~ ddl m}m}m}m} || | \ }}|dk rt d || \ }} || \ } } || \ }
} || \ } } || \ } } || \ }
} || \ }} || d || |
|
| | fD }t
| S )Nr ) import_openssh_private_generic
read_bytes read_string
check_paddingzssh-rsazThis SSH key is not RSAc 6 g | ]}t j | S rk )r
from_bytesr s r2 r z/_import_openssh_private_rsa.<locals>.<listcomp> s# B B BqW
"
" B B Br4 )_opensshr r r r r" r )datapasswordr r r r ssh_name decryptedr r r iqmpr r r paddedbuilds r2 _import_openssh_private_rsar+ s@ C C C C C C C C C C C C 98xHHHi9 2333 :i((LAy :i((LAy :i((LAy j++OD) :i((LAy :i((LAy I&&IAvM& B BQ1aD,A B B BE U r4 c " ddl m} t | } |t | }| d r;t | }| || \ }}}t
|| }|S | d r;| t | | \ }}}|rd}t || S | d rt j |
d d } g }
t | d k rct j
d
| dd d } |
| d d | z | d | z d } t | d k ct j |
d } t j |
d }
t# |
| g S t | dk r)t% | d d k rt | | S t' d
)a Import an RSA key (public or private).
Args:
extern_key (string or byte string):
The RSA key to import.
The following formats are supported for an RSA **public key**:
- X.509 certificate (binary or PEM format)
- X.509 ``subjectPublicKeyInfo`` DER SEQUENCE (binary or PEM
encoding)
- `PKCS#1`_ ``RSAPublicKey`` DER SEQUENCE (binary or PEM encoding)
- An OpenSSH line (e.g. the content of ``~/.ssh/id_ecdsa``, ASCII)
The following formats are supported for an RSA **private key**:
- PKCS#1 ``RSAPrivateKey`` DER SEQUENCE (binary or PEM encoding)
- `PKCS#8`_ ``PrivateKeyInfo`` or ``EncryptedPrivateKeyInfo``
DER SEQUENCE (binary or PEM encoding)
- OpenSSH (text format, introduced in `OpenSSH 6.5`_)
For details about the PEM encoding, see `RFC1421`_/`RFC1423`_.
passphrase (string or byte string):
For private keys only, the pass phrase that encrypts the key.
Returns: An RSA key object (:class:`RsaKey`).
Raises:
ValueError/IndexError/TypeError:
When the given key cannot be parsed (possibly because the pass
phrase is wrong).
.. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt
.. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt
.. _`PKCS#1`: http://www.ietf.org/rfc/rfc3447.txt
.. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt
.. _`OpenSSH 6.5`: https://flak.tedunangst.com/post/new-openssh-key-format-and-bcrypt-pbkdf
r r Ns -----BEGIN OPENSSH PRIVATE KEYs -----r r r r r 0 r )r r r
startswithr r r+ r r
a2b_base64splitr r unpackappendr r" r r
r" )r r r text_encodedopenssh_encodedmarkerenc_flagre r r r lengthr r s r2 r r s R $$J Z((
>?? Z(( ,/JJ|Z,P,P),_jII
X&& /"%**U:->->
"K"K fh J c:... [))
! '
(8(8(>(>q(ABB )nnq ]42A2 77:F OOIaF
l 3 4 4 4!!f*++.I )nnq
x{ + + x{ + +!Q
:tJqM 2 2d : : j*555
6
7
77r4 z1.2.840.113549.1.1.1)Nr )Tr6 )$__all__r r Cryptor Crypto.Util.py3compatr r
r Crypto.Util.asn1r r
Crypto.Math.Numbersr Crypto.Math.Primalityr r r Crypto.PublicKeyr r r r r r r r r
r r r r r+ r importKeyr rk r4 r2 <module>rA s @
6 6 6 6 6 6 6 6 6 6 1 1 1 1 1 1 1 1 ' ' ' ' ' 'G G G G G G G G G G@ @ @ @ @ @ @ @ @ @
v" v" v" v" v"V v" v" v"r N0 N0 N0 N0bL L L L^C C C( - - -1 1 1 , , ,8 8 8$ 0L8 L8 L8 L8`
r4