]j; d dl mZ d dlmZ d dlmZ d dlmZ d dlm Z d dl
m Z ddgZ G d de
Z G d
d e Z G d d
e Z G d de ZddZdS ) ) DerSequence)
long_to_bytes)Integer)HMAC)EccKey)DsaKey DssSigSchemenewc 6 e Zd ZdZd Zd Zd Zd Zd Zd Z dS ) r zkA (EC)DSA signature object.
Do not instantiate directly.
Use :func:`Crypto.Signature.DSS.new`.
c || _ || _ || _ | j | _ | j dz
dz dz | _ dS )zCreate a new Digital Signature Standard (DSS) object.
Do not instantiate this object directly,
use `Crypto.Signature.DSS.new` instead.
N)_key _encoding_order size_in_bits _order_bits _order_bytes)selfkeyencodingorders v/builddir/build/BUILD/imunify360-venv-2.6.3/opt/imunify360/venv/lib64/python3.11/site-packages/Crypto/Signature/DSS.py__init__zDssSigScheme.__init__3 sO ! ;3355 ! - 1a 7! ; c 4 | j S )zRReturn ``True`` if this signature object can be used
for signing messages.)r has_private)r s r can_signzDssSigScheme.can_signA s y$$&&&r c t d Nz To be provided by subclassesNotImplementedErrorr msg_hashs r _compute_noncezDssSigScheme._compute_nonceG !"@AAAr c t d r r! r# s r _valid_hashzDssSigScheme._valid_hashJ r& r c j st d | st d | }t
j | d j } j
|| } j dk r"d fd|D }n!t | }|S )a Compute the DSA/ECDSA signature of a message.
Args:
msg_hash (hash object):
The hash that was carried out over the message.
The object belongs to the :mod:`Crypto.Hash` package.
Under mode ``'fips-186-3'``, the hash must be a FIPS
approved secure hash (SHA-2 or SHA-3).
:return: The signature as ``bytes``
:raise ValueError: if the hash algorithm is incompatible to the (EC)DSA key
:raise TypeError: if the (EC)DSA key has no private half
z Private key is needed to sign Hash is not sufficiently strongNbinaryr c : g | ]}t |j S )r r ).0xr s r
<listcomp>z%DssSigScheme.sign.<locals>.<listcomp>k s6 2 2 2#$ -Q0A B B 2 2 2r )r r TypeErrorr(
ValueErrorr% r
from_bytesdigestr _signr joinr encode)r r$ noncezsig_pairoutputs ` r signzDssSigScheme.signM s y$$&& = ;<< < )) @ >?? ? ##H--
x 0 01C$2C1C D E E9??1e,, >X % %XX 2 2 2 2(0 2 2 2 3 3FF !**1133F
r c | | st d | j dk rVt | d| j z k rt d d |d| j || j d fD \ }}n t |d }n$# t t f$ r t d w xY wt | dk s| st d
t |d t |d }}d |cxk r | j
k rn nd |cxk r | j
k sn t d
t j | d| j }| j
|||f }|st d dS )a Check if a certain (EC)DSA signature is authentic.
Args:
msg_hash (hash object):
The hash that was carried out over the message.
This is an object belonging to the :mod:`Crypto.Hash` module.
Under mode ``'fips-186-3'``, the hash must be a FIPS
approved secure hash (SHA-2 or SHA-3).
signature (``bytes``):
The signature that needs to be validated.
:raise ValueError: if the signature is not authentic
r* r+ z'The signature is not authentic (length)c 6 g | ]}t j | S r- )r r3 )r. r/ s r r0 z'DssSigScheme.verify.<locals>.<listcomp> s9 J J J$% !( 21 5 5 J J Jr NT)strictz$The signature is not authentic (DER)z,The signature is not authentic (DER content)r r
z"The signature is not authentic (d)z The signature is not authenticF)r( r2 r lenr r decode
IndexError hasOnlyIntsr r r3 r4 r _verify)r r$ signaturer_primes_primeder_seqr9 results r verifyzDssSigScheme.verifyz s
)) @ >?? ? >X % %9~~!d&7"788 !JKKK J J*34FT5F4F*G*3D4E4F4F*G*I J J J GWW
I%--..y.FF
+
I
I
I !GHHH
I7||q (;(;(=(= !OPPP &wqz 2 2GGAJ4G4GWGG))))dk)))))1w3L3L3L3L3L3L3L3L ABB B x 0 01C$2C1C D E E""1w&899 ? =>> >us #B+ +!C N)
__name__
__module__ __qualname____doc__r r r% r( r< rK r- r r r r - s
< < < ' ' ' B B BB B B+ + +Z* * * * *r c < e Zd Z fdZd Zd Zd Zd Zd Z xZ S )DeterministicDsaSigSchemec j t t | ||| || _ d S N)superrQ r _private_key)r r r r private_key __class__s r r z"DeterministicDsaSigScheme.__init__ s4
'..77XuMMM 'r c t j | }| j }t | dz }||k r|||z
z }|S )zSee 2.3.2 in RFC6979r )r r3 r r rA )r bstrrJ q_lenb_lens r _bits2intz#DeterministicDsaSigScheme._bits2int sR #D)) ((**D A
5==
&F
r c X d|cxk r | j k sn J t || j S )zSee 2.3.3 in RFC6979r )r r r )r int_mod_qs r _int2octetsz%DeterministicDsaSigScheme._int2octets s> 9****t{****** Y(9:::r c | | }|| j k r|}n
|| j z
}| | S )zSee 2.3.4 in RFC6979)r\ r r_ )r rY z1z2s r _bits2octetsz&DeterministicDsaSigScheme._bits2octets sI ^^D
!
!
BBdk!B ###r c X | }d|j z }d|j z }dD ]}t j |||z | | j z | | z | }t j ||| }d}d|cxk r | j k sn |dk rSt j ||dz | }t j ||| }d}t | | j k rEt j ||| }||z
}t | | j k E|
| }d|cxk r | j k n |S )z!Generate k in a deterministic way )rf re r r ) r4 digest_sizer r
r_ rU rc r rA r r\ )r mhashh1mask_vnonce_kint_octr8 mask_ts r r% z(DeterministicDsaSigScheme._compute_nonce s
\\^^5,,E --) ? ?Ghw % / # / /0A B B C # 0 0 4 4 56;= = >DVXX
Xgvu55<<>>FFu****t{****{{ (7FW,<#(* **0&(( '6599@@BB F f++ 111 '6599@@BB& f++ 111
NN6**E! u****t{*****" r c dS )NTr- r# s r r( z%DeterministicDsaSigScheme._valid_hash s tr )
rL rM rN r r\ r_ rc r% r(
__classcell__rW s @r rQ rQ s ( ( ( ( ( ; ; ; $ $ $& & &P r rQ c . e Zd ZdZ fdZd Zd Z xZS )FipsDsaSigScheme))i ) )ru )i rw c t t | ||| || _ t |j }|| j f| j vrd|| j fz }t | d S )Nz+L/N (%d, %d) is not compliant to FIPS 186-3)
rT rs r _randfuncr pr r _fips_186_3_L_Nr2 )r r r r randfuncLerrorrW s r r zFipsDsaSigScheme.__init__ s
%%..sHeDDD! CENN ' ' ) )
t (< < <B4+,-E U## # = <r c D t j d| j | j S Nr
)
min_inclusive
max_exclusiver| )r random_ranger ry r# s r r% z FipsDsaSigScheme._compute_nonce s( #!26+-1^= = = =r c L |j dk p|j d S )z*Verify that SHA-1, SHA-2 or SHA-3 are usedz
1.3.14.3.2.26z2.16.840.1.101.3.4.2.)oid
startswithr# s r r( z FipsDsaSigScheme._valid_hash s, / A ''(?@@ Br )rL rM rN r{ r r% r( rp rq s @r rs rs sd
O$ $ $ $ $= = = B B B B B B Br rs c * e Zd Z fdZd Zd Z xZS )FipsEcDsaSigSchemec j t t | ||| || _ d S rS )rT r r ry )r r r r r| rW s r r zFipsEcDsaSigScheme.__init__ s1
$''00hFFF!r c X t j d| j j j | j S r )r r r _curver ry r# s r r% z!FipsEcDsaSigScheme._compute_nonce s. #!26)2B2H-1^= = = =r c | j j }d}d}d}d}||z |z |z } |j |v }n# t $ r d}Y nw xY w|S )zxVerify that the strength of the hash matches or exceeds
the strength of the EC. We fail if the hash is too weak.)z2.16.840.1.101.3.4.2.4z2.16.840.1.101.3.4.2.7z2.16.840.1.101.3.4.2.5)z2.16.840.1.101.3.4.2.1z2.16.840.1.101.3.4.2.8z2.16.840.1.101.3.4.2.6)z2.16.840.1.101.3.4.2.2z2.16.840.1.101.3.4.2.9)z2.16.840.1.101.3.4.2.3z2.16.840.1.101.3.4.2.10F)r pointQr r AttributeError) r r$ modulus_bitssha224sha256sha384sha512shsrJ s r r( z FipsEcDsaSigScheme._valid_hash" s y'4466 `_EFvo&/ \S(FF FFF
s = A A )rL rM rN r r% r( rp rq s @r r r sV " " " " "= = =
r r r+ Nc |dvrt d|z t | t r.| j j }d}| j j dk rt d nXt | t rt | j }d}n,t dt t | z | rt | | }nd}|d k rt | ||| S |d
k r9t | t rt | ||| S t | ||| S t d |z ) a
Create a signature object :class:`DssSigScheme` that
can perform (EC)DSA signature or verification.
.. note::
Refer to `NIST SP 800 Part 1 Rev 4`_ (or newer release) for an
overview of the recommended key lengths.
Args:
key (:class:`Crypto.PublicKey.DSA` or :class:`Crypto.PublicKey.ECC`):
The key to use for computing the signature (*private* keys only)
or for verifying one.
For DSA keys, let ``L`` and ``N`` be the bit lengths of the modulus ``p``
and of ``q``: the pair ``(L,N)`` must appear in the following list,
in compliance to section 4.2 of `FIPS 186-4`_:
- (1024, 160) *legacy only; do not create new signatures with this*
- (2048, 224) *deprecated; do not create new signatures with this*
- (2048, 256)
- (3072, 256)
For ECC, only keys over P-224, P-256, P-384, and P-521 are accepted.
mode (string):
The parameter can take these values:
- ``'fips-186-3'``. The signature generation is randomized and carried out
according to `FIPS 186-3`_: the nonce ``k`` is taken from the RNG.
- ``'deterministic-rfc6979'``. The signature generation is not
randomized. See RFC6979_.
encoding (string):
How the signature is encoded. This value determines the output of
:meth:`sign` and the input to :meth:`verify`.
The following values are accepted:
- ``'binary'`` (default), the signature is the raw concatenation
of ``r`` and ``s``. It is defined in the IEEE P.1363 standard.
For DSA, the size in bytes of the signature is ``N/4`` bytes
(e.g. 64 for ``N=256``).
For ECDSA, the signature is always twice the length of a point
coordinate (e.g. 64 bytes for P-256).
- ``'der'``, the signature is a ASN.1 DER SEQUENCE
with two INTEGERs (``r`` and ``s``). It is defined in RFC3279_.
The size of the signature is variable.
randfunc (callable):
A function that returns random ``bytes``, of a given length.
If omitted, the internal RNG is used.
Only applicable for the *'fips-186-3'* mode.
.. _FIPS 186-3: http://csrc.nist.gov/publications/fips/fips186-3/fips_186-3.pdf
.. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf
.. _NIST SP 800 Part 1 Rev 4: http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r4.pdf
.. _RFC6979: http://tools.ietf.org/html/rfc6979
.. _RFC3279: https://tools.ietf.org/html/rfc3279#section-2.2.2
)r+ derzUnknown encoding '%s'ded25519z ECC key is not on a NIST P curver/ zUnsupported key type Nzdeterministic-rfc6979z
fips-186-3zUnknown DSS mode '%s')r2
isinstancer r r namer r qstrtyper getattrrQ r rs )r moder r| r private_key_attrrV s r r
r
6 sW D (((08;<<<#v C
:?i ' ' ?@@ @ ( C C 03tCyy>>ABBB
c#344 &&&(h{KKK
c6 " " D%c8UHEE E#C5(CC C047888r )r+ N)Crypto.Util.asn1r Crypto.Util.numberr Crypto.Math.Numbersr Crypto.Hashr Crypto.PublicKey.ECCr Crypto.PublicKey.DSAr __all__objectr rQ rs r r
r- r r <module>r se D ) ( ( ( ( ( , , , , , , ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' 5
!w w w w w6 w w wtK K K K K K K K\ B B B B B| B B BD >]9 ]9 ]9 ]9 ]9 ]9r