]jS d dl Z d dlZd dlZddlmZ ddlmZmZmZm Z m
Z
m Z m Z d dl
Zd dl
mZ d dlmZ d dlmZmZ d dlmZmZ d d lmZmZ d d
lm Z m Z m Z m Z m Z m!Z!m"Z"m#Z# d d l$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+ d Z,n
# e-$ r d
Z,Y nw xY wh dZ.d Z/ G d d Z0 G d de0 Z1 G d de0 Z2e,r: G d de0 Z3 G d de0 Z4 G d de3 Z5 G d d e0 Z6dS dS ) N InvalidKeyError)base64url_decodebase64url_encodeder_to_raw_signature force_bytesfrom_base64url_uintraw_to_der_signatureto_base64url_uint)InvalidSignature)hashes)ecpadding)EllipticCurvePrivateKeyEllipticCurvePublicKey)Ed25519PrivateKeyEd25519PublicKey)
RSAPrivateKeyRSAPrivateNumbers RSAPublicKeyRSAPublicNumbers rsa_crt_dmp1 rsa_crt_dmq1 rsa_crt_iqmprsa_recover_prime_factors)Encoding NoEncryption
PrivateFormat PublicFormatload_pem_private_keyload_pem_public_keyload_ssh_public_keyTF> ES256ES384ES512ES521EdDSAPS256PS384PS512RS256RS384RS512ES256Kc t t t j t t j t t j d} t
r+| t t j t t j t t j t t j t t j t t j t t j t t j t t j t t j t t j t d | S )zE
Returns the algorithms that are implemented by the library.
)noneHS256HS384HS512) r, r- r. r$ r/ r% r' r& r) r* r+ r( )
NoneAlgorithm
HMACAlgorithmSHA256SHA384SHA512
has_cryptoupdate RSAAlgorithm ECAlgorithmRSAPSSAlgorithmEd25519Algorithm)default_algorithmss n/builddir/build/BUILD/imunify360-venv-2.6.3/opt/imunify360/venv/lib/python3.11/site-packages/jwt/algorithms.pyget_default_algorithmsrB E s
} 344 } 344 } 344
!!%l&9::%l&9::%l&9::$[%788%k&899$[%788$[%788$ & ) )?@@( )?@@( )?@@)++
& c P e Zd ZdZd Zd Zd Zed Zed Z dS ) AlgorithmzH
The interface for an algorithm used to sign and verify tokens.
c t )z
Performs necessary validation and conversions on the key and returns
the key value in the proper format for sign() and verify().
NotImplementedErrorselfkeys rA prepare_keyzAlgorithm.prepare_keyl
"!rC c t )zn
Returns a digital signature for the specified message
using the specified key value.
rG rJ msgrK s rA signzAlgorithm.signs rM rC c t )zz
Verifies that the specified digital signature is valid
for the specified message and key values.
rG rJ rP rK sigs rA verifyzAlgorithm.verifyz rM rC c t )z7
Serializes a given RSA key into a JWK
rG key_objs rA to_jwkzAlgorithm.to_jwk rM rC c t )zb
Deserializes a given RSA key from JWK back into a PublicKey or PrivateKey object
rG )jwks rA from_jwkzAlgorithm.from_jwk rM rC N)
__name__
__module__ __qualname____doc__rL rQ rU staticmethodrY r\ rC rA rE rE g s " " "" " "" " " " " \" " " \" " "rC rE c $ e Zd ZdZd Zd Zd ZdS )r5 zZ
Placeholder for use when no signing or verification
operations are required.
c 8 |dk rd }|t d |S )N z*When alg = "none", key value must be None.r rI s rA rL zNoneAlgorithm.prepare_key s) "99C ?!"NOO O
rC c dS )NrC rb rO s rA rQ zNoneAlgorithm.sign s srC c dS )NFrb rS s rA rU zNoneAlgorithm.verify s urC N)r] r^ r_ r` rL rQ rU rb rC rA r5 r5 sK
rC r5 c e Zd ZdZej Zej Zej Z
d Z d Z e
d Ze
d Zd Zd ZdS ) r6 zf
Performs signing and verification operations using HMAC
and the specified hash function.
c || _ d S Nhash_algrJ rl s rA __init__zHMACAlgorithm.__init__ s
rC c t g d}t fd|D rt d S )N)s -----BEGIN PUBLIC KEY-----s -----BEGIN CERTIFICATE-----s -----BEGIN RSA PUBLIC KEY----- ssh-rsac 3 K | ]}|v V d S rj rb ).0 string_valuerK s rA <genexpr>z,HMACAlgorithm.prepare_key.<locals>.<genexpr> s( GG||s"GGGGGGrC zdThe specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.)r anyr )rJ rK invalid_stringss ` rA rL zHMACAlgorithm.prepare_key sf #
GGGGGGG G G !9
rC c t j t t | dd S )Noct)kkty)jsondumpsr r decoderW s rA rY zHMACAlgorithm.to_jwk sB z%k'&:&:;;BBDD
rC c L t | t rt j | }n t | t r| }nt
n # t
$ r t
d w xY w| d dk rt
d t |d S )NKey is not valid JSONrz rx zNot an HMAC keyry )
isinstancestrr{ loadsdict
ValueErrorr getr )r[ objs rA r\ zHMACAlgorithm.from_jwk s ;#s##
!jooC&&
! ; ; ;!"9:: : ; 775>>U " "!"344 4 C))) A A A&c \ t j ||| j S rj )hmacnewrl digestrO s rA rQ zHMACAlgorithm.sign s$ xS$-0077999rC c T t j || || S rj )r compare_digestrQ rS s rA rU zHMACAlgorithm.verify s# "3 #s(;(;<<<rC N)r] r^ r_ r` hashlibsha256r7 sha384r8 sha512r9 rn rL ra rY r\ rQ rU rb rC rA r6 r6 s
^F
^F
^F! ! ! $
\
* * \* : : := = = = =rC r6 c e Zd ZdZej Zej Zej Zd Zd Z e
d Z e
d Z d Z
d ZdS ) r< z~
Performs signing and verification operations using
RSASSA-PKCS-v1_5 and the specified hash function.
c || _ d S rj rk rm s rA rn zRSAAlgorithm.__init__
$DMMMrC c t |t st |t r|S t |t t f rft | } | d rt | }nt |d }n.# t $ r t | }Y nw xY wt d |S )Nrp password Expecting a PEM-formatted key.) r r r bytesr r
startswithr# r! r r" TypeErrorrI s rA rL zRSAAlgorithm.prepare_key s #}--
C 1N1N
#s|,,
B!#&&3~~j11 G 1# 6 6 23 F F F! 3 3 3-c22CCC3 @AAAJs 6B B,+B,c d }t | dd rM| }ddgt |j j t |j j t |j t |j t |j t |j
t |j t |j d
}nt | dd re| }ddgt |j t |j d}nt d t j | S )Nprivate_numbersRSArQ )
rz key_opsnedpqdpdqqirU )rz r r r Not a public or private key)getattrr r public_numbersr r} r r r r dmp1dmq1iqmpr r{ r| )rX r numberss rA rY zRSAAlgorithm.to_jwk s Cw 1488
E!1133 ! &x*7+A+CDDKKMM*7+A+CDDKKMM*7955<<>>*7955<<>>*7955<<>>+GL99@@BB+GL99@@BB+GL99@@BB (D11
E!0022 ! (z*7955<<>>*7955<<>> &&CDDD:c?? "rC c < t | t rt j | n t | t r| nt
n # t
$ r t
d w xY w d dk rt
d d v rd v rd v rd v rt
d g d
} fd |D }t | }|r t | st
d t t d t d }|rt t d t d
t d t d t d t d | }nst d }t |j ||j \ }}t |||t! || t# || t% || | }| S d v rNd v rJt t d t d }| S t
d )Nr rz r zNot an RSA keyr r r othz5Unsupported RSA private key: > 2 primes not supported)r r r r r c g | ]}|v S rb rb )rr propr s rA
<listcomp>z)RSAAlgorithm.from_jwk.<locals>.<listcomp>C s C C Ctts{ C C CrC z@RSA key must include all parameters if any are present besides dr r r r r )r r r r r r r r )r r r{ r r r r r ru allr r
r r r r r r r private_key
public_key)
r[ other_props props_foundany_props_foundr r r r r r s
@rA r\ zRSAAlgorithm.from_jwk, s
? c3'' % *S//CC T** % CC$$
?
?
?%&=>>>
? wwu~~&&%&6777czzcSjjSCZZC<<)O ; : : C C C C{ C C C "%k"2"2" 3{+;+; )Z "2'C11'C11" "
# /-c#h77-c#h77-c#h77 0T ; ; 0T ; ; 0T ; ;'5 GG ,CH55A4&(!^-= DAq 0 )!Q / / )!Q / / )!Q / /'5 G **,,,s
*'C11'C11
))+++%&CDDDs A A
A'c v | |t j | S rj )rQ r PKCS1v15rl rO s rA rQ zRSAAlgorithm.signv s) 88C!1!3!3T]]__EE ErC c | ||t j | dS # t $ r Y dS w xY w)NTF)rU r r rl r
rS s rA rU zRSAAlgorithm.verifyy sW
3W%5%7%7 IIIt#
uu
s ;?
A
A
N)r] r^ r_ r` r r7 r8 r9 rn rL ra rY r\ rQ rU rb rC rA r< r< s
% % % &
! # ! #
! #F
G E G E
G ER F F F rC r< c j e Zd ZdZej Zej Zej Zd Zd Z d Z
d Z e d Z
dS )r= zr
Performs signing and verification operations using
ECDSA and the specified hash function
c || _ d S rj rk rm s rA rn zECAlgorithm.__init__ r rC c t |t st |t r|S t |t t f rft | } | d rt | }nt | }n0# t $ r t |d }Y nw xY wt d |S )Ns ecdsa-sha2-r r ) r r r r r r r r# r" r r! r rI s rA rL zECAlgorithm.prepare_key s # 677
:+< <
#s|,,
B!#&&
C~~n55 7 1# 6 6 1# 6 6! C C C.sTBBBCCCC @AAAJs 4B B,+B,c | |t j | }t ||j S rj )rQ r ECDSArl r curve)rJ rP rK der_sigs rA rQ zECAlgorithm.sign s9 hhsBHT]]__$=$=>>G';; ;rC c B t ||j }n# t $ r Y dS w xY w t |t r| }| ||t j | dS # t $ r Y dS w xY w)NFT) r r r r r r rU r r rl r
)rJ rP rK rT r s rA rU zECAlgorithm.verify s
.sCI>>
uu
c#:;; + ..**C
7C$--//)B)BCCCt#
uu
s
&&A$B
B B c t | t rt j | }n t | t r| }nt
n # t
$ r t
d w xY w| d dk rt
d d|vsd|vrt
d t | d }t | d }| d }|dk rNt | t | cxk rd k rn nt j }nt
d
|d k rMt | t | cxk rd k rn nt j }nt
d
|dk rMt | t | cxk rdk rn nt j
}ntt
d |dk rMt | t | cxk rd k rn nt j }n!t
d t
d| t j t |d t |d | }d|vr| S t | d }t | t | k r t
dt | | t j t |d | S )Nr rz ECzNot an Elliptic curve keyxycrvzP-256 z)Coords should be 32 bytes for curve P-256zP-3840 z)Coords should be 48 bytes for curve P-384zP-521B z)Coords should be 66 bytes for curve P-521 secp256k1z-Coords should be 32 bytes for curve secp256k1Invalid curve: big) byteorder)r r r r z!D should be {} bytes for curve {})r r r{ r r r r r r lenr SECP256R1 SECP384R1 SECP521R1 SECP256K1EllipticCurvePublicNumbersint
from_bytesr EllipticCurvePrivateNumbersr )r[ r r r r curve_objr r s rA r\ zECAlgorithm.from_jwk sG
? c3'' % *S//CC T** % CC$$
?
?
?%&=>>>
? wwu~~%%%&ABBB#~~C %&ABBB ..A ..AGGENNE q66SVV))))r))))) " II)*UVVV'!!q66SVV))))r))))) " II)*UVVV'!!q66SVV))))r))))) " II)*UVVV+%%q66SVV))))r))))) " II)G &&?&?&?@@@ :..e.44..e.44 N #~~%00222 ..A1vvQ %7Q 1qE22N kmm
r N)r] r^ r_ r` r r7 r8 r9 rn rL rQ rU ra r\ rb rC rA r= r= s
% % % 2 < < <
? ?
? ? ? rC r= c e Zd ZdZd Zd ZdS )r> zA
Performs a signature using RSASSA-PSS with MGF1
c | |t j t j | | j j | S )Nmgf salt_length)rQ r PSSMGF1rl digest_sizerO s rA rQ zRSAPSSAlgorithm.sign sY 88 T]]__55 $
9
rC c
| ||t j t j | | j j | dS # t $ r Y dS w xY w)Nr TF)rU r r r rl r r
rS s rA rU zRSAPSSAlgorithm.verify
s
K #L 9 9$(M$= MMOO t#
uu
s A,A0 0
A>=A>N)r] r^ r_ r` rQ rU rb rC rA r> r> s<
rC r> c V e Zd ZdZd Zd Zd Zd Zed Z ed Z
dS ) r? z
Performs signing and verification operations using Ed25519
This class requires ``cryptography>=2.6`` to be installed.
c d S rj rb )rJ kwargss rA rn zEd25519Algorithm.__init__ s DrC c t |t t f r|S t |t t f rt |t r| d }| d }d|v rt | S d|v rt |d S |dd dk rt | S t d ) Nutf-8z-----BEGIN PUBLICz-----BEGIN PRIVATEr r zssh-z)Expecting a PEM-formatted or OpenSSH key.) r r r r r encoder} r" r! r# r )rJ rK str_keys rA rL z Ed25519Algorithm.prepare_key# s # 13C DEE
#s|,,
4 c3'' . **W--C **W--&'11.s333'722/dCCCC1Q3<6)).s333 GHH HrC c | t | t urt |d n|}| | S )a
Sign a message ``msg`` using the Ed25519 private key ``key``
:param str|bytes msg: Message to sign
:param Ed25519PrivateKey key: A :class:`.Ed25519PrivateKey` instance
:return bytes signature: The signature, as bytes
r )typer rQ rO s rA rQ zEd25519Algorithm.sign6 s8 *.c%)?)?%W%%%SC88C== rC c \ t | t urt |d n|}t | t urt |d n|}t |t r| }| || dS # t j j $ r Y dS w xY w)a
Verify a given ``msg`` against a signature ``sig`` using the Ed25519 key ``key``
:param str|bytes sig: Ed25519 signature to check ``msg`` against
:param str|bytes msg: Message to sign
:param Ed25519PrivateKey|Ed25519PublicKey key: A private or public Ed25519 key instance
:return bool verified: True if signature is valid, False if not.
r TF) r r r r r rU cryptography
exceptionsr
rS s rA rU zEd25519Algorithm.verify@ s
-1#YYe-C-CeC)))-1#YYe-C-CeC))) c#455 + ..**C
3$$$t *;
uu
s BB B+*B+c t | t ro| t j t
j }t
j t t |
ddd S t | t r| t j t j t }| t j t
j }t
j t t |
t t |
ddd S t! d )N)encodingformatOKPEd25519)r rz r )r r encryption_algorithm)r r rz r r )r r public_bytesr Rawr r{ r| r r r} r
private_bytesr r r r )rK r r s rA rY zEd25519Algorithm.to_jwkT s` # /00
$$ %\'+ %
z -k!nn = = D D F F $ ( # 011
%% %\(,)5 & NN$$11 %\'+ 2
z -k!nn = = D D F F -k!nn = = D D F F $ ( ""?@@ @rC c t | t rt j | }n t | t r| }nt
n # t
$ r t
d w xY w| d dk rt
d | d }|dk rt
d| d|vrt
d t | d } d
|vrt j
| S t | d
}t j | S # t
$ r}t
d |d }~ww xY w) Nr rz r zNot an Octet Key Pairr r r r z OKP should have "x" parameterr zInvalid key parameter)
r r r{ r r r r r r r from_public_bytesr from_private_bytes)r[ r r r r errs rA r\ zEd25519Algorithm.from_jwk{ st
? c3'' % *S//CC T** % CC$$
?
?
?%&=>>>
? wwu~~&&%&=>>>GGENNE !!%&?&?&?@@@#~~%&EFFF ..A
Hc>>+=a@@@$SWWS\\22(;A>>>
H
H
H%&=>>CG
Hs* A A A&4E 5E
E! E E!N) r] r^ r_ r` rn rL rQ rU ra rY r\ rb rC rA r? r? s I I I& ! ! ! (
$ A $ A
$ AL
H H
H H HrC r? )7r r r{ r r utilsr r r r r
r r cryptography.exceptionsr r
cryptography.hazmat.primitivesr )cryptography.hazmat.primitives.asymmetricr r ,cryptography.hazmat.primitives.asymmetric.ecr r 1cryptography.hazmat.primitives.asymmetric.ed25519r r -cryptography.hazmat.primitives.asymmetric.rsar r r r r r r r ,cryptography.hazmat.primitives.serializationr r r r r! r" r# r: ModuleNotFoundErrorrequires_cryptographyrB rE r5 r6 r< r= r> r? rb rC rA <module>r s ' ' ' ' ' ' #""""888888555555EEEEEEEE JJ JJJ
D&" &" &" &" &" &" &" &"R I ,== == == == ==I == == ==@ rHV V V V V y V V V py y y y y i y y y v , <H H H H H9 H H H H Hg rH rHs AA7 7B B