ó
NÑPc @ s: d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d e j
d d f d e j
d d f d e j d d f d e j
d d f d e j d d f d e j d d f g Z
d Z d e f d
„ ƒ YZ d e f d „ ƒ YZ e d
ƒ Z e d ƒ Z e d ƒ Z e d ƒ Z e d ƒ Z e d ƒ Z e d ƒ Z i e d
6e d 6e d 6e d 6e d 6e d 6e d 6Z d „ Z d e f d „ ƒ YZ e d ƒ Z e d ƒ Z e d ƒ Z e d ƒ Z e d ƒ Z e d ƒ Z! e d ƒ Z" e d ƒ Z# e d ƒ Z$ i e d 6e d 6e d 6e d 6e d 6e! d 6e" d 6e# d 6e$ d 6Z% d „ Z& d d! „ Z' d d d" „ Z( d# „ Z) d$ „ Z* d% „ Z+ d& „ Z, d' „ Z- d( „ Z. d) „ Z/ d d* d+ „ Z0 d, „ Z1 d d- „ Z2 d d. „ Z3 d/ „ Z4 e5 d0 k r6e j6 e4 e j7 d1 ƒ ƒ n d S(2 su
Keyczart(ool) is a utility for creating and managing Keyczar keysets.
@author: arkajit.dey@gmail.com (Arkajit Dey)
iÿÿÿÿNt aess aes-cryptedt hmact rsas rsa-signt dsat _Namec B s e Z d „ Z d „ Z RS( c C s
| | _ d S( N( t name( t selfR ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt __init__, s c C s | j S( N( R ( R ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt __str__/ s ( t __name__t
__module__R R ( ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyR * s t Commandc B s e Z d Z RS( s$ Enum representing keyczart commands.( R R
t __doc__( ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyR 2 s t createt addkeyt pubkeyt promotet demotet revoket genkeyc C s3 y t | SWn t k
r. t j d ƒ ‚ n Xd S( Ns Illegal command( t commandst KeyErrort errorst KeyczarError( t cmd( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt
GetCommand@ s
t Flagc B s e Z d Z RS( s! Enum representing keyczart flags.( R R
R ( ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyR F s t locationR t sizet statust purposet destinationt versiont
asymmetrict crypterc C s3 y t | SWn t k
r. t j d ƒ ‚ n Xd S( Ns Unknown flag( t flagsR R R ( t flag( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt GetFlagV s
c C s^ t d k r* | d k r* t j d ƒ ‚ n d } | t j k r® | d k rf t j | | t j ƒ } q| j ƒ d k r“ t j | | t j
ƒ } qt j | | t j ƒ } n` | t j k rÿ | d k rä t j | | t j
ƒ } qt j | | t j
ƒ } n t j d ƒ ‚ t d k r&| t _ n4 t j | ƒ } z | j | d t ƒWd | j ƒ Xd S( Ns Location missingR s Missing or unsupported purposet overwrite( t mockt NoneR R t keyinfot SIGN_AND_VERIFYt keydatat KeyMetadatat HMAC_SHA1t lowert RSA_PRIVt DSA_PRIVt DECRYPT_AND_ENCRYPTt AESt kmdt writerst CreateWritert
WriteMetadatat Falset Close( t locR R R! R3 t writer( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt Create\ s( c C sH t | | ƒ } | d k r$ d } n | j | | ƒ t | | | ƒ d S( Niÿÿÿÿ( t CreateGenericKeyczarR( t
AddVersiont UpdateGenericKeyczar( R9 R R" R t czar( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt AddKeyy s
c C sJ t d k r* | d k r* t j d ƒ ‚ n t | ƒ } | j | t ƒ d S( Ns Must define destination( R' R( R R R< t PublicKeyExport( R9 t destR? ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt PubKey€ s c C sH t | ƒ } | d k r* t j d ƒ ‚ n | j | ƒ t | | ƒ d S( Ni s Missing version( R< R R t PromoteR> ( R9 t numR? ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyRD † s
c C sH t | ƒ } | d k r* t j d ƒ ‚ n | j | ƒ t | | ƒ d S( Ni s Missing version( R< R R t DemoteR> ( R9 RE R? ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyRF s
c C s’ t | ƒ } | d k r* t j d ƒ ‚ n | j | ƒ t | | ƒ t d k r` t j | ƒ n. t j | ƒ } z | j
| ƒ Wd | j ƒ Xd S( Ni s Missing version( R< R R t RevokeR> R' R( t RemoveKeyR4 R5 t RemoveR8 ( R9 RE R? R: ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyRG ” s
c C s t j j | ƒ S( s, Helper to create a Crypter for the location.( t keyczart Cryptert Read( R ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt _CreateCrypter£ s c C sF d GHxß t D]× \ } } } } d GHt j j | | ƒ } | r\ t t j j | | ƒ ƒ } n t | ƒ t | d | | ƒ t | t j | ƒ t
| | t j j | d ƒ | ƒ t | t j | ƒ t
| | t j j | d ƒ | ƒ q Wd GHxN d D]F } d GHt j j | | ƒ } t j j | | d ƒ } t | | ƒ qó Wd
GHd S( Ns Generating private key sets...t .t Tests 1.outs 2.outs Exporting public key sets...R s rsa-signs .publics Done!( R s rsa-sign( t KEYSETSt ost patht joinRM t CleanR; R@ R) t PRIMARYt UseKeyRC ( R9 R R R! R" t dir_pathRB ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt GenKeySet§ s&
"&
c C sU xN t j | ƒ D]= } t j j | | ƒ } t j j | ƒ s t j | ƒ q q Wd S( N( RQ t listdirRR RS t isdirt remove( t directoryt filenameRR ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyRT ½ s s This is some test datac C sª t j | ƒ } z‰ d } | r3 t j | | ƒ } n | t j k r] t j | ƒ j | ƒ } n* | t j k r‡ t j | ƒ j
| ƒ } n t j | | ƒ Wd | j
ƒ Xd S( Nt ( t readerst CreateReadert EncryptedReaderR) R1 RJ RK t EncryptR* t Signert Signt utilt WriteFileR8 ( R R9 RB R" t msgt readert answer( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyRV Ã s c C s d GHd S( Nsâ Usage: "Keyczart command flags"
Commands: create addkey pubkey promote demote revoke
Flags: location name size status purpose destination version asymmetric crypter
Command Usage:
create --location=/path/to/keys --purpose=(crypt|sign) [--name="A name"] [--asymmetric=(dsa|rsa)]
Creates a new, empty key set in the given location.
This key set must have a purpose of either "crypt" or "sign"
and may optionally be given a name. The optional asymmetric
flag will generate a public key set of the given algorithm.
The "dsa" asymmetric value is valid only for sets with "sign" purpose.
with the given purpose.
addkey --location=/path/to/keys [--status=(active|primary)] [--size=size] [--crypter=crypterLocation]
Adds a new key to an existing key set. Optionally
specify a purpose, which is active by default. Optionally
specify a key size in bits. Also optionally specify the
location of a set of crypting keys, which will be used to
encrypt this key set.
pubkey --location=/path/to/keys --destination=/destination
Extracts public keys from a given key set and writes them
to the destination. The "pubkey" command Only works for
key sets that were created with the "--asymmetric" flag.
promote --location=/path/to/keys --version=versionNumber
Promotes the status of the given key version in the given
location. Active keys are promoted to primary (which demotes
any existing primary key to active). Keys scheduled for
revocation are promoted to be active.
demote --location=/path/to/keys --version=versionNumber
Demotes the status of the given key version in the given
location. Primary keys are demoted to active. Active keys
are scheduled for revocation.
revoke --location=/path/to/keys --version=versionNumber
Revokes the key of the given version number.
This key must have been scheduled for revocation by the
promote command. WARNING: The key will be destroyed.
Optional flags are in [brackets]. The notation (a|b|c) means "a", "b", and "c"
are the valid choices( ( ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt UsageÑ s %c C s t d k r t j t ƒ S| d k r7 t j d ƒ ‚ nU d } t j | ƒ } z. | rj t j | | ƒ } n t j | ƒ } Wd | j ƒ X| Sd S( Ns
Need location(
R' R( RJ t GenericKeyczarR R R_ R` Ra R8 ( R9 R" t genericRh ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyR< ø s
c C s€ t d k rK | j t _ xa | j D]" } t j | j | j | ƒ ƒ q" Wn1 t j | ƒ } z | j
| | ƒ Wd | j ƒ Xd S( N( R' R( t metadataR3 t versionst SetKeyt version_numbert GetKeyR4 R5 t WriteR8 ( R? R9 t encryptert vR: ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyR> s #c C ss t | ƒ d k r t ƒ nSt | d ƒ } i } xs | D]k } | j d ƒ r9 | d } y) | j d ƒ \ } } | | t | ƒ <Wq¤ t k
r d GHt ƒ q¤ Xq9 q9 Wy4 t | j t d ƒ ƒ } t | j t
d ƒ ƒ } Wn t k
rû d GHt ƒ n X| j t ƒ } | t k rni t
j d 6t
j d 6j | j t ƒ ƒ } t | | j t d
ƒ | | j t ƒ ƒ n| t k rÖt
j | j t d ƒ j ƒ ƒ }
t | k rºt | t ƒ } n d } t | |
| | ƒ n™ | t k rût | | j t ƒ ƒ nt | t k rt | | ƒ nX | t! k r3t" | | ƒ n< | t# k rOt$ | | ƒ n | t% k rht& | ƒ n t ƒ d S( Ni s --i t =s Flags incorrectly formattediÿÿÿÿs) Size and version flags require an integert cryptt signRO t ACTIVE(' t lenRj R t
startswitht splitR% t
ValueErrort intt gett VERSIONt SIZEt LOCATIONt CREATER) R1 R* t PURPOSER; t NAMEt
ASYMMETRICt ADDKEYt GetStatust STATUSt uppert CRYPTERRM R( R@ t PUBKEYRC t DESTINATIONt PROMOTERD t DEMOTERF t REVOKERG t GENKEYRX ( t argvR R# t argR$ t valR R R9 R R R" ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt main sR
+ !
t __main__i (8 R RQ t sysR RJ R+ R) R_ R4 Re R1 R( R* RP R' t objectR R R‚ R† R‹ R RŽ R R R R R R R„ R€ Rˆ Rƒ RŒ R R… RŠ R# R% R; R@ RC RD RF RG RM RX RT RV Rj R< R> R” R t exitR‘ ( ( ( s4 /usr/lib/python2.7/site-packages/keyczar/keyczart.pyt <module> sv
' 2