File Manager

Viewing File: /usr/lib/python2.7/site-packages/keyczar/keys.pyo

є
N╤Pc@s{dZddlZddlZddlZyddlmZWnek
r]ddlZnXddlm	Z	ddl
mZddl
mZyddl
ZWnek
r╜ddlZnXyddlmZWnek
rыeZnXer°dnd	ZddlZddlZddlZddlZed
ДZdДZdefd
ДГYZdefdДГYZdefdДГYZdefdДГYZdefdДГYZdefdДГYZdefdДГYZ defdДГYZ!de fdДГYZ"de fdДГYZ#d e!fd!ДГYZ$d"e!fd#ДГYZ%d$efd%ДГYZ&d&efd'ДГYZ'dS((s▓Represents cryptographic keys in Keyczar.

Identifies a key by its hash_id and type. Includes several subclasses
of base class Key.

@author: arkajit.dey@gmail.com (Arkajit Dey)
i    N(tsha1(tAES(tDSA(tRSA(tEVPtm2cryptotpycryptocCs█|dkr|j}n|j|Гs=tjd|ГВnyFitjtj6t	jtj
6tjtj6t
jtj6||ГSWnQtk
r╓|tjks▒|tjkr║d}nd}tj||ГВnXdS(sв
  Generates a key of the given key_type and length.

  @param key_type: the key_type of key to generate
  @key_type key_type: L{keyinfo.KeyType}

  @param size: the length in bits of the key to be generated
  @key_type size: integer

  @return: the generated key of the given key_type and size

  @raise KeyczarError: if key_type is a public key or unsupported or if key size
                       is unsupported.
  sUnsupported key size %d bits.s>Public keys of key_type %s must be exported from private keys.sUnsupported key key_type: %sN(tNonetdefault_sizetIsValidSizeterrorstKeyczarErrortAesKeytGeneratetkeyinfoRtHmacKeyt	HMAC_SHA1t
DsaPrivateKeytDSA_PRIVt
RsaPrivateKeytRSA_PRIVtKeyErrortDSA_PUBtRSA_PUB(tkey_typetsizetmsg((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytGenKey<s


	cCsЛy`itjtj6tjtj6tjtj6tjtj	6t
jtj6tjtj
6||ГSWn$tk
rЖtjd|ГВnXdS(s\
  Reads a key of the given key_type from a JSON string representation.

  @param key_type: the key_type of key to read
  @key_type key_type: L{keyinfo.KeyType}

  @param key: the JSON string representation of the key
  @key_type key: string

  @return: the key object read from the JSON string

  @raise KeyczarError: if key_type is unsupported
  sUnsupported key key_type: %sN(RtReadRRRRRRRRtDsaPublicKeyRtRsaPublicKeyRRR
R(Rtkey((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytReadKey]s




tKeycBsзeZdZdДZdДZdДZdДZdДZdДZdДZ	e
e	dd	ГZe
d
ДeddГZe
eddГZ
e
d
ДddГZdДZRS(sParent class for Keyczar Keys.cCs||_|jj|_dS(N(ttypeRt
_Key__size(tselfR((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__init__ys	cCs4|j|jko3|j|jko3|j|jkS(N(R"Rt
key_string(R$tother((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__eq__}scCs"|jj|Гr||_ndS(N(R"R	R#(R$tnew_size((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt	__SetSizeВscCsdS(s,Return the key as a string. Abstract method.N((R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt
_GetKeyStringЖscCs
|jГS(s#Indirect getter for the key string.(R+(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__GetKeyStringЙscCs;tjtjt|jГГ|jГ}tj|tj ГS(sLCompute and return the hash_id id of this key. Can override default hash_id.(tutiltHasht
IntToBytestlent	key_bytestBase64WSEncodetkeyczart
KEY_HASH_SIZE(R$tfullhash((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt_HashНs'cCs
|jГS(sIndirect getter for hash_id.(R6(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__HashТstdocsThe hash_id id of the key.cCs|jS(N(R#(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt<lambda>ЧssThe size of the key in bits.sThe key as a Base64 string.cCstj|jГS(N(R-tBase64WSDecodeR&(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR9ЪssThe key as bytes.cCsttjГtj|jГS(sGReturn the 5-byte header string including version byte, 4-byte hash_id.(tchrR3tVERSIONR-R:thash_id(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytHeaderЭs(t__name__t
__module__t__doc__R%R(t
_Key__SetSizeR+t_Key__GetKeyStringR6t
_Key__HashtpropertyR=RR&R1R>(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR!us									tSymmetricKeycBs eZdZdДZdДZRS(s6Parent class for symmetric keys such as AES, HMAC-SHA1cCstj||Г||_dS(N(R!R%t_SymmetricKey__key_string(R$RR&((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%дscCs|jS(sReturn the key as a string.(RG(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR+иs(R?R@RAR%R+(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRFбs	t
AsymmetricKeycBseZdZdДZRS(s!Parent class for asymmetric keys.cCstj||Г||_dS(N(R!R%t_params(R$Rtparams((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%пs(R?R@RAR%(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRHмsRcBs╟eZdZdefdДГYZdefdДГYZejjej	dДZ
dДZdДZe
ejjdДГZe
d	ДГZd
ДZdДZdДZd
ДZdДZejdДZRS(s&Represents AES symmetric private keys.t
AESAdaptorcBs)eZdZdДZdДZdДZRS(sd
    Adaptor class to make PyCrypto's Cipher behave the same as M2Crypto's
    EVP.Cipher class
    cCstj|||Г|_dS(s%
      Constructor

      @param key_bytes: the key for this cipher
      @type key: string

      @param iv_bytes: the initialization vector for this cipher
      @type iv_bytes: string

      @param mode: the cipher mode
      @type mode: integer (using AES values, e.g. AES.MODE_CBC)
      N(Rtnewtcipher(R$R1tiv_bytestmode((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%╜s
cCst|j|ГS(N(tgetattrRM(R$tname((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__getattr__╠scCsdS(sВ
      Collect any remaining encrypted data i.e. non-block size conforming

      @return: remaining encrypted data, if any
      t((R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytfinal╨s(R?R@RAR%RRRT(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRK╢s		t
EVPAdaptorcBs_eZdZdZdZdZeeefZdДZdДZdДZ	dДZ
edДZRS(	sd
    Adaptor class to make M2Crypto's EVP.Cipher behave the same as PyCrypto's
    Cipher class
    i    iicCsCi|_||_||_||_tj|_t|Г|_dS(s%
      Constructor

      @param key_bytes: the key for this cipher
      @type key: string

      @param iv_bytes: the initialization vector for this cipher
      @type iv_bytes: string

      @param mode: the cipher mode
      @type mode: integer (using AES values, e.g. AES.MODE_CBC)
      N(tciphersR1tIVRORt
block_sizeR0tkey_size(R$R1RNRO((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%цs				c
Cs█||jkrCt|jjГГdksCt|jjГГrCnd
}||jkrn|jjГd}ni|jj|Г}|s╫d|jd}tj	d|d|j
d|jd|d	dГ}||j|<n|S(s▐
      Helper to get the cipher for this adaptor, creates if required

      @param selector: type of cipher required (active/encrypt/decrypt)
      @type selector: integer one of OP_TYPES

      @return: EVP.Cipher
      iis
aes_%s_cbcitalgRtivtoptpaddingN(t	OP_ACTIVER0RVtkeysRtvaluestgetRYRtCipherR1RW(R$tselectorRMRO((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__Cipher№s 
*			cCs|j|jГj|ГS(sи
      Return decrypted byte string

      @param string: bytes to be decrypted.
      @type string: string

      @return: plaintext string
      @rtype: string
      (t_EVPAdaptor__Ciphert
OP_DECRYPTtupdate(R$tstring((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytdecrypt"s
cCs|j|jГj|ГS(s╖
      Return encrypted byte string

      @param string: plaintext to be encrypted.
      @type string: string

      @return: raw byte encrypted string  
      @rtype: string
      (Ret
OP_ENCRYPTRg(R$Rh((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytencrypt.s
cCs|j|ГjГS(sВ
      Collect any remaining encrypted data i.e. non-block size conforming

      @return: remaining encrypted data, if any
      (ReRT(R$Rc((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRT:s(R?R@RAR^RfRjtOP_TYPESR%ReRiRkRT(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRU┘s		&		cCs8tj|tj|Г||_tj|_||_dS(N(RFR%RRthmac_keyRXR(R$R&RmRRO((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%Bs
		cCsJtjittjГd6|jd6|jd6tjt|jГГd6ГS(NRORtaesKeyStringthmacKey(	tjsontdumpststrRtCBCRR&tloadsRm(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__str__Ns

cCsDtjtjt|jГГ|j|jjГ}tj|tj ГS(N(	R-R.R/R0R1RmR2R3R4(R$R5((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR6TscCs>tj|dГ}tj|Г}tjГ}t|||ГS(sж
    Return a newly generated AES key.

    @param size: length of key in bits to generate
    @type size: integer

    @return: an AES key
    @rtype: L{AesKey}
    i(R-t	RandBytesR2RR
R(RR1R&Rm((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR
ZscCsRtj|Г}|d}t|dt|d|dГ|dtj|dГГS(s╜
    Reads an AES key from a JSON string representation of it.

    @param key: a JSON representation of an AES key
    @type key: string

    @return: an AES key
    @rtype: L{AesKey}
    RoRnt
hmacKeyStringRRO(RpRtRRRtGetMode(Rtaesthmac_val((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRjs


cCs,|jt|Г|j}||t|ГS(s
    Returns the data padded using PKCS5.

    For a block size B and data with N bytes in the last block, PKCS5
    pads the data with B-N bytes of the value B-N.

    @param data: data to be padded
    @type data: string

    @return: PKCS5 padded string
    @rtype: string
    (RXR0R;(R$tdatatpad((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt_Pad{s
cCst|dГ}|| S(s┼
    Returns the unpadded version of a data padded using PKCS5.

    @param padded: string padded with PKCS5
    @type padded: string

    @return: original, unpadded string
    @rtype: string
    i    (tord(R$tpaddedR|((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt_UnPadЛs
cCs$|j||j}t||jГS(sj
    Return a buffer size that does not require padding that is closest to the
    requested buffer size. Minimum size is 1 block.

    Returns a multiple of the cipher block size so there is NO PADDING required 
    on any blocks of this size

    @param buffer_size: requested buffer size
    @type data: int

    @return: best buffer size
    @rtype: int
    (RXtmax(R$tbuffer_sizetno_pad_size((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt_NoPadBufferSizeШscCsГ|j|Г}tj|jГ}|j|j|Г}|j|Г}||jГ7}|jГ||}|j	j
|Г}||S(sь
    Return ciphertext byte string containing Header|IV|Ciph|Sig.

    @param data: plaintext to be encrypted.
    @type data: string

    @return: raw byte string ciphertext formatted to have Header|IV|Ciph|Sig.
    @rtype: string
    (R}R-RvRXt_AesKey__CreateCipherR1RkRTR>RmtSign(R$R{RNRMt
ciph_bytest	msg_bytest	sig_bytes((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytEncryptйs
cCs═|tj}t|Г|jtjkrAtjt|ГГВn||j }||jtj!}|tj}|jj	|tj |ГsЬtj
ГВntj|j
tj|Гj|Г}|j|ГS(s░
    Decrypts the given ciphertext.

    @param input_bytes: raw byte string formatted as Header|IV|Ciph|Sig where
      Sig is the signature over the entire payload (Header|IV|Ciph).
    @type input_bytes: string

    @return: plaintext message
    @rtype: string

    @raise ShortCiphertextError: if the ciphertext is too short to have IV & Sig
    @raise InvalidSignatureError: if the signature doesn't correspond to payload
    (R3tHEADER_SIZER0RXR-tHLENR
tShortCiphertextErrorRmtVerifytInvalidSignatureErrorRRLR1tMODE_CBCRiRА(R$tinput_bytest
data_bytesRNRЗRЙtplain((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytDecrypt╝s

$cCsBtjГdkr+tr+|j|||ГS|j|||ГSdS(sД
    Factory function for creating cipher of specified type using the active
    crypto library

    @param key_bytes: the key for this cipher
    @type key: string

    @param iv_bytes: the initialization vector for this cipher
    @type iv_bytes: string

    @param mode: the cipher mode
    @type mode: integer (using AES values, e.g. AES.MODE_CBC)

    @return: the cipher object
    RN(tACTIVE_CRYPT_LIBtlowerRRURK(R$R1RNRO((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__CreateCipher╫s(R?R@RAtobjectRKRURRRRsR%RuR6tstaticmethodR
RR}RАRДRКRФRРRЕ(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR│s #i					
			RcBs}eZdZejjdДZdДZdДZdДZ	e
ejjdДГZe
dДГZdДZ
dДZd	ДZRS(
s,Represents HMAC-SHA1 symmetric private keys.cCs#tj|tj|Г||_dS(N(RFR%RRR(R$R&R((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%ЄscCs!tji|jd6|jd6ГS(NRRw(RpRqRR&(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRuЎscCs&tj|jГ}tj|tj ГS(N(R-R.R1R2R3R4(R$R5((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR6∙scCs
t|ГS(s&Return a streaming version of this key(t
HmacKeyStream(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytCreateStreamable¤scCs/tj|dГ}tj|Г}t||ГS(s│
    Return a newly generated HMAC-SHA1 key.

    @param size: length of key in bits to generate
    @type size: integer

    @return: an HMAC-SHA1 key
    @rtype: L{HmacKey}
    i(R-RvR2R(RR1R&((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR
scCs$tj|Г}t|d|dГS(s╨
    Reads an HMAC-SHA1 key from a JSON string representation of it.

    @param key: a JSON representation of an HMAC-SHA1 key
    @type key: string

    @return: an HMAC-SHA1 key
    @rtype: L{HmacKey}
    RwR(RpRtR(Rtmac((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRscCstj|j|tГjГS(s┤
    Return raw byte string of signature on the message.

    @param msg: message to be signed
    @type msg: string

    @return: raw byte string signature
    @rtype: string
    (thmacRLR1Rtdigest(R$R((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЖs
cCs|j|j|Г|ГS(s-
    Return True if the signature corresponds to the message.

    @param msg: message to be signed
    @type msg: string

    @param sig_bytes: raw byte string of the signature
    @type sig_bytes: string

    @return: True if signature is valid for message. False otherwise.
    @rtype: boolean
    (tVerifySignedDataRЖ(R$RRЙ((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRО*s
cCsft|Гt|ГkrtSd}x7t||ГD]&\}}|t|Гt|ГAO}q2W|dkS(s;
    Return True if the signature corresponds to the signed message

    @param msg: message that has been signed
    @type msg: string

    @param sig_bytes: raw byte string of the signature
    @type sig_bytes: string

    @return: True if signature is valid for message. False otherwise.
    @rtype: boolean
    i(R0tFalsetzipR~(R$t	mac_bytesRЙtresulttxty((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЯ9s
(R?R@RARRRR%RuR6RЫRЩR
RRЖRОRЯ(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRяs					RЪcBs)eZdZdДZdДZdДZRS(s7Represents streamable HMAC-SHA1 symmetric private keys.cCs+||_tj|jjdtГ|_dS(NRS(RmRЭRLR1R(R$Rm((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%Ps	cCs|jj|ГdS(N(RЭRg(R$R{((s0/usr/lib/python2.7/site-packages/keyczar/keys.pytUpdateTscCs
|jjГS(sБ
    Return raw byte string of signature on the streamed message.

    @return: raw byte string signature
    @rtype: string
    (RЭRЮ(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЖWs(R?R@RAR%RжRЖ(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЪMs		t
PrivateKeycBs eZdZdДZdДZRS(s<Represents private keys in Keyczar for asymmetric key pairs.cCs tj|||Г||_dS(N(RHR%t
public_key(R$RRJtpub((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%dscCs
|jjS(N(RиR=(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR6hs(R?R@RAR%R6(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRзas	t	PublicKeycBseZdZdДZRS(s;Represents public keys in Keyczar for asymmetric key pairs.cCstj|||ГdS(N(RHR%(R$RRJ((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%ns(R?R@RAR%(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRкksRcBsbeZdZejjdДZdДZeejjdДГZ	edДГZ
dДZdДZRS(s:Represents DSA private keys in an asymmetric DSA key pair.cCsAtj|tj||Г||_||_||_||_dS(N(RзR%RRRRиRJR(R$RJRйRR((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%ts
			cCsGtjitjt|jГГd6tj|jdГd6|jd6ГS(Nt	publicKeyRдR(	RpRqRtRrRиR-R2RJR(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRu|s"cCsэtj|tjГ}itjtj|jГdГd6}|jГ}itjtj|jГdГd6tjtj|j	ГdГd6tjtj|j
ГdГd6tjtj|jГdГd6}t|||Г}t
||||ГS(s╝
    Return a newly generated DSA private key.

    @param size: length of key in bits to generate
    @type size: integer

    @return: a DSA private key
    @rtype: L{DsaPrivateKey}
    iRдtgtptqRе(RtgenerateR-RvtPadBytest
BigIntToBytesRдt	publickeyRмRнRоRеRR(RRRJtpubkeyt
pub_paramsRй((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR
Бs%""cCs╟tj|Г}tjtj|dГГ}itj|dГd6}tjtj	|j
dГtj	|j
dГtj	|j
dГtj	|j
dГtj	|dГfГ}t||||dГS(s┌
    Reads a DSA private key from a JSON string representation of it.

    @param key: a JSON representation of a DSA private key
    @type key: string

    @return: an DSA private key
    @rtype: L{DsaPrivateKey}
    RлRдRеRмRнRоR(RpRtRRRqR-R:Rt	constructtBytesToLongRIR(RtdsaRйRJ((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЧscCsVtjГjd|jjdГ}|jjtj|Г|Г\}}tj||ГS(s╧
    Return raw byte string of signature on the message.

    @param msg: message to be signed
    @type msg: string

    @return: byte string formatted as an ASN.1 sequnce of r and s
    @rtype: string
    ii(	trandomtSystemRandomtrandintRRоtsignR-R.t
MakeDsaSig(R$Rtktrts((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЖмs"$cCs|jj||ГS(s@see: L{DsaPublicKey.Verify}(RиRО(R$Rtsig((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRО╝s(
R?R@RARRRR%RuRЩR
RRЖRО(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRqs		RcBsАeZdZejjdДZddДZdДZe	ejjdДГZ
e	dДГZdДZdДZ
d	ДZd
ДZRS(s:Represents RSA private keys in an asymmetric RSA key pair.cCsAtj|tj||Г||_||_||_||_dS(N(RзR%RRRRиRJR(R$RJRйRR((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%├s
			RScCsиt|Гdkr.tjdt|ГГВnt|Гdtjdkrgtjdt|ГГВnttjtj|j	j
dГГdГ}|t|Г}|dkr├d|d|}n|tj }|tj}tj|tjГ}tj||Г}tj|t|ГГ}	tj||	Г}
|
tj }tj
|Г}||krhtjdГВn|
tjjdГ}
|
d	d
krаtjdГВn|
dS(
Nii=s+OAEP Decoding Error - label is too large %ds6OAEP Decoding Error - encoded_message is too small: %diits(OAEP Decoding Error - hash_id is invalidiss(OAEP Decoding Error - expected a 1 valueI (R0R
RR-RМtinttmathtfloortlogRtntMGFtXorR.tlstrip(R$tencoded_messagetlabelR╜tdiff_lentmasked_seedtmasked_datablockt	seed_masktseedtdatablock_maskt	datablockt
label_hashtexpected_label_hashtdelimited_message((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__Decode╦s.+


cCs║tjitjt|jГГd6tj|jdГd6tj|jdГd6tj|jdГd6tj|jdГd6tj|jdГd6tj|jdГd6|jd6ГS(	NRлtprivateExponenttprimePtprimeQtprimeExponentPtprimeExponentQtcrtCoefficientR(	RpRqRtRrRиR-R2RJR(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRuЇs	cCs`tj|tjГ}itjtj|jГdГd6tjtj|jГdГd6tjtj|jГdГd6tjtj|j|jdГdГd6tjtj|j|jdГdГd6tjtj|j	ГdГd6}|j
Г}itjtj|jГdГd6tjtj|jГdГd	6}t
|||Г}t||||ГS(
s╝
    Return a newly generated RSA private key.

    @param size: length of key in bits to generate
    @type size: integer

    @return: a RSA private key
    @rtype: L{RsaPrivateKey}
    iR╫R╪R┘R┌R█R▄tmodulustpublicExponent(RRпR-RvR░R▒tdRоRнtuR▓R╞teRR(RRRJR│R┤Rй((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR
 s"**"""c	Cs5tj|Г}tjtj|dГГ}itj|dГd6tj|dГd6tj|dГd6tj|dГd6tj|dГd6tj|dГd6}tjtj	|j
dГtj	|j
d	Гtj	|dГtj	|dГtj	|dГtj	|dГfГ}t||||d
ГS(s┘
    Reads a RSA private key from a JSON string representation of it.

    @param key: a JSON representation of a RSA private key
    @type key: string

    @return: a RSA private key
    @rtype: L{RsaPrivateKey}
    RлR╫R╪R┘R┌R█R▄R▌R▐R(RpRtRRRqR-R:RR╡R╢RJR(RtrsaRйRJ((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRscCs|jj|ГS(s@see: L{RsaPublicKey.Encrypt}(RиRК(R$R{((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRК7scCs,|tj}|jj|Г}|j|ГS(s┬
    Decrypts the given ciphertext.

    @param input_bytes: raw byte string formatted as Header|Ciphertext.
    @type input_bytes: string

    @return: plaintext message
    @rtype: string
    (R3RЛRRit_RsaPrivateKey__Decode(R$RСRЗt	decrypted((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRФ;s

cCs5tj||jГ}tj|jj|dГdГS(sш
    Return raw byte string of signature on the SHA-1 hash_id of the message.

    @param msg: message to be signed
    @type msg: string

    @return: string representation of long int signature over message
    @rtype: string
    iN(R-tMakeEmsaMessageRR▒RR╗R(R$Rtemsa_encoded((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЖIs
cCs|jj||ГS(s@see: L{RsaPublicKey.Verify}(RиRО(R$RR└((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRОVs(R?R@RARRRR%RуRuRЩR
RRКRФRЖRО(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR└s)				
RcBsJeZdZejjdДZdДZdДZe	dДГZ
dДZRS(s9Represents DSA public keys in an asymmetric DSA key pair.cCs5tj|tj|Г||_||_||_dS(N(RкR%RRRRJR(R$RJRR((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%^s		cCsstjitj|jdГd6tj|jdГd6tj|jdГd6tj|jdГd6|jd6ГS(NRнRоRмRеR(RpRqR-R2RJR(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRuds
 cCsltjtj|jdГtj|jdГtj|jdГtj|jdГГ}tj|tj ГS(NRнRоRмRе(R-t
PrefixHasht	TrimBytesRIR2R3R4(R$R5((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR6ks
cCs╚tj|Г}itj|dГd6tj|dГd6tj|dГd6tj|dГd6}tjtj|dГtj|dГtj|dГtj|dГfГ}t|||dГS(s╒
    Reads a DSA public key from a JSON string representation of it.

    @param key: a JSON representation of a DSA public key
    @type key: string

    @return: a DSA public key
    @rtype: L{DsaPublicKey}
    RеRнRмRоR(RpRtR-R:RR╡R╢R(RR╖RJR│((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRrscCsWy;tj|Г\}}|jjtj|Г||fГSWntjk
rRtSXdS(sY
    Return True if the signature corresponds to the message.

    @param msg: message that has been signed
    @type msg: string

    @param sig: raw byte string of the signature formatted as an ASN.1 sequence
      of r and s
    @type sig: string

    @return: True if signature is valid for message. False otherwise.
    @rtype: boolean
    N(R-tParseDsaSigRtverifyR.R
RRа(R$RR└R╛R┐((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRОЙs
&(R?R@RARRRR%RuR6RЩRRО(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRZs		RcBs_eZdZejjdДZddДZdДZdДZ	e
dДГZdДZdДZ
RS(	s9Represents RSA public keys in an asymmetric RSA key pair.cCs5tj|tj|Г||_||_||_dS(N(RкR%RRRRJR(R$RJRR((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%бs		RScCsbt|Гdkr$tjdГВnttjtj|jjdГГdГ}t|Г|dt	j
dkrВtjdГВnt	j|Г}|t|Гdt	j
d}|dkr╪tjdt|ГГВn|d	|d
|}t	jt	j
Г}t	j
||t	j
dГ}t	j||Г}	t	j
|	t	j
Г}
t	j||
Г}d	||	S(Nii=sOAEP parameter string too long.iis Message too long to OAEP encode.isMessage is too long: %dR┴sI (R0R
RR┬R├R─R┼RR╞R-RМR.RvR╟R╚(R$RR╦R╜R╙t
pad_octetsR╥R╨R╤R╬R╧R═((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__Encodeзs +!cCsEtjitj|jdГd6tj|jdГd6|jd6ГS(NR▌R▐R(RpRqR-R2RJR(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRu┐scCsFtjtj|jdГtj|jdГГ}tj|tj ГS(NR▌R▐(R-RчRшRIR2R3R4(R$R5((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR6┼scCsАtj|Г}itj|dГd6tj|dГd6}tjtj|dГtj|dГfГ}t|||dГS(s╒
    Reads a RSA public key from a JSON string representation of it.

    @param key: a JSON representation of a RSA public key
    @type key: string

    @return: a RSA public key
    @rtype: L{RsaPublicKey}
    R▌R▐R(RpRtR-R:RR╡R╢R(RRтRJR│((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR╩scCs6|j|Г}|jj|dГd}|jГ|S(s╙
    Return a raw byte string of the ciphertext in the form Header|Ciph.

    @param data: message to be encrypted
    @type data: string

    @return: ciphertext formatted as Header|Ciph
    @rtype: string
    iN(t_RsaPublicKey__EncodeRRkRR>(R$R{RЗ((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRК▌s
cCsKy2|jjtj||jГtj|ГfГSWntk
rFtSXdS(s@
    Return True if the signature corresponds to the message.

    @param msg: message that has been signed
    @type msg: string

    @param sig: string representation of long int signature
    @type sig: string

    @return: True if signature is valid for the message hash_id. False otherwise.
    @rtype: boolean
    N(RRъR-RхRR╢t
ValueErrorRа(R$RR└((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRОыs
2
(R?R@RARRRR%RэRuR6RЩRRКRО(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЮs			tEncryptingStreamWritercBsGeZdZdДZdДZdДZdДZedДZdДZ	RS(sh
  An encrypting stream capable of creating a ciphertext byte stream
  containing Header|IV|Ciph|Sig.
  cCsЮ||_||_d|_t|_|jjГ|_tj	|j
Г}tj|j
tj|Г|_|jГ}|jj||Г|jj||ГdS(s°
    Constructor

    @param key: Keyczar Key to perform the padding, verification, cipher
    creation needed by this stream
    @type key: Key

    @param output_stream: stream for encrypted output
    @type output_stream: 'file-like' object
    RSN(t_EncryptingStreamWriter__keyt&_EncryptingStreamWriter__output_streamt_EncryptingStreamWriter__dataRаt_EncryptingStreamWriter__closedRmRЫt$_EncryptingStreamWriter__hmac_streamR-RvRXRRLR1RРt_EncryptingStreamWriter__cipherR>Rжtwrite(R$Rt
output_streamRNthdr((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%s				cCs}|jdГ|j|7_|jjt|jГГ}t|jГ|krc|j|j| Гnd}|j||_dS(s~
    Write the data in encrypted form to the output stream

    @param data: data to be encrypted.
    @type data: string
    RЎiN(t"_EncryptingStreamWriter__CheckOpenRЄRЁRДR0t'_EncryptingStreamWriter__WriteEncrypted(R$R{tencrypt_buffer_size((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЎs
cCsM|jdГ|j|jdtГ|jj|jjГГ|jjГdS(sН
    Flush this stream. 
    Writes all remaining encrypted data to the output stream.
    Will also flush the associated output stream.
    tflushR|N(	R∙R·RЄtTrueRёRЎRЇRЖR№(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR№.s
cCs|jdГt|_dS(sw
    Close this stream. 
    Discards any and all buffered data
    Does *not* close the associated output stream.
    tcloseN(R∙R¤Rє(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR■9s
cCsQ|r|jj|Г}n|jj|Г}|jj|Г|jj|ГdS(sф
    Helper to write encrypted bytes to output stream.
    Must *only* pad the last block as PKCS5 *always* pads, even when the data
    length is a multiple of the block size - it adds block_size chars.
    We cannot pad intermediate blocks as there is no guarantee that a streaming
    read will receive the data in the same blocks as the writes were made.

    @param data: data to be written.
    @type data: string

    @param pad: add padding to data
    @type pad: boolean
    N(RЁR}RїRkRёRЎRЇRж(R$R{R|tencrypted_bytes((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__WriteEncryptedBs
cCs |jrtd|ГВndS(s$Helper to ensure this stream is opens(%s() on a closed stream is not permittedN(RєRю(R$t	operation((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__CheckOpenWs	(
R?R@RAR%RЎR№R■RаR·R∙(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRя■s					tDecryptingStreamReadercBsYeZdZejdДZddДZdДZdДZe	dДZ
dДZdДZRS(	su
  A stream capable of decrypting a source ciphertext byte stream
  containing Header|IV|Ciph|Sig into plain text.
  cCsL||_||_||_d|_d|_d|_d|_t|_	dS(s┤
    Constructor

    @param key_set: Keyczar key set to source key specified in message header
    @type key: Keyczar

    @param input_stream: source of encrypted input
    @type input_stream: 'file-like' object

    @param buffer_size: Suggested buffer size for reading data (will be 
    adjusted to suit the underlying cipher). 
    Use -1 to read as much data as possible from the source stream
    @type buffer_size: integer
    RSN(
t _DecryptingStreamReader__key_sett%_DecryptingStreamReader__input_streamt$_DecryptingStreamReader__buffer_sizeRt_DecryptingStreamReader__keyt_DecryptingStreamReader__ciphert)_DecryptingStreamReader__encrypted_buffert)_DecryptingStreamReader__decrypted_bufferRаt_DecryptingStreamReader__closed(R$tkey_settinput_streamRВ((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR%bs							i    c
CsГ|jdГt}|js+|jГ}n|rS|jrS|jrS|jГ}n|r+|jr+|jr+d}t}x┐|r8|j|jjdtГ\}}|r╣|j	|7_	nt
j}|r█||jj7}n|j	| }|rt|Г|jj}nd}|r"|| }n|}|o2|}qzW|r+|j
j|Г|j	t|Г|_	|jj|Г}	|sТ|jj|	Г}	n|j|	7_|s(t|j	Гt
jkr┌tjt|j	ГГВn|j
jГ}
|j	}d|_	|jjj|
|Гs%tjГВq%q(q+n|dkrL|j}d|_n|j| }|j||_|r|rd}n|S(s 
    Decrypts data from the source stream and returns the resulting plaintext.
    NOTE: the signature validation is performed on the final read if sufficient
    data is available. Streaming => it isn't possible to validate up front as
    done by Decrypt().

    @param chars: indicates the number of characters to read from the stream.
    read() will never return more than chars characters, but it might return
    less, if there are not enough characters available.
    @type chars: integer

    @raise ShortCiphertextError: if the ciphertext is too short to have IV & Sig
    @raise InvalidSignatureError: if the signature doesn't correspond to payload
    @raise KeyNotFoundError: if key specified in header doesn't exist
    @raise ValueError: if stream closed
    treadRStblockiN(t"_DecryptingStreamReader__CheckOpenR¤Rt"_DecryptingStreamReader__CreateKeyRt%_DecryptingStreamReader__CreateCiphert"_DecryptingStreamReader__ReadBytesRXRаR	R-RМR0t$_DecryptingStreamReader__hmac_streamRжRiRАR
R
RНRЖRmRЯRПR(
R$tcharst
is_data_availtdata_to_decrypttneed_more_datat
read_bytestreserved_data_lentavailable_datatno_decrypt_lentdecrypted_datatcurrent_sig_bytest
msg_sig_bytesRг((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR{sb
							

	cCs
t|_dS(sХ
    Close this stream. 
    Assumes all data has been read or is thrown away as no signature validation
    is done until all the data is read.
    N(R¤R(R$((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR■╬scCs |jrtd|ГВndS(s$Helper to ensure this stream is opens(%s() on a closed stream is not permittedN(RRю(R$R((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR╓s	cCsАt}d}xg|ru|jj|Г}|r:||7}n&|dk	rP|tfS|s`|tfSt|Г|k}qW|tfS(s█
    Helper to read bytes from the input stream. If requested will block until
    required number of bytes is read or input data is exhausted.  Returns a
    tuple of (the data bytes read, is more data available).
    RSN(R¤RRRRаR0(R$RRRRгR((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__ReadBytes█s	


cCsїt}|jsё|jtjt|jГГ\}}|rL|j|7_nt|jГtjkrё|jtj }|jtj|_|jj|Г|_|jj	j
Г|_|jj|Г|j
dkrю|jj|j
Г|_
qюqёn|S(s5
    Helper to create the actual key from the Header
    NOTE: The key determines what the optimal read buffer size will be. It is a
    size that does not require any padding to allow allow encrypting without
    using a stream anddecrypting with a stream 
    i.e. Encrypt() => DecryptingStreamReader()
    i(R¤RRR3RЛR0R	Rt_ParseHeaderRmRЫRRжRRД(R$RRt	hdr_bytes((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt__CreateKeyяs	!cCs╚t}|js─|jj}|t|jГ}|j|Г\}}|r[|j|7_nt|jГ|kr─|j| }|j||_|jj|Гt	j
|jjt	j|Г|_q─n|S(sC
    Helper to create the cipher using the IV from the message
    (
R¤RRRXR0R	RRRжRRLR1RР(R$Rtreqd_block_sizetnew_bytes_reqdRRN((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyRЧ	s	

'(
R?R@RAR-tDEFAULT_STREAM_BUFF_SIZER%RR■RR¤RRR(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyR\sS			((RARЭR├R╕thashlibRtImportErrortshat
Crypto.CipherRtCrypto.PublicKeyRRt
simplejsonRptM2CryptoRRRХR
R3RR-RR RШR!RFRHRRRЪRзRкRRRRRяR(((s0/usr/lib/python2.7/site-packages/keyczar/keys.pyt<module>sP


!	, =^
OЪD`^
Back to Directory File Manager