ó
=OXc @ s d Z d d l Z d d l m Z m Z d d l m Z d d l m Z d d l m
Z
d d l m Z m
Z
m Z d d l m Z e d d
ƒ \ Z Z Z Z Z g e d d
ƒ D] Z e e ƒ ^ q² \ Z Z Z Z Z d e f d „ ƒ YZ d
e f d „ ƒ YZ d S( sÒ
Variant on `KexGroup1 <paramiko.kex_group1.KexGroup1>` where the prime "p" and
generator "g" are provided by the server. A bit more work is required on the
client side, and a **lot** more on the server side.
iÿÿÿÿN( t sha1t sha256( t util( t DEBUG( t Message( t byte_chrt byte_ordt byte_mask( t SSHExceptioni i# t KexGexc B sz e Z d Z d Z d Z d Z e Z d „ Z e d „ Z
d „ Z d „ Z d „ Z
d „ Z d
„ Z d „ Z d „ Z RS(
s" diffie-hellman-group-exchange-sha1i i i c C sL | | _ d | _ d | _ d | _ d | _ d | _ d | _ t | _ d S( N(
t transportt Nonet pt qt gt xt et ft Falset old_style( t selfR
( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyt __init__1 s c C s¼ | j j r# | j j t t ƒ d St ƒ } | r[ | j t ƒ | j | j ƒ t
| _ n= | j t ƒ | j | j
ƒ | j | j ƒ | j | j ƒ | j j | ƒ | j j t ƒ d S( N( R
t server_modet _expect_packett _MSG_KEXDH_GEX_REQUESTt _MSG_KEXDH_GEX_REQUEST_OLDR t add_bytet c_MSG_KEXDH_GEX_REQUEST_OLDt add_intt preferred_bitst TrueR t c_MSG_KEXDH_GEX_REQUESTt min_bitst max_bitst
_send_messaget _MSG_KEXDH_GEX_GROUP( R t _test_old_stylet m( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyt start_kex; s
c C s— | t k r | j | ƒ S| t k r2 | j | ƒ S| t k rK | j | ƒ S| t k rd | j | ƒ S| t k r} | j | ƒ St
d | j | ƒ ‚ d S( Ns( KexGex %s asked to handle packet type %d( R t _parse_kexdh_gex_requestR# t _parse_kexdh_gex_groupt _MSG_KEXDH_GEX_INITt _parse_kexdh_gex_initt _MSG_KEXDH_GEX_REPLYt _parse_kexdh_gex_replyR t _parse_kexdh_gex_request_oldR t name( R t ptypeR% ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyt
parse_nextP s
c C sÜ | j d d } t j | d ƒ } t | d ƒ } t | ƒ } d } x" | d @si | d K} | d L} qH Wxb t rÎ t j | ƒ } t | d | ƒ | d } t j | d ƒ } | d k rm | | k rm Pqm qm W| | _
d S( Ni i i iÿ i€ ( R R t deflate_longR t lenR t ost urandomR t inflate_longR ( R R
t qnormt qhbytet
byte_countt qmaskt x_bytesR ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyt _generate_x_ s
c C sd | j ƒ } | j ƒ } | j ƒ } | | j k r? | j } n | | j k rZ | j } n | | k ro | } n | | k r„ | } n | | _ | | _ | | _ | j j ƒ } | d k rÉ t d ƒ ‚ n | j j t d | | | f ƒ | j
| | | ƒ \ | _ | _ t
ƒ } | j t ƒ | j | j ƒ | j | j ƒ | j j | ƒ | j j t ƒ d S( Ns- Can't do server-side gex with no modulus packs Picking p (%d <= %d <= %d bits)( t get_intR! R R R
t _get_modulus_packR R t _logR t get_modulusR R R R t c_MSG_KEXDH_GEX_GROUPt add_mpintR" R R) ( R R% t minbitst
preferredbitst maxbitst pack( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyR' q s2 !
c C s% | j ƒ | _ | j | j k r0 | j | _ n | j | j k rQ | j | _ n | j j ƒ } | d k r{ t d ƒ ‚ n | j j t d | j f ƒ | j
| j | j | j ƒ \ | _ | _ t
ƒ } | j t ƒ | j | j ƒ | j | j ƒ | j j | ƒ | j j t ƒ t | _ d S( Ns- Can't do server-side gex with no modulus packs Picking p (~ %d bits)( R< R R! R R
R= R R R> R R? R R R R R@ RA R" R R) R R ( R R% RE ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyR- ’ s" *
c C sä | j ƒ | _ | j ƒ | _ t j | j ƒ } | d k sH | d k r[ t d | ƒ ‚ n | j j t d | ƒ | j ƒ t
| j | j | j ƒ | _ t
ƒ } | j t ƒ | j | j ƒ | j j | ƒ | j j t ƒ d S( Ni i s< Server-generated gex p (don't ask) is out of range (%d bits)s Got server p (%d bits)( t get_mpintR R R t
bit_lengthR R
R> R R; t powR R R R t c_MSG_KEXDH_GEX_INITRA R" R R+ ( R R% t bitlen( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyR( ¨ s
c C s | j ƒ | _ | j d k s4 | j | j d k rC t d ƒ ‚ n | j ƒ t | j | j | j ƒ | _ t | j | j | j ƒ } | j j
ƒ j ƒ } t ƒ } | j
| j j | j j | j j | j j | ƒ | j sñ | j | j ƒ n | j | j ƒ | j s | j | j ƒ n | j | j ƒ | j | j ƒ | j | j ƒ | j | j ƒ | j | ƒ | j | j ƒ ƒ j ƒ } | j j | | ƒ | j j
ƒ j | ƒ } t ƒ } | j t ƒ | j | ƒ | j | j ƒ | j | ƒ | j j | ƒ | j j ƒ d S( Ni s Client kex "e" is out of range(! RF R R R R; RH R R R R
t get_server_keyt asbytesR t addt remote_versiont
local_versiont remote_kex_initt local_kex_initR R R R R! RA t hash_algot digestt _set_K_Ht
sign_ssh_dataR t c_MSG_KEXDH_GEX_REPLYt
add_stringR" t _activate_outbound( R R% t Kt keyt hmt Ht sig( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyR* ¹ s> %
c C s‘ | j ƒ } | j ƒ | _ | j ƒ } | j d k sL | j | j d k r[ t d ƒ ‚ n t | j | j | j ƒ } t ƒ } | j | j j
| j j | j j | j j
| ƒ | j sÌ | j | j ƒ n | j | j ƒ | j sø | j | j ƒ n | j | j ƒ | j | j ƒ | j | j ƒ | j | j ƒ | j | ƒ | j j | | j | j ƒ ƒ j ƒ ƒ | j j | | ƒ | j j ƒ d S( Ni s Server kex "f" is out of range( t
get_stringRF R R R RH R R RM R
RO RN RQ RP R R R R R! RA R R RT RR RL RS t _verify_keyRX ( R R% t host_keyR] RY R[ ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyR, Ý s. %
(( t __name__t
__module__R. R R! R R RR R R R& R0 R; R' R- R( R* R, ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyR ) s
! $t KexGexSHA256c B s e Z d Z e Z RS( s$ diffie-hellman-group-exchange-sha256( Ra Rb R. R RR ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyRc ÷ s ( t __doc__R3 t hashlibR R t paramikoR t paramiko.commonR t paramiko.messageR t paramiko.py3compatR R R t paramiko.ssh_exceptionR t rangeR R# R) R+ R t cR R@ RI RV R t objectR Rc ( ( ( s4 /usr/lib/python2.7/site-packages/paramiko/kex_gex.pyt <module> s 7Î