ó
èb‹Xc @` s« d d l m Z m Z m Z d d l Z d d l m Z d d l m Z m Z m
Z
d d l m Z d d l
m Z d d l m Z m Z m Z d d l m Z m Z m Z m Z m Z m Z d d l m Z m Z d
„ Z d „ Z d „ Z d
„ Z d „ Z! d „ Z" d „ Z# e j$ e ƒ d e% f d „ ƒ Yƒ Z& e j$ e ƒ d e% f d „ ƒ Yƒ Z' e j$ e ƒ d e% f d „ ƒ Yƒ Z( e j$ e ƒ d e% f d „ ƒ Yƒ Z) d S( i ( t absolute_importt divisiont print_functionN( t utils( t InvalidSignaturet UnsupportedAlgorithmt _Reasons( t _calculate_digest_and_algorithm( t hashes( t AsymmetricSignatureContextt AsymmetricVerificationContextt rsa( t AsymmetricPaddingt MGF1t OAEPt PKCS1v15t PSSt calculate_max_pss_salt_length( t RSAPrivateKeyWithSerializationt RSAPublicKeyWithSerializationc C` s< | j } | t j k s' | t j k r4 t | | ƒ S| Sd S( N( t _salt_lengthR
t
MAX_LENGTHR R ( t psst keyt hash_algorithmt salt( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt _get_rsa_pss_salt_length s
c C` s t | t ƒ s t d ƒ ‚ n t | t ƒ r< | j j } n´ t | t ƒ rÒ | j j } t | j t ƒ s~ t
d t j ƒ ‚ n | j
| ƒ s¢ t
d t j ƒ ‚ n | j d k rð | j d k rð t d ƒ ‚ qð n t
d j | j ƒ t j ƒ ‚ t | | | | | ƒ S( Ns1 Padding must be an instance of AsymmetricPadding.s' Only MGF1 is supported by this backend.sP This combination of padding and hash algorithm is not supported by this backend.t s* This backend does not support OAEP labels.s% {0} is not supported by this backend.( t
isinstanceR t TypeErrorR t _libt RSA_PKCS1_PADDINGR t RSA_PKCS1_OAEP_PADDINGt _mgfR
R R t UNSUPPORTED_MGFt rsa_padding_supportedt UNSUPPORTED_PADDINGt _labelt Nonet
ValueErrort formatt namet _enc_dec_rsa_pkey_ctx( t backendR t datat paddingt padding_enum( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt _enc_dec_rsa% s* c C` sd t | t ƒ r* | j j } | j j } n | j j } | j j } | j j | j | j j
ƒ } | j | | j j
k ƒ | j j | | j j
ƒ } | | ƒ } | j | d k ƒ | j j | | ƒ } | j | d k ƒ | j j | j ƒ } | j | d k ƒ t | t ƒ rè| j j rè| j j | j j j j d ƒ ƒ }
| j |
| j j
k ƒ | j j | |
ƒ } | j | d k ƒ | j j | j j j d ƒ ƒ } | j | | j j
k ƒ | j j | | ƒ } | j | d k ƒ n | j j d | ƒ } | j j d | ƒ }
| | |
| | t | ƒ ƒ } | d k rLt | | ƒ n | j j |
ƒ | d S( Ni i t asciis size_t *s unsigned char[]( R t
_RSAPublicKeyR t EVP_PKEY_encrypt_initt EVP_PKEY_encryptt EVP_PKEY_decrypt_initt EVP_PKEY_decryptt EVP_PKEY_CTX_newt _evp_pkeyt _ffit NULLt openssl_assertt gct EVP_PKEY_CTX_freet EVP_PKEY_CTX_set_rsa_paddingt
EVP_PKEY_sizeR t Cryptography_HAS_RSA_OAEP_MDt EVP_get_digestbynameR! t
_algorithmR) t encodet EVP_PKEY_CTX_set_rsa_mgf1_mdt EVP_PKEY_CTX_set_rsa_oaep_mdt newt lent _handle_rsa_enc_dec_errort buffer( R+ R R, R. R- t initt cryptt pkey_ctxt rest buf_sizet mgf1_mdt oaep_mdt outlent buf( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR* I sD c C` s† | j ƒ } t | t ƒ r* t d ƒ ‚ nX | j j | j j | j j | j j g } | j j rv | j
| j j ƒ n t d ƒ ‚ d S( NsG Data too long for key size. Encrypt less data or use a larger key size.s Decryption failed.( t _consume_errorsR R1 R' R t RSA_R_BLOCK_TYPE_IS_NOT_01t RSA_R_BLOCK_TYPE_IS_NOT_02t RSA_R_OAEP_DECODING_ERRORt RSA_R_DATA_TOO_LARGE_FOR_MODULUSt* Cryptography_HAS_RSA_R_PKCS_DECODING_ERRORt appendt RSA_R_PKCS_DECODING_ERROR( R+ R t errorst decoding_errors( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyRG u s c C` s t | t ƒ s t d ƒ ‚ n | j j | j ƒ } | j | d k ƒ t | t ƒ rd | j j } n³ t | t ƒ rù t | j
t ƒ sš t d t
j ƒ ‚ n | | j d d k rÀ t d ƒ ‚ n | j | j
j ƒ sê t d t
j ƒ ‚ n | j j } n t d j | j ƒ t
j ƒ ‚ | S( Ns' Expected provider of AsymmetricPadding.i s' Only MGF1 is supported by this backend.i sD Digest too large for key size. Use a larger key or different digest.sG When OpenSSL is older than 1.0.1 then only SHA1 is supported with MGF1.s% {0} is not supported by this backend.( R R R R R> R7 R: R R R R! R
R R R" t digest_sizeR' t _pss_mgf1_hash_supportedRA t UNSUPPORTED_HASHt RSA_PKCS1_PSS_PADDINGR( R) R$ ( R+ R R- t algorithmt pkey_sizeR. ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt _rsa_sig_determine_padding‘ s, c C` sª | j j | j j d ƒ ƒ } | j | | j j k ƒ | j j | j | j j ƒ } | j | | j j k ƒ | j j | | j j
ƒ } | j j | ƒ } | j | d k ƒ | j j | | ƒ } | j | d k ƒ | j j
| | ƒ } | j | d k ƒ t | t ƒ r¸| j j | t | | | ƒ ƒ } | j | d k ƒ | j j r¸| j j | j j j j d ƒ ƒ } | j | | j j k ƒ | j j | | ƒ } | j | d k ƒ q¸n | j j d ƒ }
| j j | | j j |
| t | ƒ ƒ } | j | d k ƒ | j j d |
d ƒ } | j j | | |
| t | ƒ ƒ } | d k r™| j ƒ } d }
| d j | j j k r„d }
n d }
t |
ƒ ‚ n | j j | ƒ S( NR0 i i s size_t *s unsigned char[]s@ Salt length too long for key size. Try using MAX_LENGTH instead.s0 Digest too large for key size. Use a larger key.( R R@ R) RB R: R8 R9 R6 R7 R; R< t EVP_PKEY_sign_initt EVP_PKEY_CTX_set_signature_mdR= R R t EVP_PKEY_CTX_set_rsa_pss_saltlenR t Cryptography_HAS_MGF1_MDR! RA RC RE t
EVP_PKEY_signRF RR R& t reasont! RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZER' RH ( R+ R- R. R` t private_keyR, t evp_mdRK RL RN t buflenRQ RZ Rh ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt
_rsa_sig_sign¸ sf
c C` s | j j | j j d ƒ ƒ } | j | | j j k ƒ | j j | j | j j ƒ } | j | | j j k ƒ | j j | | j j
ƒ } | j j | ƒ } | j | d k ƒ | j j | | ƒ } | j | d k ƒ | j j
| | ƒ } | j | d k ƒ t | t ƒ r¸| j j | t | | | ƒ ƒ } | j | d k ƒ | j j r¸| j j | j j j j d ƒ ƒ }
| j |
| j j k ƒ | j j | |
ƒ } | j | d k ƒ q¸n | j j | | t | ƒ | t | ƒ ƒ } | j | d k ƒ | d k r| j ƒ } t ‚ n d S( NR0 i i ( R R@ R) RB R: R8 R9 R6 R7 R; R< t EVP_PKEY_verify_initRd R= R R Re R Rf R! RA RC t EVP_PKEY_verifyRF RR R ( R+ R- R. R` t
public_keyt signatureR, Rk RK RL RN RZ ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt _rsa_sig_verify sR t _RSASignatureContextc B` s# e Z d „ Z d „ Z d „ Z RS( c C` s[ | | _ | | _ t | | | | ƒ | _ | | _ | | _ t j | j | j ƒ | _ d S( N( t _backendt _private_keyRb t
_padding_enumt _paddingRA R t Hasht _hash_ctx( t selfR+ Rj R- R` ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt __init__> s c C` s | j j | ƒ d S( N( Ry t update( Rz R, ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR| I s c C` s1 t | j | j | j | j | j | j j ƒ ƒ S( N( Rm Rt Rw Rv RA Ru Ry t finalize( Rz ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR} L s ( t __name__t
__module__R{ R| R} ( ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyRs < s t _RSAVerificationContextc B` s# e Z d „ Z d „ Z d „ Z RS( c C` sj | | _ | | _ | | _ | | _ t | | | | ƒ | _ | } | | _ t j | j | j ƒ | _ d S( N(
Rt t _public_keyt
_signatureRw Rb Rv RA R Rx Ry ( Rz R+ Rp Rq R- R` ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR{ Y s c C` s | j j | ƒ d S( N( Ry R| ( Rz R, ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR| g s c C` s7 t | j | j | j | j | j | j | j j ƒ ƒ S( N( Rr Rt Rw Rv RA R R‚ Ry R} ( Rz ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt verifyj s ( R~ R R{ R| Rƒ ( ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR€ W s t _RSAPrivateKeyc B` sV e Z d „ Z e j d ƒ Z d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z RS( c C` s¤ | | _ | | _ | | _ | j j j d ƒ } | j j j | j | | j j j | j j j ƒ | j j | d | j j j k ƒ | j j j | d ƒ | _
d S( Ns BIGNUM **i ( Rt t
_rsa_cdataR7 R8 RE R t RSA_get0_keyR9 R: t BN_num_bitst _key_size( Rz R+ t rsa_cdatat evp_pkeyt n( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR{ x s #Rˆ c C` s t | j | | | ƒ S( N( Rs Rt ( Rz R- R` ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt signer‡ s c C` sS t t j | j d ƒ ƒ } | t | ƒ k r= t d ƒ ‚ n t | j | | | ƒ S( Ng @s, Ciphertext length must be equal to key size.( t intt matht ceilt key_sizeRF R' R/ Rt ( Rz t
ciphertextR- t key_size_bytes( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt decryptŠ s c C` s´ | j j j | j ƒ } | j j | | j j j k ƒ | j j j | | j j j ƒ } | j j j | | j j j ƒ } | j j | d k ƒ | j j
| ƒ } t | j | | ƒ S( Ni ( Rt R t RSAPublicKey_dupR… R: R8 R9 R; t RSA_freet RSA_blinding_ont _rsa_cdata_to_evp_pkeyR1 ( Rz t ctxRL RŠ ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyRp ‘ s !!c C` sà | j j j d ƒ } | j j j d ƒ } | j j j d ƒ } | j j j d ƒ } | j j j d ƒ } | j j j d ƒ } | j j j d ƒ } | j j j d ƒ } | j j j | j | | | ƒ | j j | d | j j j k ƒ | j j | d | j j j k ƒ | j j | d | j j j k ƒ | j j j | j | | ƒ | j j | d | j j j k ƒ | j j | d | j j j k ƒ | j j j | j | | | ƒ | j j | d | j j j k ƒ | j j | d | j j j k ƒ | j j | d | j j j k ƒ t
j d | j j | d ƒ d | j j | d ƒ d | j j | d ƒ d | j j | d ƒ d | j j | d ƒ d | j j | d ƒ d t
j
d
| j j | d ƒ d | j j | d ƒ ƒ ƒ S( Ns BIGNUM **i t pt qt dt dmp1t dmq1t iqmpt public_numberst eR‹ ( Rt R8 RE R R† R… R: R9 t RSA_get0_factorst RSA_get0_crt_paramsR t RSAPrivateNumberst
_bn_to_intt RSAPublicNumbers( Rz R‹ R R› R™ Rš Rœ R Rž ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt private_numbersš s< ### ## ### c C` s" | j j | | | | j | j ƒ S( N( Rt t _private_key_bytesR7 R… ( Rz t encodingR( t encryption_algorithm( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt
private_bytes½ s c C` sO t | j | | | ƒ } t | j | | ƒ \ } } t | j | | | | | ƒ S( N( Rb Rt R Rm ( Rz R, R- R` R. ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt signÆ s ( R~ R R{ R t read_only_propertyR RŒ R“ Rp R¦ Rª R« ( ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR„ v s
# R1 c B` sM e Z d „ Z e j d ƒ Z d „ Z d „ Z d „ Z d „ Z d „ Z
RS( c C` s¤ | | _ | | _ | | _ | j j j d ƒ } | j j j | j | | j j j | j j j ƒ | j j | d | j j j k ƒ | j j j | d ƒ | _
d S( Ns BIGNUM **i ( Rt R… R7 R8 RE R R† R9 R: R‡ Rˆ ( Rz R+ R‰ RŠ R‹ ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR{ Õ s #Rˆ c C` s7 t | t ƒ s t d ƒ ‚ n t | j | | | | ƒ S( Ns signature must be bytes.( R t bytesR R€ Rt ( Rz Rq R- R` ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt verifierä s c C` s t | j | | | ƒ S( N( R/ Rt ( Rz t plaintextR- ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt encryptì s c C` sÎ | j j j d ƒ } | j j j d ƒ } | j j j | j | | | j j j ƒ | j j | d | j j j k ƒ | j j | d | j j j k ƒ t j d | j j
| d ƒ d | j j
| d ƒ ƒ S( Ns BIGNUM **i R R‹ ( Rt R8 RE R R† R… R9 R: R R¥ R¤ ( Rz R‹ R ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyRŸ ï s ## c C` s" | j j | | | | j | j ƒ S( N( Rt t _public_key_bytesR7 R… ( Rz R¨ R( ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt public_bytesü s c C` sR t | j | | | ƒ } t | j | | ƒ \ } } t | j | | | | | | ƒ S( N( Rb Rt R Rr ( Rz Rq R, R- R` R. ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyRƒ s ( R~ R R{ R R¬ R R® R° RŸ R² Rƒ ( ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyR1 Ó s
(* t
__future__R R R RŽ t cryptographyR t cryptography.exceptionsR R R t* cryptography.hazmat.backends.openssl.utilsR t cryptography.hazmat.primitivesR t) cryptography.hazmat.primitives.asymmetricR R
R t1 cryptography.hazmat.primitives.asymmetric.paddingR R
R R R R t- cryptography.hazmat.primitives.asymmetric.rsaR R R R/ R* RG Rb Rm Rr t register_interfacet objectRs R€ R„ R1 ( ( ( sN /usr/lib64/python2.7/site-packages/cryptography/hazmat/backends/openssl/rsa.pyt <module> s. . $ , ' I ; \