File: //lib/python3/dist-packages/cryptography/hazmat/backends/openssl/__pycache__/ec.cpython-38.pyc
U
�e�].1 � @ s d dl mZmZmZ d dlmZ d dlmZmZm Z d dl
m Z m Z m
Z
d dlmZmZ d dlmZmZmZ dd� Zd d
� Zd d � Zd
d� Zdd� Zdd� Ze�e�G dd� de ��Z e�e�G dd� de ��Z e�ej �G dd� de ��Z e�ej!�G dd� de ��Z"dS ) � )�absolute_import�division�print_function)�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed� _warn_sign_verify_deprecated)�hashes�
serialization)�AsymmetricSignatureContext� AsymmetricVerificationContext�ecc C s t | tj�stdtj��d S )Nz/Unsupported elliptic curve signature algorithm.)�
isinstancer ZECDSAr r Z UNSUPPORTED_PUBLIC_KEY_ALGORITHM)�signature_algorithm� r �I/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ec.py�_check_signature_algorithm s
�r c C s� | j �|�}| �|| jjk� | j �|�}|| j jkr>td��| j jr^| j � |�dkr^td��| j �
|�}| �|| jjk� | j� |�� d�}|S )Nz;ECDSA keys with unnamed curves are unsupported at this timer �ascii)
�_lib�EC_KEY_get0_group�openssl_assert�_ffi�NULL�EC_GROUP_get_curve_nameZ NID_undef�NotImplementedErrorZ#CRYPTOGRAPHY_OPENSSL_110_OR_GREATERZEC_GROUP_get_asn1_flagZ
OBJ_nid2sn�string�decode)�backendZec_key�groupZnidZ
curve_name�snr r r �_ec_key_curve_sn s$ � ��� r# c C s | j �|| j j� dS )z�
Set the named curve flag on the EC_KEY. This causes OpenSSL to
serialize EC keys along with their curve OID which makes
deserialization easier.
N)r ZEC_KEY_set_asn1_flagZOPENSSL_EC_NAMED_CURVE)r Zec_cdatar r r �_mark_asn1_named_ec_curve< s �r$ c C s: zt j| � W S tk
r4 td�|�tj��Y nX d S )Nz${} is not a supported elliptic curve)r Z _CURVE_TYPES�KeyErrorr �formatr ZUNSUPPORTED_ELLIPTIC_CURVE)r r" r r r �_sn_to_elliptic_curveH s �r' c C sz | j �|j�}| �|dk� | j�d|�}| j�dd�}| j �d|t|�|||j�}| �|dk� | j�|�d |d � S )Nr zunsigned char[]zunsigned int[]� ) r Z
ECDSA_size�_ec_keyr r �newZ
ECDSA_sign�len�buffer)r � private_key�dataZmax_sizeZsigbufZ
siglen_ptr�resr r r �_ecdsa_sig_signR s �r0 c C s8 | j �d|t|�|t|�|j�}|dkr4| �� t�d S )Nr r( )r Z ECDSA_verifyr+ r) Z_consume_errorsr )r �
public_key� signaturer. r/ r r r �_ecdsa_sig_verify_ s �r3 c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_ECDSASignatureContextc C s || _ || _t�||�| _d S �N)�_backend� _private_keyr �Hash�_digest)�selfr r- � algorithmr r r �__init__j s z _ECDSASignatureContext.__init__c C s | j �|� d S r5 �r9 �update�r: r. r r r r> o s z _ECDSASignatureContext.updatec C s | j �� }t| j| j|�S r5 )r9 �finalizer0 r6 r7 �r: Zdigestr r r r@ r s
z _ECDSASignatureContext.finalizeN)�__name__�
__module__� __qualname__r< r> r@ r r r r r4 h s r4 c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_ECDSAVerificationContextc C s$ || _ || _|| _t�||�| _d S r5 )r6 � _public_key�
_signaturer r8 r9 )r: r r1 r2 r; r r r r< z s z"_ECDSAVerificationContext.__init__c C s | j �|� d S r5 r= r? r r r r> � s z _ECDSAVerificationContext.updatec C s" | j �� }t| j| j| j|� d S r5 )r9 r@ r3 r6 rF rG rA r r r �verify� s
�z _ECDSAVerificationContext.verifyN)rB rC rD r< r> rH r r r r rE x s rE c @ sZ e Zd Zdd� Ze�d�Zedd� �Zdd� Z dd � Z
d
d � Z d d
� Z dd� Z
dd� ZdS )�_EllipticCurvePrivateKeyc C s6 || _ || _|| _t||�}t||�| _t||� d S r5 �r6 r) � _evp_pkeyr# r' �_curver$ �r: r Z ec_key_cdata�evp_pkeyr" r r r r< � s
z!_EllipticCurvePrivateKey.__init__rL c C s | j jS r5 ��curve�key_size�r: r r r rQ � s z!_EllipticCurvePrivateKey.key_sizec C s( t � t|� t|j� t| j| |j�S r5 )r r r
r; r4 r6 )r: r r r r �signer� s
�z _EllipticCurvePrivateKey.signerc C s� | j �|| j�s tdtj��|jj| jjkr4td��| j j� | j
�}| j j� |�d d }| j � |dk� | j j
�d|�}| j j�|j
�}| j j�|||| j
| j j
j�}| j � |dk� | j j
�|�d |� S )Nz1This backend does not support the ECDH algorithm.z2peer_public_key and self are not on the same curve� � r z uint8_t[])r6 Z+elliptic_curve_exchange_algorithm_supportedrP r r Z UNSUPPORTED_EXCHANGE_ALGORITHM�name�
ValueErrorr r r) ZEC_GROUP_get_degreer r r* �EC_KEY_get0_public_keyZECDH_compute_keyr r, )r: r; Zpeer_public_keyr! Zz_lenZz_bufZpeer_key�rr r r �exchange� s: ����� �z!_EllipticCurvePrivateKey.exchangec C s� | j j�| j�}| j �|| j jjk� | j j�|�}| j j�|�}| j �|| j jjk� | j j� || j jj
�}| j j� | j�}| j �|| j jjk� | j j� ||�}| j �|dk� | j �
|�}t| j ||�S )Nr( )r6 r r r) r r r r ZEC_KEY_new_by_curve_name�gcZ EC_KEY_freerX ZEC_KEY_set_public_keyZ_ec_cdata_to_evp_pkey�_EllipticCurvePublicKey)r: r! Z curve_nidZ
public_ec_key�pointr/ rN r r r r1 � s � z#_EllipticCurvePrivateKey.public_keyc C s2 | j j�| j�}| j �|�}tj|| �� �� d�S )N)�
private_value�public_numbers) r6 r ZEC_KEY_get0_private_keyr) �
_bn_to_intr ZEllipticCurvePrivateNumbersr1 r_ )r: Zbnr^ r r r �private_numbers� s
�z(_EllipticCurvePrivateKey.private_numbersc C s | j �|||| j| j�S r5 )r6 Z_private_key_bytesrK r) )r: �encodingr& Zencryption_algorithmr r r �
private_bytes� s �z&_EllipticCurvePrivateKey.private_bytesc C s* t |� t| j||j�\}}t| j| |�S r5 )r r r6 �
_algorithmr0 )r: r. r r; r r r �sign� s �z _EllipticCurvePrivateKey.signN)rB rC rD r< r �read_only_propertyrP �propertyrQ rS rZ r1 ra rc re r r r r rI � s
rI c @ sR e Zd Zdd� Ze�d�Zedd� �Zdd� Z dd � Z
d
d � Z d d
� Z dd� Z
dS )r\ c C s6 || _ || _|| _t||�}t||�| _t||� d S r5 rJ rM r r r r< � s
z _EllipticCurvePublicKey.__init__rL c C s | j jS r5 rO rR r r r rQ � s z _EllipticCurvePublicKey.key_sizec C s6 t � t�d|� t|� t|j� t| j| ||j�S )Nr2 )r r � _check_bytesr r
r; rE r6 )r: r2 r r r r �verifier s
�z _EllipticCurvePublicKey.verifierc
C s� | j �| j�\}}| j j�| j�}| j �|| j jjk� | j �� �Z}| j j� |�}| j j� |�}||||||�}| j �|dk� | j �
|�}| j �
|�} W 5 Q R X t j || | j
d�S )Nr( )�x�yrP )r6 Z _ec_key_determine_group_get_funcr) r rX r r r � _tmp_bn_ctxZ
BN_CTX_getr` r ZEllipticCurvePublicNumbersrL )
r: Zget_funcr! r] �bn_ctxZbn_xZbn_yr/ rj rk r r r r_ s � �z&_EllipticCurvePublicKey.public_numbersc C s |t jjkr| jjj}n|t jjks(t�| jjj}| jj� | j
�}| j� || jj j
k� | jj�| j
�}| j� || jj j
k� | j�� �l}| jj�|||| jj j
d|�}| j� |dk� | jj �d|�}| jj�||||||�}| j� ||k� W 5 Q R X | jj �|�d d � S )Nr zchar[])r
� PublicFormat�CompressedPointr6 r ZPOINT_CONVERSION_COMPRESSED�UncompressedPoint�AssertionErrorZ POINT_CONVERSION_UNCOMPRESSEDr r) r r r rX rl ZEC_POINT_point2octr* r, ) r: r& Z
conversionr! r] rm ZbuflenZbufr/ r r r �
_encode_point" s:
� �z%_EllipticCurvePublicKey._encode_pointc C s� |t jjkrtd��|t jjks8|t jjks8|t jjkrj|t jjk sX|t jjt jjfkr`td��| �|�S | j �
||| | j d �S d S )Nz1EC public keys do not support PKCS1 serializationzKX962 encoding must be used with CompressedPoint or UncompressedPoint format) r
rn ZPKCS1rW ZEncodingZX962ro rp rr r6 Z_public_key_bytesrK )r: rb r& r r r � public_bytes: s8 �
�
�
�
����
�z$_EllipticCurvePublicKey.public_bytesc C s0 t |� t| j||j�\}}t| j| ||� d S r5 )r r r6 rd r3 )r: r2 r. r r; r r r rH [ s �z _EllipticCurvePublicKey.verifyN)rB rC rD r< r rf rP rg rQ ri r_ rr rs rH r r r r r\ � s
!r\ N)#Z
__future__r r r Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r
r Z cryptography.hazmat.primitivesr r
Z)cryptography.hazmat.primitives.asymmetricr r r r r# r$ r' r0 r3 Zregister_interface�objectr4 rE Z(EllipticCurvePrivateKeyWithSerializationrI Z'EllipticCurvePublicKeyWithSerializationr\ r r r r �<module> s&
e