File: //lib/python3/dist-packages/cryptography/hazmat/backends/openssl/__pycache__/rsa.cpython-38.pyc
U
�\�e�C � @ sD d dl mZmZmZ d dlZd dlmZ d dlmZm Z m
Z
d dl m Z m
Z
mZ d dlmZ d dlmZmZmZ d dlmZmZmZmZmZmZ d d l m Z m Z d
d � Z d d
� Z dd� Z!dd� Z"dd� Z#dd� Z$dd� Z%e�&e�G dd� de'��Z(e�&e�G dd� de'��Z)e�&e �G d d � d e'��Z*e�&e �G d d � d e'��Z+dS ) � )�absolute_import�division�print_functionN)�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed� _warn_sign_verify_deprecated)�hashes)�AsymmetricSignatureContext� AsymmetricVerificationContext�rsa)�AsymmetricPadding�MGF1�OAEP�PKCS1v15�PSS� calculate_max_pss_salt_length)� RSAPrivateKeyWithSerialization� RSAPublicKeyWithSerializationc C s, | j }|tjks|tjkr$t||�S |S d S �N)Z _salt_lengthr Z
MAX_LENGTHr r )Zpss�keyZhash_algorithmZsalt� r �J/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/rsa.py�_get_rsa_pss_salt_length s
r c C s� t |t�std��t |t�r&| jj}nVt |t�rh| jj}t |jt �sPt
dt j ��| �
|�s|t
dt j��nt
d�|j�t j��t| ||||�S )Nz1Padding must be an instance of AsymmetricPadding.�'Only MGF1 is supported by this backend.zPThis combination of padding and hash algorithm is not supported by this backend.�${} is not supported by this backend.)�
isinstancer � TypeErrorr �_lib�RSA_PKCS1_PADDINGr ZRSA_PKCS1_OAEP_PADDING�_mgfr r r �UNSUPPORTED_MGFZrsa_padding_supported�UNSUPPORTED_PADDING�format�name�_enc_dec_rsa_pkey_ctx)�backendr �data�padding� padding_enumr r r � _enc_dec_rsa& s.
�
���r- c C s
t |t�r | jj}| jj}n| jj}| jj}| j�|j| j j
�}| � || j j
k� | j � || jj
�}||�}| � |dk� | j�||�}| � |dk� | j�|j�} | � | dk� t |t��r| jj�r| �|jj�}
| j�||
�}| � |dk� | �|j�} | j�|| �}| � |dk� t |t��r�|jd k �r�t|j�dk�r�| j�t|j��} | � | | j j
k� | j �| |jt|j�� | j�|| t|j��}| � |dk� | j � d| �}
| j � d| �}||||
|t|��}| j � |�d |
d � }| j� � |dk�rt d��|S )N� r �size_t *�unsigned char[]z Encryption/decryption failed.) r �
_RSAPublicKeyr! ZEVP_PKEY_encrypt_initZEVP_PKEY_encryptZEVP_PKEY_decrypt_initZEVP_PKEY_decrypt�EVP_PKEY_CTX_new� _evp_pkey�_ffi�NULL�openssl_assert�gc�EVP_PKEY_CTX_free� EVP_PKEY_CTX_set_rsa_padding�
EVP_PKEY_sizer Z Cryptography_HAS_RSA_OAEP_MD� _evp_md_non_null_from_algorithmr# �
_algorithm� EVP_PKEY_CTX_set_rsa_mgf1_mdZ EVP_PKEY_CTX_set_rsa_oaep_mdZ_label�lenZOPENSSL_mallocZmemmoveZ EVP_PKEY_CTX_set0_rsa_oaep_label�new�bufferZERR_clear_error�
ValueError)r) r r* r, r+ ZinitZcrypt�pkey_ctx�resZbuf_size�mgf1_mdZoaep_mdZlabelptrZoutlen�bufZresbufr r r r( G sn
� ���� �� � �
r( c C s� t |t�std��| j�|j�}| �|dk� t |t�rB| jj}nZt |t �r�t |j
t �sdt dt
j��||j d dk r~td��| jj}nt d�|j�t
j��|S )Nz'Expected provider of AsymmetricPadding.r r � zDDigest too large for key size. Use a larger key or different digest.r )r r r r! r: r3 r6 r r" r r# r r r r$ Z digest_sizerA ZRSA_PKCS1_PSS_PADDINGr& r' r% )r) r r+ � algorithmZ pkey_sizer, r r r �_rsa_sig_determine_padding� s(
�
�rH c C s t | |||�}| �|�}| j�|j| jj�}| �|| jjk� | j�|| jj �}||�} | �| dk� | j�
||�} | dkr�| � � t d�
|j�tj��| j�||�} | �| dk� t|t��r| j�|t|||��} | �| dk� | �|jj�}
| j�||
�} | �| dk� |S )Nr. r z4{} is not supported by this backend for RSA signing.)rH r; r! r2 r3 r4 r5 r6 r7 r8 Z EVP_PKEY_CTX_set_signature_md�_consume_errorsr r& r' r ZUNSUPPORTED_HASHr9 r r Z EVP_PKEY_CTX_set_rsa_pss_saltlenr r# r< r= ) r) r+ rG r r* Z init_funcr, Zevp_mdrB rC rD r r r �_rsa_sig_setup� s<
��
��rJ c C s� t | ||||| jj�}| j�d�}| j�|| jj||t|��}| �|dk� | j�d|d �}| j�||||t|��}|dkr�| � � } | �| d j
| jj k� | d j | jj
kr�d}
n | �| d j | jjk� d}
t|
��| j�|�d d � S )Nr/ r. r0 r z@Salt length too long for key size. Try using MAX_LENGTH instead.z0Digest too large for key size. Use a larger key.)rJ r! ZEVP_PKEY_sign_initr4 r? Z
EVP_PKEY_signr5 r> r6 rI �libZ ERR_LIB_RSA�reasonZ!RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZEZ RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEYrA r@ ) r) r+ rG � private_keyr* rB ZbuflenrC rE �errorsrL r r r �
_rsa_sig_sign� sR � � �����rO c C sX t | ||||| jj�}| j�||t|�|t|��}| �|dk� |dkrT| �� t�d S )Nr )rJ r! ZEVP_PKEY_verify_initZEVP_PKEY_verifyr> r6 rI r )r) r+ rG �
public_key� signaturer* rB rC r r r �_rsa_sig_verify� s& � �rR c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_RSASignatureContextc C s< || _ || _t||||� || _|| _t�| j| j �| _d S r )�_backend� _private_keyrH �_paddingr< r �Hash� _hash_ctx)�selfr) rM r+ rG r r r �__init__ s z _RSASignatureContext.__init__c C s | j �|� d S r �rX �update�rY r* r r r r\ s z_RSASignatureContext.updatec C s t | j| j| j| j| j�� �S r )rO rT rV r< rU rX �finalize�rY r r r r^ s �z _RSASignatureContext.finalizeN)�__name__�
__module__� __qualname__rZ r\ r^ r r r r rS � s rS c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_RSAVerificationContextc C sF || _ || _|| _|| _t||||� |}|| _t�| j| j �| _d S r ) rT � _public_key�
_signaturerV rH r< r rW rX )rY r) rP rQ r+ rG r r r rZ s z _RSAVerificationContext.__init__c C s | j �|� d S r r[ r] r r r r\ ) s z _RSAVerificationContext.updatec C s" t | j| j| j| j| j| j�� �S r )rR rT rV r< rd re rX r^ r_ r r r �verify, s �z _RSAVerificationContext.verifyN)r` ra rb rZ r\ rf r r r r rc s rc c @ sN e Zd Zdd� Ze�d�Zdd� Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z dS )�_RSAPrivateKeyc C st || _ || _|| _| j j�d�}| j j�| j|| j jj| j jj� | j �|d | j jjk� | j j� |d �| _
d S �N� BIGNUM **r � rT �
_rsa_cdatar3 r4 r? r! � RSA_get0_keyr5 r6 Z BN_num_bits� _key_size�rY r) Z rsa_cdata�evp_pkey�nr r r rZ 9 s �z_RSAPrivateKey.__init__rm c C s t � t|� t| j| ||�S r )r r
rS rT )rY r+ rG r r r �signerH s z_RSAPrivateKey.signerc C s8 t t�| jd ��}|t|�kr(td��t| j| ||�S )Ng @z,Ciphertext length must be equal to key size.)�int�mathZceil�key_sizer> rA r- rT )rY Z
ciphertextr+ Zkey_size_bytesr r r �decryptM s z_RSAPrivateKey.decryptc C s| | j j�| j�}| j �|| j jjk� | j j�|| j jj�}| j j� || j jj�}| j �|dk� | j �
|�}t | j ||�S )Nr. ) rT r! ZRSAPublicKey_duprk r6 r4 r5 r7 ZRSA_freeZRSA_blinding_onZ_rsa_cdata_to_evp_pkeyr1 )rY ZctxrC ro r r r rP T s z_RSAPrivateKey.public_keyc
C s | j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�d�}| j j�| j|||� | j �|d | j jjk� | j �|d | j jjk� | j �|d | j jjk� | j j�| j||� | j �|d | j jjk� | j �|d | j jjk� | j j� | j|||� | j �|d | j jjk� | j �|d | j jjk� | j �|d | j jjk� t
j | j � |d �| j � |d �| j � |d �| j � |d �| j � |d �| j � |d �t
j
| j � |d �| j � |d �d�d�S )Nri r ��erp )�p�q�d�dmp1�dmq1�iqmp�public_numbers)rT r4 r? r! rl rk r6 r5 ZRSA_get0_factorsZRSA_get0_crt_paramsr ZRSAPrivateNumbers�
_bn_to_int�RSAPublicNumbers) rY rp rw rz rx ry r{ r| r} r r r �private_numbers] sH ���z _RSAPrivateKey.private_numbersc C s | j �|||| j| j�S r )rT Z_private_key_bytesr3 rk )rY �encodingr& Zencryption_algorithmr r r �
private_bytes� s �z _RSAPrivateKey.private_bytesc C s$ t | j||�\}}t| j||| |�S r )r rT rO )rY r* r+ rG r r r �sign� s �z_RSAPrivateKey.signN)
r` ra rb rZ r �read_only_propertyrt rq ru rP r� r� r� r r r r rg 7 s
# rg c @ sF e Zd Zdd� Ze�d�Zdd� Zdd� Zdd � Z d
d � Z
d d
� Z dS )r1 c C st || _ || _|| _| j j�d�}| j j�| j|| j jj| j jj� | j �|d | j jjk� | j j� |d �| _
d S rh rj rn r r r rZ � s �z_RSAPublicKey.__init__rm c C s, t � t�d|� t|� t| j| |||�S )NrQ )r r � _check_bytesr
rc rT )rY rQ r+ rG r r r �verifier� s �z_RSAPublicKey.verifierc C s t | j| ||�S r )r- rT )rY Z plaintextr+ r r r �encrypt� s z_RSAPublicKey.encryptc C s� | j j�d�}| j j�d�}| j j�| j||| j jj� | j �|d | j jjk� | j �|d | j jjk� tj | j �
|d �| j �
|d �d�S )Nri r rv ) rT r4 r? r! rl rk r5 r6 r r� r )rY rp rw r r r r~ � s ��z _RSAPublicKey.public_numbersc C s | j �||| | j| j�S r )rT Z_public_key_bytesr3 rk )rY r� r& r r r � public_bytes� s �z_RSAPublicKey.public_bytesc C s& t | j||�\}}t| j||| ||�S r )r rT rR )rY rQ r* r+ rG r r r rf � s � �z_RSAPublicKey.verifyN) r` ra rb rZ r r� rt r� r� r~ r� rf r r r r r1 � s
r1 ),Z
__future__r r r rs Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r
r Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr
r r Z1cryptography.hazmat.primitives.asymmetric.paddingr r r r r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r- r( rH rJ rO rR Zregister_interface�objectrS rc rg r1 r r r r �<module> s. !@ !% X