File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Hash/__pycache__/CMAC.cpython-310.pyc
Back
o ;j$) � @ s� d dl mZ d dlmZ d dlmZ d dlmZmZ d dl m Z m Z m Z d dl mZ dZddd �ZG d d � d e�Z dd d�ZdS )� )� unhexlify)�BLAKE2s)�strxor)� long_to_bytes� bytes_to_long)�bord�tobytes� _copy_bytes)�get_random_bytesNc C s, t | �d> |A }t|t| ��t| � d � S )N� )r r �len)�bsZxor_lsb�num� r �H/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Hash/CMAC.py� _shift_bytes$ s r c @ sT e Zd ZdZdZdd� Zdd� Zdd� Zd d � Zd d � Z d d� Z dd� Z dd� Z dS )�CMACz�A CMAC hash object. Do not instantiate directly. Use the :func:`new` function. :ivar digest_size: the size in bytes of the resulting MAC tag :vartype digest_size: integer Nc C sD || _ td d |�| _|| _|| _|j | _}d | _|| _|dkr&d}d| _ n|dkr0d}d| _ nt d| ��d| } |j ||j fi | j��| _ | j �| �} t| d �d @ r\t| |�| _nt| �| _t| jd �d @ rrt| j|�| _nt| j�| _|j ||j| fi | j��| _t|�| _d | _| | _d | _d | _|r�| �|� d S d S ) N� � i � � l � zACMAC requires a cipher with a block size of 8 or 16 bytes, not %d� r � ) � digest_sizer �_key�_factory�_cipher_params� block_size� _block_size�_mac_tag�_update_after_digest� _max_size� TypeError�newZMODE_ECB�_ecb�encryptr r �_k1�_k2�MODE_CBC�_cbc� bytearray�_cache�_cache_n�_last_ct�_last_pt� _data_size�update) �self�key�msg� ciphermod� cipher_params�mac_len�update_after_digestr Zconst_RbZ zero_block�Lr r r �__init__3 sV ��� �� �z CMAC.__init__c C s | j dur | js td��| jt|�7 _| j}| jdkrUt|| j t|��}|d|� | j| j| j| �< | j|7 _| j|k rD| S t |�|d� }| � | j� d| _t|�| }|dkrv| � |d| � � || d� | jd|�< n| � |� || _| S )z�Authenticate the next chunk of message. Args: data (byte string/byte array/memoryview): The next chunk of data Nz4update() cannot be called after digest() or verify()r ) r r r" r/ r r r, �minr+ � memoryview�_update)r1 r3 r ZfillerZremainr r r r0 o s( z CMAC.updatec C s� | j }t|�| dks J �t|�dkrdS | j�|�}t|�|kr%| j}n || d | � }|| d� | _t||| d� �| _dS )z,Update a block aligned to the block boundaryr N� )r r r) r% r- r r. )r1 Z data_blockr �ctZ second_lastr r r r< � s z CMAC._updatec C s^ | � t�}| j�� |_| jj| j| jj| jfi | j ��|_ | j dd� |_ | jdd� |_|S )a+ Return a copy ("clone") of the CMAC object. The copy will have the same internal state as the original CMAC object. This can be used to efficiently compute the MAC tag of byte strings that share a common initial substring. :return: An :class:`CMAC` N) �__new__r �__dict__�copyr r# r r( r- r r) r+ )r1 �objr r r rA � s ��z CMAC.copyc C s� | j }| jdur| js| jS | j| jkrtd��| jdkr*| jdkr*t| j| j �}n!| j dd� }dd|| j d || jd�< tt| j |�| j �}| j �|�d| j� | _| jS )z�Return the **binary** (non-printable) MAC tag of the message that has been authenticated so far. :return: The MAC tag, computed over the data processed so far. Binary form. :rtype: byte string Nz MAC is unsafe for this messager � �r r )r r r r/ r! � ValueErrorr, r r. r& r+ r- r' r$ r% r )r1 r �pt�partialr r r �digest� s z CMAC.digestc C s d� dd� t| �� �D ��S )z�Return the **printable** MAC tag of the message authenticated so far. :return: The MAC tag, computed over the data processed so far. Hexadecimal encoded. :rtype: string � c S s g | ]}d t |� �qS )z%02x)r )�.0�xr r r � <listcomp>� s �z"CMAC.hexdigest.<locals>.<listcomp>)�join�tuplerG )r1 r r r � hexdigest� s �zCMAC.hexdigestc C sH t d�}tjd||d�}tjd|| �� d�}|�� |�� kr"td��dS )ag Verify that a given **binary** MAC (computed by another party) is valid. Args: mac_tag (byte string/byte array/memoryview): the expected MAC of the message. Raises: ValueError: if the MAC does not match. It means that the message has been tampered with or that the MAC key is incorrect. r � )Z digest_bitsr2 �datazMAC check failedN)r r r# rG rD )r1 Zmac_tagZsecretZmac1Zmac2r r r �verify� s �z CMAC.verifyc C s | � tt|��� dS )al Verify that a given **printable** MAC (computed by another party) is valid. Args: hex_mac_tag (string): the expected MAC of the message, as a hexadecimal string. Raises: ValueError: if the MAC does not match. It means that the message has been tampered with or that the MAC key is incorrect. N)rQ r r )r1 Z hex_mac_tagr r r � hexverify� s zCMAC.hexverify) �__name__� __module__� __qualname__�__doc__r r9 r0 r< rA rG rN rQ rR r r r r r ) s <" r Fc C sl |du rt d��|du ri nt|�}|du r|j}|dk r!td��||jkr-td|j ��t| |||||�S )a Create a new MAC object. Args: key (byte string/byte array/memoryview): key for the CMAC object. The key must be valid for the underlying cipher algorithm. For instance, it must be 16 bytes long for AES-128. ciphermod (module): A cipher module from :mod:`Cryptodome.Cipher`. The cipher's block size has to be 128 bits, like :mod:`Cryptodome.Cipher.AES`, to reduce the probability of collisions. msg (byte string/byte array/memoryview): Optional. The very first chunk of the message to authenticate. It is equivalent to an early call to `CMAC.update`. Optional. cipher_params (dict): Optional. A set of parameters to use when instantiating a cipher object. mac_len (integer): Length of the MAC, in bytes. It must be at least 4 bytes long. The default (and recommended) length matches the size of a cipher block. update_after_digest (boolean): Optional. By default, a hash object cannot be updated anymore after the digest is computed. When this flag is ``True``, such check is no longer enforced. Returns: A :class:`CMAC` object Nz%ciphermod must be specified (try AES)� z,MAC tag length must be at least 4 bytes longz>MAC tag length cannot be larger than a cipher block (%d) bytes)r" �dictr rD r )r2 r3 r4 r5 r6 r7 r r r r# s �r# )r )NNNNF)�binasciir ZCryptodome.Hashr ZCryptodome.Util.strxorr ZCryptodome.Util.numberr r ZCryptodome.Util.py3compatr r r ZCryptodome.Randomr r r �objectr r# r r r r �<module> s [�
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings