File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Signature/__pycache__/DSS.cpython-310.pyc
Back
o ;j�; � @ s� d dl mZ d dlmZ d dlmZ d dlmZ d dlm Z d dl m Z ddgZ G d d� de �ZG d d � d e�ZG d d � d e�ZG dd� de�Zddd�ZdS )� )� DerSequence)� long_to_bytes)�Integer)�HMAC)�EccKey)�DsaKey� DssSigScheme�newc @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )r zoA (EC)DSA signature object. Do not instantiate directly. Use :func:`Cryptodome.Signature.DSS.new`. c C s6 || _ || _|| _| j�� | _| jd d d | _dS )z�Create a new Digital Signature Standard (DSS) object. Do not instantiate this object directly, use `Cryptodome.Signature.DSS.new` instead. � � N)�_key� _encoding�_order� size_in_bits� _order_bits� _order_bytes)�self�key�encoding�order� r �L/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Signature/DSS.py�__init__3 s zDssSigScheme.__init__c C s | j �� S )zRReturn ``True`` if this signature object can be used for signing messages.)r � has_private�r r r r �can_signA s zDssSigScheme.can_signc C � t d���Nz To be provided by subclasses��NotImplementedError�r �msg_hashr r r �_compute_nonceG � zDssSigScheme._compute_noncec C r r r r r r r � _valid_hashJ r# zDssSigScheme._valid_hashc s� � j �� s td��� �|�std��� �|�}t�|�� d� j � �}� j � ||�}� j dkr=d� � fdd�|D ��}|S t |��� }|S )a Compute the DSA/ECDSA signature of a message. Args: msg_hash (hash object): The hash that was carried out over the message. The object belongs to the :mod:`Cryptodome.Hash` package. Under mode ``'fips-186-3'``, the hash must be a FIPS approved secure hash (SHA-2 or SHA-3). :return: The signature as ``bytes`` :raise ValueError: if the hash algorithm is incompatible to the (EC)DSA key :raise TypeError: if the (EC)DSA key has no private half z Private key is needed to sign� Hash is not sufficiently strongN�binary� c s g | ]}t |� j��qS r )r r ��.0�xr r r � <listcomp>k s �z%DssSigScheme.sign.<locals>.<listcomp>)r r � TypeErrorr$ � ValueErrorr" r � from_bytes�digestr Z_signr �joinr �encode)r r! �nonce�zZsig_pair�outputr r r �signM s � �zDssSigScheme.signc C sH | � |�s td��| jdkr1t|�d| j krtd��dd� |d| j� || jd� fD �\}}n3z t� j|dd �}W n ttfyH td ��w t|�dksS|�� sWtd ��t |d �t |d �}}d | k ro| j k r�n td��d | k r�| j k s�td�� td��t � |� � d| j� �}| j �|||f�}|s�td��dS )a Check if a certain (EC)DSA signature is authentic. Args: msg_hash (hash object): The hash that was carried out over the message. This is an object belonging to the :mod:`Cryptodome.Hash` module. Under mode ``'fips-186-3'``, the hash must be a FIPS approved secure hash (SHA-2 or SHA-3). signature (``bytes``): The signature that needs to be validated. :raise ValueError: if the signature is not authentic r% r& � z'The signature is not authentic (length)c S s g | ]}t �|��qS r )r r. r( r r r r+ � s �z'DssSigScheme.verify.<locals>.<listcomp>NT)�strictz$The signature is not authentic (DER)z,The signature is not authentic (DER content)r r z"The signature is not authentic (d)z The signature is not authenticF)r$ r- r �lenr r �decode� IndexErrorZ hasOnlyIntsr r r. r/ r Z_verify)r r! Z signatureZr_primeZs_primeZder_seqr3 �resultr r r �verifyz s: � ����zDssSigScheme.verifyN) �__name__� __module__� __qualname__�__doc__r r r" r$ r5 r< r r r r r - s -c sD e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d � Zd d � Z� Z S ) �DeterministicDsaSigSchemec � t t| ��|||� || _d S �N)�superrA r � _private_key)r r r r � private_key�� __class__r r r � � z"DeterministicDsaSigScheme.__init__c C s8 t �|�}| j�� }t|�d }||kr||| L }|S )zSee 2.3.2 in RFC6979r )r r. r r r8 )r �bstrr; Zq_lenZb_lenr r r � _bits2int� s z#DeterministicDsaSigScheme._bits2intc C s* d| k r | j k sJ � J �t|| j�S )zSee 2.3.3 in RFC6979r )r r r )r Z int_mod_qr r r � _int2octets� s z%DeterministicDsaSigScheme._int2octetsc C s. | � |�}|| jk r |}n|| j }| �|�S )zSee 2.3.4 in RFC6979)rK r rL )r rJ Zz1Zz2r r r � _bits2octets� s z&DeterministicDsaSigScheme._bits2octetsc C s |� � }d|j }d|j }dD ]!}t�||| | �| j� | �|� |�� � }t�|||�� � }qd}d| k r?| jk s�n |dkrXt�||d |�� � }t�|||�� � }d}t|�| j k rut�|||�� � }||7 }t|�| j k sa| � |�}d| k r�| jk r@|S q@|S )z!Generate k in a deterministic way� � )rO rN ���r r' ) r/ � digest_sizer r rL rE rM r r8 r rK )r ZmhashZh1Zmask_vZnonce_kZint_octr2 Zmask_tr r r r" � sD ���� ��� ��z(DeterministicDsaSigScheme._compute_noncec C s dS )NTr r r r r r$ � s z%DeterministicDsaSigScheme._valid_hash) r= r> r? r rK rL rM r" r$ � __classcell__r r rG r rA � s (rA c s0 e Zd ZdZ� fdd�Zdd� Zdd� Z� ZS )�FipsDsaSigScheme))i � )� �� )rU � )i rW c sR t t| ��|||� || _t|j��� }|| jf| jvr'd|| jf }t |��d S )Nz+L/N (%d, %d) is not compliant to FIPS 186-3) rD rS r � _randfuncr �pr r �_fips_186_3_L_Nr- )r r r r �randfunc�L�errorrG r r r s ��zFipsDsaSigScheme.__init__c C s t jd| j| jd�S �Nr )Z min_inclusiveZ max_exclusiver[ )r � random_ranger rX r r r r r" s �z FipsDsaSigScheme._compute_noncec C s |j dkp |j �d�S )z*Verify that SHA-1, SHA-2 or SHA-3 are usedz 1.3.14.3.2.26z2.16.840.1.101.3.4.2.)�oid� startswithr r r r r$ s �z FipsDsaSigScheme._valid_hash)r= r> r? rZ r r" r$ rR r r rG r rS � s rS c s, e Zd Z� fdd�Zdd� Zdd� Z� ZS )�FipsEcDsaSigSchemec rB rC )rD rb r rX )r r r r r[ rG r r r rI zFipsEcDsaSigScheme.__init__c C s t jd| jjj| jd�S r^ )r r_ r �_curver rX r r r r r" s �z!FipsEcDsaSigScheme._compute_noncec C sV | j j�� }d}d}d}d}|| | | }z|j|v }W |S ty* d}Y |S w )zxVerify that the strength of the hash matches or exceeds the strength of the EC. We fail if the hash is too weak.)z2.16.840.1.101.3.4.2.4z2.16.840.1.101.3.4.2.7z2.16.840.1.101.3.4.2.5)z2.16.840.1.101.3.4.2.1z2.16.840.1.101.3.4.2.8z2.16.840.1.101.3.4.2.6)z2.16.840.1.101.3.4.2.2z2.16.840.1.101.3.4.2.9)z2.16.840.1.101.3.4.2.3z2.16.840.1.101.3.4.2.10F)r ZpointQr r` �AttributeError) r r! Z modulus_bits�sha224�sha256�sha384�sha512Zshsr; r r r r$ " s ��z FipsEcDsaSigScheme._valid_hash)r= r> r? r r" r$ rR r r rG r rb s rb r& Nc C s� |dvr t d| ��t| t�r | jj}d}| j�d�s t d��nt| t�r-t| j �}d}n t dt t | �� ��| � � rAt | |�}nd}|d krNt| |||�S |d kret| t�r^t| |||�S t| |||�S t d | ��) a� Create a signature object :class:`DssSigScheme` that can perform (EC)DSA signature or verification. .. note:: Refer to `NIST SP 800 Part 1 Rev 4`_ (or newer release) for an overview of the recommended key lengths. Args: key (:class:`Cryptodome.PublicKey.DSA` or :class:`Cryptodome.PublicKey.ECC`): The key to use for computing the signature (*private* keys only) or for verifying one. For DSA keys, let ``L`` and ``N`` be the bit lengths of the modulus ``p`` and of ``q``: the pair ``(L,N)`` must appear in the following list, in compliance to section 4.2 of `FIPS 186-4`_: - (1024, 160) *legacy only; do not create new signatures with this* - (2048, 224) *deprecated; do not create new signatures with this* - (2048, 256) - (3072, 256) For ECC, only keys over P-224, P-256, P-384, and P-521 are accepted. mode (string): The parameter can take these values: - ``'fips-186-3'``. The signature generation is randomized and carried out according to `FIPS 186-3`_: the nonce ``k`` is taken from the RNG. - ``'deterministic-rfc6979'``. The signature generation is not randomized. See RFC6979_. encoding (string): How the signature is encoded. This value determines the output of :meth:`sign` and the input to :meth:`verify`. The following values are accepted: - ``'binary'`` (default), the signature is the raw concatenation of ``r`` and ``s``. It is defined in the IEEE P.1363 standard. For DSA, the size in bytes of the signature is ``N/4`` bytes (e.g. 64 for ``N=256``). For ECDSA, the signature is always twice the length of a point coordinate (e.g. 64 bytes for P-256). - ``'der'``, the signature is a ASN.1 DER SEQUENCE with two INTEGERs (``r`` and ``s``). It is defined in RFC3279_. The size of the signature is variable. randfunc (callable): A function that returns random ``bytes``, of a given length. If omitted, the internal RNG is used. Only applicable for the *'fips-186-3'* mode. .. _FIPS 186-3: http://csrc.nist.gov/publications/fips/fips186-3/fips_186-3.pdf .. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf .. _NIST SP 800 Part 1 Rev 4: http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r4.pdf .. _RFC6979: http://tools.ietf.org/html/rfc6979 .. _RFC3279: https://tools.ietf.org/html/rfc3279#section-2.2.2 )r& ZderzUnknown encoding '%s'�dZNISTz ECC key is not on a NIST P curver* zUnsupported key type Nzdeterministic-rfc6979z fips-186-3zUnknown DSS mode '%s')r- � isinstancer rc r Zcurvera r r �q�str�typer �getattrrA rb rS )r �moder r[ r Zprivate_key_attrrF r r r r 6 s, B � )r& N)ZCryptodome.Util.asn1r ZCryptodome.Util.numberr ZCryptodome.Math.Numbersr ZCryptodome.Hashr ZCryptodome.PublicKey.ECCr ZCryptodome.PublicKey.DSAr �__all__�objectr rA rS rb r r r r r �<module> s ! zN"
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings