File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Protocol/__pycache__/HPKE.cpython-310.pyc
Back
o ;jRB � @ s� d dl Z d dlmZ d dlmZ d dlmZ ddlmZm Z ddl m Z m Z m Z d dlmZ d d lmZ d d lmZ d d lmZmZmZ d d lmZmZ G d d� de�ZG dd� de�Z G dd� de �Z G dd� de �Z ddefddefddefddefddefd �Z d e!d e!d e!d e!d!ef d"d#�Z"d$e!d e!d%e!d&e#d e!d!ef d'd(�Z$d)e!d*e!d e!d!efd+d,�Z%G d-d.� d.�Z&ddddd/�d0ed1e d2ee! d3ee d4ee'e!e!f d%ee! d5e&fd6d7�Z(dS )8� N)�IntEnum)� ModuleType)�Optional� )� _HKDF_extract� _HKDF_expand)� key_agreement�import_x25519_public_key�import_x448_public_key)�strxor)�ECC)�EccKey)�SHA256�SHA384�SHA512)�AES�ChaCha20_Poly1305c @ s e Zd ZdZdZdZdZdZdS )�MODEz HPKE modesr r � � N)�__name__� __module__� __qualname__�__doc__�BASE�PSK�AUTH�AUTH_PSK� r r �L/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Protocol/HPKE.pyr s r c @ s e Zd ZdZdZdZdZdS )�AEADz>Authenticated Encryption with Associated Data (AEAD) Functionsr r r N)r r r r � AES128_GCM� AES256_GCM�CHACHA20_POLY1305r r r r r s r c @ � e Zd ZdS )�DeserializeErrorN�r r r r r r r r% � r% c @ r$ )�MessageLimitReachedErrorNr& r r r r r( " r' r( � � r � r � �! �z NIST P-256z NIST P-384z NIST P-521� Curve25519�Curve448�salt�label�ikm�suite_id�hashmodc C s d| | | }t | ||�S )N� HPKE-v1)r )r1 r2 r3 r4 r5 Z labeled_ikmr r r �_labeled_extract/ s r7 �prk�info�Lc C s* t �d|�d | | | }t| |||�S )N�>Hr6 )�struct�packr )r8 r2 r9 r: r4 r5 Z labeled_infor r r �_labeled_expand8 s ��r> �dh� kem_contextc C s, |j }tdd| ||�}t|d||||�}|S )N� s eae_prks shared_secret)� digest_sizer7 r> )r? r@ r4 r5 ZNsecretZeae_prk� shared_secretr r r �_extract_and_expandC s ��rD c @ s e Zd Zdedee dee deeef dededefdd �Z e d"ded e d e dee d ee f dd��Z e d#deded e d e dee f dd��Ze dedeeef fdd��Zdedededefdd�Zdd� Zd#ded ee fd d �Zd#d ed ee fd d!�Zd S )$� HPKE_Cipher� receiver_key�enc� sender_key�psk_pairr9 �aead_id�modec C sH |d u rdn|| _ | �||� |j| _|| _|| _z t| j \| _| _| _ W n t y< } z t d� | j��|�d }~ww | jt jkrEdnd| _d| _d| _| j j| _|�� | _| jrr|d urdt d��| �|| j| j |�\} | _ n|d u rzt d��| �||| j| j |�} d| _d d | j > d | _| j| |g|�R � \| _| _ | _ d S ) NrA z!Curve {} is not supported by HPKEr) r, � z0Parameter 'enc' cannot be an input when sealingz'Parameter 'enc' required when unsealingr r � ) rG �_verify_psk_inputs�curveZ_curve�_aead_id�_mode� _Curve_Config�_kem_id�_kdf_id�_hashmod�KeyError� ValueError�formatr r! �_Nk�_Nn�_NtrB �_Nh� has_private�_encrypt�_encap�_decap� _sequence� _max_sequence� _key_schedule�_key� _base_nonceZ_export_secret) �selfrF rG rH rI r9 rJ rK ZkerC r r r �__init__Z s\ ��� �����zHPKE_Cipher.__init__N�kem_idr5 �eph_keyc C s� |d u s |� � s J �|d u s|� � sJ �|d u r tj| jd�}|�� jdd�}| �� jdd�}|| }i }|rE||�� jdd�7 }d|i}dt�d|� } || |fdd�} td || | d �|��} | |fS ) N)rO �raw�rX � static_priv� KEMr; c S � t | |||�S �N�rD �r? r@ r4 r5 r r r �kdf� � z HPKE_Cipher._encap.<locals>.kdf)Zeph_priv� static_pubrr r ) r] r ZgeneraterO � public_key� export_keyr< r= r ) rF rh r5 rH ri rG �pkRmr@ � extra_paramr4 rr rC r r r r_ � s. ���zHPKE_Cipher._encapc C s� |� � sJ �z |jdkrt| �}n|jdkrt| �}ntj| |jd�}W n ty5 } ztd�|�d }~ww |�� j dd�}| | }i } |rT||�� j dd�7 }d|i} dt � d |� } || |fd d �} t d ||| d �| ��} | S )Nr/ r0 )Z curve_namez*'enc' is not a valid encapsulated HPKE keyrj rk rt rm r; c S rn ro rp rq r r r rr � rs z HPKE_Cipher._decap.<locals>.kdf)Zeph_pubrl rr r ) r] rO r r r Z import_keyrW r% ru rv r< r= r ) rG rF rh r5 rH ZpkE�verw r@ rx r4 rr rC r r r r` � s< � �� ���zHPKE_Cipher._decapc C s| |\}}|dk|dkA rt d��|dkr&| tjtjfv r$t d| j� ���d S t|�dk r0t d��| tjtjfv r<t d��d S )NrA zInconsistent PSK inputszPSK is required with mode r, z!PSK must be at least 32 byte longz$PSK is not compatible with this mode)rW r r r �name�lenr r )rK rI �psk_id�pskr r r rN � s � �z HPKE_Cipher._verify_psk_inputsrC r| r} c C s� dt �d| j| j| j� }tdd||| j�}tdd||| j�}| j�dd�| | }t|d||| j�} t | d || j || j�} t | d || j || j�} t | d || j || j�} | | | fS ) Ns HPKEz>HHHrA s psk_id_hashs info_hashr �bigs secrets keys base_nonces exp) r< r= rS rT rP r7 rU rQ �to_bytesr> rY rZ r\ ) rf rC r9 r| r} r4 Z psk_id_hashZ info_hashZkey_schedule_contextZsecret�keyZ base_nonceZexporter_secretr r r rc � s\ ������� zHPKE_Cipher._key_schedulec C s� t | j| j�| jd��}| jtjtjfv r"t j | j t j || j d�}n| jtjkr1tj | j |d�}n td| jd����| j| jkrCt� �| jd7 _|S )Nr~ )�nonceZmac_len)r� r� �Unknown AEAD cipher ID �#xr )r re ra r rZ rP r r! r" r �newrd ZMODE_GCMr[ r# r rW rb r( )rf r� �cipherr r r � _new_cipher& s zHPKE_Cipher._new_cipher� plaintext� auth_datac C s: | j std��| �� }|r|�|� |�|�\}}|| S )a� Encrypt and authenticate a message. This method can be invoked multiple times to seal an ordered sequence of messages. Arguments: plaintext: bytes The message to seal. auth_data: bytes Optional. Additional Authenticated data (AAD) that is not encrypted but that will be also covered by the authentication tag. Returns: The ciphertext concatenated with the authentication tag. z$This cipher can only be used to seal)r^ rW r� �updateZencrypt_and_digest)rf r� r� r� �ct�tagr r r �seal3 s zHPKE_Cipher.seal� ciphertextc C s� | j rtd��t|�| jk rtd��| �� }|r |�|� z|�|d| j � || j d� �}W |S tyF | jdkrBtd��td��w )a� Decrypt a message and validate its authenticity. This method can be invoked multiple times to unseal an ordered sequence of messages. Arguments: cipertext: bytes The message to unseal. auth_data: bytes Optional. Additional Authenticated data (AAD) that was also covered by the authentication tag. Returns: The original plaintext. Raises: ValueError If the ciphertext (in combination with the AAD) is not valid. But if it is the first time you call ``unseal()`` this exception may also mean that any of the parameters or keys used to establish the session is wrong or that one is missing. z&This cipher can only be used to unsealzCiphertext is too smallNr zAIncorrect HPKE keys/parameters or invalid message (wrong MAC tag)z Invalid message (wrong MAC tag))r^ rW r{ r[ r� r� Zdecrypt_and_verifyra )rf r� r� r� �ptr r r �unsealL s" � � �zHPKE_Cipher.unseal)NNro )r r r r r �bytes�tupler r rg � staticmethod�intr r_ r` rN rc r� r� r� r r r r rE X sj ��� ��� �;���� �"���� �' ��� �6 rE )rG rH r} r9 rF rJ rG rH r} �returnc C s� |t vr td|d����| j}|dvrtd|� ���|rIt| �� �t|�� � }|dkr0td��|j|kr>td�|j|���|du rEtjntj}n |du rPtj ntj }|du rYd }|du r_d }t | ||||||�S ) a� Create an HPKE context which can be used: - by the sender to seal (encrypt) a message or - by the receiver to unseal (decrypt) it. As a minimum, the two parties agree on the receiver's asymmetric key (of which the sender will only know the public half). Additionally, for authentication purposes, they may also agree on: * the sender's asymmetric key (of which the receiver will only know the public half) * a shared secret (e.g., a symmetric key derived from a password) Args: receiver_key: The ECC key of the receiver. It must be on one of the following curves: ``NIST P-256``, ``NIST P-384``, ``NIST P-521``, ``X25519`` or ``X448``. If this is a **public** key, the HPKE context can only be used to **seal** (**encrypt**). If this is a **private** key, the HPKE context can only be used to **unseal** (**decrypt**). aead_id: The HPKE identifier of the symmetric cipher. The possible values are: * ``HPKE.AEAD.AES128_GCM`` * ``HPKE.AEAD.AES256_GCM`` * ``HPKE.AEAD.CHACHA20_POLY1305`` enc: The encapsulated session key (i.e., the KEM shared secret). The receiver must always specify this parameter. The sender must always omit this parameter. sender_key: The ECC key of the sender. It must be on the same curve as the ``receiver_key``. If the ``receiver_key`` is a public key, ``sender_key`` must be a private key, and vice versa. psk: A Pre-Shared Key (PSK) as a 2-tuple of non-empty byte strings: the identifier and the actual secret value. Sender and receiver must use the same PSK (or none). The secret value must be at least 32 bytes long, but it must not be a low-entropy password (use a KDF like PBKDF2 or scrypt to derive a secret from a password). info: A non-secret parameter that contributes to the generation of all session keys. Sender and receive must use the same **info** parameter (or none). Returns: An object that can be used for sealing (if ``receiver_key`` is a public key) or unsealing (if ``receiver_key`` is a private key). In the latter case, correctness of all the keys and parameters will only be assessed with the first call to ``unseal()``. r� r� r. zUnsupported curve r z Exactly 1 private key requiredz'Sender key uses {} but recipient key {}N)rA rA rA ) r rW rO r� r] rX r r r r r rE ) rF rJ rG rH r} r9 rO Zcount_private_keysrK r r r r� v s: M � ��r� ))r< �enumr �typesr �typingr ZKDFr r ZDHr r r ZCryptodome.Util.strxorr ZCryptodome.PublicKeyr ZCryptodome.PublicKey.ECCr ZCryptodome.Hashr r r ZCryptodome.Cipherr r r r rW r% r( rR r� r7 r� r> rD rE r� r� r r r r �<module> s� � ��� � ���� � �� � " �������
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings