File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Cipher/__pycache__/PKCS1_v1_5.cpython-310.pyc
Back
o ;j� � @ s` d dgZ ddlmZ ddlmZmZ ddlmZmZm Z ddl m Z G dd� d�Z d d d �Z d S ) �new�PKCS115_Cipher� )�Random)� bytes_to_long� long_to_bytes)�bord�is_bytes� _copy_bytes� )� pkcs1_decodec @ s: e Zd ZdZdd� Zdd� Zdd� Zdd � Zdd d �Zd S )r z�This cipher can perform PKCS#1 v1.5 RSA encryption or decryption. Do not instantiate directly. Use :func:`Cryptodome.Cipher.PKCS1_v1_5.new` instead.c C s || _ || _dS )aJ Initialize this PKCS#1 v1.5 cipher object. :Parameters: key : an RSA key object If a private half is given, both encryption and decryption are possible. If a public half is given, only encryption is possible. randfunc : callable Function that returns random bytes. N)�_key� _randfunc)�self�key�randfunc� r �P/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Cipher/PKCS1_v1_5.py�__init__# s zPKCS115_Cipher.__init__c C � | j �� S )z=Return True if this cipher object can be used for encryption.)r � can_encrypt�r r r r r 1 � zPKCS115_Cipher.can_encryptc C r )z=Return True if this cipher object can be used for decryption.)r � can_decryptr r r r r 5 r zPKCS115_Cipher.can_decryptc C s� | j �� }t|�}||d krtd��g }t|�|| d kr<| �d�}t|d �dkr-q|�|� t|�|| d ks d�|�}d| d td d |� }t |�}| j � |�}t ||�} | S ) a� Produce the PKCS#1 v1.5 encryption of a message. This function is named ``RSAES-PKCS1-V1_5-ENCRYPT``, and it is specified in `section 7.2.1 of RFC8017 <https://tools.ietf.org/html/rfc8017#page-28>`_. :param message: The message to encrypt, also known as plaintext. It can be of variable length, but not longer than the RSA modulus (in bytes) minus 11. :type message: bytes/bytearray/memoryview :Returns: A byte string, the ciphertext in which the message is encrypted. It is as long as the RSA modulus (in bytes). :Raises ValueError: If the RSA key length is not sufficiently long to deal with the given message. � zPlaintext is too long.� r r � s � N) r � size_in_bytes�len� ValueErrorr r �append�joinr r Z_encryptr ) r �message�kZmLenZpsZnew_byte�emZem_intZm_int�cr r r �encrypt9 s" � zPKCS115_Cipher.encryptr c C s� | j �� }t|�|krtd| ��t|�}| j �|�}tt|��}t|�r+t|�|kr>t |d||�}|dk r8|S ||d� S t ||||�}||d� S )a� Decrypt a PKCS#1 v1.5 ciphertext. This is the function ``RSAES-PKCS1-V1_5-DECRYPT`` specified in `section 7.2.2 of RFC8017 <https://tools.ietf.org/html/rfc8017#page-29>`_. Args: ciphertext (bytes/bytearray/memoryview): The ciphertext that contains the message to recover. sentinel (any type): The object to return whenever an error is detected. expected_pt_len (integer): The length the plaintext is known to have, or 0 if unknown. Returns (byte string): It is either the original message or the ``sentinel`` (in case of an error). .. warning:: PKCS#1 v1.5 decryption is intrinsically vulnerable to timing attacks (see `Bleichenbacher's`__ attack). **Use PKCS#1 OAEP instead**. This implementation attempts to mitigate the risk with some constant-time constructs. However, they are not sufficient by themselves: the type of protocol you implement and the way you handle errors make a big difference. Specifically, you should make it very hard for the (malicious) party that submitted the ciphertext to quickly understand if decryption succeeded or not. To this end, it is recommended that your protocol only encrypts plaintexts of fixed length (``expected_pt_len``), that ``sentinel`` is a random byte string of the same length, and that processing continues for as long as possible even if ``sentinel`` is returned (i.e. in case of incorrect decryption). .. __: https://dx.doi.org/10.1007/BFb0055716 z/Ciphertext with incorrect length (not %d bytes)r r N) r r r r r Z_decrypt_to_bytes�bytes� bytearrayr r ) r Z ciphertext�sentinelZexpected_pt_lenr# Zct_intr$ �output�sizer r r �decryptf s + zPKCS115_Cipher.decryptN)r ) �__name__� __module__� __qualname__�__doc__r r r r& r, r r r r r s -Nc C s |du rt j}t| |�S )a� Create a cipher for performing PKCS#1 v1.5 encryption or decryption. :param key: The key to use to encrypt or decrypt the message. This is a `Cryptodome.PublicKey.RSA` object. Decryption is only possible if *key* is a private RSA key. :type key: RSA key object :param randfunc: Function that return random bytes. The default is :func:`Cryptodome.Random.get_random_bytes`. :type randfunc: callable :returns: A cipher object `PKCS115_Cipher`. N)r Zget_random_bytesr )r r r r r r � s )N)�__all__Z Cryptodomer ZCryptodome.Util.numberr r ZCryptodome.Util.py3compatr r r Z_pkcs1_oaep_decoder r r r r r r �<module> s
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings