File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/PublicKey/__pycache__/RSA.cpython-310.pyc
Back
o ;j�y � @ s� g d �Z ddlZddlZddlmZ ddlmZmZmZ ddl m Z m Z ddl m Z ddlmZ ddlmZmZmZ dd lmZmZmZ G d d � d e�Zd#d d�Zd$dd�Zdd� Z dd� Z dd� Z dd� Z dd� Z d d � Z!d d � Z"d%d d!�Z#e#Z$d"Z%dS )&)�generate� construct� import_key�RsaKey�oid� N)�Random)�tobytes�bord�tostr)� DerSequence�DerNull)� bytes_to_long)�Integer)�test_probable_prime�generate_probable_prime� COMPOSITE)� _expand_subject_public_key_info� _create_subject_public_key_info� _extract_subject_public_key_infoc @ sV e Zd ZdZdd� Zedd� �Zedd� �Zedd � �Zed d � �Z ed d � �Z edd� �Z edd� �Z edd� �Z edd� �Zedd� �Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zd0d1� Z d2d3� Z 6 5dKd7d8�Z d9d:� Z d;d<� Z d=d>� Z!d?d@� Z"dAdB� Z#dCdD� Z$dEdF� Z%dGdH� Z&dIdJ� Z'd5S )Lr a� Class defining an RSA key, private or public. Do not instantiate directly. Use :func:`generate`, :func:`construct` or :func:`import_key` instead. :ivar n: RSA modulus :vartype n: integer :ivar e: RSA public exponent :vartype e: integer :ivar d: RSA private exponent :vartype d: integer :ivar p: First factor of the RSA modulus :vartype p: integer :ivar q: Second factor of the RSA modulus :vartype q: integer :ivar invp: Chinese remainder component (:math:`p^{-1} \text{mod } q`) :vartype invp: integer :ivar invq: Chinese remainder component (:math:`q^{-1} \text{mod } p`) :vartype invq: integer :ivar u: Same as ``invp`` :vartype u: integer c K s� t |�� �}t d�}|t d�B }|||fvrtd��|�� D ] \}}t| d| |� q ||krF| j| jd | _| j| jd | _ d| _ dS dS )a. Build an RSA key. :Keywords: n : integer The modulus. e : integer The public exponent. d : integer The private exponent. Only required for private keys. p : integer The first factor of the modulus. Only required for private keys. q : integer The second factor of the modulus. Only required for private keys. u : integer The CRT coefficient (inverse of p modulo q). Only required for private keys. ��n�e)�p�q�d�uz Some RSA components are missing�_� N) �set�keys� ValueError�items�setattr�_d�_p�_dp�_q�_dq�_invq)�self�kwargsZ input_setZ public_setZ private_setZ component�value� r, �L/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/PublicKey/RSA.py�__init__R s �zRsaKey.__init__c C � t | j�S �N)�int�_n�r) r, r, r- r q � zRsaKey.nc C r/ r0 )r1 �_er3 r, r, r- r u r4 zRsaKey.ec C � | � � std��t| j�S )Nz-No private exponent available for public keys)� has_private�AttributeErrorr1 r# r3 r, r, r- r y � zRsaKey.dc C r6 )Nz.No CRT component 'p' available for public keys)r7 r8 r1 r$ r3 r, r, r- r r9 zRsaKey.pc C r6 )Nz.No CRT component 'q' available for public keys)r7 r8 r1 r& r3 r, r, r- r � r9 zRsaKey.qc C r6 )Nz/No CRT component 'dp' available for public keys)r7 r8 r1 r% r3 r, r, r- �dp� r9 z RsaKey.dpc C r6 )Nz/No CRT component 'dq' available for public keys)r7 r8 r1 r' r3 r, r, r- �dq� r9 z RsaKey.dqc C s4 | � � std��| jd u r| j�| j�| _t| j�S )Nz1No CRT component 'invq' available for public keys)r7 r8 r( r& �inverser$ r1 r3 r, r, r- �invq� s z RsaKey.invqc C s | j S r0 )r r3 r, r, r- �invp� s z RsaKey.invpc C r6 )Nz.No CRT component 'u' available for public keys)r7 r8 r1 �_ur3 r, r, r- r � r9 zRsaKey.uc C s | j �� S )z Size of the RSA modulus in bits�r2 � size_in_bitsr3 r, r, r- rA � r4 zRsaKey.size_in_bitsc C s | j �� d d d S )z9The minimal amount of bytes that can hold the RSA modulusr � r@ r3 r, r, r- � size_in_bytes� s zRsaKey.size_in_bytesc C s> d| kr| j k std�� td��ttt|�| j| j ��S )Nr zPlaintext too large)r2 r r1 �powr r5 )r) � plaintextr, r, r- �_encrypt� s �zRsaKey._encryptc C s� d| kr| j k std�� td��| �� std��tjd| j d�}t|�t|| j| j � | j }t|| j| j �}t|| j | j �}|| | j | j }|| j | }t� |�| j �|| j �}|S )Nr zCiphertext too largezThis is not a private keyr )Z min_inclusiveZ max_exclusive)r2 r r7 � TypeErrorr Z random_rangerD r5 r% r$ r' r& r? Z_mult_modulo_bytesr< ) r) � ciphertext�rZcpZm1Zm2�h�mp�resultr, r, r- �_decrypt_to_bytes� s$ � �zRsaKey._decrypt_to_bytesc C s t | �|��S )zLegacy private method)r rM �r) rH r, r, r- �_decrypt� s zRsaKey._decryptc C s t | d�S )z"Whether this is an RSA private keyr# )�hasattrr3 r, r, r- r7 � s zRsaKey.has_privatec C � dS �NTr, r3 r, r, r- � can_encrypt� � zRsaKey.can_encryptc C rQ rR r, r3 r, r, r- �can_sign� rT zRsaKey.can_signc C s t | j| jd�S )z^A matching RSA public key. Returns: a new :class:`RsaKey` object r )r r2 r5 r3 r, r, r- � public_key� s zRsaKey.public_keyc C sH | � � |� � kr dS | j|jks| j|jkrdS | � � s dS | j|jkS )NFT)r7 r r r �r) �otherr, r, r- �__eq__� s z RsaKey.__eq__c C s | |k S r0 r, rW r, r, r- �__ne__� s z RsaKey.__ne__c C s ddl m} |�)Nr )� PicklingError)�pickler[ )r) r[ r, r, r- � __getstate__� s zRsaKey.__getstate__c C sP | � � rdt| j�t| j�t| j�t| j�f }nd}dt| j�t| j�|f S )Nz, d=%d, p=%d, q=%d, u=%d� zRsaKey(n=%d, e=%d%s))r7 r1 r# r$ r& r? r2 r5 )r) �extrar, r, r- �__repr__� s �zRsaKey.__repr__c C s" | � � rd}nd}d|t| �f S )NZPrivateZPublicz%s RSA key at 0x%X)r7 �id)r) �key_typer, r, r- �__str__ s zRsaKey.__str__�PEMNr c C s� |durt |�}|du rtj}|dkrRdd� | j| jfD �\}}t|d �d@ r,d| }t|d �d@ r8d| }d||g} d �d d� | D ��} d t�| �dd � S | � � r�t d| j | j | j | j| j| j | jd | j | jd t| j��| j�g ��� } |d kr�d} |dkr�|r�td��nEddlm} |dkr�|du r�d} | j| tdt� d�} n*d} |s�|r�td��d}| j| t|||t� d�} d}nd} ttt | j | j g�t� �} |dkr�| S |dkr�ddlm} |�| | ||�}t |�S td| ��) a� Export this RSA key. Keyword Args: format (string): The desired output format: - ``'PEM'``. (default) Text output, according to `RFC1421`_/`RFC1423`_. - ``'DER'``. Binary output. - ``'OpenSSH'``. Text output, according to the OpenSSH specification. Only suitable for public keys (not private keys). Note that PEM contains a DER structure. passphrase (bytes or string): (*Private keys only*) The passphrase to protect the private key. pkcs (integer): (*Private keys only*) The standard to use for serializing the key: PKCS#1 or PKCS#8. With ``pkcs=1`` (*default*), the private key is encoded with a simple `PKCS#1`_ structure (``RSAPrivateKey``). The key cannot be securely encrypted. With ``pkcs=8``, the private key is encoded with a `PKCS#8`_ structure (``PrivateKeyInfo``). PKCS#8 offers the best ways to securely encrypt the key. .. note:: This parameter is ignored for a public key. For DER and PEM, the output is always an ASN.1 DER ``SubjectPublicKeyInfo`` structure. protection (string): (*For private keys only*) The encryption scheme to use for protecting the private key using the passphrase. You can only specify a value if ``pkcs=8``. For all possible protection schemes, refer to :ref:`the encryption parameters of PKCS#8<enc_params>`. The recommended value is ``'PBKDF2WithHMAC-SHA512AndAES256-CBC'``. If ``None`` (default), the behavior depends on :attr:`format`: - if ``format='PEM'``, the obsolete PEM encryption scheme is used. It is based on MD5 for key derivation, and 3DES for encryption. - if ``format='DER'``, the ``'PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC'`` scheme is used. prot_params (dict): (*For private keys only*) The parameters to use to derive the encryption key from the passphrase. ``'protection'`` must be also specified. For all possible values, refer to :ref:`the encryption parameters of PKCS#8<enc_params>`. The recommendation is to use ``{'iteration_count':21000}`` for PBKDF2, and ``{'iteration_count':131072}`` for scrypt. randfunc (callable): A function that provides random bytes. Only used for PEM encoding. The default is :func:`Cryptodome.Random.get_random_bytes`. Returns: bytes: the encoded key Raises: ValueError:when the format is unknown or when you try to encrypt a private key with *DER* format and PKCS#1. .. warning:: If you don't provide a pass phrase, the private key will be exported in the clear! .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _`PKCS#1`: http://www.ietf.org/rfc/rfc3447.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt NZOpenSSHc S s g | ]}|� � �qS r, )�to_bytes��.0�xr, r, r- � <listcomp>d s z%RsaKey.export_key.<locals>.<listcomp>r � � s ssh-rsa� c S s g | ] }t �d t|��| �qS )�>I)�struct�pack�len)rg Zkpr, r, r- ri j s � ssh-rsa ���r zRSA PRIVATE KEYZDERz&PKCS#1 private key cannot be encrypted��PKCS8rd z PRIVATE KEY)� key_paramszENCRYPTED PRIVATE KEYz"'protection' parameter must be setz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC)� prot_paramsru z PUBLIC KEY�rd z3Unknown key format '%s'. Cannot export the RSA key.)r r �get_random_bytesr5 r2 r �join�binascii� b2a_base64r7 r r r r r r r r< �encoder � Cryptodome.IOrt �wrapr r r rd )r) �format� passphraseZpkcsZ protection�randfuncrv Ze_bytesZn_bytes�keyparts� keystringZ binary_keyrb rt rd Zpem_strr, r, r- � export_key s| V � � � ���� zRsaKey.export_keyc O s | j |i |��S ��:meta private:)r� )r) �argsr* r, r, r- � exportKey� s zRsaKey.exportKeyc C s | � � S r� )rV r3 r, r, r- � publickey� � zRsaKey.publickeyc C � t d���r� z0Use module Cryptodome.Signature.pkcs1_15 instead��NotImplementedError)r) �M�Kr, r, r- �sign� r� z RsaKey.signc C r� r� r� )r) r� Z signaturer, r, r- �verify� r� z RsaKey.verifyc C r� �r� z/Use module Cryptodome.Cipher.PKCS1_OAEP insteadr� )r) rE r� r, r, r- �encrypt� r� zRsaKey.encryptc C r� r� r� rN r, r, r- �decrypt� r� zRsaKey.decryptc C � t �r� r� �r) r� �Br, r, r- �blind� � z RsaKey.blindc C r� r� r� r� r, r, r- �unblind� r� zRsaKey.unblindc C r� r� r� r3 r, r, r- �size� r� z RsaKey.size)rd Nr NNN)(�__name__� __module__� __qualname__�__doc__r. �propertyr r r r r r: r; r= r> r rA rC rF rM rO r7 rS rU rV rY rZ r] r` rc r� r� r� r� r� r� r� r� r� r� r, r, r, r- r 4 sd � r � c sv | dk rt d��� d dks� dk rt d��|du r tj}td� }}t� �� |�� | kr�|d| d > k r�| d }| | }td�d| d > �� ��||kr[td�d| d > �� �� �fd d �}t|||d ��td�| d d > �� ���fd d�}t|||d �} �| }�d �| d �} � �| �}|�� | kr�|d| d > k s5�| kr�| ��} ��| �} t |� |�| | d�S )aF Create a new RSA key pair. The algorithm closely follows NIST `FIPS 186-4`_ in its sections B.3.1 and B.3.3. The modulus is the product of two non-strong probable primes. Each prime passes a suitable number of Miller-Rabin tests with random bases and a single Lucas test. Args: bits (integer): Key length, or size (in bits) of the RSA modulus. It must be at least 1024, but **2048 is recommended.** The FIPS standard only defines 1024, 2048 and 3072. Keyword Args: randfunc (callable): Function that returns random bytes. The default is :func:`Cryptodome.Random.get_random_bytes`. e (integer): Public RSA exponent. It must be an odd positive integer. It is typically a small number with very few ones in its binary representation. The FIPS standard requires the public exponent to be at least 65537 (the default). Returns: an RSA key object (:class:`RsaKey`, with private key). .. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf i z"RSA modulus length must be >= 1024� r � zBRSA public exponent must be a positive, odd integer larger than 2.Nr c s | �ko | d � � �dkS �Nr )�gcd�� candidate)r �min_pr, r- �filter_p� s zgenerate.<locals>.filter_p)Z exact_bitsr� Z prime_filter�d c s* | �ko| d � � �dkot| � ��kS r� )r� �absr� )r � min_distance�min_qr r, r- �filter_q s ��zgenerate.<locals>.filter_q�r r r r r r ) r r rx r rA �sqrtr �lcmr< r ) �bitsr� r r r Zsize_qZsize_pr� r� r r� r r, )r r� r� r� r r- r � sB �� �! r Tc C s� G dd� dt �}|� }td| �D ] \}}t||t|�� q|j}|j}t|d�s/t||d�}n�|j} t|d�r>|j } |j } nt| | d } | } | d d krV| d } | d d ksLd }td�}|s�|d k r�t| �}|| k r�t |||�}|dkr�||d kr�t |d|�dkr�t|�� |d �} d }n|d9 }|| k sj|d7 }|s�|d k sb|s�t d ��|| d ks�J �|| } t|d�r�|j}n| �| �}t||| | | |d�}|�rq|dks�||kr�t d��t|�� |�dkr�t d��|d@ s�t d��|�� �rq| dks�| |kr�t d��t|�� | �dk�r t d��| | |k�rt d��t| �tk�r#t d��t| �tk�r.t d��| d | d }|| d � | d � }|| t|� dk�rPt d��t|d��rq|dk�s`|| k�rdt d��| | | dk�rqt d��|S )a3 Construct an RSA key from a tuple of valid RSA components. The modulus **n** must be the product of two primes. The public exponent **e** must be odd and larger than 1. In case of a private key, the following equations must apply: .. math:: \begin{align} p*q &= n \\ e*d &\equiv 1 ( \text{mod lcm} [(p-1)(q-1)]) \\ p*u &\equiv 1 ( \text{mod } q) \end{align} Args: rsa_components (tuple): A tuple of integers, with at least 2 and no more than 6 items. The items come in the following order: 1. RSA modulus *n*. 2. Public exponent *e*. 3. Private exponent *d*. Only required if the key is private. 4. First factor of *n* (*p*). Optional, but the other factor *q* must also be present. 5. Second factor of *n* (*q*). Optional. 6. CRT coefficient *q*, that is :math:`p^{-1} \text{mod }q`. Optional. Keyword Args: consistency_check (boolean): If ``True``, the library will verify that the provided components fulfil the main RSA properties. Raises: ValueError: when the key being imported fails the most basic RSA validity checks. Returns: An RSA key object (:class:`RsaKey`). c @ s e Zd ZdS )z construct.<locals>.InputCompsN)r� r� r� r, r, r, r- � InputCompsD s r� r� r r r r r� r Fr� Tz2Unable to compute factors p and q from exponent d.r zInvalid RSA public exponentz-RSA public exponent is not coprime to moduluszRSA modulus is not oddz Invalid RSA private exponentz.RSA private exponent is not coprime to modulusz RSA factors do not match moduluszRSA factor p is compositezRSA factor q is compositezInvalid RSA conditionzInvalid RSA component uz Invalid RSA component u with p)�object�zipr" r r r rP r r r r rD r� r r r< r7 r r r1 )Zrsa_componentsZconsistency_checkr� Z input_comps�compr+ r r �keyr r r Zktot�tZspotted�a�kZcandr Zphir� r, r, r- r s� ) � $� � r c G sN t � j| ddd�}|d dkrtd��t|dd� t|d ��|d �g �S ) N� T�Z nr_elementsZonly_ints_expectedr z(No PKCS#1 encoding of an RSA private keyr � � � )r �decoder r r r< ��encodedr* �derr, r, r- �_import_pkcs1_private� s (r� c G s t � j| ddd�}t|�S )Nr� Tr� )r r� r r� r, r, r- �_import_pkcs1_public� s r� c G s6 t df}t| �\}}}||vs|d urtd��t|�S )N�1.2.840.113549.1.1.10zNo RSA subjectPublicKeyInfo)r r r r� )r� r* �oidsZalgoidZ encoded_key�paramsr, r, r- � _import_subjectPublicKeyInfo� s r� c G s t | �}t|�S r0 )r r� )r� r* Zsp_infor, r, r- �_import_x509_cert� s r� c C sB ddl m} tdf}|�| |�}|d |vrtd��t|d |�S )Nr rs r� zNo PKCS#8 encoded RSA keyr )r} rt r �unwrapr �_import_keyDER)r� r� rt r� r� r, r, r- � _import_pkcs8� s r� c C sB t ttttf}|D ]}z|| |�W S ty Y q w td��)z@Import an RSA key (public or private half), encoded in DER form.� RSA key format is not supported)r� r� r� r� r� r )� extern_keyr� Z decodingsZdecodingr, r, r- r� � s � �r� c C s� ddl m}m}m}m} || |�\}}|dkrtd��||�\}}||�\} }||�\} }||�\} }||�\} }||�\} }||�\}}||� dd� || | | | | fD �}t|�S )Nr )� import_openssh_private_generic� read_bytes� read_string� check_paddingzssh-rsazThis SSH key is not RSAc S s g | ]}t �|��qS r, )r � from_bytesrf r, r, r- ri s z/_import_openssh_private_rsa.<locals>.<listcomp>)Z_opensshr� r� r� r� r r )�data�passwordr� r� r� r� Zssh_nameZ decryptedr r r Ziqmpr r r Zpadded�buildr, r, r- �_import_openssh_private_rsa� s r� c C sV ddl m} t| �} |durt|�}| �d�r+t| �}|�||�\}}}t||�}|S | �d�rD|�t| �|�\}}}|r?d}t||�S | �d�r�t� | � d�d �} g } t | �d kr�t � d | dd � �d } | �| d d | � � | d | d� } t | �d ks[t�| d �} t�| d �} t| | g�S t | �dkr�t| d �d kr�t| |�S td ��)a� Import an RSA key (public or private). Args: extern_key (string or byte string): The RSA key to import. The following formats are supported for an RSA **public key**: - X.509 certificate (binary or PEM format) - X.509 ``subjectPublicKeyInfo`` DER SEQUENCE (binary or PEM encoding) - `PKCS#1`_ ``RSAPublicKey`` DER SEQUENCE (binary or PEM encoding) - An OpenSSH line (e.g. the content of ``~/.ssh/id_ecdsa``, ASCII) The following formats are supported for an RSA **private key**: - PKCS#1 ``RSAPrivateKey`` DER SEQUENCE (binary or PEM encoding) - `PKCS#8`_ ``PrivateKeyInfo`` or ``EncryptedPrivateKeyInfo`` DER SEQUENCE (binary or PEM encoding) - OpenSSH (text format, introduced in `OpenSSH 6.5`_) For details about the PEM encoding, see `RFC1421`_/`RFC1423`_. passphrase (string or byte string): For private keys only, the pass phrase that encrypts the key. Returns: An RSA key object (:class:`RsaKey`). Raises: ValueError/IndexError/TypeError: When the given key cannot be parsed (possibly because the pass phrase is wrong). .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _`PKCS#1`: http://www.ietf.org/rfc/rfc3447.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt .. _`OpenSSH 6.5`: https://flak.tedunangst.com/post/new-openssh-key-format-and-bcrypt-pbkdf r rw Ns -----BEGIN OPENSSH PRIVATE KEYs -----rq � r r� rm r� �0 r� )r} rd r � startswithr r� r� r� rz � a2b_base64�splitrp rn �unpack�appendr r� r r r )r� r� rd Z text_encodedZopenssh_encoded�markerZenc_flagrL r� r� r� �lengthr r r, r, r- r s8 ) � r z1.2.840.113549.1.1.1)Nr� )Tr0 )&�__all__rz rn Z Cryptodomer ZCryptodome.Util.py3compatr r r ZCryptodome.Util.asn1r r ZCryptodome.Util.numberr ZCryptodome.Math.Numbersr ZCryptodome.Math.Primalityr r r ZCryptodome.PublicKeyr r r r� r r r r� r� r� r� r� r� r� r Z importKeyr r, r, r, r- �<module> s6 R P
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings