File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Signature/__pycache__/eddsa.cpython-310.pyc
Back
o ;j�0 � @ sr d dl mZ d dlmZmZ d dlmZmZ d dlm Z m Z m Z m Z dd� Z dd� ZG d d � d e�Zdd d �Zd S )� )�Integer)�SHA512�SHAKE256)�bchr�is_bytes)�EccKey� construct�_import_ed25519_public_key�_import_ed448_public_keyc C sZ t | �dkrt| �\}}d}nt | �dkr t| �\}}d}ntdt | � ��t|||d�S )a� Create a new Ed25519 or Ed448 public key object, starting from the key encoded as raw ``bytes``, in the format described in RFC8032. Args: encoded (bytes): The EdDSA public key to import. It must be 32 bytes for Ed25519, and 57 bytes for Ed448. Returns: :class:`Cryptodome.PublicKey.EccKey` : a new ECC key object. Raises: ValueError: when the given key cannot be parsed. � �Ed25519�9 �Ed448zNot an EdDSA key (%d bytes))�curveZpoint_xZpoint_y)�lenr r � ValueErrorr )�encoded�x�y� curve_name� r �N/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Signature/eddsa.py�import_public_key) s r c C s8 t | �dkr d}n t | �dkrd}ntd��t| |d�S )a� Create a new Ed25519 or Ed448 private key object, starting from the key encoded as raw ``bytes``, in the format described in RFC8032. Args: encoded (bytes): The EdDSA private key to import. It must be 32 bytes for Ed25519, and 57 bytes for Ed448. Returns: :class:`Cryptodome.PublicKey.EccKey` : a new ECC key object. Raises: ValueError: when the given key cannot be parsed. r Zed25519r Zed448z8Incorrect length. Only EdDSA private keys are supported.)�seedr )r r r )r r r r r �import_private_keyE s r c @ sP e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dS )�EdDSASigSchemezpAn EdDSA signature object. Do not instantiate directly. Use :func:`Cryptodome.Signature.eddsa.new`. c C s$ || _ || _|�� | _|jj| _dS )z�Create a new EdDSA object. Do not instantiate this object directly, use `Cryptodome.Signature.DSS.new` instead. N)�_key�_context�_export_eddsa_public�_A�_curve�order�_order)�self�key�contextr r r �__init__i s zEdDSASigScheme.__init__c C s | j �� S )zRReturn ``True`` if this signature object can be used for signing messages.)r � has_private)r# r r r �can_signu s zEdDSASigScheme.can_signc C s� | j �� s td��| j jdkr#t|tj�}|s t|�s td��| j}n | j jdkr=t|t j �}|s9t|�s9td��| j }nt d��|||�S )aR Compute the EdDSA signature of a message. Args: msg_or_hash (bytes or a hash object): The message to sign (``bytes``, in case of *PureEdDSA*) or the hash that was carried out over the message (hash object, for *HashEdDSA*). The hash object must be :class:`Cryptodome.Hash.SHA512` for Ed25519, and :class:`Cryptodome.Hash.SHAKE256` object for Ed448. :return: The signature as ``bytes``. It is always 64 bytes for Ed25519, and 114 bytes for Ed448. :raise TypeError: if the EdDSA key has no private half z Private key is needed to signr �-'msg_or_hash' must be bytes of a SHA-512 hashr �.'msg_or_hash' must be bytes of a SHAKE256 hash�Incorrect curve for EdDSA) r r' � TypeErrorr � isinstancer � SHA512Hashr � _sign_ed25519r � SHAKE256_XOF� _sign_ed448r )r# � msg_or_hash�phZeddsa_sign_methodr r r �sign{ s zEdDSASigScheme.signc C s� | j s|rt|�}dt|� tt| j �� | j }nd}|r"|�� n|}t�|| jj | ��� }t � |d�| j }t || jj j d��� }t�|| | j | ��� } t � | d�| j } || | jj | j } || �dd� S )N� SigEd25519 no Ed25519 collisions� �little�Zpointr )r �intr r �digestr �newr �_prefixr � from_bytesr" r r �Gr r �d�to_bytes) r# r2 r3 �flag�dom2�PHM�r_hash�r�R_pk�k_hash�k�sr r r r/ � s �� z EdDSASigScheme._sign_ed25519c C s� t |�}dt|� tt| j�� | j }|r |�� �d�n|}t�|| jj | ��d�}t � |d�| j }t || jjj d��� }t�|| | j | ��d�} t � | d�| j } || | jj | j } || �dd� S )N� SigEd448�@ �r r7 r8 r )r9 r r r �copy�readr r; r r< r r= r" r r r> r r r? r@ ) r# r2 r3 rA �dom4rC rD rE rF rG rH rI r r r r1 � s �� zEdDSASigScheme._sign_ed448c C s| | j jdkrt|tj�}|st|�std��| j}n | j jdkr4t|tj �}|s0t|�s0td��| j }nt d��||||�S )a� Check if an EdDSA signature is authentic. Args: msg_or_hash (bytes or a hash object): The message to verify (``bytes``, in case of *PureEdDSA*) or the hash that was carried out over the message (hash object, for *HashEdDSA*). The hash object must be :class:`Cryptodome.Hash.SHA512` object for Ed25519, and :class:`Cryptodome.Hash.SHAKE256` for Ed448. signature (``bytes``): The signature that needs to be validated. It must be 64 bytes for Ed25519, and 114 bytes for Ed448. :raise ValueError: if the signature is not authentic r r) r r* r+ ) r r r- r r. r r, �_verify_ed25519r r0 � _verify_ed448r )r# r2 � signaturer3 Zeddsa_verify_methodr r r �verify� s zEdDSASigScheme.verifyc C s$ t |�dkr td��| js|r$t|�}dt|� tt | j�� | j }nd}|r,|�� n|}z t|d d� �j}W n tyD td��w t� |dd � d�}|| j krXtd��t � ||d d� | j | ��� } t� | d�| j } |d | jjj } d | | d | jj } | | kr�td ��d S ) NrK �'The signature is not authentic (length)r5 r6 r �"The signature is not authentic (R)r7 �"The signature is not authentic (S)� � The signature is not authentic)r r r r9 r r: r �pointQr r= r" r r; r r r r> ) r# r2 rR r3 rA rB rC �RrI rG rH �point1�point2r r r rP � s4 �� � $�z EdDSASigScheme._verify_ed25519c C s t |�dkr td��t|�}dt|� tt | j�� | j }|r'|�� �d�n|}z t|d d� �j}W n ty? td��w t � |dd � d�}|| j krStd��t � ||d d� | j | ��d�} t � | d�| j } |d | jjj } d | | d | jj } | | kr�td ��d S ) NrL rT rJ rK r rU r7 rV rW rX )r r r9 r r rM rN r rY r r= r" r r; r r r r> ) r# r2 rR r3 rA rO rC rZ rI rG rH r[ r\ r r r rQ s0 �� � &�z EdDSASigScheme._verify_ed448N) �__name__� __module__� __qualname__�__doc__r& r( r4 r/ r1 rS rP rQ r r r r r c s ## #r Nc C sX t | t�r | jdvrtd��|dkrtd��|du r d}n t|�dkr'td��t| |�S ) a� Create a signature object :class:`EdDSASigScheme` that can perform or verify an EdDSA signature. Args: key (:class:`Cryptodome.PublicKey.ECC` object): The key to use for computing the signature (*private* keys only) or for verifying one. The key must be on the curve ``Ed25519`` or ``Ed448``. mode (string): This parameter must be ``'rfc8032'``. context (bytes): Up to 255 bytes of `context <https://datatracker.ietf.org/doc/html/rfc8032#page-41>`_, which is a constant byte string to segregate different protocols or different applications of the same key. )r r z&EdDSA can only be used with EdDSA keysZrfc8032zMode must be 'rfc8032'Nr6 � z3Context for EdDSA must not be longer than 255 bytes)r- r r r r r )r$ �moder% r r r r; 9 s r; )N)ZCryptodome.Math.Numbersr ZCryptodome.Hashr r ZCryptodome.Util.py3compatr r ZCryptodome.PublicKey.ECCr r r r r r �objectr r; r r r r �<module> s W
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings