3
ꅭh�! � @ s� d dl mZmZmZ d dlmZ d dlmZmZm Z d dl
m Z d dl m
Z
eje j�eje j�eje j�eje j�G dd� de�����ZdS ) � )�absolute_import�division�print_function)�utils)�
InvalidTag�UnsupportedAlgorithm�_Reasons)�ciphers)�modesc @ sR e Zd ZdZdZdZdd� Zdd� Zd d
� Zd d � Z d
d� Z
dd� Z e j
d�ZdS )�_CipherContext� r � � c C s� || _ || _|| _|| _d | _t| jtj�r<| jjd | _ nd| _ | j j
j � }| j j j
|| j j
j�}| j j}y|t|�t|�f }W n4 tk
r� tdj|j|r�|jn|�tj��Y nX || j ||�}|| j j jk�rdj|�} |d k r�| dj|�7 } | dj| j j� �7 } t| tj��t|tj��r8| j j j|j �}
njt|tj ��rX| j j j|j �}
nJt|tj ��rx| j j j|j �}
n*t|tj ��r�| j j j|j �}
n
| j j j}
| j j
j!||| j j j| j j j| j j j|�} | j j"| dk� | j j
j#|t$|j%��} | j j"| dk� t|tj&��r�| j j
j'|| j j
j(t$|
�| j j j�} | j j"| dk� |j)d k �r�| j j
j'|| j j
j*t$|j)�|j)�} | j j"| dk� |j)| _| j j
j!|| j j j| j j j| j j j|j%�|
|�} | j j"| dk� | j j
j+|d� || _,d S )N� r z6cipher {} in {} mode is not supported by this backend.zcipher {0.name} zin {0.name} mode z_is not supported by this backend (Your version of OpenSSL may be too old. Current version: {}.)r )-�_backendZ_cipher�_mode�
_operation�_tag�
isinstancer ZBlockCipherAlgorithmZ
block_size�_block_size_bytes�_libZEVP_CIPHER_CTX_new�_ffi�gcZEVP_CIPHER_CTX_freeZ_cipher_registry�type�KeyErrorr �format�namer ZUNSUPPORTED_CIPHER�NULLZopenssl_version_textr
Z ModeWithInitializationVector� from_bufferZinitialization_vectorZ
ModeWithTweakZtweakZ
ModeWithNonceZnonceZEVP_CipherInit_ex�openssl_assertZ EVP_CIPHER_CTX_set_key_length�len�key�GCM�EVP_CIPHER_CTX_ctrlZEVP_CTRL_AEAD_SET_IVLEN�tag�EVP_CTRL_AEAD_SET_TAGZEVP_CIPHER_CTX_set_padding�_ctx) �selfZbackendZcipher�modeZ operationZctx�registryZadapterZ
evp_cipher�msgZiv_nonce�res� r, � /usr/lib64/python3.6/ciphers.py�__init__ s�
z_CipherContext.__init__c C s2 t t|�| j d �}| j||�}t|d |� �S )Nr )� bytearrayr r � update_into�bytes)r' �data�buf�nr, r, r- �updatez s z_CipherContext.updatec
C s� t |�}t |�|| j d k r:tdjt |�| j d ���d}d}| jjjd�}| jjj|dd�}| jjj|�}xh||kr�|| } || }
t| j || �} | jj
j | j | ||
| �} | jj
| dk� || 7 }||d 7 }qrW |S )Nr z1buffer must be at least {} bytes for this payloadr zint *T)Zrequire_writable)r r �
ValueErrorr r r �newr �min�_MAX_CHUNK_SIZEr �EVP_CipherUpdater& r )
r' r2 r3 Ztotal_data_lenZdata_processedZ total_out�outlenZ
baseoutbufZ baseinbufZoutbufZinbufZinlenr+ r, r, r- r0 s(
z_CipherContext.update_intoc C sh | j | jkr,t| jtj�r,| jd kr,td��| jj j
d| j �}| jj j
d�}| jj j
| j||�}|dkr�| jj� }| r�t| jtj�r�t�| jj|d j| jj j| jj j�|d� td��t| jtj�o�| j | jk�r.| jj j
d| j �}| jj j| j| jj j| j |�}| jj|dk� | jj j|�d d � | _| jj j| j�}| jj|dk� | jj j|�d |d � S )Nz4Authentication tag must be provided when decrypting.zunsigned char[]zint *r )�errorszFThe length of the provided data is not a multiple of the block length.r ) r �_DECRYPTr r r
ZModeWithAuthenticationTagr$ r6 r r r7 r r ZEVP_CipherFinal_exr& Z_consume_errorsr" r r Z_lib_reason_matchZ ERR_LIB_EVPZ'EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH�_ENCRYPTr# ZEVP_CTRL_AEAD_GET_TAG�bufferr ZEVP_CIPHER_CTX_cleanup)r' r3 r; r+ r< Ztag_bufr, r, r- �finalize� sB
z_CipherContext.finalizec C s` t |�| jjk r"tdj| jj���| jjj| j| jjj t |�|�}| jj
|dk� || _ | j � S )Nz.Authentication tag must be {} bytes or longer.r )
r r Z_min_tag_lengthr6 r r r r# r& r% r r r@ )r' r$ r+ r, r, r- �finalize_with_tag� s z _CipherContext.finalize_with_tagc C sN | j jjd�}| j jj| j| j jj|| j jj|�t|��}| j j |dk� d S )Nzint *r )
r r r7 r r: r& r r r r )r' r2 r; r+ r, r, r- � authenticate_additional_data� s
z+_CipherContext.authenticate_additional_datar Ni @i���?)�__name__�
__module__� __qualname__r> r= r9 r. r5 r0 r@ rA rB r Zread_only_propertyr$ r, r, r, r- r
s d 3 r N)Z
__future__r r r Z cryptographyr Zcryptography.exceptionsr r r Z cryptography.hazmat.primitivesr Z&cryptography.hazmat.primitives.ciphersr
Zregister_interfaceZ
CipherContextZAEADCipherContextZAEADEncryptionContextZAEADDecryptionContext�objectr r, r, r, r- � s