3
y�_5/ � @ s d dl mZmZmZ d dlmZ d dlmZmZm Z d dl
m Z m Z m
Z
d dlmZmZ d dlmZmZmZ dd� Zd d
� Zd d � Zd
d� Zdd� Zdd� Zeje�G dd� de ��Z eje�G dd� de ��Z ejej �G dd� de ��Z ejej!�G dd� de ��Z"dS ) � )�absolute_import�division�print_function)�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed� _warn_sign_verify_deprecated)�hashes�
serialization)�AsymmetricSignatureContext� AsymmetricVerificationContext�ecc C s t | tj�stdtj��d S )Nz/Unsupported elliptic curve signature algorithm.)�
isinstancer ZECDSAr r Z UNSUPPORTED_PUBLIC_KEY_ALGORITHM)�signature_algorithm� r �/usr/lib64/python3.6/ec.py�_check_signature_algorithm s r c C s� | j j|�}| j|| jjk� | j j|�}|| j jkr>td��| j jr^| j j |�dkr^td��| j j
|�}| j|| jjk� | jj |�j d�}|S )Nz;ECDSA keys with unnamed curves are unsupported at this timer �ascii)
�_lib�EC_KEY_get0_group�openssl_assert�_ffi�NULL�EC_GROUP_get_curve_nameZ NID_undef�NotImplementedErrorZ$CRYPTOGRAPHY_OPENSSL_102U_OR_GREATERZEC_GROUP_get_asn1_flagZ
OBJ_nid2sn�string�decode)�backendZec_key�groupZnidZ
curve_name�snr r r �_ec_key_curve_sn" s r# c C s | j j|| j j� dS )z�
Set the named curve flag on the EC_KEY. This causes OpenSSL to
serialize EC keys along with their curve OID which makes
deserialization easier.
N)r ZEC_KEY_set_asn1_flagZOPENSSL_EC_NAMED_CURVE)r Zec_cdatar r r �_mark_asn1_named_ec_curve@ s r$ c C s8 y t j| � S tk
r2 tdj|�tj��Y nX d S )Nz${} is not a supported elliptic curve)r Z _CURVE_TYPES�KeyErrorr �formatr ZUNSUPPORTED_ELLIPTIC_CURVE)r r" r r r �_sn_to_elliptic_curveL s r' c C sz | j j|j�}| j|dk� | jjd|�}| jjdd�}| j jd|t|�|||j�}| j|dk� | jj|�d |d � S )Nr zunsigned char[]zunsigned int[]� ) r Z
ECDSA_size�_ec_keyr r �newZ
ECDSA_sign�len�buffer)r � private_key�dataZmax_sizeZsigbufZ
siglen_ptr�resr r r �_ecdsa_sig_signV s r0 c C s8 | j jd|t|�|t|�|j�}|dkr4| j� t�d S )Nr r( )r Z ECDSA_verifyr+ r) Z_consume_errorsr )r �
public_key� signaturer. r/ r r r �_ecdsa_sig_verifyc s
r3 c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_ECDSASignatureContextc C s || _ || _tj||�| _d S )N)�_backend� _private_keyr �Hash�_digest)�selfr r- � algorithmr r r �__init__n s z _ECDSASignatureContext.__init__c C s | j j|� d S )N)r8 �update)r9 r. r r r r< s s z _ECDSASignatureContext.updatec C s | j j� }t| j| j|�S )N)r8 �finalizer0 r5 r6 )r9 �digestr r r r= v s
z _ECDSASignatureContext.finalizeN)�__name__�
__module__� __qualname__r; r< r= r r r r r4 l s r4 c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_ECDSAVerificationContextc C s$ || _ || _|| _tj||�| _d S )N)r5 � _public_key�
_signaturer r7 r8 )r9 r r1 r2 r: r r r r; ~ s z"_ECDSAVerificationContext.__init__c C s | j j|� d S )N)r8 r< )r9 r. r r r r< � s z _ECDSAVerificationContext.updatec C s" | j j� }t| j| j| j|� d S )N)r8 r= r3 r5 rC rD )r9 r> r r r �verify� s
z _ECDSAVerificationContext.verifyN)r? r@ rA r; r< rE r r r r rB | s rB c @ sZ e Zd Zdd� Zejd�Zedd� �Zdd� Z dd � Z
d
d � Z d d
� Z dd� Z
dd� ZdS )�_EllipticCurvePrivateKeyc C s6 || _ || _|| _t||�}t||�| _t||� d S )N)r5 r) � _evp_pkeyr# r' �_curver$ )r9 r � ec_key_cdata�evp_pkeyr" r r r r; � s
z!_EllipticCurvePrivateKey.__init__rH c C s | j jS )N)�curve�key_size)r9 r r r rL � s z!_EllipticCurvePrivateKey.key_sizec C s( t � t|� t|j� t| j| |j�S )N)r r r
r: r4 r5 )r9 r r r r �signer� s
z _EllipticCurvePrivateKey.signerc C s� | j j|| j�s tdtj��|jj| jjkr4td��| j jj | j
�}| j jj |�d d }| j j |dk� | j j
jd|�}| j jj|j
�}| j jj|||| j
| j j
j�}| j j |dk� | j j
j|�d |� S )Nz1This backend does not support the ECDH algorithm.z2peer_public_key and self are not on the same curve� � r z uint8_t[])r5 Z+elliptic_curve_exchange_algorithm_supportedrK r r Z UNSUPPORTED_EXCHANGE_ALGORITHM�name�
ValueErrorr r r) ZEC_GROUP_get_degreer r r* �EC_KEY_get0_public_keyZECDH_compute_keyr r, )r9 r: Zpeer_public_keyr! Zz_lenZz_bufZpeer_key�rr r r �exchange� s$
z!_EllipticCurvePrivateKey.exchangec C s� | j jj| j�}| j j|| j jjk� | j jj|�}| j j|�}| j jj | j�}| j j|| j jjk� | j jj
||�}| j j|dk� | j j |�}t | j ||�S )Nr( )
r5 r r r) r r r r Z_ec_key_new_by_curve_nidrR ZEC_KEY_set_public_keyZ_ec_cdata_to_evp_pkey�_EllipticCurvePublicKey)r9 r! Z curve_nidZ
public_ec_key�pointr/ rJ r r r r1 � s z#_EllipticCurvePrivateKey.public_keyc C s2 | j jj| j�}| j j|�}tj|| j� j� d�S )N)�
private_value�public_numbers) r5 r ZEC_KEY_get0_private_keyr) �
_bn_to_intr ZEllipticCurvePrivateNumbersr1 rX )r9 ZbnrW r r r �private_numbers� s
z(_EllipticCurvePrivateKey.private_numbersc C s | j j|||| | j| j�S )N)r5 Z_private_key_bytesrG r) )r9 �encodingr& Zencryption_algorithmr r r �
private_bytes� s z&_EllipticCurvePrivateKey.private_bytesc C s* t |� t| j||j�\}}t| j| |�S )N)r r r5 �
_algorithmr0 )r9 r. r r: r r r �sign� s z _EllipticCurvePrivateKey.signN)r? r@ rA r; r �read_only_propertyrK �propertyrL rM rT r1 rZ r\ r^ r r r r rF � s
rF c @ sR e Zd Zdd� Zejd�Zedd� �Zdd� Z dd � Z
d
d � Z d d
� Z dd� Z
dS )rU c C s6 || _ || _|| _t||�}t||�| _t||� d S )N)r5 r) rG r# r' rH r$ )r9 r rI rJ r" r r r r; � s
z _EllipticCurvePublicKey.__init__rH c C s | j jS )N)rK rL )r9 r r r rL � s z _EllipticCurvePublicKey.key_sizec C s6 t � tjd|� t|� t|j� t| j| ||j�S )Nr2 )r r � _check_bytesr r
r: rB r5 )r9 r2 r r r r �verifier s
z _EllipticCurvePublicKey.verifierc
C s� | j j| j�\}}| j jj| j�}| j j|| j jjk� | j j� �Z}| j jj |�}| j jj |�}||||||�}| j j|dk� | j j
|�}| j j
|�} W d Q R X t j || | j
d�S )Nr( )�x�yrK )r5 Z _ec_key_determine_group_get_funcr) r rR r r r � _tmp_bn_ctxZ
BN_CTX_getrY r ZEllipticCurvePublicNumbersrH )
r9 Zget_funcr! rV �bn_ctxZbn_xZbn_yr/ rc rd r r r rX s z&_EllipticCurvePublicKey.public_numbersc C s |t jjkr| jjj}n
| jjj}| jjj| j�}| jj || jj
j k� | jjj | j�}| jj || jj
j k� | jj
� �l}| jjj|||| jj
j d|�}| jj |dk� | jj
jd|�}| jjj||||||�}| jj ||k� W d Q R X | jj
j|�d d � S )Nr zchar[])r
� PublicFormat�CompressedPointr5 r ZPOINT_CONVERSION_COMPRESSEDZ POINT_CONVERSION_UNCOMPRESSEDr r) r r r rR re ZEC_POINT_point2octr* r, ) r9 r& Z
conversionr! rV rf ZbuflenZbufr/ r r r �
_encode_point s
z%_EllipticCurvePublicKey._encode_pointc C sp |t jjks$|t jjks$|t jjkrV|t jjk sD|t jjt jjfkrLtd��| j|�S | jj ||| | j
d �S d S )NzKX962 encoding must be used with CompressedPoint or UncompressedPoint format) r
ZEncodingZX962rg rh ZUncompressedPointrQ ri r5 Z_public_key_bytesrG )r9 r[ r& r r r � public_bytes6 s
z$_EllipticCurvePublicKey.public_bytesc C s0 t |� t| j||j�\}}t| j| ||� d S )N)r r r5 r] r3 )r9 r2 r. r r: r r r rE L s z _EllipticCurvePublicKey.verifyN)r? r@ rA r; r r_ rK r` rL rb rX ri rj rE r r r r rU � s
rU N)#Z
__future__r r r Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r
r Z cryptography.hazmat.primitivesr r
Z)cryptography.hazmat.primitives.asymmetricr r r r r# r$ r' r0 r3 Zregister_interface�objectr4 rB Z(EllipticCurvePrivateKeyWithSerializationrF Z'EllipticCurvePublicKeyWithSerializationrU r r r r � s&
a