3
l�_�C � @ s< d dl mZmZmZ d dlmZ d dlmZmZm Z d dl
m Z m Z m
Z
d dlmZ d dlmZmZmZ d dlmZmZmZmZmZmZ d dlm Z m Z d d
� Z d d � Z d
d� Z dd� Z!dd� Z"dd� Z#dd� Z$ej%e�G dd� de&��Z'ej%e�G dd� de&��Z(ej%e �G dd � d e&��Z)ej%e �G d d � d e&��Z*d S ) � )�absolute_import�division�print_function)�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed� _warn_sign_verify_deprecated)�hashes)�AsymmetricSignatureContext� AsymmetricVerificationContext�rsa)�AsymmetricPadding�MGF1�OAEP�PKCS1v15�PSS� calculate_max_pss_salt_length)� RSAPrivateKeyWithSerialization� RSAPublicKeyWithSerializationc C s, | j }|tjks|tjkr$t||�S |S d S )N)Z _salt_lengthr Z
MAX_LENGTHr r )Zpss�keyZhash_algorithmZsalt� r �/usr/lib64/python3.6/rsa.py�_get_rsa_pss_salt_length& s
r c C s� t |t�std��t |t�r&| jj}nVt |t�rh| jj}t |jt �sPt
dt j ��| j
|�s|t
dt j��nt
dj|j�t j��t| ||||�S )Nz1Padding must be an instance of AsymmetricPadding.z'Only MGF1 is supported by this backend.zPThis combination of padding and hash algorithm is not supported by this backend.z${} is not supported by this backend.)�
isinstancer � TypeErrorr �_lib�RSA_PKCS1_PADDINGr ZRSA_PKCS1_OAEP_PADDING�_mgfr r r �UNSUPPORTED_MGFZrsa_padding_supported�UNSUPPORTED_PADDING�format�name�_enc_dec_rsa_pkey_ctx)�backendr �data�padding� padding_enumr r r � _enc_dec_rsa/ s$
r* c C s t |t�r | jj}| jj}n| jj}| jj}| jj|j| j j
�}| j || j j
k� | j j || jj
�}||�}| j |dk� | jj||�}| j |dk� | jj|j�} | j | dk� t |t�o�| jj�r| j|jj�}
| jj||
�}| j |dk� | j|j�} | jj|| �}| j |dk� t |t��r�|jd k �r�t|j�dk�r�| jjt|j��} | j | | j j
k� | j j| |jt|j�� | jj|| t|j��}| j |dk� | j j d| �}
| j j d| �}||||
|t|��}| j j |�d |
d � }| jj � |dk�rt d��|S )N� r zsize_t *zunsigned char[]z Encryption/decryption failed.) r �
_RSAPublicKeyr ZEVP_PKEY_encrypt_initZEVP_PKEY_encryptZEVP_PKEY_decrypt_initZEVP_PKEY_decrypt�EVP_PKEY_CTX_new� _evp_pkey�_ffi�NULL�openssl_assert�gc�EVP_PKEY_CTX_free� EVP_PKEY_CTX_set_rsa_padding�
EVP_PKEY_sizer Z Cryptography_HAS_RSA_OAEP_MD� _evp_md_non_null_from_algorithmr �
_algorithm� EVP_PKEY_CTX_set_rsa_mgf1_mdZ EVP_PKEY_CTX_set_rsa_oaep_mdZ_label�lenZOPENSSL_mallocZmemmoveZ EVP_PKEY_CTX_set0_rsa_oaep_label�new�bufferZERR_clear_error�
ValueError)r& r r' r) r( ZinitZcrypt�pkey_ctx�resZbuf_size�mgf1_mdZoaep_mdZlabelptrZoutlen�bufZresbufr r r r% N sN
r% c C s� t |t�std��| jj|j�}| j|dk� t |t�rB| jj}nZt |t �r�t |j
t �sdt dt
j��||j d dk r~td��| jj}nt dj|j�t
j��|S )Nz'Expected provider of AsymmetricPadding.r z'Only MGF1 is supported by this backend.� zDDigest too large for key size. Use a larger key or different digest.z${} is not supported by this backend.)r r r r r5 r. r1 r r r r r r r r! Z digest_sizer< ZRSA_PKCS1_PSS_PADDINGr# r$ r" )r& r r( � algorithmZ pkey_sizer) r r r �_rsa_sig_determine_padding� s&
rC c C s t | |||�}| j|�}| jj|j| jj�}| j|| jjk� | jj|| jj �}||�} | j| dk� | jj
||�} | dkr�| j � t dj
|j�tj��| jj||�} | j| dk� t|t��r| jj|t|||��} | j| dk� | j|jj�}
| jj||
�} | j| dk� |S )Nr+ r z4{} is not supported by this backend for RSA signing.)rC r6 r r- r. r/ r0 r1 r2 r3 Z EVP_PKEY_CTX_set_signature_md�_consume_errorsr r# r$ r ZUNSUPPORTED_HASHr4 r r Z EVP_PKEY_CTX_set_rsa_pss_saltlenr r r7 r8 ) r& r( rB r r' Z init_funcr) Zevp_mdr= r> r? r r r �_rsa_sig_setup� s2
rE c
C s� t | ||||| jj�}| jjd�}| jj|| jj||t|��}| j|dk� | jjd|d �}| jj||||t|��}|dkr�| j � } t
d| ��| jj |�d d � S )Nzsize_t *r+ zunsigned char[]r zuDigest or salt length too long for key size. Use a larger key or shorter salt length if you are specifying a PSS salt) rE r ZEVP_PKEY_sign_initr/ r: Z
EVP_PKEY_signr0 r9 r1 �_consume_errors_with_textr< r; )
r& r( rB � private_keyr' r= Zbuflenr> r@ �errorsr r r �
_rsa_sig_sign� s&
rI c C sX t | ||||| jj�}| jj||t|�|t|��}| j|dk� |dkrT| j� t�d S )Nr )rE r ZEVP_PKEY_verify_initZEVP_PKEY_verifyr9 r1 rD r )r& r( rB �
public_key� signaturer' r= r> r r r �_rsa_sig_verify� s
rL c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_RSASignatureContextc C s< || _ || _t||||� || _|| _tj| j| j �| _d S )N)�_backend� _private_keyrC �_paddingr7 r �Hash� _hash_ctx)�selfr& rG r( rB r r r �__init__� s z _RSASignatureContext.__init__c C s | j j|� d S )N)rR �update)rS r' r r r rU s z_RSASignatureContext.updatec C s t | j| j| j| j| jj� �S )N)rI rN rP r7 rO rR �finalize)rS r r r rV s z _RSASignatureContext.finalizeN)�__name__�
__module__� __qualname__rT rU rV r r r r rM � s rM c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_RSAVerificationContextc C sF || _ || _|| _|| _t||||� |}|| _tj| j| j �| _d S )N) rN � _public_key�
_signaturerP rC r7 r rQ rR )rS r& rJ rK r( rB r r r rT s z _RSAVerificationContext.__init__c C s | j j|� d S )N)rR rU )rS r' r r r rU ( s z _RSAVerificationContext.updatec C s" t | j| j| j| j| j| jj� �S )N)rL rN rP r7 r[ r\ rR rV )rS r r r �verify+ s z _RSAVerificationContext.verifyN)rW rX rY rT rU r] r r r r rZ s rZ c @ sN e Zd Zdd� Zejd�Zdd� Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z dS )�_RSAPrivateKeyc C s� |j j|�}|dkr&|j� }td|��|j j||jj�}|j|dk� || _|| _ || _
| jjj d�}| jj j | j || jjj| jjj� | jj|d | jjjk� | jj j
|d �| _d S )Nr+ zInvalid private keyz BIGNUM **r )r Z
RSA_check_keyrF r< ZRSA_blinding_onr/ r0 r1 rN �
_rsa_cdatar. r: � RSA_get0_key� BN_num_bits� _key_size)rS r& � rsa_cdata�evp_pkeyr> rH �nr r r rT 8 s"
z_RSAPrivateKey.__init__rb c C s t � t|� t| j| ||�S )N)r r
rM rN )rS r( rB r r r �signerS s z_RSAPrivateKey.signerc C s2 | j d d }|t|�kr"td��t| j| ||�S )N� � z,Ciphertext length must be equal to key size.)�key_sizer9 r< r* rN )rS Z
ciphertextr( Zkey_size_bytesr r r �decryptX s z_RSAPrivateKey.decryptc C sV | j jj| j�}| j j|| j jjk� | j jj|| j jj�}| j j |�}t
| j ||�S )N) rN r ZRSAPublicKey_dupr_ r1 r/ r0 r2 ZRSA_freeZ_rsa_cdata_to_evp_pkeyr, )rS Zctxrd r r r rJ _ s
z_RSAPrivateKey.public_keyc C s | j jjd�}| j jjd�}| j jjd�}| j jjd�}| j jjd�}| j jjd�}| j jjd�}| j jjd�}| j jj| j|||� | j j|d | j jjk� | j j|d | j jjk� | j j|d | j jjk� | j jj| j||� | j j|d | j jjk� | j j|d | j jjk� | j jj | j|||� | j j|d | j jjk� | j j|d | j jjk� | j j|d | j jjk� t
j | j j |d �| j j |d �| j j |d �| j j |d �| j j |d �| j j |d �t
j
| j j |d �| j j |d �d�d�S )Nz BIGNUM **r )�ere )�p�q�d�dmp1�dmq1�iqmp�public_numbers)rN r/ r: r r` r_ r1 r0 ZRSA_get0_factorsZRSA_get0_crt_paramsr ZRSAPrivateNumbers�
_bn_to_int�RSAPublicNumbers) rS re rk rn rl rm ro rp rq r r r �private_numbersf s< z _RSAPrivateKey.private_numbersc C s | j j|||| | j| j�S )N)rN Z_private_key_bytesr. r_ )rS �encodingr# Zencryption_algorithmr r r �
private_bytes� s z _RSAPrivateKey.private_bytesc C s$ t | j||�\}}t| j||| |�S )N)r rN rI )rS r' r( rB r r r �sign� s z_RSAPrivateKey.signN)
rW rX rY rT r �read_only_propertyri rf rj rJ ru rw rx r r r r r^ 6 s
#
r^ c @ sF e Zd Zdd� Zejd�Zdd� Zdd� Zdd � Z d
d � Z
d d
� Z dS )r, c C st || _ || _|| _| j jjd�}| j jj| j|| j jj| j jj� | j j|d | j jjk� | j jj |d �| _
d S )Nz BIGNUM **r ) rN r_ r. r/ r: r r` r0 r1 ra rb )rS r& rc rd re r r r rT � s z_RSAPublicKey.__init__rb c C s, t � tjd|� t|� t| j| |||�S )NrK )r r � _check_bytesr
rZ rN )rS rK r( rB r r r �verifier� s
z_RSAPublicKey.verifierc C s t | j| ||�S )N)r* rN )rS Z plaintextr( r r r �encrypt� s z_RSAPublicKey.encryptc C s� | j jjd�}| j jjd�}| j jj| j||| j jj� | j j|d | j jjk� | j j|d | j jjk� tj | j j
|d �| j j
|d �d�S )Nz BIGNUM **r )rk re ) rN r/ r: r r` r_ r0 r1 r rt rs )rS re rk r r r rr � s z _RSAPublicKey.public_numbersc C s | j j||| | j| j�S )N)rN Z_public_key_bytesr. r_ )rS rv r# r r r � public_bytes� s z_RSAPublicKey.public_bytesc C s& t | j||�\}}t| j||| ||�S )N)r rN rL )rS rK r' r( rB r r r r] � s z_RSAPublicKey.verifyN) rW rX rY rT r ry ri r{ r| rr r} r] r r r r r, � s
r, N)+Z
__future__r r r Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r
r Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr
r r Z1cryptography.hazmat.primitives.asymmetric.paddingr r r r r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r* r% rC rE rI rL Zregister_interface�objectrM rZ r^ r, r r r r � s, ;"" c