Submit
Path:
~
/
/
opt
/
alt
/
python37
/
lib64
/
python3.7
/
site-packages
/
cryptography
/
hazmat
/
backends
/
openssl
/
__pycache__
/
File Content:
backend.cpython-37.opt-1.pyc
B \��`�' � @ s d dl mZmZmZ d dlZd dlZd dlZd dlZd dlZd dlm Z d dl Z d dl m Z m Z d dlmZmZ d dlmZmZmZmZmZmZmZmZmZmZm Z m Z m Z d dl m Z d dl!m"Z" d d l#m$Z$ d d l%m&Z& d d l'm(Z(m)Z)m*Z*m+Z+ d d l,m-Z-m.Z.m/Z/ d d l0m1Z1m2Z2 d dl3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z: d dl;m<Z< d dl=m>Z> d dl?m@Z@mAZA d dlBmCZCmDZD d dlEmFZFmGZGmHZHmIZI d dlJmKZK d dlLmMZMmNZN d dlOmPZPmQZQmRZR d dlSmTZTmUZUmVZVmWZW d dlXmYZYmZZZm[Z[m\Z\m]Z]m^Z^m_Z_m`Z`maZa d dlbmcZcmdZdmeZemfZfmgZgmhZhmiZimjZj d dlkmlZl e�mdd d g�Zne �oe�e �oe�e �oe�e �oe�e �oe�e �oe�e �oe�e �oe�e �oe�e �oe �e �oe�e �oe �e �peK�q� jrjse �G d d � d et��������������ZuG d d!� d!et�Zvd"d#� Zweu� ZxdS )$� )�absolute_import�division�print_functionN)�contextmanager)�utils�x509)�UnsupportedAlgorithm�_Reasons) � CMACBackend� CipherBackend�DERSerializationBackend� DHBackend� DSABackend�EllipticCurveBackend� HMACBackend� HashBackend�PBKDF2HMACBackend�PEMSerializationBackend� RSABackend� ScryptBackend� X509Backend)�aead)�_CipherContext)� _CMACContext)� _Integers)� _DHParameters� _DHPrivateKey� _DHPublicKey�_dh_params_dup)�_DSAParameters�_DSAPrivateKey� _DSAPublicKey)�_EllipticCurvePrivateKey�_EllipticCurvePublicKey)�$_CRL_ENTRY_EXTENSION_ENCODE_HANDLERS� _CRL_EXTENSION_ENCODE_HANDLERS�_EXTENSION_ENCODE_HANDLERS�_encode_asn1_int_gc�_encode_asn1_str_gc�_encode_name_gc� _txt2obj_gc)� _HashContext)� _HMACContext)�_RSAPrivateKey� _RSAPublicKey)�_X25519PrivateKey�_X25519PublicKey)� _Certificate�_CertificateRevocationList�_CertificateSigningRequest�_RevokedCertificate)�binding)�hashes� serialization)�dsa�ec�rsa)�MGF1�OAEP�PKCS1v15�PSS) �AES�ARC4�Blowfish�CAST5�Camellia�ChaCha20�IDEA�SEED� TripleDES)�CBC�CFB�CFB8�CTR�ECB�GCM�OFB�XTS)�scrypt� _MemoryBIO�bioZchar_ptrc @ sb e Zd ZdZdZdd� Zdd� Zdd� Zej d d � �Z d d � Z d d� Z dd� Z dd� Zdd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Z d�d0d1�Z d2d3� Z d4d5� Z d6d7� Z d8d9� Z!d:d;� Z"d<d=� Z#d>d?� Z$d@dA� Z%dBdC� Z&dDdE� Z'dFdG� Z(dHdI� Z)dJdK� Z*dLdM� Z+dNdO� Z,dPdQ� Z-dRdS� Z.dTdU� Z/dVdW� Z0dXdY� Z1dZd[� Z2d\d]� Z3d^d_� Z4d`da� Z5dbdc� Z6ddde� Z7dfdg� Z8dhdi� Z9djdk� Z:dldm� Z;dndo� Z<dpdq� Z=drds� Z>dtdu� Z?dvdw� Z@dxdy� ZAdzd{� ZBd|d}� ZCd~d� ZDd�d�� ZEd�d�� ZFd�d�� ZGd�d�� ZHd�d�� ZId�d�� ZJd�d�� ZKd�d�� ZLd�d�� ZMd�d�� ZNd�d�� ZOd�d�� ZPd�d�� ZQd�d�� ZRd�d�� ZSd�d�� ZTd�d�� ZUd�d�� ZVe d�d�� �ZWd�d�� ZXd�d�� ZYd�d�� ZZd�d�� Z[d�d�� Z\d�d�� Z]d�d�� Z^d�d�� Z_d�d�� Z`d�d�� Zad�d�� Zbd�d�� Zcd�d�� Zdd�d�� Zed�d�dÄZfd�dń Zgd�dDŽ Zhd�dɄ Zid�d˄ Zjd�d̈́ Zkd�dτ Zld�dф Zmd�dӄ Znd/S )��Backendz) OpenSSL API binding interfaces. Zopensslc C s\ t �� | _| jj| _| jj| _i | _| �� | � � | jj g| _ | jj rX| j � | jj� d S )N)r5 �Binding�_bindingZffi�_ffi�lib�_lib�_cipher_registry�_register_default_ciphers�activate_osrandom_engineZ EVP_PKEY_DH� _dh_types� Cryptography_HAS_EVP_PKEY_DHX�appendZ EVP_PKEY_DHX)�self� r` �_/opt/alt/python37/lib64/python3.7/site-packages/cryptography/hazmat/backends/openssl/backend.py�__init__\ s zBackend.__init__c C s t �| j|�S )N)r5 Z_openssl_assertrX )r_ �okr` r` ra �openssl_asserth s zBackend.openssl_assertc C sJ | j �� }|| jjkrF| j �|� | j �� | j �|�}| �|dk� d S )N� )rX ZENGINE_get_default_RANDrV �NULLZENGINE_unregister_RAND� RAND_cleanup� ENGINE_finishrd )r_ �e�resr` r` ra �activate_builtin_randomk s z Backend.activate_builtin_randomc c s� | j �| jj�}| �|| jjk� | j �|�}| �|dk� z |V W d | j �|�}| �|dk� | j � |�}| �|dk� X d S )Nre ) rX Z ENGINE_by_idrU Z_osrandom_engine_idrd rV rf Z ENGINE_initZ ENGINE_freerh )r_ ri rj r` r` ra �_get_osurandom_enginev s z Backend._get_osurandom_enginec C sD | � � | �� � }| j�|�}| �|dk� W d Q R X | j�� d S )Nre )rk rl rX ZENGINE_set_default_RANDrd rg )r_ ri rj r` r` ra r[ � s z Backend.activate_osrandom_enginec C s` | j �dd�}| �� �2}| j�|dt|�|| j jd�}| �|dk� W d Q R X | j �|�� d�S )Nzchar[]�@ s get_implementationr �ascii) rV �newrl rX ZENGINE_ctrl_cmd�lenrf rd �string�decode)r_ �bufri rj r` r` ra � osrandom_engine_implementation� s z&Backend.osrandom_engine_implementationc C s | j �| j�| jj���d�S )z� Friendly string name of the loaded OpenSSL library. This is not necessarily the same version as it was compiled against. Example: OpenSSL 1.0.1e 11 Feb 2013 rn )rV rq rX ZOpenSSL_versionZOPENSSL_VERSIONrr )r_ r` r` ra �openssl_version_text� s z Backend.openssl_version_textc C s | j �� S )N)rX ZOpenSSL_version_num)r_ r` r` ra �openssl_version_number� s z Backend.openssl_version_numberc C s t | ||�S )N)r, )r_ �key� algorithmr` r` ra �create_hmac_ctx� s zBackend.create_hmac_ctxc C s@ |j dks|j dkr0d�|j |jd ��d�}n |j �d�}|S )NZblake2bZblake2sz{0}{1}� rn )�name�formatZ digest_size�encode)r_ rx Zalgr` r` ra �_build_openssl_digest_name� s z"Backend._build_openssl_digest_namec C s" | � |�}| j�|�}|| jjkS )N)r~ rX �EVP_get_digestbynamerV rf )r_ rx r{ Zdigestr` r` ra �hash_supported� s zBackend.hash_supportedc C s | � |�S )N)r� )r_ rx r` r` ra �hmac_supported� s zBackend.hmac_supportedc C s t | |�S )N)r+ )r_ rx r` r` ra �create_hash_ctx� s zBackend.create_hash_ctxc C sH y| j t|�t|�f }W n tk r. dS X || ||�}| jj|kS )NF)rY �type�KeyErrorrV rf )r_ �cipher�mode�adapter� evp_cipherr` r` ra �cipher_supported� s zBackend.cipher_supportedc C s0 ||f| j kr td�||���|| j ||f< d S )Nz$Duplicate registration for: {0} {1}.)rY � ValueErrorr| )r_ � cipher_cls�mode_clsr� r` r` ra �register_cipher_adapter� s z Backend.register_cipher_adapterc C sX x,t ttttttgD ]}| �t|t d�� qW x(t ttttgD ]}| �t |t d�� q>W x&t tttgD ]}| �t |t d�� qfW | �t tt d�� x&t tttgD ]}| �t |t d�� q�W x&t tttgD ]}| �t |t d�� q�W x6t�ttgt tttg�D ]\}}| �||t d�� q�W | �ttd �t d�� | �ttd �t d�� | �ttt� d S ) Nz+{cipher.name}-{cipher.key_size}-{mode.name}zdes-ede3-{mode.name}zdes-ede3zbf-{mode.name}zseed-{mode.name}z{cipher.name}-{mode.name}Zrc4Zchacha20)rH rK rL rN rI rJ rM r� r? �GetCipherByNamerC rG rA rF � itertools�productrB rE r@ r� rD rO �_get_xts_cipher)r_ r� r� r` r` ra rZ � sZ z!Backend._register_default_ciphersc C s t | ||t j�S )N)r Z_ENCRYPT)r_ r� r� r` r` ra � create_symmetric_encryption_ctx s z'Backend.create_symmetric_encryption_ctxc C s t | ||t j�S )N)r Z_DECRYPT)r_ r� r� r` r` ra � create_symmetric_decryption_ctx s z'Backend.create_symmetric_decryption_ctxc C s | � |�S )N)r� )r_ rx r` r` ra �pbkdf2_hmac_supported s z Backend.pbkdf2_hmac_supportedc C sx | j �d|�}| j�|j�d��}| �|| j jk� | j�|t |�|t |�||||�}| �|dk� | j � |�d d � S )Nzunsigned char[]rn re ) rV ro rX r r{ r} rd rf ZPKCS5_PBKDF2_HMACrp �buffer) r_ rx �length�saltZ iterations� key_materialrs �evp_mdrj r` r` ra �derive_pbkdf2_hmac s zBackend.derive_pbkdf2_hmacc C s t �| j�S )N)r5 �_consume_errorsrX )r_ r` r` ra r� ' s zBackend._consume_errorsc C s� t jsX| j�|�}| j�d|�}| j�||�}| �|dk� t� | j� |�d |� d�S | j� |�}| �|| jj k� | j� |�}| j�|� t|d�S d S )Nzunsigned char[]r �big� )�six�PY2rX Z BN_num_bytesrV ro Z BN_bn2binrd �int� from_bytesr� Z BN_bn2hexrf rq � OPENSSL_free)r_ �bnZ bn_num_bytesZbin_ptrZbin_lenZ hex_cdataZhex_strr` r` ra � _bn_to_int* s zBackend._bn_to_intNc C s� |dkr| j j}tjs\|�t|�� d d �d�}| j�|t |�|�}| � || j jk� |S t |�� d�dd� � d�}| j �d�}||d < | j�||�}| � |d k� | � |d | j jk� |d S dS ) a Converts a python integer to a BIGNUM. The returned BIGNUM will not be garbage collected (to support adding them to structs that take ownership of the object). Be sure to register it for GC if it will be discarded after use. Ng @re r� �L� rn z BIGNUM **r )rV rf r� r� �to_bytesr� � bit_lengthrX Z BN_bin2bnrp rd �hex�rstripr} ro Z BN_hex2bn)r_ Znumr� ZbinaryZbn_ptrZhex_numrj r` r` ra � _int_to_bn= s zBackend._int_to_bnc C s� t �||� | j�� }| �|| jjk� | j�|| jj�}| � |�}| j�|| jj �}| j� |||| jj�}| �|dk� | � |�}t | ||�S )Nre )r: Z_verify_rsa_parametersrX �RSA_newrd rV rf �gc�RSA_freer� �BN_freeZRSA_generate_key_ex�_rsa_cdata_to_evp_pkeyr- )r_ �public_exponent�key_size� rsa_cdatar� rj �evp_pkeyr` r` ra �generate_rsa_private_key\ s z Backend.generate_rsa_private_keyc C s |dko|d@ dko|dkS )N� re r i r` )r_ r� r� r` r` ra �!generate_rsa_parameters_supportedn s z)Backend.generate_rsa_parameters_supportedc C sR t �|j|j|j|j|j|j|jj |jj � | j � � }| � || jjk� | j�|| j j�}| �|j�}| �|j�}| �|j�}| �|j�}| �|j�}| �|j�}| �|jj �} | �|jj �} | j �|||�} | � | dk� | j �|| | |�} | � | dk� | j �||||�} | � | dk� | j �|| jj�} | � | dk� | �|�} t| || �S )Nre )r: Z _check_private_key_components�p�q�d�dmp1�dmq1�iqmp�public_numbersri �nrX r� rd rV rf r� r� r� ZRSA_set0_factors� RSA_set0_keyZRSA_set0_crt_paramsZRSA_blinding_onr� r- ) r_ �numbersr� r� r� r� r� r� r� ri r� rj r� r` r` ra �load_rsa_private_numbersr s< z Backend.load_rsa_private_numbersc C s� t �|j|j� | j�� }| �|| jjk� | j� || jj �}| � |j�}| � |j�}| j� |||| jj�}| �|dk� | � |�}t| ||�S )Nre )r: Z _check_public_key_componentsri r� rX r� rd rV rf r� r� r� r� r� r. )r_ r� r� ri r� rj r� r` r` ra �load_rsa_public_numbers� s z Backend.load_rsa_public_numbersc C s2 | j �� }| �|| jjk� | j�|| j j�}|S )N)rX Z EVP_PKEY_newrd rV rf r� � EVP_PKEY_free)r_ r� r` r` ra �_create_evp_pkey_gc� s zBackend._create_evp_pkey_gcc C s( | � � }| j�||�}| �|dk� |S )Nre )r� rX ZEVP_PKEY_set1_RSArd )r_ r� r� rj r` r` ra r� � s z Backend._rsa_cdata_to_evp_pkeyc C sJ | j �d|�}| j�|t|��}| �|| j jk� t| j �|| jj �|�S )z� Return a _MemoryBIO namedtuple of (BIO, char*). The char* is the storage for the BIO and it must stay alive until the BIO is finished with. zchar[]) rV ro rX ZBIO_new_mem_bufrp rd rf rQ r� �BIO_free)r_ �dataZ data_char_prR r` r` ra � _bytes_to_bio� s zBackend._bytes_to_bioc C sP | j �� }| �|| jjk� | j �|�}| �|| jjk� | j�|| j j�}|S )z. Creates an empty memory BIO. )rX Z BIO_s_memrd rV rf ZBIO_newr� r� )r_ Z bio_methodrR r` r` ra �_create_mem_bio_gc� s zBackend._create_mem_bio_gcc C s\ | j �d�}| j�||�}| �|dk� | �|d | j jk� | j �|d |�dd� }|S )zE Reads a memory BIO. This only works on memory BIOs. zchar **r N)rV ro rX ZBIO_get_mem_datard rf r� )r_ rR rs Zbuf_len�bio_datar` r` ra � _read_mem_bio� s zBackend._read_mem_bioc C s8 | j �|�}|| j jkrT| j �|�}| �|| jjk� | j�|| j j�}t | ||�S || j j kr�| j � |�}| �|| jjk� | j�|| j j �}t | ||�S || j jkr�| j �|�}| �|| jjk� | j�|| j j�}t| ||�S || jk�r,| j �|�}| �|| jjk� | j�|| j j�}t| ||�S td��dS )zd Return the appropriate type of PrivateKey given an evp_pkey cdata pointer. zUnsupported key type.N)rX � EVP_PKEY_id� EVP_PKEY_RSA�EVP_PKEY_get1_RSArd rV rf r� r� r- � EVP_PKEY_DSA�EVP_PKEY_get1_DSA�DSA_freer � EVP_PKEY_EC�EVP_PKEY_get1_EC_KEY� EC_KEY_freer" r\ �EVP_PKEY_get1_DH�DH_freer r )r_ r� �key_typer� � dsa_cdata�ec_cdata�dh_cdatar` r` ra �_evp_pkey_to_private_key� s, z Backend._evp_pkey_to_private_keyc C s8 | j �|�}|| j jkrT| j �|�}| �|| jjk� | j�|| j j�}t | ||�S || j j kr�| j � |�}| �|| jjk� | j�|| j j �}t | ||�S || j jkr�| j �|�}| �|| jjk� | j�|| j j�}t| ||�S || jk�r,| j �|�}| �|| jjk� | j�|| j j�}t| ||�S td��dS )zc Return the appropriate type of PublicKey given an evp_pkey cdata pointer. zUnsupported key type.N)rX r� r� r� rd rV rf r� r� r. r� r� r� r! r� r� r� r# r\ r� r� r r )r_ r� r� r� r� r� r� r` r` ra �_evp_pkey_to_public_key� s, z Backend._evp_pkey_to_public_keyc C s6 | j jr&t|tjtjtjtjtjf�S t|tj�S d S )N) rX Z Cryptography_HAS_RSA_OAEP_MD� isinstancer6 ZSHA1ZSHA224ZSHA256ZSHA384ZSHA512)r_ rx r` r` ra �_oaep_hash_supported s z Backend._oaep_hash_supportedc C s� t |t�rdS t |t�r2t |jt�r2| �|jj�S t |t�r�t |jt�r�| �|jj�o�| �|j�o�|j d kp�t |j �dkp�| j j dkS dS d S )NTr re F) r� r= r> Z_mgfr; r� Z _algorithmr< r� Z_labelrp rX Z Cryptography_HAS_RSA_OAEP_LABEL)r_ Zpaddingr` r` ra �rsa_padding_supported s z Backend.rsa_padding_supportedc C s~ |dkrt d��| j�� }| �|| jjk� | j�|| jj�}| j�||| jjd| jj| jj| jj�}| �|dk� t | |�S )N)i i i z+Key size must be 1024 or 2048 or 3072 bits.r re ) r� rX �DSA_newrd rV rf r� r� ZDSA_generate_parameters_exr )r_ r� �ctxrj r` r` ra �generate_dsa_parameters/ s z Backend.generate_dsa_parametersc C sT | j �|j�}| �|| jjk� | j�|| j j�}| j �|� | � |�}t | ||�S )N) rX Z DSAparams_dupZ _dsa_cdatard rV rf r� r� ZDSA_generate_key�_dsa_cdata_to_evp_pkeyr )r_ � parametersr� r� r` r` ra �generate_dsa_private_key@ s z Backend.generate_dsa_private_keyc C s | � |�}| �|�S )N)r� r� )r_ r� r� r` r` ra �'generate_dsa_private_key_and_parametersI s z/Backend.generate_dsa_private_key_and_parametersc C sB | j �||||�}| �|dk� | j �|||�}| �|dk� d S )Nre )rX � DSA_set0_pqgrd Z DSA_set0_key)r_ r� r� r� �g�pub_key�priv_keyrj r` r` ra �_dsa_cdata_set_valuesM s z Backend._dsa_cdata_set_valuesc C s� t �|� |jj}| j�� }| �|| jjk� | j� || jj �}| � |j �}| � |j �}| � |j�}| � |jj�}| � |j�}| �||||||� | �|�} t| || �S )N)r8 Z_check_dsa_private_numbersr� �parameter_numbersrX r� rd rV rf r� r� r� r� r� r� �y�xr� r� r ) r_ r� r� r� r� r� r� r� r� r� r` r` ra �load_dsa_private_numbersS s z Backend.load_dsa_private_numbersc C s� t �|j� | j�� }| �|| jjk� | j�|| jj �}| � |jj �}| � |jj �}| � |jj �}| � |j�}| jj}| �||||||� | �|�}t| ||�S )N)r8 �_check_dsa_parametersr� rX r� rd rV rf r� r� r� r� r� r� r� r� r� r! ) r_ r� r� r� r� r� r� r� r� r` r` ra �load_dsa_public_numbersf s z Backend.load_dsa_public_numbersc C s� t �|� | j�� }| �|| jjk� | j�|| jj�}| � |j �}| � |j �}| � |j �}| j� ||||�}| �|dk� t| |�S )Nre )r8 r� rX r� rd rV rf r� r� r� r� r� r� r� r )r_ r� r� r� r� r� rj r` r` ra �load_dsa_parameter_numbersw s z"Backend.load_dsa_parameter_numbersc C s( | � � }| j�||�}| �|dk� |S )Nre )r� rX ZEVP_PKEY_set1_DSArd )r_ r� r� rj r` r` ra r� � s z Backend._dsa_cdata_to_evp_pkeyc C s | � |�S )N)r� )r_ rx r` r` ra �dsa_hash_supported� s zBackend.dsa_hash_supportedc C s dS )NTr` )r_ r� r� r� r` r` ra �dsa_parameters_supported� s z Backend.dsa_parameters_supportedc C s | � |td|j ��S )N� )r� rH Z block_size)r_ rx r` r` ra �cmac_algorithm_supported� s z Backend.cmac_algorithm_supportedc C s t | |�S )N)r )r_ rx r` r` ra �create_cmac_ctx� s zBackend.create_cmac_ctxc C s� t |tj�std��t |tj�r4t |tj�s4td��| j� |j � d��}| � || j jk� | j�� }| � || j jk� | j �|| jj�}| j�|tjjj�}| � |dk� | j�|t| |j��}| � |dk� |�� }| j�||j �}| � |dk� | j� � }| � || j jk� | j �|| jj �}| j |j t!|| jj"dd� | j�#||�}| � |dk� | j�$||j |�}|dk�r�| �%� } | � | d �&| jj'| jj(�� td��t)| |�S ) Nz.Algorithm must be a registered hash algorithm.z5MD5 is not a supported hash algorithm for EC/DSA CSRsrn re F)� extensions�handlers�x509_obj�add_funcr� r zDigest too big for RSA key)*r� r6 � HashAlgorithm� TypeError�MD5r: � RSAPrivateKeyr� rX r r{ r} rd rV rf Z X509_REQ_newr� � X509_REQ_freeZX509_REQ_set_versionr ZVersionZv1�valueZX509_REQ_set_subject_namer) � _subject_name� public_keyZX509_REQ_set_pubkey� _evp_pkeyZsk_X509_EXTENSION_new_nullZsk_X509_EXTENSION_free�_create_x509_extensions� _extensionsr& Zsk_X509_EXTENSION_insertZX509_REQ_add_extensionsZ X509_REQ_signr� �_lib_reason_match� ERR_LIB_RSA� RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEYr3 ) r_ �builder� private_keyrx r� �x509_reqrj r Z sk_extension�errorsr` r` ra �create_x509_csr� sV zBackend.create_x509_csrc C s t |tj�std��t |tj�s(td��t |tj�rHt |tj�sHt d��| j � |j � d��}| �|| jjk� | j �� }| j�|tj j�}| j �||jj�}| �|dk� | j �|t| |j��}| �|dk� | j �||j j �}| �|dk� t | |j �}| j � ||�}| �|dk� | j �!| j �"|�t#�$|j%�&� ��}|| jjk�rN| �'� | j �!| j �(|�t#�$|j)�&� ��}|| jjk�r�| �'� | j*|j+t,|| j j-dd� | j �.|t| |j/��}| �|dk� | j �0||j |�}|dk�r| �1� }| �|d �2| j j3| j j4�� t d ��t5| |�S ) NzBuilder type mismatch.z.Algorithm must be a registered hash algorithm.z=MD5 is not a supported hash algorithm for EC/DSA certificatesrn re T)r� r� r� r� r� r zDigest too big for RSA key)6r� r ZCertificateBuilderr� r6 r� r� r: r� r� rX r r{ r} rd rV rf ZX509_newr� �backend� X509_freeZX509_set_versionZ_versionr ZX509_set_subject_namer) r ZX509_set_pubkeyZ _public_keyr r' �_serial_numberZX509_set_serialNumber� ASN1_TIME_setZX509_get_notBefore�calendar�timegmZ_not_valid_before� timetuple�_raise_time_set_errorZX509_get_notAfterZ_not_valid_afterr r r& Z X509_add_extZX509_set_issuer_name� _issuer_nameZ X509_signr� r r r r1 ) r_ r r rx r� Z x509_certrj � serial_numberr r` r` ra �create_x509_certificate� sj z Backend.create_x509_certificatec C s2 | � � }| �|d �| jj| jj�� td��d S )Nr zVInvalid time. This error can occur if you set a time too far in the future on Windows.)r� rd r rX Z ERR_LIB_ASN1ZASN1_R_ERROR_GETTING_TIMEr� )r_ r r` r` ra r @ s z Backend._raise_time_set_errorc C sB t |tj�std��t |tj�s(td��t |tj�rHt |tj�sHt d��| j � |j � d��}| �|| jjk� | j �� }| j�|tj j�}| j �|d�}| �|dk� | j �|t| |j��}| �|dk� | j �| jjt�|j � � ��}| �|| jjk� | j�|| j j �}| j � ||�}| �|dk� | j �| jjt�|j � � ��}| �|| jjk� | j�|| j j �}| j �!||�}| �|dk� | j"|j#t$|| j j%dd� xL|j&D ]B} | j �'| j(�} | �| | jjk� | j �)|| �}| �|dk� �q�W | j �*||j+|�}|dk�r8| �,� } | �| d �-| j j.| j j/�� t d ��t0| |�S ) NzBuilder type mismatch.z.Algorithm must be a registered hash algorithm.z5MD5 is not a supported hash algorithm for EC/DSA CRLsrn re T)r� r� r� r� r� r zDigest too big for RSA key)1r� r Z CertificateRevocationListBuilderr� r6 r� r� r: r� r� rX r r{ r} rd rV rf Z X509_CRL_newr� r � X509_CRL_freeZX509_CRL_set_versionZX509_CRL_set_issuer_namer) r r r r Z _last_updater �ASN1_TIME_freeZX509_CRL_set_lastUpdateZ _next_updateZX509_CRL_set_nextUpdater r r% ZX509_CRL_add_extZ_revoked_certificatesZ Cryptography_X509_REVOKED_dupZ _x509_revokedZX509_CRL_add0_revokedZ X509_CRL_signr r� r r r r2 ) r_ r r rx r� �x509_crlrj Z last_updateZ next_updateZ revoked_certZrevokedr r` r` ra �create_x509_crlM sh zBackend.create_x509_crlc C sh xbt |�D ]V\}}| �||�}| �|| jjk� |rF| j�|| jj�}||||�} | �| dk� q W d S )Nre )� enumerate�_create_x509_extensionrd rV rf r� rX ZX509_EXTENSION_free) r_ r� r� r� r� r� �i� extensionZx509_extensionrj r` r` ra r � s z Backend._create_x509_extensionsc C s. t | |jj�}| j�| jj||jr&dnd|�S )Nre r )r* �oid� dotted_stringrX Z X509_EXTENSION_create_by_OBJrV rf �critical)r_ r! r �objr` r` ra �_create_raw_x509_extension� s z"Backend._create_raw_x509_extensionc C s� t |jtj�r2t| |jjt|jj��}| �||�S t |jtj�rttdd� |jD ��� � }t| |t|��}| �||�S y||j }W n$ t k r� t d� |j ���Y nX || |j�}| j�|j j�d��}t�|| jjk� | j�||jr�dnd|�S d S )Nc S s g | ] }|j �qS r` )r )�.0r� r` r` ra � <listcomp>� s z2Backend._create_x509_extension.<locals>.<listcomp>z Extension not supported: {0}rn re r )r� r r ZUnrecognizedExtensionr( rp r& Z TLSFeaturer �dumpr" r� �NotImplementedErrorr| rX Z OBJ_txt2nidr# r} r rd � NID_undefZX509V3_EXT_i2dr$ )r_ r� r! r Zasn1r} Z ext_struct�nidr` r` ra r � s& z Backend._create_x509_extensionc C s� t |tj�std��| j�� }| �|| jjk� | j� || jj �}t | |j �}| j� ||�}| �|dk� | j�| jjt�|j�� ��}| �|| jjk� | j� || jj�}| j�||�}| �|dk� | j|jt|| jjdd� t| d |�S )NzBuilder type mismatch.re T)r� r� r� r� r� )r� r ZRevokedCertificateBuilderr� rX ZX509_REVOKED_newrd rV rf r� ZX509_REVOKED_freer' r Z X509_REVOKED_set_serialNumberr r r Z_revocation_dater r Z X509_REVOKED_set_revocationDater r r$ ZX509_REVOKED_add_extr4 )r_ r Z x509_revokedr rj Zrev_dater` r` ra � create_x509_revoked_certificate� s. z'Backend.create_x509_revoked_certificatec C s | � | jj| j||�S )N)� _load_keyrX ZPEM_read_bio_PrivateKeyr� )r_ r� �passwordr` r` ra �load_pem_private_key� s z Backend.load_pem_private_keyc C s� | � |�}| j�|j| jj| jj| jj�}|| jjkrR| j�|| jj�}| �|�S | � � | j� |j�}| � |dk� | j� |j| jj| jj| jj�}|| jjkr�| j�|| jj �}| �|�}t| ||�S | �� d S )Nre )r� rX ZPEM_read_bio_PUBKEYrR rV rf r� r� r� r� � BIO_resetrd ZPEM_read_bio_RSAPublicKeyr� r� r. �_handle_key_loading_error)r_ r� �mem_bior� rj r� r` r` ra �load_pem_public_key� s zBackend.load_pem_public_keyc C s^ | � |�}| j�|j| jj| jj| jj�}|| jjkrR| j�|| jj�}t| |�S | � � d S )N) r� rX ZPEM_read_bio_DHparamsrR rV rf r� r� r r2 )r_ r� r3 r� r` r` ra �load_pem_parameters s zBackend.load_pem_parametersc C s> | � |�}| �||�}|r$| �|�S | �| jj| j||�S d S )N)r� �"_evp_pkey_from_der_traditional_keyr� r. rX Zd2i_PKCS8PrivateKey_bio)r_ r� r/ r� rw r` r` ra �load_der_private_key s z Backend.load_der_private_keyc C sV | j �|j| jj�}|| jjkrF| j�|| j j�}|d k rBtd��|S | �� d S d S )Nz4Password was given but private key is not encrypted.) rX �d2i_PrivateKey_biorR rV rf r� r� r� r� )r_ r� r/ rw r` r` ra r6 0 s z*Backend._evp_pkey_from_der_traditional_keyc C s� | � |�}| j�|j| jj�}|| jjkrF| j�|| jj�}| �|�S | � � | j� |j�}| � |dk� | j� |j| jj�}|| jjkr�| j�|| jj �}| �|�}t| ||�S | �� d S )Nre )r� rX Zd2i_PUBKEY_biorR rV rf r� r� r� r� r1 rd Zd2i_RSAPublicKey_bior� r� r. r2 )r_ r� r3 r� rj r� r` r` ra �load_der_public_key> s zBackend.load_der_public_keyc C s� | � |�}| j�|j| jj�}|| jjkrF| j�|| jj�}t| |�S | jj r�| � � | j� |j�}| � |dk� | j� |j| jj�}|| jjkr�| j�|| jj�}t| |�S | �� d S )Nre )r� rX Zd2i_DHparams_biorR rV rf r� r� r r] r� r1 rd Z Cryptography_d2i_DHxparams_bior2 )r_ r� r3 r� rj r` r` ra �load_der_parametersU s zBackend.load_der_parametersc C sb | � |�}| j�|j| jj| jj| jj�}|| jjkrF| �� td��| j�|| jj �}t | |�S )NzUnable to load certificate) r� rX ZPEM_read_bio_X509rR rV rf r� r� r� r r1 )r_ r� r3 r r` r` ra �load_pem_x509_certificatek s z!Backend.load_pem_x509_certificatec C sV | � |�}| j�|j| jj�}|| jjkr:| �� td��| j�|| jj �}t | |�S )NzUnable to load certificate) r� rX Z d2i_X509_biorR rV rf r� r� r� r r1 )r_ r� r3 r r` r` ra �load_der_x509_certificatew s z!Backend.load_der_x509_certificatec C sb | � |�}| j�|j| jj| jj| jj�}|| jjkrF| �� td��| j�|| jj �}t | |�S )NzUnable to load CRL) r� rX ZPEM_read_bio_X509_CRLrR rV rf r� r� r� r r2 )r_ r� r3 r r` r` ra �load_pem_x509_crl� s zBackend.load_pem_x509_crlc C sV | � |�}| j�|j| jj�}|| jjkr:| �� td��| j�|| jj �}t | |�S )NzUnable to load CRL) r� rX Zd2i_X509_CRL_biorR rV rf r� r� r� r r2 )r_ r� r3 r r` r` ra �load_der_x509_crl� s zBackend.load_der_x509_crlc C sb | � |�}| j�|j| jj| jj| jj�}|| jjkrF| �� td��| j�|| jj �}t | |�S )NzUnable to load request) r� rX ZPEM_read_bio_X509_REQrR rV rf r� r� r� r r3 )r_ r� r3 r r` r` ra �load_pem_x509_csr� s zBackend.load_pem_x509_csrc C sV | � |�}| j�|j| jj�}|| jjkr:| �� td��| j�|| jj �}t | |�S )NzUnable to load request) r� rX Zd2i_X509_REQ_biorR rV rf r� r� r� r r3 )r_ r� r3 r r` r` ra �load_der_x509_csr� s zBackend.load_der_x509_csrc C s | � |�}|d k r$t|t�s$td��| j�d�}|d k rV| j�d|�}||_t|�|_||j | jj | j� | j j d�|�}|| jj kr�|jdkr�| �� } | �| � |jdkr�td��q�td�|jd ���n| �� | j�|| j j�}|d k r�|jdkr�td ��||�S ) NzPassword must be bytesz CRYPTOGRAPHY_PASSWORD_DATA *zchar []Z Cryptography_pem_password_cbr ���z3Password was not given but private key is encryptedzBPasswords longer than {0} bytes are not supported by this backend.re z4Password was given but private key is not encrypted.)r� r� �bytesr� rV ro r/ rp r� rR rf Z addressofrX Z _original_lib�errorr� rd r� r| �maxsizer2 r� r� Zcalled) r_ Zopenssl_read_funcZ convert_funcr� r/ r3 ZuserdataZ password_bufr� r r` r` ra r. � s< zBackend._load_keyc s� � � � }|std��n�|d �� jj� jj�sF|d �� jj� jj�rPtd��nf|d �� jj� jj�s�|d �� jj � jj �r�t dt j ��n(t� fdd�|D ��r�td��ntd��d S )Nz Could not deserialize key data.r z Bad decrypt. Incorrect password?z0PEM data is encrypted with an unsupported cipherc 3 s" | ]}|� � jj� jj�V qd S )N)r rX � ERR_LIB_EVPZ'EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM)r' rC )r_ r` ra � <genexpr>� s z4Backend._handle_key_loading_error.<locals>.<genexpr>z!Unsupported public key algorithm.)r� r� r rX rE ZEVP_R_BAD_DECRYPTZERR_LIB_PKCS12Z!PKCS12_R_PKCS12_CIPHERFINAL_ERRORZEVP_R_UNKNOWN_PBE_ALGORITHMZ ERR_LIB_PEMZ PEM_R_UNSUPPORTED_ENCRYPTIONr r ZUNSUPPORTED_CIPHER�any)r_ r r` )r_ ra r2 � s* z!Backend._handle_key_loading_errorc C s� y| � |�}W n tk r* | jj}Y nX | j�|�}|| jjkrz| �� }| �|| jjkpr|d � | jj | jj �� dS | �|| jjk� | j� |� dS d S )Nr FT) �_elliptic_curve_to_nidr rX r+ ZEC_GROUP_new_by_curve_namerV rf r� rd r Z ERR_LIB_ECZEC_R_UNKNOWN_GROUPZ EC_GROUP_free)r_ �curve� curve_nid�groupr r` r` ra �elliptic_curve_supported s z Backend.elliptic_curve_supportedc C s t |tj�sdS | �|�S )NF)r� r9 ZECDSArL )r_ Zsignature_algorithmrI r` r` ra �,elliptic_curve_signature_algorithm_supported$ s z4Backend.elliptic_curve_signature_algorithm_supportedc C s� | � |�rt| �|�}| j�|�}| �|| jjk� | j�|| jj�}| j� |�}| �|dk� | � |�}t | ||�S t d� |j�tj��dS )z@ Generate a new private key on the named curve. re z$Backend object does not support {0}.N)rL rH rX �EC_KEY_new_by_curve_namerd rV rf r� r� ZEC_KEY_generate_key�_ec_cdata_to_evp_pkeyr" r r| r{ r �UNSUPPORTED_ELLIPTIC_CURVE)r_ rI rJ r� rj r� r` r` ra �#generate_elliptic_curve_private_key- s z+Backend.generate_elliptic_curve_private_keyc C s� |j }| �|j�}| j�|�}| �|| jjk� | j�|| jj �}| j�| � |j �| jj �}| j� ||�}| �|dk� | �||j|j�}| �|�}t| ||�S )Nre )r� rH rI rX rN rd rV rf r� r� r� � private_value� BN_clear_free�EC_KEY_set_private_key�)_ec_key_set_public_key_affine_coordinatesr� r� rO r" )r_ r� ZpublicrJ r� rR rj r� r` r` ra �#load_elliptic_curve_private_numbersE s z+Backend.load_elliptic_curve_private_numbersc C sd | � |j�}| j�|�}| �|| jjk� | j�|| jj�}| � ||j |j �}| � |�}t | ||�S )N)rH rI rX rN rd rV rf r� r� rU r� r� rO r# )r_ r� rJ r� r� r` r` ra �"load_elliptic_curve_public_numbers[ s z*Backend.load_elliptic_curve_public_numbersc C st | � |�}| j�|�}| �|| jjk� | j�|| jj�}| �|�\}}| j� |�}| �|| jjk� | j�|| jj �}| � |�}| j�|| jj �}| � � �h} | j�|||| jj| jj| �} | �| dk� | j�| �} | j�| �} |||| | | �} | �| dk� W d Q R X | j�||�} | �| dk� | � |�} | j�| | jj �} | j�|| �} | �| dk� | �|�}t| ||�S )Nre )rH rX rN rd rV rf r� r� � _ec_key_determine_group_get_funcZ EC_POINT_newZ EC_POINT_freer� rS � _tmp_bn_ctxZ EC_POINT_mulZ BN_CTX_getZEC_KEY_set_public_keyrT rO r" )r_ rR rI rJ r� �get_funcrK Zpointr �bn_ctxrj Zbn_xZbn_yZprivater� r` r` ra �!derive_elliptic_curve_private_keyh s4 z)Backend.derive_elliptic_curve_private_keyc C s | � |�ot|tj�S )N)rL r� r9 ZECDH)r_ rx rI r` r` ra �+elliptic_curve_exchange_algorithm_supported� s z3Backend.elliptic_curve_exchange_algorithm_supportedc C s( | � � }| j�||�}| �|dk� |S )Nre )r� rX ZEVP_PKEY_set1_EC_KEYrd )r_ r� r� rj r` r` ra rO � s z Backend._ec_cdata_to_evp_pkeyc C sN ddd�}|� |j|j�}| j�|�� �}|| jjkrJtd�|j�tj ��|S )z/ Get the NID for a curve name. Z prime192v1Z prime256v1)Z secp192r1Z secp256r1z%{0} is not a supported elliptic curve) �getr{ rX � OBJ_sn2nidr} r+ r r| r rP )r_ rI Z curve_aliases� curve_namerJ r` r` ra rH � s z Backend._elliptic_curve_to_nidc c sX | j �� }| �|| jjk� | j�|| j j�}| j �|� z |V W d | j �|� X d S )N) rX Z BN_CTX_newrd rV rf r� Z BN_CTX_freeZ BN_CTX_startZ BN_CTX_end)r_ r[ r` r` ra rY � s zBackend._tmp_bn_ctxc C s� | � || jjk� | j�d�}| � || jjk� | j�|�}| � || jjk� | j�|�}| � || jjk� | j�|�}| � || jjk� ||kr�| jj r�| jj }n| jj }||fS )zu Given an EC_KEY determine the group and what function is required to get point coordinates. s characteristic-two-field) rd rV rf rX r_ r+ ZEC_KEY_get0_groupZEC_GROUP_method_ofZEC_METHOD_get_field_typeZCryptography_HAS_EC2MZ$EC_POINT_get_affine_coordinates_GF2mZ#EC_POINT_get_affine_coordinates_GFp)r_ r� Z nid_two_fieldrK �methodr, rZ r` r` ra rX � s z(Backend._ec_key_determine_group_get_funcc C st |dk s|dk rt d��| j�| �|�| jj�}| j�| �|�| jj�}| j�|||�}|dkrp| �� t d��|S )zg Sets the public key point in the EC_KEY context to the affine x and y values. r z2Invalid EC key. Both x and y must be non-negative.re zInvalid EC key.)r� rV r� r� rX r� Z(EC_KEY_set_public_key_affine_coordinatesr� )r_ r� r� r� rj r` r` ra rU � s z1Backend._ec_key_set_public_key_affine_coordinatesc C s� t |tj�std��t |tj�s(td��t |tj�rFd}d}| jj}n@t |tj�r~| j � d�}|j }t |�}|dkr�t d��nt d��| j �|�} |tjjkr�|tjjkr�| j j} |} n8| | j jkr�| j j} n | | j jkr�| j j} n| j j} |} nT|tjjk�r>|tjjk�r0t |tj��s$t d ��| �| |�S | j j} |} ntd ��| � � } | | | |||| jj| jj�} | � | d k� | � | �S ) Nz2format must be an item from the PrivateFormat enumzBEncryption algorithm must be a KeySerializationEncryption instance� r s aes-256-cbci� zBPasswords longer than 1023 bytes are not supported by this backendzUnsupported encryption typezDEncryption is not supported for DER encoded traditional OpenSSL keysz/encoding must be an item from the Encoding enumre ) r� r7 Z PrivateFormatr� ZKeySerializationEncryptionZ NoEncryptionrV rf ZBestAvailableEncryptionrX �EVP_get_cipherbynamer/ rp r� r� �Encoding�PEMZPKCS8Z PEM_write_bio_PKCS8PrivateKeyr� ZPEM_write_bio_RSAPrivateKeyr� ZPEM_write_bio_DSAPrivateKeyZPEM_write_bio_ECPrivateKey�DERZTraditionalOpenSSL�"_private_key_bytes_traditional_derZi2d_PKCS8PrivateKey_bior� rd r� )r_ �encodingr| Zencryption_algorithmr� �cdatar/ Zpasslenr� r� � write_biorw rR rj r` r` ra �_private_key_bytes� sj zBackend._private_key_bytesc C sp || j jkr| j j}n0|| j jkr,| j j}n| �|| j jk� | j j}| �� }|||�}| �|dk� | � |�S )Nre ) rX r� Zi2d_RSAPrivateKey_bior� Zi2d_ECPrivateKey_biord r� Zi2d_DSAPrivateKey_bior� r� )r_ r� ri rj rR rj r` r` ra rg : s z*Backend._private_key_bytes_traditional_derc C s� t |tj�std��|tjjks,|tjjkrV|tjjk sD|tjjk rLtd��| �|�S |tjjkr�|tjj krx| j j }n| j j }|}n8|tjj kr�|tjj kr�| j j}n| j j}|}ntd��| �� }|||�}| �|dk� | �|�S )Nz/encoding must be an item from the Encoding enumz1OpenSSH format must be used with OpenSSH encodingz1format must be an item from the PublicFormat enumre )r� r7 rd r� Z PublicFormat�OpenSSHr� �_openssh_public_key_bytesZSubjectPublicKeyInfore rX ZPEM_write_bio_PUBKEYZi2d_PUBKEY_bioZPKCS1ZPEM_write_bio_RSAPublicKeyZi2d_RSAPublicKey_bior� rd r� ) r_ rh r| rw r� ri rj rR rj r` r` ra �_public_key_bytesH s2 zBackend._public_key_bytesc C s$ t |tj�r@|�� }dt�t�d�t�|j � t�|j � � S t |t j �r�|�� }|j }dt�t�d�t�|j� t�|j� t�|j� t�|j� � S |�� }y$tjdtjdtjdit|j� }W n tk r� td��Y nX d | d t�t�d | �t�|� t�|�� � � S d S ) Ns ssh-rsa s ssh-rsas ssh-dss s ssh-dsss nistp256s nistp384s nistp521zZOnly SECP256R1, SECP384R1, and SECP521R1 curves are supported by the SSH public key formats ecdsa-sha2-� )r� r: Z RSAPublicKeyr� �base64Z b64encoder7 Z_ssh_write_stringZ_ssh_write_mpintri r� r8 Z DSAPublicKeyr� r� r� r� r� r9 Z SECP256R1Z SECP384R1Z SECP521R1r� rI r� r� Z encode_point)r_ rw r� r� r` r` r` ra rm t s. , z!Backend._openssh_public_key_bytesc C s� |t jjkrtd��| j�d�}| j�|| jj|| jj� |t jj krj|d | jjkr`| jj }q�| jj }n8|t jj kr�|d | jjkr�| jj }q�| jj}ntd��| �� }|||�}| �|dk� | �|�S )Nz!OpenSSH encoding is not supportedz BIGNUM **r z/encoding must be an item from the Encoding enumre )r7 rd rl r� rV ro rX Z DH_get0_pqgrf re ZPEM_write_bio_DHxparamsZPEM_write_bio_DHparamsrf Z Cryptography_i2d_DHxparams_bioZi2d_DHparams_bior� rd r� )r_ rh r| ri r� rj rR rj r` r` ra �_parameter_bytes� s* zBackend._parameter_bytesc C s| |dk rt d��|dkr t d��| j�� }| �|| jjk� | j�|| jj�}| j�|||| jj�}| �|dk� t | |�S )Ni z%DH key_size must be at least 512 bits)r� � zDH generator must be 2 or 5re ) r� rX �DH_newrd rV rf r� r� ZDH_generate_parameters_exr )r_ � generatorr� Zdh_param_cdatarj r` r` ra �generate_dh_parameters� s z Backend.generate_dh_parametersc C s( | � � }| j�||�}| �|dk� |S )Nre )r� rX ZEVP_PKEY_set1_DHrd )r_ r� r� rj r` r` ra �_dh_cdata_to_evp_pkey� s z Backend._dh_cdata_to_evp_pkeyc C s< t |j| �}| j�|�}| �|dk� | �|�}t| ||�S )Nre )r Z _dh_cdatarX ZDH_generate_keyrd rv r )r_ r� Z dh_key_cdatarj r� r` r` ra �generate_dh_private_key� s z Backend.generate_dh_private_keyc C s | � | �||��S )N)rw ru )r_ rt r� r` r` ra �&generate_dh_private_key_and_parameters� s z.Backend.generate_dh_private_key_and_parametersc C s> |j j}| j�� }| �|| jjk� | j�|| jj�}| � |j �}| � |j �}|j d k rf| � |j �}n| jj}| � |j j �}| � |j�}| j�||||�} | �| dk� | j�|||�} | �| dk� | j�dd�} | j�|| �} | �| dk� | d dk�r(|j dk�r | d | jjA dk�s(td��| �|�} t| || �S )Nre zint[]r r� z.DH private numbers did not pass safety checks.)r� r� rX rs rd rV rf r� r� r� r� r� r� r� r� � DH_set0_pqg� DH_set0_keyro �Cryptography_DH_checkZDH_NOT_SUITABLE_GENERATORr� rv r ) r_ r� r� r� r� r� r� r� r� rj �codesr� r` r` ra �load_dh_private_numbers� s2 z Backend.load_dh_private_numbersc C s� | j �� }| �|| jjk� | j�|| j j�}|j}| �|j �}| �|j �}|j d k rd| �|j �}n| jj}| �|j �}| j � ||||�}| �|dk� | j �||| jj�}| �|dk� | �|�} t| || �S )Nre )rX rs rd rV rf r� r� r� r� r� r� r� r� ry rz rv r ) r_ r� r� r� r� r� r� r� rj r� r` r` ra �load_dh_public_numbers s z Backend.load_dh_public_numbersc C s� | j �� }| �|| jjk� | j�|| j j�}| �|j�}| �|j �}|j d k r^| �|j �}n| jj}| j � ||||�}| �|dk� t | |�S )Nre ) rX rs rd rV rf r� r� r� r� r� r� ry r )r_ r� r� r� r� r� rj r` r` ra �load_dh_parameter_numbers, s z!Backend.load_dh_parameter_numbersc C s� | j �� }| �|| jjk� | j�|| j j�}| �|�}| �|�}|d k rV| �|�}n| jj}| j �||||�}| �|dk� | j� dd�}| j � ||�}| �|dk� |d dkS )Nre zint[]r ) rX rs rd rV rf r� r� r� ry ro r{ )r_ r� r� r� r� rj r| r` r` ra �dh_parameters_supported> s z Backend.dh_parameters_supportedc C s | j jdkS )Nre )rX r] )r_ r` r` ra � dh_x942_serialization_supportedT s z'Backend.dh_x942_serialization_supportedc sx t � |�}� j�d�}� j�||�}� �|d � jjk� � j�|� fdd��}� �|dk� � j�|d |�d d � S )Nzunsigned char **r c s � j �| d �S )Nr )rX r� )Zpointer)r_ r` ra �<lambda>] rb z)Backend.x509_name_bytes.<locals>.<lambda>) r) rV ro rX Z i2d_X509_NAMErd rf r� r� )r_ r{ Z x509_nameZpprj r` )r_ ra �x509_name_bytesW s zBackend.x509_name_bytesc C sT | � � }| j�|| jj�}t�|dk� | j�||t|��}t�|dk� t| |�S )Nre ) r� rX ZEVP_PKEY_set_type� NID_X25519r rd Z EVP_PKEY_set1_tls_encodedpointrp r0 )r_ r� r� rj r` r` ra �x25519_load_public_bytesb s z Backend.x25519_load_public_bytesc C sn d}| � || �}tj�|j| jj�}| �|| jjk� | j�|| jj �}| �| j� |�| jj k� t | |�S )Ns 0. 0+en" ) r� r rX r8 rR rV rf rd r� r� r� ZEVP_PKEY_X25519r/ )r_ r� Z pkcs8_prefixrR r� r` r` ra �x25519_load_private_bytesl s z!Backend.x25519_load_private_bytesc C s� | j �| j j| jj�}| �|| jjk� | j�|| j j�}| j �|�}| �|dk� | j� d�}| j � ||�}| �|dk� | �|d | jjk� | j�|d | j j �}t | |�S )Nre z EVP_PKEY **r ) rX ZEVP_PKEY_CTX_new_idr� rV rf rd r� ZEVP_PKEY_CTX_freeZEVP_PKEY_keygen_initro ZEVP_PKEY_keygenr� r/ )r_ Z evp_pkey_ctxrj Z evp_ppkeyr� r` r` ra �x25519_generate_key� s zBackend.x25519_generate_keyc C s | j jS )N)rX Z#CRYPTOGRAPHY_OPENSSL_110_OR_GREATER)r_ r` r` ra �x25519_supported� s zBackend.x25519_supportedc C sX | j �d|�}| j�|t|�|t|�|||tj||� }| �|dk� | j �|�d d � S )Nzunsigned char[]re ) rV ro rX ZEVP_PBE_scryptrp rP Z _MEM_LIMITrd r� ) r_ r� r� r� r� �rr� rs rj r` r` ra � derive_scrypt� s zBackend.derive_scryptc C s t �|�}| j�|�| jjkS )N)r Z_aead_cipher_namerX rc rV rf )r_ r� � cipher_namer` r` ra �aead_cipher_supported� s z Backend.aead_cipher_supported)N)N)o�__name__� __module__� __qualname__�__doc__r{ rb rd rk � contextlibr rl r[ rt ru rv ry r~ r� r� r� r� r� rZ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r& r r- r0 r4 r5 r7 r6 r9 r: r; r< r= r> r? r@ r. r2 rL rM rQ rV rW r\ r] rO rH rY rX rU rk rg rn rm rq ru rv rw rx r} r~ r r� r� r� r� r� r� r� r� r� r` r` r` ra rS G s� 9 " K\ V 3- & Q,& 0 rS c @ s e Zd Zdd� Zdd� ZdS )r� c C s || _ d S )N)�_fmt)r_ Zfmtr` r` ra rb � s zGetCipherByName.__init__c C s& | j j||d��� }|j�|�d��S )N)r� r� rn )r� r| �lowerrX rc r} )r_ r r� r� r� r` r` ra �__call__� s zGetCipherByName.__call__N)r� r� r� rb r� r` r` r` ra r� � s r� c C s" d� |jd �}| j�|�d��S )Nz aes-{0}-xtsr� rn )r| r� rX rc r} )r r� r� r� r` r` ra r� � s r� )yZ __future__r r r rp r � collectionsr� r� r r� Z cryptographyr r Zcryptography.exceptionsr r Z'cryptography.hazmat.backends.interfacesr r r r r r r r r r r r r Z$cryptography.hazmat.backends.opensslr Z,cryptography.hazmat.backends.openssl.ciphersr Z)cryptography.hazmat.backends.openssl.cmacr Z0cryptography.hazmat.backends.openssl.decode_asn1r Z'cryptography.hazmat.backends.openssl.dhr r r r Z(cryptography.hazmat.backends.openssl.dsar r r! Z'cryptography.hazmat.backends.openssl.ecr" r# Z0cryptography.hazmat.backends.openssl.encode_asn1r$ r% r& r' r( r) r* Z+cryptography.hazmat.backends.openssl.hashesr+ Z)cryptography.hazmat.backends.openssl.hmacr, Z(cryptography.hazmat.backends.openssl.rsar- r. Z+cryptography.hazmat.backends.openssl.x25519r/ r0 Z)cryptography.hazmat.backends.openssl.x509r1 r2 r3 r4 Z$cryptography.hazmat.bindings.opensslr5 Z cryptography.hazmat.primitivesr6 r7 Z)cryptography.hazmat.primitives.asymmetricr8 r9 r: Z1cryptography.hazmat.primitives.asymmetric.paddingr; r< r= r> Z1cryptography.hazmat.primitives.ciphers.algorithmsr? r@ rA rB rC rD rE rF rG Z,cryptography.hazmat.primitives.ciphers.modesrH rI rJ rK rL rM rN rO Z"cryptography.hazmat.primitives.kdfrP � namedtuplerQ Zregister_interfaceZregister_interface_ifrT rW ZCryptography_HAS_SCRYPT�objectrS r� r� r r` r` r` ra �<module> s~ < $ ,( `
Submit
FILE
FOLDER
Name
Size
Permission
Action
__init__.cpython-37.opt-1.pyc
375 bytes
0644
__init__.cpython-37.pyc
375 bytes
0644
aead.cpython-37.opt-1.pyc
3677 bytes
0644
aead.cpython-37.pyc
3709 bytes
0644
backend.cpython-37.opt-1.pyc
51274 bytes
0644
backend.cpython-37.pyc
51682 bytes
0644
ciphers.cpython-37.opt-1.pyc
5385 bytes
0644
ciphers.cpython-37.pyc
5385 bytes
0644
cmac.cpython-37.opt-1.pyc
2610 bytes
0644
cmac.cpython-37.pyc
2610 bytes
0644
decode_asn1.cpython-37.opt-1.pyc
20778 bytes
0644
decode_asn1.cpython-37.pyc
20831 bytes
0644
dh.cpython-37.opt-1.pyc
8087 bytes
0644
dh.cpython-37.pyc
8087 bytes
0644
dsa.cpython-37.opt-1.pyc
8659 bytes
0644
dsa.cpython-37.pyc
8659 bytes
0644
ec.cpython-37.opt-1.pyc
9319 bytes
0644
ec.cpython-37.pyc
9319 bytes
0644
encode_asn1.cpython-37.opt-1.pyc
15254 bytes
0644
encode_asn1.cpython-37.pyc
15324 bytes
0644
hashes.cpython-37.opt-1.pyc
2266 bytes
0644
hashes.cpython-37.pyc
2266 bytes
0644
hmac.cpython-37.opt-1.pyc
2642 bytes
0644
hmac.cpython-37.pyc
2642 bytes
0644
rsa.cpython-37.opt-1.pyc
12478 bytes
0644
rsa.cpython-37.pyc
12710 bytes
0644
utils.cpython-37.opt-1.pyc
1439 bytes
0644
utils.cpython-37.pyc
1439 bytes
0644
x25519.cpython-37.opt-1.pyc
2734 bytes
0644
x25519.cpython-37.pyc
2734 bytes
0644
x509.cpython-37.opt-1.pyc
19081 bytes
0644
x509.cpython-37.pyc
19204 bytes
0644
N4ST4R_ID | Naxtarrr
