관리-도구
편집 파일: ec.cpython-36.pyc
3 y�_5/ � @ s d dl mZmZmZ d dlmZ d dlmZmZm Z d dl m Z m Z m Z d dlmZmZ d dlmZmZmZ dd� Zd d � Zd d � Zd d� Zdd� Zdd� Zeje�G dd� de ��Z eje�G dd� de ��Z ejej �G dd� de ��Z ejej!�G dd� de ��Z"dS ) � )�absolute_import�division�print_function)�utils)�InvalidSignature�UnsupportedAlgorithm�_Reasons)� _calculate_digest_and_algorithm�_check_not_prehashed� _warn_sign_verify_deprecated)�hashes� serialization)�AsymmetricSignatureContext� AsymmetricVerificationContext�ecc C s t | tj�stdtj��d S )Nz/Unsupported elliptic curve signature algorithm.)� isinstancer ZECDSAr r Z UNSUPPORTED_PUBLIC_KEY_ALGORITHM)�signature_algorithm� r �/usr/lib64/python3.6/ec.py�_check_signature_algorithm s r c C s� | j j|�}| j|| jjk� | j j|�}|| j jkr>td��| j jr^| j j |�dkr^td��| j j |�}| j|| jjk� | jj |�j d�}|S )Nz;ECDSA keys with unnamed curves are unsupported at this timer �ascii) �_lib�EC_KEY_get0_group�openssl_assert�_ffi�NULL�EC_GROUP_get_curve_nameZ NID_undef�NotImplementedErrorZ$CRYPTOGRAPHY_OPENSSL_102U_OR_GREATERZEC_GROUP_get_asn1_flagZ OBJ_nid2sn�string�decode)�backendZec_key�groupZnidZ curve_name�snr r r �_ec_key_curve_sn" s r# c C s | j j|| j j� dS )z� Set the named curve flag on the EC_KEY. This causes OpenSSL to serialize EC keys along with their curve OID which makes deserialization easier. N)r ZEC_KEY_set_asn1_flagZOPENSSL_EC_NAMED_CURVE)r Zec_cdatar r r �_mark_asn1_named_ec_curve@ s r$ c C s8 y t j| � S tk r2 tdj|�tj��Y nX d S )Nz${} is not a supported elliptic curve)r Z _CURVE_TYPES�KeyErrorr �formatr ZUNSUPPORTED_ELLIPTIC_CURVE)r r" r r r �_sn_to_elliptic_curveL s r' c C sz | j j|j�}| j|dk� | jjd|�}| jjdd�}| j jd|t|�|||j�}| j|dk� | jj|�d |d � S )Nr zunsigned char[]zunsigned int[]� ) r Z ECDSA_size�_ec_keyr r �newZ ECDSA_sign�len�buffer)r � private_key�dataZmax_sizeZsigbufZ siglen_ptr�resr r r �_ecdsa_sig_signV s r0 c C s8 | j jd|t|�|t|�|j�}|dkr4| j� t�d S )Nr r( )r Z ECDSA_verifyr+ r) Z_consume_errorsr )r � public_key� signaturer. r/ r r r �_ecdsa_sig_verifyc s r3 c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_ECDSASignatureContextc C s || _ || _tj||�| _d S )N)�_backend� _private_keyr �Hash�_digest)�selfr r- � algorithmr r r �__init__n s z _ECDSASignatureContext.__init__c C s | j j|� d S )N)r8 �update)r9 r. r r r r< s s z _ECDSASignatureContext.updatec C s | j j� }t| j| j|�S )N)r8 �finalizer0 r5 r6 )r9 �digestr r r r= v s z _ECDSASignatureContext.finalizeN)�__name__� __module__� __qualname__r; r< r= r r r r r4 l s r4 c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_ECDSAVerificationContextc C s$ || _ || _|| _tj||�| _d S )N)r5 � _public_key� _signaturer r7 r8 )r9 r r1 r2 r: r r r r; ~ s z"_ECDSAVerificationContext.__init__c C s | j j|� d S )N)r8 r< )r9 r. r r r r< � s z _ECDSAVerificationContext.updatec C s" | j j� }t| j| j| j|� d S )N)r8 r= r3 r5 rC rD )r9 r> r r r �verify� s z _ECDSAVerificationContext.verifyN)r? r@ rA r; r< rE r r r r rB | s rB c @ sZ e Zd Zdd� Zejd�Zedd� �Zdd� Z dd � Z d d � Z d d � Z dd� Z dd� ZdS )�_EllipticCurvePrivateKeyc C s6 || _ || _|| _t||�}t||�| _t||� d S )N)r5 r) � _evp_pkeyr# r' �_curver$ )r9 r � ec_key_cdata�evp_pkeyr" r r r r; � s z!_EllipticCurvePrivateKey.__init__rH c C s | j jS )N)�curve�key_size)r9 r r r rL � s z!_EllipticCurvePrivateKey.key_sizec C s( t � t|� t|j� t| j| |j�S )N)r r r r: r4 r5 )r9 r r r r �signer� s z _EllipticCurvePrivateKey.signerc C s� | j j|| j�s tdtj��|jj| jjkr4td��| j jj | j �}| j jj |�d d }| j j |dk� | j j jd|�}| j jj|j �}| j jj|||| j | j j j�}| j j |dk� | j j j|�d |� S )Nz1This backend does not support the ECDH algorithm.z2peer_public_key and self are not on the same curve� � r z uint8_t[])r5 Z+elliptic_curve_exchange_algorithm_supportedrK r r Z UNSUPPORTED_EXCHANGE_ALGORITHM�name� ValueErrorr r r) ZEC_GROUP_get_degreer r r* �EC_KEY_get0_public_keyZECDH_compute_keyr r, )r9 r: Zpeer_public_keyr! Zz_lenZz_bufZpeer_key�rr r r �exchange� s$ z!_EllipticCurvePrivateKey.exchangec C s� | j jj| j�}| j j|| j jjk� | j jj|�}| j j|�}| j jj | j�}| j j|| j jjk� | j jj ||�}| j j|dk� | j j |�}t | j ||�S )Nr( ) r5 r r r) r r r r Z_ec_key_new_by_curve_nidrR ZEC_KEY_set_public_keyZ_ec_cdata_to_evp_pkey�_EllipticCurvePublicKey)r9 r! Z curve_nidZ public_ec_key�pointr/ rJ r r r r1 � s z#_EllipticCurvePrivateKey.public_keyc C s2 | j jj| j�}| j j|�}tj|| j� j� d�S )N)� private_value�public_numbers) r5 r ZEC_KEY_get0_private_keyr) � _bn_to_intr ZEllipticCurvePrivateNumbersr1 rX )r9 ZbnrW r r r �private_numbers� s z(_EllipticCurvePrivateKey.private_numbersc C s | j j|||| | j| j�S )N)r5 Z_private_key_bytesrG r) )r9 �encodingr& Zencryption_algorithmr r r � private_bytes� s z&_EllipticCurvePrivateKey.private_bytesc C s* t |� t| j||j�\}}t| j| |�S )N)r r r5 � _algorithmr0 )r9 r. r r: r r r �sign� s z _EllipticCurvePrivateKey.signN)r? r@ rA r; r �read_only_propertyrK �propertyrL rM rT r1 rZ r\ r^ r r r r rF � s rF c @ sR e Zd Zdd� Zejd�Zedd� �Zdd� Z dd � Z d d � Z d d � Z dd� Z dS )rU c C s6 || _ || _|| _t||�}t||�| _t||� d S )N)r5 r) rG r# r' rH r$ )r9 r rI rJ r" r r r r; � s z _EllipticCurvePublicKey.__init__rH c C s | j jS )N)rK rL )r9 r r r rL � s z _EllipticCurvePublicKey.key_sizec C s6 t � tjd|� t|� t|j� t| j| ||j�S )Nr2 )r r � _check_bytesr r r: rB r5 )r9 r2 r r r r �verifier s z _EllipticCurvePublicKey.verifierc C s� | j j| j�\}}| j jj| j�}| j j|| j jjk� | j j� �Z}| j jj |�}| j jj |�}||||||�}| j j|dk� | j j |�}| j j |�} W d Q R X t j || | j d�S )Nr( )�x�yrK )r5 Z _ec_key_determine_group_get_funcr) r rR r r r � _tmp_bn_ctxZ BN_CTX_getrY r ZEllipticCurvePublicNumbersrH ) r9 Zget_funcr! rV �bn_ctxZbn_xZbn_yr/ rc rd r r r rX s z&_EllipticCurvePublicKey.public_numbersc C s |t jjkr| jjj}n|t jjks(t�| jjj}| jjj | j �}| jj || jj j k� | jjj| j �}| jj || jj j k� | jj� �l}| jjj|||| jj j d|�}| jj |dk� | jj jd|�}| jjj||||||�}| jj ||k� W d Q R X | jj j|�d d � S )Nr zchar[])r � PublicFormat�CompressedPointr5 r ZPOINT_CONVERSION_COMPRESSED�UncompressedPoint�AssertionErrorZ POINT_CONVERSION_UNCOMPRESSEDr r) r r r rR re ZEC_POINT_point2octr* r, ) r9 r& Z conversionr! rV rf ZbuflenZbufr/ r r r � _encode_point s" z%_EllipticCurvePublicKey._encode_pointc C sp |t jjks$|t jjks$|t jjkrV|t jjk sD|t jjt jjfkrLtd��| j|�S | jj ||| | j d �S d S )NzKX962 encoding must be used with CompressedPoint or UncompressedPoint format) r ZEncodingZX962rg rh ri rQ rk r5 Z_public_key_bytesrG )r9 r[ r& r r r � public_bytes6 s z$_EllipticCurvePublicKey.public_bytesc C s0 t |� t| j||j�\}}t| j| ||� d S )N)r r r5 r] r3 )r9 r2 r. r r: r r r rE L s z _EllipticCurvePublicKey.verifyN)r? r@ rA r; r r_ rK r` rL rb rX rk rl rE r r r r rU � s rU N)#Z __future__r r r Z cryptographyr Zcryptography.exceptionsr r r Z*cryptography.hazmat.backends.openssl.utilsr r r Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r r r r# r$ r' r0 r3 Zregister_interface�objectr4 rB Z(EllipticCurvePrivateKeyWithSerializationrF Z'EllipticCurvePublicKeyWithSerializationrU r r r r �<module> s& a