← Back
Editing: keys.cpython-38.pyc
U �`�[ � � @ s� d Z ddlmZmZ ddlZddlZddlmZmZ ddl Z ddl m Z ddl m Z ddlmZmZ ddlmZmZmZmZ dd lmZmZ dd lmZ zdd lm Z m Z W n$ e k r� dd lm Z m Z Y nX dd l!m"Z"m#Z#m$Z$ ddl%m&Z& ddl'm(Z( ddl)m*Z+ ddl)m,Z- ddl.m/Z/m0Z0 ddl1m2Z2m3Z3 ddl4m5Z5 ddl6m7Z7m8Z8m9Z9m:Z:m;Z;m<Z<m=Z>m?Z@ ddlAmBZBmCZC e�D� e�E� e�F� d�ZGdddd�ZHG d d � d eI�ZJG d d � d eI�ZKG d d!� d!eI�ZLG d"d#� d#eC�ZMG d$d%� d%eN�ZOd)d'd(�ZPdS )*z$ Handling of RSA, DSA, and EC keys. � )�absolute_import�divisionN)�md5�sha256)�InvalidSignature)�default_backend)�hashes� serialization)�dsa�rsa�padding�ec)�load_pem_private_key�load_ssh_public_key)�utils)�encode_dss_signature�decode_dss_signature)�encode_rfc6979_signature�decode_rfc6979_signature)�Cipher� algorithms�modes)� PyAsn1Error)�univ)�decoder)�encoder)�common�sexpy)�int_from_bytes� int_to_bytes)� randbytes)� iterbytes�long�izip� nativeString�unicode�_PY3�_b64decodebytes�_b64encodebytes)� NamedConstant�Names)s ecdsa-sha2-nistp256s ecdsa-sha2-nistp384s ecdsa-sha2-nistp521s nistp256s nistp384s nistp521)s secp256r1s secp384r1s secp521r1c @ s e Zd ZdZdS )� BadKeyErrorzj Raised when a key isn't what we expected from it. XXX: we really need to check for bad keys N��__name__� __module__� __qualname__�__doc__� r1 r1 �8/usr/lib/python3/dist-packages/twisted/conch/ssh/keys.pyr+ A s r+ c @ s e Zd ZdZdS )�EncryptedKeyErrorzb Raised when an encrypted key is presented to fromString/fromFile without a password. Nr, r1 r1 r1 r2 r3 J s r3 c @ s e Zd ZdZdS )�BadFingerPrintFormatzS Raises when unsupported fingerprint formats are presented to fingerprint. Nr, r1 r1 r1 r2 r4 R s r4 c @ s e Zd ZdZe� Ze� ZdS )�FingerprintFormatsa� Constants representing the supported formats of key fingerprints. @cvar MD5_HEX: Named constant representing fingerprint format generated using md5[RFC1321] algorithm in hexadecimal encoding. @type MD5_HEX: L{twisted.python.constants.NamedConstant} @cvar SHA256_BASE64: Named constant representing fingerprint format generated using sha256[RFC4634] algorithm in base64 encoding @type SHA256_BASE64: L{twisted.python.constants.NamedConstant} N)r- r. r/ r0 r) �MD5_HEX� SHA256_BASE64r1 r1 r1 r2 r5 Y s r5 c @ sV e Zd ZdZedCdd��ZedDdd��Zedd� �Zed d � �Zed d � �Z ed d� �Z edd� �Z edd� �Z edd� �Z edd� �ZedEdd��ZedFdd��ZedGdd ��Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zejfd)d*�Zd+d,� Zd-d.� Z d/d0� Z d1d2� Z d3d4� Z d5d6� Z dHd7d8�Z!d9d:� Z"d;d<� Z#d=d>� Z$d?d@� Z%dAdB� Z&dS )I�Keyau An object representing a key. A key can be either a public or private key. A public key can verify a signature; a private key can create or verify a signature. To generate a string that can be stored on disk, use the toString method. If you have a private key, but want the string representation of the public key, use Key.public().toString(). Nc C s4 t |d�� }| �|�� ||�W 5 Q R � S Q R X dS )a� Load a key from a file. @param filename: The path to load key data from. @type type: L{str} or L{None} @param type: A string describing the format the key data is in, or L{None} to attempt detection of the type. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if there is no encryption. @rtype: L{Key} @return: The loaded key. �rbN)�open� fromString�read)�cls�filename�type� passphrase�fr1 r1 r2 �fromFiles s z Key.fromFilec C s� t |t�r|�d�}t |t�r(|�d�}|dkr:| �|�}|dkrPtd|f ��t| d|�� f d�}|dkr|td|f ��|jjdkr�|r�td��||�S |||�S dS )a Return a Key object corresponding to the string data. type is optionally the type of string, matching a _fromString_* method. Otherwise, the _guessStringType() classmethod will be used to guess a type. If the key is encrypted, passphrase is used as the decryption key. @type data: L{bytes} @param data: The key data. @type type: L{str} or L{None} @param type: A string describing the format the key data is in, or L{None} to attempt detection of the type. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if there is no encryption. @rtype: L{Key} @return: The loaded key. �utf-8Nzcannot guess the type of %rz_fromString_%sz no _fromString method for %s� zkey not encrypted) � isinstancer% �encode�_guessStringTyper+ �getattr�upper�__code__� co_argcount)r= �datar? r@ �methodr1 r1 r2 r; � s zKey.fromStringc C s� t �|�\}}|dkr@t �|d�\}}}| t�||��t� ��S |dkr�t �|d�\}}}} }| tj| tj |||d�d��t� ��S |t kr�| t j � t | t �|d�d ��t� ��S td|f ��d S ) a Return a public key object corresponding to this public key blob. The format of a RSA public key blob is:: string 'ssh-rsa' integer e integer n The format of a DSA public key blob is:: string 'ssh-dss' integer p integer q integer g integer y The format of ECDSA-SHA2-* public key blob is:: string 'ecdsa-sha2-[identifier]' integer x integer y identifier is the standard NIST curve name. @type blob: L{bytes} @param blob: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type (the first string) is unknown. � ssh-rsarD � ssh-dss� ��p�q�g��y�parameter_numbers� �unknown blob type: %sN)r �getNS�getMPr �RSAPublicNumbers� public_keyr r �DSAPublicNumbers�DSAParameterNumbers� _curveTabler �EllipticCurvePublicNumbersZfrom_encoded_pointr+ ) r= �blob�keyType�rest�e�nrR rS rT rV r1 r1 r2 �_fromString_BLOB� s< ����� ���zKey._fromString_BLOBc C s� t �|�\}}|dkrDt �|d�\}}}}}} }| j||||| d�S |dkrxt �|d�\}} } } } }| j| | || | d�S |dd� tt�� �D �kr�t �|d �\} } } }| j| | || d �S t d |f ��d S ) aq Return a private key object corresponding to this private key blob. The blob formats are as follows: RSA keys:: string 'ssh-rsa' integer n integer e integer d integer u integer p integer q DSA keys:: string 'ssh-dss' integer p integer q integer g integer y integer x EC keys:: string 'ecdsa-sha2-[identifier]' integer x integer y integer privateValue identifier is the standard NIST curve name. @type blob: L{bytes} @param blob: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type (the first string) is unknown. rN � �rf re �drR rS rO � �rV rT rR rS �xc S s g | ]}|�qS r1 r1 )�.0�curver1 r1 r2 � <listcomp> s z0Key._fromString_PRIVATE_BLOB.<locals>.<listcomp>� )rm rV ro � privateValuerY N) r rZ r[ �_fromRSAComponents�_fromDSAComponents�listr` �keys�_fromECComponentsr+ )r= rb rc rd rf re rj �urR rS rT rV rm rr r1 r1 r2 �_fromString_PRIVATE_BLOB� s ' �z Key._fromString_PRIVATE_BLOBc C s4 |� d�r| t|t� ��S t|�� d �}| �|�S )a� Return a public key object corresponding to this OpenSSH public key string. The format of an OpenSSH public key string is:: <key type> <base64-encoded public key blob> @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the blob type is unknown. s ecdsa-sha2rX )� startswithr r � decodebytes�splitrg )r= rL rb r1 r1 r2 �_fromString_PUBLIC_OPENSSH% s z Key._fromString_PUBLIC_OPENSSHc sZ |� � �� }|d dd� }|d �d��r�|s8td��z,|d �dd�\}}|�� �d d�\}� W n& tk r� td |d f ��Y nX |d kr�tj }t t |�d �d �d �} t � �dkr�td��n6|dkr�tj }d} t � �dkr�td��ntd|f ��t t� fdd�tdt � �d�D ���} t|| dd � ��� } t| | | dd � ��� } | | d| � } td�|dd� ��}t|| �t�| �t� d��� }|�|�|�� }t|dd� �}|d| � }nd�|dd� �}t|�}zt � |�d }W n2 t k �r. } ztd |f ��W 5 d}~X Y nX |d k�rL| t ||t� ��S |d k�r�t |�dk�rl|d }t |�d k �r�td ��d!d� |dd"� D �\}}}}}}}}| t j!||||||t j"||d#�d$��#t� ��S |d%k�rHd&d� |dd � D �\}}}} } t |�d k �rtd'��| t$j%| t$j&| t$j'|||d(�d)�d*�j#t� d��S td+|f ��dS ),a Return a private key object corresponding to this OpenSSH private key string. If the key is encrypted, passphrase MUST be provided. Providing a passphrase for an unencrypted key is an error. The format of an OpenSSH private key string is:: -----BEGIN <key type> PRIVATE KEY----- [Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,<initialization value>] <base64-encoded ASN.1 structure> ------END <key type> PRIVATE KEY------ The ASN.1 structure of a RSA key is:: (0, n, e, d, p, q) The ASN.1 structure of a DSA key is:: (0, p, q, g, y, x) The ASN.1 structure of a ECDSA key is:: (ECParameters, OID, NULL) @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the ASN.1 encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key r � i��rX � Proc-Type: 4,ENCRYPTEDz0Passphrase must be provided for an encrypted keyrD � � ,zinvalid DEK-info %r)s AES-128-CBCs AES-256-CBC� -� � z AES encrypted key with a bad IVs DES-EDE3-CBC� � z DES encrypted key with a bad IVzunknown encryption type %rc s" g | ]}t � ||d � d��qS )rD r� )�int�rn �i�Zivdatar1 r2 rp | s �z3Key._fromString_PRIVATE_OPENSSH.<locals>.<listcomp>N� rq �����backendz*Failed to decode key (Bad Passphrase?): %ss ECs RSArh z!RSA key failed to decode properlyc S s g | ] }t |��qS r1 �r" �rn �valuer1 r1 r2 rp � s � �re rf �rR rS rj �dmp1�dmq1�iqmp�public_numberss DSAc S s g | ] }t |��qS r1 r� r� r1 r1 r2 rp � s z!DSA key failed to decode properlyrQ rU �rm r� �unknown key type %s)(�strip� splitlinesrz r3 r| �rstrip� ValueErrorr+ r ZAESr� �len� TripleDES�bytes� bytearray�ranger �digestr{ �joinr r �CBCr � decryptor�update�finalize�ord� berDecoder�decoder r r �RSAPrivateNumbersr\ � private_keyr �DSAPrivateNumbersr^ r_ ) r= rL r@ �linesZkind�_Z cipherIVInfoZcipherZalgorithmClass�keySize�iv�ba�bbZdecKey�b64Datar� �keyDataZ removeLenZ decodedKeyre rf rj rR rS r� r� r� rT rV rm r1 r� r2 �_fromString_PRIVATE_OPENSSH: s� & � � � � � ��� ��� ��z Key._fromString_PRIVATE_OPENSSHc C s� t �t|dd� ��}|d dks&t�i }|d dd� D ] \}}t�t�|��d ||< q:|d d dkr�| j|d |d |d |d d �S |d d d kr�| j|d |d d�S t d|d d f ��dS )a Return a public key corresponding to this LSH public key string. The LSH public key string format is:: <s-expression: ('public-key', (<key type>, (<name, <value>)+))> The names for a RSA (key type 'rsa-pkcs1-sha1') key are: n, e. The names for a DSA (key type 'dsa') key are: y, g, p, q. @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type is unknown rX r� r � public-keyN� dsa� y� g� p� q�rV rT rR rS � rsa-pkcs1-sha1� n� e�rf re �unknown lsh key type %s) r �parser{ �AssertionErrorr r[ �NSrt rs r+ �r= rL ZsexpZkd�namer1 r1 r2 �_fromString_PUBLIC_LSH� s �zKey._fromString_PUBLIC_LSHc C s6 t �|�}|d dkst�i }|d dd� D ] \}}t�t�|��d ||< q.|d d dkr�t|�dksxtt|���| j|d |d |d |d |d d �S |d d d k�r t|�dks�tt|���|d |d kr�|d |d |d < |d < | j|d |d |d |d |d d�S t d|d d f ��dS )a+ Return a private key corresponding to this LSH private key string. The LSH private key string format is:: <s-expression: ('private-key', (<key type>, (<name>, <value>)+))> The names for a RSA (key type 'rsa-pkcs1-sha1') key are: n, e, d, p, q. The names for a DSA (key type 'dsa') key are: y, g, p, q, x. @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type is unknown r � private-keyrX Nr� rk r� r� r� r� � xrl � rsa-pkcs1r� r� r� � dri r� ) r r� r� r r[ r� r� rt rs r+ r� r1 r1 r2 �_fromString_PRIVATE_LSH� s4 � �zKey._fromString_PRIVATE_LSHc C s� t �|�\}}|dkrpt �|�\}}t �|�\}}t �|�\}}t �|�\}}t �|�\}}| j|||||d�S |dkr�t �|�\}}t �|�\} }t �|�\} }t �|�\} }t �|�\}}t �|�\}}| j| || ||| d�S td|f ��dS )a� Return a private key object corresponsing to the Secure Shell Key Agent v3 format. The SSH Key Agent v3 format for a RSA key is:: string 'ssh-rsa' integer e integer d integer n integer u integer p integer q The SSH Key Agent v3 format for a DSA key is:: string 'ssh-dss' integer p integer q integer g integer y integer x @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type (the first string) is unknown rO rl rN �rf re rj rR rS rx r� N)r rZ r[ rt rs r+ ) r= rL rc rR rS rT rV rm re rj rf rx r1 r1 r2 �_fromString_AGENTV3 s" zKey._fromString_AGENTV3c C s� |� d�s|� d�rdS |� d�r&dS |� d�r4dS |� d�rBd S |� d �sV|� d �r�t�|�\}}d }|r�|d 7 }t�|�\}}qh|dkr�dS dS dS )z� Guess the type of key in data. The types map to _fromString_* methods. @type data: L{bytes} @param data: The key data. s ssh-� ecdsa-sha2-Zpublic_opensshs -----BEGINZprivate_openssh� {Z public_lsh� (Z private_lshs ssh-s ecdsa-r rX rP Zagentv3rb N)rz r rZ r[ )r= rL Zignoredrd �countr1 r1 r2 rG 6 s" zKey._guessStringTypec C sh t j||d�}|dkr$|�t� �}n<t j|||t �||�t �||�t �||�|d�} | �t� �}| |�S )a� Build a key from RSA numerical components. @type n: L{int} @param n: The 'n' RSA variable. @type e: L{int} @param e: The 'e' RSA variable. @type d: L{int} or L{None} @param d: The 'd' RSA variable (optional for a public key). @type p: L{int} or L{None} @param p: The 'p' RSA variable (optional for a public key). @type q: L{int} or L{None} @param q: The 'q' RSA variable (optional for a public key). @type u: L{int} or L{None} @param u: The 'u' RSA variable. Ignored, as its value is determined by p and q. @rtype: L{Key} @return: An RSA key constructed from the values as given. r� Nr� ) r r\ r] r r� Z rsa_crt_dmp1Z rsa_crt_dmq1� rsa_crt_iqmpr� ) r= rf re rj rR rS rx � publicNumbers� keyObject�privateNumbersr1 r1 r2 rs R s � zKey._fromRSAComponentsc C sR t j|t j|||d�d�}|dkr0|�t� �}nt j||d�}|�t� �}| |�S )a Build a key from DSA numerical components. @type y: L{int} @param y: The 'y' DSA variable. @type p: L{int} @param p: The 'p' DSA variable. @type q: L{int} @param q: The 'q' DSA variable. @type g: L{int} @param g: The 'g' DSA variable. @type x: L{int} or L{None} @param x: The 'x' DSA variable (optional for a public key) @rtype: L{Key} @return: A DSA key constructed from the values as given. rQ rU Nr� )r r^ r_ r] r r� r� ) r= rV rR rS rT rm r� r� r� r1 r1 r2 rt s � � zKey._fromDSAComponentsc C sL t j||t| d�}|dkr*|�t� �}nt j||d�}|�t� �}| |�S )a� Build a key from EC components. @param x: The affine x component of the public point used for verifying. @type x: L{int} @param y: The affine y component of the public point used for verifying. @type y: L{int} @param curve: NIST name of elliptic curve. @type curve: L{bytes} @param privateValue: The private value. @type privateValue: L{int} �rm rV ro N)� private_valuer� )r ra r` r] r ZEllipticCurvePrivateNumbersr� )r= rm rV ro rr r� r� r� r1 r1 r2 rw � s � � zKey._fromECComponentsc C s || _ dS )z� Initialize with a private or public C{cryptography.hazmat.primitives.asymmetric} key. @param keyObject: Low level key. @type keyObject: C{cryptography.hazmat.primitives.asymmetric} key. N)� _keyObject)�selfr� r1 r1 r2 �__init__� s z Key.__init__c C s8 t | �t |�kr0| � � |� � ko.| �� |�� kS tS dS )zN Return True if other represents an object with the same key. N)r? rL �NotImplemented)r� �otherr1 r1 r2 �__eq__� s z Key.__eq__c C s | � |�}|tkr|S | S )zO Return True if other represents anything other than this key. )r� r� )r� r� �resultr1 r1 r2 �__ne__� s z Key.__ne__c C s� | � � dkr�| �� }|d �d�}| �� r>d|dd� f }nd|dd� f }t|�� �D ]4\}}tr�|dkr�|d|f 7 }q\|d ||f 7 }q\|d S d t| � � �| �� r�d p�d | jj f g}t| �� �� �D ]�\}}|� d|f � t � |�dd� }|r�|dd� }|dd� }d} t |�D ]} | dt| �f } �q$t|�dk �rX| dd� } |� d| � q�q�|d d |d< d�|�S dS )z@ Return a pretty representation of this object. �ECro rC z$<Elliptic Curve Public Key (%s bits)���Nz%<Elliptic Curve Private Key (%s bits)z curve: %sz %s: %sz> z<%s %s (%s bits)z Public Keyz Private Keyzattr %s:rP � � z%02x:r� � �>� )r? rL r� �isPublic�sorted�itemsr& r$ r� �key_size�appendr �MPr! r� r� r� ) r� rL r� �out�k�vr� Zby�m�o�cr1 r1 r2 �__repr__� s> �� z Key.__repr__c C s t | jtjtjtjf�S )zl Check if this instance is a public key. @return: C{True} if this is a public key. )rE r� r � RSAPublicKeyr � DSAPublicKeyr �EllipticCurvePublicKey�r� r1 r1 r2 r� s �z Key.isPublicc C s | � � r | S t| j�� �S dS )z� Returns a version of this key containing only the public key data. If this is a public key, this may or may not be the same object as self. @rtype: L{Key} @return: A public key. N)r� r8 r� r] r� r1 r1 r2 �public s z Key.publicc C sh |t jkr$tt�t| �� ��� ��S |t jkrVtd� dd� t t | �� ��� �D ���S t d|f ��dS )aO The fingerprint of a public key consists of the output of the message-digest algorithm in the specified format. Supported formats include L{FingerprintFormats.MD5_HEX} and L{FingerprintFormats.SHA256_BASE64} The input to the algorithm is the public key data as specified by [RFC4253]. The output of sha256[RFC4634] algorithm is presented to the user in the form of base64 encoded sha256 hashes. Example: C{US5jTUa0kgX5ZxdqaGF0yGRu8EgKXHNmoT8jHKo1StM=} The output of the MD5[RFC1321](default) algorithm is presented to the user as a sequence of 16 octets printed as hexadecimal with lowercase letters and separated by colons. Example: C{c1:b1:30:29:d7:b8:de:6c:97:77:10:d7:46:41:63:87} @param format: Format for fingerprint generation. Consists hash function and representation format. Default is L{FingerprintFormats.MD5_HEX} @since: 8.2 @return: the user presentation of this L{Key}'s fingerprint, as a string. @rtype: L{str} � :c S s g | ]}t �|��qS r1 )�binasciiZhexlify�rn rm r1 r1 r2 rp ? s �z#Key.fingerprint.<locals>.<listcomp>z"Unsupported fingerprint format: %sN) r5 r7 r$ �base64Z b64encoder rb r� r6 r� r! r r4 )r� �formatr1 r1 r2 � fingerprint s � ���zKey.fingerprintc C s\ t | jtjtjf�rdS t | jtjtjf�r0dS t | jtj tj f�rHdS t d| jf ��dS )z� Return the type of the object we wrap. Currently this can only be 'RSA', 'DSA', or 'EC'. @rtype: L{str} @raises RuntimeError: If the object type is unknown. �RSA�DSAr� zunknown type of object: %rN) rE r� r r� � RSAPrivateKeyr r� � DSAPrivateKeyr r� �EllipticCurvePrivateKey� RuntimeErrorr� r1 r1 r2 r? E s$ � � � �zKey.typec C s: | � � dkr$dt| jjj�d� S ddd�| � � S dS )aK Get the type of the object we wrap as defined in the SSH protocol, defined in RFC 4253, Section 6.6. Currently this can only be b'ssh-rsa', b'ssh-dss' or b'ecdsa-sha2-[identifier]'. identifier is the standard NIST curve name @return: The key type format. @rtype: L{bytes} r� r� �asciirN rO )r r N)r? � _secToNistr� ro r� rF r� r1 r1 r2 �sshTypeZ s z Key.sshTypec C s, | j dkrdS | �� dkr$| j jjS | j jS )zv Return the size of the object we wrap. @return: The size of the key. @rtype: L{int} Nr r� )r� r? ro r� r� r1 r1 r2 �sizej s zKey.sizec C sV t | jtj�r&| j�� }|j|jd�S t | jtj�rj| j�� }|jj|jj|j |j |j t� |j |j �d�S t | jt j�r�| j�� }|j|jj|jj |jj d�S t | jt j�r�| j�� }|j|jj|jjj|jjj |jjj d�S t | jtj��r | j�� }|j|j| �� d�S t | jtj��rB| j�� }|jj|jj|j| �� d�S td| jf ��dS ) z_ Return the values of the public key as a dictionary. @rtype: L{dict} r� r� r� )rm rV rT rR rS r� )rm rV rr ro zUnexpected key type: %sN)rE r� r r� r� rf re r Zprivate_numbersrj rR rS r� r r� rV rW rT r rm r r� r r r� r )r� Znumbersr1 r1 r2 rL w sV � � � � � �zKey.datac C s� | � � }| �� }|dkr>t�d�t�|d � t�|d � S |dkr�t�d�t�|d � t�|d � t�|d � t�|d � S | jjjd d }t�|d �t�|d dd� � t�dt� |d |� t� |d |� � S dS )aG Return the public key blob for this key. The blob is the over-the-wire format for public keys. SECSH-TRANS RFC 4253 Section 6.6. RSA keys:: string 'ssh-rsa' integer e integer n DSA keys:: string 'ssh-dss' integer p integer q integer g integer y EC keys:: string 'ecdsa-sha2-[identifier]' integer x integer y identifier is the standard NIST curve name @rtype: L{bytes} r rN re rf r rO rR rS rT rV � r� ro i����N� rm ) r? rL r r� r� r� ro r� r r )r� r? rL Z byteLengthr1 r1 r2 rb � s( � � � �"��zKey.blobc C s | � � }| �� }|dkrvt�d�t�|d � t�|d � t�|d � t�|d � t�|d � t�|d � S |d kr�t�d �t�|d � t�|d � t�|d � t�|d � t�|d � S t�|d �t�|d � t�|d � t�|d � S dS )a� Return the private key blob for this key. The blob is the over-the-wire format for private keys: Specification in OpenSSH PROTOCOL.agent RSA keys:: string 'ssh-rsa' integer n integer e integer d integer u integer p integer q DSA keys:: string 'ssh-dss' integer p integer q integer g integer y integer x EC keys:: string 'ecdsa-sha2-[identifier]' integer x integer y integer privateValue identifier is the NIST standard curve name. r rN rf re rj rx rR rS r rO rT rV rm ro rr N)r? rL r r� r� )r� r? rL r1 r1 r2 � privateBlob� s: � � � � � � � � � � �zKey.privateBlobc C s^ t |t�r|�d�}t| d|�� f d�}|dkr@td|f ��|jjdkrT||�S |� S dS )a� Create a string representation of this key. If the key is a private key and you want the representation of its public key, use C{key.public().toString()}. type maps to a _toString_* method. @param type: The type of string to emit. Currently supported values are C{'OPENSSH'}, C{'LSH'}, and C{'AGENTV3'}. @type type: L{str} @param extra: Any extra data supported by the selected format which is not part of the key itself. For public OpenSSH keys, this is a comment. For private OpenSSH keys, this is a passphrase to encrypt with. @type extra: L{bytes} or L{unicode} or L{None} @rtype: L{bytes} rC z _toString_%sNzunknown key type: %srD )rE r% rF rH rI r+ rJ rK )r� r? �extrarM r1 r1 r2 �toString s z Key.toStringc s� | � � }| �� r~| �� dkrF|s$d}| j�tjjtjj�d | � � S t | � � �� dd�� |sbd}| � � d � d | � � S | �� dkr�|s�t�� }n t�|�}| j�tjjtjj|�S d�d| �� �d�df�g}| �� dk�r6|d |d }}d |d |d |d |||d |d |d |d |d f }n$d |d |d |d |d |d f}t�� }tt�� |�D ] \} } |�| t� | �� �qpt �|�} |�rrt � d�} d�dd� t | �D ��} | �d�} |�!d� |�!d| d � t"|| ��#� }t"|| | ��#� }|| dd� }dt$| �d }| t%|�| �d�7 } t&t'�(|�t)�*| �t+� d ��,� }|�-| �|�.� } t | �� dd�� |� fd d�t/d t$� �d �D �7 }|�!d�d | �� �d�df�� d�|�S dS ) a� Return a public or private OpenSSH string. See _fromString_PUBLIC_OPENSSH and _fromString_PRIVATE_OPENSSH for the string formats. If extra is present, it represents a comment for a public key, or a passphrase for a private key. @param extra: Comment for a public key or passphrase for a private key @type extra: L{bytes} @rtype: L{bytes} r� r� r� � s -----BEGIN r s PRIVATE KEY-----r rR rS r rf re rj rX rx rT rV rm r� r� c S s g | ]}d t |�f �qS )z%02X)r� r� r1 r1 r2 rp c s z)Key._toString_OPENSSH.<locals>.<listcomp>r s DEK-Info: DES-EDE3-CBC,Nr� r� c s g | ]}� ||d � �qS )�@ r1 r� �r� r1 r2 rp v s r s -----END )0rL r� r? r� Z public_bytesr �EncodingZOpenSSHZ PublicFormatr� � encodebytesrb �replacer � NoEncryptionZBestAvailableEncryption� private_bytes�PEM� PrivateFormat�TraditionalOpenSSLr� rF r �Sequencer# � itertoolsr� ZsetComponentByPositionZInteger� berEncoderr Z secureRandomr! r� r r� r� �chrr r r� r r� r � encryptorr� r� r� )r� r rL r! r� rR rS ZobjDataZ asn1Sequence�indexr� Zasn1Datar� Zhexivr� r� ZencKeyZpadLenr1 r r2 �_toString_OPENSSH) s� ��� �� �� � "�zKey._toString_OPENSSHc C s� | � � }| �� }| �� �r|dkrft�dddt�|d �dd� gdt�|d �dd� gggg�}n�|d kr�t�dd d t�|d �dd� gdt�|d �dd� gdt�|d �dd� gdt�|d �dd� gggg�}ntd|f ��dt|�� dd� d S |dk�r�|d |d }}t�dddt�|d �dd� gdt�|d �dd� gdt�|d �dd� gd t�|�dd� gdt�|�dd� gd t�|d |d �dd� gd t�|d |d �dd� gd t�|d! �dd� gg gg�S |d k�r�t�dd d t�|d �dd� gdt�|d �dd� gdt�|d �dd� gdt�|d �dd� gd"t�|d# �dd� gggg�S td$|f ��dS )%z� Return a public or private LSH key. See _fromString_PUBLIC_LSH and _fromString_PRIVATE_LSH for the key formats. @rtype: L{bytes} r r� r� r� rf rP Nr� re r r� r� rR r� rS r� rT r� rV r� r� r r� � }r� r� r� rj � arX � b� crx r� rm zunknown key type %s') rL r? r� r Zpackr r� r+ r r )r� rL r? r� rR rS r1 r1 r2 � _toString_LSH{ sp �� �� � ������ ��zKey._toString_LSHc C s� | � � }| �� s�| �� dkrF|d |d |d |d |d |d f}n.| �� dkrt|d |d |d |d |d f}t�| �� �d �ttj|�� S d S )z� Return a private Secure Shell Agent v3 key. See _fromString_AGENTV3 for the key format. @rtype: L{bytes} r re rj rf rx rR rS r rT rV rm r� N) rL r� r? r r� r r� �mapr� )r� rL �valuesr1 r1 r2 �_toString_AGENTV3� s � �zKey._toString_AGENTV3c C s� | � � }|dkr6| j�|t�� t�� �}t�|�}�n>|dkrx| j�|t�� �}t |�\}}t�t |d�t |d� �}n�|dk�rt| � � }|dkr�t� � }n|dkr�t� � }nt�� }| j�|t�|��} t | �\}}t |�} t |�} t | d �tk�rt| d �} n| d } | d@ �r d | } t | d �tk�r@t| d �} n| d } | d@ �rZd | } t�t�| �t�| � �}t�| �� �| S ) z� Sign some data with this key. SECSH-TRANS RFC 4253 Section 6.6. @type data: L{bytes} @param data: The data to sign. @rtype: L{bytes} @return: A signature for the given data. r r � r� � � r � � )r? r� �signr �PKCS1v15r �SHA1r r� r r r �SHA256�SHA384�SHA512r �ECDSA�strr� r )r� rL rc ZsigZret�r�sr� �hashSize� signaturer9 ZsbZrcompZscompr1 r1 r2 r1 � s> zKey.signc C s� t |�dkr dt�|� }}nt�|�\}}|| �� kr<dS | �� }|dkr�| j}| �� sb|�� }t�|�d |t � � t � � f}�n|dkr�t�|�d }t |dd� d �}t |dd� d �} t|| �}| j}| �� s�|�� }||t � � f}n�|d k�r�t�|�d }t�|d �\} } } t | d �}t | d �} t|| �}| j}| �� �sN|�� }| �� } | d k�rjt �� }n | d k�r~t �� }nt �� }||t�|�f}z|j|� W n tk �r� Y dS X dS dS )a Verify a signature using this key. @type signature: L{bytes} @param signature: The signature to verify. @type data: L{bytes} @param data: The signed data. @rtype: L{bool} @return: C{True} if the signature is valid. �( rO Fr r r Nr, Zbigr� rD r- r. T)r� r r� rZ r r? r� r� r] r r2 r r3 r r r r4 r5 r6 r r7 �verifyr )r� r< rL Z signatureTyperc r� �argsZconcatenatedSignaturer9 r: ZrstrZsstrrd r� r; r1 r1 r2 r> � sZ � z Key.verify)NN)NN)NNNN)N)N)N)'r- r. r/ r0 � classmethodrB r; rg ry r} r� r� r� r� rG rs rt rw r� r� r� r� r� r� r5 r6 r r? r r rL rb r r r# r( r+ r1 r> r1 r1 r1 r2 r8 j s^ ) : 6 # 0 , " ) ( ;,/ R4?r8 � c C s� | � � jdd� | �� sPtjd|t� d�}|jtjj tj j t� � d�}| � |� | �d��,}tj|�� dt� d�}t|�W 5 Q R � S Q R X dS ) a� This function returns a persistent L{Key}. The key is loaded from a PEM file in C{location}. If it does not exist, a key with the key size of C{keySize} is generated and saved. @param location: Where the key is stored. @type location: L{twisted.python.filepath.FilePath} @param keySize: The size of the key, if it needs to be generated. @type keySize: L{int} @returns: A persistent key. @rtype: L{Key} T)ZignoreExistingDirectoryi )Zpublic_exponentr� r� )�encodingr Zencryption_algorithmr9 N)Zpasswordr� )�parent�makedirs�existsr Zgenerate_private_keyr r r r r r r r Z setContentr: r r< r8 )�locationr� Z privateKeyZpemZkeyFiler1 r1 r2 �_getPersistentRSAKeyF s( �� �rG )rA )Qr0 Z __future__r r r� r Zhashlibr r r Zcryptography.exceptionsr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r r r Z,cryptography.hazmat.primitives.serializationr r Z cryptographyr Z/cryptography.hazmat.primitives.asymmetric.utilsr r � ImportErrorr r Z&cryptography.hazmat.primitives.ciphersr r r Z pyasn1.errorr Z pyasn1.typer Zpyasn1.codec.berr r� r r Ztwisted.conch.sshr r Ztwisted.conch.ssh.commonr r Ztwisted.pythonr Ztwisted.python.compatr! r" r# r$ r% r& r' r{ r( r Ztwisted.python.constantsr) r* Z SECP256R1Z SECP384R1Z SECP521R1r` r � Exceptionr+ r3 r4 r5 �objectr8 rG r1 r1 r1 r2 �<module> s` (�� e
Save File
Cancel