jx|ddlmZmZmZmZddlZddlZddlZddlZddl m Z m Z m Z m Z mZmZmZmZmZmZmZmZmZmZmZddlmZmZmZddlmZmZm Z m!Z!m"Z"ddl#m$Z$ddl%m&Z&dd l'm(Z(m)Z)m*Z*Gd d Z+Gd d Z,GddZ-dZ.dZ/e e!ee"edZ0dZ1dZ2ddZ3ddZ4dZ5dZ6dZ7dZ8dS))unicode_literalsdivisionabsolute_importprint_functionN)CertBag Certificate DSAPrivateKey ECPrivateKey EncryptedDataEncryptedPrivateKeyInfoInteger OctetStringPfxPrivateKeyInfo PublicKeyInfo RSAPrivateKey RSAPublicKey SafeContentsunarmor)pbkdf1pbkdf2 pkcs12_kdf)aes_cbc_pkcs7_decryptdes_cbc_pkcs5_decryptrc2_cbc_pkcs5_decrypt rc4_decrypttripledes_cbc_pkcs5_decrypt)constant_compare)pretty_message)byte_clsstr_cls type_namecteZdZdZdZdZedZedZedZ edZ dS)_PrivateKeyBaseNc |jdkr|jdjS|jdkrb|jdd}td|d|d|d |j|jdjd S|jd krF|jdj}|jdd|d<|j|d <|Sd S)a. Unwraps the private key into an asn1crypto.keys.RSAPrivateKey, asn1crypto.keys.DSAPrivateKey or asn1crypto.keys.ECPrivateKey object :return: An asn1crypto.keys.RSAPrivateKey, asn1crypto.keys.DSAPrivateKey or asn1crypto.keys.ECPrivateKey object rsa private_keydsaprivate_key_algorithm parametersrpqgversionr,r-r. public_keyr(ecr1N) algorithmasn1parsedr r1unwrap)selfparamsoutputs c/var/www/finuniver-perm.ru/html/portfolio/venv/lib/python3.11/site-packages/oscrypto/_asymmetric.pyr6z_PrivateKeyBase.unwrap-s >U " "9]+2 2 >U " "Y67 EF C[C[C["o4466#y7> ""  >T ! !Y}-4F#'9-D#El#SF< #'?#9#9#;#;F< M " !c|jjSzO :return: A unicode string of "rsa", "dsa" or "ec" r4r3r7s r:r3z_PrivateKeyBase.algorithmKy""r;c&|jjdSH :return: A unicode string of EC curve name rr4curver?s r:rEz_PrivateKeyBase.curveTyq!!r;c|jjSzS :return: The number of bits in the key, as an integer r4bit_sizer?s r:rJz_PrivateKeyBase.bit_size]y!!r;c|jjSzT :return: The number of bytes in the key, as an integer r4 byte_sizer?s r:rOz_PrivateKeyBase.byte_sizefr@r;) __name__ __module__ __qualname__r4 _fingerprintr6propertyr3rErJrOr;r:r%r%(s DL<##X#""X"""X"##X###r;r%ceZdZdZdZdZedZedZedZ edZ edZ dS)_PublicKeyBaseNcV|jdkr |jdS|jdjS)a7 Unwraps a public key into an asn1crypto.keys.RSAPublicKey, asn1crypto.core.Integer (for DSA) or asn1crypto.keys.ECPointBitString object :return: An asn1crypto.keys.RSAPublicKey, asn1crypto.core.Integer or asn1crypto.keys.ECPointBitString object r2r1)r3r4r5r?s r:r6z_PublicKeyBase.unwrapus. >T ! !9\* *y&--r;cR|jt|jd|_|jS)aZ Creates a fingerprint that can be compared with a private key to see if the two form a pair. This fingerprint is not compatible with fingerprints generated by any other software. :return: A byte string that is a sha256 hash of selected components (based on the key type) N)rSr4r?s r: fingerprintz_PublicKeyBase.fingerprints*   $ ,TY = =D   r;c|jjSr=r>r?s r:r3z_PublicKeyBase.algorithmr@r;c&|jjdSrBrDr?s r:rEz_PublicKeyBase.curverFr;c|jjSrHrIr?s r:rJz_PublicKeyBase.bit_sizerKr;c|jjSrMrNr?s r:rOz_PublicKeyBase.byte_sizer@r;) rPrQrRr4rSr6rTrZr3rErJrOrUr;r:rWrWps DL . . .!!X!"##X#""X"""X"##X###r;rWcjeZdZdZedZedZedZedZdS)_CertificateBaseNc|jjSr=)r1r3r?s r:r3z_CertificateBase.algorithm((r;c|jjS)rC)r1rEr?s r:rEz_CertificateBase.curves$$r;c|jjS)zZ :return: The number of bits in the public key, as an integer )r1rJr?s r:rJz_CertificateBase.bit_sizes''r;c|jjS)z[ :return: The number of bytes in the public key, as an integer )r1rOr?s r:rOz_CertificateBase.byte_sizerbr;) rPrQrRr4rTr3rErJrOrUr;r:r`r`s D ))X)%%X%((X())X)))r;r`c|j}|dks|dkr |djS|dkrz|dd}|dj}td|d|d |d tt |d j|j|dj|d S|d kr |dj}|dd|d<|St d |jz)a Unwraps an asn1crypto.keys.PrivateKeyInfo object into an asn1crypto.keys.RSAPrivateKey, asn1crypto.keys.DSAPrivateKey or asn1crypto.keys.ECPrivateKey. :param key_info: An asn1crypto.keys.PrivateKeyInfo object :return: One of: - asn1crypto.keys.RSAPrivateKey - asn1crypto.keys.DSAPrivateKey - asn1crypto.keys.ECPrivateKey r' rsassa_pssr(r)r*r+rr,r-r.r/r2z#Unsupported key_info.algorithm "%s")r3r5r rpownative ValueError)key_infokey_algr8r5s r:_unwrap_private_key_informs   G%7l22 &--%12<@-(/!#s " s "## "     $-(/'(?@N| :X=OO P PPr;ct|tr~|dj}|jdkrd|dj|djfz}n|jdkr|dd}t t |d j|djj|d j}d |d j|d j|d j|jfz}nk|jd kr`|dj}|'||j}|jdjj}d|j dz}| d}||z }t|tr| d}tj |St|tr|jdkr+|dj}d|dj|djfz}n|jdkrK|dj}|dd}d |d j|d j|d j|jfz}nB|jd kr7|dj}d|j dz}| d}||z }t|tr| d}tj |St!t#dt%|)a5 Returns a fingerprint used for correlating public keys and private keys :param key_object: An asn1crypto.keys.PrivateKeyInfo or asn1crypto.keys.PublicKeyInfo :raises: ValueError - when the key_object is not of the proper type ;return: A byte string fingerprint r(r'z%d:%dmoduluspublic_exponentr)r*r+r.r,z %d:%d:%d:%dr-r2r1Nz%s:rzutf-8r3z key_object must be an instance of the asn1crypto.keys.PrivateKeyInfo or asn1crypto.keys.PublicKeyInfo classes, not %s ) isinstancerr5r3rirrhr1r4rEencoder"hashlibsha256digestrrjr r#) key_objectload_private_keykeyto_hashr8r1public_key_objects r:rSrSs*n--*0'.  5 ( (I%%&-!GG  !U * * 78FF s "=)07s """J $s "s "s "! 'GG !T ) )\*1J! %5$4Z$@$@$K!.3LAHO j.q11GnnW--G z !G gw ' ' .nnW--G~g&&--///*m,,0  5 ( (\*1CI%%&-!GG  !U * *\*1C ,\:F#s "s "s " 'GG !T ) )#L18Jj.q11GnnW--G z !G gw ' ' .nnW--G~g&&--/// ^ *   r;)rc2rc4des tripledesaesct|ts*ttdt |d}t jd|Pt|\}}}|dkrttd|dkrtj |dS||dkro tj |}|j |S#t$rYnwxYw tj |}|j tj |dS#t$rYnwxYw||dkr5 tj |}|d d }|S#t$rYnwxYwtd ) a Loads a public key from a DER or PEM-formatted file. Supports RSA, DSA and EC public keys. For RSA keys, both the old RSAPublicKey and SubjectPublicKeyInfo structures are supported. Also allows extracting a public key from an X.509 certificate. :param data: A byte string to load the public key from :raises: ValueError - when the data does not appear to contain a public key :return: An asn1crypto.keys.PublicKeyInfo object < data must be a byte string, not %s N\s*----- private keyz The data specified does not appear to be a public key or certificate, but rather a private key r' public key certificatetbs_certificatesubject_public_key_infozQThe data specified does not appear to be a known public key or certificate format)rqr! TypeErrorr r#rematch _unarmor_pemrjrwraploadrirr )datakey_typealgopkirpk parsed_certrks r: parse_publicr~s" dH % %   dOO      H x d##/+D11$ } $ $^  5== %dE22 28|33 $T**C JJJ    D  #D))C JJ %c511 1    D 8}44 %*400K"#456OPHO    D  h i iis60C CC/D DD'#E EEct|ts*ttdt |d}t jd|Wt|\}}}|dkrttd|dkrttd||dkr% tj |S#t$rYnwxYwttd ) a@ Loads a certificate from a DER or PEM-formatted file. Supports X.509 certificates only. :param data: A byte string to load the certificate from :raises: ValueError - when the data does not appear to contain a certificate :return: An asn1crypto.x509.Certificate object rNrrz The data specified does not appear to be a certificate, but rather a private key rz The data specified does not appear to be a certificate, but rather a public key rzU The data specified does not appear to be a known certificate format ) rqr!rr r#rrrrjr r)rr_s r:parse_certificaters> dH % %   dOO      H x d##/(..!T } $ $^  | # #^ 8}44 #D)) )    D  ^   s7C CCct|ts*ttdt ||@t|ts*ttdt |nd}t jd|Xt||\}}}|dkrttd|dkrttd  tj |}|j |S#t$rYnwxYw tj |}|d }|d j }t|||}tj |}|j |S#t$rYnwxYw tj |} | j tj| d S#t$rYnwxYw t!j |} | j tj| d S#t$rYnwxYw t#j |} | j tj| dS#t$rYnwxYwttd)a% Loads a private key from a DER or PEM-formatted file. Supports RSA, DSA and EC private keys. Works with the follow formats: - RSAPrivateKey (PKCS#1) - ECPrivateKey (SECG SEC1 V2) - DSAPrivateKey (OpenSSL) - PrivateKeyInfo (RSA/DSA/EC - PKCS#8) - EncryptedPrivateKeyInfo (RSA/DSA/EC - PKCS#8) - Encrypted RSAPrivateKey (PEM only, OpenSSL) - Encrypted DSAPrivateKey (PEM only, OpenSSL) - Encrypted ECPrivateKey (PEM only, OpenSSL) :param data: A byte string to load the private key from :param password: The password to unencrypt the private key :raises: ValueError - when the data does not appear to contain a private key, or the password is invalid :return: An asn1crypto.keys.PrivateKeyInfo object rNH password must be a byte string, not %s r;rrz The data specified does not appear to be a private key, but rather a public key rz The data specified does not appear to be a private key, but rather a certificate encryption_algorithmencrypted_datar'r)r2zU The data specified does not appear to be a known private key format )rqr!rr r#rrrrjrrrir _decrypt_encrypted_datarrr r ) rpasswordrrrparsed_wrapperencryption_algorithm_infordecrypted_datar5s r: parse_privaters6 dH % %   dOO      (H-- N(##    x d##/(x88!T | # #^  } $ $^  !$''         05d;;$23I$J!'(89@01JN\dee!.11        #D)) "65111       #D)) "65111       "4(( "64000       ^   s[2D DD AE77 FF/F88 GG /G99 HH /H:: IIct|\}}}d}tj||}|stt d|d}|}|tgdvr;|d}d|t|||fS|} d}| dkrd} n | d krd } d }| ||fS) a3 Removes PEM-encoding from a public key, private key or certificate. If the private key is encrypted, the password will be used to decrypt it. :param data: A byte string of the PEM-encoded data :param password: A byte string of the encryption password, or None :return: A 3-element tuple in the format: (key_type, algorithm, der_bytes). The key_type will be a unicode string of "public key", "private key" or "certificate". The algorithm will be a unicode string of "rsa", "dsa" or "ec". zc^((DSA|EC|RSA) PRIVATE KEY|ENCRYPTED PRIVATE KEY|PRIVATE KEY|PUBLIC KEY|RSA PUBLIC KEY|CERTIFICATE)zx data does not seem to contain a PEM-encoded certificate, private key or public key r)zRSA PRIVATE KEYzDSA PRIVATE KEYzEC PRIVATE KEYrNzencrypted private keyzrsa public keyrr') rrrrjr groupstripsetlower_unarmor_pem_openssl_private) rr object_typeheaders der_bytes type_regex armor_type pem_headerrrs r:rrvs$'.dmm#K)vJ*k22J        !!!$$J ::<>#7#7#<#< HjjH  @#J$5$5g$>$>??~~Hr2 r 2  r  2  r ! ! a a 2 r  B !" r#$'()N,k(VAaC[01188::G 3w<< ' '7;w1F1Q3K?@@GGIII 3w<< ' 'a&'Gu5 u 5  u  5  u % % e e 5 u   K  !" {#$'()M* .L|GT*** <v . ..r;ct|ts*ttdt ||@t|ts*ttdt |nd}ii}t j|}|d}|djdkrttd|j }|d }|r|d d d j}d ddddddd|} t|||dj|dj| d} tt|} tj| |dj| } |d dj} t#| | std|D]}|d}t|t$rt'|j|||8t|t(rB|d}|d}|dj}t+|||}t'||||ttdt-|}t-}t1t3||z}d}d}g}t5|dkr,|d|}}fdD}|||fSt5|dkrz!_parse_pkcs12..|s'CCCA!{2B2BuQx2B2B2Br;c|jjSN)subjecthuman_friendly)cs r:z_parse_pkcs12..s AYr;)rx)rqr!rr r#rrrirjauthenticated_safergetattrrshmacnewcontentsrurr_parse_safe_contentsr rrkeyssortedlistrvalues)rrrw private_keyspfxrrrmac_algo key_lengthmac_keyhash_mod computed_hmac stored_hmac content_inforrrrdecrypted_contentkey_fingerprintscert_fingerprintscommon_fingerprintsrxcert other_certs first_keyrrZs @@r: _parse_pkcs12rsD4 dH % %   dOO      (H-- N(##    EL (4..CK I '611      /:H=E?#56{CJ       Z ' \ " )    7H--)I*>*GRRYY[[ uoh/6  {;; =;<< <* y) g{ + +   hP` a a a a  / / %,-E%F "(>?](^ % 67J K R  78QSdfn o o  !2E<Sc d d d d^  <,,..//EJJLL)) &69J&J!K!KLL C DK 1$$)!, ;'[!CCCCCCCC T;'' <14 1 1 3 34455a8 9% 5zzA~~4 --..q1 Y )  5zzA~~T%,,..117Y7YZZZ { ##r;ct|trtj|}|D]!}|d}t|trK|djdkr9|dj}|dd}|dj|t|d<kt|tr||t||<t|trN|d} |d j} t| | |} tj| } | |t| |<t|trt|||||!#dS) a& Parses a SafeContents PKCS#12 ANS.1 structure and extracts certs and keys :param safe_contents: A byte string of ber-encoded SafeContents, or a asn1crypto.pkcs12.SafeContents parsed object :param certs: A dict to store certificates in :param keys: A dict to store keys in :param password: A byte string of the password to any encrypted data :param load_private_key: A callable that will accept a byte string and return an oscrypto.asymmetric.PrivateKey object bag_valuecert_idx509 cert_valuerrNrr) rqr!rrrrir5rSrr rr) safe_contentsrrrrwsafe_bagrrpublic_key_inforencrypted_key_bytesdecrypted_key_bytesr(s r:rrsp,-**9$)-88 ![) i ) ) #*f44 .5"&'8"9:S"T=F|=T=[l?D99:  > 2 2 FOLi1ABB C C  #: ; ; (12H(I %"+,<"="D "9:SUhjr"s"s (-.ABBKHSLk3CDD E E  < 0 0  E<K[ \ \ \ \ 1r;ct|j}|jdkrc|jdkrtt dt |j||j|j|j }|j }||||}n|jdkrLt|j||j|j|j dz}|dd}|dd}||||}n|jdkrut|j||j|j|j d }|jd kr |||}n5t|j||j|j|j d }||||}|S) al Decrypts encrypted ASN.1 data :param encryption_algorithm_info: An instance of asn1crypto.pkcs5.Pkcs5EncryptionAlgorithm :param encrypted_content: A byte string of the encrypted content :param password: A byte string of the encrypted content's password :return: A byte string of the decrypted plaintext rrc5zc PBES2 encryption scheme utilizing RC5 encryption is not supported rrrrrrr|r)rencryption_cipherkdfrjr rkdf_hmackdf_saltkdf_iterationsr encryption_ivrrencryption_block_size)rrrrrr plaintextderived_outputs r:rrs" 9 KLL!$00 $ 6% ? ?^   % .  % . % 4 % 0   +8 L*;VDD " &( 2 2 % .  % . % 4 % 01 4   !1%"% L*;VDD " &, 6 6 % .  % . % 4 % 0    % 6% ? ?$ W.?@@II )2)2)8)? F% W.?HHI r;r)9 __future__rrrrrsrrr_asn1rr r r r r rrrrrrrrrrrrr symmetricrrrrrutilr_errorsr _typesr!r"r#r%rWr`rmrSrrrrrrrrrrUr;r:r sRRRRRRRRRRRR $,+++++++++#"""""######0000000000E#E#E#E#E#E#E#E#PH#H#H#H#H#H#H#H#V&)&)&)&)&)&)&)&)R*Q*Q*QZaaaJ !  ,  FjFjFjR777trrrrj0'0'0'0'fX/X/X/vG$G$G$T111hNNNNNr;