a !f^u@sgdZddlZddlZddlmZddlmZmZmZddl m Z m Z ddl m Z ddlmZmZmZddlmZmZmZGd d d eZd"d d Zd#ddZddZddZddZddZddZddZddZ d$dd Z!e!Z"d!Z#dS)%)generate construct import_keyRsaKeyoidN)Random)tobytesbordtostr) DerSequenceDerNull)Integer)test_probable_primegenerate_probable_prime COMPOSITE)_expand_subject_public_key_info_create_subject_public_key_info _extract_subject_public_key_infoc@sBeZdZdZddZeddZeddZedd Zed d Z ed d Z eddZ eddZ eddZ eddZeddZddZddZddZddZd d!Zd"d#Zd$d%Zd&d'Zd(d)Zd*d+Zd,d-Zd.d/Zd0d1ZdEd5d6ZeZeZd7d8Z d9d:Z!d;d<Z"d=d>Z#d?d@Z$dAdBZ%dCdDZ&d3S)FraClass defining an actual RSA key. Do not instantiate directly. Use :func:`generate`, :func:`construct` or :func:`import_key` instead. :ivar n: RSA modulus :vartype n: integer :ivar e: RSA public exponent :vartype e: integer :ivar d: RSA private exponent :vartype d: integer :ivar p: First factor of the RSA modulus :vartype p: integer :ivar q: Second factor of the RSA modulus :vartype q: integer :ivar invp: Chinese remainder component (:math:`p^{-1} \text{mod } q`) :vartype invp: integer :ivar invq: Chinese remainder component (:math:`q^{-1} \text{mod } p`) :vartype invq: integer :ivar u: Same as ``invp`` :vartype u: integer :undocumented: exportKey, publickey cKst|}td}|tdB}|||fvr4td|D]\}}t|d||q<||kr|j|jd|_|j|jd|_ d|_ dS)a.Build an RSA key. :Keywords: n : integer The modulus. e : integer The public exponent. d : integer The private exponent. Only required for private keys. p : integer The first factor of the modulus. Only required for private keys. q : integer The second factor of the modulus. Only required for private keys. u : integer The CRT coefficient (inverse of p modulo q). Only required for private keys. ne)pqduzSome RSA components are missing_N) setkeys ValueErroritemssetattr_d_p_dp_q_dq_invq)selfkwargsZ input_setZ public_setZ private_set componentvaluer,Y/var/www/html/python-backend/venv/lib/python3.9/site-packages/Cryptodome/PublicKey/RSA.py__init__Ss   zRsaKey.__init__cCs t|jSN)int_nr(r,r,r-rrszRsaKey.ncCs t|jSr/)r0_er2r,r,r-rvszRsaKey.ecCs|stdt|jS)Nz-No private exponent available for public keys) has_privateAttributeErrorr0r"r2r,r,r-rzszRsaKey.dcCs|stdt|jS)Nz.No CRT component 'p' available for public keys)r4r5r0r#r2r,r,r-rszRsaKey.pcCs|stdt|jS)Nz.No CRT component 'q' available for public keys)r4r5r0r%r2r,r,r-rszRsaKey.qcCs|stdt|jS)Nz/No CRT component 'dp' available for public keys)r4r5r0r$r2r,r,r-dpsz RsaKey.dpcCs|stdt|jS)Nz/No CRT component 'dq' available for public keys)r4r5r0r&r2r,r,r-dqsz RsaKey.dqcCs4|std|jdur*|j|j|_t|jS)Nz1No CRT component 'invq' available for public keys)r4r5r'r%inverser#r0r2r,r,r-invqs  z RsaKey.invqcCs|jSr/)rr2r,r,r-invpsz RsaKey.invpcCs|stdt|jS)Nz.No CRT component 'u' available for public keys)r4r5r0_ur2r,r,r-rszRsaKey.ucCs |jS)zSize of the RSA modulus in bitsr1 size_in_bitsr2r,r,r-r=szRsaKey.size_in_bitscCs|jdddS)z9The minimal amount of bytes that can hold the RSA modulusrr<r2r,r,r- size_in_bytesszRsaKey.size_in_bytescCs8d|kr|jks ntdttt||j|jS)NrzPlaintext too large)r1rr0powr r3)r( plaintextr,r,r-_encryptszRsaKey._encryptc Csd|kr|jks ntd|s0tdtjd|jd}t|t||j|j|j}t||j|j }t||j |j }|||j |j }||j |}| |j||j}|t||j|jkrtd|S)NrzCiphertext too largezThis is not a private keyr)Z min_inclusiveZ max_exclusivez Fault detected in RSA decryption)r1rr4 TypeErrorr Z random_ranger@r3r$r#r&r%r;r8) r( ciphertextrcpm1m2hmpresultr,r,r-_decryptszRsaKey._decryptcCs t|dS)z"Whether this is an RSA private keyr")hasattrr2r,r,r-r4szRsaKey.has_privatecCsdSNTr,r2r,r,r- can_encryptszRsaKey.can_encryptcCsdSrNr,r2r,r,r-can_signszRsaKey.can_signcCst|j|jdS)z^A matching RSA public key. Returns: a new :class:`RsaKey` object r)rr1r3r2r,r,r- public_keyszRsaKey.public_keycCsH||krdS|j|jks,|j|jkr0dS|sVz%RsaKey.export_key..rsssh-rsarecSs g|]}tdt||qS)>I)structpacklen)rbkpr,r,r-rd\ressh-rsa rzRSA PRIVATE KEYZDERz&PKCS#1 private key cannot be encryptedPKCS8r_z PRIVATE KEY)Z key_paramszENCRYPTED PRIVATE KEYz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBCz PUBLIC KEYr_z3Unknown key format '%s'. Cannot export the RSA key.)rrget_random_bytesr3r1r joinbinascii b2a_base64r4r rrrrrr r8encoder Cryptodome.IOrpwraprr rr_)r(format passphraseZpkcsZ protectionrandfuncZe_bytesZn_byteskeyparts keystringZ binary_keyr]rpr_Zpem_strr,r,r- export_keyspM         zRsaKey.export_keycCs tddSNz0Use module Cryptodome.Signature.pkcs1_15 insteadNotImplementedError)r(MKr,r,r-signsz RsaKey.signcCs tddSrr)r(r signaturer,r,r-verifysz RsaKey.verifycCs tddSNz/Use module Cryptodome.Cipher.PKCS1_OAEP insteadr)r(rArr,r,r-encryptszRsaKey.encryptcCs tddSrr)r(rDr,r,r-decryptszRsaKey.decryptcCstdSr/rr(rBr,r,r-blindsz RsaKey.blindcCstdSr/rrr,r,r-unblindszRsaKey.unblindcCstdSr/rr2r,r,r-sizesz RsaKey.size)r_NrNN)'__name__ __module__ __qualname____doc__r.propertyrrrrrr6r7r9r:rr=r?rBrLr4rOrPrQrTrUrXr[r^r~Z exportKeyZ publickeyrrrrrrrr,r,r,r-r3s`            rc sb|dkrtdddks$dkr,td|dur:tj}td}}t||kr0|d|d>kr0|d}||}tdd|d>||krtdd|d>fd d }t|||d td|dd >fd d}t|||d } | }d| d} | }qN| krD| } | } t ||| | dS)a4Create a new RSA key pair. The algorithm closely follows NIST `FIPS 186-4`_ in its sections B.3.1 and B.3.3. The modulus is the product of two non-strong probable primes. Each prime passes a suitable number of Miller-Rabin tests with random bases and a single Lucas test. Args: bits (integer): Key length, or size (in bits) of the RSA modulus. It must be at least 1024, but **2048 is recommended.** The FIPS standard only defines 1024, 2048 and 3072. randfunc (callable): Function that returns random bytes. The default is :func:`Cryptodome.Random.get_random_bytes`. e (integer): Public RSA exponent. It must be an odd positive integer. It is typically a small number with very few ones in its binary representation. The FIPS standard requires the public exponent to be at least 65537 (the default). Returns: an RSA key object (:class:`RsaKey`, with private key). .. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf iz"RSA modulus length must be >= 1024rzBRSA public exponent must be a positive, odd integer larger than 2.Nrcs|ko|ddkSNr)gcd candidate)rmin_pr,r-filter_pszgenerate..filter_p)Z exact_bitsr{Z prime_filterdcs*|ko(|ddko(t|kSr)rabsr)r min_distancemin_qrr,r-filter_qs zgenerate..filter_qrrrrrr) rrrrr r=sqrtrlcmr8r) bitsr{rrrZsize_qZsize_prrrrrr,)rrrrrr-rs@      rTcCsGdddt}|}td|D]\}}t||t|q |j}|j}t|ds`t||d}n0|j} t|dr~|j } |j } n| |d} | } | dd kr| d} qd }td}|s6|d kr6t| }|| kr,t |||}|dkr"||dkr"t |d|dkr"t| |d} d }q,|d9}q|d7}q|sDt d || d ksVJ|| } t|drr|j}n | | }t||| | | |d}|r|dks||krt dt| |dkrt d|d@st d|r| dks| |krt dt| | dkr"t d| | |kr8t dt| tkrNt dt| tkrdt d| d| d}|| d | d}|| t|dkrt dt|dr|dks|| krt d| || dkrt d|S)a!Construct an RSA key from a tuple of valid RSA components. The modulus **n** must be the product of two primes. The public exponent **e** must be odd and larger than 1. In case of a private key, the following equations must apply: .. math:: \begin{align} p*q &= n \\ e*d &\equiv 1 ( \text{mod lcm} [(p-1)(q-1)]) \\ p*u &\equiv 1 ( \text{mod } q) \end{align} Args: rsa_components (tuple): A tuple of integers, with at least 2 and no more than 6 items. The items come in the following order: 1. RSA modulus *n*. 2. Public exponent *e*. 3. Private exponent *d*. Only required if the key is private. 4. First factor of *n* (*p*). Optional, but the other factor *q* must also be present. 5. Second factor of *n* (*q*). Optional. 6. CRT coefficient *q*, that is :math:`p^{-1} \text{mod }q`. Optional. consistency_check (boolean): If ``True``, the library will verify that the provided components fulfil the main RSA properties. Raises: ValueError: when the key being imported fails the most basic RSA validity checks. Returns: An RSA key object (:class:`RsaKey`). c@s eZdZdS)zconstruct..InputCompsN)rrrr,r,r,r- InputComps%srrrrrrrrFrTz2Unable to compute factors p and q from exponent d.rzInvalid RSA public exponentz-RSA public exponent is not coprime to moduluszRSA modulus is not oddzInvalid RSA private exponentz.RSA private exponent is not coprime to modulusz RSA factors do not match moduluszRSA factor p is compositezRSA factor q is compositezInvalid RSA conditionzInvalid RSA component uzInvalid RSA component u with p)objectzipr!r rrrMrrrrr@rrrr8r4rrr0)Zrsa_componentsZconsistency_checkrZ input_compscompr+rrkeyrrrZktottZspottedakcandrphirr,r,r-rs(       *       rcGsNtj|ddd}|ddkr&tdt|ddt|d|d gS) N TZ nr_elementsZonly_ints_expectedrz(No PKCS#1 encoding of an RSA private keyr)r decoderrr r8encodedr)derr,r,r-_import_pkcs1_privates rcGstj|ddd}t|S)NrTr)r rrrr,r,r-_import_pkcs1_publicsrcGs.t|\}}}|tks|dur&tdt|S)NzNo RSA subjectPublicKeyInfo)rrrr)rr)ZalgoidZ encoded_keyparamsr,r,r-_import_subjectPublicKeyInfosrcGst|}t|Sr/)rr)rr)Zsp_infor,r,r-_import_x509_certsrcCs:ddlm}|||}|dtkr,tdt|d|S)NrrozNo PKCS#8 encoded RSA keyr)rwrpunwraprr_import_keyDER)rrzrprr,r,r- _import_pkcs8s    rc CsHtttttf}|D](}z|||WSty8Yq0qtddS)z@Import an RSA key (public or private half), encoded in DER form.RSA key format is not supportedN)rrrrrr) extern_keyrzZ decodingsZdecodingr,r,r-rs rcCsddlm}m}m}m}|||\}}|dkr6td||\}}||\} }||\} }||\} }||\} }||\} }||\}}||dd|| | | | | fD}t|S)Nr)import_openssh_private_generic read_bytes read_string check_paddingzssh-rsazThis SSH key is not RSAcSsg|]}t|qSr,)r from_bytesrar,r,r-rdrez/_import_openssh_private_rsa..)Z_opensshrrrrrr)datapasswordrrrrZssh_nameZ decryptedrrrZiqmprrrpaddedbuildr,r,r-_import_openssh_private_rsas       rcCsVddlm}t|}|dur$t|}|drVt|}|||\}}}t||}|S|dr|t||\}}}|r~d}t||S|dr t | dd} g} t | d krt d | dd d} | | d d | | d | d} qt| d} t| d } t| | gSt |dkrJt|dd krJt||Std dS)aImport an RSA key (public or private). Args: extern_key (string or byte string): The RSA key to import. The following formats are supported for an RSA **public key**: - X.509 certificate (binary or PEM format) - X.509 ``subjectPublicKeyInfo`` DER SEQUENCE (binary or PEM encoding) - `PKCS#1`_ ``RSAPublicKey`` DER SEQUENCE (binary or PEM encoding) - An OpenSSH line (e.g. the content of ``~/.ssh/id_ecdsa``, ASCII) The following formats are supported for an RSA **private key**: - PKCS#1 ``RSAPrivateKey`` DER SEQUENCE (binary or PEM encoding) - `PKCS#8`_ ``PrivateKeyInfo`` or ``EncryptedPrivateKeyInfo`` DER SEQUENCE (binary or PEM encoding) - OpenSSH (text format, introduced in `OpenSSH 6.5`_) For details about the PEM encoding, see `RFC1421`_/`RFC1423`_. passphrase (string or byte string): For private keys only, the pass phrase that encrypts the key. Returns: An RSA key object (:class:`RsaKey`). Raises: ValueError/IndexError/TypeError: When the given key cannot be parsed (possibly because the pass phrase is wrong). .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _`PKCS#1`: http://www.ietf.org/rfc/rfc3447.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt .. _`OpenSSH 6.5`: https://flak.tedunangst.com/post/new-openssh-key-format-and-bcrypt-pbkdf rrqNs-----BEGIN OPENSSH PRIVATE KEYs-----rm rrrhr0r)rwr_r startswithr rrrrt a2b_base64splitrkriunpackappendr rrr r)rrzr_Z text_encodedZopenssh_encodedmarkerZenc_flagrKrr}r|lengthrrr,r,r-rs6)          rz1.2.840.113549.1.1.1)Nr)T)N)$__all__rtriZ CryptodomerZCryptodome.Util.py3compatrr r ZCryptodome.Util.asn1r r ZCryptodome.Math.Numbersr ZCryptodome.Math.PrimalityrrrZCryptodome.PublicKeyrrrrrrrrrrrrrrrZ importKeyrr,r,r,r- s0  { Q    P