⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.184
Server IP:
97.74.87.16
Server:
Linux 16.87.74.97.host.secureserver.net 5.14.0-503.38.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Apr 18 08:52:10 EDT 2025 x86_64
Server Software:
Apache
PHP Version:
8.2.28
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
var
/
opt
/
nydus
/
ops
/
oscrypto
/
_win
/
__pycache__
/
View File Name :
asymmetric.cpython-39.pyc
a ���g�� � @ s� d dl mZmZmZmZ d dlZd dlZd dlZd dlZddl m Z m Z m Z mZmZmZmZmZmZmZmZmZmZmZmZ ddlmZm Z m Z m Z m Z m Z m!Z!m"Z"m#Z# ddl$m%Z% ddl&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6 ddl7m8Z8 dd l9m:Z: dd l;m<Z<m=Z=m>Z> dd l?m@Z@mAZAmBZBmCZC dd lDmEZEmFZFmGZGmHZHmIZImJZJ dd lKmLZL e�M� ZNeNd eNd fZOe8� ZPePdk�r�ddlQmRZRmSZSmTZTmUZUmVZV ddlWmXZYmZZ[m\Z\m]Z^m_Z` n ddlambZbmcZcmTZTmdZdmeZe g d�Zfg d�ZgG dd� d�ZhG dd� dehe �ZiG dd� dehe �ZjG dd � d ehe�Z dyd d �Zkd d � Zldzd!d"�Zmd#d$� Znd{d%d&�Zod'd(� Zpd)d*� Zqd+d,� Zrd-d.� Zsd/d0� Ztd1d2� Zud3d4� Zvd5d6� Zwd7d8� Zxd9d:� Zyd|d<d=�Zzd>d?� Z{d}d@dA�Z|dBdC� Z}d~dDdE�Z~ddFdG�ZdHdI� Z�dJdK� Z�dLdM� Z�dNdO� Z_d�dQdR�Z�d�dSdT�Z�d�dUdV�Z�dWdX� Z�dYdZ� Z�d[d\� Z�d]d^� Z]d�d_d`�Z�d�dadb�Z�d�dcdd�Z�d�dedf�Z�d�dgdh�Z�d�didj�Z�d�dkdl�Z�d�dmdn�Z�d�dodp�Z�dqdr� Z�dsdt� Z�dudv� Z�dwdx� Z�dS )�� )�unicode_literals�division�absolute_import�print_functionN� )� Certificate� DHParameters� DSAParams� DSASignature�ECDomainParameters� ECPrivateKey�Integer�int_from_bytes� int_to_bytes�PrivateKeyAlgorithm�PrivateKeyInfo�PublicKeyAlgorithm� PublicKeyInfo� RSAPrivateKey� RSAPublicKey) �_CertificateBase� _fingerprint� _parse_pkcs12�_PrivateKeyBase�_PublicKeyBase�_unwrap_private_key_info�parse_certificate� parse_private� parse_public)�pretty_message)�buffer_from_bytes�buffer_from_unicode� byte_array�bytes_from_buffer�cast�deref�native�new�null� pointer_set�sizeof�struct� struct_bytes�struct_from_buffer�unwrap�write_to_buffer)�backend)� fill_width)�AsymmetricKeyError� IncompleteAsymmetricKeyError�SignatureError)� type_name�str_cls�byte_cls� int_types)� add_pkcs1v15_signature_padding�add_pss_padding�raw_rsa_private_crypt�raw_rsa_public_crypt�!remove_pkcs1v15_signature_padding�verify_pss_padding)�constant_compare� � winlegacy)�advapi32� Advapi32Const� handle_error�open_context_handle�close_context_handle)�ec_generate_pair�ec_compute_public_key_point�ec_public_key_info� ecdsa_sign� ecdsa_verify)�bcrypt� BcryptConstrD �open_alg_handle�close_alg_handle)r �dsa_sign� dsa_verifyrJ rK � generate_pair�load_certificate� load_pkcs12�load_private_key�load_public_key� parse_pkcs12� PrivateKey� PublicKey�rsa_oaep_decrypt�rsa_oaep_encrypt�rsa_pkcs1v15_decrypt�rsa_pkcs1v15_encrypt�rsa_pkcs1v15_sign�rsa_pkcs1v15_verify� rsa_pss_sign�rsa_pss_verify( r � � � � � � � � � � �% �) �+ �/ �5 �; �= �C �G �I �O �S �Y �a �e �g �k �m �q � � � � � � � � � � � � � � �� �� �� �� �� �� �� �� �� � i i i i i i i i% i3 i7 i9 i= iK iQ i[ i] ia ig io iu i{ i i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� � i i i# i- i3 i9 i; iA iK iQ iW iY i_ ie ii ik iw i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i) i+ i5 i7 i; i= iG iU iY i[ i_ im iq is iw i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i i% i' i- i? iC iE iI iO iU i] ic ii i i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i i i i' i) i/ iQ iW i] ie iw i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i i# i+ i/ i= iA iG iI iM iS iU i[ ie iy i i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i' i7 iE iK iO iQ iU iW ia im is iy i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i! i# i' i) i3 i? iA iQ iS iY i] i_ ii iq i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i# i% i+ i/ i5 iC iI iM iO iU iY i_ ik iq iw i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i! i1 i9 i= iI iW ia ic ig io iu i{ i i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i# i) i- i? iG iQ iW i] ie io i{ i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i% i/ i1 iA i[ i_ ia im is iw i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i i! i+ i- i= i? iO iU ii iy i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i! i' i/ i5 i; iK iW iY i] ik iq iu i} i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i% i) i1 iC iG iM iO iS iY i[ ig ik i i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i! i% i+ i9 i= i? iQ ii is iy i{ i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i' i- i9 iE iG iY i_ ic ii io i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i# i) i+ i1 i7 iA iG iS i_ iq is iy i} i� i� i� i� i� i� i� i� i� i� i� i� i i i i' i- i7 iC iE iI iO iW i] ig ii im i{ i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i! i/ i3 i; iE iM iY ik io iq iu i� i� i� i� i� i� i� i� i� i� i� i i i i i i% i) i+ i7 i= iA iC iI i_ ie ig ik i} i i� i� i� i� i� i� i� i� i� i� i� i� i i i i i i i i% i3 i9 i= iE iO iU ii im io iu i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i# i' i3 iA i] ic iw i{ i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i5 i7 i; iC iI iM iU ig iq iw i} i i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i1 i3 iE iI iQ i[ iy i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i! i# i- i/ i5 i? iM iQ ii ik i{ i} i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i# i% i/ i1 i7 i; iA iG iO iU iY ie ik is i i� i� i� i� i� i� i� i� i� i� i� i i i i' i+ i- i3 i= iE iK iO iU is i� i� i� i� i� i� i� i� i� i� i� i� i i i! i# i5 i9 i? iA iK iS i] ic ii iq iu i{ i} i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i i% i+ i/ i= iI iM iO im iq i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i i9 iI iK iQ ig iu i{ i� i� i� i� i� i� i� i� i� i� i� i� i� i� i� i i i i' i) i- i3 iG iM iQ i_ ic ie ii iw i} i� i� i� i� i� i� i� i� i� i� i� i� i� i ! i! i5! iA! iI! iO! iY! i[! i_! is! i}! i�! i�! i�! i�! i�! i�! i�! i�! i�! i�! i�! i�! i�! i�! i�! i�! i" i " i" i" i!" i%" i+" i1" i9" iK" iO" ic" ig" is" iu" i" i�" i�" i�" i�" i�" i�" i�" i�" i�" i�" i�" i�" i�" i# i # i # i'# i)# i/# i3# i5# iE# iQ# iS# iY# ic# ik# i�# i�# i�# i�# i�# i�# i�# i�# i�# i�# i�# i�# i�# i�# i�# i$ i $ i$ i$ i)$ i=$ iA$ iC$ iM$ i_$ ig$ ik$ iy$ i}$ i$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i�$ i% i% i% i% i'% i1% i=% iC% iK% iO% is% i�% i�% i�% i�% i�% i�% i�% i�% i�% i�% i�% i�% i�% i�% i�% i& i & i& i& i'& i)& i5& i;& i?& iK& iS& iY& ie& ii& io& i{& i�& i�& i�& i�& i�& i�& i�& i�& i�& i�& i�& i�& i�& i�& i' i' i5' i7' iM' iS' iU' i_' ik' im' is' iw' i' i�' i�' i�' i�' i�' i�' i�' i�' i�' i�' i�' i�' i( i( i ( i( i( i ( i!( i1( i=( i?( iI( iQ( i[( i]( ia( ig( iu( i�( i�( i�( i�( i�( i�( i�( i�( i�( i�( i�( i�( i) i) i) i!) i#) i?) iG) i]) ie) ii) io) iu) i�) i�) i�) i�) i�) i�) i�) i�) i�) i�) i�) i�) i�) i�) i�) i* i* i * i%* i/* iO* iU* i_* ie* ik* im* is* i�* i�* i�* i�* i�* i�* i�* i�* i�* i�* i�* i�* i�* i�* i+ i'+ i1+ i3+ i=+ i?+ iK+ iO+ iU+ ii+ im+ io+ i{+ i�+ i�+ i�+ i�+ i�+ i�+ i�+ i�+ i�+ i�+ i�+ i�+ i�+ i , i, i, i#, i/, i5, i9, iA, iW, iY, ii, iw, i�, i�, i�, i�, i�, i�, i�, i�, i�, i�, i�, i�, i�, i�, i�, i- i - i - i;- iC- iI- iM- ia- ie- iq- i�- i�- i�- i�- i�- i�- i�- i�- i�- i�- i. i. i. i . i. i . i%. i-. i3. i7. i9. i?. iW. i[. io. iy. i. i�. i�. i�. i�. i�. i�. i�. i�. i�. i�. i�. i�. i�. i�. i/ i / i / i/ i'/ i)/ iA/ iE/ iK/ iM/ iQ/ iW/ io/ iu/ i}/ i�/ i�/ i�/ i�/ i�/ i�/ i�/ i�/ i�/ i�/ i�/ i�/ i�/ i�/ i0 i 0 i#0 i)0 i70 i;0 iU0 iY0 i[0 ig0 iq0 iy0 i}0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i�0 i1 i 1 i1 i!1 i'1 i-1 i91 iC1 iE1 iK1 i]1 ia1 ig1 im1 is1 i1 i�1 i�1 i�1 i�1 i�1 i�1 i�1 i�1 i�1 i�1 i�1 i�1 i 2 i2 i2 i 2 i)2 i52 iY2 i]2 ic2 ik2 io2 iu2 iw2 i{2 i�2 i�2 i�2 i�2 i�2 i�2 i�2 i�2 i�2 i�2 i�2 i�2 i�2 i�2 i�2 i3 i%3 i+3 i/3 i53 iA3 iG3 i[3 i_3 ig3 ik3 is3 iy3 i3 i�3 i�3 i�3 i�3 i�3 i�3 i�3 i�3 i�3 i�3 i�3 i4 i4 i4 i4 i4 i74 iE4 iU4 iW4 ic4 ii4 im4 i�4 i�4 i�4 i�4 i�4 i�4 i�4 i�4 i�4 i�4 i�4 i�4 i�4 i 5 i5 i 5 i-5 i35 i;5 iA5 iQ5 ie5 io5 iq5 iw5 i{5 i}5 i�5 i�5 i�5 i�5 i�5 i�5 i�5 i�5 i�5 i�5 i�5 i�5 i�5 i�5 i6 i6 i6 i#6 i16 i56 i76 i;6 iM6 iO6 iS6 iY6 ia6 ik6 im6 i�6 i�6 i�6 i�6 i�6 i�6 i�6 i�6 i�6 i�6 i�6 i7 i7 i7 i7 i?7 iE7 iI7 iO7 i]7 ia7 iu7 i7 i�7 i�7 i�7 i�7 i�7 i�7 i�7 i�7 i�7 i�7 i8 i 8 i!8 i38 i58 iA8 iG8 iK8 iS8 iW8 i_8 ie8 io8 iq8 i}8 i�8 i�8 i�8 i�8 i�8 i�8 i�8 i�8 i�8 i�8 i�8 i�8 i�8 i9 i 9 i#9 i%9 i)9 i/9 i=9 iA9 iM9 i[9 ik9 iy9 i}9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i�9 i: i: i: i : i': i+: i1: iK: iQ: i[: ic: ig: im: iy: i�: i�: i�: i�: i�: i�: i�: i�: i�: i�: i�: i; i; i; i!; i#; i-; i9; iE; iS; iY; i_; iq; i{; i�; i�; i�; i�; i�; i�; i�; i�; i�; i�; i�; i�; i�; i�; i�; i�; i�; i< i < i< i< i < i)< i5< iC< iO< iS< i[< ie< ik< iq< i�< i�< i�< i�< i�< i�< i�< i�< i�< i�< i�< i�< i= i = i= i= i = i!= i-= i3= i7= i?= iC= io= is= iu= iy= i{= i�= i�= i�= i�= i�= i�= i�= i�= i�= i�= i�= i�= i> i > i> i> i > i#> i)> i/> i3> iA> iW> ic> ie> iw> i�> i�> i�> i�> i�> i�> i�> i�> i�> i�> i�> i�> i�> i�> i�> i ? i ? i7? i;? i=? iA? iY? i_? ie? ig? iy? i}? i�? i�? i�? i�? i�? i�? i�? i�? i�? i�? i�? i@ i!@ i%@ i+@ i1@ i?@ iC@ iE@ i]@ ia@ ig@ im@ i�@ i�@ i�@ i�@ i�@ i�@ i�@ i�@ i�@ i�@ i�@ i�@ i A i A iA iA i!A i3A i5A i;A i?A iYA ieA ikA iwA i{A i�A i�A i�A i�A i�A i�A i�A i�A i�A i�A iB iB iB i B i#B i)B i/B iCB iSB iUB i[B iaB isB i}B i�B i�B i�B i�B i�B i�B i�B i�B i�B i�B i�B i�B i�B iC iC i C i%C i'C i3C i7C i9C iOC iWC iiC i�C i�C i�C i�C i�C i�C i�C i�C i�C i�C i�C i�C i�C i�C i�C i�C i D i D iD i#D i)D i;D i?D iED iKD iQD iSD iYD ieD ioD i�D i�D i�D i�D i�D i�D i�D i�D i�D i�D i�D i�D i�D iE iE iE i+E i1E iAE iIE iSE iUE iaE iwE i}E iE i�E i�E i�E i�E i�E i�E c @ s, e Zd ZdZdZdZdZdd� Zdd� ZdS )�_WinKeyNc C s& || _ || _tdkr t| _nt| _dS )z� :param key_handle: A CNG BCRYPT_KEY_HANDLE value (Vista and newer) or an HCRYPTKEY (XP and 2003) from loading/importing the key :param asn1: An asn1crypto object for the concrete type rA N)� key_handle�asn1�_backendrB �_librL ��selfr� r� � r� �I/opt/nydus/tmp/pip-target-mke_irhy/lib/python/oscrypto/_win/asymmetric.py�__init__� s z_WinKey.__init__c C sb | j r:tdkr | j�| j �}n| j�| j �}t|� d | _ | jrXtdkrXt| j� d | _d | _d S )NrA )r� r� r� �CryptDestroyKey�BCryptDestroyKeyrD �context_handlerF )r� �resr� r� r� �__del__� s z_WinKey.__del__) �__name__� __module__� __qualname__r� r� � ex_key_handler� r� r� r� r� r� r� r� v s r� c @ s4 e Zd ZdZdZdd� Zedd� �Zedd� �ZdS ) rX zM Container for the OS crypto library representation of a private key Nc C s t �| ||� dS )z� :param key_handle: A CNG BCRYPT_KEY_HANDLE value (Vista and newer) or an HCRYPTKEY (XP and 2003) from loading/importing the key :param asn1: An asn1crypto.keys.PrivateKeyInfo object N�r� r� r� r� r� r� r� � s zPrivateKey.__init__c C s� t dkr�| jdkr2t| j�}tdt|| j��| _q�| jdkr�| jd d }tt d|d��t t |d j | jd j j |d j ��d ��}t|�| _q�| jd j }tt d d i�t|d |d d��d ��}t|�| _n t| j| j| j�\}}t|�| _| jS )z\ :return: A PublicKey object corresponding to this private key. rA �ecN�dsa�private_key_algorithm� parameters�� algorithmr� �g� private_key�p�r� � public_keyr� �rsa�modulus�public_exponent�r� r� )r� r� �(_pure_python_ec_compute_public_key_pointr� rY rI �curve� _public_keyr r r �powr& �parsedrV r �_bcrypt_key_handle_to_asn1�bit_sizer� )r� Z pub_point�paramsZpub_asn1r� �_r� r� r� r� � s@ � �� ��� zPrivateKey.public_keyc C s | j du rt | jt�| _ | j S )aY Creates a fingerprint that can be compared with a public key to see if the two form a pair. This fingerprint is not compatible with fingerprints generated by any other software. :return: A byte string that is a sha256 hash of selected components (based on the key type) N)r r� rU �r� r� r� r� � fingerprint� s zPrivateKey.fingerprint) r� r� r� �__doc__r� r� �propertyr� r� r� r� r� r� rX � s 0rX c @ s e Zd ZdZdd� ZdS )rY zL Container for the OS crypto library representation of a public key c C s t �| ||� dS )z� :param key_handle: A CNG BCRYPT_KEY_HANDLE value (Vista and newer) or an HCRYPTKEY (XP and 2003) from loading/importing the key :param asn1: An asn1crypto.keys.PublicKeyInfo object Nr� r� r� r� r� r� � s zPublicKey.__init__N)r� r� r� r� r� r� r� r� r� rY � s rY c @ s8 e Zd ZdZdZdZdd� Zedd� �Zedd� �Z dS ) r zM Container for the OS crypto library representation of a certificate Nc C s t �| ||� dS )z� :param key_handle: A CNG BCRYPT_KEY_HANDLE value (Vista and newer) or an HCRYPTKEY (XP and 2003) from loading/importing the certificate :param asn1: An asn1crypto.x509.Certificate object Nr� r� r� r� r� r� s zCertificate.__init__c C s$ | j du r t| jd d �| _ | j S )zh :return: The PublicKey object for the public key this certificate contains N�tbs_certificate�subject_public_key_info)r� rV r� r� r� r� r� r� s zCertificate.public_keyc C s� | j du r�d| _ | jjtddg�v r�| jd j}| jd j}|dkrJt}n8|dkrXt}n*|dkrft}n |d krtt }nt t d |���z*|| | jd j | jd � � |� d | _ W n ty� Y n0 | j S )zT :return: A boolean - if the certificate is self-signed NF�yes�maybeZsignature_algorithmZrsassa_pkcs1v15� rsassa_pssr� Zecdsaz� Unable to verify the signature of the certificate since it uses the unsupported algorithm %s Zsignature_valuer� T)� _self_signedr� � self_signed�set�signature_algo� hash_algor_ ra rQ rK �OSErrorr r& �dumpr4 )r� r� r� Z verify_funcr� r� r� r� * s8 � � zCertificate.self_signed) r� r� r� r� r� r� r� r� r� r� r� r� r� r� r s r c C s | t g d��vr"ttdt| ����| dkrN|t g d��vr�ttdt|����n�| dkr�tdk sftdkr�|d kr�ttd t|����q�|t g d ��vr�ttd t|����n*| d kr�|t g d��vr�ttdt|����tdk�r| d k�rt|�\}}td|�td|�fS t | |�S t | ||�S dS )aB Generates a public/private key pair :param algorithm: The key algorithm - "rsa", "dsa" or "ec" :param bit_size: An integer - used for "rsa" and "dsa". For "rsa" the value maye be 1024, 2048, 3072 or 4096. For "dsa" the value may be 1024, plus 2048 or 3072 if on Windows 8 or newer. :param curve: A unicode string - used for "ec" keys. Valid values include "secp256r1", "secp384r1" and "secp521r1". :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A 2-element tuple of (PublicKey, PrivateKey). The contents of each key may be saved by calling .asn1.dump(). )r� r� r� zM algorithm must be one of "rsa", "dsa", "ec", not %s r� )� � � � zX bit_size must be one of 1024, 2048, 3072, 4096, not %s r� �� r rA r� zG bit_size must be 1024, not %s )r� r� r� zZ bit_size must be one of 1024, 2048, 3072, not %s r� �� secp256r1� secp384r1� secp521r1zd curve must be one of "secp256r1", "secp384r1", "secp521r1", not %s N) r� � ValueErrorr �repr�_win_version_infor� � _pure_python_ec_generate_pairrY rX �_advapi32_generate_pair�_bcrypt_generate_pair)r� r� r� Zpub_infoZ priv_infor� r� r� rR W sF ����� rR c C s> | dkrd}nd}t td�}t�|t� tjdt� |�}t|� t|�}t|�}t�|t� tjd||�}t|� t t||�}t |�} t t| �} t ||�| d� } | dkr�t || | �\} } n~t td�}t�|t� tjdt� |�}t|� t|�}t|�}t�|t� tjd||�}t|� t ||�| d� }t||| �\} } | | fS )ao Accepts an key handle and exports it to ASN.1 :param algorithm: The key algorithm - "rsa" or "dsa" :param bit_size: An integer - only used when algorithm is "rsa" :param key_handle: The handle to export :return: A 2-element tuple of asn1crypto.keys.PrivateKeyInfo and asn1crypto.keys.PublicKeyInfo r� � RSABLOBHEADER� DSSBLOBHEADER�DWORD *r N)r' rB ZCryptExportKeyr( rC �PRIVATEKEYBLOBrD r% r r- r. r* r# � _advapi32_interpret_rsa_key_blob� PUBLICKEYBLOB� _advapi32_interpret_dsa_key_blob)r� r� r� � struct_type�out_lenr� � buffer_length�buffer_�blob_struct_pointer� blob_struct� struct_size� private_blob� public_info� private_info�public_out_len�public_buffer_length� public_buffer� public_blobr� r� r� � _advapi32_key_handle_to_asn1� sl �� ��r� c C s� | dkrt j}t j}n t j}t j}d}d}z�t|dd�}ttd�}|d> t jB }t� ||||�}t |� t |�}t | ||�\} } t | �t| �fW |r�t|� |r�t�|� S |r�t�|� n |r�t|� |r�t�|� 0 dS )a� Generates a public/private key pair using CryptoAPI :param algorithm: The key algorithm - "rsa" or "dsa" :param bit_size: An integer - used for "rsa" and "dsa". For "rsa" the value maye be 1024, 2048, 3072 or 4096. For "dsa" the value may be 1024. :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A 2-element tuple of (PublicKey, PrivateKey). The contents of each key may be saved by calling .asn1.dump(). r� NF�Z verify_only� HCRYPTKEY *� )rC �MS_ENH_RSA_AES_PROV� CALG_RSA_SIGN�MS_ENH_DSS_DH_PROV� CALG_DSS_SIGNrE r' rB ZCRYPT_EXPORTABLEZ CryptGenKeyrD r. r� rV rU rF r� ) r� r� �provider� algorithm_idr� r� �key_handle_pointer�flagsr� r� r� r� r� r� r� � s: � �r� c C s | dkrd}t j}t j}n8| dkrB|dkr0d}nd}t j}t j}nd}t j}t j}ttd�}t� |t � |t � d |d �}t |� t |�}t |�} t� |t � || ||d �}t |� tt|| �} t| �} tt| �} t| |�| d � } | dkr�td | | �}n@| dk�r(|dk�rtd d | | �}ntd d | | �}n td | | �}ttd�}t� |t � |t � d |d �}t |� t |�}t |�}t� |t � ||||d �}t |� tt||�}t|�}tt|�} t||�| d � }| dk�r�td||�}n@| dk�r |dk�r�tdd ||�}ntdd ||�}n td||�}||fS )au Accepts an key handle and exports it to ASN.1 :param algorithm: The key algorithm - "rsa", "dsa" or "ec" :param bit_size: An integer - only used when algorithm is "dsa" :param key_handle: The handle to export :return: A 2-element tuple of asn1crypto.keys.PrivateKeyInfo and asn1crypto.keys.PublicKeyInfo r� �BCRYPT_RSAKEY_BLOBr� r� �BCRYPT_DSA_KEY_BLOB_V2�BCRYPT_DSA_KEY_BLOB�BCRYPT_ECCKEY_BLOB�ULONG *r N�privater r@ �public)rM �BCRYPT_RSAFULLPRIVATE_BLOB�BCRYPT_RSAPUBLIC_BLOB�BCRYPT_DSA_PRIVATE_BLOB�BCRYPT_DSA_PUBLIC_BLOB�BCRYPT_ECCPRIVATE_BLOB�BCRYPT_ECCPUBLIC_BLOBr' rL ZBCryptExportKeyr( rD r% r r- r. r* r# � _bcrypt_interpret_rsa_key_blob� _bcrypt_interpret_dsa_key_blob� _bcrypt_interpret_ec_key_blob)r� r� r� r� Zprivate_blob_typeZpublic_blob_typeZprivate_out_lenr� Zprivate_buffer_lengthZprivate_bufferZprivate_blob_struct_pointerZprivate_blob_structr� r� r� r� r� r� Zpublic_blob_struct_pointerZpublic_blob_structr� r� r� r� r� r� 3 s� � � r� c C s� | dkrt j}n6| dkr t j}n&t jt jt jd�| }dddd�| }d}zht|�}ttd�}t� |||d �}t |� t |�}t� |d �}t |� t | ||�\}} W |r�t�|� n|r�t�|� 0 t|�t| �fS ) aL Generates a public/private key pair using CNG :param algorithm: The key algorithm - "rsa", "dsa" or "ec" :param bit_size: An integer - used for "rsa" and "dsa". For "rsa" the value maye be 1024, 2048, 3072 or 4096. For "dsa" the value may be 1024, plus 2048 or 3072 if on Windows 8 or newer. :param curve: A unicode string - used for "ec" keys. Valid values include "secp256r1", "secp384r1" and "secp521r1". :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A 2-element tuple of (PublicKey, PrivateKey). The contents of each key may be saved by calling .asn1.dump(). r� r� r� � i� r� N�BCRYPT_KEY_HANDLE *r )rM �BCRYPT_RSA_ALGORITHM�BCRYPT_DSA_ALGORITHM�BCRYPT_ECDSA_P256_ALGORITHM�BCRYPT_ECDSA_P384_ALGORITHM�BCRYPT_ECDSA_P521_ALGORITHMrN r' rL ZBCryptGenerateKeyPairrD r. ZBCryptFinalizeKeyPairr� r� rV rU ) r� r� r� � alg_constantr� � alg_handler r� r� r� r� r� r� r� � s> ���� � r� c C s� t | t�s ttdt| ����| dk r,td��| dkr<td��| d dkrPtd��d }d }�z&| d }td kr~ttj �}t |�}td kr�t � |�}n t �|||d�}t|� t|�}t|�}|d dkr�q~|d kr�|d dkr�q~n(|dk�r|d }|dk�r|dk�rq~d} tD ] } || dk�rd} �q0�q| s~t| |�r~|d } t| | �r~t||d��W |�rlt|� S q~W |�r�t|� n|�r�t|� 0 d S )a` Generates DH parameters for use with Diffie-Hellman key exchange. Returns a structure in the format of DHParameter defined in PKCS#3, which is also used by the OpenSSL dhparam tool. THIS CAN BE VERY TIME CONSUMING! :param bit_size: The integer bit size of the parameters to generate. Must be between 512 and 4096, and divisible by 64. Recommended secure value as of early 2016 is 2048, with an absolute minimum of 1024. :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: An asn1crypto.algos.DHParameters object. Use oscrypto.asymmetric.dump_dh_parameters() to save to disk for usage with web servers. z= bit_size must be an integer, not %s i z-bit_size must be greater than or equal to 512r� z+bit_size must be less than or equal to 4096�@ r z!bit_size must be a multiple of 64Nr � �winrA � re rc � rb rd FT)r� r� )� isinstancer8 � TypeErrorr r5 r� r� rN rM ZBCRYPT_RNG_ALGORITHMr �os�urandomrL ZBCryptGenRandomrD r# r � _SMALL_PRIMES� _is_primer rO ) r� r r� � byte_size�buffer�rbr� r� �remZ divisible�prime�qr� r� r� �generate_dh_parameters� sb � � �r/ c C s� d}|d }|d dkr*|d7 }|d }q | dkr8d}n6| dkrFd}n(| dkrTd}n| d krbd }n | d krnd }t |�D ]j}t�d|d �}t|||�}|dksv||d kr�qvt |d �D ] }t|d|�}||d kr� qvq� d S qvdS )u� An implementation of Miller–Rabin for checking if a number is prime. :param bit_size: An integer of the number of bits in the prime number :param n: An integer, the prime number :return: A boolean r r@ r i iR rb i� � i& rc i� r� FT)�range�random� randranger� )r� �n�r�s�kr� �a�xr� r� r� r( < s4 r( c C sZ | d }| d }|}|| }|| }|| }|| } | | } |j j} t|d|� ddd� �} t|||� ddd� �} t|||� ddd� �}t|||� ddd� �}t||| � ddd� �}t|| | � ddd� �}t|| | | � ddd� �}ttddi�t| | d��d ��}td | | || ||||d � �}tdtddi�|d ��}||fS ) a� Takes a CryptoAPI RSA private key blob and converts it into the ASN.1 structures for the public and private keys :param bit_size: The integer bit size of the key :param blob_struct: An instance of the advapi32.RSAPUBKEY struct :param blob: A byte string of the binary data after the header :return: A 2-element tuple of (asn1crypto.keys.PublicKeyInfo, asn1crypto.keys.PrivateKeyInfo) r r� r N���r� r� r� r� � two-prime� �versionr� r� �private_exponent�prime1�prime2� exponent1� exponent2� coefficient�r= r� r� ) � rsapubkey�pubexpr r r r r r r )r� r� �blob�len1�len2� prime1_offset� prime2_offset�exponent1_offset�exponent2_offset�coefficient_offset�private_exponent_offsetr� r� r? r@ rA rB rC r> �public_key_info�rsa_private_key�private_key_infor� r� r� r� j sX ��� � ��r� c C s d}| d }|}|| }|| }|}t |d|� ddd� �} t |||� ddd� �} t |||� ddd� �} t |||| � ddd� �} t |||| � ddd� �} ttdt| | | d��d��t| �d ��}tdtdt| | | d��d��t| �d ��}||fS ) a� Takes a CryptoAPI DSS private key blob and converts it into the ASN.1 structures for the public and private keys :param bit_size: The integer bit size of the key :param public_blob: A byte string of the binary data after the public key header :param private_blob: A byte string of the binary data after the private key header :return: A 2-element tuple of (asn1crypto.keys.PublicKeyInfo, asn1crypto.keys.PrivateKeyInfo) � r r Nr: r� �r� r. r� r� r� rD )r r r r r r r )r� r� r� rH rI �q_offset�g_offsetZx_offsetZy_offsetr� r. r� r9 �yrP rR r� r� r� r� � sF ��� ��� r� c C sh t t|j�}t t|j�}|}t|d|� �}t|||| � �}| dkrhttddi�t||d��d��S | dk�rRt t|j�}t t|j �} || } | | } | | } | | } | | }|| }t|| | � �}t|| | � �}t|| | � �}t|| |� �}t|||� �}t|||| � �}t d||||||||d � �}t dt ddi�|d ��S t td t| ����d S ) a� Take a CNG BCRYPT_RSAFULLPRIVATE_BLOB and converts it into an ASN.1 structure :param key_type: A unicode string of "private" or "public" :param blob_struct: An instance of BCRYPT_RSAKEY_BLOB :param blob: A byte string of the binary data contained after the struct :return: An asn1crypto.keys.PrivateKeyInfo or asn1crypto.keys.PublicKeyInfo object, based on the key_type param r r r� r� r� r� r r; r< rD �M key_type must be one of "public", "private", not %s N)r& �int� cbPublicExp� cbModulusr r r r �cbPrime1�cbPrime2r r r r� r r� )�key_typer� rG Zpublic_exponent_byte_lengthZmodulus_byte_lengthZmodulus_offsetr� r� Zprime1_byte_lengthZprime2_byte_lengthrJ rK rL rM rN rO r? r@ rA rB rC r> rQ r� r� r� r � sh ��� � �� �r c C s� t t|j�}|dkrZtt t|j��}|}|| }|| }t|d|� �} t|||� �} n�|dkr�t t|j�} t t|j�} | } | | }|| }|| }|| }t|| |� �}t|||� �} t|||� �} ntdt |� ��| dk�r"t|||� �}t t dt | || d��d��t |�d ��S | d k�rjt|||| � �}tdtdt | || d��d��t |�d ��S ttd t | ����d S )an Take a CNG BCRYPT_DSA_KEY_BLOB or BCRYPT_DSA_KEY_BLOB_V2 and converts it into an ASN.1 structure :param key_type: A unicode string of "private" or "public" :param version: An integer - 1 or 2, indicating the blob is BCRYPT_DSA_KEY_BLOB or BCRYPT_DSA_KEY_BLOB_V2 :param blob_struct: An instance of BCRYPT_DSA_KEY_BLOB or BCRYPT_DSA_KEY_BLOB_V2 :param blob: A byte string of the binary data contained after the struct :return: An asn1crypto.keys.PrivateKeyInfo or asn1crypto.keys.PublicKeyInfo object, based on the key_type param r@ r r z version must be 1 or 2, not %sr r� rT r� r� r rD rX N)r& rY �cbKeyr r7 r. � cbSeedLength� cbGroupSizer� r� r r r r r r r )r^ r= r� rG �key_byte_lengthr. rV Z public_offsetZprivate_offsetr� r� Zseed_byte_lengthZgroup_byte_lengthrU �p_offsetr r r� r� r� r C sf ��� ����r c C s� t t|j�}t t|j�}tjdtjdtjdtjdtj dtj di| }d|d|d � }| dkr�t t dt d |d �d ��|d ��S | d kr�t||d |d � �}tdtdt d |d �d ��td||d��d��S ttdt| ����dS )a� Take a CNG BCRYPT_ECCKEY_BLOB and converts it into an ASN.1 structure :param key_type: A unicode string of "private" or "public" :param blob_struct: An instance of BCRYPT_ECCKEY_BLOB :param blob: A byte string of the binary data contained after the struct :return: An asn1crypto.keys.PrivateKeyInfo or asn1crypto.keys.PublicKeyInfo object, based on the key_type param r� r� r� � r r r r� �named)�name�valuer� r� r rb Z ecPrivkeyVer1)r= r� r� rD rX N)r& rY �dwMagicr_ rM � BCRYPT_ECDSA_PRIVATE_P256_MAGIC� BCRYPT_ECDSA_PRIVATE_P384_MAGIC� BCRYPT_ECDSA_PRIVATE_P521_MAGIC� BCRYPT_ECDSA_PUBLIC_P256_MAGIC� BCRYPT_ECDSA_PUBLIC_P384_MAGIC� BCRYPT_ECDSA_PUBLIC_P521_MAGICr r r r r r r r� r r� )r^ r� rG �magicrb r� r r r� r� r� r � sX �� ��� �����r c C s� t | t�r| }nht | t�r$t| �}nTt | t�rft| d�� }t|�� �}W d � qx1 sZ0 Y nttdt | ����t |t �S )a� Loads an x509 certificate into a Certificate object :param source: A byte string of file contents or a unicode string filename :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A Certificate object r+ Nz� source must be a byte string, unicode string or asn1crypto.x509.Certificate object, not %s ) r# �Asn1Certificater7 r r6 �open�readr$ r r5 � _load_keyr )�sourceZ certificate�fr� r� r� rS � s ,�rS c C s | }t | t�r| d d }|j}d}|dkrh|j\}}|dkrJttd���|tg d��vr�ttd���nt|d kr�|jdu r�ttd ���nT|j d kr�t d k s�t d kr�ttd|j� � |j ���n |j dkr�|jdkr�ttd���t d k�r|dkr�|d| �S t | ||�S t| |||�S )a� Loads a certificate, public key or private key into a Certificate, PublicKey or PrivateKey object :param key_object: An asn1crypto.x509.Certificate, asn1crypto.keys.PublicKeyInfo or asn1crypto.keys.PrivateKeyInfo object :param container: The class of the object to hold the key_handle :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type oscrypto.errors.AsymmetricKeyError - when the key is incompatible with the OS crypto library OSError - when an error is returned by the OS crypto library :return: A PrivateKey, PublicKey or Certificate object, based on container r� r� Nr� re zR Windows only supports EC keys using named curves r� z� Windows only supports EC keys using the named curves secp256r1, secp384r1 and secp521r1 r� z� The DSA key does not contain the necessary p, q and g parameters and can not be used r� r� rA z� Windows XP, 2003, Vista, 7 and Server 2008 only support DSA keys based on SHA1 (1024 bits or less) - this key is based on %s and is %s bits r� �sha1a Windows only supports 2048 bit DSA keys based on SHA2 - this key is 2048 bits and based on SHA1, a non-standard combination that is usually generated by old versions of OpenSSL )r# rp r� r� r2 r r� r� r3 r� r� r� �upper�_advapi32_load_key�_bcrypt_load_key)� key_object� container�key_info�algo� curve_nameZ curve_typer� r� r� rs sF �� �� � rs c C sJ t |t�rdnd}|j}|dkr$d}|dks4|dkr<tj}ntj}d}d}z�t||dkd�}t|||�}t|�} t t d�} t � || t |�t � d| �} t| � t| �}||| �} || _|dk�r t|||d d �} t| �}t t d�}t � ||t | �t � d|�} t| � t|�| _| W S t�yD |�r0t �|� |�r>t|� � Y n0 dS ) ah Loads a certificate, public key or private key into a Certificate, PublicKey or PrivateKey object via CryptoAPI :param key_object: An asn1crypto.x509.Certificate, asn1crypto.keys.PublicKeyInfo or asn1crypto.keys.PrivateKeyInfo object :param key_info: An asn1crypto.keys.PublicKeyInfo or asn1crypto.keys.PrivateKeyInfo object :param container: The class of the object to hold the key_handle :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type oscrypto.errors.AsymmetricKeyError - when the key is incompatible with the OS crypto library OSError - when an error is returned by the OS crypto library :return: A PrivateKey, PublicKey or Certificate object, based on container r r r� r� Nr� r� r F)�signing)r# r r� rC r� r� rE �_advapi32_create_blobr r' rB ZCryptImportKey�lenr( rD r. r� r� � Exceptionr� rF )rz r| r{ r^ r} r r� r� rG r� r r� �outputZex_blobZ ex_bufferZex_key_handle_pointerr� r� r� rx [ s^ � � rx Tc C sB |dkrt j}nt j}|dkr6d}|r.t j}q@t j}n d}t j}ttd�}t|�}||_ t j |_ d|_ ||_ tt|�} t| �} || _| j} | d } | d } |dk�rttd �}t|�}| |_|dk�r| d j}t j|_|d j|_t|d jd | d�ddd� }�n| d j}t j|_|d j|_t|d jd | d�ddd� }|t|d jd | d�ddd� 7 }|t|d jd | d�ddd� 7 }|t|d jd | d�ddd� 7 }|t|d jd | d�ddd� 7 }|t|d jd | d�ddd� 7 }|t|d jd | d�ddd� 7 }|| _�n ttd�}t|�}| |_|dk�rrt j|_| d d j}t| d jjd | d�ddd� }n6t j|_| d d j}t| d jjd d d�ddd� }|| _t|d d | d�ddd� }|t|d d d d�ddd� 7 }|t|d d | d�ddd� 7 }||7 }ttd �}t|�}d!|_ |t |�7 }t | �| S )"a� Generates a blob for importing a key to CryptoAPI :param key_info: An asn1crypto.keys.PublicKeyInfo or asn1crypto.keys.PrivateKeyInfo object :param key_type: A unicode string of "public" or "private" :param algo: A unicode string of "rsa" or "dsa" :param signing: If the key handle is for signing - may only be False for rsa keys :return: A byte string of a blob to pass to advapi32.CryptImportKey() r r� r� r� Z BLOBHEADERr r r� Z RSAPUBKEYr� r� r� F)�signed�widthNr: r� r? r@ rA rB rC r> Z DSSPUBKEYr� r� r� rS r� r. r� ZDSSSEEDl �� ) rC r� r� r� Z CALG_RSA_KEYXr r+ rB r. ZbTypeZCUR_BLOB_VERSIONZbVersion�reservedZaiKeyAlgZpublickeystrucr� Zbitlenr� ZRSA1ro r& rF r ZRSA2rE ZDSS1ZDSS2Z dsspubkey�counterr, )r| r^ r} r � blob_typer� r Zblob_header_pointerZ blob_headerr� r� r� rH rI Zpubkey_pointerZpubkeyZparsed_key_infoZ blob_datar� Zkey_dataZdssseed_pointerZdssseedr� r� r� r� � s| " """""" " r� c + C st d}d}t |t�rdnd}|j}|dkr,d}�z0|dkrB|jd n|}tjtjtjtjtj d�| } t | �}|dk�r�|dkr�tj } tj } |d j } d } d }nztj} tj} |d j } t| d j�}t| d j�}t| d j�}t| d j�}t| d j�}t| d j�}t|�} t|�}t| d j�}t| d j�}ttd�}t|�}| |_|j|_t|�|_t|�|_| |_||_ t |�| | }|dk�r ||| 7 }|t || �7 }|t ||�7 }|t || �7 }|t |t|��7 }�n2|dk�r�|dk�rtj } |d j j}|d d }n0tj } t!|�d j}t|d j j�} |d d }t|�} t|d j�} t|d j�} t|d j�} |jd k�r�t| �}!nd }!t"t| �t| �t| ��}"t | |"�} t | |"�} t | |"�} t | |!�} d }#d |! }$|jd k�rx|dk�r�tj#} ntj$} ttd �}t|�}| |_%|"|_&tj'|_(tj)|_*|!|_+|!|_,t-|#�|_.t |�}||$| | | | 7 }|dk�r�|t | |!�7 }n�|dk�r�tj/} ntj0} ttd!�}t|�}| |_%|"|_&t-|#�|_.t-|$�|_1t-| �|_2t |�| | | }|dk�r |t | |!�7 }�n|dk�r |dk�r(tj3} |d �4� \}%}&nDtj5} |d j d }|�rP|�4� \}%}&nd }%d }&t|d j d j�} ttd"�}t|�}tj6tj7tj8tj9tj:tj;d#�||f } d$d%d&d'�| }"t|%�}'t|&�}(t |'|"�}'t |(|"�}(| |_%|"|_&t |�|' |( }|dk�r |t | |"�7 }t<td(�})t�=|t>� | |)|t|�tj?�}*t@|*� t|)�}||| �W |�r\tA|� S n|�rntA|� 0 dS ))a� Loads a certificate, public key or private key into a Certificate, PublicKey or PrivateKey object via CNG :param key_object: An asn1crypto.x509.Certificate, asn1crypto.keys.PublicKeyInfo or asn1crypto.keys.PrivateKeyInfo object :param key_info: An asn1crypto.keys.PublicKeyInfo or asn1crypto.keys.PrivateKeyInfo object :param container: The class of the object to hold the key_handle :param curve_name: None or a unicode string of the curve name for an EC key :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type oscrypto.errors.AsymmetricKeyError - when the key is incompatible with the OS crypto library OSError - when an error is returned by the OS crypto library :return: A PrivateKey, PublicKey or Certificate object, based on container Nr r r� r� r� r@ )r� r� r� r� r� r� r r� r? r@ rA rB rC r> r� r� r r� r� r� r� r� r� r. r� rS s ����� �r r r ))r r� )r r� )r r� )r r� )r r� )r r� � �0 �B r� r )Br# r r� r� rM r r r r r rN r ZBCRYPT_RSAPUBLIC_MAGICr� r ZBCRYPT_RSAFULLPRIVATE_MAGICr r& r� r+ rL r. ZMagicr� Z BitLengthrZ r[ r\ r] r, r1 r r r �maxZBCRYPT_DSA_PUBLIC_MAGIC_V2ZBCRYPT_DSA_PRIVATE_MAGIC_V2rh r_ ZDSA_HASH_ALGORITHM_SHA256Z hashAlgorithmZ DSA_FIPS186_3ZstandardVersionr` ra r" ZCountZBCRYPT_DSA_PUBLIC_MAGICZBCRYPT_DSA_PRIVATE_MAGICZSeedr. r Z to_coordsr rl rm rn ri rj rk r' ZBCryptImportKeyPairr( ZBCRYPT_NO_KEY_VALIDATIONrD rO )+rz r| r{ r~ r r� r^ r} Z alg_selectorr r� ro Z parsed_keyZ prime1_sizeZ prime2_sizer? r@ rA rB rC r> r� r� r� r� rG r� r� Z private_bytesZ public_bytesr� r� r. Zq_lenZ key_width�count�seedr9 rW Zx_bytesZy_bytesr r� r� r� r� ry sD �� �� �� � � �ry c C s� t | t�r| }n�|durHt |t�r,|�d�}t |t�sHttdt|����t | t�r�t| d��}|� � } W d � q�1 sz0 Y n t | t�s�ttdt| ����t | |�}t |t �S )a Loads a private key into a PrivateKey object :param source: A byte string of file contents, a unicode string filename or an asn1crypto.keys.PrivateKeyInfo object :param password: A byte or unicode string to decrypt the private key file. Unicode strings will be encoded using UTF-8. Not used is the source is a PrivateKeyInfo object. :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type oscrypto.errors.AsymmetricKeyError - when the private key is incompatible with the OS crypto library OSError - when an error is returned by the OS crypto library :return: A PrivateKey object N�utf-8zP password must be a byte string, not %s r+ z� source must be a byte string, unicode string or asn1crypto.keys.PrivateKeyInfo object, not %s ) r# r r6 �encoder7 r$ r r5 rq rr r rs rX )rt �passwordZprivate_objectru r� r� r� rU s( � ( � rU c C s� t | t�r| }nht | t�r$t| �}nTt | t�rft| d�� }t|�� �}W d � qx1 sZ0 Y nttdt |����t |t �S )a3 Loads a public key into a PublicKey object :param source: A byte string of file contents, a unicode string filename or an asn1crypto.keys.PublicKeyInfo object :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type oscrypto.errors.AsymmetricKeyError - when the public key is incompatible with the OS crypto library OSError - when an error is returned by the OS crypto library :return: A PublicKey object r+ Nz� source must be a byte string, unicode string or asn1crypto.keys.PublicKeyInfo object, not %s ) r# r r7 r r6 rq rr r$ r r5 rs rY )rt r� ru r� r� r� rV 9 s ,�rV c C s t | |t�S )a� Parses a PKCS#12 ANS.1 DER-encoded structure and extracts certs and keys :param data: A byte string of a DER-encoded PKCS#12 file :param password: A byte string of the password to any encrypted data :raises: ValueError - when any of the parameters are of the wrong type or value OSError - when an error is returned by one of the OS decryption functions :return: A three-element tuple of: 1. An asn1crypto.keys.PrivateKeyInfo object 2. An asn1crypto.x509.Certificate object 3. A list of zero or more asn1crypto.x509.Certificate objects that are "extra" certificates, possibly intermediates from the cert chain )r rU )�datar� r� r� r� rW a s rW c C s� |dur8t |t�r |�d�}t |t�s8ttdt|����t | t�rvt| d��}|�� } W d � q�1 sj0 Y n t | t�s�ttdt| ����t | |�\}}}d}d}|r�t |t �}|r�t |j t �}dd� |D �}|||fS )a� Loads a .p12 or .pfx file into a PrivateKey object and one or more Certificates objects :param source: A byte string of file contents or a unicode string filename :param password: A byte or unicode string to decrypt the PKCS12 file. Unicode strings will be encoded using UTF-8. :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type oscrypto.errors.AsymmetricKeyError - when a contained key is incompatible with the OS crypto library OSError - when an error is returned by the OS crypto library :return: A three-element tuple containing (PrivateKey, Certificate, [Certificate, ...]) Nr� zH password must be a byte string, not %s r+ zR source must be a byte string or a unicode string, not %s c S s g | ]}t |jt��qS r� )rs r� r )�.0�infor� r� r� � <listcomp>� � z load_pkcs12.<locals>.<listcomp>)r# r6 r� r7 r$ r r5 rq rr rW rs rX r� r ) rt r� ru r| Z cert_infoZextra_certs_info�key�certZ extra_certsr� r� r� rT z s2 � ( � rT c C s | j dkrtd��t| |||�S )a� Verifies an RSASSA-PKCS-v1.5 signature. When the hash_algorithm is "raw", the operation is identical to RSA public key decryption. That is: the data is not hashed and no ASN.1 structure with an algorithm identifier of the hash algorithm is placed in the encrypted byte string. :param certificate_or_public_key: A Certificate or PublicKey instance to verify the signature with :param signature: A byte string of the signature to verify :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384", "sha512" or "raw" :raises: oscrypto.errors.SignatureError - when the signature is determined to be invalid ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library r� �*The key specified is not an RSA public key�r� r� �_verify��certificate_or_public_key� signaturer� �hash_algorithmr� r� r� r_ � s r_ c C s0 | j }|dkr |dkr td��t| |||dd�S )a� Verifies an RSASSA-PSS signature. For the PSS padding the mask gen algorithm will be mgf1 using the same hash algorithm as the signature. The salt length with be the length of the hash algorithm, and the trailer field with be the standard 0xBC byte. :param certificate_or_public_key: A Certificate or PublicKey instance to verify the signature with :param signature: A byte string of the signature to verify :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384" or "sha512" :raises: oscrypto.errors.SignatureError - when the signature is determined to be invalid ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library r� r� r� T��rsa_pss_paddingr� )r� r� r� r� �cp_algr� r� r� ra � s ra c C s | j dkrtd��t| |||�S )a� Verifies a DSA signature :param certificate_or_public_key: A Certificate or PublicKey instance to verify the signature with :param signature: A byte string of the signature to verify :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384" or "sha512" :raises: oscrypto.errors.SignatureError - when the signature is determined to be invalid ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library r� z)The key specified is not a DSA public keyr� r� r� r� r� rQ � s rQ c C s | j dkrtd��t| |||�S )a� Verifies an ECDSA signature :param certificate_or_public_key: A Certificate or PublicKey instance to verify the signature with :param signature: A byte string of the signature to verify :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384" or "sha512" :raises: oscrypto.errors.SignatureError - when the signature is determined to be invalid ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library r� z)The key specified is not an EC public keyr� r� r� r� r� rK s rK Fc C sV t | ttf�s ttdt| ����t |t�s<ttdt|����t |t�sXttdt|����| j}|dkpl|dk}tg d��}|r�|s�|tdg�O }||vr�d}|r�|s�|d 7 }t td |t |����|s�|d ur�t td |� � ���|dk�rt |�| j d k�rt td| j t |����tdk�rF| jdk�r6t| |||�S t| ||||�S t| ||||�S )a( Verifies an RSA, DSA or ECDSA signature :param certificate_or_public_key: A Certificate or PublicKey instance to verify the signature with :param signature: A byte string of the signature to verify :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384", "sha512" or "raw" :param rsa_pss_padding: If PSS padding should be used for RSA keys :raises: oscrypto.errors.SignatureError - when the signature is determined to be invalid ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library �� certificate_or_public_key must be an instance of the Certificate or PublicKey class, not %s zA signature must be a byte string, not %s �< data must be a byte string, not %s r� r� ��md5rv �sha256�sha384�sha512�raw�+"md5", "sha1", "sha256", "sha384", "sha512"�, "raw"�B hash_algorithm must be one of %s, not %s F�u PSS padding may only be used with RSA keys - signing via a %s key was requested re z� data must be 11 bytes shorter than the key size when hash_algorithm is "raw" - key size is %s bytes, but data is %s bytes long rA r� )r# r rY r$ r r5 r7 r� r� r� r� rw r� r) r� �_pure_python_ecdsa_verify�_advapi32_verify�_bcrypt_verify) r� r� r� r� r� r� � cp_is_rsa�valid_hash_algorithms�valid_hash_algorithms_errorr� r� r� r� 5 s\ � � � � � � r� c C s� | j }|dkp|dk}|rb|rbdddddd��|d �}t| |�}| j} t||| ||�s^td ��d S |r�|d kr�t| |�} z t| j| �} t| |�s�t � �W n t y� td ��Y n0 d S d } �zt j t j t j t jt jd �| } ttd�}t�| j| t� d |�}t|� t|�} t�| |t|�d �}t|� |dk�r�z6t�|��� }t|�d }||d � |d |� }W n" t t t f�y� td ��Y n0 |d d d� }t� | |t|�| j t� d �}t|� W | �r�t� | � n| �r�t� | � 0 d S )a6 Verifies an RSA, DSA or ECDSA signature via CryptoAPI :param certificate_or_public_key: A Certificate or PublicKey instance to verify the signature with :param signature: A byte string of the signature to verify :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384", "sha512" or "raw" :param rsa_pss_padding: If PSS padding should be used for RSA keys :raises: oscrypto.errors.SignatureError - when the signature is determined to be invalid ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library r� r� rS � r� r� r �rv �sha224r� r� r� r �Signature is invalidNr� r� � HCRYPTHASH *r� r r: )!r� �getr< r� r> r4 r= r) r? r� rC �CALG_MD5� CALG_SHA1� CALG_SHA_256� CALG_SHA_384� CALG_SHA_512r' rB �CryptCreateHashr� r( rD r. � CryptHashDatar� r �load�to_p1363� OverflowErrorr$ ZCryptVerifySignatureWr� �CryptDestroyHash)r� r� r� r� r� r} � algo_is_rsa� hash_lengthZdecrypted_signatureZkey_sizeZpadded_plaintext� plaintext� hash_handle�alg_id�hash_handle_pointerr� �half_lenZreversed_signaturer� r� r� r� � s� �� �� � � �r� c C sx |dkr|}n0t jt jt jt jt jd�| }tt|�|��� }t � }d}| j } | dkp\| dk} | r�|r�t j }t t d�} t| �} t|�} tt d| �| _t|�| _n@t j}t t d�} t| �} |dkr�t � | _nt|�} tt d| �| _tt d | �}n6zt�|��� }W n" tttf�y" td ��Y n0 t � | j ||t|�|t|�|�}|t j k}|�p\|t j k}|�rltd ��t |� d S ) a0 Verifies an RSA, DSA or ECDSA signature via CNG :param certificate_or_public_key: A Certificate or PublicKey instance to verify the signature with :param signature: A byte string of the signature to verify :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384", "sha512" or "raw" :param rsa_pss_padding: If PSS padding should be used for RSA keys :raises: oscrypto.errors.SignatureError - when the signature is determined to be invalid ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library r� r� r r� r� �BCRYPT_PSS_PADDING_INFO� wchar_t *�BCRYPT_PKCS1_PADDING_INFO�void *r� N)!rM �BCRYPT_MD5_ALGORITHM�BCRYPT_SHA1_ALGORITHM�BCRYPT_SHA256_ALGORITHM�BCRYPT_SHA384_ALGORITHM�BCRYPT_SHA512_ALGORITHM�getattr�hashlib�digestr( r� �BCRYPT_PAD_PSSr+ rL r. r! r$ �pszAlgIdr� �cbSalt�BCRYPT_PAD_PKCS1r r� r� r� r� r$ r4 ZBCryptVerifySignaturer� ZSTATUS_INVALID_SIGNATUREZSTATUS_INVALID_PARAMETERrD )r� r� r� r� r� r� � hash_constant� padding_infor r� r� �padding_info_struct_pointer�padding_info_struct� hash_bufferr� Zfailurer� r� r� r� sb �� � r� c C s | j dkrtd��t| ||�S )aL Generates an RSASSA-PKCS-v1.5 signature. When the hash_algorithm is "raw", the operation is identical to RSA private key encryption. That is: the data is not hashed and no ASN.1 structure with an algorithm identifier of the hash algorithm is placed in the encrypted byte string. :param private_key: The PrivateKey to generate the signature with :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384", "sha512" or "raw" :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the signature r� �+The key specified is not an RSA private key�r� r� �_sign�r� r� r� r� r� r� r^ ^ s r^ c C s. | j }|dkr |dkr td��t| ||dd�S )a$ Generates an RSASSA-PSS signature. For the PSS padding the mask gen algorithm will be mgf1 using the same hash algorithm as the signature. The salt length with be the length of the hash algorithm, and the trailer field with be the standard 0xBC byte. :param private_key: The PrivateKey to generate the signature with :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384" or "sha512" :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the signature r� r� r� Tr� r� )r� r� r� �pkey_algr� r� r� r` s r` c C s | j dkrtd��t| ||�S )a7 Generates a DSA signature :param private_key: The PrivateKey to generate the signature with :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384" or "sha512" :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the signature r� z*The key specified is not a DSA private keyr� r� r� r� r� rP � s rP c C s | j dkrtd��t| ||�S )a: Generates an ECDSA signature :param private_key: The PrivateKey to generate the signature with :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384" or "sha512" :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the signature r� z*The key specified is not an EC private keyr� r� r� r� r� rJ � s rJ c C s2 t | t�s ttdt| ����t |t�s8ttdt|����| j}|dkpL|dk}tg d��}| jdkrv|sv|tdg�O }||vr�d}|r�|s�|d7 }ttd |t |����|s�|d ur�ttd |� � ���|dkr�t |�| j d kr�ttd | j t |����t dk�r$| jdk�rt| ||�S t| |||�S t| |||�S )a� Generates an RSA, DSA or ECDSA signature :param private_key: The PrivateKey to generate the signature with :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384", "sha512" or "raw" :param rsa_pss_padding: If PSS padding should be used for RSA keys :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the signature zO private_key must be an instance of PrivateKey, not %s r� r� r� r� r� r� r� r� Fr� re z� data must be 11 bytes shorter than the key size when hash_algorithm is "raw" - key size is %s bytes, but data is %s bytes long rA r� )r# rX r$ r r5 r7 r� r� r� r� rw r� r) r� �_pure_python_ecdsa_sign�_advapi32_sign� _bcrypt_sign)r� r� r� r� r� � pkey_is_rsar� r� r� r� r� r� � sR � � � �� r� c C s� | j }|dkp|dk}|r8|dkr8t| j|�}t| |�S |rr|rrdddddd ��|d �}t||| j|�}t| |�S | j d kr�|d kr�ttd ���d}�z6t j t j t j t j t jd�| } ttd�} t�| j| t� d | �} t| � t| �}t�||t|�d �} t| � ttd�} t�|t jt� d t� | �} t| � t| �} t| �}t�|t jt� d || �} t| � t |t| ��}|ddd� }|d k�r�t|�d }||d� |d|� }t � |�� � }|W |�r�t� |� S n|�r�t� |� 0 dS )a� Generates an RSA, DSA or ECDSA signature via CryptoAPI :param private_key: The PrivateKey to generate the signature with :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384", "sha512" or "raw" :param rsa_pss_padding: If PSS padding should be used for RSA keys :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the signature r� r� r� rS r� r� r� r r� r r� r� zO Windows does not support md5 signatures with DSA keys Nr� r� r� r: r )!r� r9 r) r; r� r: r� r� r rC r� r� r� r� r� r' rB r� r� r( rD r. r� r� ZCryptSignHashWZ AT_SIGNATUREr% r r# r � from_p1363r� r� )r� r� r� r� r} r� Z padded_datar� r� r� r� r� r� r� r� r� r� r� r� r� r� 0 s� �� ��� � �� � �r� c C s� |dkr|}n0t jt jt jt jt jd�| }tt|�|��� }t � }d}| j }|dkp\|dk} | r�|r�dddd d d�| } t j }t t d �} t| �} t|�} tt d | �| _| | _n@t j}t t d �} t| �} |dkr�t � | _nt|�} tt d | �| _tt d| �}|dk�r0| jdk�r0|tddg�v �r0ttd���tt d�}t �| j||t|�t � d||�}t |� t |�}t |�}| �r�tt d| �}t �| j||t|�||||�}t |� t |t |��}| �s�t �!|��"� }|S )a� Generates an RSA, DSA or ECDSA signature via CNG :param private_key: The PrivateKey to generate the signature with :param data: A byte string of the data the signature is for :param hash_algorithm: A unicode string of "md5", "sha1", "sha256", "sha384", "sha512" or "raw" :param rsa_pss_padding: If PSS padding should be used for RSA keys :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the signature r� r� r r� r� r� rS r� r� r r� r� r� r� r� r� r� rv z~ Windows does not support sha1 signatures with DSA keys based on sha224, sha256 or sha512 r� )#rM r� r� r� r� r� r� r� r� r( r� r� r+ rL r. r! r$ r� r� r� r� r� r� r r' ZBCryptSignHashr� r� rD r% r r# r r� r� )r� r� r� r� r� r� r� r r� r� r� r� r� r� r� r� � buffer_lenr* r� r� r� r� r� � s� ���� (� � � r� c C sx t | ttf�s ttdt| ����t |t�s<ttdt|����t |t�sXttdt|����tdkrlt | ||�S t | ||�S )aG Encrypts a value using an RSA public key :param certificate_or_public_key: A Certificate or PublicKey instance to encrypt with :param data: A byte string of the data to encrypt :param rsa_oaep_padding: If OAEP padding should be used instead of PKCS#1 v1.5 :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the ciphertext r� r� �A rsa_oaep_padding must be a bool, not %s rA ) r# r rY r$ r r5 r7 �boolr� �_advapi32_encrypt�_bcrypt_encrypt)r� r� �rsa_oaep_paddingr� r� r� �_encrypt# s$ � � � r� c C s� d}|rt j}ttdt|��}t�| jt� d|t� |d�}t|� t |�}t |�}t ||� t |t|�� t�| jt� d||||�}t|� t |t |��ddd� S )aU Encrypts a value using an RSA public key via CryptoAPI :param certificate_or_public_key: A Certificate or PublicKey instance to encrypt with :param data: A byte string of the data to encrypt :param rsa_oaep_padding: If OAEP padding should be used instead of PKCS#1 v1.5 :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the ciphertext r r� TNr: )rC � CRYPT_OAEPr' rB r� Z CryptEncryptr� r( rD r% r r/ r) r# )r� r� r� r r� r� r� r* r� r� r� r� W s: � � r� c C s� t j}|du rZt j}ttd�}t|�}tt j�}ttd|�|_ t � |_ d|_ ttd|�}nt � }t td�}t�| j|t|�|t � dt � d||� } t| � t|�} t| �} t�| j|t|�|t � d| | ||� } t| � t| t|��S )aO Encrypts a value using an RSA public key via CNG :param certificate_or_public_key: A Certificate or PublicKey instance to encrypt with :param data: A byte string of the data to encrypt :param rsa_oaep_padding: If OAEP padding should be used instead of PKCS#1 v1.5 :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the ciphertext T�BCRYPT_OAEP_PADDING_INFOr� r r� r )rM r� �BCRYPT_PAD_OAEPr+ rL r. r! r� r$ r� r( �pbLabel�cbLabelr' Z BCryptEncryptr� r� rD r% r r# ) r� r� r� r r� r� r� r� r� r� r� r* r� r� r� r� � sR � � r� c C st t | t�s ttdt| ����t |t�s8ttdt|����t |t�sTttdt|����tdkrht| ||�S t | ||�S )a1 Encrypts a value using an RSA private key :param private_key: A PrivateKey instance to decrypt with :param ciphertext: A byte string of the data to decrypt :param rsa_oaep_padding: If OAEP padding should be used instead of PKCS#1 v1.5 :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the plaintext zY private_key must be an instance of the PrivateKey class, not %s zB ciphertext must be a byte string, not %s r� rA ) r# rX r$ r r5 r7 r� r� �_advapi32_decrypt�_bcrypt_decrypt)r� � ciphertextr� r� r� r� �_decrypt� s$ � � � r� c C sb d}|rt j}|ddd� }t|�}ttdt|��}t�| jt� d|||�}t |� t |t |��S )a? Encrypts a value using an RSA private key via CryptoAPI :param private_key: A PrivateKey instance to decrypt with :param ciphertext: A byte string of the data to decrypt :param rsa_oaep_padding: If OAEP padding should be used instead of PKCS#1 v1.5 :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the plaintext r Nr: r� T) rC r� r r' rB r� Z CryptDecryptr� r( rD r# r% )r� r� r� r r* r� r� r� r� r� r� s �r� c C s� t j}|du rZt j}ttd�}t|�}tt j�}ttd|�|_ t � |_ d|_ ttd|�}nt � }t td�}t�| j|t|�|t � dt � d||� } t| � t|�} t| �} t�| j|t|�|t � d| | ||� } t| � t| t|��S )a9 Encrypts a value using an RSA private key via CNG :param private_key: A PrivateKey instance to decrypt with :param ciphertext: A byte string of the data to decrypt :param rsa_oaep_padding: If OAEP padding should be used instead of PKCS#1 v1.5 :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the plaintext Tr� r� r r� r )rM r� r� r+ rL r. r! r� r$ r� r( r� r� r' Z BCryptDecryptr� r� rD r% r r# ) r� r� r� r r� r� r� r� r� r� r� r* r� r� r� r� 6 sR � � r� c C s t | |�S )aF Encrypts a byte string using an RSA public key or certificate. Uses PKCS#1 v1.5 padding. :param certificate_or_public_key: A PublicKey or Certificate object :param data: A byte string, with a maximum length 11 bytes less than the key length (in bytes) :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the encrypted data �r� �r� r� r� r� r� r] ~ s r] c C s t | |�S )a� Decrypts a byte string using an RSA private key. Uses PKCS#1 v1.5 padding. :param private_key: A PrivateKey object :param ciphertext: A byte string of the encrypted data :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the original plaintext �r� �r� r� r� r� r� r\ � s r\ c C s t | |dd�S )aZ Encrypts a byte string using an RSA public key or certificate. Uses PKCS#1 OAEP padding with SHA1. :param certificate_or_public_key: A PublicKey or Certificate object :param data: A byte string, with a maximum length 41 bytes (or more) less than the key length (in bytes) :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the encrypted data T�r� r� r� r� r� r� r[ � s r[ c C s t | |dd�S )a� Decrypts a byte string using an RSA private key. Uses PKCS#1 OAEP padding with SHA1. :param private_key: A PrivateKey object :param ciphertext: A byte string of the encrypted data :raises: ValueError - when any of the parameters contain an invalid value TypeError - when any of the parameters are of the wrong type OSError - when an error is returned by the OS crypto library :return: A byte string of the original plaintext Tr r� r r� r� r� rZ � s rZ )NN)N)NN)T)N)N)N)F)F)F)F)F)F)F)F)F)F)F)F)�� __future__r r r r r% �sysr� r2 Z_asn1r rp r r r r r r r r r r r r r r Z _asymmetricr r r r r r r r r �_errorsr Z_ffir r! r" r# r$ r% r& r' r( r) r* r+ r, r- r. r/ � r0 �_intr1 �errorsr2 r3 r4 �_typesr5 r6 r7 r8 Z_pkcs1r9 r: r; r< r= r> �utilr? �getwindowsversionZ_gwvr� r� Z _advapi32rB rC rD rE rF Z_ecdsarG r� rH r� rI rJ r� rK r� Z_cngrL rM rN rO �__all__r' r� rX rY rR r� r� r� r� r/ r( r� r� r r r rS rs rx r� ry rU rV rW rT r_ ra rQ r� r� r� r^ r` rP r� r� r� r� r� r� r� r� r� r] r\ r[ rZ r� r� r� r� �<module> s� D, H ,WL PX 4e @d.G=U[G&PW g i 8( ="" b n Y!! X z y 4 9 H 3 + H