o j@s`ddlTddlmZmZmZmZddlmZmZm Z ddgZ dddedfddZ d ddZ dS) )*)DerNull DerSequence DerObjectIdDerOctetString)PBES1PBES2 PbesErrorwrapunwrapNc Cs|dur tt|g}ntt||g}td|t|g}|} |dur'| S|s-tdt|}|dur7d}t| ||||S)a6Wrap a private key into a PKCS#8 blob (clear or encrypted). Args: private_key (bytes): The private key encoded in binary form. The actual encoding is algorithm specific. In most cases, it is DER. key_oid (string): The object identifier (OID) of the private key to wrap. It is a dotted string, like ``'1.2.840.113549.1.1.1'`` (for RSA keys) or ``'1.2.840.10045.2.1'`` (for ECC keys). Keyword Args: passphrase (bytes or string): The secret passphrase from which the wrapping key is derived. Set it only if encryption is required. protection (string): The identifier of the algorithm to use for securely wrapping the key. Refer to :ref:`the encryption parameters` . The default value is ``'PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC'``. prot_params (dictionary): Parameters for the key derivation function (KDF). Refer to :ref:`the encryption parameters` . key_params (DER object or None): The ``parameters`` field to use in the ``AlgorithmIdentifier`` SEQUENCE. If ``None``, no ``parameters`` field will be added. By default, the ASN.1 type ``NULL`` is used. randfunc (callable): Random number generation function; it should accept a single integer N and return a string of random data, N bytes long. If not specified, a new RNG will be instantiated from :mod:`Cryptodome.Random`. Returns: bytes: The PKCS#8-wrapped private key (possibly encrypted). NrzEmpty passphrasez"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC)rrrencode ValueErrortobytesrencrypt) private_keykey_oid passphrase protection prot_params key_paramsrandfunc algorithmpk_info pk_info_derr/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/Cryptodome/IO/PKCS8.pyr 2s&5c Cs|durrt|}d}z t||}d}Wn"ty,}z dt|}WYd}~nd}~wty6d}Ynw|sjz t||}d}Wn&ty]}z|dt|7}WYd}~nd}~wtyi|d7}Ynw|srtd|tj|d d }t |d kr|std |d d krt |dvrtdn|d dkrt |dvrtdntdtj|ddd }t |d j }t |dkrd}nz t |dd}Wn|d}Yt |d j} || |fS)aNUnwrap a private key from a PKCS#8 blob (clear or encrypted). Args: p8_private_key (bytes): The private key wrapped into a PKCS#8 container, DER encoded. Keyword Args: passphrase (byte string or string): The passphrase to use to decrypt the blob (if it is encrypted). Return: A tuple containing #. the algorithm identifier of the wrapped key (OID, dotted string) #. the private key (bytes, DER encoded) #. the associated parameters (bytes, DER encoded) or ``None`` Raises: ValueError : if decoding fails NFTz PBES1[%s]zPBES1[Invalid]z ,PBES2[%s]z,PBES2[Invalid]zError decoding PKCS#8 (%s))) nr_elementsrz;Not a valid clear PKCS#8 structure (maybe it is encrypted?)r)rrz#Not a valid PrivateKeyInfo SEQUENCE)rrr)r!r)rrdecryptr strr rrdecodelenrvaluerrpayload) p8_private_keyrfounde error_strralgoalgo_oid algo_paramsrrrrr s^             )N) Cryptodome.Util.py3compatCryptodome.Util.asn1rrrrCryptodome.IO._PBESrrr __all__r r rrrrs" O