o jy@sgdZddlZddlZddlmZddlmZmZmZddl m Z m Z ddl m Z ddlmZddlmZmZmZdd lmZmZmZGd d d eZd#d dZd$ddZddZddZddZddZddZ ddZ!ddZ"d%d d!Z#e#Z$d"Z%dS)&)generate construct import_keyRsaKeyoidN)Random)tobytesbordtostr) DerSequenceDerNull) bytes_to_long)Integer)test_probable_primegenerate_probable_prime COMPOSITE)_expand_subject_public_key_info_create_subject_public_key_info _extract_subject_public_key_infoc@sVeZdZdZddZeddZeddZedd Zed d Z ed d Z eddZ eddZ eddZ eddZeddZddZddZddZddZd d!Zd"d#Zd$d%Zd&d'Zd(d)Zd*d+Zd,d-Zd.d/Zd0d1Zd2d3Z 6 5dKd7d8Zd9d:Zd;d<Z d=d>Z!d?d@Z"dAdBZ#dCdDZ$dEdFZ%dGdHZ&dIdJZ'd5S)LraClass defining an RSA key, private or public. Do not instantiate directly. Use :func:`generate`, :func:`construct` or :func:`import_key` instead. :ivar n: RSA modulus :vartype n: integer :ivar e: RSA public exponent :vartype e: integer :ivar d: RSA private exponent :vartype d: integer :ivar p: First factor of the RSA modulus :vartype p: integer :ivar q: Second factor of the RSA modulus :vartype q: integer :ivar invp: Chinese remainder component (:math:`p^{-1} \text{mod } q`) :vartype invp: integer :ivar invq: Chinese remainder component (:math:`q^{-1} \text{mod } p`) :vartype invq: integer :ivar u: Same as ``invp`` :vartype u: integer cKst|}td}|tdB}|||fvrtd|D] \}}t|d||q||krF|j|jd|_|j|jd|_ d|_ dSdS)a.Build an RSA key. :Keywords: n : integer The modulus. e : integer The public exponent. d : integer The private exponent. Only required for private keys. p : integer The first factor of the modulus. Only required for private keys. q : integer The second factor of the modulus. Only required for private keys. u : integer The CRT coefficient (inverse of p modulo q). Only required for private keys. ne)pqduzSome RSA components are missing_N) setkeys ValueErroritemssetattr_d_p_dp_q_dq_invq)selfkwargs input_set public_set private_set componentvaluer0/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/Cryptodome/PublicKey/RSA.py__init__Rs    zRsaKey.__init__cC t|jSN)int_nr)r0r0r1rq zRsaKey.ncCr3r4)r5_er7r0r0r1rur8zRsaKey.ecC|stdt|jS)Nz-No private exponent available for public keys) has_privateAttributeErrorr5r#r7r0r0r1ry zRsaKey.dcCr:)Nz.No CRT component 'p' available for public keys)r;r<r5r$r7r0r0r1rr=zRsaKey.pcCr:)Nz.No CRT component 'q' available for public keys)r;r<r5r&r7r0r0r1rr=zRsaKey.qcCr:)Nz/No CRT component 'dp' available for public keys)r;r<r5r%r7r0r0r1dpr=z RsaKey.dpcCr:)Nz/No CRT component 'dq' available for public keys)r;r<r5r'r7r0r0r1dqr=z RsaKey.dqcCs4|std|jdur|j|j|_t|jS)Nz1No CRT component 'invq' available for public keys)r;r<r(r&inverser$r5r7r0r0r1invqs   z RsaKey.invqcCs|jSr4)rr7r0r0r1invpsz RsaKey.invpcCr:)Nz.No CRT component 'u' available for public keys)r;r<r5_ur7r0r0r1rr=zRsaKey.ucCs |jS)zSize of the RSA modulus in bitsr6 size_in_bitsr7r0r0r1rEr8zRsaKey.size_in_bitscCs|jdddS)z9The minimal amount of bytes that can hold the RSA modulusrrDr7r0r0r1 size_in_bytesszRsaKey.size_in_bytescCs>d|kr|jkstdtdttt||j|jS)NrzPlaintext too large)r6r r5powrr9)r) plaintextr0r0r1_encrypts zRsaKey._encryptc Csd|kr|jkstdtd|stdtjd|jd}t|t||j|j|j}t||j|j }t||j |j }|||j |j }||j |}t ||j||j}|S)NrzCiphertext too largezThis is not a private keyr) min_inclusive max_exclusive)r6r r; TypeErrorr random_rangerHr9r%r$r'r&rC_mult_modulo_bytesr@) r) ciphertextrcpm1m2hmpresultr0r0r1_decrypt_to_bytess$ zRsaKey._decrypt_to_bytescCst||S)zLegacy private method)r rXr)rPr0r0r1_decryptszRsaKey._decryptcCs t|dS)z"Whether this is an RSA private keyr#)hasattrr7r0r0r1r;s zRsaKey.has_privatecCdSNTr0r7r0r0r1 can_encryptzRsaKey.can_encryptcCr\r]r0r7r0r0r1can_signr_zRsaKey.can_signcCst|j|jdS)z^A matching RSA public key. Returns: a new :class:`RsaKey` object r)rr6r9r7r0r0r1 public_keyszRsaKey.public_keycCsH||kr dS|j|jks|j|jkrdS|sdS|j|jkS)NFT)r;rrrr)otherr0r0r1__eq__s z RsaKey.__eq__cCs ||k Sr4r0rbr0r0r1__ne__s z RsaKey.__ne__cCsddlm}|)Nr) PicklingError)picklerf)r)rfr0r0r1 __getstate__s zRsaKey.__getstate__cCsP|rdt|jt|jt|jt|jf}nd}dt|jt|j|fS)Nz, d=%d, p=%d, q=%d, u=%dzRsaKey(n=%d, e=%d%s))r;r5r#r$r&rCr6r9)r)extrar0r0r1__repr__s zRsaKey.__repr__cCs"|rd}nd}d|t|fS)NPrivatePublicz%s RSA key at 0x%X)r;id)r)key_typer0r0r1__str__szRsaKey.__str__PEMNrc Cs|durt|}|durtj}|dkrRdd|j|jfD\}}t|dd@r,d|}t|dd@r8d|}d||g} d d d| D} d t| dd S| rt d|j |j |j |j|j|j |jd |j |jd t|j|jg } |d krd} |dkr|rtdnEddlm} |dkr|durd} | j| tdtd} n*d} |s|rtdd}| j| t|||td} d}nd} ttt |j |j gt} |dkr| S|dkrddlm}|| | ||}t|Std|)a Export this RSA key. Keyword Args: format (string): The desired output format: - ``'PEM'``. (default) Text output, according to `RFC1421`_/`RFC1423`_. - ``'DER'``. Binary output. - ``'OpenSSH'``. Text output, according to the OpenSSH specification. Only suitable for public keys (not private keys). Note that PEM contains a DER structure. passphrase (bytes or string): (*Private keys only*) The passphrase to protect the private key. pkcs (integer): (*Private keys only*) The standard to use for serializing the key: PKCS#1 or PKCS#8. With ``pkcs=1`` (*default*), the private key is encoded with a simple `PKCS#1`_ structure (``RSAPrivateKey``). The key cannot be securely encrypted. With ``pkcs=8``, the private key is encoded with a `PKCS#8`_ structure (``PrivateKeyInfo``). PKCS#8 offers the best ways to securely encrypt the key. .. note:: This parameter is ignored for a public key. For DER and PEM, the output is always an ASN.1 DER ``SubjectPublicKeyInfo`` structure. protection (string): (*For private keys only*) The encryption scheme to use for protecting the private key using the passphrase. You can only specify a value if ``pkcs=8``. For all possible protection schemes, refer to :ref:`the encryption parameters of PKCS#8`. The recommended value is ``'PBKDF2WithHMAC-SHA512AndAES256-CBC'``. If ``None`` (default), the behavior depends on :attr:`format`: - if ``format='PEM'``, the obsolete PEM encryption scheme is used. It is based on MD5 for key derivation, and 3DES for encryption. - if ``format='DER'``, the ``'PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC'`` scheme is used. prot_params (dict): (*For private keys only*) The parameters to use to derive the encryption key from the passphrase. ``'protection'`` must be also specified. For all possible values, refer to :ref:`the encryption parameters of PKCS#8`. The recommendation is to use ``{'iteration_count':21000}`` for PBKDF2, and ``{'iteration_count':131072}`` for scrypt. randfunc (callable): A function that provides random bytes. Only used for PEM encoding. The default is :func:`Cryptodome.Random.get_random_bytes`. Returns: bytes: the encoded key Raises: ValueError:when the format is unknown or when you try to encrypt a private key with *DER* format and PKCS#1. .. warning:: If you don't provide a pass phrase, the private key will be exported in the clear! .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _`PKCS#1`: http://www.ietf.org/rfc/rfc3447.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt NOpenSSHcSsg|]}|qSr0)to_bytes.0xr0r0r1 dsz%RsaKey.export_key..rsssh-rsacSs g|] }tdt||qS)>I)structpacklen)rukpr0r0r1rwjs ssh-rsa rzRSA PRIVATE KEYDERz&PKCS#1 private key cannot be encryptedPKCS8rqz PRIVATE KEY) key_paramszENCRYPTED PRIVATE KEYz"'protection' parameter must be setz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC) prot_paramsrz PUBLIC KEYrqz3Unknown key format '%s'. Cannot export the RSA key.)rrget_random_bytesr9r6r joinbinascii b2a_base64r;r rrrrrrr@encoder Cryptodome.IOrwraprr rrq)r)format passphrasepkcs protectionrandfuncre_bytesn_byteskeyparts keystring binary_keyrorrqpem_strr0r0r1 export_keys|V        zRsaKey.export_keycOs|j|i|S:meta private:)r)r)argsr*r0r0r1 exportKeyszRsaKey.exportKeycCs|Sr)rar7r0r0r1 publickeyzRsaKey.publickeycCtdrz0Use module Cryptodome.Signature.pkcs1_15 insteadNotImplementedError)r)MKr0r0r1signrz RsaKey.signcCrrr)r)r signaturer0r0r1verifyrz RsaKey.verifycCrrz/Use module Cryptodome.Cipher.PKCS1_OAEP insteadr)r)rIrr0r0r1encryptrzRsaKey.encryptcCrrrrYr0r0r1decryptrzRsaKey.decryptcCtrrr)rBr0r0r1blindz RsaKey.blindcCrrrrr0r0r1unblindrzRsaKey.unblindcCrrrr7r0r0r1sizerz RsaKey.size)rqNrNNN)(__name__ __module__ __qualname____doc__r2propertyrrrrrr>r?rArBrrErGrJrXrZr;r^r`rardrerhrkrprrrrrrrrrrr0r0r0r1r4sd             rc sv|dkrtdddksdkrtd|durtj}td}}t||kr|d|d>kr|d}||}tdd|d>||kr[tdd|d>fd d }t|||d td|dd >fd d}t|||d } | }d| d} | }||kr|d|d>ks5| kr| } | } t ||| | dS)aFCreate a new RSA key pair. The algorithm closely follows NIST `FIPS 186-4`_ in its sections B.3.1 and B.3.3. The modulus is the product of two non-strong probable primes. Each prime passes a suitable number of Miller-Rabin tests with random bases and a single Lucas test. Args: bits (integer): Key length, or size (in bits) of the RSA modulus. It must be at least 1024, but **2048 is recommended.** The FIPS standard only defines 1024, 2048 and 3072. Keyword Args: randfunc (callable): Function that returns random bytes. The default is :func:`Cryptodome.Random.get_random_bytes`. e (integer): Public RSA exponent. It must be an odd positive integer. It is typically a small number with very few ones in its binary representation. The FIPS standard requires the public exponent to be at least 65537 (the default). Returns: an RSA key object (:class:`RsaKey`, with private key). .. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf iz"RSA modulus length must be >= 1024rzBRSA public exponent must be a positive, odd integer larger than 2.Nrcs|ko |ddkSNr)gcd candidate)rmin_pr0r1filter_pszgenerate..filter_p) exact_bitsr prime_filterdcs*|ko|ddkot|kSr)rabsr)r min_distancemin_qrr0r1filter_qs zgenerate..filter_qrrrrrr) r rrrrEsqrtrlcmr@r) bitsrrrrsize_qsize_prrrrrr0)rrrrrr1rsB  !  rTcCsGdddt}|}td|D] \}}t||t|q|j}|j}t|ds/t||d}n|j} t|dr>|j } |j } nt| |d} | } | dd krV| d} | dd ksLd }td}|s|d krt| }|| krt |||}|dkr||dkrt |d|dkrt| |d} d }n|d9}|| ksj|d7}|s|d ksb|st d || d ksJ|| } t|dr|j}n| | }t||| | | |d}|rq|dks||krt dt| |dkrt d|d@st d|rq| dks| |krt dt| | dkr t d| | |krt dt| tkr#t dt| tkr.t d| d| d}|| d | d}|| t|dkrPt dt|drq|dks`|| krdt d| || dkrqt d|S)a3Construct an RSA key from a tuple of valid RSA components. The modulus **n** must be the product of two primes. The public exponent **e** must be odd and larger than 1. In case of a private key, the following equations must apply: .. math:: \begin{align} p*q &= n \\ e*d &\equiv 1 ( \text{mod lcm} [(p-1)(q-1)]) \\ p*u &\equiv 1 ( \text{mod } q) \end{align} Args: rsa_components (tuple): A tuple of integers, with at least 2 and no more than 6 items. The items come in the following order: 1. RSA modulus *n*. 2. Public exponent *e*. 3. Private exponent *d*. Only required if the key is private. 4. First factor of *n* (*p*). Optional, but the other factor *q* must also be present. 5. Second factor of *n* (*q*). Optional. 6. CRT coefficient *q*, that is :math:`p^{-1} \text{mod }q`. Optional. Keyword Args: consistency_check (boolean): If ``True``, the library will verify that the provided components fulfil the main RSA properties. Raises: ValueError: when the key being imported fails the most basic RSA validity checks. Returns: An RSA key object (:class:`RsaKey`). c@s eZdZdS)zconstruct..InputCompsN)rrrr0r0r0r1 InputCompsDsrrrrrrrrFrTz2Unable to compute factors p and q from exponent d.rzInvalid RSA public exponentz-RSA public exponent is not coprime to moduluszRSA modulus is not oddzInvalid RSA private exponentz.RSA private exponent is not coprime to modulusz RSA factors do not match moduluszRSA factor p is compositezRSA factor q is compositezInvalid RSA conditionzInvalid RSA component uzInvalid RSA component u with p)objectzipr"rrrr[rrrrrHrr rr@r;rrr5)rsa_componentsconsistency_checkr input_compscompr/rrkeyrrrktottspottedakcandrphirr0r0r1rs)       $     rcGsNtj|ddd}|ddkrtdt|ddt|d|d gS) N T nr_elementsonly_ints_expectedrz(No PKCS#1 encoding of an RSA private keyr)r decoder rrr@encodedr*derr0r0r1_import_pkcs1_privates (rcGstj|ddd}t|S)NrTr)r rrrr0r0r1_import_pkcs1_publicsrcGs6tdf}t|\}}}||vs|durtdt|S)N1.2.840.113549.1.1.10zNo RSA subjectPublicKeyInfo)rrr r)rr*oidsalgoid encoded_keyparamsr0r0r1_import_subjectPublicKeyInfos rcGst|}t|Sr4)rr)rr*sp_infor0r0r1_import_x509_certsrcCsBddlm}tdf}|||}|d|vrtdt|d|S)NrrrzNo PKCS#8 encoded RSA keyr)rrrunwrapr _import_keyDER)rrrrrr0r0r1 _import_pkcs8s   rc CsBtttttf}|D]}z|||WStyYq wtd)z@Import an RSA key (public or private half), encoded in DER form.RSA key format is not supported)rrrrrr ) extern_keyr decodingsdecodingr0r0r1rs rcCsddlm}m}m}m}|||\}}|dkrtd||\}}||\} }||\} }||\} }||\} }||\} }||\}}||dd|| | | | | fD}t|S)Nr)import_openssh_private_generic read_bytes read_string check_paddingzssh-rsazThis SSH key is not RSAcSsg|]}t|qSr0)r from_bytesrtr0r0r1rw sz/_import_openssh_private_rsa..)_opensshrrrrr r)datapasswordrrrrssh_name decryptedrrriqmprrrpaddedbuildr0r0r1_import_openssh_private_rsas       rcCsVddlm}t|}|durt|}|dr+t|}|||\}}}t||}|S|drD|t||\}}}|r?d}t||S|drt | dd} g} t | d krt d | dd d} | | d d | | d | d} t | d ks[t| d} t| d } t| | gSt |dkrt|dd krt||Std )aImport an RSA key (public or private). Args: extern_key (string or byte string): The RSA key to import. The following formats are supported for an RSA **public key**: - X.509 certificate (binary or PEM format) - X.509 ``subjectPublicKeyInfo`` DER SEQUENCE (binary or PEM encoding) - `PKCS#1`_ ``RSAPublicKey`` DER SEQUENCE (binary or PEM encoding) - An OpenSSH line (e.g. the content of ``~/.ssh/id_ecdsa``, ASCII) The following formats are supported for an RSA **private key**: - PKCS#1 ``RSAPrivateKey`` DER SEQUENCE (binary or PEM encoding) - `PKCS#8`_ ``PrivateKeyInfo`` or ``EncryptedPrivateKeyInfo`` DER SEQUENCE (binary or PEM encoding) - OpenSSH (text format, introduced in `OpenSSH 6.5`_) For details about the PEM encoding, see `RFC1421`_/`RFC1423`_. passphrase (string or byte string): For private keys only, the pass phrase that encrypts the key. Returns: An RSA key object (:class:`RsaKey`). Raises: ValueError/IndexError/TypeError: When the given key cannot be parsed (possibly because the pass phrase is wrong). .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _`PKCS#1`: http://www.ietf.org/rfc/rfc3447.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt .. _`OpenSSH 6.5`: https://flak.tedunangst.com/post/new-openssh-key-format-and-bcrypt-pbkdf rrNs-----BEGIN OPENSSH PRIVATE KEYs-----r rrr{r0r)rrqr startswithr rrrr a2b_base64splitr~r|unpackappendrrrr r )rrrq text_encodedopenssh_encodedmarkerenc_flagrWrrrlengthrrr0r0r1r s8 )         rz1.2.840.113549.1.1.1)Nr)Tr4)&__all__rr| CryptodomerCryptodome.Util.py3compatrr r Cryptodome.Util.asn1r r Cryptodome.Util.numberr Cryptodome.Math.NumbersrCryptodome.Math.PrimalityrrrCryptodome.PublicKeyrrrrrrrrrrrrrrr importKeyrr0r0r0r1s6     R    P