o jm@sddlZddlmZmZmZddlmZmZgdZdddZ Gdd d e Z Gd d d e Z Gd d d e Z Gddde ZGddde ZGddde ZGddde ZGddde ZGddde ZGddde ZdS)N) byte_stringbchrbord) long_to_bytes bytes_to_long) DerObject DerInteger DerBooleanDerOctetStringDerNull DerSequence DerObjectId DerBitStringDerSetOfFcCs4d}z||}Wn tyYdSw| p|dkS)NrF) TypeError)xonly_non_negativetestr/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/Cryptodome/Util/asn1.py _is_number(s  rc@s@eZdZdZddZddZddZdd Zd d Zd d Z dS) BytesIO_EOFzeThis class differs from BytesIO in that a ValueError exception is raised whenever EOF is reached.cCs||_d|_d|_dSNr)_buffer_index _bookmark)self initial_bytesrrr__init__5s zBytesIO_EOF.__init__cCs |j|_dSN)rrrrrr set_bookmark: zBytesIO_EOF.set_bookmarkcCs |jdusJ|j|j|jSr)rrrr rrrdata_since_bookmark=szBytesIO_EOF.data_since_bookmarkcCst|j|jSr)lenrrr rrrremaining_dataAzBytesIO_EOF.remaining_datacCsH|j|}|t|jkrtd|t|jf|j|j|}||_|S)Nz@Not enough data for DER decoding: expected %d bytes and found %d)rr$r ValueError)rlength new_indexresultrrrreadDs zBytesIO_EOF.readcCst|ddS)Nr)rr+r rrr read_byteMzBytesIO_EOF.read_byteN) __name__ __module__ __qualname____doc__rr!r#r%r+r-rrrrr1s rc@sTeZdZdZ  dddZddZed d Zd d Zd dZ dddZ ddZ dS)rzpBase class for defining a single DER object. This class should never be directly instantiated. NFcCs|dur d|_dS||}||_|rdnd}d||fvr!td|dur1d|B||B|_dS|durDd||B|_||B|_dS||B|_dS)aInitialize the DER object according to a specific ASN.1 type. :Parameters: asn1Id : integer or byte The universal DER tag number for this object (e.g. 0x10 for a SEQUENCE). If None, the tag is not known yet. payload : byte string The initial payload of the object (that it, the content octets). If not specified, the payload is empty. implicit : integer or byte The IMPLICIT tag number (< 0x1F) to use for the encoded object. It overrides the universal tag *asn1Id*. It cannot be combined with the ``explicit`` parameter. By default, there is no IMPLICIT tag. constructed : bool True when the ASN.1 type is *constructed*. False when it is *primitive* (default). explicit : integer or byte The EXPLICIT tag number (< 0x1F) to use for the encoded object. It cannot be combined with the ``implicit`` parameter. By default, there is no EXPLICIT tag. N rz1Explicit and implicit tags are mutually exclusive) _tag_octet _convertTagpayloadr'_inner_tag_octet)rasn1Idr9implicit constructedexplicitconstructed_bitrrrrWs   zDerObject.__init__cCsPt|st|dkrt|d}t|r"d|kr!dks&tdtd|S)zCheck if *tag* is a real DER tag (5 bits). Convert it from a character to number if necessary. r,rz Wrong DER tag)rr$rr')rtagrrrr8s  zDerObject._convertTagcCs,|dkrt|}tt|d|St|S)zXBuild length octets according to BER/DER definite form. r5)rrr$)r(encodingrrr_definite_formszDerObject._definite_formcCsL|j}t|drt|j|t|j|j}t|j|t||S)z?Return this DER element, fully encoded as a binary byte string.r:)r9hasattrrr:rDr$r7)routput_payloadrrrencodes  zDerObject.encodecCsR|}|dkr'||d@}t|ddkrtdt|}|dkr'td|S)z%Decode DER length octets from a file.rBrz$Invalid DER: length has leading zeroz5Invalid DER: length in long form but smaller than 128)r-r+rr'r)rsr(encoded_lengthrrr _decodeLenszDerObject._decodeLencCs<t|stdt|}||||dkrtd|S)aDecode a complete DER element, and re-initializes this object with it. Args: der_encoded (byte string): A complete DER element. Raises: ValueError: in case of parsing errors. zInput is not a byte stringr-Unexpected extra data after the DER structure)rr'r_decodeFromStreamr%)r der_encodedstrictrHrrrdecodes   zDerObject.decodecCs|}|jdur||jkrtdn||_||}|||_t|drMt|j}|}||jkr8td||}|||_| dkrOtddSdS)z*Decode a complete DER element from a file.NzUnexpected DER tagr:zUnexpected internal DER tagrrK) r-r7r'rJr+r9rErr:r%)rrHrNidOctetr(p inner_octetrrrrLs&           zDerObject._decodeFromStream)Nr3NFNF) r/r0r1r2rr8 staticmethodrDrGrJrOrLrrrrrQs F    rc@4eZdZdZd ddZddZdd d Zd d ZdS)raClass to model a DER INTEGER. An example of encoding is:: >>> from Cryptodome.Util.asn1 import DerInteger >>> from binascii import hexlify, unhexlify >>> int_der = DerInteger(9) >>> print hexlify(int_der.encode()) which will show ``020109``, the DER encoding of 9. And for decoding:: >>> s = unhexlify(b'020109') >>> try: >>> int_der = DerInteger() >>> int_der.decode(s) >>> print int_der.value >>> except ValueError: >>> print "Not a valid DER INTEGER" the output will be ``9``. :ivar value: The integer value :vartype value: integer rNcCt|dd|d|||_dS)aUInitialize the DER object as an INTEGER. :Parameters: value : integer The value of the integer. implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for INTEGER (2). r3FNrrvaluerrYr<r>rrrr#s  zDerInteger.__init__cCs||j}d|_ tt|d@|j|_d|krdkr'nntd|j|_d|kr1dkr4nnn|dL}qt|S)zIReturn the DER INTEGER, fully encoded as a binary string.r3Tr5ri)rYr9rintrrG)rnumberrrrrG3s zDerInteger.encodeFcCstj|||dS)aDecode a DER-encoded INTEGER, and re-initializes this object with it. Args: der_encoded (byte string): A complete INTEGER DER element. Raises: ValueError: in case of parsing errors. rNrrOrrMrNrrrrOBs zDerInteger.decodecCst||||r.t|jdkrtdt|jdkr.td|jddddkr.tdd|_d}|jD]}|jd 9_|jt|7_|d K}q6|jrbt|jdd@rd|j|8_dSdSdS) z*Decode a complete DER INTEGER from a file.rz/Invalid encoding for DER INTEGER: empty payloadrWz>HNr5z.Invalid encoding for DER INTEGER: leading zeror,r\) rrLr$r9r'structunpackrYr)rrHrNbitsirrrrLOs,  zDerInteger._decodeFromStream)rNNrSr/r0r1r2rrGrOrLrrrrrs    rc@s4eZdZdZd ddZddZd dd Zd d ZdS)r aVClass to model a DER-encoded BOOLEAN. An example of encoding is:: >>> from Cryptodome.Util.asn1 import DerBoolean >>> bool_der = DerBoolean(True) >>> print(bool_der.encode().hex()) which will show ``0101ff``, the DER encoding of True. And for decoding:: >>> s = bytes.fromhex('0101ff') >>> try: >>> bool_der = DerBoolean() >>> bool_der.decode(s) >>> print(bool_der.value) >>> except ValueError: >>> print "Not a valid DER BOOLEAN" the output will be ``True``. :ivar value: The boolean value :vartype value: boolean FNcCrV)aInitialize the DER object as a BOOLEAN. Args: value (boolean): The value of the boolean. Default is False. implicit (integer or byte): The IMPLICIT tag number (< 0x1F) to use for the encoded object. It overrides the universal tag for BOOLEAN (1). It cannot be combined with the ``explicit`` parameter. By default, there is no IMPLICIT tag. explicit (integer or byte): The EXPLICIT tag number (< 0x1F) to use for the encoded object. It cannot be combined with the ``implicit`` parameter. By default, there is no EXPLICIT tag. r,r3FNrXrZrrrrs zDerBoolean.__init__cCs|jrdnd|_t|S)z9Return the DER BOOLEAN, fully encoded as a binary string.rYr9rrGr rrrrGs zDerBoolean.encodecCt|||S)zDecode a DER-encoded BOOLEAN, and re-initializes this object with it. Args: der_encoded (byte string): A DER-encoded BOOLEAN. Raises: ValueError: in case of parsing errors. r`rarrrrOs zDerBoolean.decodecCsdt|||t|jdkrtdt|jddkr d|_dSt|jddkr.d|_dStd) z)Decode a DER-encoded BOOLEAN from a file.r,z7Invalid encoding for DER BOOLEAN: payload is not 1 byterFr[TzInvalid payload for DER BOOLEANN)rrLr$r9r'rrYrrHrNrrrrLs  zDerBoolean._decodeFromStream)FNNrSrgrrrrr fs    r c@seZdZdZd%ddZddZddZd d Zd d Zd dZ ddZ ddZ ddZ ddZ ddZd&ddZd&ddZddZd'd!d"Zd#d$ZdS)(r aClass to model a DER SEQUENCE. This object behaves like a dynamic Python sequence. Sub-elements that are INTEGERs behave like Python integers. Any other sub-element is a binary string encoded as a complete DER sub-element (TLV). An example of encoding is: >>> from Cryptodome.Util.asn1 import DerSequence, DerInteger >>> from binascii import hexlify, unhexlify >>> obj_der = unhexlify('070102') >>> seq_der = DerSequence([4]) >>> seq_der.append(9) >>> seq_der.append(obj_der.encode()) >>> print hexlify(seq_der.encode()) which will show ``3009020104020109070102``, the DER encoding of the sequence containing ``4``, ``9``, and the object with payload ``02``. For decoding: >>> s = unhexlify(b'3009020104020109070102') >>> try: >>> seq_der = DerSequence() >>> seq_der.decode(s) >>> print len(seq_der) >>> print seq_der[0] >>> print seq_der[:] >>> except ValueError: >>> print "Not a valid DER SEQUENCE" the output will be:: 3 4 [4, 9, b''] NcCs0t|dd|d||durg|_dS||_dS)aCInitialize the DER object as a SEQUENCE. :Parameters: startSeq : Python sequence A sequence whose element are either integers or other DER objects. implicit : integer or byte The IMPLICIT tag number (< 0x1F) to use for the encoded object. It overrides the universal tag for SEQUENCE (16). It cannot be combined with the ``explicit`` parameter. By default, there is no IMPLICIT tag. explicit : integer or byte The EXPLICIT tag number (< 0x1F) to use for the encoded object. It cannot be combined with the ``implicit`` parameter. By default, there is no EXPLICIT tag. r3TN)rr_seq)rstartSeqr<r>rrrrs  zDerSequence.__init__cCs |j|=dSrrnrnrrr __delitem__r"zDerSequence.__delitem__cC |j|Srrprqrrr __getitem__ zDerSequence.__getitem__cCs||j|<dSrrp)rkeyrYrrr __setitem__szDerSequence.__setitem__cCs||j||<dSrrp)rrfjsequencerrr __setslice__ r.zDerSequence.__setslice__cCs|j||=dSrrprrfryrrr __delslice__ r&zDerSequence.__delslice__cCs|jtd|td|Sr)rnmaxr|rrr __getslice__szDerSequence.__getslice__cC t|jSrr$rnr rrr__len__rvzDerSequence.__len__cC|j||Srrnappendritemrrr__iadd__ zDerSequence.__iadd__cCrrrrrrrrrzDerSequence.appendcCs|j|||Sr)rninsert)rindexrrrrrszDerSequence.insertTcsfdd|jD}t|S)zReturn the number of items in this sequence that are integers. Args: only_non_negative (boolean): If ``True``, negative integers are not counted in. csg|] }t|r|qSr)r.0rrrr *sz'DerSequence.hasInts..)rnr$)rritemsrrrhasInts!s zDerSequence.hasIntscCs|jo ||t|jkS)aReturn ``True`` if all items in this sequence are integers or non-negative integers. This function returns False is the sequence is empty, or at least one member is not an integer. Args: only_non_negative (boolean): If ``True``, the presence of negative integers causes the method to return ``False``.)rnrr$)rrrrr hasOnlyInts-s zDerSequence.hasOnlyIntscCsfd|_|jD]'}t|r|j|7_qt|r$|jt|7_q|j|7_qt|S)zReturn this DER SEQUENCE, fully encoded as a binary string. Raises: ValueError: if some elements in the sequence are neither integers nor byte strings. r3)r9rnrrrrGrrrrrrG:s  zDerSequence.encodeFcCs.||_tj|||d}|r|std|S)a9Decode a complete DER SEQUENCE, and re-initializes this object with it. Args: der_encoded (byte string): A complete SEQUENCE DER element. nr_elements (None or integer or list of integers): The number of members the SEQUENCE can have only_ints_expected (boolean): Whether the SEQUENCE is expected to contain only integers. strict (boolean): Whether decoding must check for strict DER compliancy. Raises: ValueError: in case of parsing errors. DER INTEGERs are decoded into Python integers. Any other DER element is not decoded. Its validity is not checked. r_zSome members are not INTEGERs) _nr_elementsrrOrr')rrMrN nr_elementsonly_ints_expectedr*rrrrOLs  zDerSequence.decodecCsg|_t|||t|j}|dkrK|t}||||jdkr0|j| nt }| }|j ||d|j|j |dksd}|j durnz t|j|j v}Wntymt|j|j k}Ynw|sytdt|jdS)z+Decode a complete DER SEQUENCE from a file.rrWr_TNz1Unexpected number of members (%d) in the sequence)rnrrLrr9r%r!r7rr#rrOrYrr$rr')rrHrNrQderderIntdataokrrrrLis4       zDerSequence._decodeFromStream)NNN)T)FNF)r/r0r1r2rrsrurxr{r}rrrrrrrrGrOrLrrrrr s$ *    r c@seZdZdZdddZdS)r aClass to model a DER OCTET STRING. An example of encoding is: >>> from Cryptodome.Util.asn1 import DerOctetString >>> from binascii import hexlify, unhexlify >>> os_der = DerOctetString(b'\xaa') >>> os_der.payload += b'\xbb' >>> print hexlify(os_der.encode()) which will show ``0402aabb``, the DER encoding for the byte string ``b'\xAA\xBB'``. For decoding: >>> s = unhexlify(b'0402aabb') >>> try: >>> os_der = DerOctetString() >>> os_der.decode(s) >>> print hexlify(os_der.payload) >>> except ValueError: >>> print "Not a valid DER OCTET STRING" the output will be ``aabb``. :ivar payload: The content of the string :vartype payload: byte string r3NcCst|d||ddS)ahInitialize the DER object as an OCTET STRING. :Parameters: value : byte string The initial payload of the object. If not specified, the payload is empty. implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for OCTET STRING (4). FNrr)rrYr<rrrrs zDerOctetString.__init__)r3Nr/r0r1r2rrrrrr sr c@seZdZdZddZdS)r z"Class to model a DER NULL element.cCst|dddddS)z$Initialize the DER object as a NULL.r3NFrr rrrrszDerNull.__init__Nrrrrrr s r c@rU)r a,Class to model a DER OBJECT ID. An example of encoding is: >>> from Cryptodome.Util.asn1 import DerObjectId >>> from binascii import hexlify, unhexlify >>> oid_der = DerObjectId("1.2") >>> oid_der.value += ".840.113549.1.1.1" >>> print hexlify(oid_der.encode()) which will show ``06092a864886f70d010101``, the DER encoding for the RSA Object Identifier ``1.2.840.113549.1.1.1``. For decoding: >>> s = unhexlify(b'06092a864886f70d010101') >>> try: >>> oid_der = DerObjectId() >>> oid_der.decode(s) >>> print oid_der.value >>> except ValueError: >>> print "Not a valid DER OBJECT ID" the output will be ``1.2.840.113549.1.1.1``. :ivar value: The Object ID (OID), a dot separated list of integers :vartype value: string NcCrV)aInitialize the DER object as an OBJECT ID. :Parameters: value : string The initial Object Identifier (e.g. "1.2.0.0.6.2"). implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for OBJECT ID (6). explicit : integer The EXPLICIT tag to use for the encoded object. r3FNrXrZrrrrs zDerObjectId.__init__cCsdd|jdD}t|dkrtd|ddkrtd|ddkr/|dd kr/td d |d|dg|dd }g}t|D]}||d @|dL}|rd||d @dB|dL}|sUqFdddt|D|_t |S)zCReturn the DER OBJECT ID, fully encoded as a binary string.cSg|]}t|qSr)r]rrrrrz&DerObjectId.encode...rWz$Not a valid Object Identifier stringrz!First component must be 0, 1 or 2r,'z#Second component must be 39 at most(NrBr5r3cSrr)rrrrrrr) rYsplitr$r'reversedrjoinr9rrG)rcompssubcompsrCvrrrrGs&  "  zDerObjectId.encodeFcCrk)abDecode a complete DER OBJECT ID, and re-initializes this object with it. Args: der_encoded (byte string): A complete DER OBJECT ID. strict (boolean): Whether decoding must check for strict DER compliancy. Raises: ValueError: in case of parsing errors. r`rarrrrO szDerObjectId.decodecCst|||t|j}g}d}|r/|}|d>|d@}|d@s+||d}|st|dkr9td|ddkrJd|dg|dd<n|dd kr]d|ddg|dd<n d |dd g|dd<d d d |D|_ dS)z,Decode a complete DER OBJECT ID from a file.rrrBr5z Empty payloadrNr,PrWrcSrr)strrrrrr7rz1DerObjectId._decodeFromStream..) rrLrr9r%r-rr$r'rrY)rrHrNrQrrcrrrrLs&     zDerObjectId._decodeFromStream)rNNrSrgrrrrr s    r c@rU)raClass to model a DER BIT STRING. An example of encoding is: >>> from Cryptodome.Util.asn1 import DerBitString >>> bs_der = DerBitString(b'\xAA') >>> bs_der.value += b'\xBB' >>> print(bs_der.encode().hex()) which will show ``030300aabb``, the DER encoding for the bit string ``b'\xAA\xBB'``. For decoding: >>> s = bytes.fromhex('030300aabb') >>> try: >>> bs_der = DerBitString() >>> bs_der.decode(s) >>> print(bs_der.value.hex()) >>> except ValueError: >>> print "Not a valid DER BIT STRING" the output will be ``aabb``. :ivar value: The content of the string :vartype value: byte string r3NcCs6t|dd|d|t|tr||_dS||_dS)aInitialize the DER object as a BIT STRING. :Parameters: value : byte string or DER object The initial, packed bit string. If not specified, the bit string is empty. implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for BIT STRING (3). explicit : integer The EXPLICIT tag to use for the encoded object. r3FN)rr isinstancerGrYrZrrrrWs  zDerBitString.__init__cCsd|j|_t|S)zBReturn the DER BIT STRING, fully encoded as a byte string.rirjr rrrrGls  zDerBitString.encodeFcCrk)aTDecode a complete DER BIT STRING, and re-initializes this object with it. Args: der_encoded (byte string): a complete DER BIT STRING. strict (boolean): Whether decoding must check for strict DER compliancy. Raises: ValueError: in case of parsing errors. r`rarrrrOts zDerBitString.decodecCsRt||||jrt|jddkrtdd|_|jr'|jdd|_dSdS)z1Decode a complete DER BIT STRING DER from a file.rzNot a valid BIT STRINGr3r,N)rrLr9rr'rYrlrrrrLszDerBitString._decodeFromStream)r3NNrSrgrrrrr:s    rc@sTeZdZdZdddZddZddZd d Zd d ZdddZ ddZ ddZ dS)raClass to model a DER SET OF. An example of encoding is: >>> from Cryptodome.Util.asn1 import DerBitString >>> from binascii import hexlify, unhexlify >>> so_der = DerSetOf([4,5]) >>> so_der.add(6) >>> print hexlify(so_der.encode()) which will show ``3109020104020105020106``, the DER encoding of a SET OF with items 4,5, and 6. For decoding: >>> s = unhexlify(b'3109020104020105020106') >>> try: >>> so_der = DerSetOf() >>> so_der.decode(s) >>> print [x for x in so_der] >>> except ValueError: >>> print "Not a valid DER SET OF" the output will be ``[4, 5, 6]``. NcCs>t|dd|dg|_d|_|r|D] }||qdSdS)a9Initialize the DER object as a SET OF. :Parameters: startSet : container The initial set of integers or DER encoded objects. implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for SET OF (17). r3TN)rrrn _elemOctetadd)rstartSetr<errrrs  zDerSetOf.__init__cCrtrrprqrrrrurvzDerSetOf.__getitem__cCrr)iterrnr rrr__iter__rvzDerSetOf.__iter__cCrrrr rrrrrvzDerSetOf.__len__cCslt|rd}nt|tr|j}nt|d}|j|kr'|jdur$td||_||jvr4|j|dSdS)zAdd an element to the set. Args: elem (byte string or integer): An element of the same type of objects already in the set. It can be an integer or a DER encoded object. rWrNz&New element does not belong to the set) rrrr7rrr'rnr)relemeorrrrs      z DerSetOf.addFcCrk)aDecode a complete SET OF DER element, and re-initializes this object with it. DER INTEGERs are decoded into Python integers. Any other DER element is left undecoded; its validity is not checked. Args: der_encoded (byte string): a complete DER BIT SET OF. strict (boolean): Whether decoding must check for strict DER compliancy. Raises: ValueError: in case of parsing errors. r`rarrrrOszDerSetOf.decodecCsg|_t|||t|j}d}|dkr\|t}||||dkr,|j}n ||jkr5td|dkrB|j | nt }| | ||j |j |dksdSdS)z)Decode a complete DER SET OF from a file.rz)Not all elements are of the same DER typerWN)rnrrLrr9r%r!r7r'rr#rrOrY)rrHrNrQ setIdOctetrrrrrrLs$    zDerSetOf._decodeFromStreamcCsfg}|jD]}t|rt|}n t|tr|}n|}||q|d||_ t|S)zRReturn this SET OF DER element, fully encoded as a binary string. r3) rnrrrGrrrsortrr9)rorderedrbysrrrrGs      zDerSetOf.encode)NNrS) r/r0r1r2rrurrrrOrLrGrrrrrs   !rrS)rcCryptodome.Util.py3compatrrrCryptodome.Util.numberrr__all__robjectrrrr r r r r rrrrrrs"   7_SV- vY