o j@sddgZddlZddlmZmZmZmZddlmZddl m Z m Z ddl m Z mZmZddlmZdd lmZdd lmZmZdd dZd d ZdddZdS)encodedecodeN) a2b_base64 b2a_base64hexlify unhexlify)MD5)padunpad)DESDES3AES)PBKDF1)get_random_bytes)tobytestostrc s|durt}d|}|rB|d}t||ddt}|t|||ddt7}t|tj|}|dtt|7}| t |j n|durJt dfdd t d td D}|d |7}|d |7}|S)a4Encode a piece of binary data into PEM format. Args: data (byte string): The piece of binary data to encode. marker (string): The marker for the PEM block (e.g. "PUBLIC KEY"). Note that there is no official master list for all allowed markers. Still, you can refer to the OpenSSL_ source code. passphrase (byte string): If given, the PEM block will be encrypted. The key is derived from the passphrase. randfunc (callable): Random number generation function; it accepts an integer N and returns a byte string of random data, N bytes long. If not given, a new one is instantiated. Returns: The PEM block, as a string. .. _OpenSSL: https://github.com/openssl/openssl/blob/master/include/openssl/pem.h Nz-----BEGIN %s----- z2Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,%s zEmpty passwordcs$g|]}tt||dqS)0)rr).0idata/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/Cryptodome/IO/PEM.py Zszencode..rrz-----END %s-----)rrrr newMODE_CBCrrupperencryptr block_size ValueErrorrangelenjoin) rmarker passphraserandfuncoutsaltkeyobjencchunksrrrr/s(  cCsVdg}|dd}t|D]}t|d||}||q d|d|S)Nr)r$rrdigestappendr&)rr+key_lendm_ndrrr_EVP_BytesToKeyas    r9cCsftd}||}|std|d}td}||}|r(|d|kr,td|dd}t|dkr>td |d d r|sLtd |d d }t|d ks_|ddkrctd|dd\}}t t |}d} |dkrt ||d} t | t j|} nz|dkrt ||d} t| tj|} ng|dkrt ||ddd} t| tj|} nP|dkrt ||ddd} t| tj|} n9|dkrt ||ddd} t| tj|} n"|dkrt ||ddd} tj| tj|d} d} ntd ||d d}nd} td|dd!} d} | r.| r't| | | j} n| | } d} | || fS)"aDecode a PEM block into binary. Args: pem_data (string): The PEM block. passphrase (byte string): If given and the PEM block is encrypted, the key will be derived from the passphrase. Returns: A tuple with the binary data, the marker string, and a boolean to indicate if decryption was performed. Raises: ValueError: if decoding fails, if the PEM file is encrypted and no passphrase has been provided or if the passphrase is incorrect. z\s*-----BEGIN (.*)-----\s+zNot a valid PEM pre boundaryrz-----END (.*)-----\s*$zNot a valid PEM post boundary rz%A PEM file must have at least 3 lineszProc-Type:4,ENCRYPTEDz-PEM is encrypted, but no passphrase available:rzDEK-Infoz$PEM encryption format not supported.,TzDES-CBCrz DES-EDE3-CBCz AES-128-CBCNrz AES-192-CBCz AES-256-CBC z id-aes256-gcm)nonceFz(Unsupport PEM encryption algorithm (%s).r1)recompilematchr#groupsearchreplacesplitr% startswithrrr9r rrr r lowerMODE_GCMrr&r decryptr")pem_datar(rr6r'linesDEKalgor+paddingr,objdecrenc_flagrrrrjsf             )NN)N)__all__rBbinasciirrrrCryptodome.HashrCryptodome.Util.Paddingr r Cryptodome.Cipherr r r Cryptodome.Protocol.KDFrCryptodome.RandomrCryptodome.Util.py3compatrrrr9rrrrrs!    2