๓ „KึVc@`sLddlmZmZmZddlmZddlmZmZm Z ddl m Z ddl m Z mZddlmZmZmZd„Zd„Zd „Zd „Zejeƒd efd „ƒYƒZejeƒd efd„ƒYƒZejejƒdefd„ƒYƒZejejƒdefd„ƒYƒZdS(i(tabsolute_importtdivisiontprint_function(tutils(tInvalidSignaturetUnsupportedAlgorithmt_Reasons(t_truncate_digest(thashest serialization(tAsymmetricSignatureContexttAsymmetricVerificationContexttecc C`sŸ|j}|j}|j|ƒ}|jƒc}|j|ƒ}|j||jkƒ|j|||ƒ}|j|dkƒ|j|ƒ} WdQXt || ƒS(s๒ This function truncates digests that are longer than a given elliptic curve key's length so they can be signed. Since elliptic curve keys are much shorter than RSA keys many digests (e.g. SHA-512) may require truncation. iN( t_libt_ffitEC_KEY_get0_groupt _tmp_bn_ctxt BN_CTX_gettopenssl_asserttNULLtEC_GROUP_get_ordert BN_num_bitsR( t ec_key_cdatatdigesttbackendR Rtgrouptbn_ctxtordertrest order_bits((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyt_truncate_digest_for_ecdsas  cC`sจ|jj|ƒ}|j||jjkƒ|jj|ƒ}||jjkr^tdƒ‚n|jj|ƒ}|j||jjkƒ|jj |ƒj dƒ}|S(NsCECDSA certificates with unnamed curves are unsupported at this timetascii( R RRRRtEC_GROUP_get_curve_namet NID_undeftNotImplementedErrort OBJ_nid2sntstringtdecode(Rtec_keyRtnidt curve_nametsn((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyt_ec_key_curve_sn+s cC`s|jj||jjƒdS(sก Set the named curve flag on the EC_KEY. This causes OpenSSL to serialize EC keys along with their curve OID which makes deserialization easier. N(R tEC_KEY_set_asn1_flagtOPENSSL_EC_NAMED_CURVE(Rtec_cdata((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyt_mark_asn1_named_ec_curve?s cC`sEytj|ƒSWn,tk r@tdj|ƒtjƒ‚nXdS(Ns%{0} is not a supported elliptic curve(R t _CURVE_TYPEStKeyErrorRtformatRtUNSUPPORTED_ELLIPTIC_CURVE(RR)((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyt_sn_to_elliptic_curveKs   t_ECDSASignatureContextcB`s#eZd„Zd„Zd„ZRS(cC`s+||_||_tj||ƒ|_dS(N(t_backendt _private_keyRtHasht_digest(tselfRt private_keyt algorithm((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyt__init__Ws  cC`s|jj|ƒdS(N(R8tupdate(R9tdata((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyR=\scC`sๆ|jj}|jjƒ}t|||jƒ}|jjj|ƒ}|jj|dkƒ|jj j d|ƒ}|jj j ddƒ}|jjj d|t |ƒ|||ƒ}|jj|dkƒ|jj j |ƒ|d S(Nischar[]sunsigned int[]i(R6t_ec_keyR8tfinalizeRR5R t ECDSA_sizeRRtnewt ECDSA_signtlentbuffer(R9R&Rtmax_sizetsigbuft siglen_ptrR((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyR@_s     (t__name__t __module__R<R=R@(((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyR4Us  t_ECDSAVerificationContextcB`s#eZd„Zd„Zd„ZRS(cC`s4||_||_||_tj||ƒ|_dS(N(R5t _public_keyt _signatureRR7R8(R9Rt public_keyt signatureR;((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyR<ys   cC`s|jj|ƒdS(N(R8R=(R9R>((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyR=scC`sŒ|jj}|jjƒ}t|||jƒ}|jjjd|t|ƒ|j t|j ƒ|ƒ}|dkrˆ|jj ƒt ‚nt S(Nii( RLR?R8R@RR5R t ECDSA_verifyRDRMt_consume_errorsRtTrue(R9R&RR((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pytverify‚s        (RIRJR<R=RS(((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyRKws  t_EllipticCurvePrivateKeycB`sMeZd„ZejdƒZd„Zd„Zd„Zd„Z d„Z RS(cC`sM||_t||ƒ||_||_t||ƒ}t||ƒ|_dS(N(R5R.R?t _evp_pkeyR*R3t_curve(R9RRtevp_pkeyR)((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyR<™s     RVcC`s>t|tjƒr(t|j||jƒStdtjƒ‚dS(Ns/Unsupported elliptic curve signature algorithm.( t isinstanceR tECDSAR4R5R;RRt UNSUPPORTED_PUBLIC_KEY_ALGORITHM(R9tsignature_algorithm((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pytsignerคs cC`s)|jj||jƒs-tdtjƒ‚n|jj|jjkrTtdƒ‚n|jjj |j ƒ}|jjj |ƒdd}|jj |dkƒ|jj jd|ƒ}|jjj|j ƒ}|jjj||||j |jj jƒ}|jj |dkƒ|jj j|ƒ| S(Ns1This backend does not support the ECDH algorithm.s2peer_public_key and self are not on the same curveiiis uint8_t[](R5t+elliptic_curve_exchange_algorithm_supportedtcurveRRtUNSUPPORTED_EXCHANGE_ALGORITHMtnamet ValueErrorR RR?tEC_GROUP_get_degreeRRRBtEC_KEY_get0_public_keytECDH_compute_keyRRE(R9R;tpeer_public_keyRtz_lentz_buftpeer_keytr((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pytexchangeฎs$     !cC`s+|jjj|jƒ}|jj||jjjkƒ|jjj|ƒ}|jjj|ƒ}|jj||jjjkƒ|jjj ||jjj ƒ}|jjj |jƒ}|jj||jjjkƒ|jjj ||ƒ}|jj|dkƒ|jj |ƒ}t|j||ƒS(Ni(R5R RR?RRRR tEC_KEY_new_by_curve_nametgct EC_KEY_freeRctEC_KEY_set_public_keyt_ec_cdata_to_evp_pkeyt_EllipticCurvePublicKey(R9Rt curve_nidt public_ec_keytpointRRW((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyRNฬs cC`sL|jjj|jƒ}|jj|ƒ}tjd|d|jƒjƒƒS(Nt private_valuetpublic_numbers( R5R tEC_KEY_get0_private_keyR?t _bn_to_intR tEllipticCurvePrivateNumbersRNRu(R9tbnRt((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pytprivate_numbersโs  cC`s"|jj||||j|jƒS(N(R5t_private_key_bytesRUR?(R9tencodingR1tencryption_algorithm((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyt private_bytes๊s  ( RIRJR<Rtread_only_propertyR^R\RjRNRzR~(((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyRT—s    RpcB`s;eZd„ZejdƒZd„Zd„Zd„ZRS(cC`sM||_t||ƒ||_||_t||ƒ}t||ƒ|_dS(N(R5R.R?RUR*R3RV(R9RRRWR)((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyR<๖s     RVcC`s_t|tƒstdƒ‚nt|tjƒrIt|j|||jƒStdt j ƒ‚dS(Nssignature must be bytes.s/Unsupported elliptic curve signature algorithm.( RXtbytest TypeErrorR RYRKR5R;RRRZ(R9ROR[((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pytverifiersc C`s|jj|jƒ\}}}|jjj|jƒ}|jj||jjjkƒ|jjƒƒ}|jjj |ƒ}|jjj |ƒ}||||||ƒ}|jj|dkƒ|jj |ƒ} |jj |ƒ} WdQXt j d| d| d|j ƒS(NitxtyR^(R5t%_ec_key_determine_group_get_set_funcsR?R RcRRRRRRwR tEllipticCurvePublicNumbersRV( R9tset_functget_funcRRsRtbn_xtbn_yRRƒR„((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyRus cC`s=|tjjkr!tdƒ‚n|jj|||jdƒS(Ns1EC public keys do not support PKCS1 serialization(R t PublicFormattPKCS1RaR5t_public_key_bytesRUtNone(R9R|R1((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyt public_bytes%s  ( RIRJR<RRR^R‚RuR(((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyRp๔s   N(t __future__RRRt cryptographyRtcryptography.exceptionsRRRt*cryptography.hazmat.backends.openssl.utilsRtcryptography.hazmat.primitivesRR t)cryptography.hazmat.primitives.asymmetricR R R RR*R.R3tregister_interfacetobjectR4RKt(EllipticCurvePrivateKeyWithSerializationRTt'EllipticCurvePublicKeyWithSerializationRp(((sK/usr/lib/python2.7/dist-packages/cryptography/hazmat/backends/openssl/ec.pyts"   !\