|
Server : LiteSpeed System : Linux server51.dnsbootclub.com 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64 User : nandedex ( 1060) PHP Version : 8.1.33 Disable Function : NONE Directory : /opt/cppython/lib/python3.8/site-packages/paramiko/__pycache__/ |
U
P��g�- � @ s� d Z ddlmZmZ ddlmZ ddlmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ G d d
� d
�ZG dd� d�ZG dd� de�ZdS )z
ECDSA keys
� )�InvalidSignature�UnsupportedAlgorithm)�default_backend)�hashes�
serialization)�ec)�decode_dss_signature�encode_dss_signature)� four_byte)�Message)�PKey)� SSHException)� deflate_longc @ s e Zd ZdZdd� ZdS )� _ECDSACurvez�
Represents a specific ECDSA Curve (nistp256, nistp384, etc).
Handles the generation of the key format identifier and the selection of
the proper hash function. Also grabs the proper curve from the 'ecdsa'
package.
c C sT || _ |j| _d| j | _| jdkr.tj| _n | jdkrBtj| _ntj| _|| _ d S )N� ecdsa-sha2-� i� )
� nist_name�key_size�
key_length�key_format_identifierr �SHA256� hash_object�SHA384�SHA512� curve_class)�selfr r � r �>/opt/cppython/lib/python3.8/site-packages/paramiko/ecdsakey.py�__init__0 s
z_ECDSACurve.__init__N)�__name__�
__module__� __qualname__�__doc__r r r r r r ' s r c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd S )
�_ECDSACurveSetz�
A collection to hold the ECDSA curves. Allows querying by oid and by key
format identifier. The two ways in which ECDSAKey needs to be able to look
up curves.
c C s
|| _ d S �N�� ecdsa_curves)r r& r r r r I s z_ECDSACurveSet.__init__c C s dd� | j D �S )Nc S s g | ]
}|j �qS r )r )�.0�curver r r �
<listcomp>M s zA_ECDSACurveSet.get_key_format_identifier_list.<locals>.<listcomp>r% �r r r r � get_key_format_identifier_listL s z-_ECDSACurveSet.get_key_format_identifier_listc C s" | j D ]}|j|kr| S qd S r$ )r& r )r r r( r r r �get_by_curve_classO s
z!_ECDSACurveSet.get_by_curve_classc C s" | j D ]}|j|kr| S qd S r$ )r& r )r r r( r r r � get_by_key_format_identifierT s
z+_ECDSACurveSet.get_by_key_format_identifierc C s" | j D ]}|j|kr| S qd S r$ )r& r )r r r( r r r �get_by_key_lengthY s
z _ECDSACurveSet.get_by_key_lengthN) r r r! r" r r+ r, r- r. r r r r r# B s r# c @ s� e Zd ZdZeeejd�eejd�eej d�g�Z
d-dd�Z e d d
� �Z
e d d � �Zd
d� Zdd� Zedd� �Zdd� Zdd� Zdd� Zd.dd�Zdd � Zd/d d �Zd0d d �Ze e�� ddfd!d"��Zd#d$� Zd%d&� Z d'd(� Z d)d*� Z d+d,� Z dS )1�ECDSAKeyz\
Representation of an ECDSA key which can be used to sign and verify SSH2
data.
Znistp256Znistp384Znistp521NTc C sT d | _ d | _d | _|d k r*| �||� d S |d k rB| �||� d S |d krZ|d k rZt|�}|d k r�|\| _| _ | jjj}| j� |�| _
n�|� � } d}
| � |
�r�| d t
|
� � } | j�| �| _
| j�� } dd� | D �} | j|| | d� |� � }
|
| j
jk�r
td�|
���|�� }z tj�| j
�� |�}|| _ W n tk
�rN td��Y nX d S )Nz-cert-v01@openssh.comc S s g | ]}d � |��qS )z{}-cert-v01@openssh.com)�format)r' �xr r r r) � s z%ECDSAKey.__init__.<locals>.<listcomp>)�msg�key_typeZ cert_typez Can't handle curve of type {}zInvalid public key)�
verifying_key� signing_keyZ public_blob�_from_private_key�_from_private_key_filer r( � __class__�
_ECDSA_CURVESr, � ecdsa_curve�get_text�endswith�lenr- r+ Z_check_type_and_load_certr r
r0 �
get_binaryr ZEllipticCurvePublicKeyZfrom_encoded_pointr �
ValueError)r r2 �data�filename�password�vals�file_objZvalidate_pointZc_classr3 �suffixZ key_typesZ
cert_typesZ curvenameZ pointinfo�keyr r r r m sZ
�
� �� �
zECDSAKey.__init__c C s
| j �� S r$ )r9 r+ ��clsr r r � identifiers� s zECDSAKey.identifiersc C s | � � S r$ )rI rG r r r � supported_key_format_identifiers� s z)ECDSAKey.supported_key_format_identifiersc C s� | j }t� }|�| jj� |�| jj� |�� }|jjd d }t |j
dd�}d|t |� | }t |j dd�}d|t |� | }t
| | }|�|� |�� S )N� � F)Zadd_sign_padding� )r4 r �
add_stringr: r r �public_numbersr( r r r1 r= �yr
�asbytes)r rF �m�numbersZkey_size_bytesZx_bytesZy_bytesZ point_strr r r rQ � s
zECDSAKey.asbytesc C s | � � S r$ )rQ r* r r r �__str__� s zECDSAKey.__str__c C s | � � | j�� j| j�� jfS r$ )�get_namer4 rO r1 rP r* r r r �_fields� s
�zECDSAKey._fieldsc C s | j jS r$ )r: r r* r r r rU � s zECDSAKey.get_namec C s | j jS r$ )r: r r* r r r �get_bits� s zECDSAKey.get_bitsc C s
| j d k S r$ )r5 r* r r r �can_sign� s zECDSAKey.can_signc C sT t �| j�� �}| j�||�}t|�\}}t� }|�| jj � |�| �
||�� |S r$ ) r �ECDSAr: r r5 �signr r rN r �
_sigencode)r r@ � algorithmZecdsa�sig�r�srR r r r �
sign_ssh_data� s zECDSAKey.sign_ssh_datac C st |� � | jjkrdS |�� }| �|�\}}t||�}z | j�||t� | j�
� �� W n t k
rj Y dS X dS d S )NFT) r; r: r r> �
_sigdecoder r4 �verifyr rY r r )r r@ r2 r] ZsigRZsigS� signaturer r r �verify_ssh_sig� s
�zECDSAKey.verify_ssh_sigc C s | j || jtjj|d� d S �N)rB )Z_write_private_key_filer5 r �
PrivateFormat�TraditionalOpenSSL)r rA rB r r r �write_private_key_file� s �z ECDSAKey.write_private_key_filec C s | j || jtjj|d� d S re )Z_write_private_keyr5 r rf rg )r rD rB r r r �write_private_key� s �zECDSAKey.write_private_keyc C sT |dk r2| j �|�}|dkr*td�|���|�� }tj|t� d�}t||� � fd�S )a
Generate a new private ECDSA key. This factory function can be used to
generate a new host key or authentication key.
:param progress_func: Not used for this type of key.
:returns: A new private key (`.ECDSAKey`) object
Nz Unsupported key length: {:d})�backend)rC )
r9 r. r? r0 r r Zgenerate_private_keyr r/ �
public_key)rH r( Z
progress_func�bitsZ private_keyr r r �generate s zECDSAKey.generatec C s | � d||�}| �|� d S �NZEC)Z_read_private_key_file� _decode_key)r rA rB r@ r r r r7 s z ECDSAKey._from_private_key_filec C s | � d||�}| �|� d S rn )Z_read_private_keyro )r rD rB r@ r r r r6 s zECDSAKey._from_private_keyc C s* |\}}|| j krbztj|d t� d�}W n6 ttttfk
r^ } ztt |���W 5 d }~X Y nX n�|| j
kr�zXt |�}|� � }|�
� }|�� }d| } | j�| �}
|
s�td��t�||
�� t� �}W n. tk
r� } ztt |���W 5 d }~X Y nX n
| �|� || _|�� | _|jj} | j�| �| _ d S )N)rB rj r z Invalid key curve identifier) Z _PRIVATE_KEY_FORMAT_ORIGINALr Zload_der_private_keyr r? �AssertionError� TypeErrorr r
�strZ_PRIVATE_KEY_FORMAT_OPENSSHr r; r> � get_mpintr9 r- r Zderive_private_keyr � ExceptionZ_got_bad_key_format_idr5 rk r4 r( r8 r, r: ) r r@ ZpkformatrF �er2 Z
curve_nameZverkeyZsigkey�namer( r r r r ro " sJ
�
�
�
zECDSAKey._decode_keyc C s" t � }|�|� |�|� |�� S r$ )r Z add_mpintrQ )r r^ r_ r2 r r r r[ I s
zECDSAKey._sigencodec C s t |�}|�� }|�� }||fS r$ )r rs )r r] r2 r^ r_ r r r ra O s zECDSAKey._sigdecode)NNNNNNT)N)N)N) r r r! r" r# r r Z SECP256R1Z SECP384R1Z SECP521R1r9 r � classmethodrI rJ rQ rT �propertyrV rU rW rX r` rd rh ri rm r7 r6 ro r[ ra r r r r r/ _ sJ
��
�
>
'r/ N)r" Zcryptography.exceptionsr r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr Z/cryptography.hazmat.primitives.asymmetric.utilsr r Zparamiko.commonr
Zparamiko.messager Z
paramiko.pkeyr Zparamiko.ssh_exceptionr
Z
paramiko.utilr r r# r/ r r r r �<module> s