File: //usr/local/CyberCP/lib64/python3.10/site-packages/paramiko/__pycache__/kex_gex.cpython-310.pyc
o
�hP( � @ s� d Z ddlZddlmZmZ ddlmZ ddlmZm Z m
Z
m Z ddl m
Z
ddlmZ edd �\ZZZZZd
d � edd �D �\ZZZZZG d d
� d
�ZG dd� de�Z dS )z�
Variant on `KexGroup1 <paramiko.kex_group1.KexGroup1>` where the prime "p" and
generator "g" are provided by the server. A bit more work is required on the
client side, and a **lot** more on the server side.
� N)�sha1�sha256)�util)�DEBUG�byte_chr�byte_ord� byte_mask)�Message)� SSHException� �# c C s g | ]}t |��qS � )r )�.0�cr
r
�C/usr/local/CyberCP/lib/python3.10/site-packages/paramiko/kex_gex.py�
<listcomp>0 s r c @ sj e Zd ZdZdZdZdZeZdd� Z ddd �Z
d
d � Z d d
� Z dd� Z
dd� Zdd� Zdd� Zdd� ZdS )�KexGexz"diffie-hellman-group-exchange-sha1� � i c C s4 || _ d | _d | _d | _d | _d | _d | _d| _d S )NF)� transport�p�q�g�x�e�f� old_style)�selfr r
r
r �__init__; s
zKexGex.__init__Fc C s� | j jr
| j �tt� d S t� }|r!|�t� |�| j � d| _
n|�t � |�| j � |�| j � |�| j
� | j �|� | j �t� d S )NT)r � server_mode�_expect_packet�_MSG_KEXDH_GEX_REQUEST�_MSG_KEXDH_GEX_REQUEST_OLDr �add_byte�c_MSG_KEXDH_GEX_REQUEST_OLD�add_int�preferred_bitsr �c_MSG_KEXDH_GEX_REQUEST�min_bits�max_bits�
_send_message�_MSG_KEXDH_GEX_GROUP)r �_test_old_style�mr
r
r � start_kexE s �
zKexGex.start_kexc C sp |t kr | �|�S |tkr| �|�S |tkr| �|�S |tkr$| �|�S |tkr-| � |�S d}t
|� | j |���)Nz*KexGex {} asked to handle packet type {:d})
r! �_parse_kexdh_gex_requestr+ �_parse_kexdh_gex_group�_MSG_KEXDH_GEX_INIT�_parse_kexdh_gex_init�_MSG_KEXDH_GEX_REPLY�_parse_kexdh_gex_replyr" � _parse_kexdh_gex_request_oldr
�format�name)r �ptyper- �msgr
r
r �
parse_next\ s
zKexGex.parse_nextc C s� | j d d }t�|d�}t|d �}t|�}d}|d@ s)|dK }|dL }|d@ r t�|�}t|d |�|dd � }t�|d�}|dkrK||k rKnq*|| _ d S )N� � r � � )
r r � deflate_longr �len�os�urandomr � inflate_longr )r r �qnorm�qhbyte�
byte_count�qmask�x_bytesr r
r
r � _generate_xl s" �
�
zKexGex._generate_xc C s� |� � }|� � }|� � }|| jkr| j}|| jk r | j}||kr"|}||k r(|}|| _|| _|| _| j�� }|d u r>td��| j�td� |||�� |�
|||�\| _ | _ t
� }|�t� |�| j � |�| j � | j�|� | j�t� d S )N�-Can't do server-side gex with no modulus packz Picking p ({} <= {} <= {} bits))�get_intr) r( r& r �_get_modulus_packr
�_logr r6 � get_modulusr r r r# �c_MSG_KEXDH_GEX_GROUP� add_mpintr* r r1 )r r- �minbits�
preferredbits�maxbits�packr
r
r r/ ~ s<
��
z KexGex._parse_kexdh_gex_requestc C s� |� � | _| j| jkr| j| _| j| jk r| j| _| j�� }|d u r&td��| j�td� | j�� |�
| j| j| j�\| _ | _ t
� }|�t� |�| j � |�| j � | j�|� | j�t� d| _d S )NrJ zPicking p (~ {} bits)T)rK r& r) r( r rL r
rM r r6 rN r r r r# rO rP r* r r1 r )r r- rT r
r
r r5 � s*
� �
z#KexGex._parse_kexdh_gex_request_oldc C s� |� � | _|� � | _t�| j�}|dk s|dkr td�|���| j�t d�|�� | �
� t | j| j | j�| _
t� }|�t� |�| j
� | j�|� | j�t� d S )Nr r z<Server-generated gex p (don't ask) is out of range ({} bits)zGot server p ({} bits))� get_mpintr r r �
bit_lengthr
r6 r rM r rI �powr r r r# �c_MSG_KEXDH_GEX_INITrP r* r r3 )r r- �bitlenr
r
r r0 � s
�
z KexGex._parse_kexdh_gex_groupc C sz |� � | _| jdk s| j| jd krtd��| �� t| j| j| j�| _t| j| j| j�}| j �
� � � }t � }|�
| j j| j j| j j| j j|� | jsQ|�| j� |�| j� | js`|�| j� |�| j� |�| j� |�| j� |�| j� |�|� | �|� � ��� }| j �||� | j �
� �|| j j �}t � }|� t � |� |� |�| j� |� |� | j � |� | j �!� d S )Nr; z Client kex "e" is out of range)"rU r r r
rI rW r r r r �get_server_key�asbytesr �add�remote_version�
local_version�remote_kex_init�local_kex_initr r% r( r& r) rP � hash_algo�digest�_set_K_H�
sign_ssh_data�
host_key_typer# �c_MSG_KEXDH_GEX_REPLY�
add_stringr* �_activate_outbound)r r- �K�key�hm�H�sigr
r
r r2 � sJ
�
�
z KexGex._parse_kexdh_gex_initc C s |� � }|�� | _|� � }| jdk s| j| jd kr td��t| j| j| j�}t� }|�| j j
| j j | j j | j j
|� | jsD|�| j� |�| j� | jsS|�| j� |�| j� |�| j� |�| j� |�| j� |�|� | j �|| �|�� ��� � | j �||� | j �� d S )Nr; z Server kex "f" is out of range) �
get_stringrU r r r
rW r r r\ r r^ r] r` r_ r r% r( r& r) rP r r rc ra r[ rb � _verify_keyrh )r r- �host_keyrm ri rk r
r
r r4 � s6
�
z KexGex._parse_kexdh_gex_replyN)F)�__name__�
__module__� __qualname__r7 r( r) r& r ra r r. r: rI r/ r5 r0 r2 r4 r
r
r
r r 3 s
& +r c @ s e Zd ZdZeZdS )� KexGexSHA256z$diffie-hellman-group-exchange-sha256N)rq rr rs r7 r ra r
r
r
r rt s rt ) �__doc__rA �hashlibr r �paramikor �paramiko.commonr r r r �paramiko.messager �paramiko.ssh_exceptionr
�ranger" r+ r1 r3 r! r$ rO rX rf r' r rt r
r
r
r �<module> s0 � � l