File: //usr/local/CyberPanel/lib/python3.10/site-packages/asyncssh/__pycache__/sk_ecdsa.cpython-310.pyc
o
�h�! � @ s& d Z ddlmZ ddlmZmZmZ ddlmZm Z ddl
m Z ddl m
Z
mZmZmZmZ ddlmZmZmZ dd lmZmZ dd
lmZ dd lmZmZ dd lm Z m Z m Z m Z ee e e!e"e e f Z#ee e e!f Z$G d
d� de�Z%dZ&dZ'eee%d� ee&e%de&de& f� ede&e'e%ed� dS )z'U2F ECDSA public key encryption handler� )�sha256)�Optional�Tuple�cast� )�
der_encode�
der_decode)�ECDSAPublicKey)�Byte�MPInt�String�UInt32� SSHPacket)�KeyExportError�SSHKey�SSHOpenSSHCertificateV01)�register_public_key_alg�register_certificate_alg)�register_sk_alg)� SSH_SK_ECDSA�SSH_SK_USER_PRESENCE_REQD)� sk_enroll�sk_sign�sk_webauthn_prefix�sk_use_webauthnc s` e Zd ZU dZeed< dZ d6deded ed
e d e
e d ef � fd
d�
Z de de
fdd�Zde fdd�Zedddddd�ded edede
e d e
d e
dd fd d ��Zed e defd!d"��Zed e defd#d$��Zed%edefd&d'��Zed%edefd(d)��Zdefd*d+�Zdefd,d-�Zdefd.d/�Z d0ed1edefd2d3�Z d0ed1ed%ede
fd4d5�Z � Z S )7� _SKECDSAKeyz+Handler for U2F ECDSA public key encryption�_keyTr N� �curve_id� public_value� application�flags�
key_handle�reservedc sv t � �t�||�� d| d | _| jd| j f| _t| j�| _t| _ || _
t |� d���
� | _|| _|| _|| _d S )Ns sk-ecdsa-sha2-s @openssh.com� webauthn-�utf-8)�super�__init__r � construct� algorithm�sig_algorithms�set�all_sig_algorithmsr � use_webauthn� _applicationr �encode�digest� _app_hash�_flags� _key_handle� _reserved)�selfr r r r! r" r# �� __class__� �G/usr/local/CyberPanel/lib/python3.10/site-packages/asyncssh/sk_ecdsa.pyr' / s
z_SKECDSAKey.__init__�other�returnc C s^ t |t| ��o.| jj|jjko.| jj|jjko.| j|jko.| j|jko.| j|jko.| j|jkS �N) �
isinstance�typer r r r. r2 r3 r4 )r5 r: r8 r8 r9 �__eq__@ s ��
�
�
�
�z_SKECDSAKey.__eq__c C s$ t | jj| jj| j| j| j| jf�S r< )�hashr r r r. r2 r3 r4 �r5 r8 r8 r9 �__hash__L s �z_SKECDSAKey.__hash__zssh:�AsyncSSHF)r �user�pin�resident�touch_requiredr) rD rE rF rG c
C s: |rt nd}tt||||�\}} | |dd� |||| d�S )z#Generate a new SK ECDSA private keyr � i�r )r r r )
�clsr) r rD rE rF rG r! r r" r8 r8 r9 �generateQ s ��z_SKECDSAKey.generate�
key_paramsc C s( t t|�\}}}}}}| ||||||�S )z!Construct a U2F ECDSA private key)r �_PrivateKeyArgs)rI rK r r r r! r" r# r8 r8 r9 � make_privatec s
��z_SKECDSAKey.make_privatec C s t t|�\}}}| |||�S )z Construct a U2F ECDSA public key)r �_PublicKeyArgs)rI rK r r r r8 r8 r9 � make_publicm s z_SKECDSAKey.make_public�packetc C sF |� � }|� � }|� � �d�}|�� }|� � }|� � }||||||fS )z)Decode an SSH format SK ECDSA private keyr% )�
get_string�decode�get_byte)rI rP r r r r! r" r# r8 r8 r9 �decode_ssh_privateu s z _SKECDSAKey.decode_ssh_privatec C s( |� � }|� � }|� � �d�}|||fS )z(Decode an SSH format SK ECDSA public keyr% )rQ rR )rI rP r r r r8 r8 r9 �decode_ssh_public� s
z _SKECDSAKey.decode_ssh_publicc C sP | j du r td��d�t| jj�t| jj�t| j�t| j �t| j �t| j
�f�S )z)Encode an SSH format SK ECDSA private keyN�Key is not privater ) r3 r �joinr r r r r. r
r2 r4 rA r8 r8 r9 �encode_ssh_private� s
�z _SKECDSAKey.encode_ssh_privatec C s& d� t| jj�t| jj�t| j�f�S )z(Encode an SSH format SK ECDSA public keyr )rW r r r r r. rA r8 r8 r9 �encode_ssh_public� s
�z _SKECDSAKey.encode_ssh_publicc C s< | j du r td��d�t| j�t| j�t| j �t| j�f�S )z7Encode U2F ECDSA certificate private key data for agentNrV r )r3 r rW r r. r
r2 r4 rA r8 r8 r9 �encode_agent_cert_private� s
�z%_SKECDSAKey.encode_agent_cert_private�data�
sig_algorithmc
C s� | j du r td��|�d�}t|| j| j | j|�\}}}}ttttf t |��\}} t
t |�t | � �t |� t
|� }|rM|t
| j�t
|� t
d� 7 }|S )z6Compute an SSH-encoded signature of the specified dataNz Key handle needed for signing� webauthn� )r3 �
ValueError�
startswithr r. r2 r r �intr r r r
r
)
r5 r[ r\ � is_webauthnr! �counter�sig� client_data�r�sr8 r8 r9 �sign_ssh� s
�$ z_SKECDSAKey.sign_sshc
C s� |� d�}|�� }|�� }|�� }|r.|�� }|�� } |�� }t|| j�}
| � |
�s,dS | }|�� | jr;|t@ s;dS t |�}|�
� } |�
� } |�� t | | f�}| j �
| jt|� t|� t|��� |d�S )z5Verify an SSH-encoded signature of the specified datar] Fr )r` rQ rS �
get_uint32r r. � check_end�_touch_requiredr r � get_mpintr r �verifyr1 r
r
r r0 )
r5 r[ r\ rP rb rd r! rc �_re �prefixrf rg r8 r8 r9 �
verify_ssh� s6
�
��z_SKECDSAKey.verify_ssh)r Nr ) �__name__�
__module__� __qualname__�__doc__r �__annotations__� use_executor�bytes�strra r r' �object�boolr? rB � classmethodrJ r rM rO r rL rT rN rU rX rY rZ rh rp �
__classcell__r8 r8 r6 r9 r ( sb
����
������ �
��r s" sk-ecdsa-sha2-nistp256@openssh.coms+ sk-ecdsa-sha2-nistp256-cert-v01@openssh.coms nistp256Tr$ N)(rt �hashlibr �typingr r r �asn1r r �cryptor rP r
r r r
r �
public_keyr r r r r r �skr r r r r r rw rx ra rL rN r �
_algorithm�_cert_algorithmr8 r8 r8 r9 �<module> s0 <
��