File: //usr/local/CyberPanel/lib64/python3.10/site-packages/asyncssh/__pycache__/pbe.cpython-310.pyc
o
�h�P � @ s� U d Z ddlmZmZ ddlZddlmZmZmZm Z m
Z
ddl m Z m
Z
mZmZ ddlmZmZmZ ddlmZmZ e
ed f Zeeeeegef Ze eeef Zeeee gef Z e e ef Z eeee ge f Z e e e ed
f f Z!e
d �Z"e
d �Z#e
d
�Z$e
d�Z%e
d�Z&e
d�Z'e
d�Z(e
d�Z)e
d�Z*e
d�Z+e
d�Z,e
d�Z-e
d�Z.e
d�Z/e
d�Z0e
d�Z1e
d�Z2e
d �Z3e
d �Z4e
d �Z5i Z6ee ef e7d < i Z8eee f e7d < i Z9ee
ef e7d!< i Z:ee eef e
f e7d"< i Z;ee
e f e7d#< i Z<eee
f e7d$< i Z=ee
e!f e7d%< i Z>eee
f e7d&< i Z?ee
ef e7d'< i Z@eee
f e7d(< G d)d*� d*eA�ZBG d+d � d �ZCd,ed-ed.e d/e d0e d1e f d2d3�ZDd,ed-ed.e d/e d0e d4e d1e fd5d6�ZEd7ed-ed,ed8ed1ef
d9d:�ZFd7ed-ed,ed8ed1ef
d;d<�ZGd=ed8ed>e d1efd?d@�ZHdAed-edBe d1e fdCdD�ZId7ed-ed1efdEdF�ZJdGedHe d8ed1dfdIdJ�ZKdKedLedMe
dNed,ed8ed1dfdOdP�ZLdQedRe
dNe d8ed1df
dSdT�ZMdUedVe
dNe dWed1df
dXdY�ZNdLedZe
d1dfd[d\�ZOd]e dGed-ed1e e e e f fd^d_�ZPd]e dHe d`e d-ed1e f
dadb�ZQd]e dKedLedce d-ed1e f ddde�ZRdfed-ed1efdgdh�ZSdiZTdjdke"eFedjfdjdle#eFedjfdmdle(eGedmfdndle'eGednfdodle&eGedpfdqdle%eGedrffZUdse-eHdsfdte.eHdtfdue/eHdufdve+eHdvfdwe)eHdwfdje,eHdjfdne*eHdnffZVdxe0eIffZWdle1fdye2fdze3fd{e4fd|e5ffZXeTD ]ZYeKeY� �q�eUD ]ZZeLeZ� �q�eVD ]Z[eMe[� �q�eWD ]Z\eNe\� �q�eXD ]Z]eOe]� �q�dS )}z2Asymmetric key password based encryption functions� )�md5�sha1N)�Callable�Dict�Sequence�Tuple�Union� )�ASN1DecodeError�ObjectIdentifier�
der_encode�
der_decode)� BasicCipher�get_cipher_params� pbkdf2_hmac)�
BytesOrStr�HashType� _RFC1423Pad.z1.2.840.113549.1.5.3z1.2.840.113549.1.5.10z1.2.840.113549.1.5.13z1.2.840.113549.1.12.1.1z1.2.840.113549.1.12.1.2z1.2.840.113549.1.12.1.3z1.2.840.113549.1.12.1.4z1.2.840.113533.7.66.10z1.2.840.113549.3.7z1.3.6.1.4.1.3029.1.2z 1.3.14.3.2.7z2.16.840.1.101.3.4.1.2z2.16.840.1.101.3.4.1.22z2.16.840.1.101.3.4.1.42z1.2.840.113549.1.5.12z1.2.840.113549.2.7z1.2.840.113549.2.8z1.2.840.113549.2.9z1.2.840.113549.2.10z1.2.840.113549.2.11�
_pkcs1_cipher�_pkcs1_dek_name�_pkcs8_handler�_pkcs8_cipher_oid�
_pbes2_cipher�_pbes2_cipher_oid�
_pbes2_kdf�_pbes2_kdf_oid�
_pbes2_prf�_pbes2_prf_oidc @ s e Zd ZdZdS )�KeyEncryptionErrorz�Key encryption error
This exception is raised by key decryption functions when the data
provided is not a valid encrypted private key.
N)�__name__�
__module__� __qualname__�__doc__� r# r# �B/usr/local/CyberPanel/lib/python3.10/site-packages/asyncssh/pbe.pyr V s r c @ sN e Zd ZdZdedededefdd�Zded efd
d �Zded efd d
�Z dS )r a9 RFC 1423 padding functions
This class implements RFC 1423 padding for encryption and
decryption of data by block ciphers. On encryption, the data is
padded by between 1 and the cipher's block size number of bytes,
with the padding value being equal to the length of the padding.
� cipher_name�
block_size�key�ivc C s t |||�| _|| _d S )N)r �_cipher� _block_size)�selfr% r& r' r( r# r# r$ �__init__i s
z_RFC1423Pad.__init__�data�returnc C s2 | j t|�| j }||t|f� 7 }| j�|�S )z Pad data before encrypting it)r* �len�bytesr) �encrypt�r+ r- �padr# r# r$ r1 n s z_RFC1423Pad.encryptc C sj | j �|�}|r1|d }d| kr| jkr1n td��|| d� |t|f� kr1|d| � S td��)z,Remove padding from data after decrypting it���r NzUnable to decrypt key)r) �decryptr* r0 r r2 r# r# r$ r5 u s �z_RFC1423Pad.decryptN)
r r r! r" �str�intr0 r, r1 r5 r# r# r# r$ r _ s
�
��hash_alg�
passphrase�salt�count�key_sizer. c C sn t |t�r
|�d�}|| }t|�D ]}| |��� }qt|�|kr1|t| || |||t|� � S |d|� S )a� PKCS#5 v1.5 key derivation function for password-based encryption
This function implements the PKCS#5 v1.5 algorithm for deriving
an encryption key from a passphrase and salt.
The standard PBKDF1 function cannot generate more key bytes than
the hash digest size, but 3DES uses a modified form of it which
calls PBKDF1 recursively on the result to generate more key data.
Support for this is implemented here.
�utf-8N)�
isinstancer6 �encode�range�digestr/ �_pbkdf1)r8 r9 r: r; r< r' �_r# r# r$ rB � s
� rB �idxc C s dt dtdt fdd�}| � j}|t |f� }t|t�r |�d�}t|||�||d |� �} d}
t|
�|k r�|| } t|�D ]} | | �� � } q>t�
|| |�d �}
td
t| �|�D ]$} t�
| | | | � d �|
d d |d > }|� |d �| | | | �< qX|
| 7 }
t|
�|k s6|
d
|� S )z�PKCS#12 key derivation function for password-based encryption
This function implements the PKCS#12 algorithm for deriving an
encryption key from a passphrase and salt.
r- �vr. c S s8 t | �}|| d | | }|| d | | d|� S )z9Make a block a multiple of v bytes long by repeating datar N)r/ )r- rE �l�sizer# r# r$ � _make_block� s z _pbkdf_p12.<locals>._make_blockzutf-16bes � �bigr r � N) r0 r7 r& r> r6 r? � bytearrayr/ r@ rA �
from_bytes�to_bytes)r8 r9 r: r; r< rD rH rE �D�Ir' �A�i�B�xr# r# r$ �
_pbkdf_p12� s$
, � rU �paramsr% c C s� t | t�rt| �dkst | d t�rt | d t�s td��| \}}t|�\}}}t|||||| �} | d|� | |d� } }
t||| |
�S )aD PKCS#5 v1.5 cipher selection function for password-based encryption
This function implements the PKCS#5 v1.5 algorithm for password-based
encryption. It returns a cipher object which can be used to encrypt
or decrypt data based on the specified encryption parameters,
passphrase, and salt.
� r r z#Invalid PBES1 encryption parametersN) r> �tupler/ r0 r7 r r rB r ) rV r9 r8 r% r: r; r< �iv_sizer& r' r( r# r# r$ �_pbes1� s � �rZ c C s� t | t�r#t| �dks#t | d t�r#| d r#t | d t�r#| d dkr'td��| \}}t|�\}}}t|||||d�} |dkrGt|| d�}
|
S t|||||d�} t ||| | �}
|
S )a< PKCS#12 cipher selection function for password-based encryption
This function implements the PKCS#12 algorithm for password-based
encryption. It returns a cipher object which can be used to encrypt
or decrypt data based on the specified encryption parameters,
passphrase, and salt.
rW r r z+Invalid PBES1 PKCS#12 encryption parametersrI )
r> rX r/ r0 r7 r r rU r r ) rV r9 r8 r% r: r; r< rY r& r' �cipherr( r# r# r$ �_pbe_p12� s$ �� � �r\ �
enc_paramsr' c C sZ t |�\}}}t| �dkst| d t�std��t| d �|kr$td��t|||| d �S )z�PKCS#5 v2.0 handler for PBES2 ciphers with an IV as a parameter
This function returns the appropriate cipher object to use for
PBES2 encryption for ciphers that have only an IV as an encryption
parameter.
r r �#Invalid PBES2 encryption parametersz&Invalid length IV for PBES2 encryption)r r/ r> r0 r r )r] r% r' rC rY r& r# r# r$ � _pbes2_iv� s r_ �
kdf_params�default_key_sizec C s" t | �dkst| d t�rt | d �dk rtd��t| d �} t| d t�r-t| d t�s1td��| �d�}| �d�}| rJt| d t�rJ| �d�}n|}| r}t| d t�ryt | d �dkryt| d d t�ry| d d }|t v rut | }n
td��td��d}t|t
�r�|� d�}t |||||�S ) z�PKCS#5 v2.0 handler for PBKDF2 key derivation
This function parses the PBKDF2 arguments from a PKCS#8 encrypted key
and returns the encryption key to use for encryption.
r r rW z'Invalid PBES2 key derivation parametersz$Unknown PBES2 pseudo-random functionz/Invalid PBES2 pseudo-random function parametersr r= )
r/ r> rX r �listr0 r7 �popr r r6 r? r )r` r9 ra r: r; r< �prf_alg� hash_namer# r# r$ �
_pbes2_pbkdf2 s4 �
�
rf c
C s� t | t�r)t| �dks)t | d t�r)t| d �dk s)t | d t�r)t| d �dk r-td��t| d �}|�d�}|tvr@td��t| d �}|�d�}|tvrStd��t| \}}t| \}} t| �\}
} } ||||
g|�R � } ||| | �S )a= PKCS#5 v2.0 cipher selection function for password-based encryption
This function implements the PKCS#5 v2.0 algorithm for password-based
encryption. It returns a cipher object which can be used to encrypt
or decrypt data based on the specified encryption parameters and
passphrase.
rW r r r^ z%Unknown PBES2 key derivation functionz"Unknown PBES2 encryption algorithm) r> rX r/ r rb rc r r r )
rV r9 r` �kdf_algr] �enc_alg� kdf_handler�kdf_args� enc_handlerr% ra rC r' r# r# r$ �_pbes2B s*
� �
rl �pkcs1_cipher_name�pkcs1_dek_namec C s |t |< |t| < dS )z8Register a cipher used for PKCS#1 private key encryptionN)r r )rm rn r% r# r# r$ �register_pkcs1_ciphere s ro �pkcs8_cipher_namere �pkcs8_cipher_oid�handlerc C s |||ft |< |t| |f< dS )z8Register a cipher used for PKCS#8 private key encryptionN)r r )rp re rq rr r8 r% r# r# r$ �register_pkcs8_cipherm s rs �pbes2_cipher_name�pbes2_cipher_oidc C � ||ft |< |t| < dS )z%Register a PBES2 encryption algorithmN)r r )rt ru rr r% r# r# r$ �register_pbes2_cipherw s rw �kdf_name�kdf_oid�argsc G rv )z(Register a PBES2 key derivation functionN)r r )rx ry rr rz r# r# r$ �register_pbes2_kdf� s r{ �prf_oidc C s | t |< |t| < dS )z'Register a PBES2 pseudo-random functionN)r r )re r| r# r# r$ �register_pbes2_prf� s r} r- c C sn |t v r3t | }t| }t|�\}}}t�|�}tt||dd� d|�} t||| |�}
|||
�| �fS t d��)z�Encrypt PKCS#1 key data
This function encrypts PKCS#1 key data using the specified cipher
and passphrase. Available ciphers include:
aes128-cbc, aes192-cbc, aes256-cbc, des-cbc, des3-cbc
NrK r �#Unknown PKCS#1 encryption algorithm)
r r r �os�urandomrB r r r1 r ) r- rm r9 rn r% r< rY r& r( r' r[ r# r# r$ �
pkcs1_encrypt� s
r� r( c
C sV |t v r't | }t|�\}}}tt||dd� d|�}t||||�} | �| �S td��)z�Decrypt PKCS#1 key data
This function decrypts PKCS#1 key data using the specified algorithm,
initialization vector, and passphrase. The algorithm name and IV
should be taken from the PEM DEK-Info header.
NrK r r~ )r r rB r r r5 r )
r- rn r( r9 r% r< rC r& r' r[ r# r# r$ �
pkcs1_decrypt� s
r� �versionc C s |dkr(||ft v r(t ||f }t| \}}}|} t�d�df}
||
|||�} nS|dkrw|tv rwt| } t| \}
}t|�\}
}}
t�d�dg}t�|�}| |f}|dkrg|tv rc|�t| df� nt d��t
} t t |�f|f}
t
|
|�} nt d��t| |
f| �| �f�S ) a Encrypt PKCS#8 key data
This function encrypts PKCS#8 key data using the specified cipher,
hash, encryption version, and passphrase.
Available ciphers include:
aes128-cbc, aes192-cbc, aes256-cbc, blowfish-cbc, cast128-cbc,
des-cbc, des2-cbc, des3-cbc, rc4-40, and rc4-128
Available hashes include:
md5, sha1, sha256, sha384, sha512
Available versions include 1 for PBES1 and 2 for PBES2.
Only some combinations of cipher, hash, and version are supported.
r rK i rW r NzUnknown PBES2 hash function�#Unknown PKCS#8 encryption algorithm)r r r r� r r r r �appendr �_ES2� _ES2_PBKDF2rX rl r r1 )r- rp re r� r9 rq rr r8 r% �algrV r[ ru rC rY r` r( r] r# r# r$ �
pkcs8_encrypt� s,
r� �key_datac
C s� t | t�r t| �dkrtd��| \}}t |t�r#t|�dks#t |t�s'td��|\}}|tkr5t||�}n|tv rHt| \}}} ||||| �}ntd��zt|� |��W S t
t fyb td�d�w )z�Decrypt PKCS#8 key data
This function decrypts key data in PKCS#8 EncryptedPrivateKeyInfo
format using the specified passphrase.
rW z#Invalid PKCS#8 encrypted key formatr� z!Invalid PKCS#8 encrypted key dataN) r> rX r/ r r0 r� rl r r
r5 r
�UnicodeDecodeError)
r� r9 �
alg_paramsr- r� rV r[ rr r8 r% r# r# r$ �
pkcs8_decrypt� s& �
�r� ))�
aes128-cbcs AES-128-CBCr� )�
aes192-cbcs AES-192-CBCr� )�
aes256-cbcs AES-256-CBCr� )�des-cbcs DES-CBCr� )�des3-cbcs DES-EDE3-CBCr� r� r r zdes2-cbcr� zrc4-40� arcfour40zrc4-128�arcfourr� r� r� z blowfish-cbcz cast128-cbc�pbkdf2�sha224�sha256�sha384�sha512)^r" �hashlibr r r �typingr r r r r �asn1r
r r r
�cryptor r r �miscr r �_Cipher�objectr6 �_PKCS8CipherHandler� _PKCS8Cipherr0 �_PBES2CipherHandler� _PBES2Cipherr7 �_PBES2KDFHandler� _PBES2KDF� _ES1_MD5_DES�
_ES1_SHA1_DESr� � _P12_RC4_128� _P12_RC4_40� _P12_DES3� _P12_DES2� _ES2_CAST128� _ES2_DES3�_ES2_BF�_ES2_DES� _ES2_AES128� _ES2_AES192� _ES2_AES256r� � _ES2_SHA1� _ES2_SHA224� _ES2_SHA256� _ES2_SHA384� _ES2_SHA512r �__annotations__r r r r r r r r r �
ValueErrorr r rB rU rZ r\ r_ rf rl ro rs rw r{ r} r� r� r� r� �_pkcs1_cipher_list�_pkcs8_cipher_list�_pbes2_cipher_list�_pbes2_kdf_list�_pbes2_prf_list�_pkcs1_cipher_args�_pkcs8_cipher_args�_pbes2_cipher_args�_pbes2_kdf_args�_pbes2_prf_argsr# r# r# r$ �<module> sJ $��
� ���
�(�
��
�
�
�0
#�
�
����
�
���
�
��
�
�
��
���
�5! �
� �� �