File: //usr/local/CyberPanel/lib64/python3.10/site-packages/asyncssh/__pycache__/rsa.cpython-310.pyc
o
�h�, �
@ sX d Z ddlmZmZmZmZ ddlmZmZm Z m
Z
ddl m Z m
Z
ddlmZ ddlmZmZmZ ddlmZmZmZ dd lmZmZ dd
lmZ d d d
dd dd
d d d� Zee e e e e e e e f Z ee e e e e e e e e f Z ee e f Z da!de ddfdd�Z"G dd� de�Z#ede#d� e#j$D ]
Z%ede%e%d e#ed� q�e#j&D ]Z%ee%d� q�dS ) z!RSA public key encryption handler� )�Optional�Tuple�Union�cast� )�ASN1DecodeError�ObjectIdentifier�
der_encode�
der_decode)�
RSAPrivateKey� RSAPublicKey)�all_ints)�MPInt�String� SSHPacket)�SSHKey�SSHOpenSSHCertificateV01�KeyExportError)�register_public_key_alg�register_certificate_alg)� register_x509_certificate_alg�sha1�sha256�sha512�sha224�sha384) � ssh-rsa� rsa-sha2-256� rsa-sha2-512� ssh-rsa-sha224@ssh.com� ssh-rsa-sha256@ssh.com� ssh-rsa-sha384@ssh.com� ssh-rsa-sha512@ssh.coms rsa1024-sha1� rsa2048-sha256F�skip_validation�returnNc C s | a dS )a\ Set whether to disable RSA key validation in OpenSSL
OpenSSL 3.x does additional validation when loading RSA keys
as an added security measure. However, the result is that
loading a key can take significantly longer than it did before.
If all your RSA keys are coming from a trusted source, you can
call this function with a value of `True` to default to skipping
these checks on RSA keys, reducing the cost back down to what it
was in earlier releases.
This can also be set on a case by case basis by using the new
`unsafe_skip_rsa_key_validation` argument on the functions used
to load keys. This will only affect loading keys of type RSA.
.. note:: The extra cost only applies to loading existing keys, and
not to generating new keys. Also, in cases where a key is
used repeatedly, it can be loaded once into an `SSHKey`
object and reused without having to pay the cost each time.
So, this call should not be needed in most applications.
If an application does need this, it is strongly
recommended that the `unsafe_skip_rsa_key_validation`
argument be used rather than using this function to
change the default behavior for all load operations.
N)� _default_skip_rsa_key_validation)r$ � r' �B/usr/local/CyberPanel/lib/python3.10/site-packages/asyncssh/rsa.py�#set_default_skip_rsa_key_validation5 s !r) c
@ sV e Zd ZU dZeeef ed< dZdZ dZ
e d�Z dZ
dZed d
� eD ��Zd Zed d
� eD ��Zeee
�Zd
edefdd�Zdefdd�Zeddd�dedededd fdd��Z edede fd d ��Z edede fd d ��Z ed ede e! fd!d"��Z"ed ede e# fd#d$��Z$ed%ed&ede e! fd'd(��Z%ed%ed&ede e# fd)d*��Z&ed+e'de!fd,d-��Z(ed+e'de#fd.d/��Z)defd0d1�Z*defd2d3�Z+de,eef fd4d5�Z-de,eef fd6d7�Z.defd8d9�Z/defd:d;�Z0defd<d=�Z1d&ed>edefd?d@�Z2d&ed>ed+e'defdAdB�Z3d&edede e fdCdD�Z4d&edede e fdEdF�Z5dGS )H�RSAKeyz%Handler for RSA public key encryption�_keyr r s RSAz1.2.840.113549.1.1.1)r r r r r! r" r )r r r c c s � | ]}|d V qdS )� -cert-v01@openssh.comNr' ��.0�algr' r' r( � <genexpr>g s � �zRSAKey.<genexpr>)r# r c c s � | ]}d | V qdS )s x509v3-Nr' r- r' r' r( r0 j s � �otherr% c C s> t |t�stS | jj|jjko | jj|jjko | jj|jjkS �N)�
isinstancer* �NotImplementedr+ �n�e�d)�selfr1 r' r' r( �__eq__m s
��z
RSAKey.__eq__c C s& t | jj| jj| jj| jj| jjf�S r2 )�hashr+ r5 r6 r7 �p�q�r8 r' r' r( �__hash__x s �zRSAKey.__hash__i i )�key_size�exponent� algorithmr? r@ c C s | t �||��S )z Generate a new RSA private key)r �generate)�clsrA r? r@ r' r' r( rB | s zRSAKey.generate�
key_paramsc C sF t t|�\ }}}}}}}} }
|
du rt}
| t�|||||||| |
� �S )z Construct an RSA private keyN)r �_PrivateKeyConstructArgsr& r � construct) rC rD r5 r6 r7 r; r< �dmp1�dmq1�iqmp� unsafe_skip_rsa_key_validationr' r' r( � make_private� s ��zRSAKey.make_privatec C s t t|�\}}| t�||��S )zConstruct an RSA public key)r �_PublicKeyArgsr rF )rC rD r5 r6 r' r' r( � make_public� s zRSAKey.make_public�key_datac C s4 t |t�rt|�rt|�dkrtt|dd� �S dS )z&Decode a PKCS#1 format RSA private key� r N)r3 �tupler
�lenr �_PrivateKeyArgs�rC rN r' r' r( �decode_pkcs1_private� s zRSAKey.decode_pkcs1_privatec C s, t |t�rt|�rt|�dkrtt|�S dS )z%Decode a PKCS#1 format RSA public key� N)r3 rP r
rQ r rL rS r' r' r( �decode_pkcs1_public� s
zRSAKey.decode_pkcs1_public�
alg_params�datac C �8 |durdS zt |�}W n
ty Y dS w | �|�S )z&Decode a PKCS#8 format RSA private keyN)r
r rT �rC rW rX rN r' r' r( �decode_pkcs8_private� � �
zRSAKey.decode_pkcs8_privatec C rY )z%Decode a PKCS#8 format RSA public keyN)r
r rV rZ r' r' r( �decode_pkcs8_public� r\ zRSAKey.decode_pkcs8_public�packetc C sT |� � }|� � }|� � }|� � }|� � }|� � }|||||||d ||d |fS )z$Decode an SSH format RSA private keyr �� get_mpint)rC r^ r5 r6 r7 rI r; r< r' r' r( �decode_ssh_private� s $zRSAKey.decode_ssh_privatec C s |� � }|� � }||fS )z#Decode an SSH format RSA public keyr_ )rC r^ r6 r5 r' r' r( �decode_ssh_public� s zRSAKey.decode_ssh_publicc C sF | j jstd��d| j j| j j| j j| j j| j j| j j| j j| j j f S )z&Encode a PKCS#1 format RSA private key�Key is not privater )
r+ r7 r r5 r6 r; r< rG rH rI r= r' r' r( �encode_pkcs1_private� s
�zRSAKey.encode_pkcs1_privatec C s | j j| j jfS )z%Encode a PKCS#1 format RSA public key)r+ r5 r6 r= r' r' r( �encode_pkcs1_public� � zRSAKey.encode_pkcs1_publicc C � dt | �� �fS )z&Encode a PKCS#8 format RSA private keyN)r rd r= r' r' r( �encode_pkcs8_private� rf zRSAKey.encode_pkcs8_privatec C rg )z%Encode a PKCS#8 format RSA public keyN)r re r= r' r' r( �encode_pkcs8_public� rf zRSAKey.encode_pkcs8_publicc C s� | j jstd��| j jdusJ �| j jdusJ �| j jdus J �d�t| j j�t| j j �t| j j�t| j j�t| j j�t| j j�f�S )z$Encode an SSH format RSA private keyrc N� )
r+ r7 r rI r; r< �joinr r5 r6 r= r' r' r( �encode_ssh_private� s �zRSAKey.encode_ssh_privatec C s d� t| jj�t| jj�f�S )z#Encode an SSH format RSA public keyrj )rk r r+ r6 r5 r= r' r' r( �encode_ssh_public
s zRSAKey.encode_ssh_publicc C sr | j jstd��| j jdusJ �| j jdusJ �| j jdus J �d�t| j j�t| j j�t| j j�t| j j�f�S )z1Encode RSA certificate private key data for agentrc Nrj )r+ r7 r rI r; r< rk r r= r' r' r( �encode_agent_cert_private s �z RSAKey.encode_agent_cert_private�
sig_algorithmc C s& | j jstd��t| j �|t| ��S )z6Compute an SSH-encoded signature of the specified dataz Private key needed for signing)r+ r7 �
ValueErrorr �sign�
_hash_algs)r8 rX ro r' r' r( �sign_ssh s zRSAKey.sign_sshc C s$ |� � }|�� | j�||t| �S )z5Verify an SSH-encoded signature of the specified data)�
get_string� check_endr+ �verifyrr )r8 rX ro r^ �sigr' r' r( �
verify_ssh$ s zRSAKey.verify_sshc C � t t| j�}|�|t| �S )z%Encrypt a block of data with this key)r r r+ �encryptrr )r8 rX rA �pub_keyr' r' r( rz - � zRSAKey.encryptc C ry )z%Decrypt a block of data with this key)r r r+ �decryptrr )r8 rX rA �priv_keyr' r' r( r} 3 r| zRSAKey.decryptN)6�__name__�
__module__� __qualname__�__doc__r r r �__annotations__rA �default_x509_hash�pem_namer � pkcs8_oid�sig_algorithms�cert_sig_algorithmsrP �cert_algorithms�x509_sig_algorithms�x509_algorithms�set�all_sig_algorithms�object�boolr9 �intr> � classmethod�bytesrB r rK rM r rR rT rL rV r[ r] r ra rb rd re r rh ri rl rm rn rs rx rz r} r' r' r' r( r* Y s�
�
��� � �
�
� �� �
�
� r* r Tr, )'r� �typingr r r r �asn1r r r r
�cryptor r �miscr
r^ r r r �
public_keyr r r r r r rr r� rR r� rE rL r& r) r* r� �_algr� r' r' r' r( �<module> sD � $ b
�
�