File: //usr/local/CyberPanel/lib64/python3.10/site-packages/asyncssh/__pycache__/sk.cpython-310.pyc
o
�hC. � @ s< d Z ddlmZ ddlZddlmZ ddlZddlZddlm Z m
Z
m Z m Z m
Z
ddlmZmZmZmZ ed�Zeeeeef ZdZd Zd
Zd Zd Zd
ede ee f defdd�Z dedefdd�Z de de def de defdd�Z d d d
ed edeeef fd d �Z!d d d
ed ed!ed"e
e d#e"deeef fd$d%�Z#d
ed ed!edeeef fd&d'�Z$d d d(ed ed)edeeeef f
d*d+�Z%d d d(ed ed)ed,e"deeeef f d-d.�Z&d/ed ed)edeeeeef fd0d1�Z'd/ed edefd2d3�Z(d
ed ed!ed"e
e d#e"deeef f d4d5�Z) 6dHd/ed ed)ed7ed8e"deeeeef f d9d:�Z*d ed!e
e d"edee fd;d<�Z+zCdd=l,m-Z- dd>l.m/Z/ dd?l0m1Z1m2Z2m3Z3 dd@l4m5Z5m6Z6m7Z7 ddAl4m8Z8 ddBl9m:Z: dCZ;e-�<� �owe=edD��owej>j?�@� ZAW dS eBeCeDf�y� d6Z;d6ZAde dEe de fdFdG�ZEeEZ)eEZ*eEZ+Y dS w )IzU2F security key handler� )�urlsafe_b64encodeN)�sha256)�Callable�List�Mapping�NoReturn�Optional)�Sequence�Tuple�TypeVar�cast� _PollResultg�������?s � i����i�����alg�
public_key�returnc C s0 t t|d �}| tkr
|S d| t t|d � S )z8Decode algorithm and public value from a CTAP public key���� ���)r �bytes�SSH_SK_ED25519)r r �result� r �A/usr/local/CyberPanel/lib/python3.10/site-packages/asyncssh/sk.py�_decode_public_key0 s r �_rp_id�_originc C s dS )z@Allow any relying party name -- SSH encodes the application hereTr )r r r r r �
_verify_rp_id; s r �
poll_interval�func.�argsc
G sL z||� W S t y$ } z|jtjkr� t�| � W Y d}~nd}~ww q)z'Poll until a CTAP1 response is receivedTN)� ApduError�code�APDU�USE_NOT_SATISFIED�time�sleep)r r r �excr r r � _ctap1_pollA s
���r( �dev�
CtapHidDevice� applicationc C sF t | �}|tkr td��t|�d���� }tt|jt |�}|j
|j fS )z.Enroll a new security key using CTAP version 1zUnsupported algorithm�utf-8) �Ctap1� SSH_SK_ECDSA�
ValueErrorr �encode�digestr( �_CTAP1_POLL_INTERVAL�register� _dummy_hashr �
key_handle)r) r r+ �ctap1�app_hash� registrationr r r �
_ctap1_enrollO s � r9 �user�pin�residentc C s� t | �}||d�}|�d�|d�}d|d�g} d|i}
|r6t� } t|| ��|�} t�| tt�� � dd� }
nd} d}
| r?| j
nd}|j t||| |
|
|d�}|j j
}t||j�|jfS ) z.Enroll a new security key using CTAP version 2��id�namer, �
public-key��typer �rkN� )�options� pin_uv_param�pin_uv_protocol)�Ctap2r0 �
PinProtocolV1� ClientPin�
get_pin_token�hmac�newr4 r r1 �VERSION�make_credential� auth_data�credential_datar r �
credential_id)r) r r+ r: r; r< �ctap2�rp� user_cred�
key_paramsrE � pin_protocol� pin_token�pin_auth� pin_version�cred�cdatar r r �
_ctap2_enroll_ s$
�r] c
C sf t |td�}||d�}|�d�|d�}d| d�g}||d|d�}|�|�}|jjj} t| | j�| j fS )z4Enroll a new security key using Windows WebAuthn API��verifyr= r, r@ rA � )rT r: � challenge�pubKeyCredParams)
�
WindowsClientr r0 rO �attestation_objectrP rQ r r rR )
r r+ r: �clientrT rU rV rE r r\ r r r � _win_enroll� s
�
rf � message_hashr5 c
C s^ t | �}t|�d���� }tt|j|||�}|d }t�|dd� d�}|dd� } ||| fS )z7Sign a message with a security key using CTAP version 1r, r r � �bigN) r- r r0 r1 r( r2 � authenticate�int�
from_bytes)
r) rg r+ r5 r6 r7 �
auth_response�flags�counter�sigr r r � _ctap1_sign� s �
rq �touch_requiredc
C sb t | �}d|d�g}d|i}|r|j|||ddid� |j||||d�d }|j} | j| j|jfS )z7Sign a message with a security key using CTAP version 2r@ �rB r> �upF)rE r )rH �get_assertionsrP rn ro � signature)
r) rg r+ r5 rr rS � allow_credsrE � assertionrP r r r � _ctap2_sign� s
�
��ry �datac C sR t |td�}d|d�g}| ||d�}|�|��d�}|j}|j|j|jt|j �fS )z=Sign a message with a security key using Windows WebAuthn APIr^ r@ rs )ra �rpId�allowCredentialsr )
rc r �
get_assertion� get_response�authenticator_datarn ro rv r � client_data)rz r+ r5 re �credsrE r rP r r r � _win_sign� s � �r� c C s$ dt | ��d� d |�d� d S )z#Calculate a WebAuthn request prefixs$ {"type":"webauthn.get","challenge":"� =s ","origin":"r, � ")r �rstripr0 )rz r+ r r r �sk_webauthn_prefix� s ����r� c
C s t rt| ||�S ztt�� �}W n ty td�d�w zczt|| ||||�W W |�� S t yX } z |j
t j j krAtd�d�|j
t j j
krMtd�d�tt|��d�d}~w ty� zt|| |�W Y W |�� S ty } ztt|��d�d}~ww w |�� w )zEnroll a new security keyzNo security key foundNz PIN required� Invalid PIN)�sk_use_webauthnrf �nextr* � list_devices�
StopIterationr/ r] �close� CtapErrorr" �ERR�
PUAT_REQUIRED� PIN_INVALID�strr9 r! )r r+ r: r; r< r) r' r r r � sk_enroll� s6
�
�
�
����
r� Frn � is_webauthnc C sb t |t@ �}|rtrt| ||�S |rt| |�d } t| ��� }t�� D ]�}z�zt |||||�\}}} ||| | fW W |�
� S t y_ }
z|
j t j
jkrUtt|
��d�W Y d}
~
nGd}
~
w ty� zt||||�\}}} ||| | fW Y W |�
� S ty� }
z|
j tjkr�tt|
��d�W Y d}
~
nd}
~
ww Y nw W |�
� q#|�
� w td��)z"Sign a message with a security key� }Nz!Security key credential not found)�bool�SSH_SK_USER_PRESENCE_REQDr� r� r� r r1 r* r� ry r� r� r" r� �NO_CREDENTIALSr/ r� rq r! r# �
WRONG_DATA) rz r+ r5 rn r� rr rg r) ro rp r' r r r �sk_sign� sH
�� ��
�� �����
r� c C s� t | �d���� }g }t�� D ]�}z�zpt|�}t� }t||��|�}t |||�} | �
|�D ]S}
t t t
tf |
t jj �} t t
| d �} |rJ| |krJq-t t t
tf |
t jj �}
t t|
d �}t t ttf |
t jj �}t t|d �}t||�}|�|| ||f� q-W n= ty� } z1|jtjjkr�W Y d}~W |�� q|jtjj kr�t d�d�|jtjj kr�t d�d�t t
|��d�d}~ww W |�� q|�� w |S )z#Get keys resident on a security keyr, r? r> � Nr� z PIN not set) r r0 r1 r* r� rH rI rJ rK �CredentialManagement�enumerate_credsr r r� �object�RESULT�USER�
CREDENTIAL_IDr rk �
PUBLIC_KEYr �appendr� r" r� r� r� r� r/ � PIN_NOT_SET)r+ r: r; r7 r r) rS rW rX � cred_mgmtr[ � user_infor? �cred_idr5 r r � public_valuer' r r r �sk_get_resident sP
�
�
�
�
�
��� r� )rc )r� )r- r# r! )rH rJ rI )r� )r* T�windll�kwargsc O s t d��)z/Report that security key support is unavailablez"Security key support not available)r/ )r r� r r r �_sk_not_availableZ s r� )F)F�__doc__�base64r �ctypes�hashlibr rL r% �typingr r r r r r r
r r r
rk r� r �_SKResidentKeyr2 r4 r� r. r r� r r �floatr( r9 r� r] rf rq ry r� r� r� r� r� � fido2.clientrc �
fido2.ctapr� � fido2.ctap1r- r# r! � fido2.ctap2rH rJ rI r� � fido2.hidr* � sk_available� is_available�hasattrr� �shell32�
IsUserAnAdminr� � ImportError�OSError�AttributeErrorr� r r r r �<module> s� �
�
�
����
�"!�
�
���
�
�
��
� ��
�&�
�1
� �
�