File: //usr/local/CyberPanel/lib64/python3.10/site-packages/paramiko/__pycache__/ecdsakey.cpython-310.pyc
o
�h�- � @ s� d Z ddlmZmZ ddlmZ ddlmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ G d d
� d
�ZG dd� d�ZG dd� de�ZdS )z
ECDSA keys
� )�InvalidSignature�UnsupportedAlgorithm)�default_backend)�hashes�
serialization)�ec)�decode_dss_signature�encode_dss_signature)� four_byte)�Message)�PKey)� SSHException)� deflate_longc @ s e Zd ZdZdd� ZdS )� _ECDSACurvez�
Represents a specific ECDSA Curve (nistp256, nistp384, etc).
Handles the generation of the key format identifier and the selection of
the proper hash function. Also grabs the proper curve from the 'ecdsa'
package.
c C sT || _ |j| _d| j | _| jdkrtj| _n| jdkr!tj| _ntj| _|| _ d S )N� ecdsa-sha2-� i� )
� nist_name�key_size�
key_length�key_format_identifierr �SHA256� hash_object�SHA384�SHA512� curve_class)�selfr r � r �G/usr/local/CyberPanel/lib/python3.10/site-packages/paramiko/ecdsakey.py�__init__0 s
z_ECDSACurve.__init__N)�__name__�
__module__� __qualname__�__doc__r r r r r r ' s r c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd S )
�_ECDSACurveSetz�
A collection to hold the ECDSA curves. Allows querying by oid and by key
format identifier. The two ways in which ECDSAKey needs to be able to look
up curves.
c C s
|| _ d S �N�� ecdsa_curves)r r& r r r r I �
z_ECDSACurveSet.__init__c C s dd� | j D �S )Nc S s g | ]}|j �qS r )r )�.0�curver r r �
<listcomp>M s zA_ECDSACurveSet.get_key_format_identifier_list.<locals>.<listcomp>r% �r r r r � get_key_format_identifier_listL s z-_ECDSACurveSet.get_key_format_identifier_listc C �" | j D ] }|j|kr| S qd S r$ )r& r )r r r) r r r �get_by_curve_classO �
��z!_ECDSACurveSet.get_by_curve_classc C r- r$ )r& r )r r r) r r r � get_by_key_format_identifierT r/ z+_ECDSACurveSet.get_by_key_format_identifierc C r- r$ )r& r )r r r) r r r �get_by_key_lengthY r/ z _ECDSACurveSet.get_by_key_lengthN) r r r! r" r r, r. r0 r1 r r r r r# B s r# c @ s e Zd ZdZeeejd�eejd�eej d�g�Z
d-dd�Z e d d
� �Z
e d d � �Zd
d� Zdd� Zedd� �Zdd� Zdd� Zdd� Zd.dd�Zdd � Zd.d d �Zd.d d �Ze e�� ddfd!d"��Zd#d$� Zd%d&� Z d'd(� Z d)d*� Z d+d,� Z dS )/�ECDSAKeyz\
Representation of an ECDSA key which can be used to sign and verify SSH2
data.
�nistp256�nistp384�nistp521NTc C sJ d | _ d | _d | _|d ur| �||� d S |d ur!| �||� d S |d u r-|d ur-t|�}|d urE|\| _| _ | jjj}| j� |�| _
d S |� � } d}
| � |
�rY| d t
|
� � } | j�| �| _
| j�� } dd� | D �} | j|| | d� |� � }
|
| j
jkr�td�|
���|�� }ztj�| j
�� |�}|| _ W d S ty� td��w )Nz-cert-v01@openssh.comc S s g | ]}d � |��qS )z{}-cert-v01@openssh.com)�format)r( �xr r r r* � s
�z%ECDSAKey.__init__.<locals>.<listcomp>)�msg�key_type� cert_typez Can't handle curve of type {}zInvalid public key)�
verifying_key� signing_key� public_blob�_from_private_key�_from_private_key_filer r) � __class__�
_ECDSA_CURVESr. � ecdsa_curve�get_text�endswith�lenr0 r, �_check_type_and_load_certr r
r6 �
get_binaryr �EllipticCurvePublicKey�from_encoded_pointr �
ValueError)r r8 �data�filename�password�vals�file_obj�validate_point�c_classr9 �suffix� key_types�
cert_types� curvename� pointinfo�keyr r r r m sV
�
�� �
� �zECDSAKey.__init__c C s
| j �� S r$ )rA r, ��clsr r r � identifiers� s
zECDSAKey.identifiersc C � | � � S r$ )rZ rX r r r � supported_key_format_identifiers� s z)ECDSAKey.supported_key_format_identifiersc C s� | j }t� }|�| jj� |�| jj� |�� }|jjd d }t |j
dd�}d|t |� | }t |j dd�}d|t |� | }t
| | }|�|� |�� S )N� � F)�add_sign_padding� )r; r �
add_stringrB r r �public_numbersr) r r r7 rE �yr
�asbytes)r rW �m�numbers�key_size_bytes�x_bytes�y_bytes� point_strr r r rd � s
zECDSAKey.asbytesc C r[ r$ )rd r+ r r r �__str__� � zECDSAKey.__str__c C s | � � | j�� j| j�� jfS r$ )�get_namer; rb r7 rc r+ r r r �_fields� s
�zECDSAKey._fieldsc C � | j jS r$ )rB r r+ r r r rm � rl zECDSAKey.get_namec C ro r$ )rB r r+ r r r �get_bits� rl zECDSAKey.get_bitsc C s
| j d uS r$ )r< r+ r r r �can_sign� r' zECDSAKey.can_signc C sT t �| j�� �}| j�||�}t|�\}}t� }|�| jj � |�| �
||�� |S r$ ) r �ECDSArB r r< �signr r ra r �
_sigencode)r rK � algorithm�ecdsa�sig�r�sre r r r �
sign_ssh_data� s zECDSAKey.sign_ssh_datac C sl |� � | jjkr
dS |�� }| �|�\}}t||�}z| j�||t� | j�
� �� W dS t y5 Y dS w )NFT) rC rB r rG �
_sigdecoder r; �verifyr rr r r )r rK r8 rw �sigR�sigS� signaturer r r �verify_ssh_sig� s
� ��zECDSAKey.verify_ssh_sigc C � | j || jtjj|d� d S �N)rM )�_write_private_key_filer< r �
PrivateFormat�TraditionalOpenSSL)r rL rM r r r �write_private_key_file� �
�z ECDSAKey.write_private_key_filec C r� r� )�_write_private_keyr< r r� r� )r rO rM r r r �write_private_key� r� zECDSAKey.write_private_keyc C sT |dur| j �|�}|du rtd�|���|�� }tj|t� d�}t||� � fd�S )a
Generate a new private ECDSA key. This factory function can be used to
generate a new host key or authentication key.
:param progress_func: Not used for this type of key.
:returns: A new private key (`.ECDSAKey`) object
Nz Unsupported key length: {:d})�backend)rN )
rA r1 rJ r6 r r �generate_private_keyr r2 �
public_key)rY r) �
progress_func�bits� private_keyr r r �generate s zECDSAKey.generatec C � | � d||�}| �|� d S �N�EC)�_read_private_key_file� _decode_key)r rL rM rK r r r r? � z ECDSAKey._from_private_key_filec C r� r� )�_read_private_keyr� )r rO rM rK r r r r> r� zECDSAKey._from_private_keyc C s |\}}|| j kr+z tj|d t� d�}W n_ ttttfy* } ztt |���d }~ww || j
kroz,t |�}|� � }|�
� }|�� }d| } | j�| �}
|
sQtd��t�||
�� t� �}W n tyn } ztt |���d }~ww | �|� || _|�� | _|jj} | j�| �| _ d S )N)rM r� r z Invalid key curve identifier) � _PRIVATE_KEY_FORMAT_ORIGINALr �load_der_private_keyr rJ �AssertionError� TypeErrorr r
�str�_PRIVATE_KEY_FORMAT_OPENSSHr rC rG � get_mpintrA r0 r �derive_private_keyr � Exception�_got_bad_key_format_idr< r� r; r) r@ r. rB ) r rK �pkformatrW �er8 �
curve_name�verkey�sigkey�namer) r r r r r� " sJ
� � ��
� ��
zECDSAKey._decode_keyc C s" t � }|�|� |�|� |�� S r$ )r � add_mpintrd )r rx ry r8 r r r rt I s
zECDSAKey._sigencodec C s t |�}|�� }|�� }||fS r$ )r r� )r rw r8 rx ry r r r r{ O s zECDSAKey._sigdecode)NNNNNNTr$ ) r r r! r" r# r r � SECP256R1� SECP384R1� SECP521R1rA r � classmethodrZ r\ rd rk �propertyrn rm rp rq rz r� r� r� r� r? r> r� rt r{ r r r r r2 _ sL
��
�>
' r2 N)r" �cryptography.exceptionsr r � cryptography.hazmat.backendsr � cryptography.hazmat.primitivesr r �)cryptography.hazmat.primitives.asymmetricr �/cryptography.hazmat.primitives.asymmetric.utilsr r �paramiko.commonr
�paramiko.messager �
paramiko.pkeyr �paramiko.ssh_exceptionr
�
paramiko.utilr r r# r2 r r r r �<module> s