Ë
|
¬`ie ã óf d dl d dlmZmZmZmZ d dlmZmZm Z ddgZ
|
ddd e« dfdZ d dZ y)
|
é )Ú*)ÚDerNullÚ DerSequenceÚ DerObjectIdÚDerOctetString)ÚPBES1ÚPBES2Ú PbesErrorÚwrapÚunwrapNc ó |t t |« g« }nt t |« |g« }t d|t | « g« }|j « } || S |s t d« t |« }|d}t j | ||||« S )a2 Wrap a private key into a PKCS#8 blob (clear or encrypted).
|
|
Args:
|
|
private_key (bytes):
|
The private key encoded in binary form. The actual encoding is
|
algorithm specific. In most cases, it is DER.
|
|
key_oid (string):
|
The object identifier (OID) of the private key to wrap.
|
It is a dotted string, like ``'1.2.840.113549.1.1.1'`` (for RSA keys)
|
or ``'1.2.840.10045.2.1'`` (for ECC keys).
|
|
Keyword Args:
|
|
passphrase (bytes or string):
|
The secret passphrase from which the wrapping key is derived.
|
Set it only if encryption is required.
|
|
protection (string):
|
The identifier of the algorithm to use for securely wrapping the key.
|
Refer to :ref:`the encryption parameters<enc_params>` .
|
The default value is ``'PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC'``.
|
|
prot_params (dictionary):
|
Parameters for the key derivation function (KDF).
|
Refer to :ref:`the encryption parameters<enc_params>` .
|
|
key_params (DER object or None):
|
The ``parameters`` field to use in the ``AlgorithmIdentifier``
|
SEQUENCE. If ``None``, no ``parameters`` field will be added.
|
By default, the ASN.1 type ``NULL`` is used.
|
|
randfunc (callable):
|
Random number generation function; it should accept a single integer
|
N and return a string of random data, N bytes long.
|
If not specified, a new RNG will be instantiated
|
from :mod:`Crypto.Random`.
|
|
Returns:
|
bytes: The PKCS#8-wrapped private key (possibly encrypted).
|
r zEmpty passphrasez"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC)r r r ÚencodeÚ
|
ValueErrorÚtobytesr Úencrypt)
|
Ú private_keyÚkey_oidÚ
|
passphraseÚ
|
protectionÚ prot_paramsÚ
|
key_paramsÚrandfuncÚ algorithmÚpk_infoÚ pk_info_ders
|
õb H:\项ç®\archive\æµè¯ç»\èæ¬\Change_password\venv_build\Lib\site-packages\Crypto/IO/PKCS8.pyr r 2 sª ðj ÐÜ ¤¨WÓ!5Ð 6Ó7 ä ¤¨WÓ!5°zÐ BÓC äØØÜ {Ó+ðó Gð
|
..Ó"KàÐØÐá ÜÐ+Ó,Ð,ô Ó$JØÐØ9
|
Ü == jØ# [°(ó <ð <ó c óÔ |Qt |« }d} t j | |« } d}|s t j | |« } d}|st dz « t « j | d ¬
|
« }t |« d k( r |s t d « |d d k( rt |« dvr6t d« |d dk( rt |« dvrt d« t d« t « j |d d¬
|
« }t « j |d « j }t |« dk( rd}n t « j |d « d}t « j |d « j } || |fS # t $ r}dt |« z }Y d}~hd}~wt
|
$ r d}Y yw xY w# t $ r }dt |« z z }Y d}~d}~wt
|
$ r dz }Y w xY w# |d }Y xY w)aN Unwrap a private key from a PKCS#8 blob (clear or encrypted).
|
|
Args:
|
p8_private_key (bytes):
|
The private key wrapped into a PKCS#8 container, DER encoded.
|
|
Keyword Args:
|
passphrase (byte string or string):
|
The passphrase to use to decrypt the blob (if it is encrypted).
|
|
Return:
|
A tuple containing
|
|
#. the algorithm identifier of the wrapped key (OID, dotted string)
|
#. the private key (bytes, DER encoded)
|
#. the associated parameters (bytes, DER encoded) or ``None``
|
|
Raises:
|
ValueError : if decoding fails
|
NFTz PBES1[%s]zPBES1[Invalid]z
|
,PBES2[%s]z,PBES2[Invalid]zError decoding PKCS#8 (%s))é é é é )Ú nr_elementsr z;Not a valid clear PKCS#8 structure (maybe it is encrypted?)r )r r! z#Not a valid PrivateKeyInfo SEQUENCEé )r r! r" )r$ r )r r Údecryptr
|
Ústrr r r ÚdecodeÚlenr Úvaluer r Úpayload)
|
Úp8_private_keyr ÚfoundÚeÚ error_strr ÚalgoÚalgo_oidÚ algo_paramsr s
|
r r r sû ð, Ð Ü ZÓ(
|
àð )Ü "]]¨>¸:Ó FNØEñ ð /Ü!&§ ¡ ¨~¸zÓ!JØ ñ Ü Ð 9¸IÑ EÓFÐ Fäm×"Ñ" >¸|Ð"ÓLGÜ
|
7|qÒ¡Üð 4ó 5ð 5ð0 qzQÜ w<vÑ %Ü Ð BÓCÐ CØ q Ü w<yÑ (Ü Ð BÓCÐ CäÐ>Ó?Ð?ä =× Ñ ¨¡
|
¸Ð Ó ?DÜ}×#Ñ# D¨¡GÓ,×2Ñ2HÜ
|
4yA~Ø ð "Ü I× Ñ T !WÔ %Ø Kô
|
!Ó"×)Ñ)¨'°!©*Ó5×=Ñ=Kð k ;Ð /Ð/øôI ò -Ø#¤c¨!£fÑ,IûÜò )Ø(Ið )ûô ò 3Ø\¬C°«FÑ 2Ñ2 ûÜ ò /ØÐ .Ñ. ð /ûðb "Ø q'KúsF E4 ¬F& Ä+ G Å4 F#Å=FÆF#Æ"F#Æ& GÆ/GÇGÇGÇ G')N) ÚCrypto.Util.py3compatÚCrypto.Util.asn1r r r r ÚCrypto.IO._PBESr r r
|
Ú__all__r r © r r ú<module>r7 sF ðôF $÷ó ÷ 4Ñ 3ð 8Ð
|
ð +/¸4Ø¡g£i¸$óL<ô^a0r
|
