Ë
|
¬`iIÀ ã ó® d dl mZ d dlZd dlZd dlZd dlmZmZmZm Z m
|
Z
|
d dl m Z d dl mZmZmZmZ d dlmZmZmZ d dlmZmZ d dlmZ d d
|
lm Z m Z m Z d d lm Z G d d e!« Z" G d de#« Z$d Z%d Z&d'dZ'd Z(d(dZ)d Z*d Z+d Z,d Z-d Z.d Z/d Z0d Z1d Z2d'd Z3e4d k( r°d dl5Z5d Z6e d! jn jq « Z9d"Z: e5jj « Z; e<e:« D ] Z=e9e6z Z> e?d# e5jj « e;z
|
e:z d$z d%« e5jj « Z; e<e:« D ] Z=e>e6z Z> e?d& e5jj « e;z
|
e:z d$z d%« yy))é )Úprint_functionN)ÚbordÚtobytesÚtostrÚbchrÚ is_string)ÚInteger)Ú DerObjectIdÚDerOctetStringÚ DerSequenceÚ DerBitString)Ú _expand_subject_public_key_infoÚ _create_subject_public_key_infoÚ _extract_subject_public_key_info)ÚSHA512ÚSHAKE256)Úget_random_bytesé )ÚEccPointÚ EccXPointÚ_curves)ÚCurveIDc ó e Zd Zy)ÚUnsupportedEccFeatureN)Ú__name__Ú
|
__module__Ú __qualname__© ó õg H:\项ç®\archive\æµè¯ç»\èæ¬\Change_password\venv_build\Lib\site-packages\Crypto/PublicKey/ECC.pyr r 7 s Ør r c ó´ e Zd ZdZd Zd Zd Zd Zd Zd Z e
|
d « Z e
|
d « Z e
|
d
|
« Z d Zd Zd Zd Zd ZddZd Zd Zd Zd Zd Zd Zd Zy)ÚEccKeyaþ Class defining an ECC key.
|
Do not instantiate directly.
|
Use :func:`generate`, :func:`construct` or :func:`import_key` instead.
|
|
:ivar curve: The **canonical** name of the curve as defined in the `ECC table`_.
|
:vartype curve: string
|
|
:ivar pointQ: an ECC point representing the public component.
|
:vartype pointQ: :class:`EccPoint` or :class:`EccXPoint`
|
|
:ivar d: A scalar that represents the private component
|
in NIST P curves. It is smaller than the
|
order of the generator point.
|
:vartype d: integer
|
|
:ivar seed: A seed that represents the private component
|
in Ed22519 (32 bytes), Curve25519 (32 bytes),
|
Curve448 (56 bytes), Ed448 (57 bytes).
|
:vartype seed: bytes
|
c ó t |« }|j dd« }|j dd« | _ |j dd« | _ |j dd« | _ |"| j r| j j
|
}|rt dt |« z « |t vrt d|z « t | | _
|
| j j | _ t | j du« t | j du« z }|dk( r| j t d « y|d
|
k( r t d « | j j t j k( r·| j t d « t! | j « d k7 r t d« t# j$ | j « j' « }|d d | _ t+ |dd « }|dxx dz cc< |d dz dz |d< t- j. |d¬« | _ y| j j t j0 k( r¼| j t d « t! | j « dk7 r t d« t3 j$ | j « j5 d« }|dd | _ t+ |dd « }|dxx dz cc< |dxx dz cc< d|d< t- j. |d¬« | _ y| j j t j6 k( r| j t d « t! | j « d k7 r t d « t+ | j « }|dxx dz cc< |d dz dz |d< t- j. |d¬« | _ y| j j t j8 k( r| j t d « t! | j « dk7 r t d « t+ | j « }|dxx dz cc< |dxx dz cc< t- j. |d¬« | _ y| j t d « t- | j « | _ d | j cxk r#| j j: k st d « t d « y)!a Create a new ECC key
|
|
Keywords:
|
curve : string
|
The name of the curve.
|
d : integer
|
Mandatory for a private key one NIST P curves.
|
It must be in the range ``[1..order-1]``.
|
seed : bytes
|
Mandatory for a private key on Ed25519 (32 bytes),
|
Curve25519 (32 bytes), Curve448 (56 bytes) or Ed448 (57 bytes).
|
point : EccPoint or EccXPoint
|
Mandatory for a public key. If provided for a private key,
|
the implementation will NOT check whether it matches ``d``.
|
|
Only one parameter among ``d``, ``seed`` or ``point`` may be used.
|
ÚcurveNÚdÚseedÚpointúUnknown parameters: zUnsupported curve (%s)r zGAt lest one between parameters 'point', 'd' or 'seed' must be specifiedé z,Parameters d and seed are mutually exclusivez/Parameter d can only be used with NIST P curvesé z0Parameter seed must be 32 bytes long for Ed25519éø é é é@ Úlittle©Ú byteorderé9 z.Parameter seed must be 57 bytes long for Ed448ér éü é7 é é8 z3Parameter seed must be 32 bytes long for Curve25519z1Parameter seed must be 56 bytes long for Curve448z2Parameter 'seed' cannot be used with NIST P-curvesr z;Parameter d must be an integer smaller than the curve order) ÚdictÚpopÚ_dÚ_seedÚ_pointr$ Ú TypeErrorÚstrr Ú
|
ValueErrorÚ_curveÚ canonicalÚintÚidÚ_CurveIDÚED25519Úlenr ÚnewÚdigestÚ_prefixÚ bytearrayr Ú
|
from_bytesÚED448r ÚreadÚ
|
CURVE25519ÚCURVE448Úorder)ÚselfÚkwargsÚkwargs_Ú
|
curve_nameÚcountÚ seed_hashÚtmps r Ú__init__zEccKey.__init__Q sû ô& v,Ø [[ ¨$Ó/
|
Ø++c 4Ó(Ø [[ ¨Ó.
|
Ø kk '¨4Ó0 Ø Ð $§+¢+Ø ×*Ñ*JÙ ÜÐ 2´S¸³\Ñ AÓBÐ Bà WÑ $Ü Ð 5¸
|
Ñ BÓCÐ CÜ jÑ) Ø[[×*Ñ*
|
äDGG 4Ð'Ó(¬3¨t¯z©zÀÐ/EÓ+FÑFà A:Ø{{Ð"Ü Ð!jÓkÐkØ à A:Ü Ð KÓLÐ Lð
|
;;>>X× -Ñ -Ò -ØwwÐ"Ü Ð!RÓSÐSÜ4:: "Ò$Ü Ð!SÓTÐTÜ
|
|
4§:¡:Ó.×5Ñ5Ó7IØ$ R S>DLÜI c rNÓ+CØ FdNFØ2w ~¨Ñ-CGÜ ×(Ñ(¨¸ÔADGà [[^^x~~Ò -ØwwÐ"Ü Ð!RÓSÐSÜ4:: "Ò$Ü Ð!QÓRÐRÜ T§Z¡ZÓ0×5Ñ5°cÓ:IØ$ R S>DLÜI c rNÓ+CØ FdNFØ GtOGØCGÜ ×(Ñ(¨¸ÔADGà [[^^x× 2Ñ 2Ò 2ØwwÐ"Ü Ð!RÓSÐSÜ4:: "Ò$Ü Ð!VÓWÐWÜDJJÓ'CØ FdNFØ2w ~¨Ñ-CGÜ ×(Ñ(¨¸ÔADGØ [[^^x× 0Ñ 0Ò 0ØwwÐ"Ü Ð!RÓSÐSÜ4:: "Ò$Ü Ð!TÓUÐUÜDJJÓ'CØ FdNFØ GtOGÜ ×(Ñ(¨¸ÔADGð zzÐ%Ü Ð!UÓVÐVÜ dggÓ&DGØÔ3 $§+¡+×"3Ñ"3Ò3Ü Ð!^Ó_Ð_ð 4Ü Ð!^Ó_Ð_ð 4r c ó t |t « sy|j « | j « k7 ry|j | j k( S )NF)Ú
|
isinstancer" Ú has_privateÚpointQ)rQ Úothers r Ú__eq__z EccKey.__eq__³ s? Ü%¤Ô(Øà × Ñ Ó $×"2Ñ"2Ó"4Ò 4Øà||t{{Ñ*Ð*r c ó | j « r[| j j r,dt t j
|
| j « « z }ndt | j « z }nd}| j j t j t j fv r4| j j }d| j j ||fz }|S | j j \ }}d| j j |||fz }|S )Nz , seed=%sz, d=%dÚ z EccKey(curve='%s', point_x=%d%s)z,EccKey(curve='%s', point_x=%d, point_y=%d%s))r[ r@ Ú
|
is_edwardsr ÚbinasciiÚhexlifyr; rB r: rC rD rN rO r\ ÚxrA Úxy)rQ Úextrard ÚresultÚys r Ú__repr__zEccKey.__repr__¼ sß Ø × Ñ Ô Ø{{×%Ò%Ø#¤e¬H×,<Ñ,<¸T¿Z¹ZÓ,HÓ&IÑIà ¤3 t§w¡w£<Ñ/àEØ ;;>>h× 1Ñ 1Ü &× /Ñ /ð 1ñ 1à AØ7¸4¿;¹;×;PÑ;PÐRSÐUZÐ:[Ñ[Fð ð ;;>>DAqØCÀtÇ{Á{×G\ÑG\Ð^_ÐabÐdiÐFjÑjFØ r c ó | j duS )zJ``True`` if this key can be used for making signatures or decrypting data.N)r: ©rQ s r r[ zEccKey.has_privateÍ s ð wwdÐ"Ð"r c ó` d|cxk r| j j k sJ J | j j }t j d|¬« }| j |z }||z j |« }| j j |z j |z }|||z ||z z z |z }||fS )Nr r )Ú min_inclusiveÚ max_exclusive)r@ rP r Ú random_ranger: ÚinverseÚGrd ) rQ ÚzÚkrP ÚblindÚblind_dÚ inv_blind_kÚrÚss r Ú_signz EccKey._signÓ s® Ø1Ô(t{{×(Ñ(Ò(Ð(Ñ(Ð(Ð(à ×!Ñ!Ü×$Ñ$°1Ø38ô:ð ''E/Ø qy×)Ñ)¨%Ó0 à [[]]QÑ × !Ñ ! EÑ )Ø 5 19 w°¡{Ñ2Ñ 3°eÑ ;Ø1v r c óî | j j }|d j |« }| j j ||z |z z }| j ||d z |z z }||z j
|
|d k( S )Nr r )r@ rP rp rq r\ rd )rQ rr ÚrsrP ÚsinvÚpoint1Úpoint2s r Ú_verifyzEccKey._verifyâ sr Ø ×!Ñ!Ø!u}}UÓ#Ø 4¨!¡8¨uÑ"4Ñ5Ø ¨¨1©¡ °Ñ 6Ñ7Ø×"Ñ" b¨¡eÑ+Ð+r c óP | j « s t d« | j S ©Nz This is not a private ECC key)r[ r? r: rk s r r% zEccKey.dé s# à× Ñ Ô!Ü Ð <Ó=Ð =Øwwr c óP | j « s t d« | j S r )r[ r? r; rk s r r& z EccKey.seedï s$ à× Ñ Ô!Ü Ð <Ó=Ð =ØzzÐr c ó | j (| j j | j z | _ | j S ©N)r< r@ rq r: rk s r r\ z EccKey.pointQõ s. à ;;Ð Ø ++--¨$¯'©'Ñ1DKØ{{Ðr c óX t | j j | j ¬« S )z^A matching ECC public key.
|
|
Returns:
|
a new :class:`EccKey` object
|
)r$ r' )r" r@ rA r\ rk s r Ú
|
public_keyzEccKey.public_keyû s ô DKK× 1Ñ 1¸¿¹ÔEÐEr c ó | j j s t d« | j j « }|rS| j j
|
j « rd}nd}|| j j j |« z }|S d| j j j |« z | j j
|
j |« z }|S )Nz/SEC1 format is only supported for NIST P curvesó ó ó ) r@ Úis_weierstrassr? r\ Ú size_in_bytesrh Úis_oddrd Úto_bytes)rQ ÚcompressÚ modulus_bytesÚ
|
first_byter s r Ú _export_SEC1zEccKey._export_SEC1 sÀ Ø{{×)Ò)Ü Ð NÓOÐ Oð ×1Ñ1Ó3 á Ø{{}}×#Ñ#Ô%Ø $
|
à $
|
Ø$Ø ++--×0Ñ0° Ó?ñ@Jð Ðð "Ø ++--×0Ñ0° Ó?ñ@à ++--×0Ñ0° Ó?ñ@Jð Ðr c óº | j j \ }}| j j t j
|
k( r8t |j dd¬« « }|dz dz |d z |d< t |« S | j j t j k( r2t |j dd¬« « }|dz dz |d< t |« S t d « )
|
Nr* r/ r0 r é r, r2 r7 zNot an EdDSA key to export) r\ re r@ rC rD rE rJ r rL r? Úbytes)rQ rd rh rg s r Ú_export_eddsa_publiczEccKey._export_eddsa_public s¾ Ø{{~~1Ø ;;>>X× -Ñ -Ò -Ü qzz¨"¸zÓ AÓBFØ q5 Q,¨&°©*Ñ4F2Jô V}Ð ð [[^^x~~Ò -Ü qzz¨"¸zÓ AÓBFØa% A F2Jô V}Ð ô Ð 9Ó:Ð :r c óò | j j s t d« | j j }| j j « }t |j |d¬« « }t |« S )Nz Not a Montgomery key to exportr/ r0 ) r@ Ú is_montgomeryr? r\ rd r rJ r r )rQ rd Ú
|
field_sizerg s r Ú_export_montgomery_publicz EccKey._export_montgomery_public, s[ Ø{{×(Ò(Ü Ð =Ó>Ð >Ø KKMMØ[[×.Ñ.Ó0
|
Ü1:: j¸H:ÓEÓFÜV}Ð r c ó| | j j r)| j j }| j « }d }nq| j j r)| j j }| j « }d }n2d}| j |« }t | j j « }t |||« S )Nú1.2.840.10045.2.1) r@ ra Úoidr r r r r
|
r )rQ r r r Úparamss r Ú _export_subjectPublicKeyInfoz#EccKey._export_subjectPublicKeyInfo4 s Ø ;;× !Ò !Ø++//CØ ×2Ñ2Ó4JØFØ [[× &Ò &Ø++//CØ ×7Ñ7Ó9JØFà%CØ ×*Ñ*¨8Ó4JÜ §¡§ ¡ Ó1Fä.¨sØ/9Ø/5ó7ð 7r c óÖ | j « sJ | j j « }d| j j j |« z | j j
|
j |« z }dt | j j |« « t | j j d¬« t |d¬« g}|s|d= t |« j « S )Nr r r ©Úexplicitr) )r[ r\ r rd r rh r r% r
|
r@ r r r Úencode)rQ Úinclude_ec_paramsr r Úseqs r Ú_export_rfc5915_private_derz"EccKey._export_rfc5915_private_derF sÀ à× Ñ Ô!Ð!Ð!ð ×1Ñ1Ó3 Ø Økkmm×,Ñ,¨]Ó;ñ<àkkmm×,Ñ,¨]Ó;ñ<
|
ð Ü dffoo¨mÓ <Ó=Ü4;;??°QÔ7ÜJ°Ô3ð5ñ
|
!ØAä3Ó ×&Ñ&Ó(Ð(r c óv ddl m} |j dd « d|vr t d« | j <| j
|
j }t | j « j « }d }n3d}| j d¬« }t | j
|
j « } |j ||fd |i|¤}|S )
|
Nr ©ÚPKCS8Ú
|
passphraseÚ
|
protectionz3At least the 'protection' parameter must be presentr F)r¤ Ú
|
key_params) Ú Crypto.IOr© Úgetr? r; r@ r r r£ r¦ r
|
Úwrap)rQ rR r© r Ú private_keyr rg s r Ú _export_pkcs8zEccKey._export_pkcs8a s´ Ý#à ::l DÓ )Ð 5¸,ÈfÑ:TÜ Ð RÓSÐ Sà ::Ð !Ø++//CÜ(¨¯©Ó4×;Ñ;Ó=KØFà%CØ ×:Ñ:ÈUÐ:ÓSKÜ §¡§ ¡ Ó1FàKØ ñ&à'-ð&ð %ñ&ð r c óT ddl m} | j |« }|j |d« S )Nr ©ÚPEMz
|
PUBLIC KEY)r r´ r r£ )rQ r r´ Ú encoded_ders r Ú_export_public_pemzEccKey._export_public_pemv s& Ý!à×7Ñ7¸ÓA Øzz+ |Ó4Ð4r c óX ddl m} | j « } |j |d|fi |¤S )Nr r³ zEC PRIVATE KEY)r r´ r¦ r£ ©rQ rª rR r´ rµ s r Ú_export_private_pemzEccKey._export_private_pem| s. Ý!à×6Ñ6Ó8 Øszz+Ð'7¸ÑNÀvÑNÐNr c óR ddl m} | j « }|j |d« S )Nr r³ z PRIVATE KEY)r r´ r± r£ )rQ r´ rµ s r Ú(_export_private_clear_pkcs8_in_clear_pemz/EccKey._export_private_clear_pkcs8_in_clear_pem s$ Ý!à×(Ñ(Ó* Øzz+ }Ó5Ð5r c ó ddl m} |sJ d|vr t d« | j dd|i|¤}|j |d« S )Nr r³ r« z5At least the 'protection' parameter should be presentrª zENCRYPTED PRIVATE KEYr )r r´ r? r± r£ r¸ s r Ú,_export_private_encrypted_pkcs8_in_clear_pemz3EccKey._export_private_encrypted_pkcs8_in_clear_pem sM Ý!áÐzØ vÑ %Ü Ð TÓUÐ UØ(d×(Ñ(ÑI°JÐIÀ&ÑI Øzz+Ð'>Ó?Ð?r c ó | j « r t d« | j j }|t d| j z « |dk( r'| j « }t |« t |« f}nî| j j « }|rYd| j j j « z }t |« | j j j |« z }nNd| j j j |« z | j j j |« z }|j d« d }t |« t |« |f}dj |D cg c]$ }t! j" dt% |« « |z & c}« } |d z t' t) j* | « « z S c c}w )
|
Nz"Cannot export OpenSSH private keysz Cannot export %s keys as OpenSSHú ssh-ed25519r) r ú-r ú>Iú )r[ r? r@ Úopensshr$ r r r\ r rh r r rd r ÚsplitÚjoinÚstructÚpackrF r rb Ú
|
b2a_base64)
|
rQ r Údescr Úcompsr r Úmiddlerd Úblobs
|
r Ú_export_opensshzEccKey._export_openssh s{ Ø × Ñ Ô Ü Ð AÓBÐ Bà{{×"Ñ"à <Ü Ð ?À$Ç*Á*Ñ LÓMÐ MØ ]Ò "Ø ×2Ñ2Ó4JÜ T]¤G¨JÓ$7Ð8Eà KK× 5Ñ 5Ó 7MáØ §¡§ ¡ ×!5Ñ!5Ó!7Ñ 7
|
Ü " :Ó .Ø "kkmm× 4Ñ 4°]Ó Cñ D
|
ð &Ø "kkmm× 4Ñ 4°]Ó Cñ Dà "kkmm× 4Ñ 4°]Ó Cñ D
|
ð ZZ _ QÑ'FÜ T]¤G¨F£O°ZÐ@EàxxÀÖF¸1 T¬3¨q«6Ó2°QÓ6ÒFÓGØczE¤(×"5Ñ"5°dÓ";Ó <Ñ<Ð<ùò Gs Å5)G c ó~ |j « }|j d« }|dvrt d|z « |j dd« }| j « r#|j dd« }t |« rt |« }|s t d« |j d d
|
« }|du rQ| j j r t d « | j j r t d « d |v r t d« |dk( r:|r%|r | j |fi |¤S | j « S | j |fi |¤S |dk( r5|r |s t d« |r | j dd|i|¤S | j « S t d|z « |rt d|z « |dk( r| j |« S |dk( r| j |« S |dk( r| j! |« S |dk( r]| j j r| j# « S | j j r| j% « S | j! |« S | j' |« S )aÊ Export this ECC key.
|
|
Args:
|
format (string):
|
The output format:
|
|
- ``'DER'``. The key will be encoded in ASN.1 DER format (binary).
|
For a public key, the ASN.1 ``subjectPublicKeyInfo`` structure
|
defined in `RFC5480`_ will be used.
|
For a private key, the ASN.1 ``ECPrivateKey`` structure defined
|
in `RFC5915`_ is used instead (possibly within a PKCS#8 envelope,
|
see the ``use_pkcs8`` flag below).
|
- ``'PEM'``. The key will be encoded in a PEM_ envelope (ASCII).
|
- ``'OpenSSH'``. The key will be encoded in the OpenSSH_ format
|
(ASCII, public keys only).
|
- ``'SEC1'``. The public key (i.e., the EC point) will be encoded
|
into ``bytes`` according to Section 2.3.3 of `SEC1`_
|
(which is a subset of the older X9.62 ITU standard).
|
Only for NIST P-curves.
|
- ``'raw'``. The public key will be encoded as ``bytes``,
|
without any metadata.
|
|
* For NIST P-curves: equivalent to ``'SEC1'``.
|
* For Ed25519 and Ed448: ``bytes`` in the format
|
defined in `RFC8032`_.
|
* For Curve25519 and Curve448: ``bytes`` in the format
|
defined in `RFC7748`_.
|
|
passphrase (bytes or string):
|
(*Private keys only*) The passphrase to protect the
|
private key.
|
|
use_pkcs8 (boolean):
|
(*Private keys only*)
|
If ``True`` (default and recommended), the `PKCS#8`_ representation
|
will be used.
|
It must be ``True`` for Ed25519, Ed448, Curve25519, and Curve448.
|
|
If ``False`` and a passphrase is present, the obsolete PEM
|
encryption will be used.
|
|
protection (string):
|
When a private key is exported with password-protection
|
and PKCS#8 (both ``DER`` and ``PEM`` formats), this parameter MUST be
|
present,
|
For all possible protection schemes,
|
refer to :ref:`the encryption parameters of PKCS#8<enc_params>`.
|
It is recommended to use ``'PBKDF2WithHMAC-SHA512AndAES128-CBC'``.
|
|
compress (boolean):
|
If ``True``, the method returns a more compact representation
|
of the public key, with the X-coordinate only.
|
|
If ``False`` (default), the method returns the full public key.
|
|
This parameter is ignored for Ed25519/Ed448/Curve25519/Curve448,
|
as compression is mandatory.
|
|
prot_params (dict):
|
When a private key is exported with password-protection
|
and PKCS#8 (both ``DER`` and ``PEM`` formats), this dictionary
|
contains the parameters to use to derive the encryption key
|
from the passphrase.
|
For all possible values,
|
refer to :ref:`the encryption parameters of PKCS#8<enc_params>`.
|
The recommendation is to use ``{'iteration_count':21000}`` for PBKDF2,
|
and ``{'iteration_count':131072}`` for scrypt.
|
|
.. warning::
|
If you don't provide a passphrase, the private key will be
|
exported in the clear!
|
|
.. note::
|
When exporting a private key with password-protection and `PKCS#8`_
|
(both ``DER`` and ``PEM`` formats), any extra parameters
|
to ``export_key()`` will be passed to :mod:`Crypto.IO.PKCS8`.
|
|
.. _PEM: http://www.ietf.org/rfc/rfc1421.txt
|
.. _`PEM encryption`: http://www.ietf.org/rfc/rfc1423.txt
|
.. _OpenSSH: http://www.openssh.com/txt/rfc5656.txt
|
.. _RFC5480: https://tools.ietf.org/html/rfc5480
|
.. _SEC1: https://www.secg.org/sec1-v2.pdf
|
.. _RFC7748: https://tools.ietf.org/html/rfc7748
|
|
Returns:
|
A multi-line string (for ``'PEM'`` and ``'OpenSSH'``) or
|
``bytes`` (for ``'DER'``, ``'SEC1'``, and ``'raw'``) with the encoded key.
|
Úformat)r´ ÚDERÚOpenSSHÚSEC1ÚrawzUnknown format '%s'r Frª NzEmpty passphraseÚ use_pkcs8Tz%'pkcs8' must be True for EdDSA curvesz#'pkcs8' must be True for Curve25519r« z)'protection' is only supported for PKCS#8r´ rÐ z8Private keys can only be encrpyted with DER using PKCS#8z2Private keys cannot be exported in the '%s' formatzUnexpected parameters: '%s'rÒ rÓ r )Úcopyr9 r? r[ r r r@ ra r r½ r» r¹ r± r¦ r¶ r r r r rÍ )rQ rR ÚargsÚ
|
ext_formatr rª rÔ s r Ú
|
export_keyzEccKey.export_key® sX ðt {{}ØXXhÓ'
|
Ø Ð EÑ EÜ Ð 2°ZÑ ?Ó@Ð @à88J¨Ó.à × Ñ Õ Ø ,°Ó5JÜÔ$Ü $ ZÓ 0
|
Ù!Ü$Ð%7Ó8Ð8à ¨dÓ3IØEÑ!Ø;;×)Ò)Ü$Ð%LÓMÐMØ;;×,Ò,Ü$Ð%JÓKÐKØ 4Ñ'Ü$Ð%PÓQÐQàUÒ"Ù Ù!Ø Pt× PÑ PÐQ[Ñ dÐ_cÑ dÐdà #× LÑ LÓ NÐNà34×3Ñ3°JÑGÀ$ÑGÐGØuÒ$á ¡iÜ$Ð%_Ó`Ð`Ù Ø-4×-Ñ-ÑL¸ÐLÀtÑLÐLà ×;Ñ;Ó=Ð=ä ð "6Ø8Bñ"Có Dð Dñ Ü Ð!>ÀÑ!EÓFÐFØUÒ"Ø×.Ñ.¨xÓ8Ð8ØuÒ$Ø×8Ñ8¸ÓBÐBØvÒ%Ø×(Ñ(¨Ó2Ð2ØuÒ$Ø;;×)Ò)Ø ×4Ñ4Ó6Ð6Ø[[×.Ò.Ø ×9Ñ9Ó;Ð;à ×,Ñ,¨XÓ6Ð6à×+Ñ+¨HÓ5Ð5r N)T)r r r Ú__doc__rX r^ ri r[ ry r Úpropertyr% r& r\ r r r r r r¦ r± r¶ r¹ r» r½ rÍ rØ r r r r" r" ; s© ñò*``òD+òò"#ò ò ,ð ñó ðð
|
ñó ðð
|
ñó ðò
|
Fòò8
|
ò ò7ó$)ò6ò*5ò Oò 6ò @ò=ó:U6r r" c óV | j d« }t | }| j dt « }| rt dt | « z « t | j
|
t j k( r |d« }t ||¬« }|S t | j
|
t j k( r |d« }t ||¬« }|S t | j
|
t j k( r9 |d« }t ||¬« }t | j |j « |S t | j
|
t j k( r9 |d« }t ||¬« }t | j |j « |S t j d|j |¬ « }t ||¬
|
« }|S ) a1 Generate a new private key on the given curve.
|
|
Args:
|
|
curve (string):
|
Mandatory. It must be a curve name defined in the `ECC table`_.
|
|
randfunc (callable):
|
Optional. The RNG to read randomness from.
|
If ``None``, :func:`Crypto.Random.get_random_bytes` is used.
|
r$ Úrandfuncr( r* ©r$ r& r2 r7 r )rm rn rÜ )r$ r% )r9 r r r= r> rC rD rE r" rL rN Úvalidater\ rO r ro rP )rR rT r$ rÜ r& Únew_keyr% s r Úgeneraterà F s| ð GÓ$JÜ JÑ EØzz*Ô&6Ó7HÙ ÜÐ.´°V³Ñ<Ó=Ð=äzÑ× Ñ ¤×!1Ñ!1Ò1Ù|Üz°Ô5ð$ Nô#
|
Ñ × Ñ ¤8§>¡>Ò 1Ù|Üz°Ô5ð Nô
|
Ñ × Ñ ¤8×#6Ñ#6Ò 6Ù|Üz°Ô5Ü
|
Ñ×$Ñ$ W§^¡^Ô4ð Nô
|
Ñ × Ñ ¤8×#4Ñ#4Ò 4Ù|Üz°Ô5Ü
|
Ñ×$Ñ$ W§^¡^Ô4ð Nô × Ñ ¨qØ/4¯{©{Ø*2ô 4ô z¨QÔ/à Nr c ó´ | d }t | }| j dd« }| j dd« }d| v r t d« |j t j
|
k( r9|t ||« | d< t di | ¤}|j |j « |S |j t j k( r9|t ||« | d< t di | ¤}|j |j « |S d||fvrt |||« | d< t di | ¤}|j « r9d| v r5|j |j z }|j ||fk7 r t! d« |S ) aÕ Build a new ECC key (private or public) starting
|
from some base components.
|
|
In most cases, you will already have an existing key
|
which you can read in with :func:`import_key` instead
|
of this function.
|
|
Args:
|
curve (string):
|
Mandatory. The name of the elliptic curve, as defined in the `ECC table`_.
|
|
d (integer):
|
Mandatory for a private key and a NIST P-curve (e.g., P-256).
|
It must be an integer in the range ``[1..order-1]``.
|
|
seed (bytes):
|
Mandatory for a private key and curves Ed25519 (32 bytes),
|
Curve25519 (32 bytes), Curve448 (56 bytes) and Ed448 (57 bytes).
|
|
point_x (integer):
|
The X coordinate (affine) of the ECC point.
|
Mandatory for a public key.
|
|
point_y (integer):
|
The Y coordinate (affine) of the ECC point.
|
Mandatory for a public key,
|
except for Curve25519 and Curve448.
|
|
Returns:
|
:class:`EccKey` : a new ECC key object
|
r$ Úpoint_xNÚpoint_yr' zUnknown keyword: pointz(Private and public ECC keys do not matchr )r r9 r= rC rD rN r r" rÞ r\ rO r r[ rq r% re r? )rR rT r$ râ rã rß Úpub_keys r Ú constructrå p s] ðB JÜ JÑ EØjj DÓ)GØjj DÓ)Gà&ÑÜÐ0Ó1Ð1à xx8×&Ñ&Ò&à Ð Ü '¨°Ó <F7OÜÑ"6Ñ"Ø w~~Ô&ð, Nð)
|
X×&Ñ&Ò &à Ð Ü '¨°Ó <F7OÜÑ"6Ñ"Ø w~~Ô&ð Nð Ð)Ñ )Ü & w°¸Ó DF7OÜÑ"6Ñ"ð × Ñ Ô W°Ñ%6Øgg § ¡ Ñ)GØzzg wÐ /Ò/Ü Ð!KÓLÐLà Nr c óF t j « D ] \ }}|r|j |k( r n'||k( s n |rt d|z « t d|z « |j j « }t | d « }|dk( rVt | « dd|z z k7 r t d« t j | d|dz « }t j | |dz d « }n½|d v r®t | « d|z k7 r t d« t j | dd « }|d
|
z |d
|
z z
|
|j z j |j « }|dk( r |j « r|j |z
|
}|d
|
k( r+|j « r|j |z
|
}n t d « t |||¬ « S ) a Convert an encoded EC point into an EccKey object
|
|
ec_point: byte string with the EC point (SEC1-encoded)
|
curve_oid: string with the name the curve
|
curve_name: string with the OID of the curve
|
|
Either curve_id or curve_name must be specified
|
|
ú Unsupported ECC curve (OID: %s)zUnsupported ECC curve (%s)r é r r) zIncorrect EC point lengthN©r) é rê zIncorrect EC point encoding©r$ râ rã )r Úitemsr r Úpr r rF r? r rK ÚbÚsqrtr Úis_evenrå ) Úec_pointÚ curve_oidrT Ú _curve_namer$ r Ú
|
point_typerd rh s r Ú_import_public_derrõ · s¡ ô &mmoò SÑ UÙ iÒ/Ù Ø Ó $Ù ð Sñ Ü'Ð(IÈIÑ(UÓVÐ Vä'Ð(DÀzÑ(QÓRÐ Rð GG×)Ñ)Ó+MÜhqkÓ"Jð TÒÜ x=Q ]Ñ!2Ñ 2Ò 3Ü Ð 8Ó9Ð 9Ü × Ñ x¨¨-¸©/Ð :Ó ;Ü × Ñ x¨ °a©Ð(8Ð 9Ó :à |Ñ #Ü x=Q Ñ .Ò /Ü Ð 8Ó9Ð 9Ü × Ñ x¨¨|Ó ,à TAaCZ%''Ñ !× 'Ñ '¨¯©Ó 0Ø Ò !§(¡(¤*Ø! AØ Ò !§)¡)¤+Ø! AäÐ6Ó7Ð7ä ;°¸1Ô =Ð=r c ó
|
t | « \ }}}d}dt fdt fd}dt fdt fd}||v rA|st d|z « t « j |« j }t ||¬
|
« S ||v r1|| \ } }
|
|rt d |z « |
|
|« \ } } t | | | ¬ « S ||v r-|| \ } } |rt d |z « | |« } t | | ¬ « S t d|z « # t
|
$ r t d « w xY w)z4Convert a subjectPublicKeyInfo into an EccKey object©r z 1.3.132.1.12z 1.3.132.1.13ÚEd25519ÚEd448©z 1.3.101.112z 1.3.101.113Ú
|
Curve25519ÚCurve448©z 1.3.101.110z 1.3.101.111z%Missing ECC parameters for ECC OID %szError decoding namedCurve©rò z(Unexpected ECC parameters for ECC OID %s)râ rã r$ )râ r$ zUnsupported ECC OID: %s) r Ú_import_ed25519_public_keyÚ_import_ed448_public_keyÚ _import_curve25519_public_keyÚ_import_curve448_public_keyr? r
|
ÚdecodeÚvaluerõ rå r )ÚencodedrR r rñ r Ú nist_p_oidsÚ
|
eddsa_oidsÚxdh_oidsrò rT Úimport_eddsa_public_keyrd rh Úimport_xdh_public_keys r Ú _import_subjectPublicKeyInfor ï s[ ô <¸GÓ DÑC6ðKð "Ô#=Ð>Ø Ô#;Ð<ñJð
|
%Ô&CÐDØ"Ô$?Ð@ñHð
|
kÑñ Ü Ð DÀsÑ JÓKÐ Kð :Ü# ×,Ñ,¨VÓ4×:Ñ:Iô
|
" (°iÔ@Ð@à
|
Ñ à.8¸©oÑ+
|
Ð+ñ Ü Ð GÈ#Ñ MÓNÐ Ná& xÓ01Ü ¨A°ZÔ@Ð@à Ø,4°S©MÑ)
|
Ð)ñ Ü Ð GÈ#Ñ MÓNÐ Ná ! (Ó +Ü ¨*Ô5Ð5ô $Ð$=ÀÑ$CÓDÐDøô9 ò :Ü Ð 8Ó9Ð 9ð :ús Á #C- Ã-Dc ó¼ t « j | d¬« }|d dk7 r t d« t « j |d « j }d}|t |« k rB t d¬« j || « j }|||k7 r t d« |}|dz }| t d « t j « D ] \ }}|j |k( s n t d
|
|z « |j j « } t |« | k7 r t d « d x}
|
} |t |« k rg t d¬« j || « j } t | |¬ « } | j j" }
|
| j j$ } |dz }t' j( |« }t+ |||
|
| ¬ « S # t $ r Y $w xY w# t $ r Y ?w xY w)N©r) rê rè )Ú nr_elementsr r z!Incorrect ECC private key versionr) r¡ zCurve mismatchzNo curve foundrç zPrivate key is too smallrþ )r$ r% râ rã )r r r? r ÚpayloadrF r
|
r r rì r r rí r r rõ r\ rd rh r rK rå )r rª rò Úec_private_keyÚ scalar_bytesÚ next_elementÚ
|
parametersrT r$ r râ rã Úpublic_key_encr r% s r Ú_import_rfc5915_derr 2 sð ô !]×)Ñ)¨'¸yÐ)ÓINØaÑAÒ ÜÐ<Ó=Ð=ä!Ó#×*Ñ*¨>¸!Ñ+<Ó=×EÑELàLð c.Ó)Ò)ð Ü$¨aÔ0×7Ñ7¸À|Ñ8TÓU×[Ñ[JØÐ$¨°yÒ)@Ü Ð!1Ó2Ð2Ø"IØ AÑ Lð ÐÜÐ)Ó*Ð*ä $]]_ò SÑ
|
EØ 99 Ó !Ù ðSô $Ð$EÈ Ñ$QÓRÐRàGG×)Ñ)Ó+MÜ
|
<ÓMÒ)ÜÐ3Ó4Ð4ð Ð GgØc.Ó)Ò)ð Ü )°1Ô 5× <Ñ <¸^ÈLÑ=YÓ Z× `Ñ `NÜ+¨NÀiÔPJØ ×'Ñ'×)Ñ)GØ ×'Ñ'×)Ñ)GØ AÑ Lô ×Ñ<Ó(AÜ :¨°GÀWÔ MÐMøô; ò Ú ð ûô2 ò Ù ð ús& Á&AF? Ä5A&G Æ? G Ç G Ç GÇGc óþ ddl m} |j | |« \ }}}d}ddd}ddd }||v r0t « j |« j
|
} t ||| « S ||v rB| t d
|
« d } t « j |« j }
|
t || |
|
¬ « S ||v rJ|| } |t d | z « d } t « j |« j }
|
t || |
|
¬ « S t d |z « )Nr r¨ r÷ rø rù rú rû rü rý z.EdDSA ECC private key must not have parametersrÝ z+%s ECC private key must not have parametersz!Unsupported ECC purpose (OID: %s)) r r© Úunwrapr
|
r r r r? r r rå r ) r rª r© Úalgo_oidr° r r r r rò r& rT s r Ú _import_pkcs8r m s- Ý à$)§L¡L°¸*Ó$EÑ!Hk6ðKð !Ø ñJð
|
$Ø!ñHð
|
;Ñ Ü M×(Ñ(¨Ó0×6Ñ6 Ü" ;°
|
¸IÓFÐFØ ZÑ Ø Ð Ü Ð MÓNÐ NØ Ü Ó ×&Ñ& {Ó3×;Ñ;Üz¨(Ñ 3¸$Ô?Ð?Ø XÑ Ø hÑ'
|
Ø Ð Ü Ð JØ 'ñ (ó )ð )à Ü Ó ×&Ñ& {Ó3×;Ñ;Üx¨Ñ 1¸Ô=Ð=ä#Ð$GÈ(Ñ$RÓSÐSr c ó. t | « }t |« S r )r r )r rR Úsp_infos r Ú_import_x509_certr s ä.¨wÓ7GÜ '¨Ó 0Ð0r c ó¾ t | |« S # t $ r}|d }~wt t t f$ r Y nw xY w t | |« S # t $ r}|d }~wt t t f$ r Y nw xY w t | |« S # t $ r}|d }~wt t t f$ r Y nw xY w t | |« S # t $ r}|d }~wt t t f$ r Y t d« w xY w)NzNot an ECC DER key)r r r? r= Ú
|
IndexErrorr r r )r rª Úerrs r Ú _import_derr sò ð Ü+¨G°ZÓ@Ð@øÜ ò Ø ûÜ ¤:Ð .ò Ù ð úð Ü ¨*Ó5Ð5øÜ ò Ø ûÜ ¤:Ð .ò Ù ð úð Ü" 7¨JÓ7Ð7øÜ ò Ø ûÜ ¤:Ð .ò Ù ð úð Ü W jÓ1Ð1øÜ ò Ø ûÜ ¤:Ð .ò Ø ä
|
Ð)Ó
|
*Ð*ð úsm 33²3· A Á A(Á AÁA(Á'A(Á, A8 Á8 B ÂBÂB Â B Â! B- Â- C Â6B8Â8C ÃC c ó¨ | j d« }t |« dvr t d« t j |d « }g }t |« dkD rJt j d|d d « d }|j |dd|z « |d|z d }t |« dkD rJ|d |d k7 r t d« |d j d « r t j « D ]_ \ }}|j |j j d
|
« s/t |j j d « d « }|d |k( s_ n t d z « t |d |j ¬« }|S |d dk( r!t |d « \ } }
|
t! d| |
|
¬« }|S t d|d z « # t" t$ t j& f$ r t d|d z « w xY w)Nó ré zNot an openssh public keyr rè rÁ r z Mismatch in openssh public keyó ecdsa-sha2-ú
|
ecdsa-sha2rÀ r) zUnsupported ECC curve: rþ ó ssh-ed25519rø rë zUnsupported SSH key type: z Error parsing SSH key type: )rÄ rF r? rb Ú
|
a2b_base64rÆ ÚunpackÚappendÚ
|
startswithr rì rà r rõ r rÿ rå r r= ÚError) r ÚpartsÚ keystringÚkeypartsÚlkrT r$ rË Úecc_keyrd rh s r Ú_import_openssh_publicr0 ¼ së Ø MM$Ó EÜ
|
5zÑ ÜÐ4Ó5Ð5ð$DÜ ×'Ñ'¨¨a©Ó1 àÜ)nqÒ Ü t Y¨r° ]Ó3°AÑ6BØ OOI a¨¨B©Ð /Ô 0Ø! ! b¡& 'Ð*Iô )nqÓ ð
|
8x {Ò "Ü Ð =Ó>Ð >ð 8× Ñ ~Ô .ä%,§]¡]£_ò EÑ!
|
EØ==Ð(Ø Ø }}×/Ñ/° Ô=Ø Ü § ¡ ×!4Ñ!4°SÓ!9¸!Ñ!<Ó=ØA; &Ó(Ùð Eô !Ð!:¸VÑ!CÓDÐDä(¨°!©ÀÇ Á ÔJGð Nð 1X Ò 'Ü-¨h°q©kÓ:DAqÜ i¸ÀAÔFGð Nô Ð 9¸EÀ!¹HÑ DÓEÐ Eøä ¤8§>¡>Ð 2ò DÜÐ7¸%À¹(ÑBÓCÐCðDús% «A1F!  B F! Ä:+F! Å''F! ÆF! Æ!0Gc óö ddl m}m}m}m} || |« \ }}ddt
|
dfi}|j d« rÞ ||« \ } }| t vrt d| z « t | }
|
|
|
j dz d z } ||« \ } }t | d
|
« d k7 r t d « t | « d | z dz k7 r t d« t j | dd| z « } t j | d| z d « } ||« \ }}t j |« }|| d}nG||v r5|| \ }}} ||« \ } } || « \ } } ||« \ }}|d | }||d}nt d|z « ||« \ }} ||« t d| |d|¤S )Nr )Ú import_openssh_private_genericÚ
|
read_bytesÚ read_stringÚ check_paddingr¿ rø r* r$ zUnsupported ECC curve %sr é r rè z/Only uncompressed OpenSSH EC keys are supportedr) zIncorrect public key length)r% r$ )r& r$ z Unsupport SSH agent key type:)râ rã r )Ú_opensshr2 r3 r4 r5 rÿ r) r r Ú modulus_bitsr r? rF r rK rå )ÚdataÚpasswordr2 r3 r4 r5 Úkey_typeÚ decryptedÚ
|
eddsa_keysÚecdsa_curve_namer$ r r râ rã r° r% r rT r Úseed_lenÚprivate_public_keyr& Ú_Úpaddeds r Ú_import_openssh_private_eccrC ê sÚ ÷Có Cñ 9¸¸xÓHÑHið Ô#=¸rÐBðJð
|
×Ñ<Ô(á&1°)Ó&<Ñ#Ð)Ø ¤7Ñ *Ü'Ð(BÐEUÑ(UÓVÐ VÜÐ(Ñ)Ø ×+Ñ+¨aÑ/°AÑ5 á *¨9Ó 5Ñ
|
Iä
|
1 Ó !Ò #Ü Ð NÓOÐ OÜ z?a -Ñ /°!Ñ 3Ò 3Ü Ð :Ó;Ð ;ä×$Ñ$ Z°°!°M±/Ð%BÓCÜ×$Ñ$ Z°°-±Ð0@Ð%AÓBá!+¨IÓ!6Ñ YÜ × Ñ {Ó +àÐ#3Ñ4à ZÑ à8BÀ8Ñ8LÑ5
|
Ð+¨Xá *¨9Ó 5Ñ
|
IÙ2°:Ó>Ñá(2°9Ó(=Ñ%ÐIØ! ) 8Ð,à ¨Ñ4äÐ8¸8ÑCÓDÐDáIÓ&IAvÙ&Ôä Ð @W¨gÑ @¸Ñ @Ð@r c óÒ t | « dk7 r t d« t d« }d}t | « }|d dz }|dxx dz cc< t j |d¬ « }||k\ r t d
|
« |d k( ry |d z d z
|
|z }|d z |z |z d z |z } |j |« }||z |z } t j | |« }
|
|
|
d z |k7 r||
|
z
|
}
|
|
|
|fS # t $ r t d« w xY w)ai Import an Ed25519 ECC public key, encoded as raw bytes as described
|
in RFC8032_.
|
|
Args:
|
encoded (bytes):
|
The Ed25519 public key to import. It must be 32 bytes long.
|
|
Returns:
|
x and y (integer)
|
|
Raises:
|
ValueError: when the given key cannot be parsed.
|
|
.. _RFC8032: https://datatracker.ietf.org/doc/html/rfc8032
|
r* z9Incorrect length. Only Ed25519 public keys are supported.l íÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿl £x²&(7Z/·
|
;(P8 ÑsÝe:Ì8ÎÛ
|
w6Rr, r r- r/ r0 zInvalid Ed25519 key (y)r ©r r r) zInvalid Ed25519 public key)rF r? r rJ rK rp Ú_tonelli_shanks© r rí r% rh Úx_lsbrã ÚuÚvÚv_invÚx2râ s r rÿ rÿ ! s ô" 7|rÒÜÐTÓUÐUäÐRÓSAØUAä'ÓAØ bEQJEØbETMEÜ× Ñ ¨hÔ7GØ!|ÜÐ2Ó3Ð3Ø!|Øà !a 1Ñ AØ
|
1*q.AÑ Ñ ! QÑ&Að7Ø ! Ø%i1_Ü×)Ñ)¨"¨aÓ0Ø aKEÒ !Ø'kGð GÐ Ðøô ò 7ÜÐ5Ó6Ð6ð7ús Â<C ÃC&c ó t | « dk7 r t d« t | « }|dxx dz cc< t j |d¬« }|S )ah Import a Curve25519 ECC public key,
|
encoded as raw bytes as described in RFC7748_.
|
|
Args:
|
encoded (bytes):
|
The Curve25519 public key to import. It must be 32 bytes long.
|
|
Returns:
|
x (integer)
|
|
Raises:
|
ValueError: when the given key cannot be parsed.
|
|
.. _RFC7748: https://datatracker.ietf.org/doc/html/rfc7748
|
r* z Incorrect Curve25519 key lengthr, r- r/ r0 )rF r? rJ r rK )r rd râ s r r r N sJ ô" 7|rÒÜÐ:Ó;Ð;ä'ÓAàbETMEÜ× Ñ ¨hÔ7Gà Nr c óf t | « dk7 r t d« t j | d¬« }|S )ad Import a Curve448 ECC public key,
|
encoded as raw bytes as described in RFC7748_.
|
|
Args:
|
encoded (bytes):
|
The Curve448 public key to import. It must be 56 bytes long.
|
|
Returns:
|
x (integer)
|
|
Raises:
|
ValueError: when the given key cannot be parsed.
|
|
.. _RFC7748: https://datatracker.ietf.org/doc/html/rfc7748
|
r7 z Incorrect Curve448 key lengthr/ r0 )rF r? r rK )r râ s r r r j s3 ô" 7|rÒÜÐ8Ó9Ð9ä× Ñ °HÔ=Gà Nr c óÔ t | « dk7 r t d« t d j }|dz
|
}| dd }t | d « dz }t j |d¬ « }||k\ r t d
|
« |d k( ry |d z d z
|
|z }|d z |z |z d z
|
|z } |j |« }||z |z } t j | |« }
|
|
|
d z |k7 r||
|
z
|
}
|
|
|
|fS # t $ r t d« w xY w)ag Import an Ed448 ECC public key, encoded as raw bytes as described
|
in RFC8032_.
|
|
Args:
|
encoded (bytes):
|
The Ed448 public key to import. It must be 57 bytes long.
|
|
Returns:
|
x and y (integer)
|
|
Raises:
|
ValueError: when the given key cannot be parsed.
|
|
.. _RFC8032: https://datatracker.ietf.org/doc/html/rfc8032
|
r2 z7Incorrect length. Only Ed448 public keys are supported.Úcurve448i© Nr7 r r/ r0 zInvalid Ed448 key (y)r rE r) zInvalid Ed448 public key) rF r? r rí r r rK rp rF rG s r r r s ô" 7|rÒÜÐRÓSÐSä
|
Ñ× Ñ AØ E Aà AÜ Ó Ñ "EÜ× Ñ ¨hÔ7GØ!|ÜÐ0Ó1Ð1Ø!|Øà !a 1Ñ AØ
|
1*q.AÑ Ñ ! QÑ&Að5Ø ! Ø%i1_Ü×)Ñ)¨"¨aÓ0Ø aKEÒ !Ø'kGð GÐ Ðøô ò 5ÜÐ3Ó4Ð4ð5ús Â<C ÃC'c ó
|
ddl m} t | « } | t |« }| j d« r/t | « }|j ||« \ }}}t ||« }|S | j d« ret | « }d} d}
|
t j | dz |
|
z d |t j ¬
|
« }|j ||« \ } }}|rd} t | |« }|S | j d « r t | « S t | « dkD r t | d « d k( r t | |« S t | « dkD r*t | d « dv r| t d« t! | |¬« S t d« # t $ r} | d} ~ wt $ r t d « w xY w)ap Import an ECC key (public or private).
|
|
Args:
|
encoded (bytes or multi-line string):
|
The ECC key to import.
|
The function will try to automatically detect the right format.
|
|
Supported formats for an ECC **public** key:
|
|
* X.509 certificate: binary (DER) or ASCII (PEM).
|
* X.509 ``subjectPublicKeyInfo``: binary (DER) or ASCII (PEM).
|
* SEC1_ (or X9.62), as ``bytes``. NIST P curves only.
|
You must also provide the ``curve_name`` (with a value from the `ECC table`_)
|
* OpenSSH line, defined in RFC5656_ and RFC8709_ (ASCII).
|
This is normally the content of files like ``~/.ssh/id_ecdsa.pub``.
|
|
Supported formats for an ECC **private** key:
|
|
* A binary ``ECPrivateKey`` structure, as defined in `RFC5915`_ (DER).
|
NIST P curves only.
|
* A `PKCS#8`_ structure (or the more recent Asymmetric Key
|
Package, RFC5958_): binary (DER) or ASCII (PEM).
|
* `OpenSSH 6.5`_ and newer versions (ASCII).
|
|
Private keys can be in the clear or password-protected.
|
|
For details about the PEM encoding, see `RFC1421`_/`RFC1423`_.
|
|
passphrase (byte string):
|
The passphrase to use for decrypting a private key.
|
Encryption may be applied protected at the PEM level (not recommended)
|
or at the PKCS#8 level (recommended).
|
This parameter is ignored if the key in input is not encrypted.
|
|
curve_name (string):
|
For a SEC1 encoding only. This is the name of the curve,
|
as defined in the `ECC table`_.
|
|
.. note::
|
|
To import EdDSA private and public keys, when encoded as raw ``bytes``, use:
|
|
* :func:`Crypto.Signature.eddsa.import_public_key`, or
|
* :func:`Crypto.Signature.eddsa.import_private_key`.
|
|
.. note::
|
|
To import X25519/X448 private and public keys, when encoded as raw ``bytes``, use:
|
|
* :func:`Crypto.Protocol.DH.import_x25519_public_key`
|
* :func:`Crypto.Protocol.DH.import_x25519_private_key`
|
* :func:`Crypto.Protocol.DH.import_x448_public_key`
|
* :func:`Crypto.Protocol.DH.import_x448_private_key`
|
|
Returns:
|
:class:`EccKey` : a new ECC key object
|
|
Raises:
|
ValueError: when the given key cannot be parsed (possibly because
|
the pass phrase is wrong).
|
|
.. _RFC1421: https://datatracker.ietf.org/doc/html/rfc1421
|
.. _RFC1423: https://datatracker.ietf.org/doc/html/rfc1423
|
.. _RFC5915: https://datatracker.ietf.org/doc/html/rfc5915
|
.. _RFC5656: https://datatracker.ietf.org/doc/html/rfc5656
|
.. _RFC8709: https://datatracker.ietf.org/doc/html/rfc8709
|
.. _RFC5958: https://datatracker.ietf.org/doc/html/rfc5958
|
.. _`PKCS#8`: https://datatracker.ietf.org/doc/html/rfc5208
|
.. _`OpenSSH 6.5`: https://flak.tedunangst.com/post/new-openssh-key-format-and-bcrypt-pbkdf
|
.. _SEC1: https://www.secg.org/sec1-v2.pdf
|
r r³ Ns -----BEGIN OPENSSH PRIVATE KEYs -----z -----BEGIN EC PARAMETERS-----z-----END EC PARAMETERS-----z.*?r` )Úflagsz(Invalid DER encoding inside the PEM file)r# r% é0 r zNo curve name was provided)rT z ECC key format is not supported)r r´ r r) r r rC ÚreÚsubÚDOTALLr r r? r0 rF r rõ ) r rª rT r´ Ú text_encodedÚopenssh_encodedÚmarkerÚenc_flagrg Úecparams_startÚ ecparams_endÚ der_encodedÚuefs r Ú
|
import_keyr_ ¯ s¥ õR ägÓ GØÐ Ü ZÓ(
|
ð ×ÑÐ;Ô<Ü W~ Ø,/¯J©J°|ÀZÓ,PÑ) Ü,¨_¸jÓIØ à × Ñ HÔ %ä W~ ð 9Ø4 Üvvn¨uÑ 4°|Ñ CÀRØ *Ü$&§I¡Iô/ ð ),¯
|
©
|
°<ÀÓ(LÑ% VXÙ Ø Jð IÜ ¨jÓ9Fð
|
ð ×ÑÐ:Ô;Ü% gÓ.Ð.ô 7|aÒD ¨¡Ó ,°Ò 4Ü7 JÓ/Ð/ô 7|aÒD ¨¡Ó ,Ð0BÑ BØ Ð Ü Ð 9Ó:Ð :Ü! '°jÔAÐAä
|
Ð6Ó
|
7Ð7øô) %ò ØIûÜò IÜ Ð GÓHÐ Hð Iús à E Å FÅ(E*Å*FÚ__main__l ýö_,)¶NÌ$ÔcÐ hKf-5lk<X÷k©# E Úp256i¸ z (P-256 G)iè Úmsz(P-256 arbitrary point))NNr )@Ú
|
__future__r rT rÆ rb ÚCrypto.Util.py3compatr r r r r ÚCrypto.Math.Numbersr ÚCrypto.Util.asn1r
|
r r r ÚCrypto.PublicKeyr r r Ú Crypto.Hashr r Ú Crypto.Randomr r< r r r r rD r? r Úobjectr" rà rå rõ r r r r r r0 rC rÿ r r r r_ r Útimer% rq rÕ r' rU ÚstartÚrangerd ÚpointXÚprintr r r ú<module>rp s ðõ> &ã Û Û ç GÕ Gå '÷,ó ,÷@ñ @÷ )å *ç 0Ñ 0Ý 'ô Jô ôH6Vô H6òV'òTDóN5>òp@EóF8Nòv%TòP1ò +òB+ò\4Aòn* òZò8ò2) óX{8ð| zÒãàJAà FO× Ñ × "Ñ "Ó $EØ Eà DIIKEÙ 5\ò Øðá + eÑ+¨uÑ4°tÑ;¸TÔBà DIIKEÙ 5\ò Ø!ð á Ð
|
# i d§i¡i£k°EÑ&9¸UÑ%BÀTÑ%IÈ4ÕPð# r
|
