← Back
Editing: PKCS8.cpython-311.pyc
� 8�tc" � �V � d dl T d dlmZmZmZmZ d dlmZmZm Z ddgZ d d�Z d d�Z dS ) � )�*)�DerNull� DerSequence� DerObjectId�DerOctetString)�PBES1�PBES2� PbesError�wrap�unwrapNc �@ � |�t � � }t dt t |� � |g� � t | � � g� � }|� � � }|�|S |st d� � �t |� � }|�d}t j |||||� � S )a� Wrap a private key into a PKCS#8 blob (clear or encrypted). Args: private_key (byte string): The private key encoded in binary form. The actual encoding is algorithm specific. In most cases, it is DER. key_oid (string): The object identifier (OID) of the private key to wrap. It is a dotted string, like ``1.2.840.113549.1.1.1`` (for RSA keys). passphrase (bytes string or string): The secret passphrase from which the wrapping key is derived. Set it only if encryption is required. protection (string): The identifier of the algorithm to use for securely wrapping the key. The default value is ``PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC``. prot_params (dictionary): Parameters for the protection algorithm. +------------------+-----------------------------------------------+ | Key | Description | +==================+===============================================+ | iteration_count | The KDF algorithm is repeated several times to| | | slow down brute force attacks on passwords | | | (called *N* or CPU/memory cost in scrypt). | | | The default value for PBKDF2 is 1000. | | | The default value for scrypt is 16384. | +------------------+-----------------------------------------------+ | salt_size | Salt is used to thwart dictionary and rainbow | | | attacks on passwords. The default value is 8 | | | bytes. | +------------------+-----------------------------------------------+ | block_size | *(scrypt only)* Memory-cost (r). The default | | | value is 8. | +------------------+-----------------------------------------------+ | parallelization | *(scrypt only)* CPU-cost (p). The default | | | value is 1. | +------------------+-----------------------------------------------+ key_params (DER object): The algorithm parameters associated to the private key. It is required for algorithms like DSA, but not for others like RSA. randfunc (callable): Random number generation function; it should accept a single integer N and return a string of random data, N bytes long. If not specified, a new RNG will be instantiated from :mod:`Cryptodome.Random`. Return: The PKCS#8-wrapped private key (possibly encrypted), as a byte string. Nr zEmpty passphrasez"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC) r r r r �encode� ValueError�tobytesr �encrypt) � private_key�key_oid� passphrase� protection� prot_params� key_params�randfunc�pk_info� pk_info_ders �5/usr/lib/python3/dist-packages/Cryptodome/IO/PKCS8.pyr r 2 s� � �v �� �Y�Y� � ��� ��(�(� � � � � �{�+�+� � � �G� �.�.�"�"�K����� � -��+�,�,�,� ��$�$�J���9� � �=��j�#�[�(� <� <� <� c � � |r�t |� � }d} t j | |� � } d}n6# t $ r }dt |� � z }Y d}~nd}~wt $ r d}Y nw xY w|sU t j | |� � } d}n<# t $ r }|dt |� � z z }Y d}~nd}~wt $ r |dz }Y nw xY w|st d|z � � �t � � � | d � � � }t |� � d k r|st d � � �|d d k rt d� � �t � � � |d d� � � }t � � � |d � � j }t |� � dk rd}n: t � � � |d � � d}n# |d }Y nxY wt � � � |d � � j } || |fS )aH Unwrap a private key from a PKCS#8 blob (clear or encrypted). Args: p8_private_key (byte string): The private key wrapped into a PKCS#8 blob, DER encoded. passphrase (byte string or string): The passphrase to use to decrypt the blob (if it is encrypted). Return: A tuple containing #. the algorithm identifier of the wrapped key (OID, dotted string) #. the private key (byte string, DER encoded) #. the associated parameters (byte string, DER encoded) or ``None`` Raises: ValueError : if decoding fails FTz PBES1[%s]NzPBES1[Invalid]z ,PBES2[%s]z,PBES2[Invalid]zError decoding PKCS#8 (%s))� � � )� nr_elementsr z;Not a valid clear PKCS#8 structure (maybe it is encrypted?)r z#Not a valid PrivateKeyInfo SEQUENCE� )r" r )r r �decryptr �strr r r �decode�lenr �valuer r �payload) �p8_private_keyr �found�e� error_strr �algo�algo_oid� algo_paramsr s r r r � s_ � �( � G� �Z�(�(� ��� )� "�]�>�:� F� F�N��E�E��� -� -� -�#�c�!�f�f�,�I�I�I�I�I�I������ )� )� )�(�I�I�I� )���� � /� /�!&� �~�z�!J�!J�� ���� � 3� 3� 3��\�C��F�F� 2�2� � � � � � ����� � /� /� /�� .�.� � � � /���� � G� � 9�I� E�F�F� F��m�m�"�"�>�y�"�I�I�G� �7�|�|�q������ 4� 5� 5� 5� �q�z�Q����>�?�?�?� �=�=� � ��� �� � ?� ?�D��}�}�#�#�D��G�,�,�2�H� �4�y�y�A�~�~�� � � "� �I�I� � �T�!�W� %� %� %� �K�K�� "� �q�'�K�K�K���� !�"�"�)�)�'�!�*�5�5�=�K� �k�;� /�/sD �- � A �A�A � A �&A> �> B7�B"�"B7�6B7� )G � G)NNNNN)N) �Cryptodome.Util.py3compat�Cryptodome.Util.asn1r r r r �Cryptodome.IO._PBESr r r �__all__r r � r r �<module>r5 s� ��F (� '� '� '�� � � � � � � � � � � � 8� 7� 7� 7� 7� 7� 7� 7� 7� 7� �8� �� <@�59�[<� [<� [<� [<�|W0� W0� W0� W0� W0� W0r
Save File
Cancel