관리-도구
편집 파일: algorithms.cpython-37.pyc
B tJ�`�S � @ s� d dl Z d dlZd dlZddlmZ ddlmZmZmZm Z m Z m Z m Z y�d dl Zd dl mZ d dlmZ d dlmZmZ d dlmZmZ d d lmZmZ d d lm Z m Z m Z m Z m Z m!Z!m"Z"m#Z# d d l$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+ d Z,W n e-k �r d Z,Y nX ddddddddddddh Z.dd� Z/G d d � d �Z0G d d � d e0�Z1G d d!� d!e0�Z2e,�r�G d"d#� d#e0�Z3G d$d%� d%e0�Z4G d&d'� d'e3�Z5G d(d)� d)e0�Z6dS )*� N� )�InvalidKeyError)�base64url_decode�base64url_encode�der_to_raw_signature� force_bytes�from_base64url_uint�raw_to_der_signature�to_base64url_uint)�InvalidSignature)�hashes)�ec�padding)�EllipticCurvePrivateKey�EllipticCurvePublicKey)�Ed25519PrivateKey�Ed25519PublicKey)� RSAPrivateKey�RSAPrivateNumbers� RSAPublicKey�RSAPublicNumbers� rsa_crt_dmp1� rsa_crt_dmq1� rsa_crt_iqmp�rsa_recover_prime_factors)�Encoding� NoEncryption� PrivateFormat� PublicFormat�load_pem_private_key�load_pem_public_key�load_ssh_public_keyTF�RS256�RS384�RS512�ES256�ES256K�ES384�ES521�ES512�PS256�PS384�PS512�EdDSAc C s� t � ttj�ttj�ttj�d�} tr�| �ttj�ttj�ttj�ttj�ttj�ttj�ttj�ttj�t t j�t t j�t t j�t � d� � | S )zE Returns the algorithms that are implemented by the library. )ZnoneZHS256ZHS384ZHS512) r" r# r$ r% r& r' r( r) r* r+ r, r- ) � NoneAlgorithm� HMACAlgorithm�SHA256�SHA384�SHA512� has_crypto�update� RSAAlgorithm� ECAlgorithm�RSAPSSAlgorithm�Ed25519Algorithm)Zdefault_algorithms� r9 �?/opt/alt/python37/lib/python3.7/site-packages/jwt/algorithms.py�get_default_algorithmsE s( r; c @ s@ e Zd ZdZdd� Zdd� Zdd� Zedd � �Zed d � �Z d S ) � AlgorithmzH The interface for an algorithm used to sign and verify tokens. c C s t �dS )z� Performs necessary validation and conversions on the key and returns the key value in the proper format for sign() and verify(). N)�NotImplementedError)�self�keyr9 r9 r: � prepare_keyl s zAlgorithm.prepare_keyc C s t �dS )zn Returns a digital signature for the specified message using the specified key value. N)r= )r> �msgr? r9 r9 r: �signs s zAlgorithm.signc C s t �dS )zz Verifies that the specified digital signature is valid for the specified message and key values. N)r= )r> rA r? �sigr9 r9 r: �verifyz s zAlgorithm.verifyc C s t �dS )z7 Serializes a given RSA key into a JWK N)r= )�key_objr9 r9 r: �to_jwk� s zAlgorithm.to_jwkc C s t �dS )zb Deserializes a given RSA key from JWK back into a PublicKey or PrivateKey object N)r= )�jwkr9 r9 r: �from_jwk� s zAlgorithm.from_jwkN) �__name__� __module__� __qualname__�__doc__r@ rB rD � staticmethodrF rH r9 r9 r9 r: r< g s r< c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) r. zZ Placeholder for use when no signing or verification operations are required. c C s |dkr d }|d k r t d��|S )N� z*When alg = "none", key value must be None.)r )r> r? r9 r9 r: r@ � s zNoneAlgorithm.prepare_keyc C s dS )N� r9 )r> rA r? r9 r9 r: rB � s zNoneAlgorithm.signc C s dS )NFr9 )r> rA r? rC r9 r9 r: rD � s zNoneAlgorithm.verifyN)rI rJ rK rL r@ rB rD r9 r9 r9 r: r. � s r. c @ sZ e Zd ZdZejZejZej Z dd� Z dd� Z e dd� �Ze dd � �Zd d � Zd d � ZdS )r/ zf Performs signing and verification operations using HMAC and the specified hash function. c C s || _ d S )N)�hash_alg)r> rP r9 r9 r: �__init__� s zHMACAlgorithm.__init__c s6 t � �� ddddg}t� fdd�|D ��r2td��� S )Ns -----BEGIN PUBLIC KEY-----s -----BEGIN CERTIFICATE-----s -----BEGIN RSA PUBLIC KEY-----s ssh-rsac 3 s | ]}|� kV qd S )Nr9 )�.0Z string_value)r? r9 r: � <genexpr>� s z,HMACAlgorithm.prepare_key.<locals>.<genexpr>zdThe specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.)r �anyr )r> r? Zinvalid_stringsr9 )r? r: r@ � s zHMACAlgorithm.prepare_keyc C s t �tt| ���� dd��S )N�oct)�k�kty)�json�dumpsr r �decode)rE r9 r9 r: rF � s zHMACAlgorithm.to_jwkc C sn y.t | t�rt�| �}nt | t�r(| }nt�W n tk rJ td��Y nX |�d�dkrbtd��t|d �S )NzKey is not valid JSONrW rU zNot an HMAC keyrV ) � isinstance�strrX �loads�dict� ValueErrorr �getr )rG �objr9 r9 r: rH � s zHMACAlgorithm.from_jwkc C s t �||| j��� S )N)�hmac�newrP �digest)r> rA r? r9 r9 r: rB � s zHMACAlgorithm.signc C s t �|| �||��S )N)rb Zcompare_digestrB )r> rA r? rC r9 r9 r: rD � s zHMACAlgorithm.verifyN)rI rJ rK rL �hashlib�sha256r0 �sha384r1 �sha512r2 rQ r@ rM rF rH rB rD r9 r9 r9 r: r/ � s r/ c @ sZ e Zd ZdZejZejZejZdd� Zdd� Z e dd� �Z e dd � �Z d d � Z d d � ZdS )r5 z~ Performs signing and verification operations using RSASSA-PKCS-v1_5 and the specified hash function. c C s || _ d S )N)rP )r> rP r9 r9 r: rQ � s zRSAAlgorithm.__init__c C s~ t |t�st |t�r|S t |ttf�rrt|�}y$|�d�rDt|�}n t|d d�}W qz t k rn t |�}Y qzX nt d��|S )Ns ssh-rsa)�passwordz Expecting a PEM-formatted key.) r[ r r �bytesr\ r � startswithr! r r_ r � TypeError)r> r? r9 r9 r: r@ � s zRSAAlgorithm.prepare_keyc C s� d }t | dd �r�| �� }ddgt|jj��� t|jj��� t|j��� t|j��� t|j ��� t|j ��� t|j ��� t|j ��� d� }nBt | dd �r�| �� }ddgt|j��� t|j��� d�}nt d��t�|�S )N�private_numbers�RSArB ) rW �key_ops�n�e�d�p�q�dp�dq�qirD )rW ro rp rq zNot a public or private key)�getattrrm r �public_numbersrp rZ rq rr rs rt �dmp1�dmq1�iqmpr rX rY )rE ra �numbersr9 r9 r: rF s* zRSAAlgorithm.to_jwkc s� y.t | t�rt�| �� nt | t�r(| � nt�W n tk rJ td��Y nX � �d�dkrbtd��d� k�r�d� k�r�d� k�r�d� kr�td ��d d d d dg}� fdd�|D �}t|�}|r�t |�s�td��t t � d �t � d ��}|�r4t t � d �t � d �t � d �t � d �t � d �t � d �|d�}nHt � d �}t |j||j�\}}t |||t||�t||�t||�|d�}|�� S d� k�r�d� k�r�t t � d �t � d ��}|�� S td��d S )NzKey is not valid JSONrW rn zNot an RSA keyrr rq rp Zothz5Unsupported RSA private key: > 2 primes not supportedrs rt ru rv rw c s g | ] }|� k�qS r9 r9 )rR Zprop)ra r9 r: � <listcomp>C s z)RSAAlgorithm.from_jwk.<locals>.<listcomp>z@RSA key must include all parameters if any are present besides d)rr rs rt rz r{ r| ry zNot a public or private key)r[ r\ rX r] r^ r_ r r` rT �allr r r r rp rq r r r � private_key� public_key) rG Z other_propsZ props_foundZany_props_foundry r} rr rs rt r9 )ra r: rH , sd zRSAAlgorithm.from_jwkc C s |� |t�� | �� �S )N)rB r �PKCS1v15rP )r> rA r? r9 r9 r: rB v s zRSAAlgorithm.signc C s6 y |� ||t�� | �� � dS tk r0 dS X d S )NTF)rD r r� rP r )r> rA r? rC r9 r9 r: rD y s zRSAAlgorithm.verifyN)rI rJ rK rL r r0 r1 r2 rQ r@ rM rF rH rB rD r9 r9 r9 r: r5 � s $ Jr5 c @ sN e Zd ZdZejZejZejZdd� Zdd� Z dd� Z dd � Z e d d � �Z d S ) r6 zr Performs signing and verification operations using ECDSA and the specified hash function c C s || _ d S )N)rP )r> rP r9 r9 r: rQ � s zECAlgorithm.__init__c C s~ t |t�st |t�r|S t |ttf�rrt|�}y |�d�rDt|�}nt|�}W qz t k rn t |d d�}Y qzX nt d��|S )Ns ecdsa-sha2-)ri z Expecting a PEM-formatted key.) r[ r r rj r\ r rk r! r r_ r rl )r> r? r9 r9 r: r@ � s zECAlgorithm.prepare_keyc C s" |� |t�| �� ��}t||j�S )N)rB r �ECDSArP r �curve)r> rA r? �der_sigr9 r9 r: rB � s zECAlgorithm.signc C sn yt ||j�}W n tk r$ dS X y.t|t�r:|�� }|�||t�| � � �� dS t k rh dS X d S )NFT) r r� r_ r[ r r� rD r r� rP r )r> rA r? rC r� r9 r9 r: rD � s zECAlgorithm.verifyc C s0 y.t | t�rt�| �}nt | t�r(| }nt�W n tk rJ td��Y nX |�d�dkrbtd��d|ksrd|krztd��t|�d��}t|�d��}|�d�}|dkr�t |�t |� kr�d kr�n n t � � }ntd ��n�|d k�r t |�t |� k�rd k�rn n t � � }ntd ��n�|dk�r`t |�t |� k�rHdk�rVn n t � � }ntd��nP|dk�r�t |�t |� k�r�d k�r�n n t �� }ntd��ntd|� ���t jtj|dd�tj|dd�|d�}d|k�r�|�� S t|�d��}t |�t |�k�rtdt |�|��t �tj|dd�|��� S )NzKey is not valid JSONrW ZECzNot an Elliptic curve key�x�y�crvzP-256� z)Coords should be 32 bytes for curve P-256zP-384�0 z)Coords should be 48 bytes for curve P-384zP-521�B z)Coords should be 66 bytes for curve P-521Z secp256k1z-Coords should be 32 bytes for curve secp256k1zInvalid curve: �big)� byteorder)r� r� r� rr z!D should be {} bytes for curve {})r[ r\ rX r] r^ r_ r r` r �lenr Z SECP256R1Z SECP384R1Z SECP521R1Z SECP256K1ZEllipticCurvePublicNumbers�int� from_bytesr� ZEllipticCurvePrivateNumbersr� )rG ra r� r� r� Z curve_objry rr r9 r9 r: rH � sZ $ $ $ zECAlgorithm.from_jwkN)rI rJ rK rL r r0 r1 r2 rQ r@ rB rD rM rH r9 r9 r9 r: r6 � s r6 c @ s e Zd ZdZdd� Zdd� ZdS )r7 zA Performs a signature using RSASSA-PSS with MGF1 c C s* |� |tjt�| �� �| jjd�| �� �S )N)�mgf� salt_length)rB r �PSS�MGF1rP � digest_size)r> rA r? r9 r9 r: rB s zRSAPSSAlgorithm.signc C sJ y0|� ||tjt�| �� �| jjd�| �� � dS tk rD dS X d S )N)r� r� TF)rD r r� r� rP r� r )r> rA r? rC r9 r9 r: rD s zRSAPSSAlgorithm.verifyN)rI rJ rK rL rB rD r9 r9 r9 r: r7 � s r7 c @ sH e Zd ZdZdd� Zdd� Zdd� Zdd � Zed d � �Z ed d � �Z dS )r8 z� Performs signing and verification operations using Ed25519 This class requires ``cryptography>=2.6`` to be installed. c K s d S )Nr9 )r> �kwargsr9 r9 r: rQ s zEd25519Algorithm.__init__c C s� t |ttf�r|S t |ttf�rzt |t�r4|�d�}|�d�}d|krNt|�S d|krbt|d d�S |dd� dkrzt |�S t d��d S ) Nzutf-8z-----BEGIN PUBLICz-----BEGIN PRIVATE)ri r � zssh-z)Expecting a PEM-formatted or OpenSSH key.) r[ r r rj r\ �encoderZ r r r! rl )r> r? Zstr_keyr9 r9 r: r@ # s z Ed25519Algorithm.prepare_keyc C s$ t |�tk rt|d�n|}|�|�S )a Sign a message ``msg`` using the Ed25519 private key ``key`` :param str|bytes msg: Message to sign :param Ed25519PrivateKey key: A :class:`.Ed25519PrivateKey` instance :return bytes signature: The signature, as bytes zutf-8)�typerj rB )r> rA r? r9 r9 r: rB 6 s zEd25519Algorithm.signc C st yVt |�tk rt|d�n|}t |�tk r2t|d�n|}t|t�rH|�� }|�||� dS tjjk rn dS X dS )a� Verify a given ``msg`` against a signature ``sig`` using the Ed25519 key ``key`` :param str|bytes sig: Ed25519 signature to check ``msg`` against :param str|bytes msg: Message to sign :param Ed25519PrivateKey|Ed25519PublicKey key: A private or public Ed25519 key instance :return bool verified: True if signature is valid, False if not. zutf-8TFN) r� rj r[ r r� rD � cryptography� exceptionsr )r> rA r? rC r9 r9 r: rD @ s zEd25519Algorithm.verifyc C s� t | t�r:| jtjtjd�}t�tt |��� � ddd��S t | t �r�| j tjt jt� d�}| �� jtjtjd�}t�tt |��� � tt |��� � ddd��S td��d S )N)�encoding�format�OKP�Ed25519)r� rW r� )r� r� Zencryption_algorithm)r� rr rW r� zNot a public or private key)r[ r Z public_bytesr ZRawr rX rY r r rZ r Z private_bytesr r r� r )r? r� rr r9 r9 r: rF T s, zEd25519Algorithm.to_jwkc C s� y.t | t�rt�| �}nt | t�r(| }nt�W n tk rJ td��Y nX |�d�dkrbtd��|�d�}|dkr�td|� ���d|kr�td ��t|�d��}y*d |kr�t � |�S t|�d ��}t � |�S tk r� } ztd �|�W d d }~X Y nX d S ) NzKey is not valid JSONrW r� zNot an Octet Key Pairr� r� zInvalid curve: r� z OKP should have "x" parameterrr zInvalid key parameter) r[ r\ rX r] r^ r_ r r` r r Zfrom_public_bytesr Zfrom_private_bytes)rG ra r� r� rr �errr9 r9 r: rH { s. zEd25519Algorithm.from_jwkN) rI rJ rK rL rQ r@ rB rD rM rF rH r9 r9 r9 r: r8 s 'r8 )7re rb rX r� r �utilsr r r r r r r Zcryptography.exceptionsr� r Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Z,cryptography.hazmat.primitives.asymmetric.ecr r Z1cryptography.hazmat.primitives.asymmetric.ed25519r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r r r r r Z,cryptography.hazmat.primitives.serializationr r r r r r r! r3 �ModuleNotFoundErrorZrequires_cryptographyr; r< r. r/ r5 r6 r7 r8 r9 r9 r9 r: �<module> sL $ ( $ ")@ {