File manager - Edit - /usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/__pycache__/backend.cpython-310.pyc
Back
o g�ee� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZmZ d dl m Z m Z d dl m Z mZmZmZmZ d dlmZmZmZmZmZmZmZmZmZm Z m Z m Z m Z d dl m!Z! d dl"m#Z# d d l$m%Z% d d l&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/ d d l0m1Z1m2Z2m3Z3m4Z4 d d l5m6Z6m7Z7m8Z8 d d l9m:Z:m;Z; d dl<m=Z=m>Z> d dl?m@Z@mAZAmBZB d dlCmDZDmEZEmFZFmGZGmHZHmIZImJZJmKZKmLZL d dlMmNZN d dlOmPZP d dlQmRZRmSZS d dlTmUZUmVZV d dlWmXZXmYZY d dlZm[Z[m\Z\ d dl]m^Z^m_Z_ d dl`maZambZbmcZcmdZd d dlemfZf d dlgmhZhmiZi d dljmkZkmlZlmmZmmnZnmoZompZp d d lqmrZrmsZsmtZtmuZu d d lvmwZwmxZxmyZymzZzm{Z{m|Z|m}Z}m~Z~mZ d d l�m�Z�m�Z�m�Z�m�Z�m�Z�m�Z�m�Z�m�Z� d d l�m�Z� d d l�m�Z�m�Z� d d!l�m�Z� e ��d"d#d$g�Z�G d%d&� d&e��Z�e��e�e��e�e��e�e��e�e��e�e��e�e��e�e��e�e��e�e��e �e��e �e��e �e��ef��� j�j�e �G d'd(� d(e���������������Z�G d)d*� d*e��Z�d+d,� Z�e�� Z�dS )-� N)�contextmanager)�utils�x509)�UnsupportedAlgorithm�_Reasons)�INTEGER�NULL�SEQUENCE� encode_der�encode_der_integer) � CMACBackend� CipherBackend�DERSerializationBackend� DHBackend� DSABackend�EllipticCurveBackend� HMACBackend� HashBackend�PBKDF2HMACBackend�PEMSerializationBackend� RSABackend� ScryptBackend� X509Backend)�aead)�_CipherContext�� _CMACContext) � _CRL_ENTRY_REASON_ENUM_TO_CODE�_CRL_EXTENSION_HANDLERS�_EXTENSION_HANDLERS_BASE�_EXTENSION_HANDLERS_SCT�"_OCSP_BASICRESP_EXTENSION_HANDLERS� _OCSP_REQ_EXTENSION_HANDLERS�'_OCSP_SINGLERESP_EXTENSION_HANDLERS_SCT�_REVOKED_EXTENSION_HANDLERS�_X509ExtensionParser)� _DHParameters� _DHPrivateKey� _DHPublicKey�_dh_params_dup)�_DSAParameters�_DSAPrivateKey� _DSAPublicKey)�_EllipticCurvePrivateKey�_EllipticCurvePublicKey)�_Ed25519PrivateKey�_Ed25519PublicKey)�_ED448_KEY_SIZE�_Ed448PrivateKey�_Ed448PublicKey) �$_CRL_ENTRY_EXTENSION_ENCODE_HANDLERS� _CRL_EXTENSION_ENCODE_HANDLERS�_EXTENSION_ENCODE_HANDLERS�)_OCSP_BASICRESP_EXTENSION_ENCODE_HANDLERS�'_OCSP_REQUEST_EXTENSION_ENCODE_HANDLERS�_encode_asn1_int_gc�_encode_asn1_str_gc�_encode_name_gc� _txt2obj_gc�� _HashContext�� _HMACContext)� _OCSPRequest� _OCSPResponse)�_POLY1305_KEY_SIZE�_Poly1305Context)�_RSAPrivateKey� _RSAPublicKey)�_X25519PrivateKey�_X25519PublicKey)�_X448PrivateKey�_X448PublicKey)� _Certificate�_CertificateRevocationList�_CertificateSigningRequest�_RevokedCertificate)�binding)�hashes� serialization)�dh�dsa�ec�ed25519�ed448�rsa)�MGF1�OAEP�PKCS1v15�PSS) �AES�ARC4�Blowfish�CAST5�Camellia�ChaCha20�IDEA�SEED� TripleDES)�CBC�CFB�CFB8�CTR�ECB�GCM�OFB�XTS)�scrypt)�pkcs7�ssh)�ocsp� _MemoryBIO�bio�char_ptrc @ s e Zd ZdS )�_RC2N)�__name__� __module__� __qualname__� rx rx �N/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/backend.pyrt � s rt c @ sj e Zd ZdZdZh d�ZeefZe j e j e j e j e je je je je je je je je jf ZdZdZdd> ZdZde> Z dd� Z �d(d d �Z d d � Z dd� Z e!j"dd� �Z#dd� Z$dd� Z%dd� Z&dd� Z'dd� Z(d d � Z)d d � Z*d d!� Z+d"d#� Z,d$d%� Z-d&d'� Z.d(d)� Z/d*d+� Z0d,d-� Z1d.d/� Z2d0d1� Z3d2d3� Z4d4d5� Z5d6d7� Z6d8d9� Z7d:d;� Z8d<d=� Z9�d(d>d?�Z:d@dA� Z;dBdC� Z<dDdE� Z=dFdG� Z>dHdI� Z?dJdK� Z@dLdM� ZAdNdO� ZBdPdQ� ZCdRdS� ZDdTdU� ZEdVdW� ZFdXdY� ZGdZd[� ZHd\d]� ZId^d_� ZJd`da� ZKdbdc� ZLddde� ZMdfdg� ZNdhdi� ZOdjdk� ZPdldm� ZQdndo� ZRdpdq� ZSdrds� ZTdtdu� ZUdvdw� ZVdxdy� ZWdzd{� ZXd|d}� ZYd~d� ZZd�d�� Z[d�d�� Z\d�d�� Z]d�d�� Z^d�d�� Z_d�d�� Z`d�d�� Zad�d�� Zbd�d�� Zcd�d�� Zdd�d�� Zed�d�� Zfd�d�� Zgd�d�� Zhd�d�� Zid�d�� Zjd�d�� Zkd�d�� Zld�d�� Zmd�d�� Znd�d�� Zod�d�� Zpd�d�� Zqd�d�� Zrd�d�� Zsd�d�� Ztd�d�� Zud�d�� Zvd�d�� Zwd�d�� Zxd�d�� Zyd�d�� Zzd�d�� Z{d�dÄ Z|d�dń Z}d�dDŽ Z~e"d�dɄ �Zd�d˄ Z�d�d̈́ Z�d�dτ Z�d�dф Z�d�dӄ Z�d�dՄ Z�d�dׄ Z�d�dل Z�d�dۄ Z�d�d݄ Z�d�d߄ Z�d�d� Z�d�d� Z�d�d� Z��d(d�d�Z�d�d� Z�d�d� Z�d�d� Z�d�d� Z�d�d� Z�d�d� Z�d�d�� Z�d�d�� Z�d�d�� Z�d�d�� Z�d�d�� Z�d�d�� Z��d �d� Z��d�d� Z��d�d� Z��d�d� Z��d�d � Z��d �d � Z��d �d � Z��d�d� Z��d�d� Z�e!j"�d�d� �Z��d�d� Z�e!j"�d�d� �Z��d�d� Z��d�d� Z��d �d � Z��d �d � Z��d �d!� Z��d"�d#� Z��d$�d%� Z��d&�d'� Z�d S () �Backendz) OpenSSL API binding interfaces. �openssl> � aes-128-ccm� aes-128-gcm� aes-192-ccm� aes-192-gcm� aes-256-ccm� aes-256-gcm� i � c C s� t �� | _| jj| _| jj| _| �� | _i | _ | � � | � � | � � | jr1| jj r1t�dt� n| �� | jjg| _| jjrI| j�| jj� d S d S )Nz<OpenSSL FIPS mode is enabled. Can't enable DRBG fork safety.)rO �Binding�_binding�ffi�_ffi�lib�_lib�_is_fips_enabled� _fips_enabled�_cipher_registry�_register_default_ciphers�_register_x509_ext_parsers�_register_x509_encoders�"CRYPTOGRAPHY_NEEDS_OSRANDOM_ENGINE�warnings�warn� UserWarning�activate_osrandom_engine� EVP_PKEY_DH� _dh_types� Cryptography_HAS_EVP_PKEY_DHX�append� EVP_PKEY_DHX��selfrx rx ry �__init__� s$ � �zBackend.__init__Nc C s t j| j||d�S )N)�errors)rO �_openssl_assertr� )r� �okr� rx rx ry �openssl_assert� s zBackend.openssl_assertc C s2 t | jddd� �}|� }|dkr| j�� t|�S )N� FIPS_modec S � dS �Nr rx rx rx rx ry �<lambda>� s z*Backend._is_fips_enabled.<locals>.<lambda>r )�getattrr� �ERR_clear_error�bool)r� � fips_mode�moderx rx ry r� � s zBackend._is_fips_enabledc C sn | j jr3| j �� }|| jjkr5| j �|� | j �| jj�}| �|dk� | j �|�}| �|dk� d S d S d S �Nr� ) r� r� �ENGINE_get_default_RANDr� r �ENGINE_unregister_RAND�RAND_set_rand_methodr� � ENGINE_finish�r� �e�resrx rx ry �activate_builtin_random� s �z Backend.activate_builtin_randomc c s� � | j �| j j�}| �|| jjk� | j �|�}| �|dk� z |V W | j �|�}| �|dk� | j �|�}| �|dk� d S | j �|�}| �|dk� | j �|�}| �|dk� w r� ) r� � ENGINE_by_id� Cryptography_osrandom_engine_idr� r� r � ENGINE_init� ENGINE_freer� r� rx rx ry �_get_osurandom_engine s � � z Backend._get_osurandom_enginec C sx | j jr:| �� | �� �}| j �|�}| �|dk� W d � n1 s$w Y | j �| jj�}| �|dk� d S d S r� ) r� r� r� r� �ENGINE_set_default_RANDr� r� r� r r� rx rx ry r� s ��z Backend.activate_osrandom_enginec C st | j �dd�}| �� � }| j�|dt|�|| j jd�}| �|dk� W d � n1 s,w Y | j �|�� d�S )N�char[]�@ s get_implementationr �ascii) r� �newr� r� �ENGINE_ctrl_cmd�lenr r� �string�decode)r� �bufr� r� rx rx ry � osrandom_engine_implementation) s � �z&Backend.osrandom_engine_implementationc C s | j �| j�| jj���d�S )z� Friendly string name of the loaded OpenSSL library. This is not necessarily the same version as it was compiled against. Example: OpenSSL 1.1.1d 10 Sep 2019 r� )r� r� r� �OpenSSL_version�OPENSSL_VERSIONr� r� rx rx ry �openssl_version_text2 s ��z Backend.openssl_version_textc C s | j �� S �N)r� �OpenSSL_version_numr� rx rx ry �openssl_version_number= � z Backend.openssl_version_numberc C s t | ||�S r� r? )r� �key� algorithmrx rx ry �create_hmac_ctx@ � zBackend.create_hmac_ctxc C sL |j dks |j dkrd�|j |jd ��d�}n|j �d�}| j�|�}|S )N�blake2b�blake2sz{}{}� r� )�name�format� digest_size�encoder� �EVP_get_digestbyname)r� r� �alg�evp_mdrx rx ry �_evp_md_from_algorithmC s �� z Backend._evp_md_from_algorithmc C s | � |�}| �|| jjk� |S r� )r� r� r� r �r� r� r� rx rx ry � _evp_md_non_null_from_algorithmN s z'Backend._evp_md_non_null_from_algorithmc C s, | j r t|| j�s dS | �|�}|| jjkS �NF)r� � isinstance� _fips_hashesr� r� r r� rx rx ry �hash_supportedS s zBackend.hash_supportedc C � | � |�S r� �r� �r� r� rx rx ry �hmac_supportedZ r� zBackend.hmac_supportedc C � t | |�S r� r= r� rx rx ry �create_hash_ctx] r� zBackend.create_hash_ctxc C s^ | j r t|| j�s dS z | jt|�t|�f }W n ty" Y dS w || ||�}| jj|kS r� )r� r� � _fips_ciphersr� �type�KeyErrorr� r )r� �cipherr� �adapter� evp_cipherrx rx ry �cipher_supported` s � zBackend.cipher_supportedc C s0 ||f| j v rtd�||���|| j ||f< d S )Nz"Duplicate registration for: {} {}.)r� � ValueErrorr� )r� � cipher_cls�mode_clsr� rx rx ry �register_cipher_adapterj s ��z Backend.register_cipher_adapterc C sV t ttttttfD ] }| �t|t d�� q t ttttfD ] }| �t |t d�� q t tttfD ] }| �t |t d�� q.| �t tt d�� t tttfD ] }| �t |t d�� qIt tttfD ] }| �t |t d�� q[t�ttgt tttg�D ] \}}| �||t d�� qs| �ttd �t d�� | �ttd �t d�� | �ttd �t d �� | �ttt� d S ) Nz+{cipher.name}-{cipher.key_size}-{mode.name}zdes-ede3-{mode.name}zdes-ede3zbf-{mode.name}zseed-{mode.name}z{cipher.name}-{mode.name}�rc4�rc2�chacha20)re rh ri rk rf rg rj r� r\ �GetCipherByNamer` rd r^ rc � itertools�productr_ rb r] r� rt ra rl �_get_xts_cipher)r� r� r� rx rx ry r� s sT �� � � � � ���z!Backend._register_default_ciphersc C s� t �� }t�� }| jjr|�t� |�t� t| | jj | jj |d�| _ t| | jj | jj |d�| _t| | jj| jjtd�| _t| | jj| jjtd�| _t| | jj| jjtd�| _t| | jj| jjt d�| _ t| | jj | jj |d�| _ d S )N)� ext_count�get_ext�handlers)!r �copyr$ r� �Cryptography_HAS_SCT�updater r# r% �X509_get_ext_count� X509_get_ext� _certificate_extension_parser�sk_X509_EXTENSION_num�sk_X509_EXTENSION_value�_csr_extension_parser�X509_REVOKED_get_ext_count�X509_REVOKED_get_ext� _revoked_cert_extension_parser�X509_CRL_get_ext_count�X509_CRL_get_extr �_crl_extension_parser�OCSP_REQUEST_get_ext_count�OCSP_REQUEST_get_extr" �_ocsp_req_ext_parser� OCSP_BASICRESP_get_ext_count�OCSP_BASICRESP_get_extr! �_ocsp_basicresp_ext_parser� OCSP_SINGLERESP_get_ext_count�OCSP_SINGLERESP_get_ext�_ocsp_singleresp_ext_parser)r� � ext_handlers�singleresp_handlersrx rx ry r� � s^ ������ �z"Backend._register_x509_ext_parsersc C s6 t �� | _t�� | _t�� | _t�� | _t �� | _ d S r� ) r6 r� �_extension_encode_handlersr5 � _crl_extension_encode_handlersr4 �$_crl_entry_extension_encode_handlersr8 �'_ocsp_request_extension_encode_handlersr7 �)_ocsp_basicresp_extension_encode_handlersr� rx rx ry r� � s ����z Backend._register_x509_encodersc C � t | ||t j�S r� )r �_ENCRYPT�r� r� r� rx rx ry � create_symmetric_encryption_ctx� � z'Backend.create_symmetric_encryption_ctxc C r r� )r �_DECRYPTr rx rx ry � create_symmetric_decryption_ctx� r z'Backend.create_symmetric_decryption_ctxc C r� r� )r� r� rx rx ry �pbkdf2_hmac_supported� r� z Backend.pbkdf2_hmac_supportedc C sh | j �d|�}| �|�}| j �|�}| j�|t|�|t|�||||�} | �| dk� | j �|�d d � S )N�unsigned char[]r� ) r� r� r� � from_bufferr� �PKCS5_PBKDF2_HMACr� r� �buffer) r� r� �length�salt� iterations� key_materialr� r� �key_material_ptrr� rx rx ry �derive_pbkdf2_hmac� s � zBackend.derive_pbkdf2_hmacc C � t �| j�S r� )rO �_consume_errorsr� r� rx rx ry r, r� zBackend._consume_errorsc C r+ r� )rO �_consume_errors_with_textr� r� rx rx ry r- r� z!Backend._consume_errors_with_textc C sx || j jksJ �| j�|�}| j �d|�}| j�||�}| �|dk� t�| j � |�d |� d�}| j� |�r:| }|S )Nr! r �big) r� r r� � BN_num_bytesr� � BN_bn2binr� �int� from_bytesr$ �BN_is_negative)r� �bn� bn_num_bytes�bin_ptr�bin_len�valrx rx ry � _bn_to_int s zBackend._bn_to_intc C sn |du s || j jks J �|du r| j j}|�t|�� d d �d�}| j�|t|�|�}| �|| j jk� |S )a Converts a python integer to a BIGNUM. The returned BIGNUM will not be garbage collected (to support adding them to structs that take ownership of the object). Be sure to register it for GC if it will be discarded after use. Ng @r� r. ) r� r �to_bytesr1 � bit_lengthr� � BN_bin2bnr� r� )r� �numr4 �binary�bn_ptrrx rx ry � _int_to_bn s zBackend._int_to_bnc C s� t �||� | j�� }| �|| jjk� | j�|| jj�}| � |�}| j�|| jj �}| j� |||| jj�}| �|dk� | � |�}t | ||�S r� )rW �_verify_rsa_parametersr� �RSA_newr� r� r �gc�RSA_freer@ �BN_free�RSA_generate_key_ex�_rsa_cdata_to_evp_pkeyrE )r� �public_exponent�key_size� rsa_cdatar4 r� �evp_pkeyrx rx ry �generate_rsa_private_key$ s � z Backend.generate_rsa_private_keyc C s |dko |d@ dko |dkS )N� r� r i rx )r� rH rI rx rx ry �!generate_rsa_parameters_supported6 s ��z)Backend.generate_rsa_parameters_supportedc C s2 t �|j|j|j|j|j|j|jj |jj � | j � � }| � || jjk� | j�|| j j�}| �|j�}| �|j�}| �|j�}| �|j�}| �|j�}| �|j�}| �|jj �} | �|jj �} | j �|||�} | � | dk� | j �|| | |�} | � | dk� | j �||||�} | � | dk� | �|�} t| || �S r� )rW � _check_private_key_components�p�q�d�dmp1�dmq1�iqmp�public_numbersr� �nr� rB r� r� r rC rD r@ �RSA_set0_factors� RSA_set0_key�RSA_set0_crt_paramsrG rE ) r� �numbersrJ rP rQ rR rS rT rU r� rW r� rK rx rx ry �load_rsa_private_numbers= s: � z Backend.load_rsa_private_numbersc C s� t �|j|j� | j�� }| �|| jjk� | j� || jj �}| � |j�}| � |j�}| j� |||| jj�}| �|dk� | � |�}t| ||�S r� )rW � _check_public_key_componentsr� rW r� rB r� r� r rC rD r@ rY rG rF )r� r[ rJ r� rW r� rK rx rx ry �load_rsa_public_numbers] s z Backend.load_rsa_public_numbersc C s2 | j �� }| �|| jjk� | j�|| j j�}|S r� )r� � EVP_PKEY_newr� r� r rC � EVP_PKEY_free�r� rK rx rx ry �_create_evp_pkey_gcj s zBackend._create_evp_pkey_gcc C �( | � � }| j�||�}| �|dk� |S r� )rb r� �EVP_PKEY_set1_RSAr� )r� rJ rK r� rx rx ry rG p � z Backend._rsa_cdata_to_evp_pkeyc C sH | j �|�}| j�|t|��}| �|| j jk� t| j �|| jj �|�S )z� Return a _MemoryBIO namedtuple of (BIO, char*). The char* is the storage for the BIO and it must stay alive until the BIO is finished with. ) r� r" r� �BIO_new_mem_bufr� r� r rq rC �BIO_free)r� �data�data_ptrrr rx rx ry � _bytes_to_biov s zBackend._bytes_to_bioc C sP | j �� }| �|| jjk� | j �|�}| �|| jjk� | j�|| j j�}|S )z. Creates an empty memory BIO. )r� � BIO_s_memr� r� r �BIO_newrC rg )r� � bio_methodrr rx rx ry �_create_mem_bio_gc� s zBackend._create_mem_bio_gcc C s\ | j �d�}| j�||�}| �|dk� | �|d | j jk� | j �|d |�dd� }|S )zE Reads a memory BIO. This only works on memory BIOs. zchar **r N)r� r� r� �BIO_get_mem_datar� r r$ )r� rr r� �buf_len�bio_datarx rx ry � _read_mem_bio� s zBackend._read_mem_bioc C � | j �|�}|| j jkr*| j �|�}| �|| jjk� | j�|| j j�}t | ||�S || j j krN| j � |�}| �|| jjk� | j�|| j j �}t | ||�S || j jkrr| j �|�}| �|| jjk� | j�|| j j�}t| ||�S || jv r�| j �|�}| �|| jjk� | j�|| j j�}t| ||�S |t| j dd�kr�t| |�S |t| j dd�kr�t| |�S |t| j dd�kr�t| |�S |t| j dd�kr�t| |�S td��)zd Return the appropriate type of PrivateKey given an evp_pkey cdata pointer. �EVP_PKEY_ED25519N� EVP_PKEY_X448�EVP_PKEY_X25519�EVP_PKEY_ED448�Unsupported key type.) r� � EVP_PKEY_id� EVP_PKEY_RSA�EVP_PKEY_get1_RSAr� r� r rC rD rE � EVP_PKEY_DSA�EVP_PKEY_get1_DSA�DSA_freer+ � EVP_PKEY_EC�EVP_PKEY_get1_EC_KEY� EC_KEY_freer- r� �EVP_PKEY_get1_DH�DH_freer' r� r/ rI rG r2 r �r� rK �key_typerJ � dsa_cdata�ec_cdata�dh_cdatarx rx ry �_evp_pkey_to_private_key� �< z Backend._evp_pkey_to_private_keyc C rs )zc Return the appropriate type of PublicKey given an evp_pkey cdata pointer. rt Nru rv rw rx ) r� ry rz r{ r� r� r rC rD rF r| r} r~ r, r r� r� r. r� r� r� r( r� r0 rJ rH r3 r r� rx rx ry �_evp_pkey_to_public_key� r� z Backend._evp_pkey_to_public_keyc C s2 | j jrt|tjtjtjtjtjf�S t|tj�S r� ) r� � Cryptography_HAS_RSA_OAEP_MDr� rP �SHA1�SHA224�SHA256�SHA384�SHA512r� rx rx ry �_oaep_hash_supported� s �� z Backend._oaep_hash_supportedc C s� t |t�rdS t |t�rt |jt�r| �|jj�S t |t�rCt |jt�rC| �|jj�oB| �|j�oB|j d u pBt |j �dkpB| j j dkS dS )NTr r� F) r� rZ r[ �_mgfrX r� � _algorithmrY r� �_labelr� r� � Cryptography_HAS_RSA_OAEP_LABEL)r� �paddingrx rx ry �rsa_padding_supported� s � � z Backend.rsa_padding_supportedc C s~ |dvrt d��| j�� }| �|| jjk� | j�|| jj�}| j�||| jjd| jj| jj| jj�}| �|dk� t | |�S )N)i r� i i z0Key size must be 1024, 2048, 3072, or 4096 bits.r r� ) r� r� �DSA_newr� r� r rC r~ �DSA_generate_parameters_exr* )r� rI �ctxr� rx rx ry �generate_dsa_parameters s$ � � z Backend.generate_dsa_parametersc C sT | j �|j�}| �|| jjk� | j�|| j j�}| j �|� | � |�}t | ||�S r� ) r� � DSAparams_dup� _dsa_cdatar� r� r rC r~ �DSA_generate_key�_dsa_cdata_to_evp_pkeyr+ )r� � parametersr� rK rx rx ry �generate_dsa_private_key' s z Backend.generate_dsa_private_keyc C � | � |�}| �|�S r� )r� r� )r� rI r� rx rx ry �'generate_dsa_private_key_and_parameters0 � z/Backend.generate_dsa_private_key_and_parametersc C sB | j �||||�}| �|dk� | j �|||�}| �|dk� d S r� )r� � DSA_set0_pqgr� � DSA_set0_key)r� r� rP rQ �g�pub_key�priv_keyr� rx rx ry �_dsa_cdata_set_values4 s z Backend._dsa_cdata_set_valuesc C s� t �|� |jj}| j�� }| �|| jjk� | j� || jj �}| � |j �}| � |j �}| � |j�}| � |jj�}| � |j�}| �||||||� | �|�} t| || �S r� )rS �_check_dsa_private_numbersrV �parameter_numbersr� r� r� r� r rC r~ r@ rP rQ r� �y�xr� r� r+ ) r� r[ r� r� rP rQ r� r� r� rK rx rx ry �load_dsa_private_numbers: s z Backend.load_dsa_private_numbersc C s� t �|j� | j�� }| �|| jjk� | j�|| jj �}| � |jj �}| � |jj �}| � |jj �}| � |j�}| jj}| �||||||� | �|�}t| ||�S r� )rS �_check_dsa_parametersr� r� r� r� r� r rC r~ r@ rP rQ r� r� r� r� r, ) r� r[ r� rP rQ r� r� r� rK rx rx ry �load_dsa_public_numbersM s z Backend.load_dsa_public_numbersc C s� t �|� | j�� }| �|| jjk� | j�|| jj�}| � |j �}| � |j �}| � |j �}| j� ||||�}| �|dk� t| |�S r� )rS r� r� r� r� r� r rC r~ r@ rP rQ r� r� r* )r� r[ r� rP rQ r� r� rx rx ry �load_dsa_parameter_numbers^ s z"Backend.load_dsa_parameter_numbersc C rc r� )rb r� �EVP_PKEY_set1_DSAr� )r� r� rK r� rx rx ry r� l re z Backend._dsa_cdata_to_evp_pkeyc C r� r� r� r� rx rx ry �dsa_hash_supportedr r� zBackend.dsa_hash_supportedc C r� )NTrx )r� rP rQ r� rx rx ry �dsa_parameters_supportedu s z Backend.dsa_parameters_supportedc C s | � |td|j ��S )N� )r� re � block_sizer� rx rx ry �cmac_algorithm_supportedx s �z Backend.cmac_algorithm_supportedc C r� r� r r� rx rx ry �create_cmac_ctx} r� zBackend.create_cmac_ctxc C s� t |tjtjf�r|d urtd��d S t |tjtj t j f�s"t d��t |t j�s,t d��t |t j�r<t |tj�s>td��d S d S )Nz8algorithm must be None when signing via ed25519 or ed448z;Key must be an rsa, dsa, ec, ed25519, or ed448 private key.z.Algorithm must be a registered hash algorithm.z2MD5 hash algorithm is only supported with RSA keys)r� rU �Ed25519PrivateKeyrV �Ed448PrivateKeyr� rW � RSAPrivateKeyrS � DSAPrivateKeyrT �EllipticCurvePrivateKey� TypeErrorrP � HashAlgorithm�MD5�r� � private_keyr� rx rx ry � _x509_check_signature_params� s0 ����� ���z$Backend._x509_check_signature_paramsc s� t |tj�s td��� �||� � �||�}� j�� }� �|� j j k� � j � |� jj �}� j� |tjjj�}� �|dk� � j�|t� |j��}� �|dk� |�� }� j�||j�}� �|dk� � j�� }� �|� j j k� � j � |� fdd��}� j|j� j|� jjdd� � j� ||�}� �|dk� |j D ]!\} } t � | j �} � j� || tj!j"j#j| t$| ��}� �|dk� q�� j�%||j|�}|dkrӈ �&� } t'd| ��t(� |�S ) N�Builder type mismatch.r� c s � j �| � j�� j jd��S )N�X509_EXTENSION_free)r� �sk_X509_EXTENSION_pop_freer� � addressof� _original_lib)r� r� rx ry r� � s ��z)Backend.create_x509_csr.<locals>.<lambda>F�� extensionsr� �x509_obj�add_funcrC r �Signing failed))r� r � CertificateSigningRequestBuilderr� r� �_evp_md_x509_null_if_eddsar� � X509_REQ_newr� r� r rC � X509_REQ_free�X509_REQ_set_version�Version�v1�value�X509_REQ_set_subject_namer; � _subject_name� public_key�X509_REQ_set_pubkey� _evp_pkey�sk_X509_EXTENSION_new_null�_create_x509_extensions� _extensionsr �sk_X509_EXTENSION_insert�X509_REQ_add_extensions� _attributesr< � dotted_string�X509_REQ_add1_attr_by_OBJr� � _ASN1Type� UTF8Stringr� � X509_REQ_signr- r� rM ) r� �builderr� r� r� �x509_reqr� r� � sk_extension�attr_oid�attr_val�objr� rx r� ry �create_x509_csr� s\ � � � � zBackend.create_x509_csrc C sv t |tj�s td��| �||� | �||�}| j�� }| j� || jj �}| j� ||j j �}| �|dk� | j�|t| |j��}| �|dk� | j�||jj�}| �|dk� t| |j�}| j�||�}| �|dk� | �| j�|�|j� | �| j�|�|j � | j |j | j || jj dd� | j�!|t| |j"��}| �|dk� | j�#||j|�}|dkr�| �$� }t%d|��t&| |�S �Nr� r� Tr� r r� )'r� r �CertificateBuilderr� r� r� r� �X509_newr� rC � X509_free�X509_set_version�_versionr� r� �X509_set_subject_namer; r� �X509_set_pubkey� _public_keyr� r9 �_serial_number�X509_set_serialNumber�_set_asn1_time�X509_getm_notBefore�_not_valid_before�X509_getm_notAfter�_not_valid_afterr� r� r � X509_add_ext�X509_set_issuer_name� _issuer_name� X509_signr- r� rK ) r� r� r� r� r� � x509_certr� � serial_numberr� rx rx ry �create_x509_certificate� sR �� ��� � z Backend.create_x509_certificatec C s$ t |tjtjf�r | jjS | �|�S r� )r� rU r� rV r� r� r r� r� rx rx ry r� " s � z"Backend._evp_md_x509_null_if_eddsac C sL |j dkr|�d��d�}n|�d��d�}| j�||�}| �|dk� d S )Ni z %Y%m%d%H%M%SZr� z %y%m%d%H%M%SZr� )�year�strftimer� r� �ASN1_TIME_set_stringr� )r� � asn1_time�time�asn1_strr� rx rx ry r� + s zBackend._set_asn1_timec C s> | j �� }| �|| jjk� | j�|| j j�}| �||� |S r� )r� � ASN1_TIME_newr� r� r rC �ASN1_TIME_freer� )r� r r rx rx ry �_create_asn1_time3 s zBackend._create_asn1_timec C sr t |tj�s td��| �||� | �||�}| j�� }| j� || jj �}| j� |d�}| � |dk� | j� |t| |j��}| � |dk� | �|j�}| j�||�}| � |dk� | �|j�}| j�||�}| � |dk� | j|j| j|| jjdd� |jD ] } | j�| j�} | � | | jj k� | j� || �}| � |dk� q}| j� ||j |�}|dkr�| � � } t!d| ��t"| |�S r� )#r� r � CertificateRevocationListBuilderr� r� r� r� � X509_CRL_newr� rC � X509_CRL_free�X509_CRL_set_versionr� �X509_CRL_set_issuer_namer; r r � _last_update�X509_CRL_set1_lastUpdate� _next_update�X509_CRL_set1_nextUpdater� r� r �X509_CRL_add_ext�_revoked_certificates�X509_REVOKED_dup� _x509_revokedr �X509_CRL_add0_revoked� X509_CRL_signr� r- r� rL ) r� r� r� r� r� �x509_crlr� � last_update� next_update� revoked_cert�revokedr� rx rx ry �create_x509_crl: sF � � zBackend.create_x509_crlc C sd t |�D ]+\}}| �||�}| �|| jjk� |r"| j�|| jj�}||||�} | �| dk� qd S r� )� enumerate�_create_x509_extensionr� r� r rC r� r� ) r� r� r� r� r� rC �i� extension�x509_extensionr� rx rx ry r� r s � �z Backend._create_x509_extensionsc C s2 t | |jj�}| j�| jj||jrd|�S d|�S )Nr� r )r< �oidr� r� � X509_EXTENSION_create_by_OBJr� r �critical)r� r' r� r� rx rx ry �_create_raw_x509_extension� s ��z"Backend._create_raw_x509_extensionc C s t |jtj�rt| |jj�}| �||�S t |jtj�r4ttgdd� |jD ��R � }t| |�}| �||�S t |jtj �rHt| tt ��}| �||�S z||j }W n t y^ t d�|j ���w || |j�}| j�|j j�d��}| �|| jjk� | j�||jr�d|�S d|�S )Nc S s g | ] }t tt|j���qS rx )r r r r� )�.0r� rx rx ry � <listcomp>� s ��z2Backend._create_x509_extension.<locals>.<listcomp>zExtension not supported: {}r� r� r )r� r� r �UnrecognizedExtensionr: r, � TLSFeaturer r � PrecertPoisonr r) r� �NotImplementedErrorr� r� � OBJ_txt2nidr� r� r� � NID_undef�X509V3_EXT_i2dr+ )r� r� r' r� �asn1r� � ext_struct�nidrx rx ry r% � sB ��� �� � ��z Backend._create_x509_extensionc C s� t |tj�s td��| j�� }| �|| jjk� | j� || jj �}t | |j �}| j� ||�}| �|dk� | �|j�}| j�||�}| �|dk� | j|j| j|| jjdd� t| d |�S )Nr� r� Tr� )r� r �RevokedCertificateBuilderr� r� �X509_REVOKED_newr� r� r rC �X509_REVOKED_freer9 r� � X509_REVOKED_set_serialNumberr �_revocation_date� X509_REVOKED_set_revocationDater� r� r �X509_REVOKED_add_extrN )r� r� � x509_revokedr r� �rev_daterx rx ry � create_x509_revoked_certificate� s* � � z'Backend.create_x509_revoked_certificatec C s | � | jj| j||�S r� )� _load_keyr� �PEM_read_bio_PrivateKeyr� )r� rh �passwordrx rx ry �load_pem_private_key� s �z Backend.load_pem_private_keyc C s� | � |�}| j�|j| jj| jj| jj�}|| jjkr)| j�|| jj�}| �|�S | � � | j� |j�}| � |dk� | j� |j| jj| jj| jj�}|| jjkre| j�|| jj �}| �|�}t| ||�S | �� d S r� )rj r� �PEM_read_bio_PUBKEYrr r� r rC r` r� r, � BIO_resetr� �PEM_read_bio_RSAPublicKeyrD rG rF �_handle_key_loading_error�r� rh �mem_biorK r� rJ rx rx ry �load_pem_public_key� s$ � � zBackend.load_pem_public_keyc C s^ | � |�}| j�|j| jj| jj| jj�}|| jjkr)| j�|| jj�}t| |�S | � � d S r� ) rj r� �PEM_read_bio_DHparamsrr r� r rC r� r& rJ )r� rh rL r� rx rx ry �load_pem_parameters� s � zBackend.load_pem_parametersc C s: | � |�}| �||�}|r| �|�S | �| jj| j||�S r� )rj �"_evp_pkey_from_der_traditional_keyr� rC r� �d2i_PKCS8PrivateKey_bio)r� rh rE rq r� rx rx ry �load_der_private_key� s �z Backend.load_der_private_keyc C sZ | j �|j| jj�}|| jjkr'| �� | j�|| j j�}|d ur%td��|S | �� d S )N�4Password was given but private key is not encrypted.) r� �d2i_PrivateKey_biorr r� r r, rC r` r� )r� rq rE r� rx rx ry rP s �z*Backend._evp_pkey_from_der_traditional_keyc C s� | � |�}| j�|j| jj�}|| jjkr#| j�|| jj�}| �|�S | � � | j� |j�}| � |dk� | j� |j| jj�}|| jjkrY| j�|| jj �}| �|�}t| ||�S | �� d S r� )rj r� �d2i_PUBKEY_biorr r� r rC r` r� r, rH r� �d2i_RSAPublicKey_biorD rG rF rJ rK rx rx ry �load_der_public_key s � zBackend.load_der_public_keyc C s� | � |�}| j�|j| jj�}|| jjkr#| j�|| jj�}t| |�S | jj rW| � � | j� |j�}| � |dk� | j� |j| jj�}|| jjkrW| j�|| jj�}t| |�S | �� d S r� )rj r� �d2i_DHparams_biorr r� r rC r� r& r� r, rH r� � Cryptography_d2i_DHxparams_biorJ )r� rh rL r� r� rx rx ry �load_der_parameters+ s � zBackend.load_der_parametersc C �b | � |�}| j�|j| jj| jj| jj�}|| jjkr#| �� td��| j�|| jj �}t | |�S )Nz{Unable to load certificate. See https://cryptography.io/en/latest/faq.html#why-can-t-i-import-my-pem-file for more details.) rj r� �PEM_read_bio_X509rr r� r r, r� rC r� rK �r� rh rL r rx rx ry �load_pem_x509_certificate? � � � z!Backend.load_pem_x509_certificatec C �V | � |�}| j�|j| jj�}|| jjkr | �� td��| j�|| jj �}t | |�S )NzUnable to load certificate) rj r� � d2i_X509_biorr r� r r, r� rC r� rK r] rx rx ry �load_der_x509_certificateO � z!Backend.load_der_x509_certificatec C r[ )NzsUnable to load CRL. See https://cryptography.io/en/latest/faq.html#why-can-t-i-import-my-pem-file for more details.) rj r� �PEM_read_bio_X509_CRLrr r� r r, r� rC r rL �r� rh rL r rx rx ry �load_pem_x509_crlY r_ zBackend.load_pem_x509_crlc C r` )NzUnable to load CRL) rj r� �d2i_X509_CRL_biorr r� r r, r� rC r rL re rx rx ry �load_der_x509_crli rc zBackend.load_der_x509_crlc C r[ )NzwUnable to load request. See https://cryptography.io/en/latest/faq.html#why-can-t-i-import-my-pem-file for more details.) rj r� �PEM_read_bio_X509_REQrr r� r r, r� rC r� rM �r� rh rL r� rx rx ry �load_pem_x509_csrs r_ zBackend.load_pem_x509_csrc C r` )NzUnable to load request) rj r� �d2i_X509_REQ_biorr r� r r, r� rC r� rM rj rx rx ry �load_der_x509_csr� rc zBackend.load_der_x509_csrc C s | � |�}| j�d�}|d ur#t�d|� | j�|�}||_t|�|_||j | jj | j� | j j d�|�}|| jj kra|jdkr]| �� |jdkrLtd��|jdksSJ �td�|jd ���| �� | �� | j�|| j j�}|d ur{|jdkr{td ��|d ur�|jd ks�|d u s�J �||�S ) Nz CRYPTOGRAPHY_PASSWORD_DATA *rE � Cryptography_pem_password_cbr ���z3Password was not given but private key is encrypted���zAPasswords longer than {} bytes are not supported by this backend.r� rS )rj r� r� r �_check_bytesliker" rE r� r% rr r r� r� r� �errorr, r� r� r� �maxsizerJ rC r` �called) r� �openssl_read_func� convert_funcrh rE rL �userdata� password_ptrrK rx rx ry rC � sJ �� � �� zBackend._load_keyc s� � � � }|s td��|d �� jj� jj�s2|d �� jj� jj�s2� jjr6|d �� jj � jj �r6td��t � fdd�|D ��rEtd��td��)Nz|Could not deserialize key data. The data may be in an incorrect format or it may be encrypted with an unsupported algorithm.r z Bad decrypt. Incorrect password?c 3 s$ � | ] }|� � jj� jj�V qd S r� )�_lib_reason_matchr� � ERR_LIB_EVP�'EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM)r- rr r� rx ry � <genexpr>� s � �� �z4Backend._handle_key_loading_error.<locals>.<genexpr>z!Unsupported public key algorithm.) r, r� ry r� rz �EVP_R_BAD_DECRYPT�ERR_LIB_PKCS12�!PKCS12_R_PKCS12_CIPHERFINAL_ERROR�Cryptography_HAS_PROVIDERS� ERR_LIB_PROV�PROV_R_BAD_DECRYPT�any)r� r� rx r� ry rJ � s: � ���� � �� ��z!Backend._handle_key_loading_errorc C sp z| � |�}W n ty | jj}Y nw | j�|�}|| jjkr'| �� dS | �|| jjk� | j� |� dS )NFT) �_elliptic_curve_to_nidr r� r4 �EC_GROUP_new_by_curve_namer� r r, r� � EC_GROUP_free)r� �curve� curve_nid�grouprx rx ry �elliptic_curve_supported� s � z Backend.elliptic_curve_supportedc C s t |tj�sdS | �|�S r� )r� rT �ECDSAr� )r� �signature_algorithmr� rx rx ry �,elliptic_curve_signature_algorithm_supported� s z4Backend.elliptic_curve_signature_algorithm_supportedc C sX | � |�r"| �|�}| j�|�}| �|dk� | �|�}t| ||�S td�|j �t j ��)z@ Generate a new private key on the named curve. r� z#Backend object does not support {}.) r� �_ec_key_new_by_curver� �EC_KEY_generate_keyr� �_ec_cdata_to_evp_pkeyr- r r� r� r �UNSUPPORTED_ELLIPTIC_CURVE)r� r� r� r� rK rx rx ry �#generate_elliptic_curve_private_key s �z+Backend.generate_elliptic_curve_private_keyc C sp |j }| �|j�}| j�| �|j�| jj�}| j� ||�}| � |dk� | � ||j |j �}| �|�}t| ||�S r� )rV r� r� r� rC r@ � private_valuer� � BN_clear_free�EC_KEY_set_private_keyr� �)_ec_key_set_public_key_affine_coordinatesr� r� r� r- )r� r[ �publicr� r� r� rK rx rx ry �#load_elliptic_curve_private_numbers s � � z+Backend.load_elliptic_curve_private_numbersc C s4 | � |j�}| �||j|j�}| �|�}t| ||�S r� )r� r� r� r� r� r� r. )r� r[ r� rK rx rx ry �"load_elliptic_curve_public_numbers. s � z*Backend.load_elliptic_curve_public_numbersc C s� | � |�}| j�|�}| �|| jjk� | j�|�}| �|| jjk� | j�|| jj�}| � � � }| j� |||t |�|�}|dkrI| � � t d��W d � n1 sSw Y | j�||�}| �|dk� | �|�}t| ||�S )Nr� z(Invalid public bytes for the given curve)r� r� �EC_KEY_get0_groupr� r� r � EC_POINT_newrC � EC_POINT_free� _tmp_bn_ctx�EC_POINT_oct2pointr� r, r� �EC_KEY_set_public_keyr� r. ) r� r� � point_bytesr� r� �point�bn_ctxr� rK rx rx ry � load_elliptic_curve_public_bytes7 s& �� � z(Backend.load_elliptic_curve_public_bytesc C sX | � |�}| �|�\}}| j�|�}| �|| jjk� | j�|| jj�}| � |�}| j�|| jj �}| � � �9}| j� |||| jj| jj|�} | �| dk� | j� |�} | j� |�} |||| | |�} | �| dk� W d � n1 srw Y | j�||�} | �| dk� | � |�} | j�| | jj �} | j�|| �} | �| dk� | �|�} t| || �S r� )r� � _ec_key_determine_group_get_funcr� r� r� r� r rC r� r@ r� r� � EC_POINT_mul� BN_CTX_getr� r� r� r- )r� r� r� r� �get_funcr� r� r� r� r� �bn_x�bn_y�privaterK rx rx ry �!derive_elliptic_curve_private_keyK s2 � � z)Backend.derive_elliptic_curve_private_keyc C r� r� )r� �_ec_key_new_by_curve_nid)r� r� r� rx rx ry r� n r� z Backend._ec_key_new_by_curvec C s0 | j �|�}| �|| jjk� | j�|| j j�S r� )r� �EC_KEY_new_by_curve_namer� r� r rC r� )r� r� r� rx rx ry r� r s z Backend._ec_key_new_by_curve_nidc C r` )NzUnable to load OCSP request) rj r� �d2i_OCSP_REQUEST_biorr r� r r, r� rC �OCSP_REQUEST_freerA )r� rh rL �requestrx rx ry �load_der_ocsp_requestw rc z Backend.load_der_ocsp_requestc C r` )Nz Unable to load OCSP response) rj r� �d2i_OCSP_RESPONSE_biorr r� r r, r� rC �OCSP_RESPONSE_freerB )r� rh rL �responserx rx ry �load_der_ocsp_response� rc z Backend.load_der_ocsp_responsec C s� | j �� }| �|| jjk� | j�|| j j�}|j\}}}| �|�}| j � ||j |j �}| �|| jjk� | j � ||�}| �|| jjk� | j |j | j|| j jdd� t| |�S )NTr� )r� �OCSP_REQUEST_newr� r� r rC r� �_requestr� �OCSP_cert_to_id�_x509�OCSP_request_add0_idr� r� r �OCSP_REQUEST_add_extrA ) r� r� �ocsp_req�cert�issuerr� r� �certid�onereqrx rx ry �create_ocsp_request� s" � zBackend.create_ocsp_requestc C s� | � ||� | j�� }| �|| jjk� | j�|| jj�}| �|j j �}| j� ||j j j |j jj �}| �|| jjk� | j�|| jj�}|j jd u rMd}nt|j j }|j jd u r^| jj}n| �|j j�}| jj} |j jd urv| �|j j�} | �|j j�} | j�|||j jj||| | �} | �| | jjk� | �||�}|j\} } | jj}| t j j u r�|| jj O }|j d ur�|j D ]}| j�!||j �} | �| dk� q�| j"|j#| j$|| jj%dd� | j�&|| j |j'|| jj|�} | dkr�| �(� }t)d|��|S )Nro r� Tr� zAError while signing. responder_cert must be signed by private_key)*r� r� �OCSP_BASICRESP_newr� r� r rC �OCSP_BASICRESP_freer� � _responser� r� �_certr� �_issuer�OCSP_CERTID_free�_revocation_reasonr �_revocation_timer r � _this_update�OCSP_basic_add1_status� _cert_statusr� r� � _responder_id� OCSP_NOCERTSrp �OCSPResponderEncoding�HASH�OCSP_RESPID_KEY�_certs�OCSP_basic_add1_certr� r� r �OCSP_BASICRESP_add_ext�OCSP_basic_signr� r- r� )r� r� r� r� �basicr� r� �reason�rev_timer � this_updater� �responder_cert�responder_encoding�flagsr� r� rx rx ry �_create_ocsp_basic_response� s� �� � � �� ���z#Backend._create_ocsp_basic_responsec C sb |t jju r| �|||�}n| jj}| j�|j|�}| � || jjk� | j� || jj �}t | |�S r� ) rp �OCSPResponseStatus� SUCCESSFULr� r� r r� �OCSP_response_creater� r� rC r� rB )r� �response_statusr� r� r� r� � ocsp_resprx rx ry �create_ocsp_response� s �� z Backend.create_ocsp_responsec C s | � |�o t|tj�S r� )r� r� rT �ECDH)r� r� r� rx rx ry �+elliptic_curve_exchange_algorithm_supported s �z3Backend.elliptic_curve_exchange_algorithm_supportedc C rc r� )rb r� �EVP_PKEY_set1_EC_KEYr� )r� r� rK r� rx rx ry r� re z Backend._ec_cdata_to_evp_pkeyc C sN ddd�}|� |j|j�}| j�|�� �}|| jjkr%td�|j�tj ��|S )z/ Get the NID for a curve name. � prime192v1� prime256v1)� secp192r1� secp256r1z${} is not a supported elliptic curve) �getr� r� � OBJ_sn2nidr� r4 r r� r r� )r� r� � curve_aliases� curve_namer� rx rx ry r� s �z Backend._elliptic_curve_to_nidc c sd � | j �� }| �|| jjk� | j�|| j j�}| j �|� z |V W | j �|� d S | j �|� w r� ) r� � BN_CTX_newr� r� r rC � BN_CTX_free� BN_CTX_start� BN_CTX_end)r� r� rx rx ry r� s � zBackend._tmp_bn_ctxc C s� | � || jjk� | j�d�}| � || jjk� | j�|�}| � || jjk� | j�|�}| � || jjk� | j�|�}| � || jjk� ||krR| jj rR| jj }n| jj }|sZJ �||fS )zu Given an EC_KEY determine the group and what function is required to get point coordinates. s characteristic-two-field) r� r� r r� r� r4 r� �EC_GROUP_method_of�EC_METHOD_get_field_type�Cryptography_HAS_EC2M�$EC_POINT_get_affine_coordinates_GF2m�#EC_POINT_get_affine_coordinates_GFp)r� r� � nid_two_fieldr� �methodr8 r� rx rx ry r� + s z(Backend._ec_key_determine_group_get_funcc C st |dk s|dk r t d��| j�| �|�| jj�}| j�| �|�| jj�}| j�|||�}|dkr8| �� t d��|S )zg Sets the public key point in the EC_KEY context to the affine x and y values. r z2Invalid EC key. Both x and y must be non-negative.r� zInvalid EC key.)r� r� rC r@ r� rE �(EC_KEY_set_public_key_affine_coordinatesr, )r� r� r� r� r� rx rx ry r� G s �z1Backend._ec_key_set_public_key_affine_coordinatesc C s t |tj�s td��t |tj�std��t |tj�s td��t |tj�r'd}nt |tj�r;|j}t |�dkr:t d��nt d��|tjj u rf|tjj u rP| j j}n|tjju r[| j j}nt d��| �|||�S |tjju r�| jryt |tj�syt d ��| j �|�} |tjj u r�| | j jkr�| j j}n| | j jkr�| j j}n| | j jkr�| j j}nt d ��| �|||�S |tjju r�|r�t d ��| | j jkr�| j j}n| | j jkr�| j j }n| | j jkr�| j j }nt d ��| � ||�S t d ��|tjj u �r|tjj u r�t �!||�S t d ��t d��)N�/encoding must be an item from the Encoding enumz2format must be an item from the PrivateFormat enumzBEncryption algorithm must be a KeySerializationEncryption instance� i� zBPasswords longer than 1023 bytes are not supported by this backendzUnsupported encryption typez Unsupported encoding for PKCS8zCEncrypted traditional OpenSSL format is not supported in FIPS mode.z+Unsupported key type for TraditionalOpenSSLzDEncryption is not supported for DER encoded traditional OpenSSL keysz+Unsupported encoding for TraditionalOpenSSLz=OpenSSH private key format can only be used with PEM encoding� format is invalid with this key)"r� rQ �Encodingr� � PrivateFormat�KeySerializationEncryption� NoEncryption�BestAvailableEncryptionrE r� r� �PKCS8�PEMr� � PEM_write_bio_PKCS8PrivateKey�DER�i2d_PKCS8PrivateKey_bio�_private_key_bytes_via_bio�TraditionalOpenSSLr� ry rz �PEM_write_bio_RSAPrivateKeyr| �PEM_write_bio_DSAPrivateKeyr �PEM_write_bio_ECPrivateKey�i2d_RSAPrivateKey_bio�i2d_ECPrivateKey_bio�i2d_DSAPrivateKey_bio�_bio_func_output�OpenSSHro �serialize_ssh_private_key) r� �encodingr� �encryption_algorithmr� rK �cdatarE � write_bior� rx rx ry �_private_key_bytes[ s� ��� � �� � �� �� � � �zBackend._private_key_bytesc C s< |s| j j}n| j�d�}| �||||t|�| j j| j j�S )Ns aes-256-cbc)r� r r� �EVP_get_cipherbynamer r� )r� r rK rE r� rx rx ry r � s �z"Backend._private_key_bytes_via_bioc G s0 | � � }||g|�R � }| �|dk� | �|�S r� )rn r� rr )r� r �argsrr r� rx rx ry r � s zBackend._bio_func_outputc C s t |tj�s td��t |tj�std��|tjju r:|tjju r%| jj}n|tjj u r0| jj }nt d��| � ||�S |tjj u rp| j�|�}|| jjkrPt d��|tjju r[| jj}n|tjj u rf| jj}nt d��| � ||�S |tjju r�|tjju r�t�|�S t d��t d��)Nr� z1format must be an item from the PublicFormat enumz8SubjectPublicKeyInfo works only with PEM or DER encodingz+PKCS1 format is supported only for RSA keysz)PKCS1 works only with PEM or DER encodingz1OpenSSH format must be used with OpenSSH encodingr� )r� rQ r� r� � PublicFormat�SubjectPublicKeyInfor r� �PEM_write_bio_PUBKEYr �i2d_PUBKEY_bior� r �PKCS1ry rz �PEM_write_bio_RSAPublicKey�i2d_RSAPublicKey_bior ro �serialize_ssh_public_key)r� r r� r� rK r r r� rx rx ry �_public_key_bytes� s@ � � �zBackend._public_key_bytesc C s� |t jju r td��| j�d�}| j�|| jj|| jj� |t jj u r5|d | jjkr0| jj }n!| jj }n |t jj u rM|d | jjkrH| jj }n | jj}ntd��| �� }|||�}| �|dk� | �|�S )Nz!OpenSSH encoding is not supportedz BIGNUM **r r� r� )rQ r� r r� r� r� r� � DH_get0_pqgr r �PEM_write_bio_DHxparams�PEM_write_bio_DHparamsr � Cryptography_i2d_DHxparams_bio�i2d_DHparams_biorn r� rr )r� r r� r rQ r rr r� rx rx ry �_parameter_bytes s" zBackend._parameter_bytesc C s� |t jk r td�t j���|dvrtd��| j�� }| �|| jjk� | j� || jj �}| j� |||| jj�}| �|dk� t | |�S )Nz$DH key_size must be at least {} bits)� � zDH generator must be 2 or 5r� ) rR �_MIN_MODULUS_SIZEr� r� r� �DH_newr� r� r rC r� �DH_generate_parameters_exr& )r� � generatorrI �dh_param_cdatar� rx rx ry �generate_dh_parameters$ s �� � z Backend.generate_dh_parametersc C rc r� )rb r� �EVP_PKEY_set1_DHr� )r� r� rK r� rx rx ry �_dh_cdata_to_evp_pkey: re z Backend._dh_cdata_to_evp_pkeyc C s< t |j| �}| j�|�}| �|dk� | �|�}t| ||�S r� )r) � _dh_cdatar� �DH_generate_keyr� r2 r' )r� r� � dh_key_cdatar� rK rx rx ry �generate_dh_private_key@ s z Backend.generate_dh_private_keyc C s | � | �||��S r� )r6 r0 )r� r. rI rx rx ry �&generate_dh_private_key_and_parametersJ s �z.Backend.generate_dh_private_key_and_parametersc C s8 |j j}| j�� }| �|| jjk� | j�|| jj�}| � |j �}| � |j �}|j d ur3| � |j �}n| jj}| � |j j �}| � |j�}| j�||||�} | �| dk� | j�|||�} | �| dk� | j�dd�} | j�|| �} | �| dk� | d dkr�|j dkr�| d | jjA dks�td��| �|�} t| || �S )Nr� �int[]r r) z.DH private numbers did not pass safety checks.)rV r� r� r, r� r� r rC r� r@ rP r� rQ r� r� � DH_set0_pqg� DH_set0_keyr� �Cryptography_DH_check�DH_NOT_SUITABLE_GENERATORr� r2 r' ) r� r[ r� r� rP r� rQ r� r� r� �codesrK rx rx ry �load_dh_private_numbersO s0 z Backend.load_dh_private_numbersc C s� | j �� }| �|| jjk� | j�|| j j�}|j}| �|j �}| �|j �}|j d ur2| �|j �}n| jj}| �|j �}| j � ||||�}| �|dk� | j �||| jj�}| �|dk� | �|�} t| || �S r� )r� r, r� r� r rC r� r� r@ rP r� rQ r� r9 r: r2 r( ) r� r[ r� r� rP r� rQ r� r� rK rx rx ry �load_dh_public_numbers} s z Backend.load_dh_public_numbersc C s� | j �� }| �|| jjk� | j�|| j j�}| �|j�}| �|j �}|j d ur/| �|j �}n| jj}| j � ||||�}| �|dk� t | |�S r� ) r� r, r� r� r rC r� r@ rP r� rQ r9 r& )r� r[ r� rP r� rQ r� rx rx ry �load_dh_parameter_numbers� s z!Backend.load_dh_parameter_numbersc C s� | j �� }| �|| jjk� | j�|| j j�}| �|�}| �|�}|d ur+| �|�}n| jj}| j �||||�}| �|dk� | j� dd�}| j � ||�}| �|dk� |d dkS )Nr� r8 r ) r� r, r� r� r rC r� r@ r9 r� r; )r� rP r� rQ r� r� r= rx rx ry �dh_parameters_supported� s z Backend.dh_parameters_supportedc C s | j jdkS r� )r� r� r� rx rx ry � dh_x942_serialization_supported� r� z'Backend.dh_x942_serialization_supportedc sx t � |�}� j�d�}� j�||�}� �|d � jjk� � j�|� fdd��}� �|dk� � j�|d |�d d � S )Nzunsigned char **r c s � j �| d �S r� )r� � OPENSSL_free)�pointerr� rx ry r� � s z)Backend.x509_name_bytes.<locals>.<lambda>) r; r� r� r� � i2d_X509_NAMEr� r rC r$ )r� r� � x509_name�ppr� rx r� ry �x509_name_bytes� s �zBackend.x509_name_bytesc C sh t |�dkr td��| �� }| j�|| jj�}| �|dk� | j�||t |��}| �|dk� t| |�S )N� z%An X25519 public key is 32 bytes longr� ) r� r� rb r� �EVP_PKEY_set_type� NID_X25519r� � EVP_PKEY_set1_tls_encodedpointrH )r� rh rK r� rx rx ry �x25519_load_public_bytes� s � z Backend.x25519_load_public_bytesc C s� t |�dkr td��d}| �d��#}||dd�< ||dd �< | �|�}| j�|j| jj�}W d � n1 s7w Y | � || jjk� | j� || jj �}| � | j� |�| jj k� t| |�S )NrI z&An X25519 private key is 32 bytes longs 0. 0+en" �0 r � )r� r� �_zeroed_bytearrayrj r� rT rr r� r r� rC r` ry rv rG )r� rh � pkcs8_prefix�barr rK rx rx ry �x25519_load_private_bytes� s �� z!Backend.x25519_load_private_bytesc C s� | j �|| jj�}| �|| jjk� | j�|| j j�}| j �|�}| �|dk� | j�d�}| j � ||�}| �|dk� | �|d | jjk� | j�|d | j j �}|S )Nr� � EVP_PKEY **r ) r� �EVP_PKEY_CTX_new_idr� r r� rC �EVP_PKEY_CTX_free�EVP_PKEY_keygen_initr� �EVP_PKEY_keygenr` )r� r8 � evp_pkey_ctxr� � evp_ppkeyrK rx rx ry �_evp_pkey_keygen_gc� s zBackend._evp_pkey_keygen_gcc C � | � | jj�}t| |�S r� )r[ r� rK rG ra rx rx ry �x25519_generate_key � zBackend.x25519_generate_keyc C � | j rdS | jj S r� )r� r� �CRYPTOGRAPHY_IS_LIBRESSLr� rx rx ry �x25519_supported � zBackend.x25519_supportedc C s` t |�dkr td��| j�| jj| jj|t |��}| �|| jjk� | j�|| jj �}t | |�S )N�8 z#An X448 public key is 56 bytes long) r� r� r� �EVP_PKEY_new_raw_public_key�NID_X448r� r r� rC r` rJ �r� rh rK rx rx ry �x448_load_public_bytes s � z Backend.x448_load_public_bytesc C sl t |�dkr td��| j�|�}| j�| jj| jj|t |��}| �|| jjk� | j� || jj �}t | |�S )Nrc z$An X448 private key is 56 bytes long) r� r� r� r" r� � EVP_PKEY_new_raw_private_keyre r r� rC r` rI �r� rh ri rK rx rx ry �x448_load_private_bytes s � z Backend.x448_load_private_bytesc C r\ r� )r[ r� re rI ra rx rx ry �x448_generate_key, r^ zBackend.x448_generate_keyc C r_ r� )r� r� �"CRYPTOGRAPHY_OPENSSL_LESS_THAN_111r� rx rx ry �x448_supported0 rb zBackend.x448_supportedc C r_ r� �r� r� �#CRYPTOGRAPHY_OPENSSL_LESS_THAN_111Br� rx rx ry �ed25519_supported5 rb zBackend.ed25519_supportedc C sn t �d|� t|�tjkrtd��| j�| jj| j j |t|��}| � || j j k� | j � || jj �}t| |�S )Nrh z&An Ed25519 public key is 32 bytes long)r � _check_bytesr� rU �_ED25519_KEY_SIZEr� r� rd � NID_ED25519r� r r� rC r` r0 rf rx rx ry �ed25519_load_public_bytes: s � z!Backend.ed25519_load_public_bytesc C sz t |�tjkr td��t�d|� | j�|�}| j� | jj | jj |t |��}| � || jj k� | j� || jj�}t| |�S )Nz'An Ed25519 private key is 32 bytes longrh )r� rU rr r� r rq r� r" r� rh rs r r� rC r` r/ ri rx rx ry �ed25519_load_private_bytesH s � z"Backend.ed25519_load_private_bytesc C r\ r� )r[ r� rs r/ ra rx rx ry �ed25519_generate_keyV r^ z Backend.ed25519_generate_keyc C r_ r� rn r� rx rx ry �ed448_supportedZ rb zBackend.ed448_supportedc C sl t �d|� t|�tkrtd��| j�| jj| jj |t|��}| � || jj k� | j� || jj �}t | |�S )Nrh z$An Ed448 public key is 57 bytes long)r rq r� r1 r� r� rd � NID_ED448r� r r� rC r` r3 rf rx rx ry �ed448_load_public_bytes_ s � z Backend.ed448_load_public_bytesc C sx t �d|� t|�tkrtd��| j�|�}| j�| jj | jj |t|��}| � || jj k� | j� || jj �}t| |�S )Nrh z%An Ed448 private key is 57 bytes long)r rq r� r1 r� r� r" r� rh rx r r� rC r` r2 ri rx rx ry �ed448_load_private_bytesl s � z Backend.ed448_load_private_bytesc C r\ r� )r[ r� rx r2 ra rx rx ry �ed448_generate_keyz r^ zBackend.ed448_generate_keyc C s� | j �d|�}| j �|�}| j�|t|�|t|�|||tj||� } | dkr9| �� } d| | d } t d� | �| ��| j � |�d d � S )Nr! r� � i zJNot enough memory to derive key. These parameters require {} MB of memory.) r� r� r" r� �EVP_PBE_scryptr� rm � _MEM_LIMITr- � MemoryErrorr� r$ ) r� r( r& r% rW �rrP r� r) r� r� � min_memoryrx rx ry � derive_scrypt~ s. � �zBackend.derive_scryptc C s2 t �|�}| jr|| jvrdS | j�|�| jjkS r� )r �_aead_cipher_namer� � _fips_aeadr� r r� r )r� r� � cipher_namerx rx ry �aead_cipher_supported� s z Backend.aead_cipher_supportedc c s2 � t |�}z |V W | �||� dS | �||� w )z� This method creates a bytearray, which we copy data into (hopefully also from a mutable buffer that can be dynamically erased!), and then zero when we're done. N)� bytearray� _zero_data)r� r% rR rx rx ry rP � s � zBackend._zeroed_bytearrayc C s t |�D ]}d||< qd S r� )�range)r� rh r% r& rx rx ry r� � s �zBackend._zero_datac c s~ � |du r | j jV dS t|�}| j �d|d �}| j �|||� z|V W | �| j �d|�|� dS | �| j �d|�|� w )a� This method takes bytes, which can be a bytestring or a mutable buffer like a bytearray, and yields a null-terminated version of that data. This is required because PKCS12_parse doesn't take a length with its password char * and ffi.from_buffer doesn't provide null termination. So, to support zeroing the data via bytearray we need to build this ridiculous construct that copies the memory, but zeroes it after use. Nr� r� z uint8_t *)r� r r� r� �memmover� �cast)r� rh �data_lenr� rx rx ry �_zeroed_null_terminated_buf� s � 2z#Backend._zeroed_null_terminated_bufc C s� |d ur t �d|� | �|�}| j�|j| jj�}|| jjkr'| �� t d��| j� || jj �}| j� d�}| j� d�}| j� d�}| � |��}| j�|||||�} W d � n1 s\w Y | dkrm| �� t d��d } d } g } |d | jjkr�| j� |d | jj�} | �| �} |d | jjkr�| j� |d | jj�}t| |�} |d | jjkr�| j� |d | jj�}| j�|d �}| jjr�t|�}ntt|��}|D ]#}| j�||�}| �|| jjk� | j� || jj�}| �t| |�� q�| | | fS )NrE z!Could not deserialize PKCS12 datarT zX509 **z Cryptography_STACK_OF_X509 **r z Invalid password or PKCS12 data)r rq rj r� �d2i_PKCS12_biorr r� r r, r� rC � PKCS12_freer� r� � PKCS12_parser` r� r� rK � sk_X509_free� sk_X509_num�#CRYPTOGRAPHY_OPENSSL_300_OR_GREATERr� �reversed� sk_X509_valuer� r� )r� rh rE rr �p12� evp_pkey_ptr�x509_ptr� sk_x509_ptr� password_bufr� r� r� �additional_certificatesrK r �sk_x509r= �indicesr& rx rx ry �%load_key_and_certificates_from_pkcs12� sP � � z-Backend.load_key_and_certificates_from_pkcs12c C s� d }|d ur t �d|� t|tj�rd}d}d} d} nt|tj�r1| jj}| jj}d} d} |j}nt d��|d u s?t |�dkrD| j j } n"| j� � } | j �| | jj�} |D ]} | j�| | j�} t�| dk� qT| �|��:}| �|��%}| j�|||r||jn| j j |r�|jn| j j | ||| | d� }W d � n1 s�w Y W d � n1 s�w Y | �|| j j k� | j �|| jj�}| �� }| j�||�} | �| dk� | �|�S )Nr� ro r i N r� z Unsupported key encryption type)r rq r� rQ r r r� �&NID_pbe_WithSHA1And3_Key_TripleDES_CBCrE r� r� r� r �sk_X509_new_nullrC r� � sk_X509_pushr� �backendr� r� � PKCS12_creater� r� rn �i2d_PKCS12_biorr )r� r� r� r� �casr rE �nid_cert�nid_key� pkcs12_iter�mac_iterr� �car� r� �name_bufr� rr rx rx ry �(serialize_key_and_certificates_to_pkcs12 s^ � � �� � z0Backend.serialize_key_and_certificates_to_pkcs12c C s | j rdS | jjdkS )NFr� )r� r� �Cryptography_HAS_POLY1305r� rx rx ry �poly1305_supported? s zBackend.poly1305_supportedc C s* t �d|� t|�tkrtd��t| |�S )Nr� z A poly1305 key is 32 bytes long)r rq r� rC r� rD )r� r� rx rx ry �create_poly1305_ctxD s zBackend.create_poly1305_ctxc C sn t �d|� | �|�}| j�|j| jj| jj| jj�}|| jjkr)| �� t d��| j� || jj �}| � |�S �Nrh zUnable to parse PKCS7 data) r rq rj r� �PEM_read_bio_PKCS7rr r� r r, r� rC � PKCS7_free�_load_pkcs7_certificates�r� rh rr �p7rx rx ry �load_pem_pkcs7_certificatesK s � z#Backend.load_pem_pkcs7_certificatesc C sb t �d|� | �|�}| j�|j| jj�}|| jjkr#| �� t d��| j� || jj �}| � |�S r� ) r rq rj r� � d2i_PKCS7_biorr r� r r, r� rC r� r� r� rx rx ry �load_der_pkcs7_certificatesX s z#Backend.load_der_pkcs7_certificatesc C s� | j �|j�}| �|| j jk� || j jkr td�|�tj ��g }|j j | j j kr+|S |j j j}| j �|�}t|�D ]0}| j �||�}| �|| j j k� | j �|�}| �|dk� | j �|| j j�}|�t| |�� q:|S )NzNOnly basic signed structures are currently supported. NID for this data was {}r� )r� � OBJ_obj2nidr� r� r4 �NID_pkcs7_signedr r� r �UNSUPPORTED_SERIALIZATIONrR �signr� r r� r� r� r� � X509_up_refrC r� r� rK ) r� r� r8 �certsr� r= r& r r� rx rx ry r� c s* � z Backend._load_pkcs7_certificatesc C st | � |j�}| jj}d}t|j�dkr| jj}n#| j�� }| j� || jj �}|jD ]}| j� ||j �} | � | dk� q)tjj|v rM|| jjO }|| jjO }| j�| jj| jj|| jj|�} | � | | jjk� | j� | | jj�} d} tjj|v r~| | jjO } n tjj|v r�| | jjO } tjj|v r�| | jjO } |jD ] \} } }| �|�}| j� | | j | j || �}| � || jjk� q�|D ]}|tjj u r�|| jj O }q�|tjj u r�|| jj!O }q�| �"� }|t#j$j%u r�| j�&|| |j'|�} nB|t#j$j(u �r| j�)| |j'|�} | � | dk� | j�*|| |j'|�} n |t#j$j+u �sJ �| j�)| |j'|�} | � | dk� | j�,|| �} | � | dk� | �-|�S )Nr r� ).rj �_datar� � PKCS7_PARTIALr� �_additional_certsr� r r� rC r� r� r� r� rn � PKCS7Options�DetachedSignature�PKCS7_DETACHED� PKCS7_signr� �NoCapabilities�PKCS7_NOSMIMECAP� NoAttributes� PKCS7_NOATTR�NoCerts� PKCS7_NOCERTS�_signersr� �PKCS7_sign_add_signerr� �Text� PKCS7_TEXT�Binary� PKCS7_BINARYrn rQ r� �SMIME�SMIME_write_PKCS7rr r � PKCS7_final�PEM_write_bio_PKCS7_streamr � i2d_PKCS7_biorr )r� r� r �optionsrr � init_flags� final_flagsr� r� r� r� � signer_flags� certificater� �hash_algorithm�md� p7signerinfo�option�bio_outrx rx ry � pkcs7_sign st � � � � � zBackend.pkcs7_signr� )�ru rv rw �__doc__r� r� r\ rd r� rP r� r� r� r� r� � SHA512_224� SHA512_256�SHA3_224�SHA3_256�SHA3_384�SHA3_512�SHAKE128�SHAKE256r� �_fips_rsa_min_key_size� _fips_rsa_min_public_exponent�_fips_dsa_min_modulus�_fips_dh_min_key_size�_fips_dh_min_modulusr� r� r� r� � contextlibr r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r* r, r- r9 r@ rL rN r\ r^ rb rG rj rn rr r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r� r� r r# r� r, r% rB rF rM rO rR rP rW rZ r^ rb rf rh rk rm rC rJ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r" r( r0 r2 r6 r7 r> r? r@ rA rB rH rM rS r[ r] ra rg rj rk rm rp rt ru rv rw ry rz r{ r� r� rP r� r� r� r� r� r� r� r� r� r� rx rx rx ry rz � sX � -5 ++ HB 8" 5, # U i0 . " 7 > rz c @ s e Zd Zdd� Zdd� ZdS )r� c C s || _ d S r� )�_fmt)r� �fmtrx rx ry r� � r� zGetCipherByName.__init__c C s& | j j||d��� }|j�|�d��S )N)r� r� r� )r� r� �lowerr� r r� )r� r� r� r� r� rx rx ry �__call__� s zGetCipherByName.__call__N)ru rv rw r� r� rx rx rx ry r� � s r� c C s" d� |jd �}| j�|�d��S )Nz aes-{}-xtsr) r� )r� rI r� r r� )r� r� r� r� rx rx ry r� � s r� )�� collectionsr� r� �typingr� r � cryptographyr r �cryptography.exceptionsr r �cryptography.hazmat._derr r r r r �'cryptography.hazmat.backends.interfacesr r r r r r r r r r r r r �$cryptography.hazmat.backends.opensslr �,cryptography.hazmat.backends.openssl.ciphersr �)cryptography.hazmat.backends.openssl.cmacr �0cryptography.hazmat.backends.openssl.decode_asn1r r r r r! r" r# r$ r% �'cryptography.hazmat.backends.openssl.dhr& r' r( r) �(cryptography.hazmat.backends.openssl.dsar* r+ r, �'cryptography.hazmat.backends.openssl.ecr- r. �,cryptography.hazmat.backends.openssl.ed25519r/ r0 �*cryptography.hazmat.backends.openssl.ed448r1 r2 r3 �0cryptography.hazmat.backends.openssl.encode_asn1r4 r5 r6 r7 r8 r9 r: r; r< �+cryptography.hazmat.backends.openssl.hashesr> �)cryptography.hazmat.backends.openssl.hmacr@ �)cryptography.hazmat.backends.openssl.ocsprA rB �-cryptography.hazmat.backends.openssl.poly1305rC rD �(cryptography.hazmat.backends.openssl.rsarE rF �+cryptography.hazmat.backends.openssl.x25519rG rH �)cryptography.hazmat.backends.openssl.x448rI rJ �)cryptography.hazmat.backends.openssl.x509rK rL rM rN �$cryptography.hazmat.bindings.opensslrO � cryptography.hazmat.primitivesrP rQ �)cryptography.hazmat.primitives.asymmetricrR rS rT rU rV rW �1cryptography.hazmat.primitives.asymmetric.paddingrX rY rZ r[ �1cryptography.hazmat.primitives.ciphers.algorithmsr\ r] r^ r_ r` ra rb rc rd �,cryptography.hazmat.primitives.ciphers.modesre rf rg rh ri rj rk rl �"cryptography.hazmat.primitives.kdfrm �,cryptography.hazmat.primitives.serializationrn ro �cryptography.x509rp � namedtuplerq �objectrt �register_interface�register_interface_ifr� r� �Cryptography_HAS_SCRYPTrz r� r� r� rx rx rx ry �<module> s� < , , ,( �* 0
| ver. 1.4 |
Github
|
.
| PHP 8.2.28 | Generation time: 0.02 |
proxy
|
phpinfo
|
Settings