ruạṛ
a L��f�] � @ s� U d dl Z d dlZd dlZd dlZd dlmZ d dlmZ d dl m Z d dl m Z m Z mZmZ d dlmZmZmZ d dlmZmZmZmZmZmZ zd dlm Z d Z W n0 e y� d Z dZe e e!e!e"e d �d d �Z Y n0 dZ#dZ$dZ%dZ&dZ'dZ(dZ)e�*d�Z+dZ,dZ-dZ.dZ/dZ0dZ1d Z2e�*e-d e. ej3�Z4e5e6e7d d ���Z8ej9d ej:d fej9d ej;d fd!�Z<ej=e ej>ej?ej9 e!ej@ej?ej: ej?ej; f e!f f eAd"< e&e'e(d#�ZBe jCe d$�d%d&�ZDe-d' e.d' fe e e e d(�d)d*�ZEe e!dd+�d,d-�ZFe dd.�d/d0�ZGe ejHe e e!eej@ej;ej:f d1�d2d3�ZIe5ej>e!e5f d.�d4d5�ZJe5ej>e!e5f d.�d6d7�ZKe5ej>e5e5f d.�d8d9�ZLe5ej>e!e5f d.�d:d;�ZMe!e d<�d=d>�ZNG d?d@� d@�ZOG dAdB� dB�ZPG dCdD� dD�ZQG dEdF� dF�ZRG dGdH� dH�ZSe$eP� e%eQ� e#eS� e&eRdIe �T� �e'eRdJe �U� �e(eRdKe �V� �iZWe dL�dMdN�ZXej@e jYejZe j[ej\f Z]d[e ejHe ej^e]dO�dPdQ�Z_e]e ee dR�dSdT�Z`ej@e jCejae jbejcf Zdd\e ej^eddU�dVdW�Zeede d$�dXdY�ZfdS )]� N)� encodebytes)�utils��UnsupportedAlgorithm)�dsa�ec�ed25519�rsa)�Cipher� algorithms�modes)�Encoding�KeySerializationEncryption� NoEncryption� PrivateFormat� PublicFormat�_KeySerializationEncryption)�kdfTF)�password�salt�desired_key_bytes�rounds�ignore_few_rounds�returnc C s t d��d S )NzNeed bcrypt moduler )r r r r r � r ��/sparta/input/_build_configuration/image_build+validate/lib/bmcenv/lib64/python3.9/site-packages/cryptography/hazmat/primitives/serialization/ssh.py� _bcrypt_kdf s r s ssh-ed25519s ssh-rsas ssh-dsss ecdsa-sha2-nistp256s ecdsa-sha2-nistp384s ecdsa-sha2-nistp521s -cert-v01@openssh.coms \A(\S+)[ \t]+(\S+)s openssh-key-v1 s# -----BEGIN OPENSSH PRIVATE KEY-----s! -----END OPENSSH PRIVATE KEY-----s bcrypts none� aes256-ctr� s (.*?)� � � )r s aes256-cbc� _SSH_CIPHERS)� secp256r1� secp384r1� secp521r1)� public_keyr c C s* | j }|jtvr td|j����t|j S )z3Return SSH key_type and curve_name for private key.z'Unsupported curve for ssh private key: )�curve�name�_ECDSA_KEY_TYPE� ValueError)r& r' r r r �_ecdsa_key_typeW s �r+ � )�data�prefix�suffixr c C s d� |t| �|g�S )N� )�join�_base64_encode)r- r. r/ r r r �_ssh_pem_encodea s r3 )r- � block_lenr c C s | rt | �| dkr td��dS )z Require data to be full blocksr z Corrupt data: missing paddingN)�lenr* )r- r4 r r r �_check_block_sizei s r6 �r- r c C s | r t d��dS )z!All data should have been parsed.zCorrupt data: unparsed dataN)r* �r- r r r � _check_emptyo s r9 )� ciphernamer r r r c C sR |s t d��t| \}}}}t|||| |d�}t||d|� �|||d� ��S )z$Generate key + iv and return cipher.zKey is password-protected.TN)r* r" r r ) r: r r r �algo�key_len�mode�iv_len�seedr r r � _init_cipheru s r@ c C s6 t | �dk rtd��tj| dd� dd�| dd� fS )�Uint32� � Invalid dataN�big�� byteorder�r5 r* �int� from_bytesr8 r r r �_get_u32� s rJ c C s6 t | �dk rtd��tj| dd� dd�| dd� fS )�Uint64� rC NrD rE rG r8 r r r �_get_u64� s rM c C s8 t | �\}} |t| �kr td��| d|� | |d� fS )z Bytes with u32 length prefixrC N)rJ r5 r* )r- �nr r r � _get_sshstr� s rO c C s4 t | �\}} |r$|d dkr$td��t�|d�| fS )z Big integer.r � rC rD )rO r* rH rI )r- �valr r r � _get_mpint� s rR �rQ r c C s4 | dk rt d��| sdS | �� d d }t�| |�S )z!Storage format for signed bigint.r znegative mpint not allowedr0 rL )r* � bit_lengthr � int_to_bytes)rQ �nbytesr r r � _to_mpint� s rW c @ s� e Zd ZU dZeje ed< dejeje dd�dd�Z edd�dd �Z e dd�d d �Z ej ed f dd�d d �Ze dd�dd�Ze d�dd�Zdee e d�dd�Zed�dd�ZdS )� _FragListz,Build recursive structure without data copy.�flistN)�initr c C s g | _ |r| j �|� d S �N)rY �extend)�selfrZ r r r �__init__� s z_FragList.__init__rS c C s | j �|� dS )zAdd plain bytesN)rY �append�r] rQ r r r �put_raw� s z_FragList.put_rawc C s | j �|jddd�� dS )zBig-endian uint32rB rD )�lengthrF N)rY r_ �to_bytesr` r r r �put_u32� s z_FragList.put_u32c C sL t |tttf�r,| �t|�� | j�|� n | �|�� � | j� |j� dS )z Bytes prefixed with u32 lengthN) � isinstance�bytes� memoryview� bytearrayrd r5 rY r_ �sizer\ r` r r r � put_sshstr� s z_FragList.put_sshstrc C s | � t|�� dS )z*Big-endian bigint prefixed with u32 lengthN)rj rW r` r r r � put_mpint� s z_FragList.put_mpint)r c C s t tt| j��S )zCurrent number of bytes)�sum�mapr5 rY )r] r r r ri � s z_FragList.sizer )�dstbuf�posr c C s2 | j D ]&}t|�}||| }}||||�< q|S )zWrite into bytearray)rY r5 )r] rn ro �frag�flen�startr r r �render� s z_FragList.renderc C s" t t| �� ��}| �|� |�� S )zReturn as bytes)rg rh ri rs �tobytes)r] �bufr r r rt � s z_FragList.tobytes)N)r )�__name__� __module__� __qualname__�__doc__�typing�Listrf �__annotations__�Optionalr^ ra rH rd �Unionrj rk ri rg rs rt r r r r rX � s �� rX c @ s~ e Zd ZdZed�dd�Zeejej ef d�dd�Z eejej ef d�dd �Z ej e d d �d d �Zej e d d�dd�Zd S )� _SSHFormatRSAzhFormat for RSA keys. Public: mpint e, n Private: mpint n, e, d, iqmp, p, q r8 c C s$ t |�\}}t |�\}}||f|fS )zRSA public fields�rR )r] r- �erN r r r � get_public� s z_SSHFormatRSA.get_publicr7 c C s. | � |�\\}}}t�||�}|�� }||fS )z Make RSA public key from data.)r� r �RSAPublicNumbersr& )r] r- r� rN �public_numbersr& r r r � load_public� s z_SSHFormatRSA.load_publicc C s� t |�\}}t |�\}}t |�\}}t |�\}}t |�\}}t |�\}}||f|kr\td��t�||�} t�||�} t�||�} t�|||| | || �} | �� } | |fS )z Make RSA private key from data.z Corrupt data: rsa field mismatch)rR r* r � rsa_crt_dmp1� rsa_crt_dmq1r� �RSAPrivateNumbers� private_key)r] r- � pubfieldsrN r� �d�iqmp�p�q�dmp1�dmq1r� �private_numbersr� r r r � load_private� s �z_SSHFormatRSA.load_privateN�r& �f_pubr c C s$ |� � }|�|j� |�|j� dS )zWrite RSA public keyN)r� rk r� rN )r] r& r� �pubnr r r � encode_public s z_SSHFormatRSA.encode_public�r� �f_privr c C sZ |� � }|j}|�|j� |�|j� |�|j� |�|j� |�|j� |�|j� dS )zWrite RSA private keyN) r� r� rk rN r� r� r� r� r� )r] r� r� r� r� r r r �encode_private s z _SSHFormatRSA.encode_private)rv rw rx ry rg r� rz �Tupler � RSAPublicKeyr� � RSAPrivateKeyr� rX r� r� r r r r r � s � � � �r c @ s� e Zd ZdZeejejef d�dd�Zeejej ef d�dd�Z eejej ef d�dd�Z ej e d d �d d �Zej e d d �dd�Zejd d�dd�Zd S )� _SSHFormatDSAzhFormat for DSA keys. Public: mpint p, q, g, y Private: mpint p, q, g, y, x r7 c C s@ t |�\}}t |�\}}t |�\}}t |�\}}||||f|fS )zDSA public fieldsr� )r] r- r� r� �g�yr r r r� / s z_SSHFormatDSA.get_publicc C sJ | � |�\\}}}}}t�|||�}t�||�}| �|� |�� }||fS )z Make DSA public key from data.)r� r �DSAParameterNumbers�DSAPublicNumbers� _validater& ) r] r- r� r� r� r� �parameter_numbersr� r& r r r r� 9 s z_SSHFormatDSA.load_publicc C sz | � |�\\}}}}}t|�\}}||||f|kr:td��t�|||�}t�||�} | �| � t�|| �} | �� } | |fS )z Make DSA private key from data.z Corrupt data: dsa field mismatch) r� rR r* r r� r� r� �DSAPrivateNumbersr� ) r] r- r� r� r� r� r� �xr� r� r� r� r r r r� D s z_SSHFormatDSA.load_privateNr� c C sL |� � }|j}| �|� |�|j� |�|j� |�|j� |�|j� dS )zWrite DSA public keyN)r� r� r� rk r� r� r� r� )r] r& r� r� r� r r r r� T s z_SSHFormatDSA.encode_publicr� c C s$ | � |�� |� |�|�� j� dS )zWrite DSA private keyN)r� r& rk r� r� )r] r� r� r r r r� a s z _SSHFormatDSA.encode_private)r� r c C s |j }|j�� dkr td��d S )Ni z#SSH supports only 1024 bit DSA keys)r� r� rT r* )r] r� r� r r r r� h s z_SSHFormatDSA._validate)rv rw rx ry rg rz r� r� r � DSAPublicKeyr� � DSAPrivateKeyr� rX r� r� r� r� r r r r r� & s" � � � � � r� c @ s� e Zd ZdZeejd�dd�Zee j e j ef d�dd�Z ee j ej ef d�dd �Z ee j ejef d�d d �Zej ed d �dd�Zejed d�dd�Zd S )�_SSHFormatECDSAz�Format for ECDSA keys. Public: str curve bytes point Private: str curve bytes point mpint secret ��ssh_curve_namer' c C s || _ || _d S r[ r� )r] r� r' r r r r^ z s z_SSHFormatECDSA.__init__r7 c C sJ t |�\}}t |�\}}|| jkr*td��|d dkr>td��||f|fS )zECDSA public fieldszCurve name mismatchr rB zNeed uncompressed point)rO r� r* �NotImplementedError)r] r- r' �pointr r r r� ~ s z_SSHFormatECDSA.get_publicc C s. | � |�\\}}}tj�| j|�� �}||fS )z Make ECDSA public key from data.)r� r �EllipticCurvePublicKey�from_encoded_pointr' rt )r] r- � curve_namer� r& r r r r� � s �z_SSHFormatECDSA.load_publicc C sH | � |�\\}}}t|�\}}||f|kr2td��t�|| j�}||fS )z!Make ECDSA private key from data.z"Corrupt data: ecdsa field mismatch)r� rR r* r �derive_private_keyr' )r] r- r� r� r� �secretr� r r r r� � s z _SSHFormatECDSA.load_privateNr� c C s* |� tjtj�}|�| j� |�|� dS )zWrite ECDSA public keyN)� public_bytesr �X962r �UncompressedPointrj r� )r] r& r� r� r r r r� � s � z _SSHFormatECDSA.encode_publicr� c C s, |� � }|�� }| �||� |�|j� dS )zWrite ECDSA private keyN)r& r� r� rk � private_value)r] r� r� r& r� r r r r� � s z _SSHFormatECDSA.encode_private)rv rw rx ry rf r � EllipticCurver^ rg rz r� r� r� r� �EllipticCurvePrivateKeyr� rX r� r� r r r r r� n s" � � � � �r� c @ s� e Zd ZdZeejejef d�dd�Zeejej ef d�dd�Z eejej ef d�dd�Z ej e d d �d d �Zej e d d �dd�Zd S )�_SSHFormatEd25519z~Format for Ed25519 keys. Public: bytes point Private: bytes point bytes secret_and_point r7 c C s t |�\}}|f|fS )zEd25519 public fields)rO )r] r- r� r r r r� � s z _SSHFormatEd25519.get_publicc C s( | � |�\\}}tj�|�� �}||fS )z"Make Ed25519 public key from data.)r� r �Ed25519PublicKey�from_public_bytesrt )r] r- r� r& r r r r� � s �z _SSHFormatEd25519.load_publicc C sb | � |�\\}}t|�\}}|dd� }|dd� }||ksF|f|krNtd��tj�|�}||fS )z#Make Ed25519 private key from data.Nr! z$Corrupt data: ed25519 field mismatch)r� rO r* r �Ed25519PrivateKey�from_private_bytes)r] r- r� r� �keypairr� �point2r� r r r r� � s z _SSHFormatEd25519.load_privateNr� c C s |� tjtj�}|�|� dS )zWrite Ed25519 public keyN)r� r �Rawr rj )r] r& r� �raw_public_keyr r r r� � s �z _SSHFormatEd25519.encode_publicr� c C sR |� � }|�tjtjt� �}|�tjtj�}t||g�}| � ||� |� |� dS )zWrite Ed25519 private keyN) r& � private_bytesr r� r r r� r rX r� rj )r] r� r� r& �raw_private_keyr� � f_keypairr r r r� � s �� z _SSHFormatEd25519.encode_private)rv rw rx ry rg rz r� r� r r� r� r� r� rX r� r� r r r r r� � s � � � � �r� s nistp256s nistp384s nistp521��key_typec C s8 t | t�st| ��� } | tv r&t| S td| ����dS )z"Return valid format or throw errorzUnsupported key type: N)re rf rg rt � _KEY_FORMATSr r� r r r �_lookup_kformat s r� )r- r �backendr c C sJ t �d| � |dur t �d|� t�| �}|s6td��|�d�}|�d�}t� t | �||� �} | � t �srtd��t | �t t �d� } t| �\}} t| �\}} t| �\}} t| �\} } | dkr�td��t| �\} } t| �\} } t| �} | �| �\} } t| � t| �\}} t| � ||fttfk�r�|�� }|tv�rBtd|����|tk�rZtd|����t| d }t||� t|�\}}t|�\}}t|� t|||�� |�}t |�� �|��}nd }t||� t|�\}}t|�\}}||k�r�td ��t|�\}}|| k�r td ��| � || �\}}t|�\}}|t dt |�� k�rFtd ��|S )z.Load private key from OpenSSH custom encoding.r- Nr z Not OpenSSH private key formatr zOnly one key supportedzUnsupported cipher: zUnsupported KDF: � rL z Corrupt data: broken checksumz Corrupt data: key type mismatchz Corrupt data: invalid padding) r �_check_byteslike� _check_bytes�_PEM_RC�searchr* rr �end�binascii� a2b_base64rg � startswith� _SK_MAGICr5 rO rJ r� r� r9 �_NONErt r" r �_BCRYPTr6 r@ � decryptor�updater� �_PADDING)r- r r� �m�p1�p2r: �kdfname� kdfoptions�nkeys�pubdata� pub_key_type�kformatr� �edata�ciphername_bytes�blklenr �kbufr �ciph�ck1�ck2r� r� �commentr r r �load_ssh_private_key sl � r� )r� r �encryption_algorithmr c C s t �d|� t| tj�r&t| �� �}n>t| tj�r8t }n,t| t j �rJt }nt| t j�r\t}ntd��t|�}t� }|r�t}t| d }t}t} t|t�r�|jdur�|j} t�d�} |�| � |� | � t ||| | �} nt }}d}d} d} t�d�} d }t� }|�|� |� | �� |� t| | g�}|�|� |� | |� |�|� |�!t"d||�#� | � � t� }|�!t$� |�|� |�|� |�|� |� | � |�|� |�|� |�#� }|�#� }t%t&|| ��}|�'|� || }| du�r | �(� �)|||� ||d� � t*|d|� �S ) z3Serialize private key with OpenSSH custom encoding.r �Unsupported key typer� Nr rL r rB r0 )+r r� re r r� r+ r& r r� �_SSH_RSAr r� �_SSH_DSAr r� � _SSH_ED25519r* r� rX �_DEFAULT_CIPHERr" r� �_DEFAULT_ROUNDSr � _kdf_rounds�os�urandomrj rd r@ r� r� r� ra r� ri r� rg rh rs � encryptor� update_intor3 )r� r r� r� r� � f_kdfoptionsr: r� r� r r r� r� �checkvalr� � f_public_key� f_secrets�f_main�slen�mlenru �ofsr r r �_serialize_ssh_private_key` sp �� r� )r- r� r c C sv t �d| � t�| �}|s"td��|�d� }}|�d�}d}t|tt� d� krjd}|dtt� � }t|�}zt t � |��}W n t t j fy� td��Y n0 t|�\} }| |kr�td��|r�t|�\} }|�|�\} }|�rjt|�\} }t|�\} }t|�\}}t|�\}}t|�\}}t|�\}}t|�\}}t|�\}}t|�\}}t|�\}}t|�\}}t|� | S ) z-Load public key from OpenSSH one-line format.r- zInvalid line formatr � FNTzInvalid key format)r r� �_SSH_PUBKEY_RC�matchr* �group� _CERT_SUFFIXr5 r� rg r� r� � TypeError�ErrorrO r� rM rJ r9 )r- r� r� r� � orig_key_type�key_body� with_certr� �rest�inner_key_type�noncer& �serial�cctype�key_id� principals� valid_after� valid_before� crit_options� extensions�reserved�sig_key� signaturer r r �load_ssh_public_key� sF r c C s� t | tj�rt| �}n>t | tj�r(t}n,t | tj�r:t }nt | t j �rLt }nt d��t|�}t� }|�|� |�| |� t�|�� ��� }d�|d|g�S )z&One-line public key format for OpenSSHr� r0 � )re r r� r+ r r� r� r r� r� r r� r� r* r� rX rj r� r� � b2a_base64rt �stripr1 )r& r� r� r� �pubr r r �serialize_ssh_public_key� s r )F)N)N)gr� r� �rerz �base64r r2 � cryptographyr �cryptography.exceptionsr �)cryptography.hazmat.primitives.asymmetricr r r r �&cryptography.hazmat.primitives.ciphersr r r �,cryptography.hazmat.primitives.serializationr r r r r r �bcryptr r �_bcrypt_supported� ImportErrorrf rH �boolr� r� r� �_ECDSA_NISTP256�_ECDSA_NISTP384�_ECDSA_NISTP521r �compiler r� � _SK_START�_SK_ENDr� r� r� r� �DOTALLr� rg rh �ranger� �AES�CTR�CBCr" �Dictr� �Typer~ r| r) r� r+ r3 r6 r9 r} r@ rJ rM rO rR rW rX r r� r� r� � SECP256R1� SECP384R1� SECP521R1r� r� r� r� r� r� �_SSH_PRIVATE_KEY_TYPES�Anyr� r� r� r� r� �_SSH_PUBLIC_KEY_TYPESr r r r r r �<module> s� �� �� ����� �� � 4FHGD� �� �� N� O�� �� ,
cải xoăn