U 2ܟjz @sdZddlZddlZddlmZddlmZddlmZddl m Z ddl m Z ddl mZe d Zedkrpd Zerdd lmZdd lmZdd lmZddlmZmZmZeZndZddZGdddejZGdddejZ dS)z& Tests for L{twisted.conch.ssh.keys}. N)dedent)keydata) randbytes)FilePath) requireModule)unittest cryptographyz Cannot run without cryptography.)default_backend)hashes)padding)commonkeyssexpyFcCsts d|_|S)Nz$ed25519 not supported on this system)ED25519_SUPPORTEDskip)fr@/tmp/pip-unpacked-wheel-4b529toj/twisted/conch/test/test_keys.pyskipWithoutEd25519$src@seZdZedkreZddZddZddZdd Z d d Z d d Z ddZ ddZ ddZddZddZddZddZddZddZd d!Zd"d#Zd$d%Zd&d'Zd(d)Zd*d+Zd,d-Zd.d/Zd0d1Zd2d3Zd4d5Zd6d7Z d8d9Z!d:d;Z"dd?Z$d@dAZ%dBdCZ&dDdEZ'dFdGZ(dHdIZ)dJdKZ*dLdMZ+dNdOZ,dPdQZ-dRdSZ.e/dTdUZ0dVdWZ1dXdYZ2dZd[Z3d\d]Z4d^d_Z5e/d`daZ6dbdcZ7dddeZ8dfdgZ9e/dhdiZ:djdkZ;dldmZe/drdsZ?dtduZ@dvdwZAdxdyZBdzd{ZCd|d}ZDd~dZEddZFe/ddZGe/ddZHddZIddZJddZKddZLddZMddZNddZOddZPddZQddZRddZSe/ddZTddZUddZVddZWddZXddZYddZZddZ[ddZ\e/ddZ]e/ddZ^dS)KeyTestsNc Cs~tjjtjdtjdtjdtjdtjdtjddj|_tjjtjdtjdtjdtjd tjd d j|_ tjj tj d tj dtj d tj d dj|_ tjj tj d tj dtj d tj d dj|_tjj tjd tjdtjd tjd dj|_tr.tjjtjdtjddj|_d|_d|_|tddd||_t|jd}|tjW5QRXdS)Nnedpqu)rrrrrrygx)rrrrr privateValuecurve)rrrr ak)r!r"sssh-rsa~YWpu@1SOE/xG3U d ,'=QgxjIޯb@r ΣzM1q5 {wjKNCi}RT DJH l[|^nъaYBǾ7 9j.9p?N/) >AµjUWԮBtyfˆkuNɓY.VL44`CǦ6Y% 4^rY .%HAs7ssh-dss(?;TFA E@4,d ٮ[-nQfjrgphz KeyTests.setUp..wb)r Key_fromRSAComponentsrRSAData _keyObjectrsaObjZ_fromDSAComponentsDSADatadsaObjZ_fromECComponentsECDatanistp256ecObjZECDatanistp384ecObj384ZECDatanistp521ecObj521rZ_fromEd25519Components Ed25519Data ed25519Obj rsaSignature dsaSignaturepatchrmktempkeyFileopenwriteprivateRSA_lsh)selfrrrrsetUp.s\       zKeyTests.setUpcCst|jdSN)osunlinkr8r<rrrtearDownmszKeyTests.tearDowncCs|t|jd|t|jd|t|jd|t|jd|t|jdt r|t|j ddS)zU The L{keys.Key.size} method returns the size of key object in bits. ii N) assertEqualr r'r+sizer-r/r0r1rr3rArrr test_sizepszKeyTests.test_sizecCs|tjtjd|tjtjd|tjtjd|tjtjd|tjtj d|tjtj d|tjtj d|tjtj d|tjtj d|tjtjd|tjtjd|tjtjd|tjtjd|tjtjd|tjtjd|tjtjd|tjtjd|tjtjd|tjtjd|tjdd|tjdd|tjd d d S) z_ Test that the _guessStringType method guesses string types correctly. Zpublic_opensshZprivate_opensshZ public_lshZ private_lshagentv3sssh-rsablobsssh-dsss not a keyN)rFr r'Z_guessStringTyperpublicRSA_opensshpublicDSA_opensshpublicECDSA_opensshpublicSKECDSA_opensshpublicEd25519_opensshpublicSKEd25519_opensshprivateRSA_opensshprivateRSA_openssh_newprivateDSA_opensshprivateDSA_openssh_newprivateECDSA_opensshprivateECDSA_openssh_newprivateEd25519_openssh_new publicRSA_lsh publicDSA_lshr;privateDSA_lshprivateRSA_agentv3privateDSA_agentv3rArrrtest__guessStringType|s                   zKeyTests.test__guessStringTypecCs0|tjtjjtj|tjtjjtjdS)z= OpenSSH certificates are not yet supported. N) assertRaisesr BadKeyErrorr' fromStringrZpublicSKEd25519_cert_opensshZpublicSKECDSA_cert_opensshrArrrtest_OpenSSH_cert_not_supportedsz(KeyTests.test_OpenSSH_cert_not_supportedc Cstjtj}tjtj}|||tjtj}tjtj }|||tjtj }tjtj }|||t rtjtj }tjtj}|||dS)zn The L{keys.Key.public} method returns a public key for both public and private keys. N)r r'r`rrQrKrFpublicrSrLrUrMrrWrO) r<Z privateRSAKeyZ publicRSAKeyZ privateDSAKeyZ publicDSAKeyZprivateECDSAKeyZpublicECDSAKeyZprivateEd25519KeyZpublicEd25519Keyrrr test_publicszKeyTests.test_publiccCstjtj}tjtj}tjtj}|| | | || | | || | | t rtjtj }|| | | dS)zg The L{keys.Key.isPublic} method returns True for public keys otherwise False. N) r r'r`rrQrSrU assertTruerbisPublic assertFalserrW)r<rsaKeydsaKeyZecdsaKey ed25519Keyrrr test_isPublicszKeyTests.test_isPubliccCs ||||||||dSr>)_testPublicFromString_testPrivateFromString)r<rbprivatetypedatarrr_testPublicPrivateFromStringsz%KeyTests._testPublicPrivateFromStringcCs||||||dSr>)rk_testSKFromString)r<rbrnrorrr_testPublicSKFromStringsz KeyTests._testPublicSKFromStringcCsTtj|}||||||D]\}}||||q6dSr>) r r'r`rdrerFrnroitems)r<rbrnro publicKeyr"vrrrrks  zKeyTests._testPublicFromStringcCsTtj|}||||||D]\}}||||q2dSr>) r r'r`rfrerFrnrsro)r<rmrnroZ privateKeyr"rurrrrls  zKeyTests._testPrivateFromStringcCstj|}||jdSr>)r r'r`rd_sk)r<rbrtrrrrqs zKeyTests._testSKFromStringcCs|tjtjdtj|tjtjdtj|t j j tj ddt j tj|tj tjdtj|tjdtjtr|tjdtj|tjtjdtjdS)zN Test that keys are correctly generated from OpenSSH strings. ECRSA encrypted passphraseDSAEd25519N)rprrMrUr.rKrQr)rFr r'r`privateRSA_openssh_encryptedrLrSr,rrrNSKECDatanistp256rrP SKEd25519DatarOrWr2rArrrtest_fromOpenSSHsT zKeyTests.test_fromOpenSSHcCsd}|tjtjj|ddS)z. Tests for invalid key types. s -----BEGIN FOO PRIVATE KEY----- MIGkAgEBBDAtAi7I8j73WCX20qUM5hhHwHuFzYWYYILs2Sh8UZ+awNkARZ/Fu2LU LLl5RtOQpbWgBwYFK4EEACKhZANiAATU17sA9P5FRwSknKcFsjjsk0+E3CeXPYX0 Tk/M0HK3PpWQWgrO8JdRHP9eFE9O/23P8BumwFt7F/AvPlCzVd35VfraFT0o4cCW G0RqpQ+np31aKmeJshkcYALEchnU+tQ= -----END EC PRIVATE KEY-----N)r^r r_r'Z_fromString_PRIVATE_OPENSSHr<ZbadKeyrrrtest_fromOpenSSHErrorsJszKeyTests.test_fromOpenSSHErrorscCs(d}|tj|tj|ddS)zP If key strings have trailing whitespace, it should be ignored. -----BEGIN DSA PRIVATE KEY----- MIIBuwIBAAKBgQDylESNuc61jq2yatCzZbenlr9llG+p9LhIpOLUbXhhHcwC6hrh EZIdCKqTO0USLrGoP5uS9UHAUoeN62Z0KXXWTwOWGEQn/syyPzNJtnBorHpNUT9D Qzwl1yUa53NNgEctpo4NoEFOx8PuU6iFLyvgHCjNn2MsuGuzkZm7sI9ZpQIVAJiR 9dPc08KLdpJyRxz8T74b4FQRAoGAGBc4Z5Y6R/HZi7AYM/iNOM8su6hrk8ypkBwR a3Dbhzk97fuV3SF1SDrcQu4zF7c4CtH609N5nfZs2SUjLLGPWln83Ysb8qhh55Em AcHXuROrHS/sDsnqu8FQp86MaudrqMExCOYyVPE7jaBWW+/JWFbKCxmgOCSdViUJ esJpBFsCgYEA7+jtVvSt9yrwsS/YU1QGP5wRAiDYB+T5cK4HytzAqJKRdC5qS4zf C7R0eKcDHHLMYO39aPnCwXjscisnInEhYGNblTDyPyiyNxAOXuC8x7luTmwzMbNJ /ow0IqSj0VF72VJN9uSoPpFd4lLT0zN8v42RWja0M8ohWNf+YNJluPgCFE0PT4Vm SUrCyZXsNh6VXwjs3gKQ -----END DSA PRIVATE KEY----- N)rFr r'r`r<ZprivateDSADatarrr test_fromOpenSSH_with_whitespaceXs   z)KeyTests.test_fromOpenSSH_with_whitespacecCsHtjjtjdd}||dtjjtjddd}|||dS)z Newer versions of OpenSSH generate encrypted keys which have a longer IV than the older versions. These newer keys are also loaded. stestxprzrxrN)r r'r`rZ privateRSA_openssh_encrypted_aesrFrn)r<keykey2rrrtest_fromNewerOpenSSHoszKeyTests.test_fromNewerOpenSSHcCstjtjftjtjftjtjftjtjftj tj ffD]$\}}| t j |t j |q6| t j jtjddt j jtjdddS)z OpenSSH 6.5 introduced a newer "openssh-key-v1" private key format (made the default in OpenSSH 7.8). Loading keys in this format produces identical results to loading the same keys in the old PEM-based format. ryrzN)rrQrRrSrTrUrVprivateECDSA_openssh384ZprivateECDSA_openssh384_newprivateECDSA_openssh521ZprivateECDSA_openssh521_newrFr r'r`Z privateRSA_openssh_encrypted_newr~)r<oldnewrrrtest_fromOpenSSH_v1_format}s"     z#KeyTests.test_fromOpenSSH_v1_formatc Cs,d}|tj|tj|dddS)zp Test that keys are correctly generated from OpenSSH strings with Windows line endings. rrs N)rFr r'r`replacerrrr%test_fromOpenSSH_windows_line_endingss   z.KeyTests.test_fromOpenSSH_windows_line_endingscCs@tddddgggg}|jtjtjjdt|dddS) za C{BadKeyError} exception is raised when public key has an unknown type. s public-keybad-keyp2{})roN) rpackr^r r_r'r`base64 b64encoder<Zsexprrr!test_fromLSHPublicUnsupportedTypes z*KeyTests.test_fromLSHPublicUnsupportedTypecCs0tddddgggg}|tjtjj|dS)zb C{BadKeyError} exception is raised when private key has an unknown type. s private-keyrrrN)rrr^r r_r'r`rrrr"test_fromLSHPrivateUnsupportedTypes z+KeyTests.test_fromLSHPrivateUnsupportedTypecCs|tjtjdtjdS)zR RSA public and private keys can be generated from a LSH strings. rxN)rprrXr;r)rArrrtest_fromLSHRSAs zKeyTests.test_fromLSHRSAcCs|tjtjdtjdS)zH DSA public and private key can be generated from LSHs. r|N)rprrYrZr,rArrrtest_fromLSHDSAs zKeyTests.test_fromLSHDSAcCs<|tjdtj|tjdtj|tjtj j ddS)zO Test that keys are correctly generated from Agent v3 strings. rxr|s$ssh-fooN) rlrr[r)r\r,r^r r_r'r`rArrrtest_fromAgentv3szKeyTests.test_fromAgentv3cCsRt|j}|jddd}|tjj|dd||jtjtjj|dddS)zf L{keys.Key.fromString} applies Normalization Form KC to Unicode passphrases. opensshverschlüsseltrzverschlüsseltunassigned ￿N) r r'r+toStringencoderFr`r^PassphraseNormalizationErrorr<rZkey_datarrr*test_fromStringNormalizesUnicodePassphrases z3KeyTests.test_fromStringNormalizesUnicodePassphrasecCs|tjtjjd|tjtjjdd|jtjtjjtjdd|tjtjjt|jj ddd|tjtjjd|jtjtjjdd d|jtjtjjd d d|jtjtjjd d d|jtjtjjd d dd S)zW keys.Key.fromString should raise BadKeyError when the key is invalid. r%bad_types unencryptedrzrrys-----BEGIN RSA KEY----- wA== s-----BEGIN ENCRYPTED RSA KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: weird type 4Ed/a9OgJWHJsne7yOGWeWMzHYKsxuP9w1v0aYcp+puS75wvhHLiUnNwxz0KDi6n T3YkKLBsoCWS68ApR2J9yeQ6R+EyS+UQDrO9nwqo3DB5BT3Ggt8S1wE7vjNLQD0H g/SJnlqwsECNhh8aAx+Ag0m3ZKOZiRD5mCkcDQsZET7URSmFytDKOjhFn3u6ZFVB sXrfpYc6TJtOQlHd/52JB6aAbjt6afSv955Z7enIi+5yEJ5y7oYQTaE5zrFMP7N5 9LbfJFlKXxEddy/DErRLxEjmC+t4svHesoJKc2jjjyNPiOoGGF3kJXea62vsjdNV gMK5Eged3TBVIk2dv8rtJUvyFeCUtjQ1UJZIebScRR47KrbsIpCmU8I4/uHWm5hW 0mOwvdx1L/mqx/BHqVU9Dw2COhOdLbFxlFI92chkovkmNk4P48ziyVnpm7ME22sE vfCMsyirdqB1mrL4CSM7FXONv+CgfBfeYVkYW8RfJac9U1L/O+JNn7yee414O/rS hRYw4UdWnH6Gg6niklVKWNY0ZwUZC8zgm2iqy8YCYuneS37jC+OEKP+/s6HSKuqk 2bzcl3/TcZXNSM815hnFRpz0anuyAsvwPNRyvxG2/DacJHL1f6luV4B0o6W410yf qXQx01DLo7nuyhJqoH3UGCyyXB+/QUs0mbG2PAEn3f5dVs31JMdbt+PrxURXXjKk 4cexpUcIpqqlfpIRe3RD0sDVbH4OXsGhi2kiTfPZu7mgyFxKopRbn1KwU1qKinfY EU9O4PoTak/tPT+5jFNhaP+HrURoi/pU8EAUNSktl7xAkHYwkN/9Cm7DeBghgf3n 8+tyCGYDsB5utPD0/Xe9yx0Qhc/kMm4xIyQDyA937dk3mUvLC9vulnAP8I+Izim0 fZ182+D1bWwykoD0997mUHG/AUChWR01V1OLwRyPv2wUtiS8VNG76Y2aqKlgqP1P V+IvIEqR4ERvSBVFzXNF8Y6j/sVxo8+aZw+d0L1Ns/R55deErGg3B8i/2EqGd3r+ 0jps9BqFHHWW87n3VyEB3jWCMj8Vi2EJIfa/7pSaViFIQn8LiBLf+zxG5LTOToK5 xkN42fReDcqi3UNfKNGnv4dsplyTR2hyx65lsj4bRKDGLKOuB1y7iB0AGb0LtcAI dcsVlcCeUquDXtqKvRnwfIMg+ZunyjqHBhj3qgRgbXbT6zjaSdNnih569aTg0Vup VykzZ7+n/KVcGLmvX0NesdoI7TKbq4TnEIOynuG5Sf+2GpARO5bjcWKSZeN/Ybgk gccf8Cqf6XWqiwlWd0B7BR3SymeHIaSymC45wmbgdstrbk7Ppa2Tp9AZku8M2Y7c 8mY9b+onK075/ypiwBm4L4GRNTFLnoNQJXx0OSl4FNRWsn6ztbD+jZhu8Seu10Jw SEJVJ+gmTKdRLYORJKyqhDet6g7kAxs4EoJ25WsOnX5nNr00rit+NkMPA7xbJT+7 CfI51GQLw7pUPeO2WNt6yZO/YkzZrqvTj5FEwybkUyBv7L0gkqu9wjfDdUw0fVHE xEm4DxjEoaIp8dW/JOzXQ2EF+WaSOgdYsw3Ac+rnnjnNptCdOEDGP6QBkt+oXj4P -----END RSA PRIVATE KEY----- encrypteds-----BEGIN ENCRYPTED RSA KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: FOO-123-BAR,01234567 4Ed/a9OgJWHJsne7yOGWeWMzHYKsxuP9w1v0aYcp+puS75wvhHLiUnNwxz0KDi6n T3YkKLBsoCWS68ApR2J9yeQ6R+EyS+UQDrO9nwqo3DB5BT3Ggt8S1wE7vjNLQD0H g/SJnlqwsECNhh8aAx+Ag0m3ZKOZiRD5mCkcDQsZET7URSmFytDKOjhFn3u6ZFVB sXrfpYc6TJtOQlHd/52JB6aAbjt6afSv955Z7enIi+5yEJ5y7oYQTaE5zrFMP7N5 9LbfJFlKXxEddy/DErRLxEjmC+t4svHesoJKc2jjjyNPiOoGGF3kJXea62vsjdNV gMK5Eged3TBVIk2dv8rtJUvyFeCUtjQ1UJZIebScRR47KrbsIpCmU8I4/uHWm5hW 0mOwvdx1L/mqx/BHqVU9Dw2COhOdLbFxlFI92chkovkmNk4P48ziyVnpm7ME22sE vfCMsyirdqB1mrL4CSM7FXONv+CgfBfeYVkYW8RfJac9U1L/O+JNn7yee414O/rS hRYw4UdWnH6Gg6niklVKWNY0ZwUZC8zgm2iqy8YCYuneS37jC+OEKP+/s6HSKuqk 2bzcl3/TcZXNSM815hnFRpz0anuyAsvwPNRyvxG2/DacJHL1f6luV4B0o6W410yf qXQx01DLo7nuyhJqoH3UGCyyXB+/QUs0mbG2PAEn3f5dVs31JMdbt+PrxURXXjKk 4cexpUcIpqqlfpIRe3RD0sDVbH4OXsGhi2kiTfPZu7mgyFxKopRbn1KwU1qKinfY EU9O4PoTak/tPT+5jFNhaP+HrURoi/pU8EAUNSktl7xAkHYwkN/9Cm7DeBghgf3n 8+tyCGYDsB5utPD0/Xe9yx0Qhc/kMm4xIyQDyA937dk3mUvLC9vulnAP8I+Izim0 fZ182+D1bWwykoD0997mUHG/AUChWR01V1OLwRyPv2wUtiS8VNG76Y2aqKlgqP1P V+IvIEqR4ERvSBVFzXNF8Y6j/sVxo8+aZw+d0L1Ns/R55deErGg3B8i/2EqGd3r+ 0jps9BqFHHWW87n3VyEB3jWCMj8Vi2EJIfa/7pSaViFIQn8LiBLf+zxG5LTOToK5 xkN42fReDcqi3UNfKNGnv4dsplyTR2hyx65lsj4bRKDGLKOuB1y7iB0AGb0LtcAI dcsVlcCeUquDXtqKvRnwfIMg+ZunyjqHBhj3qgRgbXbT6zjaSdNnih569aTg0Vup VykzZ7+n/KVcGLmvX0NesdoI7TKbq4TnEIOynuG5Sf+2GpARO5bjcWKSZeN/Ybgk gccf8Cqf6XWqiwlWd0B7BR3SymeHIaSymC45wmbgdstrbk7Ppa2Tp9AZku8M2Y7c 8mY9b+onK075/ypiwBm4L4GRNTFLnoNQJXx0OSl4FNRWsn6ztbD+jZhu8Seu10Jw SEJVJ+gmTKdRLYORJKyqhDet6g7kAxs4EoJ25WsOnX5nNr00rit+NkMPA7xbJT+7 CfI51GQLw7pUPeO2WNt6yZO/YkzZrqvTj5FEwybkUyBv7L0gkqu9wjfDdUw0fVHE xEm4DxjEoaIp8dW/JOzXQ2EF+WaSOgdYsw3Ac+rnnjnNptCdOEDGP6QBkt+oXj4P -----END RSA PRIVATE KEY-----s-----BEGIN ENCRYPTED RSA KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: AES-128-CBC,01234 4Ed/a9OgJWHJsne7yOGWeWMzHYKsxuP9w1v0aYcp+puS75wvhHLiUnNwxz0KDi6n T3YkKLBsoCWS68ApR2J9yeQ6R+EyS+UQDrO9nwqo3DB5BT3Ggt8S1wE7vjNLQD0H g/SJnlqwsECNhh8aAx+Ag0m3ZKOZiRD5mCkcDQsZET7URSmFytDKOjhFn3u6ZFVB sXrfpYc6TJtOQlHd/52JB6aAbjt6afSv955Z7enIi+5yEJ5y7oYQTaE5zrFMP7N5 9LbfJFlKXxEddy/DErRLxEjmC+t4svHesoJKc2jjjyNPiOoGGF3kJXea62vsjdNV gMK5Eged3TBVIk2dv8rtJUvyFeCUtjQ1UJZIebScRR47KrbsIpCmU8I4/uHWm5hW 0mOwvdx1L/mqx/BHqVU9Dw2COhOdLbFxlFI92chkovkmNk4P48ziyVnpm7ME22sE vfCMsyirdqB1mrL4CSM7FXONv+CgfBfeYVkYW8RfJac9U1L/O+JNn7yee414O/rS hRYw4UdWnH6Gg6niklVKWNY0ZwUZC8zgm2iqy8YCYuneS37jC+OEKP+/s6HSKuqk 2bzcl3/TcZXNSM815hnFRpz0anuyAsvwPNRyvxG2/DacJHL1f6luV4B0o6W410yf qXQx01DLo7nuyhJqoH3UGCyyXB+/QUs0mbG2PAEn3f5dVs31JMdbt+PrxURXXjKk 4cexpUcIpqqlfpIRe3RD0sDVbH4OXsGhi2kiTfPZu7mgyFxKopRbn1KwU1qKinfY EU9O4PoTak/tPT+5jFNhaP+HrURoi/pU8EAUNSktl7xAkHYwkN/9Cm7DeBghgf3n 8+tyCGYDsB5utPD0/Xe9yx0Qhc/kMm4xIyQDyA937dk3mUvLC9vulnAP8I+Izim0 fZ182+D1bWwykoD0997mUHG/AUChWR01V1OLwRyPv2wUtiS8VNG76Y2aqKlgqP1P V+IvIEqR4ERvSBVFzXNF8Y6j/sVxo8+aZw+d0L1Ns/R55deErGg3B8i/2EqGd3r+ 0jps9BqFHHWW87n3VyEB3jWCMj8Vi2EJIfa/7pSaViFIQn8LiBLf+zxG5LTOToK5 xkN42fReDcqi3UNfKNGnv4dsplyTR2hyx65lsj4bRKDGLKOuB1y7iB0AGb0LtcAI dcsVlcCeUquDXtqKvRnwfIMg+ZunyjqHBhj3qgRgbXbT6zjaSdNnih569aTg0Vup VykzZ7+n/KVcGLmvX0NesdoI7TKbq4TnEIOynuG5Sf+2GpARO5bjcWKSZeN/Ybgk gccf8Cqf6XWqiwlWd0B7BR3SymeHIaSymC45wmbgdstrbk7Ppa2Tp9AZku8M2Y7c 8mY9b+onK075/ypiwBm4L4GRNTFLnoNQJXx0OSl4FNRWsn6ztbD+jZhu8Seu10Jw SEJVJ+gmTKdRLYORJKyqhDet6g7kAxs4EoJ25WsOnX5nNr00rit+NkMPA7xbJT+7 CfI51GQLw7pUPeO2WNt6yZO/YkzZrqvTj5FEwybkUyBv7L0gkqu9wjfDdUw0fVHE xEm4DxjEoaIp8dW/JOzXQ2EF+WaSOgdYsw3Ac+rnnjnNptCdOEDGP6QBkt+oXj4P -----END RSA PRIVATE KEY-----s-----BEGIN ENCRYPTED RSA KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,01234 4Ed/a9OgJWHJsne7yOGWeWMzHYKsxuP9w1v0aYcp+puS75wvhHLiUnNwxz0KDi6n T3YkKLBsoCWS68ApR2J9yeQ6R+EyS+UQDrO9nwqo3DB5BT3Ggt8S1wE7vjNLQD0H g/SJnlqwsECNhh8aAx+Ag0m3ZKOZiRD5mCkcDQsZET7URSmFytDKOjhFn3u6ZFVB sXrfpYc6TJtOQlHd/52JB6aAbjt6afSv955Z7enIi+5yEJ5y7oYQTaE5zrFMP7N5 9LbfJFlKXxEddy/DErRLxEjmC+t4svHesoJKc2jjjyNPiOoGGF3kJXea62vsjdNV gMK5Eged3TBVIk2dv8rtJUvyFeCUtjQ1UJZIebScRR47KrbsIpCmU8I4/uHWm5hW 0mOwvdx1L/mqx/BHqVU9Dw2COhOdLbFxlFI92chkovkmNk4P48ziyVnpm7ME22sE vfCMsyirdqB1mrL4CSM7FXONv+CgfBfeYVkYW8RfJac9U1L/O+JNn7yee414O/rS hRYw4UdWnH6Gg6niklVKWNY0ZwUZC8zgm2iqy8YCYuneS37jC+OEKP+/s6HSKuqk 2bzcl3/TcZXNSM815hnFRpz0anuyAsvwPNRyvxG2/DacJHL1f6luV4B0o6W410yf qXQx01DLo7nuyhJqoH3UGCyyXB+/QUs0mbG2PAEn3f5dVs31JMdbt+PrxURXXjKk 4cexpUcIpqqlfpIRe3RD0sDVbH4OXsGhi2kiTfPZu7mgyFxKopRbn1KwU1qKinfY EU9O4PoTak/tPT+5jFNhaP+HrURoi/pU8EAUNSktl7xAkHYwkN/9Cm7DeBghgf3n 8+tyCGYDsB5utPD0/Xe9yx0Qhc/kMm4xIyQDyA937dk3mUvLC9vulnAP8I+Izim0 fZ182+D1bWwykoD0997mUHG/AUChWR01V1OLwRyPv2wUtiS8VNG76Y2aqKlgqP1P V+IvIEqR4ERvSBVFzXNF8Y6j/sVxo8+aZw+d0L1Ns/R55deErGg3B8i/2EqGd3r+ 0jps9BqFHHWW87n3VyEB3jWCMj8Vi2EJIfa/7pSaViFIQn8LiBLf+zxG5LTOToK5 xkN42fReDcqi3UNfKNGnv4dsplyTR2hyx65lsj4bRKDGLKOuB1y7iB0AGb0LtcAI dcsVlcCeUquDXtqKvRnwfIMg+ZunyjqHBhj3qgRgbXbT6zjaSdNnih569aTg0Vup VykzZ7+n/KVcGLmvX0NesdoI7TKbq4TnEIOynuG5Sf+2GpARO5bjcWKSZeN/Ybgk gccf8Cqf6XWqiwlWd0B7BR3SymeHIaSymC45wmbgdstrbk7Ppa2Tp9AZku8M2Y7c 8mY9b+onK075/ypiwBm4L4GRNTFLnoNQJXx0OSl4FNRWsn6ztbD+jZhu8Seu10Jw SEJVJ+gmTKdRLYORJKyqhDet6g7kAxs4EoJ25WsOnX5nNr00rit+NkMPA7xbJT+7 CfI51GQLw7pUPeO2WNt6yZO/YkzZrqvTj5FEwybkUyBv7L0gkqu9wjfDdUw0fVHE xEm4DxjEoaIp8dW/JOzXQ2EF+WaSOgdYsw3Ac+rnnjnNptCdOEDGP6QBkt+oXj4P -----END RSA PRIVATE KEY-----N) r^r r_r'r`rrXZEncryptedKeyErrorr+rrArrrtest_fromStringErrorssT$$$zKeyTests.test_fromStringErrorscCsV|tj|jtjtj|tj tjj|jd|jtj tjj|jdddS)z5 Test that fromFile works correctly. rZ unencryptedrzN) rFr r'ZfromFiler8r`rr;r^r_rArrr test_fromFiles zKeyTests.test_fromFilecCs.tjjdddj}t|}||j|dS)zJ Test that the PublicKey object is initialized correctly. rrN)r r'r(r*rF)r<objrrrr test_inits zKeyTests.test_initcCst|j}t|j}ttjjdddj}t|j}|||k|||k|||k||tk||dkdS)z? Test that Key objects are compared correctly. rrrN) r r'r+r(r*r-rdrfobjectr<Zrsa1Zrsa2Zrsa3Zdsarrr test_equals   zKeyTests.test_equalcCst|j}t|j}ttjjdddj}t|j}|||k|||k|||k||tk||dkdS)zC Test that Key objects are not-compared correctly. rrrN) r r'r+r(r*r-rfrdrrrrr test_notEquals   zKeyTests.test_notEqualcCstd}|t|jdS)zO The L{keys.Key.data} method raises RuntimeError for bad keys. r%N)r r'r^ RuntimeErrorrorrrrtest_dataErrors zKeyTests.test_dataErrorcCs4|t|jd|t|jddS)z Test that the fingerprint method returns fingerprint in L{FingerprintFormats.MD5-HEX} format by default. /85:25:04:32:58:55:96:9f:57:ee:fb:a8:1a:ea:69:da/63:15:b3:0e:e6:4f:50:de:91:48:3d:01:6b:b3:13:c1N)rFr r'r+ fingerprintr-rArrrtest_fingerprintdefaultsz KeyTests.test_fingerprintdefaultcCs@|t|jtjjd|t|jtjjddS)z fingerprint method generates key fingerprint in L{FingerprintFormats.MD5-HEX} format if explicitly specified. rrN)rFr r'r+rFingerprintFormatsZMD5_HEXr-rArrrtest_fingerprint_md5_hexsz!KeyTests.test_fingerprint_md5_hexcCs@|t|jtjjd|t|jtjjddS)z fingerprint method generates key fingerprint in L{FingerprintFormats.SHA256-BASE64} format if explicitly specified. z,FBTCOoknq0mHy+kpfnY9tDdcAJuWtCpuQMaV3EsvbUI=z,Wz5o2YbKyxOEcJn1au/UaALSVruUzfz0vaLI1xiIGyY=N)rFr r'r+rrZ SHA256_BASE64r-rArrrtest_fingerprintsha256szKeyTests.test_fingerprintsha256c CsB|tj}t|jdW5QRX|d|jjddS)zk A C{BadFingerPrintFormat} error is raised when unsupported formats are requested. z sha256-basez+Unsupported fingerprint format: sha256-baserN) r^r ZBadFingerPrintFormatr'r+rrF exceptionargs)r<emrrrtest_fingerprintBadFormats  z"KeyTests.test_fingerprintBadFormatcCs|t|jd|t|jd|t|jd|t|jd|t|jd|t|jtj dt r|t|j d|t|j d| t td j| t td j| t t|j| t t|jd S) zS Test that the type method returns the correct type for an object. rxssh-rsar|ssh-dssrwr r} ssh-ed25519N)rFr r'r+rnZsshTyper-r/rr.rr3r^rrArrr test_types zKeyTests.test_typecCs|t|jdddg|t|jdg|t|jdg|tjtj dgt r|t|j dg|tjtj dg| ttd j| tt|jd S) z L{keys.Key.supportedSignatureAlgorithms} returns the appropriate public key signature algorithms for each key type. rsa-sha2-512 rsa-sha2-256rrsecdsa-sha2-nistp256s"sk-ecdsa-sha2-nistp256@openssh.comrsk-ssh-ed25519@openssh.comN)rFr r'r+ZsupportedSignatureAlgorithmsr-r/r`rrNrr3rPr^rrArrr!test_supportedSignatureAlgorithms#s>z*KeyTests.test_supportedSignatureAlgorithmscCs"td}|tjtjj|dS)ze A C{BadKeyError} error is raised whey the blob has an unsupported key type. ssh-badN)r NSr^r r_r'r`r<ZbadBlobrrrtest_fromBlobUnsupportedTypeGs z%KeyTests.test_fromBlobUnsupportedTypecCsjtjdtjdd}tdt|dt|d}tj|}|| | || dS)zQ A public RSA key is correctly generated from a public key blob. rrrrN) rr)r rMPr r'r`rdrerFro)r<Z rsaPublicDatarsaBlobrgrrrtest_fromBlobRSAPs   zKeyTests.test_fromBlobRSAcCstjdtjdtjdtjdd}tdt|dt|dt|dt|d}tj|}|| | || dS)zQ A public DSA key is correctly generated from a public key blob. rrrr)rrrrrN) rr,r rrr r'r`rdrerFro)r<Z dsaPublicDatadsaBlobrhrrrtest_fromBlobDSAcs$     zKeyTests.test_fromBlobDSAcCsddlm}tjdtjdtjdd}t|dt|dddtd ||dd ||dd }tj |}| | | || dS) zA Key.fromString generates ECDSA keys from blobs. rutilsrrr rrr N )rrrr.r r int_to_bytesr r'r`rdrerFro)r<rZ ecPublicDataecblobeckeyrrrtest_fromBlobECDSAzs(   zKeyTests.test_fromBlobECDSAcCsddlm}tjdtjdtjdd}ttjdttjdddtd ||dd ||dd }tj |}| | | |j | ||dS) zC It can load public SK-ECDSA key from blob format. rrrrr rrNrr)rrrrr rrr r'r`rdrervrFro)r<rZskEcPublicDataZskEcblobZskEckeyrrrtest_fromBlobSKECDSAs*   zKeyTests.test_fromBlobSKECDSAcCsTdtjdi}tdt|d}tj|}||| || dS)zU A public Ed25519 key is correctly generated from a public key blob. r!rN) rr2r rr r'r`rdrerFro)r<Zed25519PublicData ed25519Blobrirrrtest_fromBlobEd25519s zKeyTests.test_fromBlobEd25519cCs`dtjdi}tdt|d}tj|}||||j | || dS)zX A public SK-Ed25519 key is correctly generated from a public key blob. r!rN) rrr rr r'r`rdrervrFro)r<ZskEd25519PublicDataZ skEd25519BlobZ skEd25519Keyrrrtest_fromBlobSKEd25519s   zKeyTests.test_fromBlobSKEd25519cCs"td}|tjtjj|dS)zh C{BadKeyError} is raised when loading a private blob with an unsupported type. rN)r rr^r r_r'_fromString_PRIVATE_BLOBrrrr#test_fromPrivateBlobUnsupportedTypes z,KeyTests.test_fromPrivateBlobUnsupportedTypecCstdttjdttjdttjdttjdttjdttjd}tj|}|| | tj| | |tj| dS) zS A private RSA key is correctly generated from a private key blob. rrrrrrrN) r rrrr)r r'rrfrerFro privateBlob)r<rrgrrrtest_fromPrivateBlobRSAs* z KeyTests.test_fromPrivateBlobRSAcCstdttjdttjdttjdttjdttjd}tj|}|| | tj| | |tj| dS)zS A private DSA key is correctly generated from a private key blob. rrrrrrN) r rrrr,r r'rrfrerFror)r<rrhrrrtest_fromPrivateBlobDSAs& z KeyTests.test_fromPrivateBlobDSAcCsddlm}ddlm}|jtjdtjd|d}t tjdt tjddd t | t  |j j|jjttjd }tj|}|||tj|||tj|d S) zR A private EC key is correctly generated from a private key blob. r serialization)ecrrrr rNr)cryptography.hazmat.primitivesr)cryptography.hazmat.primitives.asymmetricrZEllipticCurvePublicNumbersrr.Z SECP256R1r r public_keyr public_bytesEncodingX962 PublicFormatUncompressedPointrr r'rrfrerFror)r<rr publicNumbersrrrrrtest_fromPrivateBlobECDSAs0    z"KeyTests.test_fromPrivateBlobECDSAcCs|tdttjdttjdtjd}tj|}||| tj| | |tj| dS)zW A private Ed25519 key is correctly generated from a private key blob. rr!r"N) r rrr2r r'rrfrerFror)r<rrirrrtest_fromPrivateBlobEd25519#s z$KeyTests.test_fromPrivateBlobEd25519cCsJ|t|jtdt|jj j t|jj j dS)zL Return the over-the-wire SSH format of the RSA public key. rN) rFr r'r+rJr rrprivate_numberspublic_numbersrrrArrr test_blobRSA6szKeyTests.test_blobRSAcCsd|jj}|t|jtdt |j j t |j j t |j j t |jdS)zL Return the over-the-wire SSH format of the DSA public key. rN)r-rrrFr r'rJr rrparameter_numbersrrrrr<rrrr test_blobDSAAs     zKeyTests.test_blobDSAc Csddlm}|jjjdd}|t|jt t j dt t j dddt d| |jjj|| |jjj|dS) zK Return the over-the-wire SSH format of the EC public key. rrr rNr)rrr/r Zkey_sizerFr r'rJr rrr.rrrrr)r<rZ byteLengthrrr test_blobECPs,   zKeyTests.test_blobECcCsRddlm}|j|jj|jj}|t |j t dt |dS)zP Return the over-the-wire SSH format of the Ed25519 public key. rrrN)rrr3rrrRawrrFr r'rJr r)r<r publicBytesrrrtest_blobEd25519fs  zKeyTests.test_blobEd25519cCstd}|t|jdS)zx C{RuntimeError} is raised when the blob is requested for a Key which is not wrapping anything. N)r r'r^rrJrrrrtest_blobNoKeyvs zKeyTests.test_blobNoKeycCsx|j}|t|jtdt|j j t|j j t|j t|j t|jt|jdS)zn L{keys.Key.privateBlob} returns the SSH protocol-level format of an RSA private key. rN)r+rrFr r'rr rrrrrrZiqmprr)r<Znumbersrrrtest_privateBlobRSAs"       zKeyTests.test_privateBlobRSAcCsv|jj}|t|jtdt |j j t |j j t |j j t |jt |jjdS)zm L{keys.Key.privateBlob} returns the SSH protocol-level format of a DSA private key. rN)r-rrrFr r'rr rrrrrrrrrrrrtest_privateBlobDSAs     zKeyTests.test_privateBlobDSAc Cs~ddlm}|t|jtt j dtt j dddt|j |j j|jjt|jjdS)zj L{keys.Key.privateBlob} returns the SSH ptotocol-level format of EC private key. rrr rN)rrrFr r'r/rr rrr.rrrrrrrrZ private_value)r<rrrrtest_privateBlobECs   zKeyTests.test_privateBlobECcCs|ddlm}|j|jj|jj}|j|jj|j j| }| t |jtdt|t||dS)zr L{keys.Key.privateBlob} returns the SSH protocol-level format of an Ed25519 private key. rrrN)rrr3rrrrrZ private_bytesZ PrivateFormatZ NoEncryptionrFr r'rr r)r<rrZ privateBytesrrrtest_privateBlobEd25519s$   z KeyTests.test_privateBlobEd25519cCstd}|t|jdS)zV Raises L{RuntimeError} if the underlying key object does not exists. N)r r'r^rrrrrrtest_privateBlobNoKeyObjects z$KeyTests.test_privateBlobNoKeyObjectcCstjtj}||dtj| |jddd ddk|| dtj dd|| jddd tj dS) zO L{keys.Key.toString} serializes an RSA key in OpenSSH format. rryrzsDEK-InforNrcommentcomment) r r'r`rr[rFrstriprQrdfindrbrKr<rrrrtest_toOpenSSHRSAs zKeyTests.test_toOpenSSHRSAcCstjtj}|jddd}|jdddd}|d|d|d|d||tj|||tjj|ddd S) zT L{keys.Key.toString} serializes an RSA key in OpenSSH's v1 format. rv1subtyperrr{#-----BEGIN OPENSSH PRIVATE KEY-----rrzN)r r'r`rrQrrF splitlinesr<rZ new_key_dataZnew_enc_key_datarrrtest_toOpenSSHRSA_v1_formats   z$KeyTests.test_toOpenSSHRSA_v1_formatcCsftjtj}||dtj|| jdddtj || dtj dddS)zN L{keys.Key.toString} serializes a DSA key in OpenSSH format. rrrNr) r r'r`rrZrFrr rSrbrLr rrrtest_toOpenSSHDSAs zKeyTests.test_toOpenSSHDSAcCstjtj}|jddd}|jdddd}|d|d|d|d||tj|||tjj|ddd S) zS L{keys.Key.toString} serializes a DSA key in OpenSSH's v1 format. rrrrrrrrzN)r r'r`rrSrrFrrrrrtest_toOpenSSHDSA_v1_formats   z$KeyTests.test_toOpenSSHDSA_v1_formatcCsNtjtj}||jdddtj||dtjdddS)zQ L{keys.Key.toString} serializes an ECDSA key in OpenSSH format. rrrNr) r r'r`rrUrFrbrrMr rrrtest_toOpenSSHECDSAs zKeyTests.test_toOpenSSHECDSAcCstjtj}|jddd}|jdddd}|d|d|d|d||tj|||tjj|ddd S) zV L{keys.Key.toString} serializes an ECDSA key in OpenSSH's v1 format. rrrrrrrrzN)r r'r`rrUrrFrrrrrtest_toOpenSSHECDSA_v1_format%s   z&KeyTests.test_toOpenSSHECDSA_v1_formatcCstjtj}|d}|jddd}|d|d|d|d||tj|||tjj|dd|||jddddS) zX L{keys.Key.toString} serializes an Ed25519 key in OpenSSH's v1 format. rrrzrrrrN)r r'r`rrWrrFrrrrrtest_toOpenSSHEd255197s"   zKeyTests.test_toOpenSSHEd25519cCs&tjtj}|jt|jddddS)z L{keys.Key.toString} refuses to serialize an Ed25519 key in OpenSSH's old PEM format, as no encoding of Ed25519 is defined for that format. rZPEMrN)r r'r`rrWr^ ValueErrorrr rrr test_toOpenSSHEd25519_PEM_formatKsz)KeyTests.test_toOpenSSHEd25519_PEM_formatcCs>tjtj}||dtj||dtj dS)zK L{keys.Key.toString} serializes an RSA key in LSH format. lshN) r r'r`rrQrFrr;rbrXr rrr test_toLSHRSAUszKeyTests.test_toLSHRSAcCs>tjtj}||dtj||dtj dS)zJ L{keys.Key.toString} serializes a DSA key in LSH format. rN) r r'r`rrSrFrrZrbrYr rrr test_toLSHDSA]szKeyTests.test_toLSHDSAcCs&tjtj}||dtjdS)zP L{keys.Key.toString} serializes an RSA key in Agent v3 format. rIN)r r'r`rrQrFrr[r rrrtest_toAgentv3RSAeszKeyTests.test_toAgentv3RSAcCs&tjtj}||dtjdS)zO L{keys.Key.toString} serializes a DSA key in Agent v3 format. rIN)r r'r`rrSrFrr\r rrrtest_toAgentv3DSAlszKeyTests.test_toAgentv3DSAcCsPt|j}|jddd}|tjj|dd||jtj|jddddS)zd L{keys.Key.toString} applies Normalization Form KC to Unicode passphrases. rrrzrrN) r r'r+rrFr`rr^rrrrr(test_toStringNormalizesUnicodePassphrasess z1KeyTests.test_toStringNormalizesUnicodePassphrasecCs|tjt|jjddS)zm L{keys.Key.toString} raises L{keys.BadKeyError} when passed an invalid format type. rN)r^r r_r'r+rrArrrtest_toStringErrorsszKeyTests.test_toStringErrorsc Csd}tjtj}||}||||||||t |\}}| |d| |j t |d|ttdS)zR Signed data can be verified using RSA (with SHA-1, the default). some-datarrN)r r'r`rrQsignrdrbverifyr getNSrF assertIsNoner*rr PKCS1v15r SHA1r<ror signature signatureTyperrrtest_signAndVerifyRSAs    zKeyTests.test_signAndVerifyRSAc Csd}tjtj}|j|dd}||||||||t |\}}| |d| |j t |d|ttdS)zE Signed data can be verified using RSA with SHA-256. r$rr-rN)r r'r`rrQr%rdrbr&r r'rFr(r*rr r)r SHA256r+rrrtest_signAndVerifyRSASHA256s   z$KeyTests.test_signAndVerifyRSASHA256c Csd}tjtj}|j|dd}||||||||t |\}}| |d| |j t |d|ttdS)zE Signed data can be verified using RSA with SHA-512. r$rr/rN)r r'r`rrQr%rdrbr&r r'rFr(r*rr r)r SHA512r+rrrtest_signAndVerifyRSASHA512s   z$KeyTests.test_signAndVerifyRSASHA512cCsHd}tjtj}||}||||||||dS)z8 Signed data can be verified using DSA. r$N) r r'r`rrSr%rdrbr&r<rorr,rrrtest_signAndVerifyDSAs  zKeyTests.test_signAndVerifyDSAcCsd}tjtj}||}tjtj}||}tjtj}||}|| |||| |||| |||| |||| |||| ||dS)z7 Signed data can be verified using EC. r$N) r r'r`rrUr%rrrdrbr&)r<rorr,Zkey384Z signature384Zkey521Z signature521rrrtest_signAndVerifyECs   zKeyTests.test_signAndVerifyECcCsHd}tjtj}||}||||||||dS)z< Signed data can be verified using Ed25519. r$N) r r'r`rrWr%rdrbr&r4rrrtest_signAndVerifyEd25519s  z"KeyTests.test_signAndVerifyEd25519cCsLtjtj}|jtj|jdddtjtj}|jtj|jddddS)z L{keys.Key.sign} raises L{keys.BadSignatureAlgorithmError} when asked to sign with a public key algorithm that doesn't make sense with the given key. s some datarr/N) r r'r`rrQr^ZBadSignatureAlgorithmErrorr%rUr rrrtest_signWithWrongAlgorithmsz$KeyTests.test_signWithWrongAlgorithmcCsNtjtj}|||jd|||jd|||j ddS)zC A known-good RSA signature verifies successfully. r%aN) r r'r`rrKrdr&r4rfr5r rrrtest_verifyRSAszKeyTests.test_verifyRSAcCsNtjtj}|||jd|||jd|||j ddS)zC A known-good DSA signature verifies successfully. r%r9N) r r'r`rrLrdr&r5rfr4r rrrtest_verifyDSA szKeyTests.test_verifyDSAcCs.tjtj}|||jddddS)z Some commercial SSH servers send DSA keys as 2 20-byte numbers; they are still verified as valid keys. iNr%)r r'r`rrLrdr&r5r rrrtest_verifyDSANoPrefixszKeyTests.test_verifyDSANoPrefixcCs|tt|jddS)zn The repr of a L{keys.Key} contains all of the RSA components for an RSA private key. a\ N)rFreprr r'r+rArrrtest_reprPrivateRSAszKeyTests.test_reprPrivateRSAcCs |tt|jddS)zm The repr of a L{keys.Key} contains all of the RSA components for an RSA public key. a\N)rFr=r r'r+rbrArrrtest_reprPublicRSAmszKeyTests.test_reprPublicRSAcCs.|tt|jtdjftj dS)zl The repr of a L{keys.Key} contains all the OpenSSH format for an ECDSA public key. z N) rFr=r r'r/rbrformatrr.rArrrtest_reprPublicECDSAs zKeyTests.test_reprPublicECDSAcCs*|tt|jtdjftjdS)zm The repr of a L{keys.Key} contains all the OpenSSH format for an ECDSA private key. a N) rFr=r r'r/rr@rr.rArrrtest_reprPrivateECDSAs zKeyTests.test_reprPrivateECDSAcCs$|tt|jtddS)zn The repr of a L{keys.Key} contains all the OpenSSH format for an Ed25519 public key. z N)rFr=r r'r3rbrrArrrtest_reprPublicEd25519s zKeyTests.test_reprPublicEd25519cCs |tt|jtddS)zo The repr of a L{keys.Key} contains all the OpenSSH format for an Ed25519 private key. a N)rFr=r r'r3rrArrrtest_reprPrivateEd25519s z KeyTests.test_reprPrivateEd25519)___name__ __module__ __qualname__rskipCryptographyrr=rBrHr]rarcrjrprrrkrlrqrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr rrrrrrrrrr r!r"r#r.r1r3r5r6r7r8r:r;r<r>r?rArBrCrDrrrrr*s? H1     *  $               P rc@s4eZdZdZedkreZddZddZddZ dS) PersistentRSAKeyTestsz1 Tests for L{keys._getPersistentRSAKey}. NcCsFt|}|d}tj|dd}||d||dS)z L{keys._getPersistentRSAKey} will put the key in C{directory}/C{filename}, with the key length of C{keySize}. mykey.pemrDZkeySizeN) rr7childr _getPersistentRSAKeyrFrGrdexistsr<tempDirr8rrrrtest_providedArgumentss   z,PersistentRSAKeyTests.test_providedArgumentscCs|t|}|d}tj|dd}||d||| }tj|dd}||d|| |dS)zm L{keys._getPersistentRSAKey} will not regenerate the key if the key already exists. rJrDrKrCN) rr7rLr rMrFrGrdrNZ getContent)r<rPr8rZ keyContentrrrtest_noRegenerations  z)PersistentRSAKeyTests.test_noRegenerationcCs>t|}|d}tj|dd}d|_||ddS)z If the key generated by L{keys.getPersistentRSAKey} is set to None the key size should then become 0. rJrDrKNr)rr7rLr rMr*rFrGrOrrrtest_keySizeZeros   z&PersistentRSAKeyTests.test_keySizeZero) rErFrG__doc__rrHrrQrRrSrrrrrIs  rI)!rTrr?textwraprZtwisted.conch.testrZtwisted.pythonrZtwisted.python.filepathrZtwisted.python.reflectrZ twisted.trialrrrHZcryptography.hazmat.backendsr rr rr Ztwisted.conch.sshr r rZed25519_supportedrrZTestCaserrIrrrrsD          B