U P|j@s,dZddlmZddlZddlZddlZddlZddlmZm Z m Z ddl m Z m Z ddlmZddlZddlmZmZddlmZdd lmZdd lmZdd lmZmZdd lmZmZm Z m!Z!m"Z"dd l#m$Z$m%Z%m&Z&ddl'm(Z(m)Z)ddl*m+Z+ddl,m-Z-m.Z.ddl/m0Z0ddl1m2Z2ddl3m4Z4m5Z5ddl6m7Z7zddl8m9Z9m:Z:Wn&e;k rvddl8me?e@dZAddddZBe jCZCe jDZDGdddeEZFGdddeEZGGd d!d!eEZHGd"d#d#eEZIGd$d%d%eZJGd&d'd'eEZKd(d)ZLGd*d+d+ZMd/d-d.ZNdS)0z0 Handling of RSA, DSA, ECDSA, and Ed25519 keys. ) annotationsN) b64encode decodebytes encodebytes)md5sha256)Any) NamedConstantNames)utils)InvalidSignature)default_backend)hashes serialization)dsaeced25519paddingrsa)Cipher algorithmsmodes)load_pem_private_keyload_ssh_public_key)Literal)commonsexpy) int_to_bytes) randbytes) iterbytes nativeString)_mutuallyExclusiveArguments)decode_dss_signatureencode_dss_signature)decode_rfc6979_signatureencode_rfc6979_signature)ecdsa-sha2-nistp256secdsa-sha2-nistp384secdsa-sha2-nistp521snistp256snistp384snistp521)s secp256r1s secp384r1s secp521r1c@seZdZdZdS) BadKeyErrorzj Raised when a key isn't what we expected from it. XXX: we really need to check for bad keys N__name__ __module__ __qualname____doc__r-r-:/tmp/pip-unpacked-wheel-audpp6lv/twisted/conch/ssh/keys.pyr'Dsr'c@seZdZdZdS)BadSignatureAlgorithmErrorzi Raised when a public key signature algorithm name isn't defined for this public key format. Nr(r-r-r-r.r/Lsr/c@seZdZdZdS)EncryptedKeyErrorzb Raised when an encrypted key is presented to fromString/fromFile without a password. Nr(r-r-r-r.r0Ssr0c@seZdZdZdS)BadFingerPrintFormatzS Raises when unsupported fingerprint formats are presented to fingerprint. Nr(r-r-r-r.r1Zsr1c@seZdZdZeZeZdS)FingerprintFormatsa Constants representing the supported formats of key fingerprints. @cvar MD5_HEX: Named constant representing fingerprint format generated using md5[RFC1321] algorithm in hexadecimal encoding. @type MD5_HEX: L{constantly.NamedConstant} @cvar SHA256_BASE64: Named constant representing fingerprint format generated using sha256[RFC4634] algorithm in base64 encoding @type SHA256_BASE64: L{constantly.NamedConstant} N)r)r*r+r,r MD5_HEX SHA256_BASE64r-r-r-r.r2`s r2c@seZdZdZdS)PassphraseNormalizationErrorz Raised when a passphrase contains Unicode characters that cannot be normalized using the available Unicode character database. Nr(r-r-r-r.r5qsr5cCs<t|tr4tdd|Dr"ttd|dS|SdS)a Normalize a passphrase, which may be Unicode. If the passphrase is Unicode, this follows the requirements of U{NIST 800-63B, section 5.1.1.2} for Unicode characters in memorized secrets: it applies the Normalization Process for Stabilized Strings using NFKC normalization. The passphrase is then encoded using UTF-8. @type passphrase: L{bytes} or L{unicode} or L{None} @param passphrase: The passphrase to normalize. @return: The normalized passphrase, if any. @rtype: L{bytes} or L{None} @raises PassphraseNormalizationError: if the passphrase is Unicode and cannot be normalized using the available Unicode character database. css|]}t|dkVqdS)CnN) unicodedatacategory).0cr-r-r. sz'_normalizePassphrase..NFKCzUTF-8N) isinstancestranyr5r7 normalizeencode passphraser-r-r._normalizePassphrasexs  rDc@seZdZdZed`ddZedaddZeddZed d Zed d Z ed dZ eddZ eddZ eddZ eddZeddZeddZedbddZedcddZedddd Zeded!d"Zedfd#d$Zd%d&Zd'd(d)d*d+Zd,d-d.d/Zd0d1Zd2d3Zejfd4d5Zd6d-d7d8Zd9d:Zd;d<Z d=d>Z!d?d@Z"dAd-dBdCZ#dDdEZ$dFdGZ%e&dHdIgdHdJggdgdKdLZ'dhdMdNZ(didOdPZ)djdQdRZ*dkdSdTZ+dUdVZ,dWdXZ-dldYdZdYd[d\d]Z.d^d_Z/dS)mKeyau An object representing a key. A key can be either a public or private key. A public key can verify a signature; a private key can create or verify a signature. To generate a string that can be stored on disk, use the toString method. If you have a private key, but want the string representation of the public key, use Key.public().toString(). Nc Cs4t|d }||||W5QRSQRXdS)a Load a key from a file. @param filename: The path to load key data from. @type type: L{str} or L{None} @param type: A string describing the format the key data is in, or L{None} to attempt detection of the type. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if there is no encryption. @rtype: L{Key} @return: The loaded key. rbN)open fromStringread)clsfilenametyperCfr-r-r.fromFiles z Key.fromFilecCst|tr|d}t|}|dkr.||}|dkrDtd|t|d|d}|dkrptd||jj dkr|rtd||S|||SdS)a Return a Key object corresponding to the string data. type is optionally the type of string, matching a _fromString_* method. Otherwise, the _guessStringType() classmethod will be used to guess a type. If the key is encrypted, passphrase is used as the decryption key. @type data: L{bytes} @param data: The key data. @type type: L{str} or L{None} @param type: A string describing the format the key data is in, or L{None} to attempt detection of the type. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if there is no encryption. @rtype: L{Key} @return: The loaded key. utf-8Nzcannot guess the type of Z _fromString_zno _fromString method for zkey not encrypted) r=r>rArD_guessStringTyper'getattrupper__code__ co_argcount)rJdatarLrCmethodr-r-r.rHs    zKey.fromStringc Cs$t|\}}|dkr@t|d\}}}|t||tS|dkrt|d\}}}} }|tj| tj |||ddtS|t kr|t j t |t|ddS|dkr|jt|ddd d } d | _| S|d krt|\} }|| } |d rd | _| Std|dS)a Return a public key object corresponding to this public key blob. The format of a RSA public key blob is:: string 'ssh-rsa' integer e integer n The format of a DSA public key blob is:: string 'ssh-dss' integer p integer q integer g integer y The format of ECDSA-SHA2-* public key blob is:: string 'ecdsa-sha2-[identifier]' integer x integer y identifier is the standard NIST curve name. The format of an Ed25519 public key blob is:: string 'ssh-ed25519' string a @type blob: L{bytes} @param blob: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type (the first string) is unknown. ssh-rsarPssh-dsspqgyparameter_numbers"sk-ecdsa-sha2-nistp256@openssh.comr&) encodedPointcurveT) ssh-ed25519sk-ssh-ed25519@openssh.comssk-ssh-unknown blob type: N)rgetNSgetMPrRSAPublicNumbers public_keyr rDSAPublicNumbersDSAParameterNumbers _curveTablerEllipticCurvePublicKeyfrom_encoded_point_fromECEncodedPoint_sk_fromEd25519Components startswithr') rJblobkeyTyperestenr\r]r^r` keyObjectar-r-r._fromString_BLOBsF"   zKey._fromString_BLOBcCs$t|\}}|dkrDt|d\}}}}}} }|j||||| dS|dkrxt|d\}} } } } }|j| | || | dS|tkrt|} t|d\}} }|t| jdkrt d ||ft|\}}|j | ||d S|d krt|d\}}}|d d }|j ||dSt d|d S)a6 Return a private key object corresponding to this private key blob. The blob formats are as follows: RSA keys:: string 'ssh-rsa' integer n integer e integer d integer u integer p integer q DSA keys:: string 'ssh-dss' integer p integer q integer g integer y integer x EC keys:: string 'ecdsa-sha2-[identifier]' string identifier string q integer privateValue identifier is the standard NIST curve name. Ed25519 keys:: string 'ssh-ed25519' string a string k || a @type blob: L{bytes} @param blob: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * the key type (the first string) is unknown * the curve name of an ECDSA key does not match the key type rXrzrydr\r]rYr`r^r\r]xrPasciiz.ECDSA curve name %r does not match key type %r)rdre privateValuerfN )krh) rrirj_fromRSAComponents_fromDSAComponentsro _secToNistnamerAr'rrrt)rJrvrwrxrzryrur\r]r^r`rreZ curveNamerr|Zcombinedrr-r-r._fromString_PRIVATE_BLOB$s6.  zKey._fromString_PRIVATE_BLOBcCs4|dr|t|tSt|d}||S)a Return a public key object corresponding to this OpenSSH public key string. The format of an OpenSSH public key string is:: @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the blob type is unknown. s ecdsa-sha2rb)rurr rsplitr})rJrVrvr-r-r._fromString_PUBLIC_OPENSSHos zKey._fromString_PUBLIC_OPENSSHcCs|}td|dd}|ds4td|tdd}t|d\}}}}t d|dd d } | dkrtd t|d dd \} } } |d kr|st d|dkrt j } d} t|ddd}| }ntd||dkr4t|\}}t d|dd d }tj|||||dd}ntd|t| | d kr\tdt| |d|t||||td}|| |}n|d krtd|f| }t d|dd d }t d|d dd }||krtd||f||ddS)a* Return a private key object corresponding to this OpenSSH private key string, in the "openssh-key-v1" format introduced in OpenSSH 6.5. The format of an openssh-key-v1 private key string is:: -----BEGIN OPENSSH PRIVATE KEY----- -----END OPENSSH PRIVATE KEY----- The SSH protocol string is as described in U{PROTOCOL.key}. @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the SSH protocol encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key rbopenssh-key-v1z"unknown OpenSSH private key formatN!LrZrzDonly OpenSSH private key files containing a single key are supportedrPnone0Passphrase must be provided for an encrypted key)s aes128-ctrs aes192-ctr aes256-ctrr~zunknown encryption type bcryptT)Zignore_few_roundszunknown KDF type z bad paddingbackendz*private key specifies KDF %r but no cipherz#check values do not match: %d != %d)strip splitlinesrjoinrur'lenrristructunpackr0rAESintbcryptkdfrrCTRr decryptorupdatefinalizer)rJrVrClinesZkeyListcipherr kdfOptionsrxrz_encPrivKeyListZalgorithmClass blockSizekeySizeivSizesaltroundsZdecKeyr privKeyListZcheck1Zcheck2r-r-r._fromPrivateOpenSSH_v1sh        zKey._fromPrivateOpenSSH_v1cCs|}|ddd}|s$d}|dkr~zt||t}Wn6tk rZtdYntk rttdYnX||Std|dS) a Return a private key object corresponding to this OpenSSH private key string, in the old PEM-based format. The format of a PEM-based OpenSSH private key string is:: -----BEGIN PRIVATE KEY----- [Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,] ------END PRIVATE KEY------ The ASN.1 structure of a RSA key is:: (0, n, e, d, p, q) The ASN.1 structure of a DSA key is:: (0, p, q, g, y, x) The ASN.1 structure of a ECDSA key is:: (ECParameters, OID, NULL) @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the ASN.1 encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key r N)sECsRSAsDSArz&Failed to decode key (Bad Passphrase?)unknown key type )rrrr TypeErrorr0 ValueErrorr')rJrVrCrkindkeyr-r-r._fromPrivateOpenSSH_PEMs% zKey._fromPrivateOpenSSH_PEMcCs8|ddddkr(|||S|||SdS)a Return a private key object corresponding to this OpenSSH private key string. If the key is encrypted, passphrase MUST be provided. Providing a passphrase for an unencrypted key is an error. @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key rrrsOPENSSHN)rrrr)rJrVrCr-r-r._fromString_PRIVATE_OPENSSHs zKey._fromString_PRIVATE_OPENSSHcCstt|dd}|ddks&ti}|dddD] \}}tt|d||<q:|dddkr|j|d|d|d |d d S|ddd kr|j|d |ddSt d|dddS)a Return a public key corresponding to this LSH public key string. The LSH public key string format is:: , ()+))> The names for a RSA (key type 'rsa-pkcs1-sha1') key are: n, e. The names for a DSA (key type 'dsa') key are: y, g, p, q. @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type is unknown rbrr public-keyNdsaygpqr`r^r\r]rsa-pkcs1-sha1nerzryunknown lsh key type ) rparserAssertionErrorrrjNSrrr'rJrVZsexpZkdrr-r-r._fromString_PUBLIC_LSH3szKey._fromString_PUBLIC_LSHcCs6t|}|ddksti}|dddD] \}}tt|d||<q.|dddkrt|dksxtt||j|d|d|d |d |d d S|ddd krt|dkstt||d |d kr|d |d |d <|d <|j|d|d|d|d |d dSt d|dddS)a+ Return a private key corresponding to this LSH private key string. The LSH private key string format is:: , (, )+))> The names for a RSA (key type 'rsa-pkcs1-sha1') key are: n, e, d, p, q. The names for a DSA (key type 'dsa') key are: y, g, p, q, x. @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type is unknown r private-keyrbNrrrrrrxr rsa-pkcs1rrrdrr) rrrrrjrrrrr'rr-r-r._fromString_PRIVATE_LSHSs4 zKey._fromString_PRIVATE_LSHc Cst|\}}|dkrpt|\}}t|\}}t|\}}t|\}}t|\}}|j|||||dS|dkrt|\}}t|\} }t|\} }t|\} }t|\}}t|\}}|j| || ||| dStd|dS)a Return a private key object corresponsing to the Secure Shell Key Agent v3 format. The SSH Key Agent v3 format for a RSA key is:: string 'ssh-rsa' integer e integer d integer n integer u integer p integer q The SSH Key Agent v3 format for a DSA key is:: string 'ssh-dss' integer p integer q integer g integer y integer x @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type (the first string) is unknown rYrrXrzryrr\r]rrN)rrirjrrr') rJrVrwr\r]r^r`rryrrzrr-r-r._fromString_AGENTV3ys"zKey._fromString_AGENTV3cCs|ds|drdS|ds,|dr4td|dsH|drLdS|d rZd S|d rhd S|d rvdS|ds|ds|ds|ds|drt|\}}d}|r|d7}t|\}}q|dkrdSdSdS)z Guess the type of key in data. The types map to _fromString_* methods. @type data: L{bytes} @param data: The key data. sssh- ecdsa-sha2-Zpublic_opensshssk-ecdsa-sha2-nistp256-cert-v01ssk-ssh-ed25519-cert-v01z(certificate based keys are not supportedssk-ecdsa-sha2-nistp256ssk-ssh-ed25519s -----BEGINZprivate_openssh{Z public_lsh(Z private_lshsssh-s ecdsa-s ssh-ed25519s&"sk-ecdsa-sha2-nistp256@openssh.comssk-ssh-ed25519@openssh.comrrbrZZagentv3rvN)rur'rrirj)rJrVZignoredrxcountr-r-r.rQsD    zKey._guessStringTypec Cshtj||d}|dkr$|t}ntdkstdkrtd|dkr,t|}n t|}||S)aBuild a key from Ed25519 components. @param a: The Ed25519 public key, as defined in RFC 8032 section 5.1.5. @type a: L{bytes} @param k: The Ed25519 private key, as defined in RFC 8032 section 5.1.5. @type k: L{bytes} Nz)Ed25519 keys not supported on this system)Ed25519PublicKeyEd25519PrivateKeyr'Zfrom_public_bytesZfrom_private_bytes)rJr|rr{r-r-r.rtks   zKey._fromEd25519ComponentscCs||_d|_dS)z Initialize with a private or public C{cryptography.hazmat.primitives.asymmetric} key. @param keyObject: Low level key. @type keyObject: C{cryptography.hazmat.primitives.asymmetric} key. FN) _keyObjectrs)selfr{r-r-r.__init__sz Key.__init__objectbool)otherreturncCs2t|tr*||ko(||kStSdS)zN Return True if other represents an object with the same key. N)r=rErLrVNotImplemented)rrr-r-r.__eq__s  z Key.__eq__r>)rc Cs|dkr|}|dd}|r@d|ddd}nd|ddd}t|D]4\}}|dkr|d |7}q`|d |d |7}q`|d Sd t||rdpd|fg}t|D]\}}|d|d|dkr|nt |dd}|r|dd}|dd}d} t |D]} | t | dd} q z<%s %s (%s bits)z Public Keyz Private Keyzattr :Ed25519rZZ02xr >)rLrVdecodeisPublicsorteditemsr sizeappendrMPrordrr) rrVroutrvrZbymor:r-r-r.__repr__s@  $    z Key.__repr__cCst|jtjtjtjtj fS)zl Check if this instance is a public key. @return: C{True} if this is a public key. ) r=rr RSAPublicKeyr DSAPublicKeyrrprrrr-r-r.rsz Key.isPubliccCs|r |St|jSdS)z Returns a version of this key containing only the public key data. If this is a public key, this may or may not be the same object as self. @rtype: L{Key} @return: A public key. N)rrErrlrr-r-r.publics z Key.publiccCsf|tjkr"ttt|S|tjkrTtdddt t |DSt d|dS)aO The fingerprint of a public key consists of the output of the message-digest algorithm in the specified format. Supported formats include L{FingerprintFormats.MD5_HEX} and L{FingerprintFormats.SHA256_BASE64} The input to the algorithm is the public key data as specified by [RFC4253]. The output of sha256[RFC4634] algorithm is presented to the user in the form of base64 encoded sha256 hashes. Example: C{US5jTUa0kgX5ZxdqaGF0yGRu8EgKXHNmoT8jHKo1StM=} The output of the MD5[RFC1321](default) algorithm is presented to the user as a sequence of 16 octets printed as hexadecimal with lowercase letters and separated by colons. Example: C{c1:b1:30:29:d7:b8:de:6c:97:77:10:d7:46:41:63:87} @param format: Format for fingerprint generation. Consists hash function and representation format. Default is L{FingerprintFormats.MD5_HEX} @since: 8.2 @return: the user presentation of this L{Key}'s fingerprint, as a string. @rtype: L{str} :cSsg|]}t|qSr-)binasciihexlify)r9rr-r-r. sz#Key.fingerprint..z Unsupported fingerprint format: N) r2r4r rrrvdigestr3rrrr1)rformatr-r-r. fingerprints  zKey.fingerprintz(Literal[('RSA', 'DSA', 'EC', 'Ed25519')]cCstt|jtjtjfrdSt|jtjtjfr0dSt|jtj tj frHdSt|jt j t j fr`dStd|jdS)z Return the type of the object we wrap. Currently this can only be 'RSA', 'DSA', 'EC', or 'Ed25519'. @rtype: L{str} @raises RuntimeError: If the object type is unknown. RSADSArrzunknown type of object: N)r=rrr RSAPrivateKeyrr DSAPrivateKeyrrpEllipticCurvePrivateKeyrrr RuntimeErrorrr-r-r.rLs  zKey.typecCsR|jr|dkrdSdS|dkr>dt|jjjdSdddd |S) a Get the type of the object we wrap as defined in the SSH protocol, defined in RFC 4253, Section 6.6 and RFC 8332, section 4 (this is a public key format name, not a public key algorithm name). Currently this can only be b'ssh-rsa', b'ssh-dss', b'ecdsa-sha2-[identifier]' or b'ssh-ed25519'. identifier is the standard NIST curve name @return: The key type format. @rtype: L{bytes} rrcrgrrrXrYrf)rrr)rsrLrrrerrArr-r-r.sshTypes   z Key.sshTypecCs$|dkrdddgS|gSdS)z Get the public key signature algorithms supported by this key. @return: A list of supported public key signature algorithm names. @rtype: L{list} of L{bytes} r rsa-sha2-512 rsa-sha2-256rXN)rLrrr-r-r.supportedSignatureAlgorithms@s  z Key.supportedSignatureAlgorithmscCs|dkrN||krJ|}|dkr0tS|dkr@tStSndS|dkrbtSttttd||fS)z Return a hash algorithm for this key type given an SSH signature algorithm name, or L{None} if no such hash algorithm is defined for this key type. riNr))rrX)rr)rr)rrY) rLrrrSHA256SHA384SHA512SHA1get)r signatureTyperr-r-r._getHashAlgorithmLs$     zKey._getHashAlgorithmcCs<|jdkrdS|dkr$|jjjS|dkr4dS|jjS)zv Return the size of the object we wrap. @return: The size of the key. @rtype: L{int} Nrrrr)rrLrekey_sizerr-r-r.ris    zKey.sizezdict[str, Any]c Cst|jtjr&|j}|j|jdSt|jtjrj|j}|jj|jj|j |j |j t |j |j dSt|jt jr|j}|j|jj|jj |jj dSt|jt jr|j}|j|jj|jjj|jjj |jjj dSt|jtjr |j}|j|j|dSt|jtjrB|j}|jj|jj|j|dSt|jtjrld|jtjjtjjiSt|jtj r|j!tjjtjj|j"tjjtj#jt$dSt%d |jd S) z_ Return the values of the public key as a dictionary. @rtype: L{dict} rrr)rr`r^r\r]r)rr`rrer|)r|rzUnexpected key type: N)&r=rrrrrzryrZprivate_numbersrr\r]rrrr`rar^rrrrprrrrr public_bytesrEncodingZRaw PublicFormatrrl private_bytes PrivateFormat NoEncryptionr)rZrsa_pub_numbersZrsa_priv_numbersZdsa_pub_numbersZdsa_priv_numbersZec_pub_numbersZec_priv_numbersr-r-r.rVxsz         zKey.datacCs$|}|}|dkr>tdt|dt|dS|dkrtdt|dt|dt|d t|d S|d kr|jjjd d }t|dt|dddtdt |d|t |d |S|dkrtdt|dSt d|dS)a Return the public key blob for this key. The blob is the over-the-wire format for public keys. SECSH-TRANS RFC 4253 Section 6.6. RSA keys:: string 'ssh-rsa' integer e integer n DSA keys:: string 'ssh-dss' integer p integer q integer g integer y EC keys:: string 'ecdsa-sha2-[identifier]' integer x integer y identifier is the standard NIST curve name Ed25519 keys:: string 'ssh-ed25519' string a @rtype: L{bytes} rrXryrzrrYr\r]r^r`rrreNrrrfr|unknown key type: ) rLrVrrrrrer#r rr')rrLrVZ byteLengthr-r-r.rvs@ &      zKey.blobcCs|}|}|dkrt|d|d}tdt|dt|dt|dt|t|dt|dS|dkrtd t|dt|dt|d t|d t|d S|d kr>|j t j j t j j}t|dt|dddt|t|dS|dkrvtdt|dt|d|dStd|dS)a1 Return the private key blob for this key. The blob is the over-the-wire format for private keys: Specification in OpenSSH PROTOCOL.agent RSA keys:: string 'ssh-rsa' integer n integer e integer d integer u integer p integer q DSA keys:: string 'ssh-dss' integer p integer q integer g integer y integer x EC keys:: string 'ecdsa-sha2-[identifier]' integer x integer y integer privateValue identifier is the NIST standard curve name. Ed25519 keys:: string 'ssh-ed25519' string a string k || a rr\r]rXrzryrrrYr^r`rrrer+Nrrrfr|rr-)rLrVrrrrrrrlr$rr%ZX962r&ZUncompressedPointr')rrLrVrZencPubr-r-r. privateBlobsh)                 zKey.privateBlobextracommentrCcCs|dk r*tjdtdd|r&|}n|}t|tr>|d}t|}t|d| d}|dkrrt d|||||dS) a Create a string representation of this key. If the key is a private key and you want the representation of its public key, use C{key.public().toString()}. type maps to a _toString_* method. @param type: The type of string to emit. Currently supported values are C{'OPENSSH'}, C{'LSH'}, and C{'AGENTV3'}. @type type: L{str} @param extra: Any extra data supported by the selected format which is not part of the key itself. For public OpenSSH keys, this is a comment. For private OpenSSH keys, this is a passphrase to encrypt with. (Deprecated since Twisted 20.3.0; use C{comment} or C{passphrase} as appropriate instead.) @type extra: L{bytes} or L{unicode} or L{None} @param subtype: A subtype of the requested C{type} to emit. Only supported for private OpenSSH keys, for which the currently supported subtypes are C{'PEM'} and C{'v1'}. If not given, an appropriate default is used. @type subtype: L{str} or L{None} @param comment: A comment to include with the key. Only supported for OpenSSH keys. Present since Twisted 20.3.0. @type comment: L{bytes} or L{unicode} or L{None} @param passphrase: A passphrase to encrypt the key with. Only supported for private OpenSSH keys. Present since Twisted 20.3.0. @type passphrase: L{bytes} or L{unicode} or L{None} @rtype: L{bytes} NzThe 'extra' argument to twisted.conch.ssh.keys.Key.toString was deprecated in Twisted 20.3.0; use 'comment' or 'passphrase' instead.r) stacklevelrOZ _toString_r-)subtyper0rC) warningswarnDeprecationWarningrr=r>rArDrRrSr')rrLr/r2r0rCrWr-r-r.toStringSs -  z Key.toStringcCsn|dkr6|sd}|jtjjtjjd|St|  dd}|sRd}| d|d|S)a Return a public OpenSSH key string. See _fromString_PUBLIC_OPENSSH for the string format. @type comment: L{bytes} or L{None} @param comment: A comment to include with the key, or L{None} to omit the comment. rr  ) rLrr$rr%ZOpenSSHr&rrrvreplacer)rr0b64Datar-r-r._toPublicOpenSSHs zKey._toPublicOpenSSHcs|rJtj}d}d}|jd}d}|}t|} d} t| td| } nd}d}d}d} td } | | | t|p|d} d }t | |r|d 7}| t |d @f7} q|rt || ||d}t||d |t||||td}|| |}n| }dt|t|t| tdd t|t|}t|dddgfddtd t dDdg}d|dS)aP Return a private OpenSSH key string, in the "openssh-key-v1" format introduced in OpenSSH 6.5. See _fromPrivateOpenSSH_v1 for the string format. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase to encrypt the key with, or L{None} if it is not encrypted. rrrrdrrrrZrrbNrrr8s#-----BEGIN OPENSSH PRIVATE KEY-----csg|]}||dqS)@r-)r9ir:r-r.r sz,Key._toPrivateOpenSSH_v1..r>s!-----END OPENSSH PRIVATE KEY-----)rr block_sizerZ secureRandomrrrpackr.rbytesrrrrrr encryptorrrrvrr9ranger)rr0rCrZ cipherNameZkdfNamerrrrrrcheckrZpadByteZencKeyrDrrvrr-r@r._toPrivateOpenSSH_v1sf         zKey._toPrivateOpenSSH_v1cCsX|st}n t|}|dkr<|jtjjtjj |S|dksLt t ddS)a, Return a private OpenSSH key string, in the old PEM-based format. See _fromPrivateOpenSSH_PEM for the string format. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase to encrypt the key with, or L{None} if it is not encrypted. rzBcannot serialize Ed25519 key to OpenSSH PEM format; use v1 insteadN) rr)ZBestAvailableEncryptionrLrr'r%PEMr(TraditionalOpenSSLrr)rrCrDr-r-r._toPrivateOpenSSH_PEMs    zKey._toPrivateOpenSSH_PEMcCsl|r|j|dS|dks0|dkr>|dkr>|j||dS|dksN|dkrZ|j|dStd|dS) ar Return a public or private OpenSSH string. See L{_fromString_PUBLIC_OPENSSH} and L{_fromPrivateOpenSSH_PEM} for the string formats. @param subtype: A subtype to emit. Only supported for private keys, for which the currently supported subtypes are C{'PEM'} and C{'v1'}. If not given, an appropriate default is used. @type subtype: L{str} or L{None} @param comment: Comment for a public key. @type comment: L{bytes} @param passphrase: Passphrase for a private key. @type passphrase: L{bytes} @rtype: L{bytes} )r0Zv1Nr)r0rCrHrBzunknown subtype )rr;rLrGrJr)rr2r0rCr-r-r._toString_OPENSSH s  zKey._toString_OPENSSHcKs|}|}|r|dkrftdddt|dddgdt|d ddgggg}n|d krtdd d t|d ddgdt|dddgdt|dddgdt|dddgggg}ntd|dt| dddS|dkr|d |d}}t ||}tdddt|dddgdt|d ddgdt|dddgd t|ddgdt|ddgdt|d|dddgdt|d|dddgd t|ddgg ggS|d krtdd d t|d ddgdt|dddgdt|dddgdt|dddgd!t|d"ddggggStd|d#dS)$z Return a public or private LSH key. See _fromString_PUBLIC_LSH and _fromString_PRIVATE_LSH for the key formats. @rtype: L{bytes} rrrrrzrZNrryrrrr\rr]rr^rr`rrr8r}rrrrarbbcrr') rVrLrrrBrrr'rr9rr)rkwargsrVrLZkeyDatar\r]rr-r-r. _toString_LSH&sv       zKey._toString_LSHcKs|}|s|dkrF|d|d|d|d|d|df}n.|dkrt|d|d|d |d |d f}t|d ttj|Sd S)z Return a private Secure Shell Agent v3 key. See _fromString_AGENTV3 for the key format. @rtype: L{bytes} rryrrzrr\r]rr^r`rrN) rVrrLrrrrmapr)rrQrVvaluesr-r-r._toString_AGENTV3xs  "zKey._toString_AGENTV3rCz bytes | None)rVr!rcCsX|}|dkr|}||}|dkr@td|d|d|dkrh|j|t|}t |}n|dkr|j||}t |\}}t t |dt |d}n|dkr.|j|t |} t | \}}t |} t |} | d } | d @rd | } | d } | d @rd | } t t | t | }n|d krJt |j|}t ||S) aM Sign some data with this key. SECSH-TRANS RFC 4253 Section 6.6. @param data: The data to sign. @param signatureType: The SSH public key algorithm name to sign this data with, or L{None} to use a reasonable default for the key. @return: A signature for the given data. Nzpublic key signature algorithm z is not defined for z keysrrrrr)rLrr"r/rsignrPKCS1v15rrr"rrECDSA)rrVr!rw hashAlgorithmsigretrs signaturerFZsbZrcompZscompr-r-r.rYs<        zKey.signcCst|dkrdt|}}nt|\}}||}|dkrBdS|}|dkr|j}|sh|}t|d|t |f}n|dkrt|d}t |ddd } t |ddd } t | | }|j}|s|}|||f}n|d krft|d}t|d \} } } t | d } t | d } t | | }|j}|sT|}||t|f}n4|d kr|j}|s|}t|d|f}z|j|Wntk rYdSXd SdS)a Verify a signature using this key. @type signature: L{bytes} @param signature: The signature to verify. @type data: L{bytes} @param data: The signed data. @rtype: L{bool} @return: C{True} if the signature is valid. (rYNFrrrrVbigrrPrT)rrrrir"rLrrrlrrZr from_bytesr#rr[verifyr )rrarVr!r\rwrargsZconcatenatedSignaturer_r`ZrstrZsstrrxr-r-r.resZ            z Key.verify)NN)NN)NNNN)N)N)N)N)NNNN)N)NN)N)NNN)N)0r)r*r+r, classmethodrNrHr}rrrrrrrrrQrrrrrrtrrrrr r2r3rrLrrr"rrVrvr.r!r6r;rGrJrKrRrUrYrer-r-r-r.rEs~  ' F J  X 8   % 0 4 , "     ,(! L<S <  >  RArEc Cs|jdd|sPtjd|td}|jtjj tj j t d}| ||d,}tj|dtd}t|W5QRSQRXdS) a This function returns a persistent L{Key}. The key is loaded from a PEM file in C{location}. If it does not exist, a key with the key size of C{keySize} is generated and saved. @param location: Where the key is stored. @type location: L{twisted.python.filepath.FilePath} @param keySize: The size of the key, if it needs to be generated. @type keySize: L{int} @returns: A persistent key. @rtype: L{Key} T)ZignoreExistingDirectoryi)Zpublic_exponentr#r)encodingrZencryption_algorithmrFN)passwordr)parentmakedirsexistsrZgenerate_private_keyr r'rr%rHr(rIr)Z setContentrGrrIrE)locationrZ privateKeyZpemZkeyFiler-r-r._getPersistentRSAKeys(  ro)rh)Or, __future__rr rr7r3base64rrrhashlibrrtypingrrZ constantlyr r Z cryptographyr Zcryptography.exceptionsr Zcryptography.hazmat.backendsr Zcryptography.hazmat.primitivesrrZ)cryptography.hazmat.primitives.asymmetricrrrrrZ&cryptography.hazmat.primitives.ciphersrrrZ,cryptography.hazmat.primitives.serializationrrZtyping_extensionsrZtwisted.conch.sshrrZtwisted.conch.ssh.commonrZtwisted.pythonrZtwisted.python.compatrr Ztwisted.python.deprecater!Z/cryptography.hazmat.primitives.asymmetric.utilsr"r# ImportErrorr$r%Z SECP256R1Z SECP384R1Z SECP521R1rorrr Exceptionr'r/r0r1r2r5rDrEror-r-r-r.sv