File: //usr/lib/python3.9/site-packages/jwcrypto/__pycache__/jwa.cpython-39.pyc
a
�,�es� � @ s" d dl Z d dlZd dlmZmZ d dlmZmZ d dlm Z d dl
m Z d dl m
Z
mZmZ d dlmZ d dlmZ d d lmZ d d
lmZmZmZ d d lmZ d d lm Z d d
l m Z m Z d dl m!Z! d dl"m#Z# d dl"m$Z$ d dl"m%Z% d dl"m&Z& d dl"m'Z' d dl"m(Z(m)Z) d dl"m*Z* d dl+m,Z, dZ-G dd� ded�Z.dd � Z/d d � Z0d d � Z1d!d"� Z2d#d$� Z3G d%d&� d&�Z4G d'd(� d(e4�Z5G d)d*� d*e4�Z6G d+d,� d,e4�Z7G d-d.� d.e4�Z8G d/d0� d0e5e.�Z9G d1d2� d2e5e.�Z:G d3d4� d4e5e.�Z;G d5d6� d6e6e.�Z<G d7d8� d8e6e.�Z=G d9d:� d:e6e.�Z>G d;d<� d<e7e.�Z?G d=d>� d>e7e.�Z@G d?d@� d@e7e.�ZAG dAdB� dBe7e.�ZBG dCdD� dDe6e.�ZCG dEdF� dFe6e.�ZDG dGdH� dHe6e.�ZEG dIdJ� dJe8e.�ZFG dKdL� dL�ZGG dMdN� dNeG�ZHG dOdP� dPeHe.�ZIG dQdR� dReHe.�ZJG dSdT� dTeHe.�ZKG dUdV� dVeG�ZLG dWdX� dXeLe.�ZMG dYdZ� dZeLe.�ZNG d[d\� d\eLe.�ZOG d]d^� d^eG�ZPG d_d`� d`ePe.�ZQG dadb� dbePe.�ZRG dcdd� ddePe.�ZSG dedf� dfeG�ZTG dgdh� dheTe.�ZUG didj� djeTe.�ZVG dkdl� dleTe.�ZWG dmdn� dneGe.�ZXG dodp� dpeGe.�ZYG dqdr� dreY�ZZG dsdt� dteY�Z[G dudv� dveY�Z\G dwdx� dxe4e.�Z]G dydz� dz�Z^G d{d|� d|e^�Z_G d}d~� d~e_e.�Z`G dd�� d�e_e.�ZaG d�d�� d�e_e.�ZbG d�d�� d�e^�ZcG d�d�� d�ece.�ZdG d�d�� d�ece.�ZeG d�d�� d�ece.�ZfG d�d�� d�e7e.�ZgG d�d�� d�e7e.�ZhG d�d�� d�e7e.�ZiG d�d�� d��ZjdS )�� N)�ABCMeta�abstractmethod)�hexlify� unhexlify)�InvalidSignature)�default_backend)�
constant_time�hashes�hmac)�ec)�padding)�utils)�Cipher�
algorithms�modes)�
ConcatKDFHash)�
PBKDF2HMAC)�aes_key_unwrap� aes_key_wrap)�PKCS7)�InvalidCEKeyLength)�InvalidJWAAlgorithm)�InvalidJWEKeyLength)�InvalidJWEKeyType)�InvalidJWEOperation)�base64url_decode�base64url_encode)� json_decode)�JWKi @ c @ sh e Zd Zeedd� ��Zeedd� ��Zeedd� ��Zeedd� ��Zeed d
� ��Z ed d � �Z
d
S )� JWAAlgorithmc C s dS )zThe algorithm NameN� ��selfr r �0/usr/lib/python3.9/site-packages/jwcrypto/jwa.py�name$ s zJWAAlgorithm.namec C s dS )zA short descriptionNr r! r r r# � description) s zJWAAlgorithm.descriptionc C s dS )zThe algorithm key sizeNr r! r r r# �keysize. s zJWAAlgorithm.keysizec C s dS )z One of 'alg', 'enc' or 'JWK'Nr r! r r r# �algorithm_usage_location3 s z%JWAAlgorithm.algorithm_usage_locationc C s dS )zOne of 'sig', 'kex', 'enc'Nr r! r r r# �
algorithm_use8 s zJWAAlgorithm.algorithm_usec C s& z| j W S ty | j Y S 0 dS )zThe input key sizeN)�
wrap_key_size�AttributeErrorr& r! r r r# �
input_keysize= s zJWAAlgorithm.input_keysizeN) �__name__�
__module__� __qualname__�propertyr r$ r% r& r' r( r+ r r r r# r " s" r )� metaclassc C s t | �d S �N� )�len��xr r r# �_bitsizeF s r6 c C s | d S r1 r r4 r r r# �_inbytesJ s r7 c C s" | d dkrt d��t�t| ��S )Nr2 r z length must be a multiple of 8)�
ValueError�os�urandomr7 r4 r r r# � _randombitsN s r; c C s2 d� | �}|d d d }t|�|d�d |� �S )Nz{:x}� r2 � �0)�formatr �rjust)�n�bits�eZilenr r r# � _encode_intU s
rD c C s t t| �d�S )N� )�intr )rA r r r# � _decode_int[ s rG c @ s e Zd Zdd� Zdd� ZdS )�_RawJWSc C s t �d S �N��NotImplementedError�r" �key�payloadr r r# �signa s z _RawJWS.signc C s t �d S rI rJ �r" rM rN � signaturer r r# �verifyd s z_RawJWS.verifyN�r, r- r. rO rR r r r r# rH _ s rH c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�_RawHMACc C s t � | _|| _d S rI )r �backend�hashfn�r" rV r r r# �__init__j s z_RawHMAC.__init__c C s" t j|| j| jd�}|�|� |S )N�rU )r
�HMACrV rU �update)r" rM rN �hr r r# � _hmac_setupn s
z_RawHMAC._hmac_setupc C s" t |�d��}| �||�}|�� S �NrO )r �
get_op_keyr] �finalize)r" rM rN �skeyr\ r r r# rO s s z
_RawHMAC.signc C s( t |�d��}| �||�}|�|� d S �NrR )r r_ r] rR )r" rM rN rQ Zvkeyr\ r r r# rR x s z_RawHMAC.verifyN)r, r- r. rX r] rO rR r r r r# rT h s rT c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_RawRSAc C s || _ || _d S rI )�padfnrV )r" rd rV r r r# rX s z_RawRSA.__init__c C s |� d�}|�|| j| j�S r^ )r_ rO rd rV �r" rM rN ra r r r# rO � s
z _RawRSA.signc C s" |� d�}|�||| j| j� d S rb )r_ rR rd rV �r" rM rN rQ �pkeyr r r# rR � s
z_RawRSA.verifyN)r, r- r. rX rO rR r r r r# rc ~ s rc c @ s0 e Zd Zdd� Zedd� �Zdd� Zdd� Zd S )
�_RawECc C s || _ || _d S rI )�_curverV )r" �curverV r r r# rX � s z_RawEC.__init__c C s | j S rI )ri r! r r r# rj � s z _RawEC.curvec C sJ |� d| j�}|j}|�|t�| j��}t�|�\}}t ||�t ||� S r^ )
r_ ri Zkey_sizerO r �ECDSArV �ec_utilsZdecode_dss_signaturerD )r" rM rN ra �sizerQ �r�sr r r# rO � s
z _RawEC.signc C sp |� d| j�}|d t|�d � }|t|�d d � }t�tt|�d�tt|�d��}|�||t� | j
�� d S )NrR r= rE ) r_ ri r3 rl Zencode_dss_signaturerF r rR r rk rV )r" rM rN rQ rg rn ro Z
enc_signaturer r r# rR � s �z
_RawEC.verifyN)r, r- r. rX r/ rj rO rR r r r r# rh � s
rh c @ s e Zd Zdd� Zdd� ZdS )�_RawNonec C s dS )N� r rL r r r# rO � s z
_RawNone.signc C s$ |d dks|� � dkr td��d S )N�kty�octrq z'The "none" signature cannot be verified)r_ r rP r r r# rR � s z_RawNone.verifyNrS r r r r# rp � s rp c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_HS256�HS256zHMAC using SHA-256� �alg�sigc s t t| ��t�� � d S rI )�superrt rX r �SHA256r! �� __class__r r# rX � s z_HS256.__init__�
r, r- r. r$ r% r& r' r( rX �
__classcell__r r r{ r# rt � s rt c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_HS384�HS384zHMAC using SHA-384� rw rx c s t t| ��t�� � d S rI )ry r rX r �SHA384r! r{ r r# rX � s z_HS384.__init__r} r r r{ r# r � s r c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_HS512�HS512zHMAC using SHA-512� rw rx c s t t| ��t�� � d S rI )ry r� rX r �SHA512r! r{ r r# rX � s z_HS512.__init__r} r r r{ r# r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_RS256�RS256z RSASSA-PKCS1-v1_5 using SHA-256� rw rx c s t t| ��t�� t�� � d S rI )ry r� rX r �PKCS1v15r rz r! r{ r r# rX � s z_RS256.__init__r} r r r{ r# r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_RS384�RS384z RSASSA-PKCS1-v1_5 using SHA-384r� rw rx c s t t| ��t�� t�� � d S rI )ry r� rX r r� r r� r! r{ r r# rX � s z_RS384.__init__r} r r r{ r# r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_RS512�RS512z RSASSA-PKCS1-v1_5 using SHA-512r� rw rx c s t t| ��t�� t�� � d S rI )ry r� rX r r� r r� r! r{ r r# rX � s z_RS512.__init__r} r r r{ r# r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_ES256�ES256z ECDSA using P-256 and SHA-256rv rw rx c s t t| ��dt�� � d S )NzP-256)ry r� rX r rz r! r{ r r# rX � s z_ES256.__init__r} r r r{ r# r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_ES256K�ES256Kz'ECDSA using secp256k1 curve and SHA-256rv rw rx c s t t| ��dt�� � d S )NZ secp256k1)ry r� rX r rz r! r{ r r# rX s z_ES256K.__init__r} r r r{ r# r� s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_ES384�ES384z ECDSA using P-384 and SHA-384r� rw rx c s t t| ��dt�� � d S )NzP-384)ry r� rX r r� r! r{ r r# rX s z_ES384.__init__r} r r r{ r# r� s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_ES512�ES512z ECDSA using P-521 and SHA-512r� rw rx c s t t| ��dt�� � d S )NzP-521)ry r� rX r r� r! r{ r r# rX # s z_ES512.__init__r} r r r{ r# r� s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_PS256�PS256z.RSASSA-PSS using SHA-256 and MGF1 with SHA-256r� rw rx c s4 t �t �t�� �tjj�}tt| ��|t�� � d S rI ) r �PSS�MGF1r rz � digest_sizery r� rX �r" rd r{ r r# rX / s �z_PS256.__init__r} r r r{ r# r� ' s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_PS384�PS384z.RSASSA-PSS using SHA-384 and MGF1 with SHA-384r� rw rx c s4 t �t �t�� �tjj�}tt| ��|t�� � d S rI ) r r� r� r r� r� ry r� rX r� r{ r r# rX = s �z_PS384.__init__r} r r r{ r# r� 5 s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_PS512�PS512z.RSASSA-PSS using SHA-512 and MGF1 with SHA-512r� rw rx c s4 t �t �t�� �tjj�}tt| ��|t�� � d S rI ) r r� r� r r� r� ry r� rX r� r{ r r# rX K s �z_PS512.__init__r} r r r{ r# r� C s r� c @ s e Zd ZdZdZdZdZdZdS )�_None�nonez%No digital signature or MAC performedr rw rx N�r, r- r. r$ r% r& r' r( r r r r# r� Q s
r� c @ s e Zd Zdd� Zdd� ZdS )� _RawKeyMgmtc C s t �d S rI rJ )r" rM �bitsize�cek�headersr r r# �wrap\ s z_RawKeyMgmt.wrapc C s t �d S rI rJ )r" rM r� �ekr� r r r# �unwrap_ s z_RawKeyMgmt.unwrapN)r, r- r. r� r� r r r r# r� Z s r� c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�_RSAc C s
|| _ d S rI )rd r� r r r# rX e s z
_RSA.__init__c C s0 t |t�std��|d dkr,td|d ��d S )N�key is not a JWK objectrr ZRSA��
isinstancer r8 r �r" rM r r r# �
_check_keyh s
z_RSA._check_keyc C s8 | � |� |st|�}|�d�}|�|| j�}||d�S )N�wrapKey�r� r� )r� r; r_ �encryptrd �r" rM r� r� r� �rkr� r r r# r� o s
z _RSA.wrapc C s@ | � |� |�d�}|�|| j�}t|�|kr<t|t|���|S )N� unwrapKey)r� r_ �decryptrd r6 r �r" rM r� r� r� r� r� r r r# r� w s
z _RSA.unwrapN)r, r- r. rX r� r� r� r r r r# r� c s r� c s< e Zd ZdZdZdZdZdZ� fdd�Z� fdd �Z � Z
S )
�_Rsa15�RSA1_5zRSAES-PKCS1-v1_5r� rw �kexc s t t| ��t�� � d S rI )ry r� rX r r� r! r{ r r# rX � s z_Rsa15.__init__c sP | � |� t|�}z"tt| ��||||�}td��W n tyJ | Y S 0 d S )NZDummy)r� r; ry r� r� r8 � Exception�r" rM r� r� r� r� r{ r r# r� � s
z
_Rsa15.unwrap) r, r- r. r$ r% r& r' r( rX r� r~ r r r{ r# r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_RsaOaep�RSA-OAEPz#RSAES OAEP using default parametersr� rw r� c s, t t| ��t�t�t�� �t�� d �� d S rI )ry r� rX r �OAEPr� r ZSHA1r! r{ r r# rX � s
��z_RsaOaep.__init__r} r r r{ r# r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )� _RsaOaep256� RSA-OAEP-256z.RSAES OAEP using SHA-256 and MGF1 with SHA-256r� rw r� c s, t t| ��t�t�t�� �t�� d �� d S rI )ry r� rX r r� r� r rz r! r{ r r# rX � s
��z_RsaOaep256.__init__r} r r r{ r# r� � s r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � ZdS )
�_AesKwNc C s t � | _d S rI �r rU r! r r r# rX � s z_AesKw.__init__c C s\ t |t�std��|d dkr,td|d ��t|�|��}t|�| jkrXt| jt|���|S �Nr� rr rs � r� r r8 r r r_ r6 r& r �r" rM �opr� r r r# �_get_key� s
z_AesKw._get_keyc C s0 | � |d�}|st|�}t||t� �}||d�S )Nr� r� )r� r; r r r� r r r# r� � s
z _AesKw.wrapc C s8 | � |d�}t||t� �}t|�|kr4t|t|���|S )Nr� )r� r r r6 r r� r r r# r� � s
z
_AesKw.unwrap�r, r- r. r& rX r� r� r� r r r r# r� � s
r� c @ s e Zd ZdZdZdZdZdZdS )�_A128KW�A128KWz AES Key Wrap using 128-bit key� rw r� Nr� r r r r# r� � s
r� c @ s e Zd ZdZdZdZdZdZdS )�_A192KW�A192KWz AES Key Wrap using 192-bit key� rw r� Nr� r r r r# r� � s
r� c @ s e Zd ZdZdZdZdZdZdS )�_A256KW�A256KWz AES Key Wrap using 256-bit keyrv rw r� Nr� r r r r# r� � s
r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � ZdS )
� _AesGcmKwNc C s t � | _d S rI r� r! r r r# rX � s z_AesGcmKw.__init__c C s\ t |t�std��|d dkr,td|d ��t|�|��}t|�| jkrXt| jt|���|S r� r� r� r r r# r� � s
z_AesGcmKw._get_keyc C sv | � |d�}|st|�}td�}tt�|�t�|�| jd�}|�� }|� |�|�
� } |j }
|| t |�t |
�d�d�S )Nr� �` rY )�iv�tag)r� r� �header)
r� r; r r �AESr �GCMrU � encryptorr[ r` r� r ) r" rM r� r� r� r� r� �cipherr� r� r� r r r# r� s ���z_AesGcmKw.wrapc C s� | � |d�}d|vr td��t|d �}d|vr8td��t|d �}tt�|�t�||�| jd�}|� � } | �
|�| � � }
t |
�|kr�t
|t |
���|
S )Nr� r� z&Invalid Header, missing "iv" parameterr� z'Invalid Header, missing "tag" parameterrY )r� r8 r r r r� r r� rU � decryptorr[ r` r6 r ) r" rM r� r� r� r� r� r� r� r� r� r r r# r� s � z_AesGcmKw.unwrapr� r r r r# r� � s
r� c @ s e Zd ZdZdZdZdZdZdS )�
_A128GcmKw� A128GCMKWz+Key wrapping with AES GCM using 128-bit keyr� rw r� Nr� r r r r# r� + s
r� c @ s e Zd ZdZdZdZdZdZdS )�
_A192GcmKw� A192GCMKWz+Key wrapping with AES GCM using 192-bit keyr� rw r� Nr� r r r r# r� 4 s
r� c @ s e Zd ZdZdZdZdZdZdS )�
_A256GcmKw� A256GCMKWz+Key wrapping with AES GCM using 256-bit keyrv rw r� Nr� r r r r# r� = s
r� c @ s8 e Zd ZdZdZdZdd� Zdd� Zdd� Zdd � Z dS )
�
_Pbes2HsAesKwNc C s t � | _tttd�| _d S �N)r� r� rv �r rU r� r� r� �aeskwmapr! r r r# rX L s z_Pbes2HsAesKw.__init__c
C s� |t krtd��t|t�s6t|t�r*|}qB|�d�}n t|�� �}t| j�d��d | }| j dkrnt
� � }n0| j dkr�t
� � }n | j dkr�t
�
� }ntd��t|t| j�||| jd�}|�|�} t| �| jkr�t| jt| ���td d
t| �d �S ) Nz Invalid p2c value, too large�utf8� rv r� r� zUnknown Hash Size)� algorithm�length�saltZ
iterationsrU rs �enc�rr �use�k)� default_max_pbkdf2_iterationsr8 r� r �bytes�encoder r_ r$ �hashsizer rz r� r� r r7 r& rU �deriver6 r r3 r )
r" rw rM �p2s�p2cZplainr� ZhashalgZkdfr� r r r# r� P s,
�
z_Pbes2HsAesKw._get_keyc C s� i }d|v r.t |d �}t|�dk rBtd��ntd�}t|�|d< d|v rT|d }n d}||d< | �|d |||�}| j| j � } | �||||�}
t|�dkr�||
d < |
S )
Nr� r2 z'Invalid Salt, must be 8 or more octectsr� r� i rw r r� ) r r3 r8 r; r r� r� r& r� ) r" rM r� r� r� Z
ret_headerr� r� �kek�aeskw�retr r r# r� o s"
z_Pbes2HsAesKw.wrapc C sf d|vrt d��d|vr t d��t|d �}|d }| �|d |||�}| j| j � }|�||||�S )Nr� z'Invalid Header, missing "p2s" parameterr� z'Invalid Header, missing "p2c" parameterrw )r8 r r� r� r& r� ) r" rM r� r� r� r� r� r� r� r r r# r� � s z_Pbes2HsAesKw.unwrap)
r, r- r. r$ r& r� rX r� r� r� r r r r# r� F s r� c @ s$ e Zd ZdZdZdZdZdZdZdS )�_Pbes2Hs256A128Kw�PBES2-HS256+A128KWz-PBES2 with HMAC SHA-256 and "A128KW" wrappingr� rw r� rv N� r, r- r. r$ r% r& r' r( r� r r r r# r� � s r� c @ s$ e Zd ZdZdZdZdZdZdZdS )�_Pbes2Hs384A192Kw�PBES2-HS384+A192KWz-PBES2 with HMAC SHA-384 and "A192KW" wrappingr� rw r� r� Nr� r r r r# r� � s r� c @ s$ e Zd ZdZdZdZdZdZdZdS )�_Pbes2Hs512A256Kw�PBES2-HS512+A256KWz-PBES2 with HMAC SHA-512 and "A256KW" wrappingrv rw r� r� Nr� r r r r# r� � s r� c @ s8 e Zd ZdZdZdZdZdZdd� Zdd � Z d
d � Z
d S )
�_Direct�dirz$Direct use of a shared symmetric keyr� rw r� c C s0 t |t�std��|d dkr,td|d ��d S r� r� r� r r r# r� � s
z_Direct._check_keyc C sF | � |� |r|d fS t|�d��}t|�|kr>t|t|���d|iS )Nr� r� )r� r r_ r6 r )r" rM r� r� r� r� r r r# r� � s
z _Direct.wrapc C sF | � |� |dkrtd��t|�d��}t|�|krBt|t|���|S )N� zInvalid Encryption Key.r� )r� r8 r r_ r6 r r� r r r# r� � s
z_Direct.unwrapN) r, r- r. r$ r% r& r' r( r� r� r� r r r r# r � s r c @ sH e Zd ZdZdZdZdZdZdd� Zdd � Z d
d � Z
d d
� Z dd� Z dS )�_EcdhEs�ECDH-ESzECDH-ES using Concat KDFrw r� Nc C s t � | _tttd�| _d S r� r� r! r r r# rX � s z_EcdhEs.__init__c C sV t |t�std��|d dvr,td|d ��|d dkrR|d dvrRtd|d ��d S ) Nr� rr )ZEC�OKPz EC or OKPr �crv)ZX25519ZX448zX25519 or X448r� r� r r r# r� � s
�z_EcdhEs._check_keyc C s� t �dt|��}|t|�d��7 }d|v r6t|d �nd}|t �dt|��7 }||7 }d|v rjt|d �nd}|t �dt|��7 }||7 }|t �d|�7 }t|tj�r�|� t�
� |�} n
|� |�} t t �
� t|�|| jd�}
|
�| �S )Nz>Ir� �apur �apv)r� r� � otherinforU )�struct�packr3 r� r� r r� r ZEllipticCurvePrivateKeyZexchangeZECDHr r rz r7 rU r� ) r" ZprivkeyZpubkeyrw r� r� r
r r Z
shared_keyZckdfr r r# �_derive� s$
�z_EcdhEs._derivec C s� | � |� | j}| jd u r8|d ur*td��|d }|}n|d }tj|d |d d�}| �|�d�|�d�|||�}| jd u r�d |i} n0| j| j � }
td
dt|�d �} |
� | |||�} d t
|� � �i| d
< | S )Nz"ECDH-ES cannot use an existing CEKr� rw rr r )rr r r� r� r� rs r� �epkr� ) r� r& r r Zgenerater
r_ r� r r� r Z
export_public) r" rM r� r� r� �dk_sizerw r �dkr� r� r� r r r# r�
s(
�
z _EcdhEs.wrapc C s� d|vrt d��| �|� | j}| jd u r8|d }|}n|d }tf i |d ��}| �|�d�|�d�|||�}| jd u r~|S | j| j � } tddt|�d�}
| �|
|||�} | S d S ) Nr z'Invalid Header, missing "epk" parameterr� rw r� r� rs r� ) r8 r� r& r r
r_ r� r r� ) r" rM r� r� r� r rw r r r� r� r� r r r# r� $ s&
�
z_EcdhEs.unwrap)
r, r- r. r$ r% r' r( r& rX r� r
r� r� r r r r# r � s
#r c @ s e Zd ZdZdZdZdZdZdS )�_EcdhEsAes128Kw�ECDH-ES+A128KWz.ECDH-ES using Concat KDF and "A128KW" wrappingr� rw r� Nr� r r r r# r < s
r c @ s e Zd ZdZdZdZdZdZdS )�_EcdhEsAes192Kw�ECDH-ES+A192KWz.ECDH-ES using Concat KDF and "A192KW" wrappingr� rw r� Nr� r r r r# r E s
r c @ s e Zd ZdZdZdZdZdZdS )�_EcdhEsAes256Kw�ECDH-ES+A256KWz.ECDH-ES using Concat KDF and "A256KW" wrappingrv rw r� Nr� r r r r# r N s
r c @ s0 e Zd ZdZdZdZdZdZdd� Zdd � Z dS )
�_EdDsa�EdDSAz'EdDSA using Ed25519 or Ed448 algorithmsrw rx Nc C s( |d dv r |� d�}|�|�S t�d S )Nr �ZEd25519ZEd448rO )r_ rO rK re r r r# rO _ s
z _EdDsa.signc C s* |d dv r"|� d�}|�||�S t�d S )Nr r rR )r_ rR rK rf r r r# rR e s
z
_EdDsa.verify)
r, r- r. r$ r% r' r( r& rO rR r r r r# r W s r c @ s e Zd Zdd� Zdd� ZdS )�_RawJWEc C s t �d S rI rJ )r" r� �aad�mr r r# r� n s z_RawJWE.encryptc C s t �d S rI rJ )r" r� r r� rC �tr r r# r� q s z_RawJWE.decryptN)r, r- r. r� r� r r r r# r l s r c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � ZdS )
�_AesCbcHmacSha2Nc C s( t � | _|| _tjj| _| jd | _d S )Nr= ) r rU rV r r� Z
block_size� blocksizer& r) rW r r r# rX y s
z_AesCbcHmacSha2.__init__c C sd t t|�d�}tj|| j| jd�}|�|� |�|� |�|� |�|� |�� }|d t| j �� S )N�@ rY )
rD r6 r
rZ rV rU r[ r` r7 r& )r" r� r r� rC Zalr\ r r r r# �_mac s
z_AesCbcHmacSha2._macc
C s� t |�t| j�krtd��|dt| j�� }|t| j�d� }t| j�}tt� |�t
� |�| j d�}|�
� }t| j��� } | �|�| �� }
|�|
�|�� } | �|||| �} || | fS )�� Encrypt according to the selected encryption and hashing
functions.
:param k: Encryption key
:param aad: Additional Authentication Data
:param m: Plaintext
Returns a dictionary with the computed data.
�Invalid input key sizeNrY )r3 r7 r) r8 r& r; r r r r� r �CBCrU r� r �padderr[ r` r! )
r" r� r r �hkeyZekeyr� r� r� r% Z padded_datarC r r r r# r� � s
�z_AesCbcHmacSha2.encryptc C s� t |�t| j�krtd��|dt| j�� }|t| j�d� }t�|| �||||��s^td��t t
� |�t �
|�| jd�}|�� } | �|�| �� }
t| j��� } | �|
�| �� S )�A Decrypt according to the selected encryption and hashing
functions.
:param k: Encryption key
:param aad: Additional Authenticated Data
:param iv: Initialization Vector
:param e: Ciphertext
:param t: Authentication Tag
Returns plaintext or raises an error
r# NzFailed to verify MACrY )r3 r7 r) r8 r& r Zbytes_eqr! r r r r� r r$ rU r� r[ r` r r �unpadder) r" r� r r� rC r r& Zdkeyr� r� �dr( r r r# r� � s �z_AesCbcHmacSha2.decrypt)r, r- r. r& rX r! r� r� r r r r# r u s
r c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�
_A128CbcHs256�
A128CBC-HS256z&AES_128_CBC_HMAC_SHA_256 authenticatedr� r� c s t t| ��t�� � d S rI )ry r* rX r rz r! r{ r r# rX � s z_A128CbcHs256.__init__r} r r r{ r# r* � s r* c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�
_A192CbcHs384�
A192CBC-HS384z&AES_192_CBC_HMAC_SHA_384 authenticatedr� r� c s t t| ��t�� � d S rI )ry r, rX r r� r! r{ r r# rX � s z_A192CbcHs384.__init__r} r r r{ r# r, � s r, c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�
_A256CbcHs512�
A256CBC-HS512z&AES_256_CBC_HMAC_SHA_512 authenticatedrv r� c s t t| ��t�� � d S rI )ry r. rX r r� r! r{ r r# rX � s z_A256CbcHs512.__init__r} r r r{ r# r. � s r. c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS )�_AesGcmNc C s t � | _| j| _d S rI )r rU r& r) r! r r r# rX � s z_AesGcm.__init__c C sT t d�}tt�|�t�|�| jd�}|�� }|�|� |� |�|�
� }|||j fS )r" r� rY ) r; r r r� r r� rU r� � authenticate_additional_datar[ r` r� )r" r� r r r� r� r� rC r r r# r� � s
�
z_AesGcm.encryptc C sB t t�|�t�||�| jd�}|�� }|�|� |�|�|� � S )r' rY )
r r r� r r� rU r� r1 r[ r` )r" r� r r� rC r r� r� r r r# r� s �
z_AesGcm.decrypt)r, r- r. r& rX r� r� r r r r# r0 � s r0 c @ s e Zd ZdZdZdZdZdZdS )�_A128Gcm�A128GCMzAES GCM using 128-bit keyr� r� Nr� r r r r# r2 s
r2 c @ s e Zd ZdZdZdZdZdZdS )�_A192Gcm�A192GCMzAES GCM using 192-bit keyr� r� Nr� r r r r# r4 ! s
r4 c @ s e Zd ZdZdZdZdZdZdS )�_A256Gcm�A256GCMzAES GCM using 256-bit keyrv r� Nr� r r r r# r6 * s
r6 c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_BP256R1�BP256R1zsECDSA using Brainpool256R1 curve and SHA-256 (unregistered, custom-defined in breach of IETF rules by gematik GmbH)rv rw rx c s t t| ��dt�� � d S )NzBP-256)ry r8 rX r rz r! r{ r r# rX ? s z_BP256R1.__init__r} r r r{ r# r8 3 s �r8 c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_BP384R1�BP384R1zsECDSA using Brainpool384R1 curve and SHA-384 (unregistered, custom-defined in breach of IETF rules by gematik GmbH)r� rw rx c s t t| ��dt�� � d S )NzBP-384)ry r: rX r r� r! r{ r r# rX O s z_BP384R1.__init__r} r r r{ r# r: C s �r: c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_BP512R1�BP512R1zsECDSA using Brainpool512R1 curve and SHA-512 (unregistered, custom-defined in breach of IETF rules by gematik GmbH)r� rw rx c s t t| ��dt�� � d S )NzBP-512)ry r< rX r r� r! r{ r r# rX _ s z_BP512R1.__init__r} r r r{ r# r< S s �r< c * @ s� e Zd ZdZeeeeee e
e e e
eeeeeeeeeeeeeee e e e e e!e"e#e$e%e&e'e(e)e*e+e,d�)Z-e.d dd��Z/e.dd� �Z0e.dd � �Z1e.d
d � �Z2dS )
�JWAzSJWA Signing Algorithms.
This class provides access to all JWA algorithms.
))ru r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r� r� r� r� r� r r+ r- r/ r3 r5 r7 r9 r; r= Nc C s& | j | }|d ur |j|kr t�|� S rI )�algorithms_registryr( �KeyError)�clsr$ r� rw r r r# �instantiate_alg� s
zJWA.instantiate_algc C s6 z| j |dd�W S ty0 td| �d �Y n0 d S )Nrx �r� z(%s is not a valid Signing algorithm name�rB r@ r �rA r$ r r r# � signing_alg� s ��zJWA.signing_algc C s6 z| j |dd�W S ty0 td| �d �Y n0 d S )Nr� rC z/%s is not a valid Key Management algorithm namerD rE r r r# � keymgmt_alg� s ��zJWA.keymgmt_algc C s6 z| j |dd�W S ty0 td| �d �Y n0 d S )Nr� rC z+%s is not a valid Encryption algorithm namerD rE r r r# �encryption_alg� s ��zJWA.encryption_alg)N)3r, r- r. �__doc__rt r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r� r� r� r� r� r� r* r, r. r2 r4 r6 r8 r: r< r? � classmethodrB rF rG rH r r r r# r> c sf �,
r> )kr9 r �abcr r Zbinasciir r Zcryptography.exceptionsr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r r
Z)cryptography.hazmat.primitives.asymmetricr r r
rl Z&cryptography.hazmat.primitives.ciphersr r r Z,cryptography.hazmat.primitives.kdf.concatkdfr Z)cryptography.hazmat.primitives.kdf.pbkdf2r Z&cryptography.hazmat.primitives.keywrapr r Z&cryptography.hazmat.primitives.paddingr Zjwcrypto.commonr r r r r r r r Z jwcrypto.jwkr r� r r6 r7 r; rD rG rH rT rc rh rp rt r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r r r* r, r. r0 r2 r4 r6 r8 r: r< r> r r r r# �<module> s� $
# 4 L
!k Q .