Файловый менеджер - Редактировать - /home/freeclou/app.optimyar.com/front-web/build/assets/styles/dnssecalgs.tar
Назад
__pycache__/__init__.cpython-39.opt-1.pyc 0000644 00000007176 15111603167 0014117 0 ustar 00 a �M�e� � @ s� U d dl mZmZmZmZmZ d dlZd dlm Z d dl m Z d dl m Z d dlmZ ej�d�r�d dlmZmZ d d lmZmZ d d lmZmZ d d lm Z m Z m Z m Z m Z d Z!nd Z!eee"ej#j$f Z%i Z&eee e%f ee f e'd< e!�rje&�(e j)dfe e j*dfee j+dfe e j,dfee j-dfe e j.dfe e j/dfe e j0dfee j1dfee j2dfee j3dfei � dee4e5f e%ee d�dd�Z6eee d�dd�Z7dee4e5f ee eeej#j$e5f ee" dd�dd�Z8dS )� )�Dict�Optional�Tuple�Type�UnionN)�GenericPrivateKey)� Algorithm)�UnsupportedAlgorithm)�DNSKEYZdnssec)� PrivateDSA�PrivateDSANSEC3SHA1)�PrivateECDSAP256SHA256�PrivateECDSAP384SHA384)� PrivateED448�PrivateED25519)� PrivateRSAMD5�PrivateRSASHA1�PrivateRSASHA1NSEC3SHA1�PrivateRSASHA256�PrivateRSASHA512TF� algorithms)� algorithm�prefix�returnc C s6 t �| �} t�| |f�}|r |S tdt �| � ��dS )z�Get Private Key class from Algorithm. *algorithm*, a ``str`` or ``int`` specifying the DNSKEY algorithm. Raises ``UnsupportedAlgorithm`` if the algorithm is unknown. Returns a ``dns.dnssecalgs.GenericPrivateKey`` z)algorithm "%s" not supported by dnspythonN)r �maker �getr Zto_text)r r �cls� r �;/usr/lib/python3.9/site-packages/dns/dnssecalgs/__init__.py�get_algorithm_cls. s �r )�dnskeyr c C s^ d}| j tjkr&tj�| jd�\}}n,| j tjkrRt| jd �}| jd|d � }t | j |�S )z�Get Private Key class from DNSKEY. *dnskey*, a ``DNSKEY`` to get Algorithm class for. Raises ``UnsupportedAlgorithm`` if the algorithm is unknown. Returns a ``dns.dnssecalgs.GenericPrivateKey`` Nr � ) r r � PRIVATEDNS�dns�nameZ from_wire�key� PRIVATEOID�intr )r r �_�lengthr r r � get_algorithm_cls_from_dnskeyB s r* )r � algorithm_clsr$ �oidr c C s� t |t�std��t�| �} d}| tjkrV|du r:td��t|t�rPt j � |�}|}nH| tj kr�|du rptd��t t|�g�| }n|r�td��n |r�td��|t| |f< dS )a� Register Algorithm Private Key class. *algorithm*, a ``str`` or ``int`` specifying the DNSKEY algorithm. *algorithm_cls*: A `GenericPrivateKey` class. *name*, an optional ``dns.name.Name`` or ``str``, for for PRIVATEDNS algorithms. *oid*: an optional BER-encoded `bytes` for PRIVATEOID algorithms. Raises ``ValueError`` if a name or oid is specified incorrectly. zInvalid algorithm classNz'Name required for PRIVATEDNS algorithmsz&OID required for PRIVATEOID algorithmsz,Name only supported for PRIVATEDNS algorithmz+OID only supported for PRIVATEOID algorithm)� issubclassr � TypeErrorr r r" � ValueError� isinstance�strr# r$ Z from_textr& �bytes�lenr )r r+ r$ r, r r r r �register_algorithm_clsT s& r4 )N)NN)9�typingr r r r r Zdns.namer# Zdns.dnssecalgs.baser Zdns.dnssectypesr Z dns.exceptionr Zdns.rdtypes.ANY.DNSKEYr Z _featuresZhaveZdns.dnssecalgs.dsar r Zdns.dnssecalgs.ecdsar r Zdns.dnssecalgs.eddsar r Zdns.dnssecalgs.rsar r r r r Z_have_cryptographyr2 r$ �NameZAlgorithmPrefixr �__annotations__�updateZRSAMD5ZDSAZRSASHA1Z DSANSEC3SHA1ZRSASHA1NSEC3SHA1Z RSASHA256Z RSASHA512ZECDSAP256SHA256ZECDSAP384SHA384ZED25519ZED448r' r1 r r* r4 r r r r �<module> sX �� � � � � __pycache__/__init__.cpython-39.pyc 0000644 00000007176 15111603167 0013160 0 ustar 00 a �M�e� � @ s� U d dl mZmZmZmZmZ d dlZd dlm Z d dl m Z d dl m Z d dlmZ ej�d�r�d dlmZmZ d d lmZmZ d d lmZmZ d d lm Z m Z m Z m Z m Z d Z!nd Z!eee"ej#j$f Z%i Z&eee e%f ee f e'd< e!�rje&�(e j)dfe e j*dfee j+dfe e j,dfee j-dfe e j.dfe e j/dfe e j0dfee j1dfee j2dfee j3dfei � dee4e5f e%ee d�dd�Z6eee d�dd�Z7dee4e5f ee eeej#j$e5f ee" dd�dd�Z8dS )� )�Dict�Optional�Tuple�Type�UnionN)�GenericPrivateKey)� Algorithm)�UnsupportedAlgorithm)�DNSKEYZdnssec)� PrivateDSA�PrivateDSANSEC3SHA1)�PrivateECDSAP256SHA256�PrivateECDSAP384SHA384)� PrivateED448�PrivateED25519)� PrivateRSAMD5�PrivateRSASHA1�PrivateRSASHA1NSEC3SHA1�PrivateRSASHA256�PrivateRSASHA512TF� algorithms)� algorithm�prefix�returnc C s6 t �| �} t�| |f�}|r |S tdt �| � ��dS )z�Get Private Key class from Algorithm. *algorithm*, a ``str`` or ``int`` specifying the DNSKEY algorithm. Raises ``UnsupportedAlgorithm`` if the algorithm is unknown. Returns a ``dns.dnssecalgs.GenericPrivateKey`` z)algorithm "%s" not supported by dnspythonN)r �maker �getr Zto_text)r r �cls� r �;/usr/lib/python3.9/site-packages/dns/dnssecalgs/__init__.py�get_algorithm_cls. s �r )�dnskeyr c C s^ d}| j tjkr&tj�| jd�\}}n,| j tjkrRt| jd �}| jd|d � }t | j |�S )z�Get Private Key class from DNSKEY. *dnskey*, a ``DNSKEY`` to get Algorithm class for. Raises ``UnsupportedAlgorithm`` if the algorithm is unknown. Returns a ``dns.dnssecalgs.GenericPrivateKey`` Nr � ) r r � PRIVATEDNS�dns�nameZ from_wire�key� PRIVATEOID�intr )r r �_�lengthr r r � get_algorithm_cls_from_dnskeyB s r* )r � algorithm_clsr$ �oidr c C s� t |t�std��t�| �} d}| tjkrV|du r:td��t|t�rPt j � |�}|}nH| tj kr�|du rptd��t t|�g�| }n|r�td��n |r�td��|t| |f< dS )a� Register Algorithm Private Key class. *algorithm*, a ``str`` or ``int`` specifying the DNSKEY algorithm. *algorithm_cls*: A `GenericPrivateKey` class. *name*, an optional ``dns.name.Name`` or ``str``, for for PRIVATEDNS algorithms. *oid*: an optional BER-encoded `bytes` for PRIVATEOID algorithms. Raises ``ValueError`` if a name or oid is specified incorrectly. zInvalid algorithm classNz'Name required for PRIVATEDNS algorithmsz&OID required for PRIVATEOID algorithmsz,Name only supported for PRIVATEDNS algorithmz+OID only supported for PRIVATEOID algorithm)� issubclassr � TypeErrorr r r" � ValueError� isinstance�strr# r$ Z from_textr& �bytes�lenr )r r+ r$ r, r r r r �register_algorithm_clsT s& r4 )N)NN)9�typingr r r r r Zdns.namer# Zdns.dnssecalgs.baser Zdns.dnssectypesr Z dns.exceptionr Zdns.rdtypes.ANY.DNSKEYr Z _featuresZhaveZdns.dnssecalgs.dsar r Zdns.dnssecalgs.ecdsar r Zdns.dnssecalgs.eddsar r Zdns.dnssecalgs.rsar r r r r Z_have_cryptographyr2 r$ �NameZAlgorithmPrefixr �__annotations__�updateZRSAMD5ZDSAZRSASHA1Z DSANSEC3SHA1ZRSASHA1NSEC3SHA1Z RSASHA256Z RSASHA512ZECDSAP256SHA256ZECDSAP384SHA384ZED25519ZED448r' r1 r r* r4 r r r r �<module> sX �� � � � � __pycache__/base.cpython-39.opt-1.pyc 0000644 00000007253 15111603167 0013266 0 ustar 00 a �M�e� � @ s� d dl mZmZ d dlmZmZmZ d dlZd dl Zd dl m Z d dl m Z d dlmZ d dlmZ G dd � d e�ZG d d � d e�ZdS ) � )�ABC�abstractmethod)�Any�Optional�TypeN)� Algorithm)�AlgorithmKeyMismatch)�DNSKEY)�Flagc @ s� e Zd ZU eed< eedd�dd��Zeeedd�dd��Z eed �d d ��Z e e dd�d d ��Z ejdfeee d�dd�Ze ee d d�dd���Ze eed d�dd���Zeed �dd��ZdS )�GenericPublicKey� algorithmN��key�returnc C s d S �N� ��selfr r r �7/usr/lib/python3.9/site-packages/dns/dnssecalgs/base.py�__init__ s zGenericPublicKey.__init__)� signature�datar c C s dS )zVerify signed DNSSEC dataNr )r r r r r r �verify s zGenericPublicKey.verify�r c C s dS )z Encode key as bytes for DNSKEYNr �r r r r �encode_key_bytes s z!GenericPublicKey.encode_key_bytesc C s |j | j krt�d S r )r r ��clsr r r r �!_ensure_algorithm_key_combination s z2GenericPublicKey._ensure_algorithm_key_combination� )�flags�protocolr c C s" t tjjtjj ||| j| �� d�S )zReturn public key as DNSKEY)ZrdclassZrdtyper r! r r )r �dnsZ rdataclass�INZ rdatatyper r )r r r! r r r � to_dnskey s �zGenericPublicKey.to_dnskeyc C s dS )z Create public key from DNSKEYNr r r r r � from_dnskey+ s z GenericPublicKey.from_dnskey)� public_pemr c C s dS )zXCreate public key from PEM-encoded SubjectPublicKeyInfo as specified in RFC 5280Nr )r r& r r r �from_pem0 s zGenericPublicKey.from_pemc C s dS )zVReturn public-key as PEM-encoded SubjectPublicKeyInfo as specified in RFC 5280Nr r r r r �to_pem6 s zGenericPublicKey.to_pem)�__name__� __module__� __qualname__r �__annotations__r r r �bytesr r � classmethodr r r ZZONE�intr$ r% r' r( r r r r r s$ r c @ s� e Zd ZU ee ed< eedd�dd��Zede e e d�dd ��Z ed d �d d ��Z e ede ee d d�dd���Zedee e d�dd��ZdS )�GenericPrivateKeyZ public_clsNr c C s d S r r r r r r r ? s zGenericPrivateKey.__init__F)r r r c C s dS )zSign DNSSEC dataNr )r r r r r r �signC s zGenericPrivateKey.signr r c C s dS )zReturn public key instanceNr r r r r � public_keyG s z GenericPrivateKey.public_key)� private_pem�passwordr c C s dS )z*Create private key from PEM-encoded PKCS#8Nr )r r3 r4 r r r r' K s zGenericPrivateKey.from_pem)r4 r c C s dS )z(Return private key as PEM-encoded PKCS#8Nr )r r4 r r r r( R s zGenericPrivateKey.to_pem)F)N)N)r) r* r+ r r r, r r r r- �boolr1 r2 r. r r' r( r r r r r0 < s ��r0 )�abcr r �typingr r r Zdns.rdataclassr" Z dns.rdatatypeZdns.dnssectypesr Z dns.exceptionr Zdns.rdtypes.ANY.DNSKEYr Zdns.rdtypes.dnskeybaser r r0 r r r r �<module> s 0 __pycache__/base.cpython-39.pyc 0000644 00000007253 15111603167 0012327 0 ustar 00 a �M�e� � @ s� d dl mZmZ d dlmZmZmZ d dlZd dl Zd dl m Z d dl m Z d dlmZ d dlmZ G dd � d e�ZG d d � d e�ZdS ) � )�ABC�abstractmethod)�Any�Optional�TypeN)� Algorithm)�AlgorithmKeyMismatch)�DNSKEY)�Flagc @ s� e Zd ZU eed< eedd�dd��Zeeedd�dd��Z eed �d d ��Z e e dd�d d ��Z ejdfeee d�dd�Ze ee d d�dd���Ze eed d�dd���Zeed �dd��ZdS )�GenericPublicKey� algorithmN��key�returnc C s d S �N� ��selfr r r �7/usr/lib/python3.9/site-packages/dns/dnssecalgs/base.py�__init__ s zGenericPublicKey.__init__)� signature�datar c C s dS )zVerify signed DNSSEC dataNr )r r r r r r �verify s zGenericPublicKey.verify�r c C s dS )z Encode key as bytes for DNSKEYNr �r r r r �encode_key_bytes s z!GenericPublicKey.encode_key_bytesc C s |j | j krt�d S r )r r ��clsr r r r �!_ensure_algorithm_key_combination s z2GenericPublicKey._ensure_algorithm_key_combination� )�flags�protocolr c C s" t tjjtjj ||| j| �� d�S )zReturn public key as DNSKEY)ZrdclassZrdtyper r! r r )r �dnsZ rdataclass�INZ rdatatyper r )r r r! r r r � to_dnskey s �zGenericPublicKey.to_dnskeyc C s dS )z Create public key from DNSKEYNr r r r r � from_dnskey+ s z GenericPublicKey.from_dnskey)� public_pemr c C s dS )zXCreate public key from PEM-encoded SubjectPublicKeyInfo as specified in RFC 5280Nr )r r& r r r �from_pem0 s zGenericPublicKey.from_pemc C s dS )zVReturn public-key as PEM-encoded SubjectPublicKeyInfo as specified in RFC 5280Nr r r r r �to_pem6 s zGenericPublicKey.to_pem)�__name__� __module__� __qualname__r �__annotations__r r r �bytesr r � classmethodr r r ZZONE�intr$ r% r' r( r r r r r s$ r c @ s� e Zd ZU ee ed< eedd�dd��Zede e e d�dd ��Z ed d �d d ��Z e ede ee d d�dd���Zedee e d�dd��ZdS )�GenericPrivateKeyZ public_clsNr c C s d S r r r r r r r ? s zGenericPrivateKey.__init__F)r r r c C s dS )zSign DNSSEC dataNr )r r r r r r �signC s zGenericPrivateKey.signr r c C s dS )zReturn public key instanceNr r r r r � public_keyG s z GenericPrivateKey.public_key)� private_pem�passwordr c C s dS )z*Create private key from PEM-encoded PKCS#8Nr )r r3 r4 r r r r' K s zGenericPrivateKey.from_pem)r4 r c C s dS )z(Return private key as PEM-encoded PKCS#8Nr )r r4 r r r r( R s zGenericPrivateKey.to_pem)F)N)N)r) r* r+ r r r, r r r r- �boolr1 r2 r. r r' r( r r r r r0 < s ��r0 )�abcr r �typingr r r Zdns.rdataclassr" Z dns.rdatatypeZdns.dnssectypesr Z dns.exceptionr Zdns.rdtypes.ANY.DNSKEYr Zdns.rdtypes.dnskeybaser r r0 r r r r �<module> s 0 __pycache__/cryptography.cpython-39.opt-1.pyc 0000644 00000005234 15111603167 0015104 0 ustar 00 a �M�ey � @ s` d dl mZmZmZ d dlmZ d dlmZmZ d dl m Z G dd� de�Z G dd� de�Z d S ) � )�Any�Optional�Type)� serialization)�GenericPrivateKey�GenericPublicKey)�AlgorithmKeyMismatchc @ sX e Zd ZU dZeed< dZeed< edd�dd�Zee dd�d d ��Z e d �d d �Z dS )�CryptographyPublicKeyN�key�key_cls�r �returnc C s, | j d u rtd��t|| j �s"t�|| _d S �NzUndefined private key class�r � TypeError� isinstancer r ��selfr � r �?/usr/lib/python3.9/site-packages/dns/dnssecalgs/cryptography.py�__init__ s �z CryptographyPublicKey.__init__r )� public_pemr c C s t �|�}| |d�S �N�r )r Zload_pem_public_key)�clsr r r r r �from_pem s z CryptographyPublicKey.from_pem�r c C s | j jtjjtjjd�S )N)�encoding�format)r Z public_bytesr �Encoding�PEMZ PublicFormatZSubjectPublicKeyInfo�r r r r �to_pem s �z CryptographyPublicKey.to_pem) �__name__� __module__� __qualname__r r �__annotations__r r � classmethod�bytesr r" r r r r r s r c @ s� e Zd ZU dZeed< dZeed< ee ed< edd�dd�Z dd �d d �Z e de e e d d �dd��Zde e e d�dd�ZdS )�CryptographyPrivateKeyNr r � public_clsr c C s, | j d u rtd��t|| j �s"t�|| _d S r r r r r r r ' s �z CryptographyPrivateKey.__init__r r c C s | j | j�� d�S r )r* r � public_keyr! r r r r+ 0 s z!CryptographyPrivateKey.public_keyr )� private_pem�passwordr c C s t j||d�}| |d�S )N)r- r )r Zload_pem_private_key)r r, r- r r r r r 3 s z CryptographyPrivateKey.from_pem)r- r c C s2 |rt �|�}nt �� }| jjt jjt jj|d�S )N)r r �encryption_algorithm) r ZBestAvailableEncryptionZ NoEncryptionr Z private_bytesr r Z PrivateFormatZPKCS8)r r- r. r r r r" : s �z CryptographyPrivateKey.to_pem)N)N)r# r$ r% r r r& r r r r r+ r' r( r r r" r r r r r) " s ��r) N) �typingr r r Z cryptography.hazmat.primitivesr Zdns.dnssecalgs.baser r Z dns.exceptionr r r) r r r r �<module> s __pycache__/cryptography.cpython-39.pyc 0000644 00000005234 15111603167 0014145 0 ustar 00 a �M�ey � @ s` d dl mZmZmZ d dlmZ d dlmZmZ d dl m Z G dd� de�Z G dd� de�Z d S ) � )�Any�Optional�Type)� serialization)�GenericPrivateKey�GenericPublicKey)�AlgorithmKeyMismatchc @ sX e Zd ZU dZeed< dZeed< edd�dd�Zee dd�d d ��Z e d �d d �Z dS )�CryptographyPublicKeyN�key�key_cls�r �returnc C s, | j d u rtd��t|| j �s"t�|| _d S �NzUndefined private key class�r � TypeError� isinstancer r ��selfr � r �?/usr/lib/python3.9/site-packages/dns/dnssecalgs/cryptography.py�__init__ s �z CryptographyPublicKey.__init__r )� public_pemr c C s t �|�}| |d�S �N�r )r Zload_pem_public_key)�clsr r r r r �from_pem s z CryptographyPublicKey.from_pem�r c C s | j jtjjtjjd�S )N)�encoding�format)r Z public_bytesr �Encoding�PEMZ PublicFormatZSubjectPublicKeyInfo�r r r r �to_pem s �z CryptographyPublicKey.to_pem) �__name__� __module__� __qualname__r r �__annotations__r r � classmethod�bytesr r" r r r r r s r c @ s� e Zd ZU dZeed< dZeed< ee ed< edd�dd�Z dd �d d �Z e de e e d d �dd��Zde e e d�dd�ZdS )�CryptographyPrivateKeyNr r � public_clsr c C s, | j d u rtd��t|| j �s"t�|| _d S r r r r r r r ' s �z CryptographyPrivateKey.__init__r r c C s | j | j�� d�S r )r* r � public_keyr! r r r r+ 0 s z!CryptographyPrivateKey.public_keyr )� private_pem�passwordr c C s t j||d�}| |d�S )N)r- r )r Zload_pem_private_key)r r, r- r r r r r 3 s z CryptographyPrivateKey.from_pem)r- r c C s2 |rt �|�}nt �� }| jjt jjt jj|d�S )N)r r �encryption_algorithm) r ZBestAvailableEncryptionZ NoEncryptionr Z private_bytesr r Z PrivateFormatZPKCS8)r r- r. r r r r" : s �z CryptographyPrivateKey.to_pem)N)N)r# r$ r% r r r& r r r r r+ r' r( r r r" r r r r r) " s ��r) N) �typingr r r Z cryptography.hazmat.primitivesr Zdns.dnssecalgs.baser r Z dns.exceptionr r r) r r r r �<module> s __pycache__/dsa.cpython-39.opt-1.pyc 0000644 00000007263 15111603167 0013124 0 ustar 00 a �M�e� � @ s� d dl Z d dlmZ d dlmZ d dlmZmZ d dlm Z m Z d dl m Z d dl mZ G dd � d e �ZG d d � d e �ZG d d � d e�ZG dd� de�ZdS )� N)�default_backend)�hashes)�dsa�utils)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc @ s` e Zd ZU ejed< ejZejZ e � � Z e e dd�dd�Ze d�dd�Zeed d �d d ��ZdS ) � PublicDSA�keyN)� signature�data�returnc C sJ |dd� }|dd � }t �t�|d�t�|d��}| j�||| j� d S )N� � �big)r Zencode_dss_signature�int� from_bytesr �verify� chosen_hash)�selfr r Zsig_rZsig_sZsig� r �6/usr/lib/python3.9/site-packages/dns/dnssecalgs/dsa.pyr s �zPublicDSA.verify)r c C s� | j �� }| j jd d d }|dkr.td��d|d }t�d|�}||jj�dd�7 }||jj �|d�7 }||jj �|d�7 }||j �|d�7 }|S )z,Encode a public key per RFC 2536, section 2.� �@ zunsupported DSA key size�!B� r ) r Zpublic_numbers�key_size� ValueError�struct�packZparameter_numbers�q�to_bytes�p�g�y)r Zpn�dsa_t�octets�resr r r �encode_key_bytes s zPublicDSA.encode_key_bytes)r r c C s� | � |� |j}t�d|dd� �\}|dd � }d|d }|dd� }|dd � }|d|� }||d � }|d|� }||d � }|d|� }| t�t�|d�t�t�|d�t�|d�t�|d���� t � �d�S ) Nr r r r r r r �r ) Z!_ensure_algorithm_key_combinationr r �unpackr ZDSAPublicNumbersr r ZDSAParameterNumbers� public_keyr ) �clsr Zkeyptr�tr' Zdsa_qZdsa_pZdsa_gZdsa_yr r r � from_dnskey( s0 ����zPublicDSA.from_dnskey)�__name__� __module__� __qualname__r Z DSAPublicKey�__annotations__�key_clsr ZDSA� algorithmr ZSHA1r �bytesr r) � classmethodr r/ r r r r r s r c @ sJ e Zd ZU ejed< ejZeZd e e e d�dd�Z e e d d�dd��Zd S ) � PrivateDSAr F)r r r c C s� | j �� }|jdkr td��| j �|| jj�}t�|�\}}|jd d d }d}t � d|�t j ||dd� t j ||dd� } |r�| �� � | |� | S ) z1Sign using a private key per RFC 2536, section 3.i zDSA key size overflowr r r r r )�length� byteorder)r r, r r �sign� public_clsr r Zdecode_dss_signaturer r r r" r ) r r r Zpublic_dsa_keyZ der_signatureZdsa_rZdsa_sr& r' r r r r r; G s ���zPrivateDSA.sign)r r c C s | t j|d�d�S )N)r r* )r Zgenerate_private_key)r- r r r r �generateY s �zPrivateDSA.generateN)F)r0 r1 r2 r Z DSAPrivateKeyr3 r4 r r< r6 �boolr; r7 r r= r r r r r8 B s r8 c @ s e Zd ZejZdS )�PublicDSANSEC3SHA1N)r0 r1 r2 r Z DSANSEC3SHA1r5 r r r r r? ` s r? c @ s e Zd ZeZdS )�PrivateDSANSEC3SHA1N)r0 r1 r2 r? r< r r r r r@ d s r@ )r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zdns.dnssecalgs.cryptographyr r Zdns.dnssectypesr Zdns.rdtypes.ANY.DNSKEYr r r8 r? r@ r r r r �<module> s 6 __pycache__/dsa.cpython-39.pyc 0000644 00000007263 15111603167 0012165 0 ustar 00 a �M�e� � @ s� d dl Z d dlmZ d dlmZ d dlmZmZ d dlm Z m Z d dl m Z d dl mZ G dd � d e �ZG d d � d e �ZG d d � d e�ZG dd� de�ZdS )� N)�default_backend)�hashes)�dsa�utils)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc @ s` e Zd ZU ejed< ejZejZ e � � Z e e dd�dd�Ze d�dd�Zeed d �d d ��ZdS ) � PublicDSA�keyN)� signature�data�returnc C sJ |dd� }|dd � }t �t�|d�t�|d��}| j�||| j� d S )N� � �big)r Zencode_dss_signature�int� from_bytesr �verify� chosen_hash)�selfr r Zsig_rZsig_sZsig� r �6/usr/lib/python3.9/site-packages/dns/dnssecalgs/dsa.pyr s �zPublicDSA.verify)r c C s� | j �� }| j jd d d }|dkr.td��d|d }t�d|�}||jj�dd�7 }||jj �|d�7 }||jj �|d�7 }||j �|d�7 }|S )z,Encode a public key per RFC 2536, section 2.� �@ zunsupported DSA key size�!B� r ) r Zpublic_numbers�key_size� ValueError�struct�packZparameter_numbers�q�to_bytes�p�g�y)r Zpn�dsa_t�octets�resr r r �encode_key_bytes s zPublicDSA.encode_key_bytes)r r c C s� | � |� |j}t�d|dd� �\}|dd � }d|d }|dd� }|dd � }|d|� }||d � }|d|� }||d � }|d|� }| t�t�|d�t�t�|d�t�|d�t�|d���� t � �d�S ) Nr r r r r r r �r ) Z!_ensure_algorithm_key_combinationr r �unpackr ZDSAPublicNumbersr r ZDSAParameterNumbers� public_keyr ) �clsr Zkeyptr�tr' Zdsa_qZdsa_pZdsa_gZdsa_yr r r � from_dnskey( s0 ����zPublicDSA.from_dnskey)�__name__� __module__� __qualname__r Z DSAPublicKey�__annotations__�key_clsr ZDSA� algorithmr ZSHA1r �bytesr r) � classmethodr r/ r r r r r s r c @ sJ e Zd ZU ejed< ejZeZd e e e d�dd�Z e e d d�dd��Zd S ) � PrivateDSAr F)r r r c C s� | j �� }|jdkr td��| j �|| jj�}t�|�\}}|jd d d }d}t � d|�t j ||dd� t j ||dd� } |r�| �� � | |� | S ) z1Sign using a private key per RFC 2536, section 3.i zDSA key size overflowr r r r r )�length� byteorder)r r, r r �sign� public_clsr r Zdecode_dss_signaturer r r r" r ) r r r Zpublic_dsa_keyZ der_signatureZdsa_rZdsa_sr& r' r r r r r; G s ���zPrivateDSA.sign)r r c C s | t j|d�d�S )N)r r* )r Zgenerate_private_key)r- r r r r �generateY s �zPrivateDSA.generateN)F)r0 r1 r2 r Z DSAPrivateKeyr3 r4 r r< r6 �boolr; r7 r r= r r r r r8 B s r8 c @ s e Zd ZejZdS )�PublicDSANSEC3SHA1N)r0 r1 r2 r Z DSANSEC3SHA1r5 r r r r r? ` s r? c @ s e Zd ZeZdS )�PrivateDSANSEC3SHA1N)r0 r1 r2 r? r< r r r r r@ d s r@ )r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zdns.dnssecalgs.cryptographyr r Zdns.dnssectypesr Zdns.rdtypes.ANY.DNSKEYr r r8 r? r@ r r r r �<module> s 6 __pycache__/ecdsa.cpython-39.opt-1.pyc 0000644 00000007353 15111603167 0013434 0 ustar 00 a �M�e� � @ s� d dl mZ d dlmZ d dlmZmZ d dlmZm Z d dl m Z d dl m Z G dd� de �ZG d d � d e�ZG d d � d e�ZG d d� de�ZG dd� de�ZG dd� de�ZdS )� )�default_backend)�hashes)�ec�utils)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc @ sv e Zd ZU ejed< ejZeed< ej ed< ej ed< e ed< e e dd�dd �Z e d �d d �Zeed d �dd��ZdS )� PublicECDSA�key� algorithm� chosen_hash�curve�octetsN)� signature�data�returnc C sT |d| j � }|| j d � }t�t�|d�t�|d��}| j�||t�| j �� d S )Nr �big) r r Zencode_dss_signature�int� from_bytesr �verifyr �ECDSAr )�selfr r Zsig_rZsig_sZsig� r �8/usr/lib/python3.9/site-packages/dns/dnssecalgs/ecdsa.pyr s �zPublicECDSA.verify�r c C s* | j �� }|j�| jd�|j�| jd� S )z,Encode a public key per RFC 6605, section 4.r )r Zpublic_numbers�x�to_bytesr �y)r Zpnr r r �encode_key_bytes s z PublicECDSA.encode_key_bytes)r r c C s` | � |� |jd| j� }|j| j| jd � }| tj| jt�|d�t�|d�d��t � �d�S )Nr � r )r r r �r ) Z!_ensure_algorithm_key_combinationr r r ZEllipticCurvePublicNumbersr r r � public_keyr )�clsr Zecdsa_xZecdsa_yr r r � from_dnskey s ���zPublicECDSA.from_dnskey)�__name__� __module__� __qualname__r ZEllipticCurvePublicKey�__annotations__�key_clsr r Z HashAlgorithmZ EllipticCurver �bytesr r � classmethodr r$ r r r r r s r c @ sH e Zd ZU ejed< ejZeZd e e e d�dd�Z e d d�dd��Z d S ) � PrivateECDSAr F)r r r c C sf | j �|t�| jj��}t�|�\}}tj || jj dd�tj || jj dd� }|rb| � � � ||� |S )z1Sign using a private key per RFC 6605, section 4.r )�length� byteorder) r �signr r � public_clsr r Zdecode_dss_signaturer r r r" r )r r r Z der_signatureZdsa_rZdsa_sr r r r r/ 2 s ��zPrivateECDSA.signr c C s | t j| jjt� d�d�S )N)r Zbackendr! )r Zgenerate_private_keyr0 r r )r# r r r �generate= s ��zPrivateECDSA.generateN)F)r% r& r' r ZEllipticCurvePrivateKeyr( r) r r0 r* �boolr/ r+ r1 r r r r r, - s r, c @ s& e Zd ZejZe�� Ze � � Z dZ dS )�PublicECDSAP256SHA256� N) r% r& r' r ZECDSAP256SHA256r r ZSHA256r r Z SECP256R1r r r r r r r3 F s r3 c @ s e Zd ZeZdS )�PrivateECDSAP256SHA256N)r% r& r' r3 r0 r r r r r5 M s r5 c @ s& e Zd ZejZe�� Ze � � Z dZ dS )�PublicECDSAP384SHA384�0 N) r% r& r' r ZECDSAP384SHA384r r ZSHA384r r Z SECP384R1r r r r r r r6 Q s r6 c @ s e Zd ZeZdS )�PrivateECDSAP384SHA384N)r% r& r' r6 r0 r r r r r8 X s r8 N)Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zdns.dnssecalgs.cryptographyr r Zdns.dnssectypesr Zdns.rdtypes.ANY.DNSKEYr r r, r3 r5 r6 r8 r r r r �<module> s # __pycache__/ecdsa.cpython-39.pyc 0000644 00000007353 15111603167 0012475 0 ustar 00 a �M�e� � @ s� d dl mZ d dlmZ d dlmZmZ d dlmZm Z d dl m Z d dl m Z G dd� de �ZG d d � d e�ZG d d � d e�ZG d d� de�ZG dd� de�ZG dd� de�ZdS )� )�default_backend)�hashes)�ec�utils)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc @ sv e Zd ZU ejed< ejZeed< ej ed< ej ed< e ed< e e dd�dd �Z e d �d d �Zeed d �dd��ZdS )� PublicECDSA�key� algorithm� chosen_hash�curve�octetsN)� signature�data�returnc C sT |d| j � }|| j d � }t�t�|d�t�|d��}| j�||t�| j �� d S )Nr �big) r r Zencode_dss_signature�int� from_bytesr �verifyr �ECDSAr )�selfr r Zsig_rZsig_sZsig� r �8/usr/lib/python3.9/site-packages/dns/dnssecalgs/ecdsa.pyr s �zPublicECDSA.verify�r c C s* | j �� }|j�| jd�|j�| jd� S )z,Encode a public key per RFC 6605, section 4.r )r Zpublic_numbers�x�to_bytesr �y)r Zpnr r r �encode_key_bytes s z PublicECDSA.encode_key_bytes)r r c C s` | � |� |jd| j� }|j| j| jd � }| tj| jt�|d�t�|d�d��t � �d�S )Nr � r )r r r �r ) Z!_ensure_algorithm_key_combinationr r r ZEllipticCurvePublicNumbersr r r � public_keyr )�clsr Zecdsa_xZecdsa_yr r r � from_dnskey s ���zPublicECDSA.from_dnskey)�__name__� __module__� __qualname__r ZEllipticCurvePublicKey�__annotations__�key_clsr r Z HashAlgorithmZ EllipticCurver �bytesr r � classmethodr r$ r r r r r s r c @ sH e Zd ZU ejed< ejZeZd e e e d�dd�Z e d d�dd��Z d S ) � PrivateECDSAr F)r r r c C sf | j �|t�| jj��}t�|�\}}tj || jj dd�tj || jj dd� }|rb| � � � ||� |S )z1Sign using a private key per RFC 6605, section 4.r )�length� byteorder) r �signr r � public_clsr r Zdecode_dss_signaturer r r r" r )r r r Z der_signatureZdsa_rZdsa_sr r r r r/ 2 s ��zPrivateECDSA.signr c C s | t j| jjt� d�d�S )N)r Zbackendr! )r Zgenerate_private_keyr0 r r )r# r r r �generate= s ��zPrivateECDSA.generateN)F)r% r& r' r ZEllipticCurvePrivateKeyr( r) r r0 r* �boolr/ r+ r1 r r r r r, - s r, c @ s& e Zd ZejZe�� Ze � � Z dZ dS )�PublicECDSAP256SHA256� N) r% r& r' r ZECDSAP256SHA256r r ZSHA256r r Z SECP256R1r r r r r r r3 F s r3 c @ s e Zd ZeZdS )�PrivateECDSAP256SHA256N)r% r& r' r3 r0 r r r r r5 M s r5 c @ s& e Zd ZejZe�� Ze � � Z dZ dS )�PublicECDSAP384SHA384�0 N) r% r& r' r ZECDSAP384SHA384r r ZSHA384r r Z SECP384R1r r r r r r r6 Q s r6 c @ s e Zd ZeZdS )�PrivateECDSAP384SHA384N)r% r& r' r6 r0 r r r r r8 X s r8 N)Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zdns.dnssecalgs.cryptographyr r Zdns.dnssectypesr Zdns.rdtypes.ANY.DNSKEYr r r, r3 r5 r6 r8 r r r r �<module> s # __pycache__/eddsa.cpython-39.opt-1.pyc 0000644 00000005665 15111603167 0013441 0 ustar 00 a �M�ez � @ s� d dl mZ d dlmZ d dlmZmZ d dlmZm Z d dl m Z d dl m Z G dd� de �ZG d d � d e�ZG d d � d e�ZG d d� de�ZG dd� de�ZG dd� de�ZdS )� )�Type)� serialization)�ed448�ed25519)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc @ s@ e Zd Zeedd�dd�Zed�dd�Zeed d�d d ��ZdS ) � PublicEDDSAN)� signature�data�returnc C s | j �||� d S )N)�key�verify)�selfr r � r �8/usr/lib/python3.9/site-packages/dns/dnssecalgs/eddsa.pyr s zPublicEDDSA.verify�r c C s | j jtjjtjjd�S )z,Encode a public key per RFC 8080, section 3.)�encoding�format)r Z public_bytesr ZEncodingZRawZ PublicFormat)r r r r �encode_key_bytes s �z PublicEDDSA.encode_key_bytes)r r c C s | � |� | | j�|j�d�S �N)r )Z!_ensure_algorithm_key_combination�key_clsZfrom_public_bytesr )�clsr r r r � from_dnskey s �zPublicEDDSA.from_dnskey) �__name__� __module__� __qualname__�bytesr r � classmethodr r r r r r r s r c @ s@ e Zd ZU ee ed< d eeed�dd�Ze d d�dd��Z d S ) � PrivateEDDSA� public_clsF)r r r c C s$ | j �|�}|r | �� �||� |S )z1Sign using a private key per RFC 8080, section 4.)r �signZ public_keyr )r r r r r r r r" s zPrivateEDDSA.signr c C s | | j �� d�S r )r �generate)r r r r r# ' s zPrivateEDDSA.generateN)F) r r r r r �__annotations__r �boolr" r r# r r r r r s r c @ s$ e Zd ZU ejed< ejZejZ dS )� PublicED25519r N) r r r r ZEd25519PublicKeyr$ r r ZED25519� algorithmr r r r r& , s r& c @ s" e Zd ZU ejed< ejZeZdS )�PrivateED25519r N) r r r r ZEd25519PrivateKeyr$ r r& r! r r r r r( 2 s r( c @ s$ e Zd ZU ejed< ejZejZ dS )� PublicED448r N) r r r r ZEd448PublicKeyr$ r r ZED448r' r r r r r) 8 s r) c @ s" e Zd ZU ejed< ejZeZdS )� PrivateED448r N) r r r r ZEd448PrivateKeyr$ r r) r! r r r r r* > s r* N)�typingr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zdns.dnssecalgs.cryptographyr r Zdns.dnssectypesr Zdns.rdtypes.ANY.DNSKEYr r r r& r( r) r* r r r r �<module> s __pycache__/eddsa.cpython-39.pyc 0000644 00000005665 15111603167 0012502 0 ustar 00 a �M�ez � @ s� d dl mZ d dlmZ d dlmZmZ d dlmZm Z d dl m Z d dl m Z G dd� de �ZG d d � d e�ZG d d � d e�ZG d d� de�ZG dd� de�ZG dd� de�ZdS )� )�Type)� serialization)�ed448�ed25519)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc @ s@ e Zd Zeedd�dd�Zed�dd�Zeed d�d d ��ZdS ) � PublicEDDSAN)� signature�data�returnc C s | j �||� d S )N)�key�verify)�selfr r � r �8/usr/lib/python3.9/site-packages/dns/dnssecalgs/eddsa.pyr s zPublicEDDSA.verify�r c C s | j jtjjtjjd�S )z,Encode a public key per RFC 8080, section 3.)�encoding�format)r Z public_bytesr ZEncodingZRawZ PublicFormat)r r r r �encode_key_bytes s �z PublicEDDSA.encode_key_bytes)r r c C s | � |� | | j�|j�d�S �N)r )Z!_ensure_algorithm_key_combination�key_clsZfrom_public_bytesr )�clsr r r r � from_dnskey s �zPublicEDDSA.from_dnskey) �__name__� __module__� __qualname__�bytesr r � classmethodr r r r r r r s r c @ s@ e Zd ZU ee ed< d eeed�dd�Ze d d�dd��Z d S ) � PrivateEDDSA� public_clsF)r r r c C s$ | j �|�}|r | �� �||� |S )z1Sign using a private key per RFC 8080, section 4.)r �signZ public_keyr )r r r r r r r r" s zPrivateEDDSA.signr c C s | | j �� d�S r )r �generate)r r r r r# ' s zPrivateEDDSA.generateN)F) r r r r r �__annotations__r �boolr" r r# r r r r r s r c @ s$ e Zd ZU ejed< ejZejZ dS )� PublicED25519r N) r r r r ZEd25519PublicKeyr$ r r ZED25519� algorithmr r r r r& , s r& c @ s" e Zd ZU ejed< ejZeZdS )�PrivateED25519r N) r r r r ZEd25519PrivateKeyr$ r r& r! r r r r r( 2 s r( c @ s$ e Zd ZU ejed< ejZejZ dS )� PublicED448r N) r r r r ZEd448PublicKeyr$ r r ZED448r' r r r r r) 8 s r) c @ s" e Zd ZU ejed< ejZeZdS )� PrivateED448r N) r r r r ZEd448PrivateKeyr$ r r) r! r r r r r* > s r* N)�typingr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zdns.dnssecalgs.cryptographyr r Zdns.dnssectypesr Zdns.rdtypes.ANY.DNSKEYr r r r& r( r) r* r r r r �<module> s __pycache__/rsa.cpython-39.opt-1.pyc 0000644 00000011354 15111603167 0013136 0 ustar 00 a �M�e� � @ s$ d dl Z d dlZd dlmZ d dlmZ d dlmZmZ d dl m Z m Z d dl m Z d dlmZ G dd � d e �ZG d d � d e �ZG d d � d e�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG d d � d e�ZG d d � d e�ZdS ) � N)�default_backend)�hashes)�padding�rsa)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc @ sd e Zd ZU ejed< ejZeed< ej ed< e e dd�dd�Z e d�d d �Z e ed d �d d ��ZdS )� PublicRSA�key� algorithm� chosen_hashN)� signature�data�returnc C s | j �||t�� | j� d S )N)r �verifyr �PKCS1v15r )�selfr r � r �6/usr/lib/python3.9/site-packages/dns/dnssecalgs/rsa.pyr s zPublicRSA.verify)r c C s� | j �� }t�t�|j�d �}tj|j|dd�}|dkrLdt� d|� }n t� d|�}|j �� dk st|j �� d kr|t d ��|| |j �|j �� d d d� S ) z,Encode a public key per RFC 3110, section 2.� �big)�length� byteorder� � �!H�!Bi i zunsupported RSA key length� ) r Zpublic_numbers�mathZceil�int� bit_length�e�to_bytes�struct�pack�n� ValueError)r ZpnZ_exp_lenZexpZ exp_headerr r r �encode_key_bytes s zPublicRSA.encode_key_bytes)r r c C s� | � |� |j}t�d|dd� �\}|dd � }|dkr\t�d|dd� �\}|dd � }|d|� }||d � }| t�t�|d�t�|d���t � �d�S )Nr r � r � r �r ) Z!_ensure_algorithm_key_combinationr r$ �unpackr ZRSAPublicNumbersr � from_bytes� public_keyr )�clsr ZkeyptrZbytes_Zrsa_eZrsa_nr r r � from_dnskey# s ���zPublicRSA.from_dnskey)�__name__� __module__� __qualname__r Z RSAPublicKey�__annotations__�key_clsr r Z HashAlgorithm�bytesr r( � classmethodr r0 r r r r r s r c @ sN e Zd ZU ejed< ejZeZdZ d e e e d�dd�Z e ed d�dd ��Zd S ) � PrivateRSAr i F)r r r c C s0 | j �|t�� | jj�}|r,| �� �||� |S )z1Sign using a private key per RFC 3110, section 3.)r �signr r � public_clsr r. r )r r r r r r r r9 ; s zPrivateRSA.sign)�key_sizer c C s | t j| j|t� d�d�S )N)Zpublic_exponentr; Zbackendr+ )r Zgenerate_private_key�default_public_exponentr )r/ r; r r r �generateB s ��zPrivateRSA.generateN)F)r1 r2 r3 r Z RSAPrivateKeyr4 r5 r r: r< r6 �boolr9 r7 r r= r r r r r8 5 s r8 c @ s e Zd ZejZe�� ZdS )� PublicRSAMD5N) r1 r2 r3 r ZRSAMD5r r ZMD5r r r r r r? M s r? c @ s e Zd ZeZdS )� PrivateRSAMD5N)r1 r2 r3 r? r: r r r r r@ R s r@ c @ s e Zd ZejZe�� ZdS )� PublicRSASHA1N) r1 r2 r3 r ZRSASHA1r r �SHA1r r r r r rA V s rA c @ s e Zd ZeZdS )�PrivateRSASHA1N)r1 r2 r3 rA r: r r r r rC [ s rC c @ s e Zd ZejZe�� ZdS )�PublicRSASHA1NSEC3SHA1N) r1 r2 r3 r ZRSASHA1NSEC3SHA1r r rB r r r r r rD _ s rD c @ s e Zd ZeZdS )�PrivateRSASHA1NSEC3SHA1N)r1 r2 r3 rD r: r r r r rE d s rE c @ s e Zd ZejZe�� ZdS )�PublicRSASHA256N) r1 r2 r3 r Z RSASHA256r r ZSHA256r r r r r rF h s rF c @ s e Zd ZeZdS )�PrivateRSASHA256N)r1 r2 r3 rF r: r r r r rG m s rG c @ s e Zd ZejZe�� ZdS )�PublicRSASHA512N) r1 r2 r3 r Z RSASHA512r r ZSHA512r r r r r rH q s rH c @ s e Zd ZeZdS )�PrivateRSASHA512N)r1 r2 r3 rH r: r r r r rI v s rI ) r r$ Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zdns.dnssecalgs.cryptographyr r Zdns.dnssectypesr Zdns.rdtypes.ANY.DNSKEYr r r8 r? r@ rA rC rD rE rF rG rH rI r r r r �<module> s& ( __pycache__/rsa.cpython-39.pyc 0000644 00000011354 15111603167 0012177 0 ustar 00 a �M�e� � @ s$ d dl Z d dlZd dlmZ d dlmZ d dlmZmZ d dl m Z m Z d dl m Z d dlmZ G dd � d e �ZG d d � d e �ZG d d � d e�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG d d � d e�ZG d d � d e�ZdS ) � N)�default_backend)�hashes)�padding�rsa)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc @ sd e Zd ZU ejed< ejZeed< ej ed< e e dd�dd�Z e d�d d �Z e ed d �d d ��ZdS )� PublicRSA�key� algorithm� chosen_hashN)� signature�data�returnc C s | j �||t�� | j� d S )N)r �verifyr �PKCS1v15r )�selfr r � r �6/usr/lib/python3.9/site-packages/dns/dnssecalgs/rsa.pyr s zPublicRSA.verify)r c C s� | j �� }t�t�|j�d �}tj|j|dd�}|dkrLdt� d|� }n t� d|�}|j �� dk st|j �� d kr|t d ��|| |j �|j �� d d d� S ) z,Encode a public key per RFC 3110, section 2.� �big)�length� byteorder� � �!H�!Bi i zunsupported RSA key length� ) r Zpublic_numbers�mathZceil�int� bit_length�e�to_bytes�struct�pack�n� ValueError)r ZpnZ_exp_lenZexpZ exp_headerr r r �encode_key_bytes s zPublicRSA.encode_key_bytes)r r c C s� | � |� |j}t�d|dd� �\}|dd � }|dkr\t�d|dd� �\}|dd � }|d|� }||d � }| t�t�|d�t�|d���t � �d�S )Nr r � r � r �r ) Z!_ensure_algorithm_key_combinationr r$ �unpackr ZRSAPublicNumbersr � from_bytes� public_keyr )�clsr ZkeyptrZbytes_Zrsa_eZrsa_nr r r � from_dnskey# s ���zPublicRSA.from_dnskey)�__name__� __module__� __qualname__r Z RSAPublicKey�__annotations__�key_clsr r Z HashAlgorithm�bytesr r( � classmethodr r0 r r r r r s r c @ sN e Zd ZU ejed< ejZeZdZ d e e e d�dd�Z e ed d�dd ��Zd S ) � PrivateRSAr i F)r r r c C s0 | j �|t�� | jj�}|r,| �� �||� |S )z1Sign using a private key per RFC 3110, section 3.)r �signr r � public_clsr r. r )r r r r r r r r9 ; s zPrivateRSA.sign)�key_sizer c C s | t j| j|t� d�d�S )N)Zpublic_exponentr; Zbackendr+ )r Zgenerate_private_key�default_public_exponentr )r/ r; r r r �generateB s ��zPrivateRSA.generateN)F)r1 r2 r3 r Z RSAPrivateKeyr4 r5 r r: r< r6 �boolr9 r7 r r= r r r r r8 5 s r8 c @ s e Zd ZejZe�� ZdS )� PublicRSAMD5N) r1 r2 r3 r ZRSAMD5r r ZMD5r r r r r r? M s r? c @ s e Zd ZeZdS )� PrivateRSAMD5N)r1 r2 r3 r? r: r r r r r@ R s r@ c @ s e Zd ZejZe�� ZdS )� PublicRSASHA1N) r1 r2 r3 r ZRSASHA1r r �SHA1r r r r r rA V s rA c @ s e Zd ZeZdS )�PrivateRSASHA1N)r1 r2 r3 rA r: r r r r rC [ s rC c @ s e Zd ZejZe�� ZdS )�PublicRSASHA1NSEC3SHA1N) r1 r2 r3 r ZRSASHA1NSEC3SHA1r r rB r r r r r rD _ s rD c @ s e Zd ZeZdS )�PrivateRSASHA1NSEC3SHA1N)r1 r2 r3 rD r: r r r r rE d s rE c @ s e Zd ZejZe�� ZdS )�PublicRSASHA256N) r1 r2 r3 r Z RSASHA256r r ZSHA256r r r r r rF h s rF c @ s e Zd ZeZdS )�PrivateRSASHA256N)r1 r2 r3 rF r: r r r r rG m s rG c @ s e Zd ZejZe�� ZdS )�PublicRSASHA512N) r1 r2 r3 r Z RSASHA512r r ZSHA512r r r r r rH q s rH c @ s e Zd ZeZdS )�PrivateRSASHA512N)r1 r2 r3 rH r: r r r r rI v s rI ) r r$ Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr Z)cryptography.hazmat.primitives.asymmetricr r Zdns.dnssecalgs.cryptographyr r Zdns.dnssectypesr Zdns.rdtypes.ANY.DNSKEYr r r8 r? r@ rA rC rD rE rF rG rH rI r r r r �<module> s& ( __init__.py 0000644 00000010267 15111603167 0006664 0 ustar 00 from typing import Dict, Optional, Tuple, Type, Union import dns.name from dns.dnssecalgs.base import GenericPrivateKey from dns.dnssectypes import Algorithm from dns.exception import UnsupportedAlgorithm from dns.rdtypes.ANY.DNSKEY import DNSKEY if dns._features.have("dnssec"): from dns.dnssecalgs.dsa import PrivateDSA, PrivateDSANSEC3SHA1 from dns.dnssecalgs.ecdsa import PrivateECDSAP256SHA256, PrivateECDSAP384SHA384 from dns.dnssecalgs.eddsa import PrivateED448, PrivateED25519 from dns.dnssecalgs.rsa import ( PrivateRSAMD5, PrivateRSASHA1, PrivateRSASHA1NSEC3SHA1, PrivateRSASHA256, PrivateRSASHA512, ) _have_cryptography = True else: _have_cryptography = False AlgorithmPrefix = Optional[Union[bytes, dns.name.Name]] algorithms: Dict[Tuple[Algorithm, AlgorithmPrefix], Type[GenericPrivateKey]] = {} if _have_cryptography: algorithms.update( { (Algorithm.RSAMD5, None): PrivateRSAMD5, (Algorithm.DSA, None): PrivateDSA, (Algorithm.RSASHA1, None): PrivateRSASHA1, (Algorithm.DSANSEC3SHA1, None): PrivateDSANSEC3SHA1, (Algorithm.RSASHA1NSEC3SHA1, None): PrivateRSASHA1NSEC3SHA1, (Algorithm.RSASHA256, None): PrivateRSASHA256, (Algorithm.RSASHA512, None): PrivateRSASHA512, (Algorithm.ECDSAP256SHA256, None): PrivateECDSAP256SHA256, (Algorithm.ECDSAP384SHA384, None): PrivateECDSAP384SHA384, (Algorithm.ED25519, None): PrivateED25519, (Algorithm.ED448, None): PrivateED448, } ) def get_algorithm_cls( algorithm: Union[int, str], prefix: AlgorithmPrefix = None ) -> Type[GenericPrivateKey]: """Get Private Key class from Algorithm. *algorithm*, a ``str`` or ``int`` specifying the DNSKEY algorithm. Raises ``UnsupportedAlgorithm`` if the algorithm is unknown. Returns a ``dns.dnssecalgs.GenericPrivateKey`` """ algorithm = Algorithm.make(algorithm) cls = algorithms.get((algorithm, prefix)) if cls: return cls raise UnsupportedAlgorithm( 'algorithm "%s" not supported by dnspython' % Algorithm.to_text(algorithm) ) def get_algorithm_cls_from_dnskey(dnskey: DNSKEY) -> Type[GenericPrivateKey]: """Get Private Key class from DNSKEY. *dnskey*, a ``DNSKEY`` to get Algorithm class for. Raises ``UnsupportedAlgorithm`` if the algorithm is unknown. Returns a ``dns.dnssecalgs.GenericPrivateKey`` """ prefix: AlgorithmPrefix = None if dnskey.algorithm == Algorithm.PRIVATEDNS: prefix, _ = dns.name.from_wire(dnskey.key, 0) elif dnskey.algorithm == Algorithm.PRIVATEOID: length = int(dnskey.key[0]) prefix = dnskey.key[0 : length + 1] return get_algorithm_cls(dnskey.algorithm, prefix) def register_algorithm_cls( algorithm: Union[int, str], algorithm_cls: Type[GenericPrivateKey], name: Optional[Union[dns.name.Name, str]] = None, oid: Optional[bytes] = None, ) -> None: """Register Algorithm Private Key class. *algorithm*, a ``str`` or ``int`` specifying the DNSKEY algorithm. *algorithm_cls*: A `GenericPrivateKey` class. *name*, an optional ``dns.name.Name`` or ``str``, for for PRIVATEDNS algorithms. *oid*: an optional BER-encoded `bytes` for PRIVATEOID algorithms. Raises ``ValueError`` if a name or oid is specified incorrectly. """ if not issubclass(algorithm_cls, GenericPrivateKey): raise TypeError("Invalid algorithm class") algorithm = Algorithm.make(algorithm) prefix: AlgorithmPrefix = None if algorithm == Algorithm.PRIVATEDNS: if name is None: raise ValueError("Name required for PRIVATEDNS algorithms") if isinstance(name, str): name = dns.name.from_text(name) prefix = name elif algorithm == Algorithm.PRIVATEOID: if oid is None: raise ValueError("OID required for PRIVATEOID algorithms") prefix = bytes([len(oid)]) + oid elif name: raise ValueError("Name only supported for PRIVATEDNS algorithm") elif oid: raise ValueError("OID only supported for PRIVATEOID algorithm") algorithms[(algorithm, prefix)] = algorithm_cls base.py 0000644 00000004616 15111603167 0006040 0 ustar 00 from abc import ABC, abstractmethod # pylint: disable=no-name-in-module from typing import Any, Optional, Type import dns.rdataclass import dns.rdatatype from dns.dnssectypes import Algorithm from dns.exception import AlgorithmKeyMismatch from dns.rdtypes.ANY.DNSKEY import DNSKEY from dns.rdtypes.dnskeybase import Flag class GenericPublicKey(ABC): algorithm: Algorithm @abstractmethod def __init__(self, key: Any) -> None: pass @abstractmethod def verify(self, signature: bytes, data: bytes) -> None: """Verify signed DNSSEC data""" @abstractmethod def encode_key_bytes(self) -> bytes: """Encode key as bytes for DNSKEY""" @classmethod def _ensure_algorithm_key_combination(cls, key: DNSKEY) -> None: if key.algorithm != cls.algorithm: raise AlgorithmKeyMismatch def to_dnskey(self, flags: int = Flag.ZONE, protocol: int = 3) -> DNSKEY: """Return public key as DNSKEY""" return DNSKEY( rdclass=dns.rdataclass.IN, rdtype=dns.rdatatype.DNSKEY, flags=flags, protocol=protocol, algorithm=self.algorithm, key=self.encode_key_bytes(), ) @classmethod @abstractmethod def from_dnskey(cls, key: DNSKEY) -> "GenericPublicKey": """Create public key from DNSKEY""" @classmethod @abstractmethod def from_pem(cls, public_pem: bytes) -> "GenericPublicKey": """Create public key from PEM-encoded SubjectPublicKeyInfo as specified in RFC 5280""" @abstractmethod def to_pem(self) -> bytes: """Return public-key as PEM-encoded SubjectPublicKeyInfo as specified in RFC 5280""" class GenericPrivateKey(ABC): public_cls: Type[GenericPublicKey] @abstractmethod def __init__(self, key: Any) -> None: pass @abstractmethod def sign(self, data: bytes, verify: bool = False) -> bytes: """Sign DNSSEC data""" @abstractmethod def public_key(self) -> "GenericPublicKey": """Return public key instance""" @classmethod @abstractmethod def from_pem( cls, private_pem: bytes, password: Optional[bytes] = None ) -> "GenericPrivateKey": """Create private key from PEM-encoded PKCS#8""" @abstractmethod def to_pem(self, password: Optional[bytes] = None) -> bytes: """Return private key as PEM-encoded PKCS#8""" cryptography.py 0000644 00000004571 15111603167 0007661 0 ustar 00 from typing import Any, Optional, Type from cryptography.hazmat.primitives import serialization from dns.dnssecalgs.base import GenericPrivateKey, GenericPublicKey from dns.exception import AlgorithmKeyMismatch class CryptographyPublicKey(GenericPublicKey): key: Any = None key_cls: Any = None def __init__(self, key: Any) -> None: # pylint: disable=super-init-not-called if self.key_cls is None: raise TypeError("Undefined private key class") if not isinstance( # pylint: disable=isinstance-second-argument-not-valid-type key, self.key_cls ): raise AlgorithmKeyMismatch self.key = key @classmethod def from_pem(cls, public_pem: bytes) -> "GenericPublicKey": key = serialization.load_pem_public_key(public_pem) return cls(key=key) def to_pem(self) -> bytes: return self.key.public_bytes( encoding=serialization.Encoding.PEM, format=serialization.PublicFormat.SubjectPublicKeyInfo, ) class CryptographyPrivateKey(GenericPrivateKey): key: Any = None key_cls: Any = None public_cls: Type[CryptographyPublicKey] def __init__(self, key: Any) -> None: # pylint: disable=super-init-not-called if self.key_cls is None: raise TypeError("Undefined private key class") if not isinstance( # pylint: disable=isinstance-second-argument-not-valid-type key, self.key_cls ): raise AlgorithmKeyMismatch self.key = key def public_key(self) -> "CryptographyPublicKey": return self.public_cls(key=self.key.public_key()) @classmethod def from_pem( cls, private_pem: bytes, password: Optional[bytes] = None ) -> "GenericPrivateKey": key = serialization.load_pem_private_key(private_pem, password=password) return cls(key=key) def to_pem(self, password: Optional[bytes] = None) -> bytes: encryption_algorithm: serialization.KeySerializationEncryption if password: encryption_algorithm = serialization.BestAvailableEncryption(password) else: encryption_algorithm = serialization.NoEncryption() return self.key.private_bytes( encoding=serialization.Encoding.PEM, format=serialization.PrivateFormat.PKCS8, encryption_algorithm=encryption_algorithm, ) dsa.py 0000644 00000006651 15111603167 0005676 0 ustar 00 import struct from cryptography.hazmat.backends import default_backend from cryptography.hazmat.primitives import hashes from cryptography.hazmat.primitives.asymmetric import dsa, utils from dns.dnssecalgs.cryptography import CryptographyPrivateKey, CryptographyPublicKey from dns.dnssectypes import Algorithm from dns.rdtypes.ANY.DNSKEY import DNSKEY class PublicDSA(CryptographyPublicKey): key: dsa.DSAPublicKey key_cls = dsa.DSAPublicKey algorithm = Algorithm.DSA chosen_hash = hashes.SHA1() def verify(self, signature: bytes, data: bytes) -> None: sig_r = signature[1:21] sig_s = signature[21:] sig = utils.encode_dss_signature( int.from_bytes(sig_r, "big"), int.from_bytes(sig_s, "big") ) self.key.verify(sig, data, self.chosen_hash) def encode_key_bytes(self) -> bytes: """Encode a public key per RFC 2536, section 2.""" pn = self.key.public_numbers() dsa_t = (self.key.key_size // 8 - 64) // 8 if dsa_t > 8: raise ValueError("unsupported DSA key size") octets = 64 + dsa_t * 8 res = struct.pack("!B", dsa_t) res += pn.parameter_numbers.q.to_bytes(20, "big") res += pn.parameter_numbers.p.to_bytes(octets, "big") res += pn.parameter_numbers.g.to_bytes(octets, "big") res += pn.y.to_bytes(octets, "big") return res @classmethod def from_dnskey(cls, key: DNSKEY) -> "PublicDSA": cls._ensure_algorithm_key_combination(key) keyptr = key.key (t,) = struct.unpack("!B", keyptr[0:1]) keyptr = keyptr[1:] octets = 64 + t * 8 dsa_q = keyptr[0:20] keyptr = keyptr[20:] dsa_p = keyptr[0:octets] keyptr = keyptr[octets:] dsa_g = keyptr[0:octets] keyptr = keyptr[octets:] dsa_y = keyptr[0:octets] return cls( key=dsa.DSAPublicNumbers( # type: ignore int.from_bytes(dsa_y, "big"), dsa.DSAParameterNumbers( int.from_bytes(dsa_p, "big"), int.from_bytes(dsa_q, "big"), int.from_bytes(dsa_g, "big"), ), ).public_key(default_backend()), ) class PrivateDSA(CryptographyPrivateKey): key: dsa.DSAPrivateKey key_cls = dsa.DSAPrivateKey public_cls = PublicDSA def sign(self, data: bytes, verify: bool = False) -> bytes: """Sign using a private key per RFC 2536, section 3.""" public_dsa_key = self.key.public_key() if public_dsa_key.key_size > 1024: raise ValueError("DSA key size overflow") der_signature = self.key.sign(data, self.public_cls.chosen_hash) dsa_r, dsa_s = utils.decode_dss_signature(der_signature) dsa_t = (public_dsa_key.key_size // 8 - 64) // 8 octets = 20 signature = ( struct.pack("!B", dsa_t) + int.to_bytes(dsa_r, length=octets, byteorder="big") + int.to_bytes(dsa_s, length=octets, byteorder="big") ) if verify: self.public_key().verify(signature, data) return signature @classmethod def generate(cls, key_size: int) -> "PrivateDSA": return cls( key=dsa.generate_private_key(key_size=key_size), ) class PublicDSANSEC3SHA1(PublicDSA): algorithm = Algorithm.DSANSEC3SHA1 class PrivateDSANSEC3SHA1(PrivateDSA): public_cls = PublicDSANSEC3SHA1 ecdsa.py 0000644 00000005710 15111603167 0006201 0 ustar 00 from cryptography.hazmat.backends import default_backend from cryptography.hazmat.primitives import hashes from cryptography.hazmat.primitives.asymmetric import ec, utils from dns.dnssecalgs.cryptography import CryptographyPrivateKey, CryptographyPublicKey from dns.dnssectypes import Algorithm from dns.rdtypes.ANY.DNSKEY import DNSKEY class PublicECDSA(CryptographyPublicKey): key: ec.EllipticCurvePublicKey key_cls = ec.EllipticCurvePublicKey algorithm: Algorithm chosen_hash: hashes.HashAlgorithm curve: ec.EllipticCurve octets: int def verify(self, signature: bytes, data: bytes) -> None: sig_r = signature[0 : self.octets] sig_s = signature[self.octets :] sig = utils.encode_dss_signature( int.from_bytes(sig_r, "big"), int.from_bytes(sig_s, "big") ) self.key.verify(sig, data, ec.ECDSA(self.chosen_hash)) def encode_key_bytes(self) -> bytes: """Encode a public key per RFC 6605, section 4.""" pn = self.key.public_numbers() return pn.x.to_bytes(self.octets, "big") + pn.y.to_bytes(self.octets, "big") @classmethod def from_dnskey(cls, key: DNSKEY) -> "PublicECDSA": cls._ensure_algorithm_key_combination(key) ecdsa_x = key.key[0 : cls.octets] ecdsa_y = key.key[cls.octets : cls.octets * 2] return cls( key=ec.EllipticCurvePublicNumbers( curve=cls.curve, x=int.from_bytes(ecdsa_x, "big"), y=int.from_bytes(ecdsa_y, "big"), ).public_key(default_backend()), ) class PrivateECDSA(CryptographyPrivateKey): key: ec.EllipticCurvePrivateKey key_cls = ec.EllipticCurvePrivateKey public_cls = PublicECDSA def sign(self, data: bytes, verify: bool = False) -> bytes: """Sign using a private key per RFC 6605, section 4.""" der_signature = self.key.sign(data, ec.ECDSA(self.public_cls.chosen_hash)) dsa_r, dsa_s = utils.decode_dss_signature(der_signature) signature = int.to_bytes( dsa_r, length=self.public_cls.octets, byteorder="big" ) + int.to_bytes(dsa_s, length=self.public_cls.octets, byteorder="big") if verify: self.public_key().verify(signature, data) return signature @classmethod def generate(cls) -> "PrivateECDSA": return cls( key=ec.generate_private_key( curve=cls.public_cls.curve, backend=default_backend() ), ) class PublicECDSAP256SHA256(PublicECDSA): algorithm = Algorithm.ECDSAP256SHA256 chosen_hash = hashes.SHA256() curve = ec.SECP256R1() octets = 32 class PrivateECDSAP256SHA256(PrivateECDSA): public_cls = PublicECDSAP256SHA256 class PublicECDSAP384SHA384(PublicECDSA): algorithm = Algorithm.ECDSAP384SHA384 chosen_hash = hashes.SHA384() curve = ec.SECP384R1() octets = 48 class PrivateECDSAP384SHA384(PrivateECDSA): public_cls = PublicECDSAP384SHA384 eddsa.py 0000644 00000003572 15111603167 0006206 0 ustar 00 from typing import Type from cryptography.hazmat.primitives import serialization from cryptography.hazmat.primitives.asymmetric import ed448, ed25519 from dns.dnssecalgs.cryptography import CryptographyPrivateKey, CryptographyPublicKey from dns.dnssectypes import Algorithm from dns.rdtypes.ANY.DNSKEY import DNSKEY class PublicEDDSA(CryptographyPublicKey): def verify(self, signature: bytes, data: bytes) -> None: self.key.verify(signature, data) def encode_key_bytes(self) -> bytes: """Encode a public key per RFC 8080, section 3.""" return self.key.public_bytes( encoding=serialization.Encoding.Raw, format=serialization.PublicFormat.Raw ) @classmethod def from_dnskey(cls, key: DNSKEY) -> "PublicEDDSA": cls._ensure_algorithm_key_combination(key) return cls( key=cls.key_cls.from_public_bytes(key.key), ) class PrivateEDDSA(CryptographyPrivateKey): public_cls: Type[PublicEDDSA] def sign(self, data: bytes, verify: bool = False) -> bytes: """Sign using a private key per RFC 8080, section 4.""" signature = self.key.sign(data) if verify: self.public_key().verify(signature, data) return signature @classmethod def generate(cls) -> "PrivateEDDSA": return cls(key=cls.key_cls.generate()) class PublicED25519(PublicEDDSA): key: ed25519.Ed25519PublicKey key_cls = ed25519.Ed25519PublicKey algorithm = Algorithm.ED25519 class PrivateED25519(PrivateEDDSA): key: ed25519.Ed25519PrivateKey key_cls = ed25519.Ed25519PrivateKey public_cls = PublicED25519 class PublicED448(PublicEDDSA): key: ed448.Ed448PublicKey key_cls = ed448.Ed448PublicKey algorithm = Algorithm.ED448 class PrivateED448(PrivateEDDSA): key: ed448.Ed448PrivateKey key_cls = ed448.Ed448PrivateKey public_cls = PublicED448 rsa.py 0000644 00000006743 15111603167 0005716 0 ustar 00 import math import struct from cryptography.hazmat.backends import default_backend from cryptography.hazmat.primitives import hashes from cryptography.hazmat.primitives.asymmetric import padding, rsa from dns.dnssecalgs.cryptography import CryptographyPrivateKey, CryptographyPublicKey from dns.dnssectypes import Algorithm from dns.rdtypes.ANY.DNSKEY import DNSKEY class PublicRSA(CryptographyPublicKey): key: rsa.RSAPublicKey key_cls = rsa.RSAPublicKey algorithm: Algorithm chosen_hash: hashes.HashAlgorithm def verify(self, signature: bytes, data: bytes) -> None: self.key.verify(signature, data, padding.PKCS1v15(), self.chosen_hash) def encode_key_bytes(self) -> bytes: """Encode a public key per RFC 3110, section 2.""" pn = self.key.public_numbers() _exp_len = math.ceil(int.bit_length(pn.e) / 8) exp = int.to_bytes(pn.e, length=_exp_len, byteorder="big") if _exp_len > 255: exp_header = b"\0" + struct.pack("!H", _exp_len) else: exp_header = struct.pack("!B", _exp_len) if pn.n.bit_length() < 512 or pn.n.bit_length() > 4096: raise ValueError("unsupported RSA key length") return exp_header + exp + pn.n.to_bytes((pn.n.bit_length() + 7) // 8, "big") @classmethod def from_dnskey(cls, key: DNSKEY) -> "PublicRSA": cls._ensure_algorithm_key_combination(key) keyptr = key.key (bytes_,) = struct.unpack("!B", keyptr[0:1]) keyptr = keyptr[1:] if bytes_ == 0: (bytes_,) = struct.unpack("!H", keyptr[0:2]) keyptr = keyptr[2:] rsa_e = keyptr[0:bytes_] rsa_n = keyptr[bytes_:] return cls( key=rsa.RSAPublicNumbers( int.from_bytes(rsa_e, "big"), int.from_bytes(rsa_n, "big") ).public_key(default_backend()) ) class PrivateRSA(CryptographyPrivateKey): key: rsa.RSAPrivateKey key_cls = rsa.RSAPrivateKey public_cls = PublicRSA default_public_exponent = 65537 def sign(self, data: bytes, verify: bool = False) -> bytes: """Sign using a private key per RFC 3110, section 3.""" signature = self.key.sign(data, padding.PKCS1v15(), self.public_cls.chosen_hash) if verify: self.public_key().verify(signature, data) return signature @classmethod def generate(cls, key_size: int) -> "PrivateRSA": return cls( key=rsa.generate_private_key( public_exponent=cls.default_public_exponent, key_size=key_size, backend=default_backend(), ) ) class PublicRSAMD5(PublicRSA): algorithm = Algorithm.RSAMD5 chosen_hash = hashes.MD5() class PrivateRSAMD5(PrivateRSA): public_cls = PublicRSAMD5 class PublicRSASHA1(PublicRSA): algorithm = Algorithm.RSASHA1 chosen_hash = hashes.SHA1() class PrivateRSASHA1(PrivateRSA): public_cls = PublicRSASHA1 class PublicRSASHA1NSEC3SHA1(PublicRSA): algorithm = Algorithm.RSASHA1NSEC3SHA1 chosen_hash = hashes.SHA1() class PrivateRSASHA1NSEC3SHA1(PrivateRSA): public_cls = PublicRSASHA1NSEC3SHA1 class PublicRSASHA256(PublicRSA): algorithm = Algorithm.RSASHA256 chosen_hash = hashes.SHA256() class PrivateRSASHA256(PrivateRSA): public_cls = PublicRSASHA256 class PublicRSASHA512(PublicRSA): algorithm = Algorithm.RSASHA512 chosen_hash = hashes.SHA512() class PrivateRSASHA512(PrivateRSA): public_cls = PublicRSASHA512
| ver. 1.4 |
Github
|
.
| PHP 8.1.33 | Генерация страницы: 0.01 |
proxy
|
phpinfo
|
Настройка