CasperSecurity
o
h9Ra�# � @ s d Z ddlZddlZddlmZmZmZ ddlZddl m
Z
ddl m Z ddl m
Z
ddlmZmZmZ ddlmZ dd lmZ dd
lmZ dd lmZmZmZ dd lm Z e� e �Z G d
d� dej �Z!G dd� de!e �Z"G dd� de"�Z#G dd� d�Z$G dd� de$e"�Z%G dd� de$e"�Z&G dd� de"�Z'e"�(e#de j)��Z*e"�(e#d e j+��Z,e"�(e#d e j-��Z.e"�(e%d e j)��Z/e"�(e%d e j+��Z0e"�(e%d e j-��Z1e"�(e&d!e j)��Z2e"�(e&d"e j+��Z3e"�(e&d#e j-��Z4e"�(e'd$e j)��Z5e"�(e'd%e j+��Z6e"�(e'd&e j-��Z7dS )'zZJSON Web Algorithms.
https://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-40
� N)�Dict�Any�Callable)�default_backend)�hashes)�hmac)�padding�ec�rsa)�decode_dss_signature)�encode_dss_signature)�
HashAlgorithm)�errors�
interfaces�jwk)�Hashablec @ s e Zd ZdZdS )�JWAzJSON Web Algorithm.N)�__name__�
__module__� __qualname__�__doc__� r r �,/usr/lib/python3/dist-packages/josepy/jwa.pyr s r c @ s� e Zd ZU dZi Zeed f ed< eed< deddfdd�Z d ede
fd
d �Z de fd d
�Z
ed dd��Zdefdd�Zededd fdd��Zejdededefdd��Zejdededede
fdd ��Zdefd d �ZdS ) � JWASignaturez-Base class for JSON Web Signature Algorithms.�
SIGNATURES�kty�name�returnNc C s
|| _ d S �N�r )�selfr r r r �__init__& s
zJWASignature.__init__�otherc C s t |t�stS | j|jkS r )�
isinstancer �NotImplementedr )r r" r r r �__eq__) s
zJWASignature.__eq__c C s t | j| jf�S r )�hash� __class__r �r r r r �__hash__. s zJWASignature.__hash__�
signature_clsc C s || j |j< |S )z(Register class for JSON deserialization.)r r )�clsr* r r r �register1 s zJWASignature.registerc C � | j S r r r( r r r �to_partial_json7 � z JWASignature.to_partial_json�jobjc C s
| j | S r )r )r+ r0 r r r � from_json: s
zJWASignature.from_json�key�msgc C � t � �)� Sign the ``msg`` using ``key``.��NotImplementedError)r r2 r3 r r r �sign> � zJWASignature.sign�sigc C r4 )z-Verify the ``msg`` and ``sig`` using ``key``.r6 )r r2 r3 r: r r r �verifyC r9 zJWASignature.verifyc C r- r r r( r r r �__repr__H r/ zJWASignature.__repr__)r* r r r )r r r r r r �str�__annotations__r r! �boolr% �intr) � classmethodr, r. r1 �abc�abstractmethod�bytesr8 r; r< r r r r r ! s"
r c sd e Zd ZejZdedeg ef f� fdd� Z de
de
de
fdd �Z de
de
d
e
de fd d �Z
� ZS )
�_JWAHSr �hash_c � t � �|� |� | _d S r ��superr! r& �r r rF �r' r r r! O � z_JWAHS.__init__r2 r3 r c C s& t j|| jt� d�}|�|� |�� S )N��backend)r �HMACr& r �update�finalize)r r2 r3 �signerr r r r8 S s
z _JWAHS.signr: c
C sh t j|| jt� d�}|�|� z|�|� W dS tjjy3 } zt j
|dd� W Y d }~dS d }~ww )NrM T��exc_infoF) r rO r& r rP r; � cryptography�
exceptions�InvalidSignature�logger�debug)r r2 r3 r: �verifier�errorr r r r; X s
���z
_JWAHS.verify)r r r r �JWKOctr r= r r
r! rD r8 r? r; �
__classcell__r r rK r rE L s
"rE c @ s` e Zd ZU ejZeZee d< eZ
e e d< de j
dedefdd�Zde jdededefd d
�Zd S ) �_JWARSAr r& r2 r3 r c
C s� t |d�}z|r|�|| j| j�W S |�| j| j�}W n1 ty3 } z tj|dd� t� d��d}~w t
yL } ztj|dd� t� t |���d}~ww |� |� z|�
� W S t
yq } ztj|dd� t� t |���d}~ww )r5 r8 TrS �%Public key cannot be used for signingN)�hasattrr8 r r& rR �AttributeErrorrX rY r �Error�
ValueErrorr= rP rQ �r r2 r3 �new_apirR r[ r r r r8 i s,
���
��z _JWARSA.signr: c
C s� t |d�}|s|�|| j| j�}|�|� z|r%|�||| j| j� W dS |�� W dS tjjyG } zt j
|dd� W Y d}~dS d}~ww )�,Verify the ``msg` and ``sig`` using ``key``.r; TrS NF) r` rZ r r& rP r; rU rV rW rX rY )r r2 r3 r: re rZ r[ r r r r; ~ s
����z_JWARSA.verifyN)r r r r �JWKRSAr r$ r r r> r& r
r
�
RSAPrivateKeyrD r8 � RSAPublicKeyr? r; r r r r r^ d s
r^ c �2 e Zd Zdedeg ef ddf� fdd� Z� ZS )�_JWARSr rF r Nc s" t � �|� t�� | _|� | _d S r )rI r! r �PKCS1v15r& rJ rK r r r! � s
z_JWARS.__init__�r r r r= r r
r! r] r r rK r rk � � *rk c rj )�_JWAPSr rF r Nc s4 t � �|� tjt�|� �tjjd�| _|� | _d S )N)�mgf� salt_length)rI r! r �PSS�MGF1�
MAX_LENGTHr& rJ rK r r r! � s
� z_JWAPS.__init__rm r r rK r ro � rn ro c s� e Zd ZejZdedeg ef f� fdd� Z de
j de de fdd �Z
de
j de de fd
d �Zde
jde d e defd
d�Zde
jde de defdd�Z� ZS )�_JWAECr rF c rG r rH rJ rK r r r! � rL z_JWAEC.__init__r2 r3 r c C sB | � ||�}t|�\}}tj�|j�}|j|dd�|j|dd� S )r5 �big)�length� byteorder)�_signr r �JWKEC�expected_length_for_curve�curve�to_bytes)r r2 r3 r: �dr�dsrw r r r r8 � s �z _JWAEC.signc
C s� t |d�}z|r|�|t�| j��W S |�t�| j��}W n1 ty5 } z tj|dd� t �
d��d }~w t yN } ztj|dd� t �
t |���d }~ww |�
|� z|�� W S t ys } ztj|dd� t �
t |���d }~ww )Nr8 TrS r_ )r` r8 r �ECDSAr& rR ra rX rY r rb rc r= rP rQ rd r r r ry � s,
���
��z _JWAEC._signr: c C s^ t j�|j�}t|�d| krdS ttj|d|� dd�tj||d� dd��}| �|||�S )rf � Fr rv )rx N) r rz r{ r| �lenr r@ �
from_bytes�_verify)r r2 r3 r: �rlen�asn1sigr r r r; � s �z
_JWAEC.verifyr� c
C s� t |d�}|s|�|t�| j��}|�|� z|r'|�||t�| j�� W dS |�� W dS tjj yI } zt
j |dd� W Y d }~dS d }~ww )Nr; TrS F) r` rZ r r� r& rP r; rU rV rW rX rY )r r2 r3 r� re rZ r[ r r r r� � s
����z_JWAEC._verify)r r r r rz r r= r r
r! r �EllipticCurvePrivateKeyrD r8 ry �EllipticCurvePublicKeyr? r; r� r] r r rK r ru � s $ ru �HS256�HS384�HS512�RS256�RS384�RS512�PS256�PS384�PS512�ES256�ES384�ES512)8r rB �logging�typingr r r �cryptography.exceptionsrU � cryptography.hazmat.backendsr � cryptography.hazmat.primitivesr r �)cryptography.hazmat.primitives.asymmetricr r r
�/cryptography.hazmat.primitives.asymmetric.utilsr r �%cryptography.hazmat.primitives.hashesr
�josepyr r r �collections.abcr � getLoggerr rX �JSONDeSerializabler r rE r^ rk ro ru r, �SHA256r� �SHA384r� �SHA512r� r� r� r� r� r� r� r� r� r� r r r r �<module> sD
+-
B