s. Q Qq!TYq\!2 Q Q Q Q Q Qr4 r$ )r+ r )r- public_componentss ` r2
public_keyzDsaKey.public_key s8 ! Q Q Q Q. s' AAADIdO$$AAAr4 )r r! r r8 rY s `r2 domainz
DsaKey.domain s BAAA AAAAr4 c g }| j D ]m}|dk r@t | j }| d|fz Ht | | r| | n| r| d d| j j t | d
| fz S )Nr zp(%d)privatez
<%s @0x%x %s>,) rf r r size_in_bitsappendhasattrrA __class____name__idjoin)r- attrsrI bitss r2 __repr__zDsaKey.__repr__ s ACxx tv3355 Ww .////q!!
Q $ LL # # # $."92d88SXXe__!UUUr4 c r t | j | S # t $ r t | w xY wr` )rG r, KeyErrorAttributeError)r- items r2 __getattr__zDsaKey.__getattr__ sD 'ty'' ' ' ' ' && & 's 6r Nc |t | }| t j }|dk rc fddD }d fd|D }dg|z }d d |D } d
t j | dd z S t
j j j g }
r|d }|rS|sd
}t j
} t j | t |||
| } |rd}
nd}
d}n|dk r|rt# d d j j j j j g}t
|
} d}
n;|rt# d t' t t j |
} d}
|dk r| S |dk r)t) j
| |
dz || }t | S t# d|z )a Export this DSA key.
Args:
format (string):
The encoding for the output:
- *'PEM'* (default). ASCII as per `RFC1421`_/ `RFC1423`_.
- *'DER'*. Binary ASN.1 encoding.
- *'OpenSSH'*. ASCII one-liner as per `RFC4253`_.
Only suitable for public keys, not for private keys.
passphrase (string):
*Private keys only*. The pass phrase to protect the output.
pkcs8 (boolean):
*Private keys only*. If ``True`` (default), the key is encoded
with `PKCS#8`_. If ``False``, it is encoded in the custom
OpenSSL/OpenSSH container.
protection (string):
*Only in combination with a pass phrase*.
The encryption scheme to use to protect the output.
If :data:`pkcs8` takes value ``True``, this is the PKCS#8
algorithm to use for deriving the secret and encrypting
the private DSA key.
For a complete list of algorithms, see :mod:`Crypto.IO.PKCS8`.
The default is *PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC*.
If :data:`pkcs8` is ``False``, the obsolete PEM encryption scheme is
used. It is based on MD5 for key derivation, and Triple DES for
encryption. Parameter :data:`protection` is then ignored.
The combination ``format='DER'`` and ``pkcs8=False`` is not allowed
if a passphrase is present.
randfunc (callable):
A function that returns random bytes.
By default it is :func:`Crypto.Random.get_random_bytes`.
Returns:
byte string : the encoded key
Raises:
ValueError : when the format is unknown or when you try to encrypt a private
key with *DER* format and OpenSSL/OpenSSH.
.. warning::
If you don't provide a pass phrase, the private key will be
exported in the clear!
.. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt
.. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt
.. _RFC4253: http://www.ietf.org/rfc/rfc4253.txt
.. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt
NOpenSSHc N g | ]!}j | "S r8 )r, to_bytes)r; r" r- s r2 r= z%DsaKey.export_key.. s+ JJJDIaL))++JJJr4 )r r! r r c Z t | d dz rt d | z S | S )Nr )r r r% s r2 funcz DsaKey.export_key..func s. 1JJ% 77Q;& Hr4 c & g | ]
} | S r8 r8 )r; r" r s r2 r= z%DsaKey.export_key.. s! ***DDGG***r4 ssh-dssr4 c X g | ]'}t j d t | |z (S )>I)structpacklen)r; kps r2 r= z%DsaKey.export_key.. s/ P P PV[s2ww 7 7" < P P Pr4 ssh-dss Tz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC)
key_paramsrandfunczENCRYPTED PRIVATEPRIVATEr z#DSA private key cannot be encryptedr z DSA PRIVATEz*PKCS#8 is only meaningful for private keysPUBLICDERz KEYz3Unknown key format '%s'. Cannot export the DSA key.)r r get_random_bytesr} binascii
b2a_base64r r r! r rA r r" encoder
wrapoidr) r r r )r- formatpkcs8
passphrase
protectionr tup1tup2keyparts keystringparams private_key
binary_keykey_typeintspem_strr s ` @r2
export_keyzDsaKey.export_key sg v ! ,,J .H Y JJJJ5IJJJD
+***T***D"|d*H P Px P P P I !4Y!?!?!DD D dfdfdf 566 }
)! F!EJ ( 0 0 7 7 9 9 "Z +S* *v)1 " " "
) 2HH (H !
U??z?$%JKKK4646464646B ( . . 5 5 7 7
(
O !MNNN8 *46 2 2F< . s\
+
+
+ j
3 3 < < > >>??FFHH
+
+
+r4 c 6 g | ]}t j | S r8 r
from_bytes)r; rV s r2 r= z$_generate_domain.. s# 0 0 0g ## 0 0 0r4 c 2 g | ]}| d |z z z S )r6 r8 )r; iVoutlens r2 r= z$_generate_domain.. s+ CCC1q6z*+CCCr4 s ggen)getr) r digest_sizer r r r r r rw r sum itertoolscountr r rE )Lr Nnb_r! upper_bitUWXcr er r r r r r s @@@@r2 _generate_domainr k s 3((,,Q//Ay6:;;;
!
#F
Va F"Q&A
Q!f* B
Aa!e I
a
*
*n
<
<x|| vz$ / / 6 6 8 8 9 9Y] K
MA a
*
*n
<
<
>> q Fa!e I
+
+
+
+
+!!a%((
+
+
+ 0 0Q 0 0 0 CCCCCZ]]CCC1!r'Q 'A!f*,=>
@
@
A M " "~~ 1$$$$
QK
QK >> q q( + +~ = =!a% $
Q1 A ## 7NT!WW $wu~~'>'>'@'@ @ vz!}} 3 3 5 5 6 6 1aLL 66 E
q!T?r4 c | t j }|rt t | \ }}}t | t
k }|t | t
k z }||dz
|z dk z }||dk p||k z }|t
||| dk z }|rt d nt | | \ }}}}| }| } || k rt d|| fz || fdvrt d|| fz d|cxk r|k sn t d t j
| d z |
}
|
|dz
z dz } t
|| | } | |||| d }
t |
S ) a Generate a new DSA key pair.
The algorithm follows Appendix A.1/A.2 and B.1 of `FIPS 186-4`_,
respectively for domain generation and key pair generation.
Args:
bits (integer):
Key length, or size (in bits) of the DSA modulus *p*.
It must be 1024, 2048 or 3072.
randfunc (callable):
Random number generation function; it accepts a single integer N
and return a string of random data N bytes long.
If not specified, :func:`Crypto.Random.get_random_bytes` is used.
domain (tuple):
The DSA domain parameters *p*, *q* and *g* as a list of 3
integers. Size of *p* and *q* must comply to `FIPS 186-4`_.
If not specified, the parameters are created anew.
Returns:
:class:`DsaKey` : a new DSA key object
Raises:
ValueError : when **bits** is too little, too big, or not a multiple of 64.
.. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf
Nr6 r z Invalid DSA domain parametersz?Mismatch between size of modulus (%d) and 'bits' parameter (%d)))r r )r r )r r )r r z;Lengths of p and q (%d, %d) are not compatibleto FIPS 186-3zIncorrent DSA generatorr )
exact_bitsr r ) r r rF r r r rE r) r rw randomr )r r rs r r! r fmt_error_r r r r" r r. s r2 r r s < *
6gv&&1a (**i7 (++y88 q1uka'' Q!V%qAv% SAq\\Q&& > <== = > &dH55
1a A ADyy 69:D B C C C
1v 0 0 0 ),-q62 3 3 3
q9999199992333 !b&8<<1 Ssu--22 SUaZ135CE>1 3 ; !5su~ 5I SUCE3511SU: :I 75666 Jr4 c |rt d t | dd d dk rt d fddD }t | S ) Nz-DSA private key already comes with parameters T) nr_elementsonly_ints_expectedr zNo version foundc g | ]
}| S r8 r8 )r; r< ders r2 r= z+_import_openssl_private..' s
1
1
13t9
1
1
1r4 )r r6 r )r) r decoder )encodedr r r r s @r2 _import_openssl_privater ! sz
JHIII
--
wA$
O
OC
1v{{+,,,
1
1
1
1
1
1
1C S>>r4 c ` t | \ }}}|t k rt d |r|rt d t | j }t
t |p| \ }}} || ||f}
t |
S )NzNo DSA subjectPublicKeyInfozToo many DSA parameters) r r r) r r
valuelistr r ) r r r algoid encoded_key
emb_paramsr r r! r r s r2 _import_subjectPublicKeyInfor + s 'Fw'O'O#FK
}}6777
4* 42333 K((.A;==''(<*==>>GAq! aA,C S>>r4 c B t | }t |d | S r` )r r )r r r sp_infos r2 _import_x509_certr 9 s! .w77G 'v > >>r4 c |rt d t j | | }|d t k rt d t |d j }t t |d \ }}}t ||| ||||f}t | S )Nz"PKCS#8 already includes parametersr zNo PKCS#8 encoded DSA keyr6 r ) r) r
unwrapr r r
r r r rE r ) r r r rI r" r r! r r s r2
_import_pkcs8r ? s
?=>>>
Wj))Ats{{4555 AaD!!'A;==''!--..GAq! q!Q<<Aq!
$C S>>r4 c t t t t f}|D ]!} || || c S # t $ r Y w xY wt d )z?Import a DSA key (public or private half), encoded in DER form. DSA key format is not supported)r r r r r) )key_datar r decodingsdecodings r2 _import_key_derr K sx )-" I
8Hj&99 9 9 9 D 6
7
77s /
<<c B t | } |t | }| d r;t j t | | \ }}}|rd}t ||d S | d rt
j | d d }g t | dk rct j d|dd d } |dd|z |d|z d }t | dk cd d k r fd
d D }t | S t | dk r*t | d d k rt | |d S t d
)a Import a DSA key.
Args:
extern_key (string or byte string):
The DSA key to import.
The following formats are supported for a DSA **public** key:
- X.509 certificate (binary DER or PEM)
- X.509 ``subjectPublicKeyInfo`` (binary DER or PEM)
- OpenSSH (ASCII one-liner, see `RFC4253`_)
The following formats are supported for a DSA **private** key:
- `PKCS#8`_ ``PrivateKeyInfo`` or ``EncryptedPrivateKeyInfo``
DER SEQUENCE (binary or PEM)
- OpenSSL/OpenSSH custom format (binary or PEM)
For details about the PEM encoding, see `RFC1421`_/`RFC1423`_.
passphrase (string):
In case of an encrypted private key, this is the pass phrase
from which the decryption key is derived.
Encryption may be applied either at the `PKCS#8`_ or at the PEM level.
Returns:
:class:`DsaKey` : a DSA key object
Raises:
ValueError : when the given key cannot be parsed (possibly because
the pass phrase is wrong).
.. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt
.. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt
.. _RFC4253: http://www.ietf.org/rfc/rfc4253.txt
.. _PKCS#8: http://www.ietf.org/rfc/rfc5208.txt
Ns -----r r6 r r r r c D g | ] }t j | S r8 r )r; r" r s r2 r= z import_key.. s( IIIq7%hqk22IIIr4 )r r r6 r 0 r )r
startswithr r
r
r r
a2b_base64splitr r unpackrx r r r) )
extern_keyr r markerenc_flagr lengthr r s @r2 r r \ s P $$J Z((
X&& 6"%*U:->->
"K"K fh J sJ555 [))
" '
(8(8(>(>q(ABB )nnq ]42A2 77:F OOIaF
l 3 4 4 4!!f*++.I )nnq A;* $ $IIIILIIIC S>> !
:tJqM 2 2d : : z:t<<<
6
7
77r4 z1.2.840.10040.4.1)NN)Tr` ).__all__r r r Crypto.Util.py3compatr r r r
r Cryptor Crypto.IOr
r Crypto.Hashr Crypto.Util.asn1r r r r r Crypto.Math.Numbersr Crypto.Math.Primalityr r r Crypto.PublicKeyr r r objectr r r r r r r r r r importKeyr r8 r4 r2 r7 sF 2 =
<
<
H H H H H H H H H H H H H H ( ' ' ' ' '3 3 3 3 3 3 3 3 3 3@ @ @ @ @ @ @ @ @ @@Z" Z" Z" Z" Z"V Z" Z" Z"z2 2 2jF F F F R. . . .p ? ? ? 8 8 8"C8 C8 C8 C8N
r4