File: //lib/python3.6/site-packages/jwcrypto/__pycache__/jwa.cpython-36.pyc
3
��Nf�} � @ s� d dl Z d dlZd dlZd dlmZmZ d dlmZ d dlm Z d dl
m Z m Z m
Z
d dlmZ d dlmZ d dlmZ d d lmZmZmZ d d
lmZ d d lmZ d d lm Z d dl Z d d
l m Z d dl m Z d dl m!Z! d dl m"Z" d dl m#Z# d dl m$Z$m%Z% d dl m&Z& d dl'm(Z( dZ)e j*e j+�G dd� de,��Z-dd� Z.dd� Z/d d � Z0d d � Z1d d!� Z2G d"d#� d#e,�Z3G d$d%� d%e3�Z4G d&d'� d'e3�Z5G d(d)� d)e3�Z6G d*d+� d+e3�Z7G d,d-� d-e4e-�Z8G d.d/� d/e4e-�Z9G d0d1� d1e4e-�Z:G d2d3� d3e5e-�Z;G d4d5� d5e5e-�Z<G d6d7� d7e5e-�Z=G d8d9� d9e6e-�Z>G d:d;� d;e6e-�Z?G d<d=� d=e6e-�Z@G d>d?� d?e5e-�ZAG d@dA� dAe5e-�ZBG dBdC� dCe5e-�ZCG dDdE� dEe7e-�ZDG dFdG� dGe,�ZEG dHdI� dIeE�ZFG dJdK� dKeFe-�ZGG dLdM� dMeFe-�ZHG dNdO� dOeFe-�ZIG dPdQ� dQeE�ZJG dRdS� dSeJe-�ZKG dTdU� dUeJe-�ZLG dVdW� dWeJe-�ZMG dXdY� dYeE�ZNG dZd[� d[eNe-�ZOG d\d]� d]eNe-�ZPG d^d_� d_eNe-�ZQG d`da� daeE�ZRG dbdc� dceRe-�ZSG ddde� deeRe-�ZTG dfdg� dgeRe-�ZUG dhdi� dieEe-�ZVG djdk� dkeEe-�ZWG dldm� dmeW�ZXG dndo� doeW�ZYG dpdq� dqeW�ZZG drds� dse,�Z[G dtdu� due[�Z\G dvdw� dwe\e-�Z]G dxdy� dye\e-�Z^G dzd{� d{e\e-�Z_G d|d}� d}e[�Z`G d~d� de`e-�ZaG d�d�� d�e`e-�ZbG d�d�� d�e`e-�ZcG d�d�� d�e,�ZddS )�� N)�hexlify� unhexlify)�InvalidSignature)�default_backend)�
constant_time�hashes�hmac)�ec)�padding)�utils)�Cipher�
algorithms�modes)�
ConcatKDFHash)�
PBKDF2HMAC)�PKCS7)�InvalidCEKeyLength)�InvalidJWAAlgorithm)�InvalidJWEKeyLength)�InvalidJWEKeyType)�InvalidJWEOperation)�base64url_decode�base64url_encode)� json_decode)�JWKi @ c @ sR e Zd Zejdd� �Zejdd� �Zejdd� �Zejdd� �Zejd d
� �Z d S ) � JWAAlgorithmc C s dS )zThe algorithm NameN� )�selfr r �/usr/lib/python3.6/jwa.py�name& s zJWAAlgorithm.namec C s dS )zA short descriptionNr )r r r r � description+ s zJWAAlgorithm.descriptionc C s dS )z'The actual/recommended/minimum key sizeNr )r r r r �keysize0 s zJWAAlgorithm.keysizec C s dS )z One of 'alg', 'enc' or 'JWK'Nr )r r r r �algorithm_usage_location5 s z%JWAAlgorithm.algorithm_usage_locationc C s dS )zOne of 'sig', 'kex', 'enc'Nr )r r r r �
algorithm_use: s zJWAAlgorithm.algorithm_useN)
�__name__�
__module__� __qualname__�abc�abstractpropertyr r r! r" r# r r r r r # s
r c C s t | �d S )N� )�len)�xr r r �_bitsize@ s r, c C s | d S )Nr) r )r+ r r r �_inbytesD s r- c C s" | d dkrt d��tjt| ��S )Nr) r z lenght must be a multiple of 8)�
ValueError�os�urandomr- )r+ r r r � _randombitsH s r1 c C s2 dj | �}|d d d }t|j|d�d |� �S )Nz{:x}� r) � �0)�formatr �rjust)�n�bits�eZilenr r r � _encode_intO s
r: c C s t t| �d�S )N� )�intr )r7 r r r � _decode_intU s r= c @ s e Zd Zdd� Zdd� ZdS )�_RawJWSc C s t �d S )N)�NotImplementedError)r �key�payloadr r r �sign[ s z _RawJWS.signc C s t �d S )N)r? )r r@ rA � signaturer r r �verify^ s z_RawJWS.verifyN)r$ r% r& rB rD r r r r r> Y s r> c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�_RawHMACc C s t � | _|| _d S )N)r �backend�hashfn)r rG r r r �__init__d s z_RawHMAC.__init__c C s" t j|| j| jd�}|j|� |S )N)rF )r �HMACrG rF �update)r r@ rA �hr r r � _hmac_setuph s
z_RawHMAC._hmac_setupc C s" t |jd��}| j||�}|j� S )NrB )r �
get_op_keyrL �finalize)r r@ rA �skeyrK r r r rB m s z
_RawHMAC.signc C s( t |jd��}| j||�}|j|� d S )NrD )r rM rL rD )r r@ rA rC ZvkeyrK r r r rD r s z_RawHMAC.verifyN)r$ r% r& rH rL rB rD r r r r rE b s rE c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�_RawRSAc C s || _ || _d S )N)�padfnrG )r rQ rG r r r rH y s z_RawRSA.__init__c C s |j d�}|j|| j| j�S )NrB )rM rB rQ rG )r r@ rA rO r r r rB } s
z _RawRSA.signc C s" |j d�}|j||| j| j� d S )NrD )rM rD rQ rG )r r@ rA rC �pkeyr r r rD � s
z_RawRSA.verifyN)r$ r% r& rH rB rD r r r r rP x s rP c @ s0 e Zd Zdd� Zedd� �Zdd� Zdd� Zd S )
�_RawECc C s || _ || _d S )N)�_curverG )r �curverG r r r rH � s z_RawEC.__init__c C s | j S )N)rT )r r r r rU � s z _RawEC.curvec C sR |j d| j�}|j|tj| j��}tj|�\}}|j| j�j }t
||�t
||� S )NrB ) rM rT rB r �ECDSArG �ec_utilsZdecode_dss_signatureZ get_curveZkey_sizer: )r r@ rA rO rC �r�s�sizer r r rB � s
z _RawEC.signc C sp |j d| j�}|d t|�d � }|t|�d d � }tjtt|�d�tt|�d��}|j||tj | j
�� d S )NrD r3 r; ) rM rT r* rW Zencode_dss_signaturer< r rD r rV rG )r r@ rA rC rR rX rY Z
enc_signaturer r r rD � s z
_RawEC.verifyN)r$ r% r& rH �propertyrU rB rD r r r r rS � s rS c @ s e Zd Zdd� Zdd� ZdS )�_RawNonec C s dS )N� r )r r@ rA r r r rB � s z
_RawNone.signc C s t d��d S )Nz'The "none" signature cannot be verified)r )r r@ rA rC r r r rD � s z_RawNone.verifyN)r$ r% r& rB rD r r r r r\ � s r\ c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_HS256�HS256zHMAC using SHA-256� �alg�sigc s t t| �jtj� � d S )N)�superr^ rH r �SHA256)r )� __class__r r rH � s z_HS256.__init__)
r$ r% r& r r r! r" r# rH �
__classcell__r r )re r r^ � s r^ c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_HS384�HS384zHMAC using SHA-384i� ra rb c s t t| �jtj� � d S )N)rc rg rH r �SHA384)r )re r r rH � s z_HS384.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r rg � s rg c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_HS512�HS512zHMAC using SHA-512i ra rb c s t t| �jtj� � d S )N)rc rj rH r �SHA512)r )re r r rH � s z_HS512.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r rj � s rj c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_RS256�RS256z RSASSA-PKCS1-v1_5 using SHA-256i ra rb c s t t| �jtj� tj� � d S )N)rc rm rH r
�PKCS1v15r rd )r )re r r rH � s z_RS256.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r rm � s rm c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_RS384�RS384z RSASSA-PKCS1-v1_5 using SHA-384i ra rb c s t t| �jtj� tj� � d S )N)rc rp rH r
ro r ri )r )re r r rH � s z_RS384.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r rp � s rp c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_RS512�RS512z RSASSA-PKCS1-v1_5 using SHA-512i ra rb c s t t| �jtj� tj� � d S )N)rc rr rH r
ro r rl )r )re r r rH � s z_RS512.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r rr � s rr c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_ES256�ES256z ECDSA using P-256 and SHA-256r` ra rb c s t t| �jdtj� � d S )NzP-256)rc rt rH r rd )r )re r r rH � s z_ES256.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r rt � s rt c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_ES384�ES384z ECDSA using P-384 and SHA-384i� ra rb c s t t| �jdtj� � d S )NzP-384)rc rv rH r ri )r )re r r rH s z_ES384.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r rv � s rv c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_ES512�ES512z ECDSA using P-521 and SHA-512i ra rb c s t t| �jdtj� � d S )NzP-521)rc rx rH r rl )r )re r r rH s z_ES512.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r rx s rx c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_PS256�PS256z.RSASSA-PSS using SHA-256 and MGF1 with SHA-256i ra rb c s4 t jt jtj� �tjj�}tt| �j|tj� � d S )N) r
�PSS�MGF1r rd � digest_sizerc rz rH )r rQ )re r r rH s
z_PS256.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r rz s rz c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_PS384�PS384z.RSASSA-PSS using SHA-384 and MGF1 with SHA-384i ra rb c s4 t jt jtj� �tjj�}tt| �j|tj� � d S )N) r
r| r} r ri r~ rc r rH )r rQ )re r r rH * s
z_PS384.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r r " s r c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_PS512�PS512z.RSASSA-PSS using SHA-512 and MGF1 with SHA-512i ra rb c s4 t jt jtj� �tjj�}tt| �j|tj� � d S )N) r
r| r} r rl r~ rc r� rH )r rQ )re r r rH 8 s
z_PS512.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r r� 0 s r� c @ s e Zd ZdZdZdZdZdZdS )�_None�nonez%No digital signature or MAC performedr ra rb N)r$ r% r& r r r! r" r# r r r r r� > s
r� c @ s e Zd Zdd� Zdd� ZdS )� _RawKeyMgmtc C s t �d S )N)r? )r r@ �bitsize�cek�headersr r r �wrapI s z_RawKeyMgmt.wrapc C s t �d S )N)r? )r r@ r� �ekr� r r r �unwrapL s z_RawKeyMgmt.unwrapN)r$ r% r& r� r� r r r r r� G s r� c @ s, e Zd Zdd� Zdd� Zdd� Zdd� Zd S )
�_RSAc C s
|| _ d S )N)rQ )r rQ r r r rH R s z
_RSA.__init__c C s, t |t�std��|jdkr(td|j��d S )Nzkey is not a JWK objectZRSA)�
isinstancer r. �key_typer )r r@ r r r �
_check_keyU s
z_RSA._check_keyc C s8 | j |� |st|�}|jd�}|j|| j�}||d�S )N�wrapKey)r� r� )r� r1 rM �encryptrQ )r r@ r� r� r� �rkr� r r r r� \ s
z _RSA.wrapc C s@ | j |� |jd�}|j|| j�}t|�|kr<t|t|���|S )N�decrypt)r� rM r� rQ r, r )r r@ r� r� r� r� r� r r r r� d s
z _RSA.unwrapN)r$ r% r& rH r� r� r� r r r r r� P s r� c s< e Zd ZdZdZdZdZdZ� fdd�Z� fdd �Z � Z
S )
�_Rsa15�RSA1_5zRSAES-PKCS1-v1_5i ra �kexc s t t| �jtj� � d S )N)rc r� rH r
ro )r )re r r rH u s z_Rsa15.__init__c sN | j |� t|�}y"tt| �j||||�}td��W n tk
rH |S X d S )NZDummy)r� r1 rc r� r� � Exception)r r@ r� r� r� r� )re r r r� x s
z
_Rsa15.unwrap) r$ r% r& r r r! r" r# rH r� rf r r )re r r� m s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�_RsaOaepzRSA-OAEPz#RSAES OAEP using default parametersi ra r� c s, t t| �jtjtjtj� �tj� d �� d S )N)rc r� rH r
�OAEPr} r ZSHA1)r )re r r rH � s
z_RsaOaep.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )� _RsaOaep256z RSA-OAEP-256z.RSAES OAEP using SHA-256 and MGF1 with SHA-256i ra r� c s, t t| �jtjtjtj� �tj� d �� d S )N)rc r� rH r
r� r} r rd )r )re r r rH � s
z_RsaOaep256.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r r� � s r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � ZdS )
�_AesKwNc C s t � | _d S )N)r rF )r r r r rH � s z_AesKw.__init__c C sX t |t�std��|jdkr(td|j��t|j|��}t|�| jkrTt | jt|���|S )Nzkey is not a JWK object�oct)
r� r r. r� r r rM r, r! r )r r@ �opr� r r r �_get_key� s
z_AesKw._get_keyc s | j |d�}� st|�� d}t|�}� fdd�tdt� �d�D �}t|�} x�tdd�D ]�}
x�td| �D ]r} ttj|�tj � | j
d�j � } | j ||| �| j
� }
tt|
d d� �| |
| d A d
�}|
d d � || < qfW qVW |}x td| �D ]} ||| 7 }q�W � |d �S )
Nr� �a6a6a6a6a6a6a6a6c s g | ]}� ||d � �qS )r) r )�.0�i)r� r r �
<listcomp>� s z _AesKw.wrap.<locals>.<listcomp>r r) � )rF � �@ )r� r� i����)r� r1 r �ranger* r r
�AESr �ECBrF � encryptorrJ rN r: r= )r r@ r� r� r� r� �iv�arX r7 �jr� r9 �br� r )r� r r� � s$ &z _AesKw.wrapc s* | j |d�}d}t|�}� fdd�tdt� �d�D �}|jd�} t|�}
x�tdd
d�D ]�} x�t|
d dd�D ]z} t| �}
t|
|
| | d A d �|| }ttj |�t
j � | j d
�j
� }|j|�|j� }|d d� } |dd � || < qlW qVW | |k�r td ��d j|�}t|�|k�r&t|t|���|S )Nr� r� c s g | ]}� ||d � �qS )r) r )r� r� )r� r r r� � s z!_AesKw.unwrap.<locals>.<listcomp>r r) � r� r� )rF zDecryption Failed� ���r� r� r� i����)r� r r� r* �popr= r: r r
r� r r� rF � decryptorrJ rN � RuntimeError�joinr, r )r r@ r� r� r� r� r� ZaivrX r� r7 r� r� ZdaZatr�dr� r� r )r� r r� � s*
"
z
_AesKw.unwrap)r$ r% r& r! rH r� r� r� r r r r r� � s
r� c @ s e Zd ZdZdZdZdZdZdS )�_A128KW�A128KWz AES Key Wrap using 128-bit key� ra r� N)r$ r% r& r r r! r" r# r r r r r� � s
r� c @ s e Zd ZdZdZdZdZdZdS )�_A192KW�A192KWz AES Key Wrap using 192-bit key� ra r� N)r$ r% r& r r r! r" r# r r r r r� � s
r� c @ s e Zd ZdZdZdZdZdZdS )�_A256KW�A256KWz AES Key Wrap using 256-bit keyr` ra r� N)r$ r% r& r r r! r" r# r r r r r� � s
r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � ZdS )
� _AesGcmKwNc C s t � | _d S )N)r rF )r r r r rH s z_AesGcmKw.__init__c C sX t |t�std��|jdkr(td|j��t|j|��}t|�| jkrTt | jt|���|S )Nzkey is not a JWK objectr� )
r� r r. r� r r rM r, r! r )r r@ r� r� r r r r� s
z_AesGcmKw._get_keyc C sv | j |d�}|st|�}td�}ttj|�tj|�| jd�}|j� }|j |�|j
� } |j }
|| t |�t |
�d�d�S )Nr� �` )rF )r� �tag)r� r� �header)
r� r1 r r
r� r �GCMrF r� rJ rN r� r ) r r@ r� r� r� r� r� �cipherr� r� r� r r r r� s
z_AesGcmKw.wrapc C s� | j |d�}d|kr td��t|d �}d|kr8td��t|d �}ttj|�tj||�| jd�}|j � } | j
|�| j � }
t |
�|kr�t
|t |
���|
S )Nr� r� z&Invalid Header, missing "iv" parameterr� z'Invalid Header, missing "tag" parameter)rF )r� r. r r r
r� r r� rF r� rJ rN r, r ) r r@ r� r� r� r� r� r� r� r� r� r r r r� ( s
z_AesGcmKw.unwrap)r$ r% r& r! rH r� r� r� r r r r r� s
r� c @ s e Zd ZdZdZdZdZdZdS )�
_A128GcmKw� A128GCMKWz+Key wrapping with AES GCM using 128-bit keyr� ra r� N)r$ r% r& r r r! r" r# r r r r r� ; s
r� c @ s e Zd ZdZdZdZdZdZdS )�
_A192GcmKw� A192GCMKWz+Key wrapping with AES GCM using 192-bit keyr� ra r� N)r$ r% r& r r r! r" r# r r r r r� D s
r� c @ s e Zd ZdZdZdZdZdZdS )�
_A256GcmKw� A256GCMKWz+Key wrapping with AES GCM using 256-bit keyr` ra r� N)r$ r% r& r r r! r" r# r r r r r� M s
r� c @ s8 e Zd ZdZdZdZdd� Zdd� Zdd� Zdd � Z dS )
�
_Pbes2HsAesKwNc C s t � | _tttd�| _d S )N)r� r� r` )r rF r� r� r� �aeskwmap)r r r r rH \ s z_Pbes2HsAesKw.__init__c
C s� |t krtd��t|t�r |}n
|jd�}t| jjd��d | }| jdkrVtj� }n0| jdkrjtj � }n | jdkr~tj
� }ntd��t |t | j
�||| jd�}|j|�} t| �| j
kr�t| j
t| ���td d
t| �d �S ) Nz Invalid p2c value, too large�utf8� r` i� i zUnknown Hash Size)� algorithm�length�saltZ
iterationsrF r� �enc)�kty�use�k)� default_max_pbkdf2_iterationsr. r� �bytes�encoder �hashsizer rd ri rl r r- r! rF �deriver, r r* r r )
r ra r@ �p2s�p2cZplainr� ZhashalgZkdfr� r r r r� ` s&
z_Pbes2HsAesKw._get_keyc
C sT t d�}d}| j|d |||�}| j| j � }|j||||�} t|�|d�| d< | S )Nr� i ra )r� r� r� )r1 r� r� r! r� r )
r r@ r� r� r� r� r� �kek�aeskw�retr r r r� z s z_Pbes2HsAesKw.wrapc C sf d|krt d��d|kr t d��t|d �}|d }| j|d |||�}| j| j � }|j||||�S )Nr� z'Invalid Header, missing "p2s" parameterr� z'Invalid Header, missing "p2c" parameterra )r. r r� r� r! r� ) r r@ r� r� r� r� r� r� r� r r r r� � s z_Pbes2HsAesKw.unwrap)
r$ r% r& r r! r� rH r� r� r� r r r r r� V s
r� c @ s$ e Zd ZdZdZdZdZdZdZdS )�_Pbes2Hs256A128KwzPBES2-HS256+A128KWz-PBES2 with HMAC SHA-256 and "A128KW" wrappingr� ra r� r` N) r$ r% r& r r r! r" r# r� r r r r r� � s r� c @ s$ e Zd ZdZdZdZdZdZdZdS )�_Pbes2Hs384A192KwzPBES2-HS384+A192KWz-PBES2 with HMAC SHA-384 and "A192KW" wrappingr� ra r� i� N) r$ r% r& r r r! r" r# r� r r r r r� � s r� c @ s$ e Zd ZdZdZdZdZdZdZdS )�_Pbes2Hs512A256KwzPBES2-HS512+A256KWz-PBES2 with HMAC SHA-512 and "A256KW" wrappingr` ra r� i N) r$ r% r& r r r! r" r# r� r r r r r� � s r� c @ s8 e Zd ZdZdZdZdZdZdd� Zdd � Z d
d � Z
d S )
�_Direct�dirz$Direct use of a shared symmetric keyr� ra r� c C s, t |t�std��|jdkr(td|j��d S )Nzkey is not a JWK objectr� )r� r r. r� r )r r@ r r r r� � s
z_Direct._check_keyc C sF | j |� |r|d fS t|jd��}t|�|kr>t|t|���d|iS )Nr� r� )r� r rM r, r )r r@ r� r� r� r� r r r r� � s
z _Direct.wrapc C sF | j |� |dkrtd��t|jd��}t|�|krBt|t|���|S )Nr� zInvalid Encryption Key.r� )r� r. r rM r, r )r r@ r� r� r� r� r r r r� � s
z_Direct.unwrapN) r$ r% r& r r r! r" r# r� r� r� r r r r r� � s r� c @ sH e Zd ZdZdZdZdZdZdd� Zdd � Z d
d � Z
d d
� Z dd� Z dS )�_EcdhEszECDH-ESzECDH-ES using Concat KDFra r� Nc C s t � | _tttd�| _d S )N)r� r� r` )r rF r� r� r� r� )r r r r rH � s z_EcdhEs.__init__c C s, t |t�std��|jdkr(td|j��d S )Nzkey is not a JWK objectZEC)r� r r. r� r )r r@ r r r r� � s
z_EcdhEs._check_keyc C s� t jdt|��}|t|jd��7 }d|kr6t|d �nd}|t jdt|��7 }||7 }d|krjt|d �nd}|t jdt|��7 }||7 }|t jd|�7 }|jtj� |�} t t
j � t |�|| j
d�}
|
j| �S )Nz>Ir� �apur� �apv)r� r� � otherinforF )�struct�packr* r� r� r Zexchanger ZECDHr r rd r- rF r� ) r ZprivkeyZpubkeyra r� r� r� r� r� Z
shared_keyZckdfr r r �_derive� s
z_EcdhEs._derivec C s� | j |� | jd kr.|d k r$td��|d }n| j}|d }tj|j|jd�}| j|jd�|jd�|||�}| jd kr�d|i}n.| j | � } tddt
|�d �}
| j |
|||�}d
t |j
� �i|d < |S ) Nz"ECDH-ES cannot use an existing CEKr� ra )r� Zcrv� unwrapKeyr� r� r� )r� r� r� �epkr� )r� r! r r Zgenerater� Z key_curver� rM r� r r� r Z
export_public) r r@ r� r� r� ra r� �dkr� r� r� r r r r� � s$
z _EcdhEs.wrapc C s� d|krt d��| j|� | jd kr.|d }n| j}|d }tf |d �}| j|jd�|jd�|||�}| jd krv|S | j| � }tddt|�d�} |j| |||�}
|
S d S ) Nr� z'Invalid Header, missing "epk" parameterr� ra r� r� r� )r� r� r� ) r. r� r! r r� rM r� r r� ) r r@ r� r� r� ra r� r� r� r� r� r r r r� s"
z_EcdhEs.unwrap)
r$ r% r& r r r" r# r! rH r� r� r� r� r r r r r� � s r� c @ s e Zd ZdZdZdZdZdZdS )�_EcdhEsAes128KwzECDH-ES+A128KWz.ECDH-ES using Concat KDF and "A128KW" wrappingr� ra r� N)r$ r% r& r r r! r" r# r r r r r� / s
r� c @ s e Zd ZdZdZdZdZdZdS )�_EcdhEsAes192KwzECDH-ES+A192KWz.ECDH-ES using Concat KDF and "A192KW" wrappingr� ra r� N)r$ r% r& r r r! r" r# r r r r r� 8 s
r� c @ s e Zd ZdZdZdZdZdZdS )�_EcdhEsAes256KwzECDH-ES+A256KWz.ECDH-ES using Concat KDF and "A256KW" wrappingr` ra r� N)r$ r% r& r r r! r" r# r r r r r� A s
r� c @ s e Zd Zdd� Zdd� ZdS )�_RawJWEc C s t �d S )N)r? )r r� r� �mr r r r� L s z_RawJWE.encryptc C s t �d S )N)r? )r r� r� r� r9 �tr r r r� O s z_RawJWE.decryptN)r$ r% r& r� r� r r r r r� J s r� c @ s0 e Zd ZdZdd� Zdd� Zdd� Zdd � ZdS )
�_AesCbcHmacSha2Nc C s( t � | _|| _tjj| _| jd | _d S )Nr3 ) r rF rG r
r� Z
block_size� blocksizer! �
wrap_key_size)r rG r r r rH W s
z_AesCbcHmacSha2.__init__c C sd t t|�d�}tj|| j| jd�}|j|� |j|� |j|� |j|� |j� }|d t| j �� S )Nr� )rF )
r: r, r rI rG rF rJ rN r- r! )r r� r� r� r9 ZalrK r� r r r �_mac] s
z_AesCbcHmacSha2._macc
C s� |dt | j�� }|t | j�d� }t| j�}ttj|�tj|�| j d�}|j
� }t | j�j � } | j
|�| j� }
|j
|
�|j� } | j|||| �} || | fS )a Encrypt according to the selected encryption and hashing
functions.
:param k: Encryption key (optional)
:param a: Additional Authentication Data
:param m: Plaintext
Returns a dictionary with the computed data.
N)rF )r- r! r1 r� r r
r� r �CBCrF r� r �padderrJ rN r� )
r r� r� r� �hkeyZekeyr� r� r� r� Z padded_datar9 r� r r r r� h s
z_AesCbcHmacSha2.encryptc C s� |dt | j�� }|t | j�d� }tj|| j||||��sDtd��ttj|�t j
|�| j d�}|j � } | j
|�| j� }
t| j�j� } | j
|
�| j� S )aJ Decrypt according to the selected encryption and hashing
functions.
:param k: Encryption key (optional)
:param a: Additional Authenticated Data
:param iv: Initialization Vector
:param e: Ciphertext
:param t: Authentication Tag
Returns plaintext or raises an error
NzFailed to verify MAC)rF )r- r! r Zbytes_eqr� r r r
r� r r� rF r� rJ rN r r� �unpadder) r r� r� r� r9 r� r� Zdkeyr� r� r� r� r r r r� � s
z_AesCbcHmacSha2.decrypt)r$ r% r& r! rH r� r� r� r r r r r� S s
r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�
_A128CbcHs256z
A128CBC-HS256z&AES_128_CBC_HMAC_SHA_256 authenticatedr� r� c s t t| �jtj� � d S )N)rc r� rH r rd )r )re r r rH � s z_A128CbcHs256.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�
_A192CbcHs384z
A192CBC-HS384z&AES_192_CBC_HMAC_SHA_384 authenticatedr� r� c s t t| �jtj� � d S )N)rc r� rH r ri )r )re r r rH � s z_A192CbcHs384.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r r� � s r� c s0 e Zd ZdZdZdZdZdZ� fdd�Z� Z S )�
_A256CbcHs512z
A256CBC-HS512z&AES_256_CBC_HMAC_SHA_512 authenticatedr` r� c s t t| �jtj� � d S )N)rc r� rH r rl )r )re r r rH � s z_A256CbcHs512.__init__)
r$ r% r& r r r! r" r# rH rf r r )re r r� � s r� c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS )�_AesGcmNc C s t � | _| j| _d S )N)r rF r! r� )r r r r rH � s z_AesGcm.__init__c C sT t d�}ttj|�tj|�| jd�}|j� }|j|� |j |�|j
� }|||j fS )a Encrypt accoriding to the selected encryption and hashing
functions.
:param k: Encryption key (optional)
:param a: Additional Authentication Data
:param m: Plaintext
Returns a dictionary with the computed data.
r� )rF ) r1 r r
r� r r� rF r� � authenticate_additional_datarJ rN r� )r r� r� r� r� r� r� r9 r r r r� � s
z_AesGcm.encryptc C sB t tj|�tj||�| jd�}|j� }|j|� |j|�|j � S )aK Decrypt accoriding to the selected encryption and hashing
functions.
:param k: Encryption key (optional)
:param a: Additional Authenticated Data
:param iv: Initialization Vector
:param e: Ciphertext
:param t: Authentication Tag
Returns plaintext or raises an error
)rF )
r r
r� r r� rF r� r rJ rN )r r� r� r� r9 r� r� r� r r r r� � s
z_AesGcm.decrypt)r$ r% r& r! rH r� r� r r r r r� � s r� c @ s e Zd ZdZdZdZdZdZdS )�_A128Gcm�A128GCMzAES GCM using 128-bit keyr� r� N)r$ r% r& r r r! r" r# r r r r r � s
r c @ s e Zd ZdZdZdZdZdZdS )�_A192Gcm�A192GCMzAES GCM using 192-bit keyr� r� N)r$ r% r& r r r! r" r# r r r r r � s
r c @ s e Zd ZdZdZdZdZdZdS )�_A256Gcm�A256GCMzAES GCM using 256-bit keyr` r� N)r$ r% r& r r r! r" r# r r r r r s
r c % @ s� e Zd ZdZeeeeee e
e e e
eeeeeeeeeeeeeee e e e e e!e"e#e$e%e&e'd�$Z(e)d dd��Z*e)dd� �Z+e)dd � �Z,e)d
d � �Z-dS )
�JWAzSJWA Signing Algorithms.
This class provides access to all JWA algorithms.
)$r_ rh rk rn rq rs ru rw ry r{ r� r� r� r� zRSA-OAEPz RSA-OAEP-256r� r� r� r� zECDH-ESzECDH-ES+A128KWzECDH-ES+A192KWzECDH-ES+A256KWr� r� r� zPBES2-HS256+A128KWzPBES2-HS384+A192KWzPBES2-HS512+A256KWz
A128CBC-HS256z
A192CBC-HS384z
A256CBC-HS512r r r Nc C s& | j | }|d k r |j|kr t�|� S )N)�algorithms_registryr# �KeyError)�clsr r� ra r r r �instantiate_alg8 s
zJWA.instantiate_algc C s4 y| j |dd�S tk
r. td| ��Y nX d S )Nrb )r� z(%s is not a valid Signign algorithm name)r r r )r
r r r r � signing_alg? s
zJWA.signing_algc C s4 y| j |dd�S tk
r. td| ��Y nX d S )Nr� )r� z/%s is not a valid Key Management algorithm name)r r r )r
r r r r � keymgmt_algG s
zJWA.keymgmt_algc C s4 y| j |dd�S tk
r. td| ��Y nX d S )Nr� )r� z+%s is not a valid Encryption algorithm name)r r r )r
r r r r �encryption_algO s
zJWA.encryption_alg)N).r$ r% r& �__doc__r^ rg rj rm rp rr rt rv rx rz r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r � classmethodr r r
r r r r r r sT r )er' r/ r� Zbinasciir r Zcryptography.exceptionsr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r r Z)cryptography.hazmat.primitives.asymmetricr r
r rW Z&cryptography.hazmat.primitives.ciphersr r
r Z,cryptography.hazmat.primitives.kdf.concatkdfr Z)cryptography.hazmat.primitives.kdf.pbkdf2r Z&cryptography.hazmat.primitives.paddingr ZsixZjwcrypto.commonr r r r r r r r Z jwcrypto.jwkr r� Z
add_metaclass�ABCMeta�objectr r, r- r1 r: r= r> rE rP rS r\ r^ rg rj rm rp rr rt rv rx rz r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r r �<module> s� F 4 ;
!_ K .