File: //lib/python2.7/site-packages/rsa/key.pyc
�
N$�_c @ s� d Z d d l Z d d l Z d d l m Z d d l Z d d l Z d d l Z d d l Z d d l
Z e j e � Z
d Z d e f d � � YZ d e f d � � YZ d e f d
� � YZ e j j e d � Z d � Z d
� Z e e d � Z e d e d � Z d d d g Z e d k r�d d l Z ye x^ e d � D]P Z e j � \ Z Z e rbPn e d d k rxe s�e d k r@d e GHq@q@WWn e! k
r�d GHq�Xd GHn d S( sj RSA key generation code.
Create new keys with the newkeys() function. It will give you a PublicKey and a
PrivateKey object.
Loading and saving keys requires the pyasn1 module. This module is imported as
late as possible, such that other functionality will remain working in absence
of pyasn1.
.. note::
Storing public and private keys via the `pickle` module is possible.
However, it is insecure to load a key from an untrusted source.
The pickle module is not secure against erroneous or maliciously
constructed data. Never unpickle data received from an untrusted
or unauthenticated source.
i����N( t rangei t AbstractKeyc B s� e Z d Z d Z d � Z e d � � Z e d � � Z d � Z d � Z e d d � � Z
e d
� � Z d d � Z
d � Z d
� Z RS( s0 Abstract superclass for private and public keys.t nt ec C s | | _ | | _ d S( N( R R ( t selfR R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt __init__8 s c C s d S( s� Loads a key in PKCS#1 PEM format, implement in a subclass.
:param keyfile: contents of a PEM-encoded file that contains
the public key.
:type keyfile: bytes
:return: the loaded key
:rtype: AbstractKey
N( ( t clst keyfile( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt _load_pkcs1_pem< s c C s d S( s� Loads a key in PKCS#1 PEM format, implement in a subclass.
:param keyfile: contents of a DER-encoded file that contains
the public key.
:type keyfile: bytes
:return: the loaded key
:rtype: AbstractKey
N( ( R R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt _load_pkcs1_derH s c C s d S( s� Saves the key in PKCS#1 PEM format, implement in a subclass.
:returns: the PEM-encoded key.
:rtype: bytes
N( ( R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt _save_pkcs1_pemT s c C s d S( s� Saves the key in PKCS#1 DER format, implement in a subclass.
:returns: the DER-encoded key.
:rtype: bytes
N( ( R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt _save_pkcs1_der[ s t PEMc C s6 i | j d 6| j d 6} | j | | � } | | � S( sN Loads a key in PKCS#1 DER or PEM format.
:param keyfile: contents of a DER- or PEM-encoded file that contains
the key.
:type keyfile: bytes
:param format: the format of the file to load; 'PEM' or 'DER'
:type format: str
:return: the loaded key
:rtype: AbstractKey
R t DER( R R t _assert_format_exists( R R t formatt methodst method( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt
load_pkcs1b s
c C sU y | | SWnB t k
rP d j t | j � � � } t d | | f � � n Xd S( sB Checks whether the given file format exists in 'methods'.
s , s% Unsupported format: %r, try one of %sN( t KeyErrort joint sortedt keyst
ValueError( t file_formatR t formats( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR x s
c C s3 i | j d 6| j d 6} | j | | � } | � S( s� Saves the key in PKCS#1 DER or PEM format.
:param format: the format to save; 'PEM' or 'DER'
:type format: str
:returns: the DER- or PEM-encoded key.
:rtype: bytes
R R
( R
R R ( R R R R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt
save_pkcs1� s
c C s! | t | | j | j � | j S( s� Performs blinding on the message using random number 'r'.
:param message: the message, as integer, to blind.
:type message: int
:param r: the random number to blind with.
:type r: int
:return: the blinded message.
:rtype: int
The blinding is such that message = unblind(decrypt(blind(encrypt(message))).
See https://en.wikipedia.org/wiki/Blinding_%28cryptography%29
( t powR R ( R t messaget r( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt blind� s c C s! t j j | | j � | | j S( s� Performs blinding on the message using random number 'r'.
:param blinded: the blinded message, as integer, to unblind.
:param r: the random number to unblind with.
:return: the original message.
The blinding is such that message = unblind(decrypt(blind(encrypt(message))).
See https://en.wikipedia.org/wiki/Blinding_%28cryptography%29
( t rsat commont inverseR ( R t blindedR ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt unblind� s ( R R ( t __name__t
__module__t __doc__t __slots__R t classmethodR R R
R R t staticmethodR R R R# ( ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR 3 s t PublicKeyc B s� e Z d Z d Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z
e d
� � Z d � Z
e d � � Z d
� Z e d � � Z e d � � Z RS( s� Represents a public RSA key.
This key is also known as the 'encryption key'. It contains the 'n' and 'e'
values.
Supports attributes as well as dictionary-like access. Attribute access is
faster, though.
>>> PublicKey(5, 3)
PublicKey(5, 3)
>>> key = PublicKey(5, 3)
>>> key.n
5
>>> key['n']
5
>>> key.e
3
>>> key['e']
3
R R c C s
t | | � S( N( t getattr( R t key( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt __getitem__� s c C s d | j | j f S( Ns PublicKey(%i, %i)( R R ( R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt __repr__� s c C s | j | j f S( s& Returns the key as tuple for pickling.( R R ( R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt __getstate__� s c C s | \ | _ | _ d S( s Sets the key from tuple.N( R R ( R t state( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt __setstate__� s c C sE | d k r t St | t � s# t S| j | j k oD | j | j k S( N( t Nonet Falset
isinstanceR* R R ( R t other( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt __eq__� s
c C s | | k S( N( ( R R5 ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt __ne__� s c C s t | j | j f � S( N( t hashR R ( R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt __hash__� s c C se d d l m } d d l m } | j | d | � �\ } } | d t | d � d t | d � � S( s� Loads a key in PKCS#1 DER format.
:param keyfile: contents of a DER-encoded file that contains the public
key.
:return: a PublicKey object
First let's construct a DER encoded key:
>>> import base64
>>> b64der = 'MAwCBQCNGmYtAgMBAAE='
>>> der = base64.standard_b64decode(b64der)
This loads the file:
>>> PublicKey._load_pkcs1_der(der)
PublicKey(2367317549, 65537)
i����( t decoder( t AsnPubKeyt asn1SpecR t modulusR t publicExponent( t pyasn1.codec.derR: t rsa.asn1R; t decodet int( R R R: R; t privt _( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR � s c C s\ d d l m } d d l m } | � } | j d | j � | j d | j � | j | � S( sx Saves the public key in PKCS#1 DER format.
:returns: the DER-encoded public key.
:rtype: bytes
i����( t encoder( R; R= R> ( R? RE R@ R; t setComponentByNameR R t encode( R RE R; t asn_key( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR s c C s" t j j | d � } | j | � S( sO Loads a PKCS#1 PEM-encoded public key file.
The contents of the file before the "-----BEGIN RSA PUBLIC KEY-----" and
after the "-----END RSA PUBLIC KEY-----" lines is ignored.
:param keyfile: contents of a PEM-encoded file that contains the public
key.
:return: a PublicKey object
s RSA PUBLIC KEY( R t pemt load_pemR ( R R t der( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR s c C s | j � } t j j | d � S( s� Saves a PKCS#1 PEM-encoded public key file.
:return: contents of a PEM-encoded file that contains the public key.
:rtype: bytes
s RSA PUBLIC KEY( R R RI t save_pem( R RK ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR
' s c C s" t j j | d � } | j | � S( s� Loads a PKCS#1.5 PEM-encoded public key file from OpenSSL.
These files can be recognised in that they start with BEGIN PUBLIC KEY
rather than BEGIN RSA PUBLIC KEY.
The contents of the file before the "-----BEGIN PUBLIC KEY-----" and
after the "-----END PUBLIC KEY-----" lines is ignored.
:param keyfile: contents of a PEM-encoded file that contains the public
key, from OpenSSL.
:type keyfile: bytes
:return: a PublicKey object
s
PUBLIC KEY( R RI RJ t load_pkcs1_openssl_der( R R RK ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt load_pkcs1_openssl_pem1 s c C s� d d l m } d d l m } d d l m } | j | d | � �\ } } | d d | j d � k rz t d � � n | j | d
d � S( s� Loads a PKCS#1 DER-encoded public key file from OpenSSL.
:param keyfile: contents of a DER-encoded file that contains the public
key, from OpenSSL.
:return: a PublicKey object
:rtype: bytes
i����( t
OpenSSLPubKey( R: ( t univR< t headert oids 1.2.840.113549.1.1.1s7 This is not a DER-encoded OpenSSL-compatible public keyR, i (
R@ RO R? R: t pyasn1.typeRP RA t ObjectIdentifiert TypeErrorR ( R R RO R: RP t keyinfoRD ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyRM D s ( R R ( R$ R% R& R' R- R. R/ R1 R6 R7 R9 R( R R R R
RN RM ( ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR* � s
t
PrivateKeyc B s� e Z d Z d Z d � Z d
� Z d � Z d � Z d
� Z d � Z d � Z
d � Z d � Z d � Z
d � Z e d � � Z d � Z e d � � Z d � Z RS( s Represents a private RSA key.
This key is also known as the 'decryption key'. It contains the 'n', 'e',
'd', 'p', 'q' and other values.
Supports attributes as well as dictionary-like access. Attribute access is
faster, though.
>>> PrivateKey(3247, 65537, 833, 191, 17)
PrivateKey(3247, 65537, 833, 191, 17)
exp1, exp2 and coef will be calculated:
>>> pk = PrivateKey(3727264081, 65537, 3349121513, 65063, 57287)
>>> pk.exp1
55063
>>> pk.exp2
10095
>>> pk.coef
50797
R R t dt pt qt exp1t exp2t coefc C sx t j | | | � | | _ | | _ | | _ t | | d � | _ t | | d � | _ t j j
| | � | _ d S( Ni ( R R RX RY RZ RB R[ R\ R R R! R] ( R R R RX RY RZ ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR u s c C s
t | | � S( N( R+ ( R R, ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR- � s c C s d | S( Ns- PrivateKey(%(n)i, %(e)i, %(d)i, %(p)i, %(q)i)( ( R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR. � s c C s4 | j | j | j | j | j | j | j | j f S( s& Returns the key as tuple for pickling.( R R RX RY RZ R[ R\ R] ( R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR/ � s c C s: | \ | _ | _ | _ | _ | _ | _ | _ | _ d S( s Sets the key from tuple.N( R R RX RY RZ R[ R\ R] ( R R0 ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR1 � s c C s� | d k r t St | t � s# t S| j | j k o� | j | j k o� | j | j k o� | j | j k o� | j | j k o� | j | j k o� | j
| j
k o� | j | j k S( N( R2 R3 R4 RW R R RX RY RZ R[ R\ R] ( R R5 ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR6 � s c C s | | k S( N( ( R R5 ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR7 � s c C s: t | j | j | j | j | j | j | j | j f � S( N( R8 R R RX RY RZ R[ R\ R] ( R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR9 � s c C s\ xI t d � D]; } t j j | j d � } t j j | j | � r
| Sq
Wt d � � d S( Ni� i s unable to find blinding factor( R R t randnumt randintR t primet are_relatively_primet RuntimeError( R RD t blind_r( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt _get_blinding_factor� s
c C sL | j � } | j | | � } t j j | | j | j � } | j | | � S( s� Decrypts the message using blinding to prevent side-channel attacks.
:param encrypted: the encrypted message
:type encrypted: int
:returns: the decrypted message
:rtype: int
( Rd R R t coret decrypt_intRX R R# ( R t encryptedRc R" t decrypted( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt blinded_decrypt� s
c C sL | j � } | j | | � } t j j | | j | j � } | j | | � S( s� Encrypts the message using blinding to prevent side-channel attacks.
:param message: the message to encrypt
:type message: int
:returns: the encrypted message
:rtype: int
( Rd R R Re t encrypt_intRX R R# ( R R Rc R" Rg ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt blinded_encrypt� s
c
C s� d d l m } | j | � \ } } | d d k rL t d | d � � n t t | d d !� } | | � } t t | d d !� \ } } } | j | j | j f | | | f k r� t j
d t � n | S( s4 Loads a key in PKCS#1 DER format.
:param keyfile: contents of a DER-encoded file that contains the private
key.
:type keyfile: bytes
:return: a PrivateKey object
First let's construct a DER encoded key:
>>> import base64
>>> b64der = 'MC4CAQACBQDeKYlRAgMBAAECBQDHn4npAgMA/icCAwDfxwIDANcXAgInbwIDAMZt'
>>> der = base64.standard_b64decode(b64der)
This loads the file:
>>> PrivateKey._load_pkcs1_der(der)
PrivateKey(3727264081, 65537, 3349121513, 65063, 57287)
i����( R: i s) Unable to read this file, version %s != 0i i i s You have provided a malformed keyfile. Either the exponents or the coefficient are incorrect. Using the correct values instead.( R? R: RA R t mapRB R[ R\ R] t warningst warnt UserWarning(
R R R: RC RD t as_intsR, R[ R\ R] ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR � s '
c s d d l m � m � d d l m } d � j f � � f d � � Y} | � } | j d d � | j d | j � | j d | j � | j d
| j � | j d | j
� | j d | j � | j d
| j � | j d | j
� | j d | j � | j | � S( sz Saves the private key in PKCS#1 DER format.
:returns: the DER-encoded private key.
:rtype: bytes
i����( RP t namedtype( RE t
AsnPrivKeyc s� e Z � j � j d � j � � � j d � j � � � j d � j � � � j d � j � � � j d � j � � � j d � j � � � j d � j � � � j d � j � � � j d � j � � � Z RS( t versionR= R> t privateExponentt prime1t prime2t exponent1t exponent2t coefficient( R$ R% t
NamedTypest NamedTypet Integert
componentType( ( Rq RP ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyRr s Rs i R= R> Rt Ru Rv Rw Rx Ry ( RS RP Rq R? RE t SequenceRF R R RX RY RZ R[ R\ R] RG ( R RE Rr RH ( ( Rq RP s+ /usr/lib/python2.7/site-packages/rsa/key.pyR s " c C s" t j j | d � } | j | � S( sq Loads a PKCS#1 PEM-encoded private key file.
The contents of the file before the "-----BEGIN RSA PRIVATE KEY-----" and
after the "-----END RSA PRIVATE KEY-----" lines is ignored.
:param keyfile: contents of a PEM-encoded file that contains the private
key.
:type keyfile: bytes
:return: a PrivateKey object
s RSA PRIVATE KEY( R RI RJ R ( R R RK ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR ) s
c C s | j � } t j j | d � S( s� Saves a PKCS#1 PEM-encoded private key file.
:return: contents of a PEM-encoded file that contains the private key.
:rtype: bytes
s RSA PRIVATE KEY( R R RI RL ( R RK ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyR
9 s ( R R RX RY RZ s exp1s exp2s coef( R$ R% R& R' R R- R. R/ R1 R6 R7 R9 Rd Ri Rk R( R R R R
( ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyRW [ s" : %c
s� | d � | d } | | } | | } t j d | � | | � } t j d | � | | � } � � f d � } t } x; | | | � s� | r� | | � } n | | � } | } q{ Wt | | � t | | � f S( s% Returns a tuple of two different primes of nbits bits each.
The resulting p * q has exacty 2 * nbits bits, and the returned p and q
will not be equal.
:param nbits: the number of bits in each of p and q.
:param getprime_func: the getprime function, defaults to
:py:func:`rsa.prime.getprime`.
*Introduced in Python-RSA 3.1*
:param accurate: whether to enable accurate mode or not.
:returns: (p, q), where p > q
>>> (p, q) = find_p_q(128)
>>> from rsa import common
>>> common.bit_size(p * q)
256
When not in accurate mode, the number of bits can be slightly less
>>> (p, q) = find_p_q(128, accurate=False)
>>> from rsa import common
>>> common.bit_size(p * q) <= 256
True
>>> common.bit_size(p * q) > 240
True
i i s find_p_q(%i): Finding ps find_p_q(%i): Finding qc s: | | k r t S� s t St j j | | � } � | k S( s� Returns True iff p and q are acceptable:
- p and q differ
- (p * q) has the right nr of bits (when accurate=True)
( R3 t TrueR R t bit_size( RY RZ t
found_size( t accuratet
total_bits( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt
is_acceptableq s ( t logt debugR3 t maxt min(
t nbitst
getprime_funcR� t shiftt pbitst qbitsRY RZ R� t change_p( ( R� R� s+ /usr/lib/python2.7/site-packages/rsa/key.pyt find_p_qD s
c C s� | d | d } y t j j | | � } WnJ t j j k
rw } t j j | | | j d d | | | j f �� n X| | | d k r� t d | | | f � � n | | f S( s� Calculates an encryption and a decryption key given p, q and an exponent,
and returns them as a tuple (e, d)
:param p: the first large prime
:param q: the second large prime
:param exponent: the exponent for the key; only change this if you know
what you're doing, as the exponent influences how difficult your
private key can be cracked. A very common choice for e is 65537.
:type exponent: int
i t msgs; e (%d) and phi_n (%d) are not relatively prime (divider=%i)s6 e (%d) and d (%d) are not mult. inv. modulo phi_n (%d)( R R R! t NotRelativePrimeErrorRX R ( RY RZ t exponentt phi_nRX t ex( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt calculate_keys_custom_exponent� s
c C s t | | t � S( s� Calculates an encryption and a decryption key given p and q, and
returns them as a tuple (e, d)
:param p: the first large prime
:param q: the second large prime
:return: tuple (e, d) with the encryption and decryption exponents.
( R� t DEFAULT_EXPONENT( RY RZ ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt calculate_keys� s
c C sm xZ t r\ t | d | | � \ } } y t | | d | �\ } } PWq t k
rX q Xq W| | | | f S( sW Generate RSA keys of nbits bits. Returns (p, q, e, d).
Note: this can take a long time, depending on the key size.
:param nbits: the total number of bits in ``p`` and ``q``. Both ``p`` and
``q`` will use ``nbits/2`` bits.
:param getprime_func: either :py:func:`rsa.prime.getprime` or a function
with similar signature.
:param exponent: the exponent for the key; only change this if you know
what you're doing, as the exponent influences how difficult your
private key can be cracked. A very common choice for e is 65537.
:type exponent: int
i R� ( R R� R� R ( R� R� R� R� RY RZ R RX ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt gen_keys� s
i c C s� | d k r t d � � n | d k r: t d | � � n | d k r} d d l m } d d l } | j | j d | �} n t j j } t | | d | d
| �\ } } } }
| | } t | | � t | | |
| | � f S( s� Generates public and private keys, and returns them as (pub, priv).
The public key is also known as the 'encryption key', and is a
:py:class:`rsa.PublicKey` object. The private key is also known as the
'decryption key' and is a :py:class:`rsa.PrivateKey` object.
:param nbits: the number of bits required to store ``n = p*q``.
:param accurate: when True, ``n`` will have exactly the number of bits you
asked for. However, this makes key generation much slower. When False,
`n`` may have slightly less bits.
:param poolsize: the number of processes to use to generate the prime
numbers. If set to a number > 1, a parallel algorithm will be used.
This requires Python 2.6 or newer.
:param exponent: the exponent for the key; only change this if you know
what you're doing, as the exponent influences how difficult your
private key can be cracked. A very common choice for e is 65537.
:type exponent: int
:returns: a tuple (:py:class:`rsa.PublicKey`, :py:class:`rsa.PrivateKey`)
The ``poolsize`` parameter was added in *Python-RSA 3.1* and requires
Python 2.6 or newer.
i s
Key too smalli s Pool size (%i) should be >= 1i����( t parallelNt poolsizeR� R� (
R R R� t functoolst partialt getprimeR` R� R* RW ( R� R� R� R� R� R� R� RY RZ R RX R ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt newkeys� s '
R� t __main__id i
i s %i timest Aborteds
Doctests done(" R& t loggingRm t rsa._compatR t rsa.primeR t rsa.pemt
rsa.commont rsa.randnumt rsa.coret getLoggerR$ R� R� t objectR R* RW R` R� R R� R� R� R� R� t __all__t doctestt countt testmodt failurest testst KeyboardInterrupt( ( ( s+ /usr/lib/python2.7/site-packages/rsa/key.pyt <module>" s> ���N
5 "