8tcv<dgZddlmZddlmZddlmZddlmZddl m Z ddl m Z Gdd e ZGd d eZGd d eZGddeZddZdS)new) DerSequence) long_to_bytes)Integer)HMAC)EccKey)DsaKeyc6eZdZdZdZdZdZdZdZdZ dS) DssSigSchemezoA (EC)DSA signature object. Do not instantiate directly. Use :func:`Cryptodome.Signature.DSS.new`. c||_||_||_|j|_|jdz dzdz|_dS)zCreate a new Digital Signature Standard (DSS) object. Do not instantiate this object directly, use `Cryptodome.Signature.DSS.new` instead. N)_key _encoding_order size_in_bits _order_bits _order_bytes)selfkeyencodingorders :/usr/lib/python3/dist-packages/Cryptodome/Signature/DSS.py__init__zDssSigScheme.__init__4sO ! ;3355!-1a7!;c4|jS)zRReturn ``True`` if this signature object can be used for signing messages.)r has_private)rs rcan_signzDssSigScheme.can_signBsy$$&&&rc tdNzTo be provided by subclassesNotImplementedErrorrmsg_hashs r_compute_noncezDssSigScheme._compute_nonceH!"@AAArc tdr r!r#s r _valid_hashzDssSigScheme._valid_hashKr&rc|std|}tj|dj}j||}j dkr"d fd|D}n!t| }|S)aProduce the DSA/ECDSA signature of a message. :parameter msg_hash: The hash that was carried out over the message. The object belongs to the :mod:`Cryptodome.Hash` package. Under mode *'fips-186-3'*, the hash must be a FIPS approved secure hash (SHA-1 or a member of the SHA-2 family), of cryptographic strength appropriate for the DSA key. For instance, a 3072/256 DSA key can only be used in combination with SHA-512. :type msg_hash: hash object :return: The signature as a *byte string* :raise ValueError: if the hash algorithm is incompatible to the (EC)DSA key :raise TypeError: if the (EC)DSA key has no private half Hash is not sufficiently strongNbinaryrc:g|]}t|jS)rr).0xrs r z%DssSigScheme.sign..ms6444%& -Q0ABB444r) r( ValueErrorr%r from_bytesdigestrr_signrjoinrencode)rr$noncezsig_pairoutputs` rsignzDssSigScheme.signNs&)) @>?? ?##H--  x001C$2C1CD E E9??1e,, >X % %XX4444*244455FF!**1133F rc||std|jdkrVt|d|jzkrtdd|d|j||jdfD\}}n t |d}n$#ttf$rtd wxYwt|dks|std t|d t|d }}d |cxkr |j krnnd |cxkr |j ksntd tj | d|j}|j |||f}|stddS)aCheck if a certain (EC)DSA signature is authentic. :parameter msg_hash: The hash that was carried out over the message. This is an object belonging to the :mod:`Cryptodome.Hash` module. Under mode *'fips-186-3'*, the hash must be a FIPS approved secure hash (SHA-1 or a member of the SHA-2 family), of cryptographic strength appropriate for the DSA key. For instance, a 3072/256 DSA key can only be used in combination with SHA-512. :type msg_hash: hash object :parameter signature: The signature that needs to be validated :type signature: byte string :raise ValueError: if the signature is not authentic r*r+z'The signature is not authentic (length)c6g|]}tj|Sr-)rr2)r.r/s rr0z'DssSigScheme.verify..s9 J J J$%!( 21 5 5 J J JrNT)strictz$The signature is not authentic (DER)z,The signature is not authentic (DER content)rr z"The signature is not authentic (d)zThe signature is not authenticF)r(r1rlenrrdecode IndexError hasOnlyIntsrrr2r3r_verify)rr$ signaturer_primes_primeder_seqr8results rverifyzDssSigScheme.verify|s *)) @>?? ? >X % %9~~!d&7"788 !JKKK J J*34FT5F4F*G*3D4E4F4F*G*I J J J GWW I%--..y.FF + I I I !GHHH I7||q  (;(;(=(=  !OPPP&wqz22GGAJ4G4GWGG))))dk)))))1w3L3L3L3L3L3L3L3LABB B  x001C$2C1CD E E""1w&899 ?=>> >us #B++!C N) __name__ __module__ __qualname____doc__rrr%r(r;rJr-rrr r .s < < <''' BBBBBB,,,\/////rr c<eZdZfdZdZdZdZdZdZxZ S)DeterministicDsaSigSchemecjtt||||||_dSN)superrPr _private_key)rrrr private_key __class__s rrz"DeterministicDsaSigScheme.__init__s4 '..77XuMMM'rctj|}|j}t |dz}||kr|||z z}|S)zSee 2.3.2 in RFC6979r)rr2rrr@)rbstrrIq_lenb_lens r _bits2intz#DeterministicDsaSigScheme._bits2intsR#D)) ((**D A  5==  &F rcXd|cxkr |jksnJt||jS)zSee 2.3.3 in RFC6979r)rrr)r int_mod_qs r _int2octetsz%DeterministicDsaSigScheme._int2octetss>9****t{******Y(9:::rc||}||jkr|}n ||jz }||S)zSee 2.3.4 in RFC6979)r[rr^)rrXz1z2s r _bits2octetsz&DeterministicDsaSigScheme._bits2octetssI^^D ! !   BBdk!B###rcX|}d|jz}d|jz}dD]}tj|||z||jz||z|}tj|||}d}d|cxkr |jksn|dkrStj||dz|}tj|||}d}t||j krEtj|||}||z }t||j kE| |}d|cxkr |jkn|S)z!Generate k in a deterministic way)rerdrr) r3 digest_sizerrr^rTrbrr@rr[)rmhashh1mask_vnonce_kint_octr7mask_ts rr%z(DeterministicDsaSigScheme._compute_nonces \\^^5,,E--) ? ?Ghw%/#//0ABB C#0044 56;==>DVXX  Xgvu55<<>>FFu****t{****{{(7FW,<#(***0&(('6599@@BBFf++ 111'6599@@BB& f++ 111 NN6**E!u****t{*****" rcdS)NTr-r#s rr(z%DeterministicDsaSigScheme._valid_hashstr) rKrLrMrr[r^rbr%r( __classcell__rVs@rrPrPs(((((   ;;; $$$&&&PrrPc.eZdZdZfdZdZdZxZS)FipsDsaSigScheme))i))rt)i rvc tt||||||_t |j}||jf|jvrd||jfz}t|dS)Nz+L/N (%d, %d) is not compliant to FIPS 186-3) rSrrr _randfuncrprr_fips_186_3_L_Nr1)rrrrrandfuncLerrorrVs rrzFipsDsaSigScheme.__init__s %%..sHeDDD! CENN ' ' ) ) t (< < <B4+,-EU## # = >ABBB c#344   &&&(h{KKK    c6 " " D%c8UHEE E#C5(CC C047888r)r+N)__all__Cryptodome.Util.asn1rCryptodome.Util.numberrCryptodome.Math.NumbersrCryptodome.HashrCryptodome.PublicKey.ECCrCryptodome.PublicKey.DSAr objectr rPrrrrr-rrrsdD '-,,,,,000000++++++ ++++++++++++}}}}}6}}}@KKKKK KKK\BBBBB|BBBD********