CasperSecurity
o
h9Ra�7 � @ s d Z ddlZddlZddlZddlZddlmZmZmZm Z m
Z
m Z m Z m
Z
mZ ddlZddlZddlmZ ddlmZ ddlmZ ddlmZ ddlmZ dd lmZm Z m Z e� e �Z G d
d � d e j!ej"d �Z#e#j$G d
d� de#��Z%e#j$G dd� de#��Z&e#j$G dd� de#��Z'dS )�
JSON Web Key.� N) �Dict�Optional�Sequence�Type�Union�Callable�Any�Tuple�Mapping)�default_backend)�hashes)�
serialization)�ec)�rsa)�errors� json_util�utilc
@ s e Zd ZU dZdZi Zeeed f e d< dZ
e ee df e d< e
Zee e d< dd d
d �Zeeeee ee ef f e d < e e d
< ejfdeg ejf defdd�Zej ddd��Z e d dedee dee de fdd��Z e d dedee dee dd fdd��Z dS ) �JWKr �kty�TYPES� .�cryptography_key_types�requiredN)�,�:T)�indent�
separators� sort_keys� _thumbprint_json_dumps_params�key�
hash_function�returnc sN t j|� t� d�}|�tj� fdd�� �� �� D �fi � j��� � � |�
� S )zgCompute JWK Thumbprint.
https://tools.ietf.org/html/rfc7638
:returns: bytes
)�backendc s i | ] \}}|� j v r||�qS r )r )�.0�k�v��selfr �,/usr/lib/python3/dist-packages/josepy/jwk.py�
<dictcomp>7 s
�z"JWK.thumbprint.<locals>.<dictcomp>) r
�Hashr �update�json�dumps�to_json�itemsr �encode�finalize)r( r! �digestr r' r) �
thumbprint, s ���zJWK.thumbprintc C s t � �)ziGenerate JWK with public key.
For symmetric cryptosystems, this would return ``self``.
)�NotImplementedErrorr' r r r) �
public_key< s zJWK.public_key�data�passwordr# c C s� |d u rt � n|}i }tjtjfD ](}z ||||�W S tttjjfy9 } z ||t |�< W Y d }~qd }~ww tj
tj fD ]&}z|||�W S ttjjfyf } z ||t |�< W Y d }~q@d }~ww t �
d�|���)Nz Unable to deserialize key: {0})r r �load_pem_private_key�load_der_private_key�
ValueError� TypeError� cryptography�
exceptions�UnsupportedAlgorithm�str�load_pem_public_key�load_der_public_keyr �Error�format)�clsr7 r8 r# r> �loader_private�error�
loader_publicr r r) �_load_cryptography_keyE s2 � ���� ���zJWK._load_cryptography_keyc
C s� z | � |||�}W n tjy' } zt�d|� t|d�W Y d}~S d}~ww | jtur>t|| j �s>t�d�
|j | j ���| j �
� D ]}t||j �rR||d� S qCt�d�
|j ���)a� Load serialized key as JWK.
:param str data: Public or private key serialized as PEM or DER.
:param str password: Optional password.
:param backend: A `.PEMSerializationBackend` and
`.DERSerializationBackend` provider.
:raises errors.Error: if unable to deserialize, or unsupported
JWK algorithm
:returns: JWK of an appropriate type.
:rtype: `JWK`
z,Loading symmetric key, asymmetric failed: %s�r Nz"Unable to deserialize {0} into {1}zUnsupported algorithm: {0})rI r rC �logger�debug�JWKOct�typ�NotImplemented�
isinstancer rD � __class__r �values)rE r7 r8 r# r rG �jwk_clsr r r) �load` s ��� �zJWK.load)r" r )NN)!�__name__�
__module__� __qualname__�__doc__�type_field_namer r r@ r �__annotations__r r
r rO r r r r r �int�boolr
�SHA256r �
HashAlgorithm�bytesr4 �abc�abstractmethodr6 � classmethodrI rT r r r r) r sJ
(� � �
� �� ����r )� metaclassc @ sj e Zd ZU dZdZdZdejfZe e
d< de e e f fdd�Z
ed ee ef dd fd
d ��Zdd d
�ZdS )rM zSymmetric JWK.�octrJ r% r r" c C s dt �| j�iS )Nr% )r �encode_b64joser r' r r r) �fields_to_partial_json� s z JWKOct.fields_to_partial_json�jobjc C s | t �|d �d�S )Nr% rJ )r �decode_b64jose�rE rg r r r) �fields_from_json� s zJWKOct.fields_from_jsonc C s | S �Nr r' r r r) r6 � s zJWKOct.public_keyN)r" rM )rU rV rW rX rN � __slots__r rY r r_ rZ r r@ rf rb r r rj r6 r r r r) rM � s
rM c s� e Zd ZU dZdZejejfZdZ de
j dfZ e
jjed< deded d
f� fd d � Zed
ed efdd��Zed
ed efdd��Zddd�Zedeeef d d fdd��Zd eeef fdd�Z � Z S )�JWKRSAz�RSA JWK.
:ivar key: :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPrivateKey`
or :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey` wrapped
in :class:`~josepy.util.ComparableRSAKey`
�RSArJ �e�nr �args�kwargsr" Nc �@ d|v rt |d tj�st�|d �|d< t� j|i |�� d S �Nr )rP r �ComparableRSAKey�super�__init__�r( rq rr �rQ r r) rw � �
�zJWKRSA.__init__r7 c C s0 t |�� d�}t�|d �}t�|jd|d��S )zOEncode Base64urlUInt.
:type data: long
:rtype: unicode
� �big�� byteorder�length)�max�
bit_length�math�ceilr re �to_bytes�rE r7 r r r r) �
_encode_param� s zJWKRSA._encode_paramc C s> zt �|�}|s t�� �tj|dd�W S ty t�� �w )�Decode Base64urlUInt.r| �r~ )r rh r �DeserializationErrorr[ �
from_bytesr; )rE r7 �binaryr r r) �
_decode_param� s
�zJWKRSA._decode_paramc C s t | �| j�� d�S )NrJ )�typer r6 r' r r r) r6 � s zJWKRSA.public_keyrg c
sD � �fdd�dD �\}}t j||d�}d�vr � |�t� �d�S � ��d �}d�v s?d�v s?d �v s?d
�v s?d �v s?d �v rst�fd
d�dD �� \}}}} }
} tdd� | D ��rbt�d�| ���t� fdd�| D ��\}}}} }
nt � |||�\}}t �
||�}t � ||�} t � ||�}
t �
||||| |
|��t� �} � | d�S )Nc 3 s � | ]
}� � �| �V qd S rk �r� �r$ �xri r r) � <genexpr>� s � z*JWKRSA.fields_from_json.<locals>.<genexpr>�rp ro )ro rp �drJ �p�q�dp�dq�qi�othc 3 s � | ]}� � |�V qd S rk )�getr� )rg r r) r� � s �
�)r� r� r� r� r� c s s � | ] }|d u r|V qd S rk r )r$ �paramr r r) r� � s � z(Some private parameters are missing: {0}c 3 s � | ]
}� � t|��V qd S rk )r� r@ r� )rE r r) r� � s �
�)r �RSAPublicNumbersr6 r r� �tupler rC rD �rsa_recover_prime_factors� rsa_crt_dmp1� rsa_crt_dmq1� rsa_crt_iqmp�RSAPrivateNumbers� private_key)
rE rg rp ro �public_numbersr� r� r� r� r� r� �
all_paramsr r ri r) rj � s> ��� � ���
zJWKRSA.fields_from_jsonc s~ t � jjtj�r� j�� }|j|jd�}n � j�� }� j� � �� }|j|j|j
|j |j |j
|j|jd�}� fdd�|�� D �S )Nr� )rp ro r� r� r� r� r� r� c s i | ]
\}}|� � |��qS r )r� �r$ r �valuer' r r) r* s �z1JWKRSA.fields_to_partial_json.<locals>.<dictcomp>)rP r �_wrappedr � RSAPublicKeyr� rp ro �private_numbersr6 r� r� r� �dmp1�dmq1�iqmpr0 )r( �numbers�params�private�publicr r' r) rf � s&
�
�
�z JWKRSA.fields_to_partial_json)r" rm ) rU rV rW rX rN r r� �
RSAPrivateKeyr rl r rY r �josepyr ru rZ r rw rb r[ r@ r� r� r6 r rj r rf �
__classcell__r r ry r) rm � s
)rm c s e Zd ZU dZdZdZejejfZ de
j ddfZ e
jjed< ded ed
d f� fd d
� Zededed
efdd��Zedededed
efdd��Zeded
efdd��Zeded
ejfdd��Zedejd
efd d ��Zd
e eef fd d �Z ed e eef d
d fd!d"��Z d%d#d$�Z � Z!S )&�JWKECz�EC JWK.
:ivar key: :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey`
or :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey` wrapped
in :class:`~josepy.util.ComparableECKey`
�ECrJ �crvr� �yr rq rr r" Nc rs rt )rP r �ComparableECKeyrv rw rx ry r r) rw rz zJWKEC.__init__r7 r c C s t �|jd|d��S )zlEncode Base64urlUInt.
:type data: long
:type key_size: long
:rtype: unicode
r| r} )r re r� r� r r r) r� s zJWKEC._encode_param�name� valid_lengthc C sX z t �|�}t|�|krt�dj||t|�d���tj|dd�W S ty+ t�� �w )r� ziExpected parameter "{name}" to be {valid_lengths} bytes after base64-decoding; got {length} bytes instead)r� �
valid_lengthsr r| r� ) r rh �lenr r� rD r[ r� r; )rE r7 r� r� r� r r r) r� & s
�� �zJWKEC._decode_param�
curve_namec C s, |dkrdS |dkr dS |dkrdS t �� �)N� secp256r1�P-256� secp384r1�P-384� secp521r1�P-521)r �SerializationError)rE r� r r r) �_curve_name_to_crv5 s zJWKEC._curve_name_to_crvc C s8 |dkrt �� S |dkrt �� S |dkrt �� S t�� �)Nr� r� r� )r � SECP256R1� SECP384R1� SECP521R1r r� )rE r� r r r) �
_crv_to_curve? s zJWKEC._crv_to_curve�curvec C s> t |tj�rdS t |tj�rdS t |tj�rdS td|� ���)N� �0 �B zUnexpected curve: )rP r r� r� r� r; )rE r� r r r) �expected_length_for_curveJ s z JWKEC.expected_length_for_curvec s� i }t �jjtj�r�j�� � n t �jjtj�r*�j�� }�j�� �� � |j |d< nt
� d��� j |d< � j
|d< � �fdd�|�� D �}��� jj�|d< |S )Nr� zRSupplied key is neither of type EllipticCurvePublicKey nor EllipticCurvePrivateKeyr� r� c s& i | ]\}}|�� |��� j���qS r )r� r� r� r� �r� r( r r) r* a s & z0JWKEC.fields_to_partial_json.<locals>.<dictcomp>r� )rP r r� r �EllipticCurvePublicKeyr� �EllipticCurvePrivateKeyr� r6 �
private_valuer r� r� r� r0 r� r� r� )r( r� r� r r� r) rf T s
�
z JWKEC.fields_to_partial_jsonrg c s� � � �d �}� �|��� ��fdd�dD �\}}tj|||d�}d�vr.� |�t� �d�S � ��d d��}t�||��t� �}� |d�S )Nr� c 3 s" � | ] }� � �| |��V qd S rk r� )r$ rp �rE �expected_lengthrg r r) r� j s � z)JWKEC.fields_from_json.<locals>.<genexpr>)r� r� )r� r� r� r� rJ ) r� r� r �EllipticCurvePublicNumbersr6 r r� �EllipticCurvePrivateNumbersr� )rE rg r� r� r� r� r� r r r� r) rj e s
�
zJWKEC.fields_from_jsonc C s8 t | jd�r | j�� }n | j�� �t� �}t| �|d�S )Nr6 rJ )�hasattrr r6 r� r r� )r( r r r r) r6 w s zJWKEC.public_key)r" r� )"rU rV rW rX rN rl r r� r� r r rY r r� r r� rZ r rw rb r[ r@ r� r� r� �
EllipticCurver� r� r rf r rj r6 r� r r ry r) r� s.
�
r� )(rX r` r- �loggingr� �typingr r r r r r r r
r �cryptography.exceptionsr= � josepy.utilr� � cryptography.hazmat.backendsr � cryptography.hazmat.primitivesr
r �)cryptography.hazmat.primitives.asymmetricr r r r r � getLoggerrU rK �TypedJSONObjectWithFields�ABCMetar �registerrM rm r� r r r r) �<module> s, ,
jo