o 6d9@sddlmZddlZddlZddlZddlZddlmZddlm Z m Z m Z m Z ddl mZddlmZdZejeZd Zd Zejd krId d Zndd ZejdkrWddZnddZddZdAddZGdddZddZddZddZefdd Zefd!d"Z d#d$Z!d%d&Z"d'd(Z#d)d*Z$d+d,Z%d-d.Z&d/d0Z'd1d2Z(d3d4Z)d5d6Z*d7d8Z+Gd9d:d:e,Z-d;d<Z.d=d>Z/d?d@Z0dS)B)divisionN)sha256)PY2int2bytebnext)der)normalise_bytes)riHi='r r)rr )rr r r )r cCs&tt|dddt|dS)-Convert a bytestring to string of 0's and 1'sbigr N)binint from_byteszfilllenent_256raC:\Users\jesus\OneDrive\Desktop\erpjis_fastapi\backend\jisbackend\Lib\site-packages\ecdsa/util.pyentropy_to_bits&s&rcCsddd|DS)rcss*|]}tt|dddVqdS)r Nr)rordr).0xrrr .s(z"entropy_to_bits..)joinrrrrr,s)r cCstt|dSNr )rrr rrr bit_length3r&cCs |pdSNr)r&r%rrrr&8 cCsdtd|dS)Nrz%xr )r)orderrrrorderlen<sr+cCsv|dksJ|dur tj}t|d}|dd} ||}t|}t|d|ddd}d|kr9|kr:|Sq)aReturn a random integer k such that 1 <= k < order, uniformly distributed across that range. Worst case should be a mean of 2 loops at (2**k)+2. Note that this function is not declared to be forwards-compatible: we may change the behavior in future releases. The entropy= argument (which should get a callable that behaves like os.urandom) can be used to achieve stability within a given release (for repeatable unit tests), but should not be used as a long-term-compatible key generation algorithm. rNr rT)baser)osurandomr&rr)r*ZentropyZupper_2Z upper_256rZent_2Zrand_numrrr randrange@s   r/c@s$eZdZddZddZddZdS)PRNGcCs|||_dSN)block_generator generator)selfseedrrr__init__^r'z PRNG.__init__cs,fddt|D}trd|St|S)Ncsg|]}tjqSr)rr3)rir4rr bsz!PRNG.__call__..r)rangerr"bytes)r4numbytesarr8r__call__as z PRNG.__call__ccs6d} td||fD]}|Vq|d7}q)NrTz prng-%d-%sr)rencodedigest)r4r5counterbyterrrr2iszPRNG.block_generatorN)__name__ __module__ __qualname__r6r>r2rrrrr0Xs r0cCsXt|dt|}tt|d|dd}d|kr"|ks*nJd||f|S)Nr r)r0r+rbinasciihexlify)r5r*r,numberrrr%randrange_from_seed__overshoot_moduloss$rJcCs d|>dSr(r)Znumbitsrrr lsb_of_onesr)rKcCs2tt|ddd}|d}|d}|||fS)Nrr r)rmathlog)r*bitsr; extrabitsrrrbits_and_bytess rPcCsvt|\}}}|r |d7}||d|}d|t||}dtt|d}d|kr6|ks9JJ|S)NrrF)rPr@rrrGrH)r5r*hashmodrNZ_bytesrOr,rIrrr#randrange_from_seed__truncate_bytessrScCstt|ddd}|dd}||d|}d|t||}d||}|r@tt|dt|@|dd}dtt |d}d|krU|ksXJJ|S)Nrr r#rrQrrF) rrLrMr@rrrrKrGrH)r5r*rRrNZmaxbytesr,ZtopbitsrIrrr"randrange_from_seed__truncate_bitss  $rTcCsv|dksJt|\}}}t|} td}|r$tt|dt|@}t|||d}d|kr9|kr:|Sq)NrTr)rPr0rrrrKstring_to_number)r5r*rNr;rOgenerateZ extrabyteguessrrr randrange_from_seed__trytryagains rXcCsNt|}dtd|d}t||}t||ks%Jt||f|SNz%0r r )r+strrG unhexlifyr?rnumr*lZfmt_strstringrrrnumber_to_strings r`cCs:t|}dtd|d}t||}|d|SrY)r+rZrGr[r?r\rrrnumber_to_string_crops racCstt|dSNrF)rrGrH)r_rrrrUr'rUcCs4t|}t||ksJt||ftt|dSrb)r+rrrGrH)r_r*r^rrrstring_to_number_fixedlensrccCst||}t||}||fSr1)r`rsr*r_strs_strrrrsigencode_stringss  ricCst|||\}}||S)a Encode the signature to raw format (:term:`raw encoding`) It's expected that this function will be used as a `sigencode=` parameter in :func:`ecdsa.keys.SigningKey.sign` method. :param int r: first parameter of the signature :param int s: second parameter of the signature :param int order: the order of the curve over which the signature was computed :return: raw encoding of ECDSA signature :rtype: bytes rirdrrrsigencode_stringsrkcCstt|t|S)a Encode the signature into the ECDSA-Sig-Value structure using :term:`DER`. Encodes the signature to the following :term:`ASN.1` structure:: Ecdsa-Sig-Value ::= SEQUENCE { r INTEGER, s INTEGER } It's expected that this function will be used as a `sigencode=` parameter in :func:`ecdsa.keys.SigningKey.sign` method. :param int r: first parameter of the signature :param int s: second parameter of the signature :param int order: the order of the curve over which the signature was computed :return: DER encoding of ECDSA signature :rtype: bytes )r Zencode_sequenceZencode_integerrerfr*rrr sigencode_dersrmcC ||dkr ||}t|||Sr$rjrlrrrsigencode_strings_canonize  rocCrnr$)rkrlrrrsigencode_string_canonize#rprqcCrnr$)rmrlrrrsigencode_der_canonize)rprrc@seZdZdZdS)MalformedSignatureaB Raised by decoding functions when the signature is malformed. Malformed in this context means that the relevant strings or integers do not match what a signature over provided curve would create. Either because the byte strings have incorrect lengths or because the encoded values are too large. N)rCrDrE__doc__rrrrrs/s rscCsdt|}t|}t|d|kstdd|t|t|d||}t||d|}||fS)a Decoder for :term:`raw encoding` of ECDSA signatures. raw encoding is a simple concatenation of the two integers that comprise the signature, with each encoded using the same amount of bytes depending on curve size/order. It's expected that this function will be used as the `sigdecode=` parameter to the :func:`ecdsa.keys.VerifyingKey.verify` method. :param signature: encoded signature :type signature: bytes like object :param order: order of the curve over which the signature was computed :type order: int :raises MalformedSignature: when the encoding of the signature is invalid :return: tuple with decoded 'r' and 's' values of signature :rtype: tuple of ints r zWInvalid length of signature, expected {0} bytes long, provided string is {1} bytes longN)r r+rrsformatrc) signaturer*r^rerfrrrsigdecode_string<srwcCst|dkstdt||\}}t|}t|}t|}t||ks/td|t|t||ks?td|t|t||}t||}||fS)a Decode the signature from two strings. First string needs to be a big endian encoding of 'r', second needs to be a big endian encoding of the 's' parameter of an ECDSA signature. It's expected that this function will be used as the `sigdecode=` parameter to the :func:`ecdsa.keys.VerifyingKey.verify` method. :param list rs_strings: list of two bytes-like objects, each encoding one parameter of signature :param int order: order of the curve over which the signature was computed :raises MalformedSignature: when the encoding of the signature is invalid :return: tuple with decoded 'r' and 's' values of signature :rtype: tuple of ints r z3Invalid number of strings provided: {0}, expected 2zjInvalid length of first string ('r' parameter), expected {0} bytes long, provided string is {1} bytes longzkInvalid length of second string ('s' parameter), expected {0} bytes long, provided string is {1} bytes long)rrsrur r+rc) rs_stringsr*rgrhr^rerfrrrsigdecode_strings]s.       rycCsrt|}t|\}}|dkrtdt|t|\}}t|\}}|dkr5tdt|||fS)a Decoder for DER format of ECDSA signatures. DER format of signature is one that uses the :term:`ASN.1` :term:`DER` rules to encode it as a sequence of two integers:: Ecdsa-Sig-Value ::= SEQUENCE { r INTEGER, s INTEGER } It's expected that this function will be used as as the `sigdecode=` parameter to the :func:`ecdsa.keys.VerifyingKey.verify` method. :param sig_der: encoded signature :type sig_der: bytes like object :param order: order of the curve over which the signature was computed :type order: int :raises UnexpectedDER: when the encoding of signature is invalid :return: tuple with decoded 'r' and 's' values of signature :rtype: tuple of ints ztrailing junk after DER sig: %sz#trailing junk after DER numbers: %s)r r Zremove_sequenceZ UnexpectedDERrGrHZremove_integer)Zsig_derr*rxemptyrerestrfrrr sigdecode_ders  r}r1)1 __future__rr-rLrGsyshashlibrsixrrrrrr Z_compatr Zoid_ecPublicKeyZ encode_oidZencoded_oid_ecPublicKeyZoid_ecDHZ oid_ecMQV version_inforr&r+r/r0rJrKrPrSrTrXr`rarUrcrirkrmrorqrr Exceptionrsrwryr}rrrrsT               ! .