관리-도구
편집 파일: ciphers.cpython-36.pyc
3 T��e�! � @ s� d dl mZmZmZ d dlmZ d dlmZmZm Z d dl m Z d dl m Z eje j�eje j�eje j�eje j�G dd� de�����ZdS ) � )�absolute_import�division�print_function)�utils)� InvalidTag�UnsupportedAlgorithm�_Reasons)�ciphers)�modesc @ sR e Zd ZdZdZdZdd� Zdd� Zd d � Zd d � Z d d� Z dd� Z e j d�ZdS )�_CipherContext� r � � c C s� || _ || _|| _|| _d | _t| jtj�r<| jjd | _ nd| _ | j j j � }| j j j || j j j�}| j j}y|t|�t|�f }W n4 tk r� tdj|j|r�|jn|�tj��Y nX || j ||�}|| j j jk�rdj|�} |d k r�| dj|�7 } | dj| j j� �7 } t| tj��t|tj��r8| j j j|j �} njt|tj ��rX| j j j|j �} nJt|tj ��rx| j j j|j �} n*t|tj ��r�| j j j|j �} n | j j j} | j j j!||| j j j| j j j| j j j|�} | j j"| dk� | j j j#|t$|j%��} | j j"| dk� t|tj&��r�| j j j'|| j j j(t$| �| j j j�} | j j"| dk� |j)d k �r�| j j j'|| j j j*t$|j)�|j)�} | j j"| dk� |j)| _| j j j!|| j j j| j j j| j j j|j%�| |�} | j j"| dk� | j j j+|d� || _,d S )N� r z6cipher {} in {} mode is not supported by this backend.zcipher {0.name} zin {0.name} mode z_is not supported by this backend (Your version of OpenSSL may be too old. Current version: {}.)r )-�_backendZ_cipher�_mode� _operation�_tag� isinstancer ZBlockCipherAlgorithmZ block_size�_block_size_bytes�_libZEVP_CIPHER_CTX_new�_ffi�gcZEVP_CIPHER_CTX_freeZ_cipher_registry�type�KeyErrorr �format�namer ZUNSUPPORTED_CIPHER�NULLZopenssl_version_textr Z ModeWithInitializationVector� from_bufferZinitialization_vectorZ ModeWithTweakZtweakZ ModeWithNonceZnonceZEVP_CipherInit_ex�openssl_assertZ EVP_CIPHER_CTX_set_key_length�len�key�GCM�EVP_CIPHER_CTX_ctrlZEVP_CTRL_AEAD_SET_IVLEN�tag�EVP_CTRL_AEAD_SET_TAGZEVP_CIPHER_CTX_set_padding�_ctx) �selfZbackendZcipher�modeZ operationZctx�registryZadapterZ evp_cipher�msgZiv_nonce�res� r, � /usr/lib64/python3.6/ciphers.py�__init__ s� z_CipherContext.__init__c C s2 t t|�| j d �}| j||�}t|d |� �S )Nr )� bytearrayr r � update_into�bytes)r' �data�buf�nr, r, r- �updatez s z_CipherContext.updatec C s� t |�}t |�|| j d k r:tdjt |�| j d ���d}d}| jjjd�}| jjj|dd�}| jjj|�}xh||kr�|| } || } t| j || �} | jj j | j | || | �} | jj | dk� || 7 }||d 7 }qrW |S )Nr z1buffer must be at least {} bytes for this payloadr zint *T)Zrequire_writable)r r � ValueErrorr r r �newr �min�_MAX_CHUNK_SIZEr �EVP_CipherUpdater& r ) r' r2 r3 Ztotal_data_lenZdata_processedZ total_out�outlenZ baseoutbufZ baseinbufZoutbufZinbufZinlenr+ r, r, r- r0 s( z_CipherContext.update_intoc C sh | j | jkr,t| jtj�r,| jd kr,td��| jj j d| j �}| jj j d�}| jj j | j||�}|dkr�| jj� }| r�t| jtj�r�t�| jj|d j| jj j| jj j�|d� td��t| jtj�o�| j | jk�r.| jj j d| j �}| jj j| j| jj j| j |�}| jj|dk� | jj j|�d d � | _| jj j| j�}| jj|dk� | jj j|�d |d � S )Nz4Authentication tag must be provided when decrypting.zunsigned char[]zint *r )�errorszFThe length of the provided data is not a multiple of the block length.r ) r �_DECRYPTr r r ZModeWithAuthenticationTagr$ r6 r r r7 r r ZEVP_CipherFinal_exr& Z_consume_errorsr" r r Z_lib_reason_matchZ ERR_LIB_EVPZ'EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH�_ENCRYPTr# ZEVP_CTRL_AEAD_GET_TAG�bufferr ZEVP_CIPHER_CTX_cleanup)r' r3 r; r+ r< Ztag_bufr, r, r- �finalize� sB z_CipherContext.finalizec C s` t |�| jjk r"tdj| jj���| jjj| j| jjj t |�|�}| jj |dk� || _ | j � S )Nz.Authentication tag must be {} bytes or longer.r ) r r Z_min_tag_lengthr6 r r r r# r& r% r r r@ )r' r$ r+ r, r, r- �finalize_with_tag� s z _CipherContext.finalize_with_tagc C sN | j jjd�}| j jj| j| j jj|| j jj|�t|��}| j j |dk� d S )Nzint *r ) r r r7 r r: r& r r r r )r' r2 r; r+ r, r, r- � authenticate_additional_data� s z+_CipherContext.authenticate_additional_datar Ni @i���?)�__name__� __module__� __qualname__r> r= r9 r. r5 r0 r@ rA rB r Zread_only_propertyr$ r, r, r, r- r s d 3 r N)Z __future__r r r Z cryptographyr Zcryptography.exceptionsr r r Z cryptography.hazmat.primitivesr Z&cryptography.hazmat.primitives.ciphersr Zregister_interfaceZ CipherContextZAEADCipherContextZAEADEncryptionContextZAEADDecryptionContext�objectr r, r, r, r- �<module> s