(g0rddlmZddlmZmZddlmZmZddlm Z m Z m Z m Z dZ dZGddeZd d Zy ) )Integer)SHA512SHAKE256)bchris_bytes)EccKey construct_import_ed25519_public_key_import_ed448_public_keyct|dk(rt|\}}d}n6t|dk(rt|\}}d}ntdt|zt |||S)aCreate a new Ed25519 or Ed448 public key object, starting from the key encoded as raw ``bytes``, in the format described in RFC8032. Args: encoded (bytes): The EdDSA public key to import. It must be 32 bytes for Ed25519, and 57 bytes for Ed448. Returns: :class:`Crypto.PublicKey.EccKey` : a new ECC key object. Raises: ValueError: when the given key cannot be parsed. Ed255199Ed448zNot an EdDSA key (%d bytes))curvepoint_xpoint_y)lenr r ValueErrorr )encodedxy curve_names T/var/www/skyplay_api_hub/venv/lib/python3.12/site-packages/Crypto/Signature/eddsa.pyimport_public_keyr)sf" 7|r)'21 W '01 6WEFF :q! <<cvt|dk(rd}nt|dk(rd}n tdt||S)aCreate a new Ed25519 or Ed448 private key object, starting from the key encoded as raw ``bytes``, in the format described in RFC8032. Args: encoded (bytes): The EdDSA private key to import. It must be 32 bytes for Ed25519, and 57 bytes for Ed448. Returns: :class:`Crypto.PublicKey.EccKey` : a new ECC key object. Raises: ValueError: when the given key cannot be parsed. r ed25519red448z8Incorrect length. Only EdDSA private keys are supported.)seedr)rrr )rrs rimport_private_keyr!EsA" 7|r W  STT ' 44rc@eZdZdZdZdZdZdZdZdZ dZ d Z y ) EdDSASigSchemezlAn EdDSA signature object. Do not instantiate directly. Use :func:`Crypto.Signature.eddsa.new`. c||_||_|j|_|jj |_y)zCreate a new EdDSA object. Do not instantiate this object directly, use `Crypto.Signature.DSS.new` instead. N)_key_context_export_eddsa_public_A_curveorder_order)selfkeycontexts r__init__zEdDSASigScheme.__init__is3  **,jj&& rc6|jjS)zRReturn ``True`` if this signature object can be used for signing messages.)r% has_private)r,s rcan_signzEdDSASigScheme.can_signusyy$$&&rc|jjs td|jjdk(r?t |t j }|st|s td|j}nc|jjdk(r?t |tj}|st|s td|j}n td|||S)aJCompute the EdDSA signature of a message. Args: msg_or_hash (bytes or a hash object): The message to sign (``bytes``, in case of *PureEdDSA*) or the hash that was carried out over the message (hash object, for *HashEdDSA*). The hash object must be :class:`Crypto.Hash.SHA512` for Ed25519, and :class:`Crypto.Hash.SHAKE256` object for Ed448. :return: The signature as ``bytes``. It is always 64 bytes for Ed25519, and 114 bytes for Ed448. :raise TypeError: if the EdDSA key has no private half zPrivate key is needed to signr-'msg_or_hash' must be bytes of a SHA-512 hashr.'msg_or_hash' must be bytes of a SHAKE256 hashIncorrect curve for EdDSA) r%r1 TypeErrorr isinstancer SHA512Hashr _sign_ed25519r SHAKE256_XOF _sign_ed448r)r, msg_or_hashpheddsa_sign_methods rsignzEdDSASigScheme.sign{syy$$&;< < 99??i 'K):):;B(;/ OPP $ 2 2  YY__ 'K)>)>?B(;/ PQQ $ 0 0 89 9 b11rc:|js|rFt|}dt|ztt|jz|jz}nd}|r|j n|}t j ||jjz|zj }tj|d|jz}t||jjjzj}t j ||z|j z|zj } tj| d|jz} || |jj"zz|jz} || j%ddzS)N SigEd25519 no Ed25519 collisionsrlittlepointr )r&intrrdigestrnewr%_prefixr from_bytesr+rr)Gr'r(dto_bytes) r,r=r>flagdom2PHMr_hashrR_pkk_hashkss rr:zEdDSASigScheme._sign_ed25519sF ==Br7D6dCDMM*+,.2mmA 0 0 2 223HHJD4K$''1C78??A   vx 04;; > TYY[[ DKK /ajjX...rct|}dt|ztt|jz|jz}|r|j dn|}t j ||jjz|zj d}tj|d|jz}t||jjjzj}t j ||z|j z|zj d} tj| d|jz} || |jj"zz|jz} || j%ddzS)NSigEd448@rrCrDr)rFrrr&readrrHr%rIrrJr+rr)rKr'r(rLrM) r,r=r>rNdom4rPrQrRrSrTrUrVs rr<zEdDSASigScheme._sign_ed448s>2wT$Z'C &'(*.--8')kr"k dTYY%6%66<=BB3G   vx 04;; >A 0 0 2 223HHJdTkDGG3c9:??D   vx 04;; > TYY[[ DKK /ajjX...rc|jjdk(r?t|tj}|st |s t d|j}nc|jjdk(r?t|tj}|st |s t d|j}n td||||S)aCheck if an EdDSA signature is authentic. Args: msg_or_hash (bytes or a hash object): The message to verify (``bytes``, in case of *PureEdDSA*) or the hash that was carried out over the message (hash object, for *HashEdDSA*). The hash object must be :class:`Crypto.Hash.SHA512` object for Ed25519, and :class:`Crypto.Hash.SHAKE256` for Ed448. signature (``bytes``): The signature that needs to be validated. It must be 64 bytes for Ed25519, and 114 bytes for Ed448. :raise ValueError: if the signature is not authentic rr4rr5r6) r%rr8rr9rr7_verify_ed25519rr; _verify_ed448r)r,r= signaturer>eddsa_verify_methods rverifyzEdDSASigScheme.verifys$ 99??i 'K):):;B(;/ OPP"&"6"6  YY__ 'K)>)>?B(;/ PQQ"&"4"4 89 9"; 2>>rc:t|dk7r td|js|rFt|}dt |zt t|jz|jz}nd}|r|j n|} t |ddj}tj|ddd}||jkDr tdtj||ddz|jz|zj } tj| d|jz} |d z|jjj z} d |z| d z|jjzz} | | k7r td y#t$r tdwxYw) NrY'The signature is not authentic (length)rBrr "The signature is not authentic (R)rC"The signature is not authentic (S)The signature is not authentic)rrr&rFrrGrpointQrrJr+rrHr(r%r)rK) r,r=r`r>rNrOrPRrVrTrUpoint1point2s rr^zEdDSASigScheme._verify_ed25519s y>R FG G ==Br7D6dCDMM*+,.2mm1DGG;cABIIK   vx 04;; >Q))+++QQ!1!111 V => >  CAB B Cs FFct|dk7r tdt|}dt|ztt|jz|jz}|r|j dn|} t |ddj}tj|ddd}||jkDr tdtj||ddz|jz|zj d} tj| d|jz} |d z|jjj z} d |z| d z|jjzz} | | k7r td y#t$r tdwxYw) NrZrdrXrYrrerCrfrgrh)rrrFrr&r[rrirrJr+rrHr(r%r)rK) r,r=r`r>rNr\rPrjrVrTrUrkrls rr_zEdDSASigScheme._verify_ed448s| y>S FG G2wT$Z'C &'(*.--8')kr"k  C!)CR.188A   y~x 8 t{{?AB BdYs^3dgg=CDII#N   vx 04;; >Q))+++QQ!1!111 V => >  CAB B Cs 5E66F N) __name__ __module__ __qualname____doc__r/r2r@r:r<rbr^r_rrr#r#cs2 '' !2F/6/0!?F!?F?rr#Nct|tr|jdvr td|dk7r td|d}nt |dkDr tdt ||S)aCreate a signature object :class:`EdDSASigScheme` that can perform or verify an EdDSA signature. Args: key (:class:`Crypto.PublicKey.ECC` object): The key to use for computing the signature (*private* keys only) or for verifying one. The key must be on the curve ``Ed25519`` or ``Ed448``. mode (string): This parameter must be ``'rfc8032'``. context (bytes): Up to 255 bytes of `context `_, which is a constant byte string to segregate different protocols or different applications of the same key. )rrz&EdDSA can only be used with EdDSA keysrfc8032zMode must be 'rfc8032'rz3Context for EdDSA must not be longer than 255 bytes)r8rrrrr#)r-moder.s rrHrH9si& c6 "cii7K&KABB y122 W NOO #w ''r)N)Crypto.Math.Numbersr Crypto.HashrrCrypto.Util.py3compatrrCrypto.PublicKey.ECCrr r r rr!objectr#rHrrrrr|s8>((0<< =85