FM / openssl

/snap/core20/2866/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/

/snap/core20/2866/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl

Name	Size	Mode	Actions
__pycache__/	-	0755	rm
aead.py	5750	0644	edit dl rm
backend.py	97231	0644	edit dl rm
ciphers.py	9337	0644	edit dl rm
cmac.py	2855	0644	edit dl rm
decode_asn1.py	33303	0644	edit dl rm
dh.py	10814	0644	edit dl rm
dsa.py	10228	0644	edit dl rm
ec.py	12590	0644	edit dl rm
ed448.py	6045	0644	edit dl rm
ed25519.py	6081	0644	edit dl rm
encode_asn1.py	23593	0644	edit dl rm
hashes.py	3196	0644	edit dl rm
hmac.py	2998	0644	edit dl rm
ocsp.py	13654	0644	edit dl rm
poly1305.py	2356	0644	edit dl rm
rsa.py	17405	0644	edit dl rm
utils.py	2339	0644	edit dl rm
x448.py	4526	0644	edit dl rm
x509.py	20099	0644	edit dl rm
x25519.py	5580	0644	edit dl rm
__init__.py	336	0644	edit dl rm

Edit: /snap/core20/2866/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/cmac.py (2855B)

# This file is dual licensed under the terms of the Apache License, Version
# 2.0, and the BSD License. See the LICENSE file in the root of this repository
# for complete details.

from __future__ import absolute_import, division, print_function

from cryptography import utils
from cryptography.exceptions import (
    InvalidSignature, UnsupportedAlgorithm, _Reasons
)
from cryptography.hazmat.primitives import constant_time
from cryptography.hazmat.primitives.ciphers.modes import CBC

class _CMACContext(object):
    def __init__(self, backend, algorithm, ctx=None):
        if not backend.cmac_algorithm_supported(algorithm):
            raise UnsupportedAlgorithm("This backend does not support CMAC.",
                                       _Reasons.UNSUPPORTED_CIPHER)

self._backend = backend
        self._key = algorithm.key
        self._algorithm = algorithm
        self._output_length = algorithm.block_size // 8

if ctx is None:
            registry = self._backend._cipher_registry
            adapter = registry[type(algorithm), CBC]

evp_cipher = adapter(self._backend, algorithm, CBC)

ctx = self._backend._lib.CMAC_CTX_new()

self._backend.openssl_assert(ctx != self._backend._ffi.NULL)
            ctx = self._backend._ffi.gc(ctx, self._backend._lib.CMAC_CTX_free)

key_ptr = self._backend._ffi.from_buffer(self._key)
            res = self._backend._lib.CMAC_Init(
                ctx, key_ptr, len(self._key),
                evp_cipher, self._backend._ffi.NULL
            )
            self._backend.openssl_assert(res == 1)

self._ctx = ctx

algorithm = utils.read_only_property("_algorithm")

def update(self, data):
        res = self._backend._lib.CMAC_Update(self._ctx, data, len(data))
        self._backend.openssl_assert(res == 1)

def finalize(self):
        buf = self._backend._ffi.new("unsigned char[]", self._output_length)
        length = self._backend._ffi.new("size_t *", self._output_length)
        res = self._backend._lib.CMAC_Final(
            self._ctx, buf, length
        )
        self._backend.openssl_assert(res == 1)

self._ctx = None

return self._backend._ffi.buffer(buf)[:]

def copy(self):
        copied_ctx = self._backend._lib.CMAC_CTX_new()
        copied_ctx = self._backend._ffi.gc(
            copied_ctx, self._backend._lib.CMAC_CTX_free
        )
        res = self._backend._lib.CMAC_CTX_copy(
            copied_ctx, self._ctx
        )
        self._backend.openssl_assert(res == 1)
        return _CMACContext(
            self._backend, self._algorithm, ctx=copied_ctx
        )

def verify(self, signature):
        digest = self.finalize()
        if not constant_time.bytes_eq(digest, signature):
            raise InvalidSignature("Signature did not match digest.")

# This file is dual licensed under the terms of the Apache License, Version # 2.0, and the BSD License. See the LICENSE file in the root of this repository # for complete details. from __future__ import absolute_import, division, print_function from cryptography import utils from cryptography.exceptions import ( InvalidSignature, UnsupportedAlgorithm, _Reasons ) from cryptography.hazmat.primitives import constant_time from cryptography.hazmat.primitives.ciphers.modes import CBC class _CMACContext(object): def __init__(self, backend, algorithm, ctx=None): if not backend.cmac_algorithm_supported(algorithm): raise UnsupportedAlgorithm("This backend does not support CMAC.", _Reasons.UNSUPPORTED_CIPHER) self._backend = backend self._key = algorithm.key self._algorithm = algorithm self._output_length = algorithm.block_size // 8 if ctx is None: registry = self._backend._cipher_registry adapter = registry[type(algorithm), CBC] evp_cipher = adapter(self._backend, algorithm, CBC) ctx = self._backend._lib.CMAC_CTX_new() self._backend.openssl_assert(ctx != self._backend._ffi.NULL) ctx = self._backend._ffi.gc(ctx, self._backend._lib.CMAC_CTX_free) key_ptr = self._backend._ffi.from_buffer(self._key) res = self._backend._lib.CMAC_Init( ctx, key_ptr, len(self._key), evp_cipher, self._backend._ffi.NULL ) self._backend.openssl_assert(res == 1) self._ctx = ctx algorithm = utils.read_only_property("_algorithm") def update(self, data): res = self._backend._lib.CMAC_Update(self._ctx, data, len(data)) self._backend.openssl_assert(res == 1) def finalize(self): buf = self._backend._ffi.new("unsigned char[]", self._output_length) length = self._backend._ffi.new("size_t *", self._output_length) res = self._backend._lib.CMAC_Final( self._ctx, buf, length ) self._backend.openssl_assert(res == 1) self._ctx = None return self._backend._ffi.buffer(buf)[:] def copy(self): copied_ctx = self._backend._lib.CMAC_CTX_new() copied_ctx = self._backend._ffi.gc( copied_ctx, self._backend._lib.CMAC_CTX_free ) res = self._backend._lib.CMAC_CTX_copy( copied_ctx, self._ctx ) self._backend.openssl_assert(res == 1) return _CMACContext( self._backend, self._algorithm, ctx=copied_ctx ) def verify(self, signature): digest = self.finalize() if not constant_time.bytes_eq(digest, signature): raise InvalidSignature("Signature did not match digest.")