+ '(jjW.ROt^RIt^RIt^RIt^RIHtHtHtHtH t ^RI H t ^RI H t Ht^RIHt^RIHtHtHtHtHt^RIHt^R IHtHtHt^R IHtHtH t !R R]!4t"R t#RR lt$RRlt%Rt&Rt'Rt(Rt)Rt*RRlt+]+t,Rt-R#)generateDsaKeyN)bchrbordtobytestostr iter_range)Random)PKCS8PEM)SHA256) DerObject DerSequence DerInteger DerObjectId DerBitString)Integer)test_probable_prime COMPOSITEPROBABLY_PRIME)_expand_subject_public_key_info_create_subject_public_key_info _extract_subject_public_key_infoca]tRt^NtoRt.ROtRtRtRtRt Rt Rt Rt R t R tR tR tR tRtRRlt]t] tRtRtRtRtRtRtRtRtVtR#)raClass defining an actual DSA key. Do not instantiate directly. Use :func:`generate`, :func:`construct` or :func:`import_key` instead. :ivar p: DSA modulus :vartype p: integer :ivar q: Order of the subgroup :vartype q: integer :ivar g: Generator :vartype g: integer :ivar y: Public key :vartype y: integer :ivar x: Private key :vartype x: integer :undocumented: exportKey, publickey c t\VP44p\R4pVPV4'g"\R\ W2, 4,4hW#, pV'd<V\R48wd,\R\ V\R4, 4,4h\ V4VnR#)yz$Some DSA components are missing = %szUnknown DSA components = %sNrgpqx)setkeysissubset ValueErrorstrdict_key)selfkey_dict input_set public_set extra_sets&& I/home/ubuntu/cf-venv/lib/python3.14/site-packages/Crypto/PublicKey/DSA.py__init__DsaKey.__init__gs ( ./ ""9--C !789: :* c&k1: S[!89:; ;N cVP4'g \R4h^Tu;8dVP8gM\R4hRUu.uFq0PV,NK upwrErg\ P !^VR7pW,PV4p WH,p \WrV4V,p WV,W,,,V,p \\W34#uupi)z)DSA public key cannot be used for signingzk is not between 2 and q-1) min_inclusive max_exclusive)r!rrr) has_private TypeErrorrr%r(r random_rangeinversepowmapint) r)mkcompr!rrr blind_factor inv_blind_kblind_xrss &&& r._sign DsaKey._signss!!GH HA9: :2FG2F$iioo2FG a++!9:< #'003 " aL1  1,w{: ;q @3Hs C+c|Vwr4RUu.uFqPPV,NK upwrgr^Tu;8dV8dMR#^Tu;8d V8gR#R#\V4PV4p W,V,p W,V,p \WV4\WlV4,V,V,p W8H#uupi)rF)rrrr)r(rr8r9)r)r<sigrBrCr>rrrrwu1u2vs&&& r._verifyDsaKey._verifys2FG2F$iioo2FG aA  $%q919$- AJ  q !eq[eq[ ]S] *Q .! 3v HsB9c RVP9#)z!Whether this is a DSA private keyr!r(r)s&r.r5DsaKey.has_privatesdiir1cR#)FrPs&r. can_encryptDsaKey.can_encryptsr1cR#TrSrPs&r.can_signDsaKey.can_signsr1c Da\V3RlR44p\V4#)zFA matching DSA public key. Returns: a new :class:`DsaKey` object c3L<"TFqSPV,3xK R#5iNrO).0r=r)s& r. $DsaKey.public_key..s Q V#)FTN)boolr5_keydatagetattrr()r)otherresultr>s&& r.__eq__ DsaKey.__eq__sy   " #tE,=,=,?'@ @MMDBBD$!?!(T4!@"AF" r1c.VPV4'*#r\)ri)r)rgs&&r.__ne__ DsaKey.__ne__s;;u%%%r1c^RIHpVh)) PicklingError)picklerp)r)rps& r. __getstate__DsaKey.__getstate__s (r1c dRUu.uFp\VPV,4NK! up#uupi)z8The DSA domain parameters. Returns tuple : (p,q,g) )rrr)r;r()r)r>s& r.domain DsaKey.domains*2AADIIdO$AAAs%-c.pVPFlpVR8Xd?\VP4P4pVP RV3,4KH\ W4'gK[VP V4Kn VP 4'dVP R4RVPP\V4RPV43,#)rzp(%d)privatez <%s @0x%x %s>,) rerr size_in_bitsappendhasattrr5 __class____name__idjoin)r)attrsr=bitss& r.__repr__DsaKey.__repr__sACxtvv335 Ww./!! Q       LL #$.."9"92d8SXXe_!UUUr1cp\VPV,4# \d \T4hi;ir\)r;r(KeyErrorAttributeError)r)items&&r. __getattr__DsaKey.__getattr__s4 'tyy' ' ' & & 's5Nc  &Ve \V4pVf\PpVR8XdRUu.uF#q`PV,P 4NK% ppRpVUu.uF qh!V4NK p pR.V ,p RP V U u.uF*p \ P!R\V 44V ,NK, up 4p R\P!V 4RR,#\VPVPVP.4p VP4'dVfRpV'd]V'gR p\!VP"4P%4p\&P(!V\*VWMVR 7pV'dR pMR pRpMVR 8wdV'd \-R4h^VPVPVPVP.VP".p\V4P%4pRpM9V'd \-R4h\1\*\!VP.4V 4pRpVR8XdV#VR 8Xd+\2P$!VVR,W54p\V4#\-RV,4huupiuupiuup i)a_Export this DSA key. Args: format (string): The encoding for the output: - *'PEM'* (default). ASCII as per `RFC1421`_/ `RFC1423`_. - *'DER'*. Binary ASN.1 encoding. - *'OpenSSH'*. ASCII one-liner as per `RFC4253`_. Only suitable for public keys, not for private keys. passphrase (string): *Private keys only*. The pass phrase to protect the output. pkcs8 (boolean): *Private keys only*. If ``True`` (default), the key is encoded with `PKCS#8`_. If ``False``, it is encoded in the custom OpenSSL/OpenSSH container. protection (string): *Only in combination with a pass phrase*. The encryption scheme to use to protect the output. If :data:`pkcs8` takes value ``True``, this is the PKCS#8 algorithm to use for deriving the secret and encrypting the private DSA key. For a complete list of algorithms, see :mod:`Crypto.IO.PKCS8`. The default is *PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC*. If :data:`pkcs8` is ``False``, the obsolete PEM encryption scheme is used. It is based on MD5 for key derivation, and Triple DES for encryption. Parameter :data:`protection` is then ignored. The combination ``format='DER'`` and ``pkcs8=False`` is not allowed if a passphrase is present. randfunc (callable): A function that returns random bytes. By default it is :func:`Crypto.Random.get_random_bytes`. Returns: byte string : the encoded key Raises: ValueError : when the format is unknown or when you try to encrypt a private key with *DER* format and OpenSSL/OpenSSH. .. warning:: If you don't provide a pass phrase, the private key will be exported in the clear! .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _RFC4253: http://www.ietf.org/rfc/rfc4253.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt NOpenSSHch\V^,4^,'d\^4V,#V#)ro)rrr s&r.funcDsaKey.export_key..funcs(1J%%7Q;&Hr1ssh-dssr1>Issh-dss Tz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC) key_paramsrandfunczENCRYPTED PRIVATEPRIVATEr z#DSA private key cannot be encryptedz DSA PRIVATEz*PKCS#8 is only meaningful for private keysPUBLICDERz KEYz3Unknown key format '%s'. Cannot export the DSA key.)rrrr)rr get_random_bytesr(to_bytesrstructpacklenbinascii b2a_base64rrrrr5rr!encoder wrapoidr%rrr )r)formatpkcs8 passphrase protectionrr!tup1rtup2keypartskp keystringparams private_key binary_keykey_typeintspem_strs&&&&&& r. export_keyDsaKey.export_keys>v  ! ,J  ..H Y 5IJ5IIIaL))+5IDJ  &**TDGTD*"|d*HGOPxV[[s2w7"<> q ! Fa!e I !!a%( +(!jj 3 < < >>?FFH(  +-. 0Qg  #Q 0 Z]C]1qz*++]C!r'Q'A!*,=> @ AM "~~1$%$ QK QK >> q q( +~ =a% Q1 A# 7NT!W $wu~'>'>'@ @   vzz!}335 6 1aL 6  $ q!T?3 + 0CsAM'M,%M1c Vf\PpV'd\\V4wr4p\ V4\ 8HpV\ V4\ 8H,pWc^, V,^8g,pYe^8*;'gWS8,pV\ WTV4^8g,pV'd \R4hM\W4wr4rWVP4pVP4p W8wd\RW3,4hW3R 9d\RW3,4h^Tu;8dV8gM\R4h\P!V ^@,VR7p W^, ,^,p \ W[V4p RV RVRVR VR V /p \V 4#) aGenerate a new DSA key pair. The algorithm follows Appendix A.1/A.2 and B.1 of `FIPS 186-4`_, respectively for domain generation and key pair generation. Args: bits (integer): Key length, or size (in bits) of the DSA modulus *p*. It must be 1024, 2048 or 3072. randfunc (callable): Random number generation function; it accepts a single integer N and return a string of random data N bytes long. If not specified, :func:`Crypto.Random.get_random_bytes` is used. domain (tuple): The DSA domain parameters *p*, *q* and *g* as a list of 3 integers. Size of *p* and *q* must comply to `FIPS 186-4`_. If not specified, the parameters are created anew. Returns: :class:`DsaKey` : a new DSA key object Raises: ValueError : when **bits** is too little, too big, or not a multiple of 64. .. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf zInvalid DSA domain parametersz?Mismatch between size of modulus (%d) and 'bits' parameter (%d)z;Lengths of p and q (%d, %d) are not compatibleto FIPS 186-3zIncorrent DSA generator) exact_bitsrrrrrr!))r)r)rr)rr) r rr:rrrr9r%rrzrandomr)rrrurrr fmt_error_rrrr!rr*s&&& r.rrs<** gv&a(*i7 (+y88 1uka'' !V%%qv% Sq\Q&& <= = &d5 a A Ay69: BC C v00),-623 3 q919233 !b&81 Ssuu-22 UUaZ11355CEE>1 3   !55suu~ 5I SUUCEE3551SUU: :I566 Jr1cV'd \R4h\4PV^RR7pV^,^8wd \R4hRUu.uF qCV,NK pp\V4#uupi)z-DSA private key already comes with parametersT) nr_elementsonly_ints_expectedzNo version found))r%rdecoder )encodedrrderr>rs&&& r._import_openssl_privater!sh HII -  wA$  OC 1v{+,,!0 1t99C 1 S> 2s A+cB\V4wr4pV\8wd \R4hV'dV'd \R4h\4P V4P p\ \4P T;'gT44wrxp WiWx3p \V 4#)zNo DSA subjectPublicKeyInfozToo many DSA parameters) rrr%rrvaluelistrr ) rrralgoid encoded_key emb_paramsrrrrrs &&& r._import_subjectPublicKeyInfor+s'Fw'O#F }677 *233 K(..A;=''(<(<*=>GA! ,C S>r1c2\V4p\VRV4#r\)rr)rrrsp_infos&&& r._import_x509_certr9s.w7G 'v >>r1cnV'd \R4h\P!W4pV^,\8wd \R4h\ 4P V^,4P p\\4P V^,44wrVp\WtV4WuWd3p\V4#)z"PKCS#8 already includes parameterszNo PKCS#8 encoded DSA key) r%r unwraprrrrrrr9r ) rrrr=r!rrrrs &&& r. _import_pkcs8r"?s =>> W)Ats{455 AaD!''A;=''!-.GA! qQ<q $C S>r1c\\\\3pVF pV!WV4u# \ R4h \dK*i;i)z?Import a DSA key (public or private half), encoded in DER form.DSA key format is not supported)rrrr"r%)key_datarr decodingsdecodings&&& r._import_key_derr(KsW)-" I  H&9 9 6 77   s5 AAc*\V4pVe \V4pVPR4'd:\P!\ V4V4wr#pV'dRp\ W!R4#VPR4'd\ P!VPR4^,4p.p\V4^8dO\P!RVR,4^,pVPV^^V,4V^V,RpK^V^,R8Xd7R Uu.uFp\P!Wh,4NK! p p\V 4#\V4^8d$\!V^,4^08Xd \ WR4#\#R4huupi) aImport a DSA key. Args: extern_key (string or byte string): The DSA key to import. The following formats are supported for a DSA **public** key: - X.509 certificate (binary DER or PEM) - X.509 ``subjectPublicKeyInfo`` (binary DER or PEM) - OpenSSH (ASCII one-liner, see `RFC4253`_) The following formats are supported for a DSA **private** key: - `PKCS#8`_ ``PrivateKeyInfo`` or ``EncryptedPrivateKeyInfo`` DER SEQUENCE (binary or PEM) - OpenSSL/OpenSSH custom format (binary or PEM) For details about the PEM encoding, see `RFC1421`_/`RFC1423`_. passphrase (string): In case of an encrypted private key, this is the pass phrase from which the decryption key is derived. Encryption may be applied either at the `PKCS#8`_ or at the PEM level. Returns: :class:`DsaKey` : a DSA key object Raises: ValueError : when the given key cannot be parsed (possibly because the pass phrase is wrong). .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _RFC4253: http://www.ietf.org/rfc/rfc4253.txt .. _PKCS#8: http://www.ietf.org/rfc/rfc5208.txt Ns-----r r:Nr Nrr$)r rrr)r startswithr rrr(r a2b_base64splitrrunpackr{rrr rr%) extern_keyrrmarkerenc_flagrrlengthr!rs && r. import_keyr3\sSP$JZ( X&&"%**U:-> "Kh Js55[))'' (8(8(>q(AB )nq ]]427:F OOIaF 3 4!!f*+.I A;* $ ! :tJqM2d:zt<< 6 77Js %Fz1.2.840.10040.4.1)rr rr3)NNrWr\).__all__rrrCrypto.Util.py3compatrrrrrCryptor Crypto.IOr r Crypto.Hashr Crypto.Util.asn1r rrrrCrypto.Math.NumbersrCrypto.Math.PrimalityrrrCrypto.PublicKeyrrrobjectrrrr rrrr"r(r3 importKeyrrSr1r.r?s2 = HH  (33@@@Z"VZ"z2jFR.p ? 8"C8N  r1