+ '(juy.ROt^RIt^RIt^RIHt^RIHtHtHt^RI H t H t ^RI H t ^RIHt^RIHtHtHt^R IHtHtHt!R R]4tRR ltRR ltR tRtRtRtRt Rt!Rt"RRlt#]#t$Rt%R#)generateRsaKeyN)Random)tobytesbordtostr) DerSequenceDerNull) bytes_to_long)Integer)test_probable_primegenerate_probable_prime COMPOSITE)_expand_subject_public_key_info_create_subject_public_key_info _extract_subject_public_key_infoc^a]tRt^4toRtRt]R4t]R4t]R4t ]R4t ]R4t ]R4t ]R 4t ]R 4t]R 4t]R 4tR tRtRtRtRtRtRtRtRtRtRtRtRtRtR'RltRt Rt!Rt"R t#R!t$R"t%R#t&R$t'R%t(R&t)Vt*R#)(raClass defining an RSA key, private or public. Do not instantiate directly. Use :func:`generate`, :func:`construct` or :func:`import_key` instead. :ivar n: RSA modulus :vartype n: integer :ivar e: RSA public exponent :vartype e: integer :ivar d: RSA private exponent :vartype d: integer :ivar p: First factor of the RSA modulus :vartype p: integer :ivar q: Second factor of the RSA modulus :vartype q: integer :ivar invp: Chinese remainder component (:math:`p^{-1} \text{mod } q`) :vartype invp: integer :ivar invq: Chinese remainder component (:math:`q^{-1} \text{mod } p`) :vartype invq: integer :ivar u: Same as ``invp`` :vartype u: integer c \VP44p\R4pV\R4,pW$V39d \R4hVP4FwrV\ VRV,V4K W$8Xd\VP VP ^, ,VnVP VP^, ,Vn RVn R#R#)aBuild an RSA key. :Keywords: n : integer The modulus. e : integer The public exponent. d : integer The private exponent. Only required for private keys. p : integer The first factor of the modulus. Only required for private keys. q : integer The second factor of the modulus. Only required for private keys. u : integer The CRT coefficient (inverse of p modulo q). Only required for private keys. zSome RSA components are missing_Nne)pqdu) setkeys ValueErroritemssetattr_d_p_dp_q_dq_invq)selfkwargs input_set public_set private_set componentvalues&, I/home/ubuntu/cf-venv/lib/python3.14/site-packages/Crypto/PublicKey/RSA.py__init__RsaKey.__init__Rs& & _  3';#<< *5 5>? ? &  I D# /5 1!/  #ww$''A+.DHww$''A+.DHDJ $c,\VP4#N)int_nr's&r.rRsaKey.nq477|r1c,\VP4#r3)r4_er6s&r.rRsaKey.eur8r1cnVP4'g \R4h\VP4#)z-No private exponent available for public keys) has_privateAttributeErrorr4r!r6s&r.rRsaKey.dys+!! !PQ Q477|r1cnVP4'g \R4h\VP4#)z.No CRT component 'p' available for public keys)r=r>r4r"r6s&r.rRsaKey.p+!! !QR R477|r1cnVP4'g \R4h\VP4#)z.No CRT component 'q' available for public keys)r=r>r4r$r6s&r.rRsaKey.qrBr1cnVP4'g \R4h\VP4#)z/No CRT component 'dp' available for public keys)r=r>r4r#r6s&r.dp RsaKey.dp+!! !RS S488}r1cnVP4'g \R4h\VP4#)z/No CRT component 'dq' available for public keys)r=r>r4r%r6s&r.dq RsaKey.dqrHr1cVP4'g \R4hVPf+VPP VP 4Vn\ VP4#)z1No CRT component 'invq' available for public keys)r=r>r&r$inverser"r4r6s&r.invq RsaKey.invqsM!! !TU U :: 1DJ4::r1cVP#r3)rr6s&r.invp RsaKey.invps vv r1cnVP4'g \R4h\VP4#)z.No CRT component 'u' available for public keys)r=r>r4_ur6s&r.rRsaKey.urBr1c 6VPP4#)zSize of the RSA modulus in bitsr5 size_in_bitsr6s&r.rXRsaKey.size_in_bitssww##%%r1c `VPP4^, ^,^,#)z9The minimal amount of bytes that can hold the RSA modulusrWr6s&r. size_in_bytesRsaKey.size_in_bytess$$$&*q0144r1c^Tu;8:dVP8gM\R4h\\\ V4VP VP44#)zPlaintext too large)r5rr4powr r:)r' plaintexts&&r._encryptRsaKey._encrypts@I''23 33wy)477DGG<==r1c^Tu;8:dVP8gM\R4hVP4'g \R4h\P !^VPR7p\ V4\ W PVP4,VP,p\ W0PVP4p\ W0PVP4pWT, VP,VP,pW`P,V,p\P!VPVP4VVP4pV#)r^zCiphertext too largezThis is not a private key) min_inclusive max_exclusive)r5rr= TypeErrorr random_ranger_r:r#r"r%r$rT_mult_modulo_bytesrM) r' ciphertextrcpm1m2hmpresults && r._decrypt_to_bytesRsaKey._decrypt_to_bytessJ((34 4!!78 8  q H Z 3q''477#; ;dgg E XXtww ' XXtww 'g DGG + [2 ++IIdgg&GG r1c 6\VPV44#)zLegacy private method)r rqr'ris&&r._decryptRsaKey._decryptsT33J?@@r1c \VR4#)z"Whether this is an RSA private keyr!)hasattrr6s&r.r=RsaKey.has_privatestT""r1cR#Tr6s&r. can_encryptRsaKey.can_encryptr1cR#r{r|r6s&r.can_signRsaKey.can_signrr1c D\VPVPR7#)zFA matching RSA public key. Returns: a new :class:`RsaKey` object r)rr5r:r6s&r. public_keyRsaKey.public_keys 477++r1cVP4VP48wdR#VPVP8wgVPVP8wdR#VP4'gR#VPVP8H#)FT)r=rrrr'others&&r.__eq__ RsaKey.__eq__sf    !2!2!4 4 66UWW %'' 1!!%''!"r1c W8X*#r3r|rs&&r.__ne__ RsaKey.__ne__s ""r1c^RIHpVh)r^) PicklingError)pickler)r'rs& r. __getstate__RsaKey.__getstate__s (r1cJVP4'd[R\VP4\VP4\VP4\VP 43,pMRpR\VP 4\VP4V3,#)z, d=%d, p=%d, q=%d, u=%dzRsaKey(n=%d, e=%d%s))r=r4r!r"r$rTr5r:)r'extras& r.__repr__RsaKey.__repr__st     .#dgg,DGG 25dgg,DGG 2NNEE%TWWs477|U(KKKr1c`VP4'dRpMRpRV\V43,#)PrivatePublicz%s RSA key at 0x%X)r=id)r'key_types& r.__str__RsaKey.__str__s/      HH#xD&:::r1Nc  :Ve \V4pVf\PpVR8XdVPVP3Uu.uFqwP 4NK upwr\ V^,4^,'d RV,p\ V ^,4^,'d RV ,p RW.p RPV U u.uF*p \P!R\V 44V ,NK, up 4p R\P!V 4RR,#VP4'Edb\^VPVP VP"VP$VP&VP"VP$^, ,VP"VP&^, ,\)VP&4P+VP$4. 4P-4p V^8XdRpVR 8XdV'd \/R 4hM^R IHpVR 8Xd)Vf%R pVP5V \6R\94R7p M~RpV'gV'd \/R4hRpVP5V \6W$V\94R7p RpM:Rp\;\6\VPVP .4\944p VR 8XdV #VR 8Xd$^RIHpVP-WW%4p\V4#\/RV,4huupiuup i)a Export this RSA key. Keyword Args: format (string): The desired output format: - ``'PEM'``. (default) Text output, according to `RFC1421`_/`RFC1423`_. - ``'DER'``. Binary output. - ``'OpenSSH'``. Text output, according to the OpenSSH specification. Only suitable for public keys (not private keys). Note that PEM contains a DER structure. passphrase (bytes or string): (*Private keys only*) The passphrase to protect the private key. pkcs (integer): (*Private keys only*) The standard to use for serializing the key: PKCS#1 or PKCS#8. With ``pkcs=1`` (*default*), the private key is encoded with a simple `PKCS#1`_ structure (``RSAPrivateKey``). The key cannot be securely encrypted. With ``pkcs=8``, the private key is encoded with a `PKCS#8`_ structure (``PrivateKeyInfo``). PKCS#8 offers the best ways to securely encrypt the key. .. note:: This parameter is ignored for a public key. For DER and PEM, the output is always an ASN.1 DER ``SubjectPublicKeyInfo`` structure. protection (string): (*For private keys only*) The encryption scheme to use for protecting the private key using the passphrase. You can only specify a value if ``pkcs=8``. For all possible protection schemes, refer to :ref:`the encryption parameters of PKCS#8`. The recommended value is ``'PBKDF2WithHMAC-SHA512AndAES256-CBC'``. If ``None`` (default), the behavior depends on :attr:`format`: - if ``format='PEM'``, the obsolete PEM encryption scheme is used. It is based on MD5 for key derivation, and 3DES for encryption. - if ``format='DER'``, the ``'PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC'`` scheme is used. prot_params (dict): (*For private keys only*) The parameters to use to derive the encryption key from the passphrase. ``'protection'`` must be also specified. For all possible values, refer to :ref:`the encryption parameters of PKCS#8`. The recommendation is to use ``{'iteration_count':21000}`` for PBKDF2, and ``{'iteration_count':131072}`` for scrypt. randfunc (callable): A function that provides random bytes. Only used for PEM encoding. The default is :func:`Crypto.Random.get_random_bytes`. Returns: bytes: the encoded key Raises: ValueError:when the format is unknown or when you try to encrypt a private key with *DER* format and PKCS#1. .. warning:: If you don't provide a pass phrase, the private key will be exported in the clear! .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _`PKCS#1`: http://www.ietf.org/rfc/rfc3447.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt NOpenSSHsssh-rsar1>Issh-rsa zRSA PRIVATE KEYDERz&PKCS#1 private key cannot be encryptedPKCS8PEMz PRIVATE KEY) key_paramszENCRYPTED PRIVATE KEYz"'protection' parameter must be setz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC) prot_paramsrz PUBLIC KEYrz3Unknown key format '%s'. Cannot export the RSA key.)rrget_random_bytesr:r5to_bytesrjoinstructpacklenbinascii b2a_base64r=rrrrrrr rMencoder Crypto.IOrwrapoidr rr)r'format passphrasepkcs protectionrandfuncrxe_bytesn_byteskeypartskp keystring binary_keyrrrpem_strs&&&&&&& r. export_keyRsaKey.export_keysl  ! ,J  ..H Y 7;ww6HI6H 6HI GGAJ$&&!G+GAJ$&&!G+"G5HH!UHb&++dCG"y","BJ 7H%&",-Q"RR%I !&J,68C7>y","BJ"&J#H89DdffFJffFN:O9@;J U?  U? %jjzLG7# #NQWWXXy J "Vs L0Lc &VP!V/VB#:meta private:)r)r'argsr(s&*,r. exportKeyRsaKey.exportKeys///r1c "VP4#r)rr6s&r. publickeyRsaKey.publickeys  r1c \R4hrz,Use module Crypto.Signature.pkcs1_15 insteadNotImplementedError)r'MKs&&&r.sign RsaKey.sign!"PQQr1c \R4hrr)r'r signatures&&&r.verify RsaKey.verifyrr1c \R4hrz+Use module Crypto.Cipher.PKCS1_OAEP insteadr)r'r`rs&&&r.encryptRsaKey.encrypt!"OPPr1c \R4hrrrts&&r.decryptRsaKey.decryptrr1c \hrrr'rBs&&&r.blind RsaKey.blind!!r1c \hrrrs&&&r.unblindRsaKey.unblindrr1c \hrrr6s&r.size RsaKey.sizerr1)r#r%r&)rNNNN)+__name__ __module__ __qualname____firstlineno____doc__r/propertyrrrrrrFrJrNrQrrXr[rarqrur=r}rrrrrrrrrrrrrrrrr__static_attributes____classdictcell__) __classdict__s@r.rr4s]:>      &5> 2A # ,## L;YYx0! RRQQ""""r1c paa a aaVR8d \R4hS^,^8XgS^8d \R4hVf\Pp\^4;r4\S4oVP 4V8wEdV^V^,,8dV^,pW, p\^4^V,^, ,P 4;o oWV8wd/\^4^V,^, ,P 4o VV 3Rlp\ VVVR7o\^4V^,^d, ,o VV VV3Rlp\ VVVR7p SV ,pS^, PV ^, 4p SPV 4pEK(SX 8dV Suop SPV 4p \VSVSWR7#)aCreate a new RSA key pair. The algorithm closely follows NIST `FIPS 186-4`_ in its sections B.3.1 and B.3.3. The modulus is the product of two non-strong probable primes. Each prime passes a suitable number of Miller-Rabin tests with random bases and a single Lucas test. Args: bits (integer): Key length, or size (in bits) of the RSA modulus. It must be at least 1024, but **2048 is recommended.** The FIPS standard only defines 1024, 2048 and 3072. Keyword Args: randfunc (callable): Function that returns random bytes. The default is :func:`Crypto.Random.get_random_bytes`. e (integer): Public RSA exponent. It must be an odd positive integer. It is typically a small number with very few ones in its binary representation. The FIPS standard requires the public exponent to be at least 65537 (the default). Returns: an RSA key object (:class:`RsaKey`, with private key). .. _FIPS 186-4: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf iz"RSA modulus length must be >= 1024zBRSA public exponent must be a positive, odd integer larger than 2.cT<VS8;'dV^, PS4^8H#r)gcd) candidatermin_ps&r.filter_pgenerate..filter_ps*u$DD)a-)<).filter_qsL%66]''*a/66 A &5 7r1rrrrrr) rrrr rXsqrtr lcmrMr)bitsrrrrsize_qsize_prr rr rrrrrs&&f @@@@r.rrs< d{=>>1uzQU]^^** AJA A .. d "qA$!),<'= F Q7==??  QZAJN399;E E $v-519 ;qzdai#o6  7 7 $v-519 ; E1ukk!a%  IIcN1u!1 ! A Aa1 //r1c N!RR\4pV!4p\R V4FwrE\W4\V44K VPpVP p\ VR4'g\WgR7pEMgVPp \ VR4'dVPp VPp MW,^, p T p V ^,^8Xd V ^,p KRp\^4pV'gV^d8d\V 4pVV 8dd\VVV4pV^8wdEVV^, 8wd7\V^V4^8Xd%\V4PV^,4p RpM V^,pKjV^, pKV'g \R 4hVX ,^8XgQhWj,p \ VR4'dVPpMV PV 4p\WgWV VR 7pV'EdV^8:gWv8d \R 4h\V4PV4^8wd \R 4hV^,'g \R 4hVP!4'EdJX ^8:gW8d \R4h\V4PV 4^8wd \R4hX X ,V8wd \R4h\#V 4\$8Xd \R4h\#V 4\$8Xd \R4hV ^, V ^, ,pVV ^, PV ^, 4,pWy,\'V4,^8wd \R4h\ VR4'd:X^8:gVV 8d \R4hV V,V ,^8wd \R4hV#)aConstruct an RSA key from a tuple of valid RSA components. The modulus **n** must be the product of two primes. The public exponent **e** must be odd and larger than 1. In case of a private key, the following equations must apply: .. math:: \begin{align} p*q &= n \\ e*d &\equiv 1 ( \text{mod lcm} [(p-1)(q-1)]) \\ p*u &\equiv 1 ( \text{mod } q) \end{align} Args: rsa_components (tuple): A tuple of integers, with at least 2 and no more than 6 items. The items come in the following order: 1. RSA modulus *n*. 2. Public exponent *e*. 3. Private exponent *d*. Only required if the key is private. 4. First factor of *n* (*p*). Optional, but the other factor *q* must also be present. 5. Second factor of *n* (*q*). Optional. 6. CRT coefficient *q*, that is :math:`p^{-1} \text{mod }q`. Optional. Keyword Args: consistency_check (boolean): If ``True``, the library will verify that the provided components fulfil the main RSA properties. Raises: ValueError: when the key being imported fails the most basic RSA validity checks. Returns: An RSA key object (:class:`RsaKey`). c]tRtRtRtR#)construct..InputCompsiDr|N)rrrrrr|r1r. InputCompsrDs r1rrrrrFTz2Unable to compute factors p and q from exponent d.r zInvalid RSA public exponentz-RSA public exponent is not coprime to moduluszRSA modulus is not oddzInvalid RSA private exponentz.RSA private exponent is not coprime to modulusz RSA factors do not match moduluszRSA factor p is compositezRSA factor q is compositezInvalid RSA conditionzInvalid RSA component uzInvalid RSA component u with p)objectzipr r rrrxrrrrr_rrrrMr=r rr4)rsa_componentsconsistency_checkr input_compscompr-rrkeyrrrktottspottedakcandrphir s&& r. constructr#sR V ,K;^L  75>2M  A A ; $ $q MM ; $ $ A A 519DAa%1*a G A!c'AJ$hq!Q>!  !LM M1uu56 6 ??  Av !?@@qz~~a A% !QRR1uz !CDD"1%2 !<=="1%2 !<==q5QU#C!a%QU++CC Q& !899sC  6Q!V$%>??EAI!#$%EFF Jr1c\4PV^ RR7pV^,^8wd \R4h\VR,\ V^,4P V^,4.,4#) T nr_elementsonly_ints_expectedz(No PKCS#1 encoding of an RSA private key:rN)rdecoderr#r rMencodedr(ders&* r._import_pkcs1_privater.sb -  wA$  OC 1v{CDD SXQ!8!8Q!@ AA BBr1cP\4PV^RR7p\V4#)Tr&)rr*r#r+s&* r._import_pkcs1_publicr1s' -  wA$  OC S>r1cn\R3p\V4wr4pW29gVe \R4h\V4#)1.2.840.113549.1.1.10zNo RSA subjectPublicKeyInfo)rrrr1)r,r(oidsalgoid encoded_keyparamss&* r._import_subjectPublicKeyInfor8s> ( )D"A'"JF V/677  ,,r1c.\V4p\V4#r3)rr8)r,r(sp_infos&* r._import_x509_certr;s.w7G ' 00r1c^RIHp\R3pVPW4pV^,V9d \ R4h\ V^,V4#)r^rr3zNo PKCS#8 encoded RSA key)rrrunwrapr_import_keyDER)r,rrr4r s&& r. _import_pkcs8r?sG ( )D W)At4455 !A$ ++r1c\\\\\3pVF pV!W4u# \ R4h \ dK)i;i)z@Import an RSA key (public or private half), encoded in DER form.RSA key format is not supported)r.r1r8r;r?r) extern_keyr decodingsdecodings&& r.r>r>sX'%-"  I  J3 3 6 77   s9 AAc^^RIHpHpHpHpV!W4wrgVR8wd \ R4hV!V4wrV!V4wrV!V4wrV!V4wrV!V4wrV!V4wrV!V4wrV!V4WWW3Uu.uFp\ P!V4NK pp\V4#uupi)r)import_openssh_private_generic read_bytes read_string check_paddingzssh-rsazThis SSH key is not RSA) _opensshrFrGrHrIrr from_bytesr#)datapasswordrFrGrHrIssh_name decryptedrrriqmprrrpaddedrbuilds&& r._import_openssh_private_rsarSsCC9HH9233i(LAi(LAi(LA +ODi(LAi(LAI&IA&-.1,A B,AqW   ",AE B U  Cs>B*c^RIHp\V4pVe \V4pVPR4'd-\ V4pVP W14wrEp\ WA4pV#VPR4'd4VP \ V4V4wrpV'dRp\W4#VPR4'd\P!VPR4^,4p .p \V 4^8dO\P!RV R,4^,p V PV ^^V ,4V ^V ,Rp K^\P !V ^,4p \P !V ^,4p \#W.4#\V4^8d#\%V^,4^08Xd \W4#\'R 4h) ayImport an RSA key (public or private). Args: extern_key (string or byte string): The RSA key to import. The following formats are supported for an RSA **public key**: - X.509 certificate (binary or PEM format) - X.509 ``subjectPublicKeyInfo`` DER SEQUENCE (binary or PEM encoding) - `PKCS#1`_ ``RSAPublicKey`` DER SEQUENCE (binary or PEM encoding) - An OpenSSH line (e.g. the content of ``~/.ssh/id_ecdsa``, ASCII) The following formats are supported for an RSA **private key**: - PKCS#1 ``RSAPrivateKey`` DER SEQUENCE (binary or PEM encoding) - `PKCS#8`_ ``PrivateKeyInfo`` or ``EncryptedPrivateKeyInfo`` DER SEQUENCE (binary or PEM encoding) - OpenSSH (text format, introduced in `OpenSSH 6.5`_) For details about the PEM encoding, see `RFC1421`_/`RFC1423`_. passphrase (string or byte string): For private keys only, the pass phrase that encrypts the key. Returns: An RSA key object (:class:`RsaKey`). Raises: ValueError/IndexError/TypeError: When the given key cannot be parsed (possibly because the pass phrase is wrong). .. _RFC1421: http://www.ietf.org/rfc/rfc1421.txt .. _RFC1423: http://www.ietf.org/rfc/rfc1423.txt .. _`PKCS#1`: http://www.ietf.org/rfc/rfc3447.txt .. _`PKCS#8`: http://www.ietf.org/rfc/rfc5208.txt .. _`OpenSSH 6.5`: https://flak.tedunangst.com/post/new-openssh-key-format-and-bcrypt-pbkdf rNs-----BEGIN OPENSSH PRIVATE KEYs-----r r:NNrA)rrr startswithrr*rSr>r a2b_base64splitrrunpackappendr rKr#rr)rBrr text_encodedopenssh_encodedmarkerenc_flagrpr-rrlengthrrs&& r. import_keyra sR$JZ( >??Z( ,/JJ|,P),_I X&&"%**U:-> "Kh Jc..[))'' (8(8(>q(AB )nq ]]427:F OOIaF 3 4!!f*+.I   x{ +   x{ +!   :tJqM2d:j55 6 77r1z1.2.840.113549.1.1.1)rr#rarr)Nir{r3)&__all__rrCryptorCrypto.Util.py3compatrrrCrypto.Util.asn1rr Crypto.Util.numberr Crypto.Math.Numbersr Crypto.Math.Primalityr r rCrypto.PublicKeyrrrrrrr#r.r1r8r;r?r>rSra importKeyrr|r1r.rks@  661,'GG@@ R"VR"j O0dM`C(-1 ,8$0L8`  r1