mxiSxdZddlmZddlmZmZmZmZddlZ ddl m Z ddl m Z ddl mZddlmZdd lmZdd lmZdd lmZddlZ dd lmZdd lmZdZe j6Zej:ZeGddZGddej@Z!GddejDejFZ$y)zAECDSA verifier and signer that use the ``cryptography`` library. ) dataclass)AnyDictOptionalUnionN)backends)hashes) serialization)ec)padding)decode_dss_signature)encode_dss_signature)_helpers)bases-----BEGIN CERTIFICATE-----ceZdZUdZeed<ejed<eed<e de e je jffdZe de jfdZy ) _ESAttributeszA class that models ECDSA attributes. Attributes: rs_size (int): Size for ASN.1 r and s size. sha_algo (hashes.HashAlgorithm): Hash algorithm. algorithm (str): Algorithm name. rs_sizesha_algo algorithmkeyc8|j|jSN) from_curvecurve)clsrs K/home/htdocs/ttos/venv/lib/python3.12/site-packages/google/auth/crypt/es.pyfrom_keyz_ESAttributes.from_key6s~~cii((rct|tjr|dtjdS|dtj dS)N0ES384 ES256) isinstancer SECP384R1r SHA384SHA256)rrs rrz_ESAttributes.from_curve<s> eR\\ *r6==?G4 4r6==?G4 4rN)__name__ __module__ __qualname____doc__int__annotations__r HashAlgorithmstr classmethodrr EllipticCurvePublicKeyEllipticCurvePrivateKeyr EllipticCurverrrrr(spL"""N)1123M3MMN))  5r// 5 5rrceZdZdZdej ddfdZeje jde de de fdZ edeee fddfd Zy) EsVerifierzVerifies ECDSA cryptographic signatures using public keys. Args: public_key ( cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey): The public key used to verify signatures. public_keyreturnNcF||_tj||_yr)_pubkeyrr _attributes)selfr7s r__init__zEsVerifier.__init__Rs! (11*=rmessage signaturecPtj|}t||jjdzk7ryt j |d|jjd}t j ||jjdd}t||}tj|} |jj||tj|jjy#ttjj f$rYywxYw)NFbig byteorderT)rto_byteslenr;rr, from_bytesrr:verifyr ECDSAr ValueError cryptography exceptionsInvalidSignature)r<r>r? sig_bytesrsasn1_sigs rrHzEsVerifier.verifyVs%%i0 y>T--559 9 NN9%?t'7'7'?'?@EN R NN9T%5%5%=%=%?@EN R'1-##G,  LL  '288D>D__&F#66QF&"";";<PQ Q6{r)r(r)r*r+r r1r=rcopy_docstringrVerifierbytesboolrHr0rr/r\r4rrr6r6Is>2#<#<>>XT]]+e$, U3:%6<rr6cbeZdZdZ ddej deeddfdZe defdZ e e je jdeefdZe je jd edefd Ze dd eeefdeeddfd Zdeeeffd ZdeeefddfdZy)EsSigneraSigns messages with an ECDSA private key. Args: private_key ( cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey): The private key to sign with. key_id (str): Optional key ID used to identify this private key. This can be useful to associate the private key with its associated public key or certificate. N private_keykey_idr8cT||_||_tj||_yr)_key_key_idrrr;)r<rcrds rr=zEsSigner.__init__s%   (11+>rc.|jjS)zkName of the algorithm used to sign messages. Returns: str: The algorithm name. )r;rr<s rrzEsSigner.algorithms )))rc|jSr)rgris rrdzEsSigner.key_ids||rr>cltj|}|jj|t j |j j}t|\}}|j|j jd|j|j jdzS)NrBrC) rrErfsignr rIr;rr r)r<r>asn1_signaturerOrPs rrlz EsSigner.signs##G,$:J:J:S:S1TU&n5Azz$**22ezDqzz    $ $HRH   rrctj|}tj|dt}t |t js td|||S)alConstruct a RSASigner from a private key in PEM format. Args: key (Union[bytes, str]): Private key in PEM format. key_id (str): An optional key id used to identify the private key. Returns: google.auth.crypt._cryptography_rsa.RSASigner: The constructed signer. Raises: ValueError: If ``key`` is not ``bytes`` or ``str`` (unicode). UnicodeDecodeError: If ``key`` is ``bytes`` but cannot be decoded into a UTF-8 ``str``. ValueError: If ``cryptography`` "Could not deserialize key data." N)passwordbackendz4Expected private key of type EllipticCurvePrivateKey)rd) rrEr load_pem_private_keyrVr$r r2rX)rrrd key_bytesrcs rr\zEsSigner.from_stringsV(%%c* #88 h +r'A'ABRS S;v..rc|jj}|jjtj j tjjt j|d<|S)z1Pickle helper that serializes the _key attribute.)encodingformatencryption_algorithmrf) __dict__copyrf private_bytesr EncodingPEM PrivateFormatPKCS8 NoEncryptionr<states r __getstate__zEsSigner.__getstate__sb ""$ //"++// ..44!.!;!;!=0 f  rrcrtj|dd|d<|jj|y)z3Pickle helper that deserializes the _key attribute.rfN)r rqrwupdaters r __setstate__zEsSigner.__setstate__s.%::5=$Of  U#rr)r(r)r*r+r r2rr/r=propertyrrr]rSignerrdr_rlr0rr\rrrrr4rrrbrbs& PT?55??G}? ?*3**XT[[) *XT[[) E e * =A/s #/-5c]/ //:d38n$$sCx.$T$rrb)%r+ dataclassesrtypingrrrrcryptography.exceptionsrKcryptography.hazmatrcryptography.hazmat.primitivesr r )cryptography.hazmat.primitives.asymmetricr r /cryptography.hazmat.primitives.asymmetric.utilsr rcryptography.x509 google.authrgoogle.auth.cryptrrSdefault_backendrVPKCS1v15_PADDINGrr^r6rFromServiceAccountMixinrbr4rrrs"--(188=PP "5 #8 # # % 7    55 5@;;|V$t{{D88V$r