mxibddlZddlmcmZddlmZddlZGddejZ de de e e e ffdZdZGd d ejZd Zd Zy) N)FileSystemKeyMaterialStorec"eZdZdZdZdZdZy)InMemoryKmsClientzRThis is a mock class implementation of KmsClient, built for testing only. cdtjj||j|_y)z%Create an InMemoryKmsClient instance.N)pe KmsClient__init__custom_kms_confmaster_keys_map)selfconfigs W/home/htdocs/ttos/venv/lib/python3.12/site-packages/pyarrow/tests/parquet/encryption.pyr zInMemoryKmsClient.__init__s" d#%55c|j|jd}dj||g}tj|}|S)z`Not a secure cipher - the wrapped key is just the master key concatenated with key bytesutf-8r)r encodejoinbase64 b64encode)r key_bytesmaster_key_identifiermaster_key_bytes wrapped_keyresults rwrap_keyzInMemoryKmsClient.wrap_key!sM //0EFMM hh 0)<= !!+. rc||jvr td||j|}tj|}|dd}|dd}||j dk(r|Std||)zGNot a secure cipher - just extract the key from the wrapped keyzUnknown master keyNrzIncorrect master key used)r ValueErrorr b64decodedecode)r rrexpected_master_keydecoded_wrapped_keyr decrypted_keys r unwrap_keyzInMemoryKmsClient.unwrap_key*s !(<(< <13HI I"223HI$..{;.s3+BC0 #3#:#:7#C C 4)=: :rN)__name__ __module__ __qualname____doc__r rr$rrrrs6  :rrrreturnctjd}|j|x}r9|j\}}}t |}t j |}|||fStd|)zParses a wrapped key string into a tuple: (key id, version, key) given input in the form: :v:z(.+?):v([0-9]+?):(.+)zCannot parse wrapped key)recompile fullmatchgroupsintrrr)rptnmidversionb64keykeys rparse_wrapped_keyr79sm **, -C MM+ &&q&hhjGVg,v&GS!!3[AArmaster_key_versioncVeZdZdZd dZedefdZdede de fdZ d e de defd Z y) MockVersioningKmsClientaeThis is a mock class implementation of KmsClient, built for testing only. During tests that involve CryptoFactory.rotate_master_keys, separate instances of this client will be created when writing, rotating keys, and reading back parquet data. To help unit tests verify that external key material was stored correctly at each step, this client wraps keys with a master_key_identifier and a version number. To ensure each client wraps with the correct version, the current version is persisted in the key_access_token attribute of the KmsConnectionConfig shared by all clients r*NcPtjj|||_yN)rrr connection_config)r r=s rr z MockVersioningKmsClient.__init__Vs d#!2rc@t|jjSr<)r0r=key_access_token)r s rr8z*MockVersioningKmsClient.master_key_versionZs4))::;;rrrcrtj|jd}|d|jd|S)Nrz:v:)rrr r8)r rrr5s rrz MockVersioningKmsClient.wrap_key^s<!!),33G<'(4+B+B*C1VHMMrrcHt|\}}}||k7r td|||S)Nz"Mismatched master key identifiers:)r7r)r rrkey_id_r6s rr$z"MockVersioningKmsClient.unwrap_keybs8+;73 * *A#%:< < r)r*N) r%r&r'r(r propertyr0r8bytesstrrr$r)rrr:r:Isf 3rask"''B : :D B3 B5c5+A B*!bll!H$r