XylotrechusZ
�
ǒ�g�
� � � d dl Z d dlmZ d dlmZ d dlmZmZ d dlm Z m
Z
d dl m Z d dl
mZ G d� d e
� Z G d
� d e � Z G d � d
e� Z G d� de� Zy)� N)�default_backend)�hashes)�dsa�utils)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc � � e Zd ZU ej ed< ej Zej Z e
j � Z de
de
ddfd�Zde
fd�Zededd fd�� Zy) � PublicDSA�key� signature�data�returnNc �� � |dd }|dd }t j t j |d� t j |d� � }| j j ||| j � y )N� � �big)r �encode_dss_signature�int�
from_bytesr
�verify� chosen_hash)�selfr r �sig_r�sig_s�sigs �A/opt/hc_python/lib/python3.12/site-packages/dns/dnssecalgs/dsa.pyr zPublicDSA.verify s_ � ��!�B����"�#����(�(� �N�N�5�%� (�#�.�.���*F�
��
������T�4�#3�#3�4� c � � | j j � }| j j dz dz
dz }|dkD r t d� �d|dz z }t j
d|� }||j j j dd� z
}||j j j |d� z
}||j j j |d� z
}||j j |d� z
}|S )z,Encode a public key per RFC 2536, section 2.� �@ zunsupported DSA key size�!B� r ) r
�public_numbers�key_size�
ValueError�struct�pack�parameter_numbers�q�to_bytes�p�g�y)r �pn�dsa_t�octets�ress r �encode_key_byteszPublicDSA.encode_key_bytes s� � �
�X�X�
$�
$�
&�����"�"�a�'�"�,��2�� �1�9� � 7�8� 8��e�a�i� ���k�k�$��&�� �r�#�#�%�%�.�.�r�5�9�9�� �r�#�#�%�%�.�.�v�u�=�=�� �r�#�#�%�%�.�.�v�u�=�=�� �r�t�t�}�}�V�U�+�+���
r c
� � | j |� |j }t j d|dd � \ }|dd }d|dz z }|dd }|dd }|d| }||d }|d| }||d }|d| } | t j
t j |d� t j t j |d� t j |d� t j |d� � � j t � � �� S ) Nr# r r r" r! r$ r �r
) �!_ensure_algorithm_key_combinationr
r( �unpackr �DSAPublicNumbersr r �DSAParameterNumbers�
public_keyr ) �clsr
�keyptr�tr2 �dsa_q�dsa_p�dsa_g�dsa_ys r � from_dnskeyzPublicDSA.from_dnskey( s � � �-�-�c�2������}�}�T�6�!�A�;�/���������a�!�e����q�� ��������q�� ����� ���q�� ����� ���q�� ����$�$����u�e�,��'�'��N�N�5�%�0��N�N�5�%�0��N�N�5�%�0��� �j� �*�+�
�
r )�__name__�
__module__� __qualname__r � DSAPublicKey�__annotations__�key_clsr �DSA� algorithmr �SHA1r �bytesr r4 � classmethodr
rC � r r r r sw � � � � ��� � �G��
�
�I� �&�+�+�-�K�5�� 5�U� 5�t� 5� �%� � �
�f�
��
� �
r r c � � e Zd ZU ej ed< ej ZeZ d
de de
de
de fd�Z e de
dd fd�� Zy ) �
PrivateDSAr
r r �
deterministicr c � � | j j � }|j dkD r t d� �| j j || j
j � }t j |� \ }}|j dz dz
dz }d} t j d|� t j || d�� z t j || d�� z }
|r | j � j |
|� |
S ) z1Sign using a private key per RFC 2536, section 3.i zDSA key size overflowr! r" r$ r# r )�length� byteorder)r
r; r& r' �sign�
public_clsr r �decode_dss_signaturer( r) r r, r ) r r r rR �public_dsa_key�
der_signature�dsa_r�dsa_sr1 r2 r s r rV zPrivateDSA.signG s� � � ���,�,�.�� � "� "�T� )� � 4�5� 5� ���
�
�d�D�O�O�,G�,G�H�
� �1�1�-�@� ��u� �(�(�A�-��2�q�8���� �K�K��e� $��l�l�5��5�l�A�
B��l�l�5��5�l�A�
B� �
� �O�O� � $� $�Y�� 5��r r& c �< � | t j |�� �� S )N)r& r6 )r �generate_private_key)r< r& s r �generatezPrivateDSA.generate^ s � ���(�(�(�;�
�
r N)FT)rD rE rF r �
DSAPrivateKeyrH rI r rW rM �boolrV rN r r_ rO r r rQ rQ B ss � � � � ��� � �G��J�
� "� ��� �� � �
� �. �
��
� �
� �
r rQ c �$ � e Zd Zej Zy)�PublicDSANSEC3SHA1N)rD rE rF r � DSANSEC3SHA1rK rO r r rc rc e s
� ��&�&�Ir rc c � � e Zd ZeZy)�PrivateDSANSEC3SHA1N)rD rE rF rc rW rO r r rf rf i s � �#�Jr rf )r( � cryptography.hazmat.backendsr � cryptography.hazmat.primitivesr �)cryptography.hazmat.primitives.asymmetricr r �dns.dnssecalgs.cryptographyr r �dns.dnssectypesr �dns.rdtypes.ANY.DNSKEYr
r rQ rc rf rO r r �<module>rm sN ��
� 8� 1� @� U� %� )�3
�%� 3
�l
�'�
�F'�� '�$�*� $r