XylotrechusZ
�
ǒ�gd � �� � d dl mZ d dlmZ d dlmZmZ d dlmZm Z d dl
m Z d dl m
Z
G d� de � Z G d � d
e� Z G d � d e� Z G d
� de� Z G d� de� Z G d� de� Zy)� )�default_backend)�hashes)�ec�utils)�CryptographyPrivateKey�CryptographyPublicKey)� Algorithm)�DNSKEYc �� � e Zd ZU ej ed< ej Zeed< ej ed< ej ed< e ed< de de dd fd
�Z
de fd �Zededd fd �� Zy )
� PublicECDSA�key� algorithm� chosen_hash�curve�octets� signature�data�returnNc �0 � |d| j }|| j d }t j t j |d� t j |d� � }| j
j
||t j | j � � y )Nr �big)
r r �encode_dss_signature�int�
from_bytesr
�verifyr �ECDSAr )�selfr r �sig_r�sig_s�sigs �C/opt/hc_python/lib/python3.12/site-packages/dns/dnssecalgs/ecdsa.pyr zPublicECDSA.verify sr � ��!�d�k�k�*���$�+�+�-�(���(�(� �N�N�5�%� (�#�.�.���*F�
��
������T�2�8�8�D�,<�,<�#=�>� c �� � | j j � }|j j | j d� |j
j | j d� z S )z,Encode a public key per RFC 6605, section 4.r )r
�public_numbers�x�to_bytesr �y)r �pns r �encode_key_bytesz PublicECDSA.encode_key_bytes sE � �
�X�X�
$�
$�
&���t�t�}�}�T�[�[�%�0�2�4�4�=�=����e�3T�T�Tr! c
�r � | j |� |j d| j }|j | j | j dz } | t j | j
t j |d� t j |d� �� j t � � �� S )Nr � r )r r$ r& �r
)
�!_ensure_algorithm_key_combinationr
r r �EllipticCurvePublicNumbersr r r �
public_keyr )�clsr
�ecdsa_x�ecdsa_ys r � from_dnskeyzPublicECDSA.from_dnskey s� � � �-�-�c�2��'�'�!�c�j�j�)���'�'�#�*�*�s�z�z�A�~�6����-�-��i�i��.�.��%�0��.�.��%�0�� �j� �*�+�
�
r! )�__name__�
__module__� __qualname__r �EllipticCurvePublicKey�__annotations__�key_clsr r �
HashAlgorithm�
EllipticCurver �bytesr r( � classmethodr
r2 � r! r r r
s� � � � "� "�"��'�'�G����%�%�%�
� � �� �K�?�� ?�U� ?�t� ?�U�%� U�
�
�f�
� �
� �
r! r c �x � e Zd ZU ej ed< ej ZeZ d de de
de
de fd�Z e d
d�� Z
y) � PrivateECDSAr
r r �
deterministicr c � � t j | j j |�� }| j j ||� }t
j |� \ }}t j || j j d�� t j || j j d�� z }|r | j � j ||� |S )z1Sign using a private key per RFC 6605, section 4.)�deterministic_signingr )�length� byteorder)
r r �
public_clsr r
�signr �decode_dss_signaturer r% r r. r ) r r r r@ r �
der_signature�dsa_r�dsa_sr s r rF zPrivateECDSA.sign2 s� � � �H�H� �O�O� '� '�}�
� � ���
�
�d�I�6�
� �1�1�-�@� ��u��L�L� �$�/�/�0�0�E� !�
� �L�L��t���'=�'=��L� O�P� � � �O�O� � $� $�Y�� 5��r! c �v � | t j | j j t � �� �� S )N)r �backendr+ )r �generate_private_keyrE r r )r/ s r �generatezPrivateECDSA.generateE s/ � ���'�'��n�n�*�*�O�4E��
�
r! N)FT)r r? )r3 r4 r5 r �EllipticCurvePrivateKeyr7 r8 r rE r; �boolrF r< rN r= r! r r? r? - se � � � #� #�#��(�(�G� �J�
� "� ��� �� � �
� �& �
� �
r! r? c �l � e Zd Zej Z ej � Z e j � Z dZ y)�PublicECDSAP256SHA256� N)
r3 r4 r5 r �ECDSAP256SHA256r r �SHA256r r � SECP256R1r r r= r! r rR rR N �, � ��)�)�I� �&�-�-�/�K� �B�L�L�N�E�
�Fr! rR c � � e Zd ZeZy)�PrivateECDSAP256SHA256N)r3 r4 r5 rR rE r= r! r rY rY U � � �&�Jr! rY c �l � e Zd Zej Z ej � Z e j � Z dZ y)�PublicECDSAP384SHA384�0 N)
r3 r4 r5 r �ECDSAP384SHA384r r �SHA384r r � SECP384R1r r r= r! r r\ r\ Y rW r! r\ c � � e Zd ZeZy)�PrivateECDSAP384SHA384N)r3 r4 r5 r\ rE r= r! r rb rb ` rZ r! rb N)� cryptography.hazmat.backendsr � cryptography.hazmat.primitivesr �)cryptography.hazmat.primitives.asymmetricr r �dns.dnssecalgs.cryptographyr r �dns.dnssectypesr �dns.rdtypes.ANY.DNSKEYr
r r? rR rY r\ rb r= r! r �<module>ri sc �� 8� 1� ?� U� %� )�
�'�
�F
�)�
�B�K� �'�\� '��K� �'�\� 'r!