U gm @sddlZddlmZmZmZddlmZmZdddddd d d d g ZdddZ Gddde Z Gddde Z Gddde Z Gddde ZGdd d e ZGddde ZGddde ZGdd d e ZGdd d e ZGdd d e ZdS)N) byte_stringbchrbord) long_to_bytes bytes_to_long DerObject DerInteger DerBooleanDerOctetStringDerNull DerSequence DerObjectId DerBitStringDerSetOfFcCs6d}z ||}Wntk r&YdSX| p4|dkS)NrF) TypeError)xonly_non_negativetestr8/tmp/pip-unpacked-wheel-_q8s9isk/Cryptodome/Util/asn1.py _is_number(s  rc@s@eZdZdZddZddZddZdd Zd d Zd d Z dS) BytesIO_EOFzeThis class differs from BytesIO in that a ValueError exception is raised whenever EOF is reached.cCs||_d|_d|_dSNr)_buffer_index _bookmark)selfZ initial_bytesrrr__init__5szBytesIO_EOF.__init__cCs |j|_dSN)rrrrrr set_bookmark:szBytesIO_EOF.set_bookmarkcCs |jdk st|j|j|jSr)rAssertionErrorrrrrrrdata_since_bookmark=szBytesIO_EOF.data_since_bookmarkcCst|j|jSr)lenrrrrrrremaining_dataAszBytesIO_EOF.remaining_datacCsH|j|}|t|jkr.td|t|jf|j|j|}||_|S)Nz@Not enough data for DER decoding: expected %d bytes and found %d)rr#r ValueError)rlengthZ new_indexresultrrrreadDs  zBytesIO_EOF.readcCst|ddS)Nr)rr(rrrr read_byteMszBytesIO_EOF.read_byteN) __name__ __module__ __qualname____doc__rr r"r$r(r*rrrrr1s rc@sPeZdZdZdddZddZed d Zd d Zd dZ dddZ ddZ dS)rzpBase class for defining a single DER object. This class should never be directly instantiated. NFcCs|dkrd|_dS||}||_|r*dnd}d||fkrBtd|dk r`d|B||B|_n.|dk rd||B|_||B|_n ||B|_dS)aInitialize the DER object according to a specific ASN.1 type. :Parameters: asn1Id : integer or byte The universal DER tag number for this object (e.g. 0x10 for a SEQUENCE). If None, the tag is not known yet. payload : byte string The initial payload of the object (that it, the content octets). If not specified, the payload is empty. implicit : integer or byte The IMPLICIT tag number (< 0x1F) to use for the encoded object. It overrides the universal tag *asn1Id*. It cannot be combined with the ``explicit`` parameter. By default, there is no IMPLICIT tag. constructed : bool True when the ASN.1 type is *constructed*. False when it is *primitive* (default). explicit : integer or byte The EXPLICIT tag number (< 0x1F) to use for the encoded object. It cannot be combined with the ``implicit`` parameter. By default, there is no EXPLICIT tag. N rz1Explicit and implicit tags are mutually exclusive) _tag_octet _convertTagpayloadr%_inner_tag_octet)rZasn1Idr5implicitZ constructedexplicitZconstructed_bitrrrrWs    zDerObject.__init__cCsJt|s t|dkr t|d}t|r>d|krrr6r$)rr@rEZidOctetr&pZ inner_octetrrrrCs            zDerObject._decodeFromStream)Nr/NFN)F) r+r,r-r.rr4 staticmethodr=r?rArFrCrrrrrQs F   c@s4eZdZdZd ddZddZdd d Zd d ZdS)raClass to model a DER INTEGER. An example of encoding is:: >>> from Cryptodome.Util.asn1 import DerInteger >>> from binascii import hexlify, unhexlify >>> int_der = DerInteger(9) >>> print hexlify(int_der.encode()) which will show ``020109``, the DER encoding of 9. And for decoding:: >>> s = unhexlify(b'020109') >>> try: >>> int_der = DerInteger() >>> int_der.decode(s) >>> print int_der.value >>> except ValueError: >>> print "Not a valid DER INTEGER" the output will be ``9``. :ivar value: The integer value :vartype value: integer rNcCst|dd|d|||_dS)aUInitialize the DER object as an INTEGER. :Parameters: value : integer The value of the integer. implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for INTEGER (2). r/FNrrvaluerrKr7r8rrrr#s zDerInteger.__init__cCsz|j}d|_tt|d@|j|_d|kr8dkrLnntd|j|_d|kr`dkrfqpnqp|dL}q t|S)zIReturn the DER INTEGER, fully encoded as a binary string.r/r1ri)rKr5rintrr?)rnumberrrrr?3s zDerInteger.encodeFcCstj|||dS)aDecode a DER-encoded INTEGER, and re-initializes this object with it. Args: der_encoded (byte string): A complete INTEGER DER element. Raises: ValueError: in case of parsing errors. rErrFrrDrErrrrFBs zDerInteger.decodecCst||||r\t|jdkr(tdt|jdkr\td|jddddkr\tdd|_d}|jD],}|jd 9_|jt|7_|d K}ql|jrt|jdd@r|j|8_dS) z*Decode a complete DER INTEGER from a file.rz/Invalid encoding for DER INTEGER: empty payloadrIz>HNr1z.Invalid encoding for DER INTEGER: leading zeror)rN) rrCr#r5r%structunpackrKr)rr@rEbitsirrrrCOs,  zDerInteger._decodeFromStream)rNN)Fr+r,r-r.rr?rFrCrrrrrs   c@s4eZdZdZd ddZddZd dd Zd d ZdS)r aVClass to model a DER-encoded BOOLEAN. An example of encoding is:: >>> from Cryptodome.Util.asn1 import DerBoolean >>> bool_der = DerBoolean(True) >>> print(bool_der.encode().hex()) which will show ``0101ff``, the DER encoding of True. And for decoding:: >>> s = bytes.fromhex('0101ff') >>> try: >>> bool_der = DerBoolean() >>> bool_der.decode(s) >>> print(bool_der.value) >>> except ValueError: >>> print "Not a valid DER BOOLEAN" the output will be ``True``. :ivar value: The boolean value :vartype value: boolean FNcCst|dd|d|||_dS)aInitialize the DER object as a BOOLEAN. Args: value (boolean): The value of the boolean. Default is False. implicit (integer or byte): The IMPLICIT tag number (< 0x1F) to use for the encoded object. It overrides the universal tag for BOOLEAN (1). It cannot be combined with the ``explicit`` parameter. By default, there is no IMPLICIT tag. explicit (integer or byte): The EXPLICIT tag number (< 0x1F) to use for the encoded object. It cannot be combined with the ``implicit`` parameter. By default, there is no EXPLICIT tag. r)r/FNrJrLrrrrszDerBoolean.__init__cCs|jr dnd|_t|S)z9Return the DER BOOLEAN, fully encoded as a binary string.rKr5rr?rrrrr?szDerBoolean.encodecCst|||S)zDecode a DER-encoded BOOLEAN, and re-initializes this object with it. Args: der_encoded (byte string): A DER-encoded BOOLEAN. Raises: ValueError: in case of parsing errors. rRrSrrrrFs zDerBoolean.decodecCsdt|||t|jdkr$tdt|jddkr>d|_n"t|jddkrXd|_ntddS) z)Decode a DER-encoded BOOLEAN from a file.r)z7Invalid encoding for DER BOOLEAN: payload is not 1 byterFrMTzInvalid payload for DER BOOLEANN)rrCr#r5r%rrKrr@rErrrrCszDerBoolean._decodeFromStream)FNN)FrYrrrrr fs   c@seZdZdZd%ddZddZddZd d Zd d Zd dZ ddZ ddZ ddZ ddZ ddZd&ddZd'ddZddZd(d!d"Zd#d$ZdS))r aClass to model a DER SEQUENCE. This object behaves like a dynamic Python sequence. Sub-elements that are INTEGERs behave like Python integers. Any other sub-element is a binary string encoded as a complete DER sub-element (TLV). An example of encoding is: >>> from Cryptodome.Util.asn1 import DerSequence, DerInteger >>> from binascii import hexlify, unhexlify >>> obj_der = unhexlify('070102') >>> seq_der = DerSequence([4]) >>> seq_der.append(9) >>> seq_der.append(obj_der.encode()) >>> print hexlify(seq_der.encode()) which will show ``3009020104020109070102``, the DER encoding of the sequence containing ``4``, ``9``, and the object with payload ``02``. For decoding: >>> s = unhexlify(b'3009020104020109070102') >>> try: >>> seq_der = DerSequence() >>> seq_der.decode(s) >>> print len(seq_der) >>> print seq_der[0] >>> print seq_der[:] >>> except ValueError: >>> print "Not a valid DER SEQUENCE" the output will be:: 3 4 [4, 9, b''] NcCs.t|dd|d||dkr$g|_n||_dS)aCInitialize the DER object as a SEQUENCE. :Parameters: startSeq : Python sequence A sequence whose element are either integers or other DER objects. implicit : integer or byte The IMPLICIT tag number (< 0x1F) to use for the encoded object. It overrides the universal tag for SEQUENCE (16). It cannot be combined with the ``explicit`` parameter. By default, there is no IMPLICIT tag. explicit : integer or byte The EXPLICIT tag number (< 0x1F) to use for the encoded object. It cannot be combined with the ``implicit`` parameter. By default, there is no EXPLICIT tag. r/TN)rr_seq)rZstartSeqr7r8rrrrszDerSequence.__init__cCs |j|=dSrr_rnrrr __delitem__szDerSequence.__delitem__cCs |j|Srr`rarrr __getitem__szDerSequence.__getitem__cCs||j|<dSrr`)rkeyrKrrr __setitem__szDerSequence.__setitem__cCs||j||<dSrr`)rrXjsequencerrr __setslice__ szDerSequence.__setslice__cCs|j||=dSrr`rrXrgrrr __delslice__ szDerSequence.__delslice__cCs|jtd|td|Sr)r_maxrjrrr __getslice__szDerSequence.__getslice__cCs t|jSrr#r_rrrr__len__szDerSequence.__len__cCs|j||Srr_appendritemrrr__iadd__s zDerSequence.__iadd__cCs|j||Srrprrrrrrqs zDerSequence.appendcCs|j|||Sr)r_insert)rindexrsrrrruszDerSequence.insertTcsfdd|jD}t|S)zReturn the number of items in this sequence that are integers. Args: only_non_negative (boolean): If ``True``, negative integers are not counted in. csg|]}t|r|qSr)r.0rrrr *s z'DerSequence.hasInts..)r_r#)rritemsrryrhasInts!s zDerSequence.hasIntscCs|jo||t|jkS)aReturn ``True`` if all items in this sequence are integers or non-negative integers. This function returns False is the sequence is empty, or at least one member is not an integer. Args: only_non_negative (boolean): If ``True``, the presence of negative integers causes the method to return ``False``.)r_r|r#)rrrrr hasOnlyInts-s zDerSequence.hasOnlyIntscCsfd|_|jD]N}t|r(|j|7_q t|rH|jt|7_q |j|7_q t|S)zReturn this DER SEQUENCE, fully encoded as a binary string. Raises: ValueError: if some elements in the sequence are neither integers nor byte strings. r/)r5r_rrrr?rrrrrrr?:s zDerSequence.encodeFcCs.||_tj|||d}|r*|s*td|S)a9Decode a complete DER SEQUENCE, and re-initializes this object with it. Args: der_encoded (byte string): A complete SEQUENCE DER element. nr_elements (None or integer or list of integers): The number of members the SEQUENCE can have only_ints_expected (boolean): Whether the SEQUENCE is expected to contain only integers. strict (boolean): Whether decoding must check for strict DER compliancy. Raises: ValueError: in case of parsing errors. DER INTEGERs are decoded into Python integers. Any other DER element is not decoded. Its validity is not checked. rQzSome members are not INTEGERs) _nr_elementsrrFr}r%)rrDrEZ nr_elementsZonly_ints_expectedr'rrrrFLs  zDerSequence.decodecCsg|_t|||t|j}|dkr|t}||||jdkr`|j| qt }| }|j ||d|j|j qd}|j dk rzt|j|j k}Wn$tk rt|j|j k}YnX|stdt|jdS)z+Decode a complete DER SEQUENCE from a file.rrIrQTNz1Unexpected number of members (%d) in the sequence)r_rrCrr5r$r r3rqr"rrFrKr~r#rr%)rr@rErGderderIntdataokrrrrCis.     zDerSequence._decodeFromStream)NNN)T)T)FNF)r+r,r-r.rrcrdrfrirkrmrortrqrur|r}r?rFrCrrrrr s"*   c@seZdZdZdddZdS)r aClass to model a DER OCTET STRING. An example of encoding is: >>> from Cryptodome.Util.asn1 import DerOctetString >>> from binascii import hexlify, unhexlify >>> os_der = DerOctetString(b'\xaa') >>> os_der.payload += b'\xbb' >>> print hexlify(os_der.encode()) which will show ``0402aabb``, the DER encoding for the byte string ``b'\xAA\xBB'``. For decoding: >>> s = unhexlify(b'0402aabb') >>> try: >>> os_der = DerOctetString() >>> os_der.decode(s) >>> print hexlify(os_der.payload) >>> except ValueError: >>> print "Not a valid DER OCTET STRING" the output will be ``aabb``. :ivar payload: The content of the string :vartype payload: byte string r/NcCst|d||ddS)ahInitialize the DER object as an OCTET STRING. :Parameters: value : byte string The initial payload of the object. If not specified, the payload is empty. implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for OCTET STRING (4). FNrr)rrKr7rrrrs zDerOctetString.__init__)r/Nr+r,r-r.rrrrrr sc@seZdZdZddZdS)r z"Class to model a DER NULL element.cCst|dddddS)z$Initialize the DER object as a NULL.r/NFrrrrrrszDerNull.__init__Nrrrrrr sc@s4eZdZdZd ddZddZdd d Zd d ZdS)r a,Class to model a DER OBJECT ID. An example of encoding is: >>> from Cryptodome.Util.asn1 import DerObjectId >>> from binascii import hexlify, unhexlify >>> oid_der = DerObjectId("1.2") >>> oid_der.value += ".840.113549.1.1.1" >>> print hexlify(oid_der.encode()) which will show ``06092a864886f70d010101``, the DER encoding for the RSA Object Identifier ``1.2.840.113549.1.1.1``. For decoding: >>> s = unhexlify(b'06092a864886f70d010101') >>> try: >>> oid_der = DerObjectId() >>> oid_der.decode(s) >>> print oid_der.value >>> except ValueError: >>> print "Not a valid DER OBJECT ID" the output will be ``1.2.840.113549.1.1.1``. :ivar value: The Object ID (OID), a dot separated list of integers :vartype value: string NcCst|dd|d|||_dS)aInitialize the DER object as an OBJECT ID. :Parameters: value : string The initial Object Identifier (e.g. "1.2.0.0.6.2"). implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for OBJECT ID (6). explicit : integer The EXPLICIT tag to use for the encoded object. r/FNrJrLrrrrs zDerObjectId.__init__cCsdd|jdD}t|dkr*td|ddkr>td|ddkr^|dd kr^td d |d|dg|dd }g}t|D]:}||d @|dL}|r||d @dB|dL}qqdddt|D|_t |S)zCReturn the DER OBJECT ID, fully encoded as a binary string.cSsg|] }t|qSr)rOrwrrrrzsz&DerObjectId.encode...rIz$Not a valid Object Identifier stringrz!First component must be 0, 1 or 2r)'z#Second component must be 39 at most(Nr;r1r/cSsg|] }t|qSr)rrwrrrrzs) rKsplitr#r%reversedrqjoinr5rr?)rcompssubcompsr<vrrrr?s"  "  zDerObjectId.encodeFcCst|||S)abDecode a complete DER OBJECT ID, and re-initializes this object with it. Args: der_encoded (byte string): A complete DER OBJECT ID. strict (boolean): Whether decoding must check for strict DER compliancy. Raises: ValueError: in case of parsing errors. rRrSrrrrF szDerObjectId.decodecCst|||t|j}g}d}|rX|}|d>|d@}|d@s ||d}q t|dkrltd|ddkrd|dg|dd<n>|dd krd|ddg|dd<nd |dd g|dd<d d d |D|_ dS)z,Decode a complete DER OBJECT ID from a file.rrr;r1z Empty payloadrNr)PrIrcSsg|] }t|qSr)strrwrrrrz7sz1DerObjectId._decodeFromStream..) rrCrr5r$r*rqr#r%rrK)rr@rErGrrcrrrrCs$     zDerObjectId._decodeFromStream)rNN)FrYrrrrr s   c@s4eZdZdZd ddZddZdd d Zd d ZdS)raClass to model a DER BIT STRING. An example of encoding is: >>> from Cryptodome.Util.asn1 import DerBitString >>> bs_der = DerBitString(b'\xAA') >>> bs_der.value += b'\xBB' >>> print(bs_der.encode().hex()) which will show ``030300aabb``, the DER encoding for the bit string ``b'\xAA\xBB'``. For decoding: >>> s = bytes.fromhex('030300aabb') >>> try: >>> bs_der = DerBitString() >>> bs_der.decode(s) >>> print(bs_der.value.hex()) >>> except ValueError: >>> print "Not a valid DER BIT STRING" the output will be ``aabb``. :ivar value: The content of the string :vartype value: byte string r/NcCs4t|dd|d|t|tr*||_n||_dS)aInitialize the DER object as a BIT STRING. :Parameters: value : byte string or DER object The initial, packed bit string. If not specified, the bit string is empty. implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for BIT STRING (3). explicit : integer The EXPLICIT tag to use for the encoded object. r/FN)rr isinstancer?rKrLrrrrWs   zDerBitString.__init__cCsd|j|_t|S)zBReturn the DER BIT STRING, fully encoded as a byte string.r[r\rrrrr?ls zDerBitString.encodeFcCst|||S)aTDecode a complete DER BIT STRING, and re-initializes this object with it. Args: der_encoded (byte string): a complete DER BIT STRING. strict (boolean): Whether decoding must check for strict DER compliancy. Raises: ValueError: in case of parsing errors. rRrSrrrrFts zDerBitString.decodecCsNt||||jr.t|jddkr.tdd|_|jrJ|jdd|_dS)z1Decode a complete DER BIT STRING DER from a file.rzNot a valid BIT STRINGr/r)N)rrCr5rr%rKr]rrrrCs zDerBitString._decodeFromStream)r/NN)FrYrrrrr:s   c@sTeZdZdZdddZddZddZd d Zd d ZdddZ ddZ ddZ dS)raClass to model a DER SET OF. An example of encoding is: >>> from Cryptodome.Util.asn1 import DerBitString >>> from binascii import hexlify, unhexlify >>> so_der = DerSetOf([4,5]) >>> so_der.add(6) >>> print hexlify(so_der.encode()) which will show ``3109020104020105020106``, the DER encoding of a SET OF with items 4,5, and 6. For decoding: >>> s = unhexlify(b'3109020104020105020106') >>> try: >>> so_der = DerSetOf() >>> so_der.decode(s) >>> print [x for x in so_der] >>> except ValueError: >>> print "Not a valid DER SET OF" the output will be ``[4, 5, 6]``. NcCs:t|dd|dg|_d|_|r6|D]}||q&dS)a9Initialize the DER object as a SET OF. :Parameters: startSet : container The initial set of integers or DER encoded objects. implicit : integer The IMPLICIT tag to use for the encoded object. It overrides the universal tag for SET OF (17). r/TN)rrr_ _elemOctetadd)rZstartSetr7errrrs zDerSetOf.__init__cCs |j|Srr`rarrrrdszDerSetOf.__getitem__cCs t|jSr)iterr_rrrr__iter__szDerSetOf.__iter__cCs t|jSrrnrrrrroszDerSetOf.__len__cCsht|rd}nt|tr |j}n t|d}|j|krN|jdk rHtd||_||jkrd|j|dS)zAdd an element to the set. Args: elem (byte string or integer): An element of the same type of objects already in the set. It can be an integer or a DER encoded object. rIrNz&New element does not belong to the set) rrrr3rrr%r_rq)relemeorrrrs      z DerSetOf.addFcCst|||S)aDecode a complete SET OF DER element, and re-initializes this object with it. DER INTEGERs are decoded into Python integers. Any other DER element is left undecoded; its validity is not checked. Args: der_encoded (byte string): a complete DER BIT SET OF. strict (boolean): Whether decoding must check for strict DER compliancy. Raises: ValueError: in case of parsing errors. rRrSrrrrFszDerSetOf.decodecCsg|_t|||t|j}d}|dkr|t}||||dkrX|j}n||jkrjtd|dkr|j | q"t }| | ||j |j q"dS)z)Decode a complete DER SET OF from a file.rz)Not all elements are of the same DER typerIN)r_rrCrr5r$r r3r%rqr"rrFrK)rr@rErGZ setIdOctetrrrrrrCs"    zDerSetOf._decodeFromStreamcCsfg}|jD]<}t|r$t|}nt|tr8|}n|}||q |d||_ t|S)zRReturn this SET OF DER element, fully encoded as a binary string. r/) r_rrr?rrrqsortrr5)rZorderedrsZbysrrrr?s     zDerSetOf.encode)NN)F) r+r,r-r.rrdrrorrFrCr?rrrrrs  !)F)rUZCryptodome.Util.py3compatrrrZCryptodome.Util.numberrr__all__robjectrrrr r r r r rrrrrrs,  7_SV- vY