FM / openssl

/usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/

/usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl

Name	Size	Mode	Actions
__pycache__/	-	0755	rm
aead.py	6245	0644	edit dl rm
backend.py	88282	0644	edit dl rm
ciphers.py	10390	0644	edit dl rm
cmac.py	2846	0644	edit dl rm
decode_asn1.py	1113	0644	edit dl rm
dh.py	11209	0644	edit dl rm
dsa.py	10707	0644	edit dl rm
ec.py	12846	0644	edit dl rm
ed448.py	5743	0644	edit dl rm
ed25519.py	5789	0644	edit dl rm
encode_asn1.py	570	0644	edit dl rm
hashes.py	3098	0644	edit dl rm
hmac.py	2941	0644	edit dl rm
poly1305.py	2347	0644	edit dl rm
rsa.py	21454	0644	edit dl rm
utils.py	2451	0644	edit dl rm
x448.py	4141	0644	edit dl rm
x509.py	1452	0644	edit dl rm
x25519.py	4622	0644	edit dl rm
__init__.py	271	0644	edit dl rm

Edit: /usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl/utils.py (2451B)

# This file is dual licensed under the terms of the Apache License, Version
# 2.0, and the BSD License. See the LICENSE file in the root of this repository
# for complete details.

import warnings

from cryptography import utils
from cryptography.hazmat.primitives import hashes
from cryptography.hazmat.primitives.asymmetric.utils import Prehashed

def _evp_pkey_derive(backend, evp_pkey, peer_public_key):
    ctx = backend._lib.EVP_PKEY_CTX_new(evp_pkey, backend._ffi.NULL)
    backend.openssl_assert(ctx != backend._ffi.NULL)
    ctx = backend._ffi.gc(ctx, backend._lib.EVP_PKEY_CTX_free)
    res = backend._lib.EVP_PKEY_derive_init(ctx)
    backend.openssl_assert(res == 1)
    res = backend._lib.EVP_PKEY_derive_set_peer(ctx, peer_public_key._evp_pkey)
    backend.openssl_assert(res == 1)
    keylen = backend._ffi.new("size_t *")
    res = backend._lib.EVP_PKEY_derive(ctx, backend._ffi.NULL, keylen)
    backend.openssl_assert(res == 1)
    backend.openssl_assert(keylen[0] > 0)
    buf = backend._ffi.new("unsigned char[]", keylen[0])
    res = backend._lib.EVP_PKEY_derive(ctx, buf, keylen)
    if res != 1:
        errors_with_text = backend._consume_errors_with_text()
        raise ValueError("Error computing shared key.", errors_with_text)

return backend._ffi.buffer(buf, keylen[0])[:]

def _calculate_digest_and_algorithm(backend, data, algorithm):
    if not isinstance(algorithm, Prehashed):
        hash_ctx = hashes.Hash(algorithm, backend)
        hash_ctx.update(data)
        data = hash_ctx.finalize()
    else:
        algorithm = algorithm._algorithm

if len(data) != algorithm.digest_size:
        raise ValueError(
            "The provided data must be the same length as the hash "
            "algorithm's digest size."
        )

return (data, algorithm)

def _check_not_prehashed(signature_algorithm):
    if isinstance(signature_algorithm, Prehashed):
        raise TypeError(
            "Prehashed is only supported in the sign and verify methods. "
            "It cannot be used with signer, verifier or "
            "recover_data_from_signature."
        )

def _warn_sign_verify_deprecated():
    warnings.warn(
        "signer and verifier have been deprecated since 2.1. Please use sign "
        "and verify instead. Support for these functions will be dropped"
        " in the next release of cryptography (37.0).",
        utils.PersistentlyDeprecated2017,
        stacklevel=3,
    )

# This file is dual licensed under the terms of the Apache License, Version # 2.0, and the BSD License. See the LICENSE file in the root of this repository # for complete details. import warnings from cryptography import utils from cryptography.hazmat.primitives import hashes from cryptography.hazmat.primitives.asymmetric.utils import Prehashed def _evp_pkey_derive(backend, evp_pkey, peer_public_key): ctx = backend._lib.EVP_PKEY_CTX_new(evp_pkey, backend._ffi.NULL) backend.openssl_assert(ctx != backend._ffi.NULL) ctx = backend._ffi.gc(ctx, backend._lib.EVP_PKEY_CTX_free) res = backend._lib.EVP_PKEY_derive_init(ctx) backend.openssl_assert(res == 1) res = backend._lib.EVP_PKEY_derive_set_peer(ctx, peer_public_key._evp_pkey) backend.openssl_assert(res == 1) keylen = backend._ffi.new("size_t *") res = backend._lib.EVP_PKEY_derive(ctx, backend._ffi.NULL, keylen) backend.openssl_assert(res == 1) backend.openssl_assert(keylen[0] > 0) buf = backend._ffi.new("unsigned char[]", keylen[0]) res = backend._lib.EVP_PKEY_derive(ctx, buf, keylen) if res != 1: errors_with_text = backend._consume_errors_with_text() raise ValueError("Error computing shared key.", errors_with_text) return backend._ffi.buffer(buf, keylen[0])[:] def _calculate_digest_and_algorithm(backend, data, algorithm): if not isinstance(algorithm, Prehashed): hash_ctx = hashes.Hash(algorithm, backend) hash_ctx.update(data) data = hash_ctx.finalize() else: algorithm = algorithm._algorithm if len(data) != algorithm.digest_size: raise ValueError( "The provided data must be the same length as the hash " "algorithm's digest size." ) return (data, algorithm) def _check_not_prehashed(signature_algorithm): if isinstance(signature_algorithm, Prehashed): raise TypeError( "Prehashed is only supported in the sign and verify methods. " "It cannot be used with signer, verifier or " "recover_data_from_signature." ) def _warn_sign_verify_deprecated(): warnings.warn( "signer and verifier have been deprecated since 2.1. Please use sign " "and verify instead. Support for these functions will be dropped" " in the next release of cryptography (37.0).", utils.PersistentlyDeprecated2017, stacklevel=3, )