&xjM;DddlmZmZmZmZmZddlZddlmZddlm Z ddl m Z ddl mZmZmZGddejeZGd d ejeZed d ZGdd ejeZedeeZGddeeejeZdS))ClassVarGenericOptionalTypeTypeVarN)encoding) exceptions)Encoder)EncryptedMessage StringFixerrandomceZdZUdZejjZee e d<e j fde de jfdZde fdZde fdZd edefd Zd edefd Zd S) PublicKeya= The public key counterpart to an Curve25519 :class:`nacl.public.PrivateKey` for encrypting messages. :param public_key: [:class:`bytes`] Encoded Curve25519 public key :param encoder: A class that is able to decode the `public_key` :cvar SIZE: The size that the public key is required to be SIZE public_keyencoderc(|||_t|jtst jdt |j|jkr,t jd |jdS)Nz'PublicKey must be created from 32 bytesz,The public key must be exactly {} bytes long) decode _public_key isinstancebytesexc TypeErrorlenr ValueErrorformat)selfrrs >*55$*E22 K- IJJ J t DI - -.>EEI  . -returnc|jSNrrs r __bytes__zPublicKey.__bytes__4 r c:tt|Sr#)hashrr%s r__hash__zPublicKey.__hash__7sE$KK   r otherct||jsdStjt |t |SNF)r __class__naclbindings sodium_memcmprrr+s r__eq__zPublicKey.__eq__:s?%00 5}**5;;e EEEr c||k Sr#r2s r__ne__zPublicKey.__ne__?EM""r N)__name__ __module__ __qualname____doc__r/r0crypto_box_PUBLICKEYBYTESrrint__annotations__r RawEncoderrr rr&r*objectboolr3r6r5r rrrs-AD(3-AAA %-$7!  5    !#!!!!FFFtFFFF #F#t######r rc$eZdZUdZejjZee e d<ejj Z ee e d<e jfdede jfdZee jfdede jddfd Zdefd Zde fd Zd edefd Zd edefdZeddZdS) PrivateKeya{ Private key for decrypting messages using the Curve25519 algorithm. .. warning:: This **must** be protected and remain secret. Anyone who knows the value of your :class:`~nacl.public.PrivateKey` can decrypt any message encrypted by the corresponding :class:`~nacl.public.PublicKey` :param private_key: The private key used to decrypt messages :param encoder: The encoder class used to decode the given keys :cvar SIZE: The size that the private key is required to be :cvar SEED_SIZE: The size that the seed used to generate the private key is required to be r SEED_SIZE private_keyrcV||}t|trt||jks,t jd|jtj |}||_ t||_ dS)Nz>PrivateKey must be created from a {} bytes long raw secret key)rrrrrrrrr/r0crypto_scalarmult_base _private_keyrr)rrErraw_public_keys rrzPrivateKey.__init__Ws nn[11  {E * * /2;/?/?49/L/L-T&##  ==kJJ'#N33r seedr!c8||}t|trt||jks,t jd|jtj |\}}||S)ah Generate a PrivateKey using a deterministic construction starting from a caller-provided seed .. warning:: The seed **must** be high-entropy; therefore, its generator **must** be a cryptographic quality random function like, for example, :func:`~nacl.utils.random`. .. warning:: The seed **must** be protected and remain secret. Anyone who knows the seed is really in possession of the corresponding PrivateKey. :param seed: The seed used to generate the private key :rtype: :class:`~nacl.public.PrivateKey` z7PrivateKey seed must be a {} bytes long binary sequence) rrrrrDrrrr/r0crypto_box_seed_keypair)clsrJrraw_pkraw_sks r from_seedzPrivateKey.from_seedms,~~d##4'' CII,F,F-M&''  >>tDDs6{{r c|jSr#)rHr%s rr&zPrivateKey.__bytes__s   r cbtt|t|jfSr#)r)typerrr%s rr*zPrivateKey.__hash__s%T$ZZt!7!78999r r+cPt||jsdS|j|jkSr-)rr.rr2s rr3zPrivateKey.__eq__s+%00 5%"222r c||k Sr#r5r2s rr6zPrivateKey.__ne__r7r c^|ttjtjS)z~ Generates a random :class:`~nacl.public.PrivateKey` object :rtype: :class:`~nacl.public.PrivateKey` r)r rCrrr?)rMs rgeneratezPrivateKey.generates&s6*/**H4GHHHHr N)r!rC)r8r9r:r;r/r0crypto_box_SECRETKEYBYTESrrr=r>crypto_box_SEEDBYTESrDrr?rr r classmethodrPr&r*r@rAr3r6rXr5r rrCrCCsw -AD(3-AAA#}AIx}AAA %-$7444!4444,%-$7   !     [ D!5!!!!:#::::3F3t3333 #F#t####III[IIIr rC_BoxBox)boundc 2eZdZUdZejjZee e d<e e d<de de fdZde fdZeejfd eed e d edefd Zd ejfde dee d ejdefdZd ejfde dee d ejde fdZde fdZd S)r]a/ The Box class boxes and unboxes messages between a pair of keys The ciphertexts generated by :class:`~nacl.public.Box` include a 16 byte authenticator which is checked as part of the decryption. An invalid authenticator will cause the decrypt function to raise an exception. The authenticator is not a signature. Once you've decrypted the message you've demonstrated the ability to create arbitrary valid message, so messages you send are repudiable. For non-repudiable messages, sign them after encryption. :param private_key: :class:`~nacl.public.PrivateKey` used to encrypt and decrypt messages :param public_key: :class:`~nacl.public.PublicKey` used to encrypt and decrypt messages :cvar NONCE_SIZE: The size that the nonce is required to be. NONCE_SIZE _shared_keyrErcDt|trt|tstjdt j|tj |tj |_ dS)Nz5Box must be created from a PrivateKey and a PublicKeyrW) rrCrrrr/r0crypto_box_beforenmencoderr?ra)rrErs rrz Box.__init__s+z22 *  ; ;  -G  =<<   h&9  : :   x':  ; ;  r r!c|jSr#rar%s rr&z Box.__bytes__r'r rMencodedrcd||}|||_|S)z[ Alternative constructor. Creates a Box from an existing Box's shared key. )__new__rra)rMrgrboxs rrz Box.decodes/KK$$"..11 r N plaintextnoncec|t|j}t||jkrtjd|jzt j|||j}| |}| |}tj ||| ||zS)a Encrypts the plaintext message using the given `nonce` (or generates one randomly if omitted) and returns the ciphertext encoded with the encoder. .. warning:: It is **VITALLY** important that the nonce is a nonce, i.e. it is a number used only once for any given key. If you fail to do this, you compromise the privacy of the messages encrypted. :param plaintext: [:class:`bytes`] The plaintext message to encrypt :param nonce: [:class:`bytes`] The nonce to use in the encryption :param encoder: The encoder to use to encode the ciphertext :rtype: [:class:`nacl.utils.EncryptedMessage`] N'The nonce must be exactly %s bytes long) r r`rrrr/r0crypto_box_easy_afternmrardr _from_parts)rrkrlr ciphertext encoded_nonceencoded_ciphertexts rencryptz Box.encrypts( =4?++E u:: ( (.9DOK ]::       u-- $^^J77+   NN5:- . .   r rqc$||}||d|j}||jd}t||jkrtjd|jzt j|||j}|S)a Decrypts the ciphertext using the `nonce` (explicitly, when passed as a parameter or implicitly, when omitted, as part of the ciphertext) and returns the plaintext message. :param ciphertext: [:class:`bytes`] The encrypted message to decrypt :param nonce: [:class:`bytes`] The nonce used when encrypting the ciphertext :param encoder: The encoder used to decode the ciphertext. :rtype: [:class:`bytes`] Nrn) rr`rrrr/r0crypto_box_open_easy_afternmra)rrqrlrrks rdecryptz Box.decrypt s$^^J// =001E#DO$5$56J u:: ( (.9DOK M>>      r c|jS)a Returns the Curve25519 shared secret, that can then be used as a key in other symmetric ciphers. .. warning:: It is **VITALLY** important that you use a nonce with your symmetric cipher. If you fail to do this, you compromise the privacy of the messages encrypted. Ensure that the key length of your cipher is 32 bytes. :rtype: [:class:`bytes`] rfr%s r shared_keyzBox.shared_key1s r )r8r9r:r;r/r0crypto_box_NONCEBYTESr`rr=r>rrCrrr&r[rr?rr\r rrr rtrwryr5r rr]r]s&!% CJ CCC  J  I      5    > + ?  D   -L r r!c|jSr#r$r%s rr&zSealedBox.__bytes__jr'r rkrcztj||j}||}|S)a{ Encrypts the plaintext message using a random-generated ephemeral key pair and returns a "composed ciphertext", containing both the public part of the key pair and the ciphertext proper, encoded with the encoder. The private part of the ephemeral key-pair will be scrubbed before returning the ciphertext, therefore, the sender will not be able to decrypt the generated ciphertext. :param plaintext: [:class:`bytes`] The plaintext message to encrypt :param encoder: The encoder to use to encode the ciphertext :return bytes: encoded ciphertext )r/r0crypto_box_sealrrd)rrkrrqrss rrtzSealedBox.encryptms6(]229d>NOO $^^J77!!r rzSealedBox[PrivateKey]rqc||}|jtdtj||j|j}|S)a Decrypts the ciphertext using the ephemeral public key enclosed in the ciphertext and the SealedBox private key, returning the plaintext message. :param ciphertext: [:class:`bytes`] The encrypted message to decrypt :param encoder: The encoder used to decode the ciphertext. :return bytes: The original plaintext :raises TypeError: if this SealedBox was created with a :class:`~nacl.public.PublicKey` rather than a :class:`~nacl.public.PrivateKey`. Nz4SealedBoxes created with a public key cannot decrypt)rrHrr/r0crypto_box_seal_openr)rrqrrks rrwzSealedBox.decryptsc$^^J//   $F M66       r N)r8r9r:r;rr>rr{rr&rr?r rtrwr5r rr}r}Cs"5/!!!d$ 5    %-$7"""!"  """":%-$7%!  r r})typingrrrrr nacl.bindingsr/rr r nacl.encodingr nacl.utilsr r r EncodablerrCr\r]r{r}r5r rrs>=============""""""!!!!!!<<<<<<<<<<)#)#)#)#)#"K)#)#)#XbIbIbIbIbI#[bIbIbIJwvU###R R R R R ( kR R R jwvy*--bbbbb x1;bbbbbr