+ Dfj@ (Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RIH t H t H t H t H t ^RIHtHtHtHtHtHt^RIHt^RIHt^RIHt^RIHtHtHt^R IH t H!t!H"t"^R IH#t#^R I$H%t&^R I'H(t(H)t)H*t*^R I+H,t,H-t-H.t.H/t/H0t0^RI1H2t2^RI3H4t4H5t5^RI6H7t7^RI8H9t9^RI:H;t;Ht>]'d^RI?H@t@RtA]tB]]C].]B3,]P3,tE!RR]]E]F]F]G3,4tH!RR4tIRtJ!RR]5P4tL!RR]L4tM!RR ]L4tN!R!R"4tO!R#R$4tP!R%R&4tQ](P!R'4wtStT^tU^tV^tW^tX^tY^tZ^t[^t\^t]^t^^t_^t`^"ta^tb^ tc^!td^te^tf^tg^th^ti^tj^tk^tl^ tm^ tn^ to^ tp^ tq^tr^ts/tt]u!]v!4P44F=wtxty]xPR(4'gK]xPR)4'dK8]x]t]y&K? R*]t9gR+]t9d ]{!R,4hR#)-z The lowest level SSH protocol. This handles the key negotiation, the encryption and the compression. The transport layer is described in RFC 4253. Maintainer: Paul Swartz ) annotationsN)md5sha1sha256sha384sha512) TYPE_CHECKINGAnyCallableDictTupleUnion)UnsupportedAlgorithm)default_backend) serialization)dhecx25519)Cipher algorithmsmodes)Literal) __version__)_kexaddresskeys)MPNSffsgetMPgetNS) SSHService)deferprotocol)Logger) randbytes) iterbytes networkString)Failure) SSHFactoryc@\\PVR44#)aMake an SSH multiple-precision integer from big-endian L{bytes}. Used in ECDH key exchange. @type data: L{bytes} @param data: The input data, interpreted as a big-endian octet string. @rtype: L{bytes} @return: The given data encoded as an SSH multiple-precision integer. big)rint from_bytes)datas&=/usr/lib/python3/dist-packages/twisted/conch/ssh/transport.py _mpFromBytesr0.s cnnT5) **c&]tRt^At$RtR]R&RtR#) _MACParamsa  L{_MACParams} represents the parameters necessary to compute SSH MAC (Message Authenticate Codes). L{_MACParams} is a L{tuple} subclass to maintain compatibility with older versions of the code. The elements of a L{_MACParams} are:: 0. The digest object used for the MAC 1. The inner pad ("ipad") string 2. The outer pad ("opad") string 3. The size of the digest produced by the digest object L{_MACParams} is also an object lesson in why tuples are a bad type for public APIs. @ivar key: The HMAC key which will be used. byteskeyN)__name__ __module__ __qualname____firstlineno____doc____annotations____static_attributes__r6r1r/r3r3As$ Jr1r3c]tRt^WtRtR]P ^]P3R]P^ ]P3R]P^]P3R]P^]P3R]P^]P3R]P^]P3R]P^ ]P3R ]P ^]P3R R ^]P3/ t R ] R ] R]R]R]R R /tRtRtRtRRltRtRtRtRtRtR #) SSHCiphersa SSHCiphers represents all the encryption operations that need to occur to encrypt and authenticate the SSH connection. @cvar cipherMap: A dictionary mapping SSH encryption names to 3-tuples of (, , ) @cvar macMap: A dictionary mapping SSH MAC names to hash modules. @ivar outCipType: the string type of the outgoing cipher. @ivar inCipType: the string type of the incoming cipher. @ivar outMACType: the string type of the incoming MAC. @ivar inMACType: the string type of the incoming MAC. @ivar encBlockSize: the block size of the outgoing cipher. @ivar decBlockSize: the block size of the incoming cipher. @ivar verifyDigestSize: the size of the incoming MAC. @ivar outMAC: a tuple of (, , , ) representing the outgoing MAC. @ivar inMAc: see outMAC, but for the incoming MAC. 3des-cbc aes256-cbc aes192-cbc aes128-cbc aes128-ctr aes192-ctr aes256-ctr3des-ctrnoneN hmac-sha2-512 hmac-sha2-384 hmac-sha2-256 hmac-sha1hmac-md5c |WnW nW0nW@n^Vn^Vn^VnRVnRVnR#)NNr1r1rO) outCipType inCipType outMACType inMACType encBlockSize decBlockSizeverifyDigestSizeoutMACinMAC)selfoutCipinCipoutMacinMacs&&&&&r/__init__SSHCiphers.__init__s<   !) ( r1c .VPVPW4pVP4VnVPP^,VnVPVP W44pVP4VnVPP^,VnVPVPV4Vn VPVPV4Vn VP'dVP^,VnR#R#)aD Set up the ciphers and hashes using the given keys, @param outIV: the outgoing initialization vector @param outKey: the outgoing encryption key @param inIV: the incoming initialization vector @param inKey: the incoming encryption key @param outInteg: the outgoing integrity key @param inInteg: the incoming integrity key. N) _getCipherrQ encryptor algorithm block_sizerUrR decryptorrV_getMACrSrXrTrYrW)rZoutIVoutKeyinIVinKeyoutInteginIntegos&&&&&&& r/setKeysSSHCiphers.setKeyss OODOOU ;KK22a7 OODNND 8KK22a7ll4??H= \\$..': :::$(JJqMD ! r1c  VPV,wrEpVf \4#\V!VRV4V!VRVP^,4\ 4R7#)z Creates an initialized cipher object. @param cip: the name of the cipher, maps into cipherMap @param iv: the initialzation vector @param key: the encryption key @return: the cipher object. Nbackend) cipherMap _DummyCipherrrer)rZcipivr5algorithmClasskeySize modeClasss&&&& r/rbSSHCiphers._getCiphersa.2^^C-@*  !> ! 3x= ) b9>449: ;#%  r1c$V^8dQhRRRRRR/#)macr4r5returnz@tuple[None, Literal[b''], Literal[b''], Literal[0]] | _MACParamsr6)formats"r/ __annotate__SSHCiphers.__annotate__s$"""$" I"r1c RVPV,pV'gR#V!4pVPpVPpVRVRWe, ,,pVP\P 4pVP\P 4p\W7W34p W)nV #)a Gets a 4-tuple representing the message authentication code. (, , , ) @type mac: L{bytes} @param mac: a key mapping into macMap @type key: L{bytes} @param key: the MAC key. @rtype: L{bytes} @return: The MAC components. NrP) macMap digest_sizere translatehmactrans_36trans_5Cr3r5) rZr~r5mod hashObject digestSize blockSizeirnresults &&& r/rgSSHCiphers._getMACs"kk#& &U ++ )) +:'Y-C"DE MM$-- ( MM$-- (SQ34  r1c 8VPPV4#)z Encrypt some data. @type blocks: L{bytes} @param blocks: The data to encrypt. @rtype: L{bytes} @return: The encrypted data. )rcupdaterZblockss&&r/encryptSSHCiphers.encrypt~~$$V,,r1c 8VPPV4#)z Decrypt some data. @type blocks: L{bytes} @param blocks: The data to decrypt. @rtype: L{bytes} @return: The decrypted data. )rfrrs&&r/decryptSSHCiphers.decryptrr1c VP^,'gR#\P!RV4V,p\P!VPP W P^,4P 4#)a Create a message authentication code (MAC) for the given packet using the outgoing MAC values. @type seqid: L{int} @param seqid: The sequence ID of the outgoing packet. @type data: L{bytes} @param data: The data to create a MAC for. @rtype: L{str} @return: The serialized MAC. r1>L)rXstructpackrHMACr5digest)rZseqidr.s&&&r/makeMACSSHCiphers.makeMACsS{{1~~{{4'$.yy$ A?FFHHr1c :VP^,'gVR8H#\P!RV4V,p\P!VPP W P^,4P 4p\P!W44#)a6 Verify an incoming MAC using the incoming MAC values. @type seqid: L{int} @param seqid: The sequence ID of the incoming packet. @type data: L{bytes} @param data: The packet data to verify. @type mac: L{bytes} @param mac: The MAC sent with the packet. @rtype: L{bool} @return: C{True} if the MAC is valid. r1r)rYrrrrr5rcompare_digest)rZrr.r~outers&&&& r/verifySSHCiphers.verifysj zz!}}#: {{4'$. $**..$ 1 >EEG""3..r1) rVrfrUrcrRrYrTrQrXrSrW)r7r8r9r:r;r TripleDESrCBCAESCTRrtrrrrrrr_rorbrgrrrrr=r6r1r/r?r?Ws, j**B : EII6 EII6 EII6 EII6 EII6 EII6j**B :$599% I &&&dS F )2, ("H - -I&/r1r?c >.p.ROpVF~p\PV,wr4p\V!RV,4V!RVP^,,4\ 4R7P 4VP V4K V# \dKi;i)z Build a list of ciphers that are supported by the backend in use. @return: a list of supported ciphers. @rtype: L{list} of L{str}  rr)rFrArErBrDrCrGr@)r?rtrrerrcappendr)supportedCipherscscipherrxryrzs r/_getSupportedCiphersrs B-7-A-A&-I* , tg~.$.";";q"@AB') ik  # #F +  $   sAB  BBc]tRtRt$Rt]!4tRtR]P!R4,t Rt R],R,] ,R ,] ,P4t ]!4t.RMOt]P$!4t.t]F5t]P-R 4RN8wgK]]P/R R 4., tK7 ].ROO, t]!4P34'd]P5R 4R R.tRPtRQtRtRtRt ^t!^t"Rt#Rt$Rt%R]&R&Rt'R]&R&Rt(Rt)Rt*](t+Rt,Rt-Rt.Rt//t0R]&R&R]&R&R]&R&R ]&R!&RRR"R#llt1R$t2R%t3R&t4R't5R(t6R)t7R*t8R+t9R,t:R-t;]R?ltMR@RAltNRBtORTRCltPRTRDltQREtRRFtSRGtTRHtURItVRJtWRKtXRLtYR#)USSHTransportBasei=as Protocol supporting basic SSH functionality: sending/receiving packets and message dispatch. To connect to or run a server, you must use SSHClientTransport or SSHServerTransport. @ivar protocolVersion: A string representing the version of the SSH protocol we support. Currently defaults to '2.0'. @ivar version: A string representing the version of the server or client. Currently defaults to 'Twisted'. @ivar comment: An optional string giving more information about the server or client. @ivar supportedCiphers: A list of strings representing the encryption algorithms supported, in order from most-preferred to least. @ivar supportedMACs: A list of strings representing the message authentication codes (hashes) supported, in order from most-preferred to least. Both this and supportedCiphers can include 'none' to use no encryption or authentication, but that must be done manually, @ivar supportedKeyExchanges: A list of strings representing the key exchanges supported, in order from most-preferred to least. @ivar supportedPublicKeys: A list of strings representing the public key algorithms supported, in order from most-preferred to least. @ivar supportedCompressions: A list of strings representing compression types supported, from most-preferred to least. @ivar supportedLanguages: A list of strings representing languages supported, from most-preferred to least. @ivar supportedVersions: A container of strings representing supported ssh protocol version numbers. @ivar isClient: A boolean indicating whether this is a client or server. @ivar gotVersion: A boolean indicating whether we have received the version string from the other side. @ivar buf: Data we've received but hasn't been parsed into a packet. @ivar outgoingPacketSequence: the sequence number of the next packet we will send. @ivar incomingPacketSequence: the sequence number of the next packet we are expecting from the other side. @ivar outgoingCompression: an object supporting the .compress(str) and .flush() methods, or None if there is no outgoing compression. Used to compress outgoing data. @ivar outgoingCompressionType: A string representing the outgoing compression type. @ivar incomingCompression: an object supporting the .decompress(str) method, or None if there is no incoming compression. Used to decompress incoming data. @ivar incomingCompressionType: A string representing the incoming compression type. @ivar ourVersionString: the version string that we sent to the other side. Used in the key exchange. @ivar otherVersionString: the version string sent by the other side. Used in the key exchange. @ivar ourKexInitPayload: the MSG_KEXINIT payload we sent. Used in the key exchange. @ivar otherKexInitPayload: the MSG_KEXINIT payload we received. Used in the key exchange @ivar sessionID: a string that is unique to this SSH session. Created as part of the key exchange, sessionID is used to generate the various encryption and authentication keys. @ivar service: an L{SSHService} instance, or None. If it's set to an object, it's the currently running service. @ivar kexAlg: the agreed-upon key exchange algorithm. @ivar keyAlg: the agreed-upon public key type for the key exchange. @ivar currentEncryptions: an SSHCiphers instance. It represents the current encryption and authentication options for the transport. @ivar nextEncryptions: an SSHCiphers instance. Held here until the MSG_NEWKEYS messages are exchanged, when nextEncryptions is transitioned to currentEncryptions. @ivar first: the first bytes of the next packet. In order to avoid decrypting data twice, the first bytes are decrypted and stored until the whole packet is available. @ivar _keyExchangeState: The current protocol state with respect to key exchange. This is either C{_KEY_EXCHANGE_NONE} if no key exchange is in progress (and returns to this value after any key exchange completqes), C{_KEY_EXCHANGE_REQUESTED} if this side of the connection initiated a key exchange, and C{_KEY_EXCHANGE_PROGRESSING} if the other side of the connection initiated a key exchange. C{_KEY_EXCHANGE_NONE} is the initial value (however SSH connections begin with key exchange, so it will quickly change to another state). @ivar _blockedByKeyExchange: Whenever C{_keyExchangeState} is not C{_KEY_EXCHANGE_NONE}, this is a C{list} of pending messages which were passed to L{sendPacket} but could not be sent because it is not legal to send them while a key exchange is in progress. When the key exchange completes, another attempt is made to send these messages. @ivar _peerSupportsExtensions: a boolean indicating whether the other side of the connection supports RFC 8308 extension negotiation. @ivar peerExtensions: a dict of extensions supported by the other side of the connection. 2.0sTwisted_asciir1SSH--rsecdhecdsas ssh-ed25519rHzlibFNz bytes | None sessionIDzSSHService | Noneservice_KEY_EXCHANGE_NONE_KEY_EXCHANGE_REQUESTED_KEY_EXCHANGE_PROGRESSINGs ext-info-cs ext-info-szDict[bytes, bytes]peerExtensionsr)factoryobjectavatarzCallable[[], None]logoutFunctionc V^8dQhRRRR/#)r}reasonzFailure | NonerNoner6)rs"r/rSSHTransportBase.__annotate__s * *^ *t *r1c VP'dVPP4\VR4'dVP4VPP R4R#)z When the underlying connection is closed, stop the running service (if any), and log out the avatar (if any). @type reason: L{twisted.python.failure.Failure} @param reason: The cause of the connection being closed. rzconnection lostN)rserviceStoppedhasattrr_loginfo)rZrs&&r/connectionLostSSHTransportBase.connectionLostsG <<< LL ' ' ) 4 " "    ! ()r1c VPPVPR,4\RRRR4VnVPP RRRRRR4VP 4R#)zh Called when the connection is made to the other side. We sent our version and the MSG_KEXINIT packet. s rHr1N) transportwriteourVersionStringr?currentEncryptionsro sendKexInitrZs&r/connectionMadeSSHTransportBase.connectionMades^ T22W<=",Wgw"P ''S#sCE r1c VPVP8wd\RVP: 24h\VP4pTP VP 'd VPM VP4RP\\34\P!^4\RPV44\RPVP44\RPVP 44\RPVP 44\RPVP"44\RPVP"44\RPVP$44\RPVP$44\RPVP&44\RPVP&44R. 4VnVP+\VP(R,4VP,Vn.VnR#)a Send a I{KEXINIT} message to initiate key exchange or to respond to a key exchange initiated by the peer. @raise RuntimeError: If a key exchange has already been started and it is not appropriate to send a I{KEXINIT} message at this time. @return: L{None} z0Cannot send KEXINIT while key exchange state is r1,sNNN)_keyExchangeStater RuntimeErrorlistsupportedKeyExchangesrisClient _EXT_INFO_C _EXT_INFO_Sjoinr4 MSG_KEXINITr% secureRandomrsupportedPublicKeysr supportedMACssupportedCompressionssupportedLanguagesourKexInitPayload sendPacketr_blockedByKeyExchange)rZrs& r/rSSHTransportBase.sendKexInit s  ! !T%<%< <)),  !%T%?%? @ $$ $ D  43C3C "%{n%&&r*499234499T5567499T2234499T2234499T//01499T//01499T7789499T7789499T4456499T4456' " "  T%;%;B%?@!%!=!=%'"r1c ^Tu;8:d^8:dMMV\\\39#^Tu;8:d^8:dMM V\39#^Tu;8*;'d^18*#u#)aZ Determine if the given message type may be sent while key exchange is in progress. @param messageType: The type of message @type messageType: L{int} @return: C{True} if the given type of message may be sent while key exchange is in progress, C{False} if it may not. @rtype: L{bool} @see: U{http://tools.ietf.org/html/rfc4253#section-7.1} )MSG_SERVICE_REQUESTMSG_SERVICE_ACCEPT MSG_EXT_INFOr)rZ messageTypes&&r/_allowedKeyExchangeMessageType/SSHTransportBase._allowedKeyExchangeMessageTypeRsa !r !#"'   " "{n4 4[&&B&&&&r1c tVPVP8wd6VPV4'gVPP W34R#\ V34V,pVP 'd<VP PV4VP P^4,pVPPp^\V4,pW4V,, pV^8d WS,p\P!RWE,^, V4V,\P!V4,pVPP!V4VPP#VP$V4,pVP&P)V4V;P$^, unR#)a Sends a packet. If it's been set up, compress the data, encrypt it, and authenticate it before sending. If key exchange is in progress and the message is not part of key exchange, queue it to be sent later. @param messageType: The type of the packet; generally one of the MSG_* values. @type messageType: L{int} @param payload: The payload for the message. @type payload: L{str} N!LB)rrrrrr4outgoingCompressioncompressflushrrUlenrrr%rrroutgoingPacketSequencerr)rZrpayloadbs totalSizelenPadpacket encPackets&&& r/rSSHTransportBase.sendPacketlsg  ! !T%<%< <66{CC**11;2HI''1  # # #..77((..q12G $ $ 1 1G $ 2~& A: KKy1A5v > $$V, -  ++33   # # + +D,G,G PQ  Y' ##q(#r1c  VPPpVPPp\VP4V8dR#\ VR4'g*VPP VPRV4pMVPpV=\P!RVR,4wrEVR8d%VP\\RV 244R#\VP4V^,V,8d W0nR#V^,V,^8wd@VP\\RV^,W^,V,3,44R#VPR^V,VP^V,Ruq`nW0PP WaR4,p\V4^V,8wdVP\R4R#V'dhVPRVVPVRuqnVPPVPWx4'gVP\R 4R#V^V)p VP 'dVP P#V 4p V;P^, unV # \$d6TP&P)R 4TP\*R 4R#i;i) z Try to return a decrypted, authenticated, and decompressed packet out of the buffer. If there is not enough data, return None. @rtype: L{str} or L{None} @return: The decoded packet, if any. Nfirstr:NNizbad packet length zbad packet mod (%i%%%i == %i)sbad decryptionsbad MACzError decompressing payloadscompression error)rrVrWrbufrrrrunpacksendDisconnectDISCONNECT_PROTOCOL_ERRORr'rincomingPacketSequenceDISCONNECT_MAC_ERRORincomingCompression decompress ExceptionrfailureDISCONNECT_COMPRESSION_ERROR) rZrmsr packetLen paddingLenencDatarmacDatars & r/ getPacketSSHTransportBase.getPacketsv $ $ 1 1  $ $ 5 5 txx=2  tW%%++33DHHSbMBEJJE & eU2Y ? w    ) 29+>?   txx=9q=2- -J  MR 1 $   )3 1}bq=B*>?@   HH_q9}5txxI 7P0088FF v;!i- '    9;L M  $" txx} GX**11++V##$8*EJ;'  # # # 22==gF ##q(#   !!"?@##$@BVW  s,J"" xx}}UDHHMM'$:;rA HHNN5)E<<((&*DO/0hhuoD+$%GGDM!$4M$,B,BB88G AA$zz%A.9DH!VC[)J  BZ 8^^%Fr1c V^28dnV\9dc\V,R,p\VRV 2R4pVe V!V4R#VPPRVVR7VP 4R#VP 'dVP P W4R#VPPRVVR7VP 4R#)z Send a received message to the appropriate method. @type messageNum: L{int} @param messageNum: The message number. @type payload: L{bytes} @param payload: The message payload. NNssh_Nz*couldn't handle {messageType}: {payload!r})rrz)couldn't handle {messageNum}: {payload!r})r2r)messagesgetattrrdebugsendUnimplementedrpacketReceived)rZr2rrfs&&& r/r/ SSHTransportBase.dispatchMessage s ?zX5":.r2K[M2D9A}'  @ +#  &&( \\\ LL ' ' < IIOO;%    " " $r1c ^\P!VPP44#)z Returns an L{SSHTransportAddress} corresponding to the other (peer) side of this transport. @return: L{SSHTransportAddress} for the peer @rtype: L{SSHTransportAddress} @since: 12.1 )rSSHTransportAddressrgetPeerrs&r/rBSSHTransportBase.getPeer+"**4>>+A+A+CDDr1c ^\P!VPP44#)z Returns an L{SSHTransportAddress} corresponding to the this side of transport. @return: L{SSHTransportAddress} for the peer @rtype: L{SSHTransportAddress} @since: 12.1 )rrArgetHostrs&r/rFSSHTransportBase.getHost6rDr1c VP#)zC The key exchange algorithm name agreed between client and server. _kexAlgrs&r/kexAlgSSHTransportBase.kexAlgAs ||r1c WnR#)z& Set the key exchange algorithm name. NrI)rZvalues&&r/rKrLHs  r1c  \\34V,Vn\VR,^ 4pVRR VR ,rCRV4w ppppp p p p p pWV .pWyV .pVP'dTTppVP VP VPVPVPVPVPVP3pWVV^,V^,V^,V^,V^,V^,3pVP'dTTpp\V^,V^,4Vn \V^,V^,4Vn \\V^,V^,4\V^,V^,4\V^,V^,4\V^,V^,44Vn\V^,V^,4Vn\V^,V^,4VnRVPVPVPVP 39g(VPVP"VP$39dVP'\(R4R#RVPP*P-49dVP'\(R4R#VP'd VP$M VP"V9VnVP0P3RVPVPR7VP0P3RVPP4VPP6VPR7VP0P3R VPP8VPP:VP R7VP<VP>8XdVP@VnMVPC4WVV3#) a  Called when we receive a MSG_KEXINIT message. Payload:: bytes[16] cookie string keyExchangeAlgorithms string keyAlgorithms string incomingEncryptions string outgoingEncryptions string incomingAuthentications string outgoingAuthentications string incomingCompressions string outgoingCompressions string incomingLanguages string outgoingLanguages bool firstPacketFollows unit32 0 (reserved) Starts setting up the key exchange, keys, encryptions, and authentications. Extended by ssh_KEXINIT in SSHServerTransport and SSHClientTransport. @type packet: L{bytes} @param packet: The message data. @return: A L{tuple} of negotiated key exchange algorithms, key algorithms, and unhandled data, or L{None} if something went wrong. :NNNc3B"TFqPR4xK R#5i)rN)r().0ss& r/ /SSHTransportBase.ssh_KEXINIT..s ,GqWWT]]Gsscouldn't match all kex partsz%kex alg={kexAlg!r} key alg={keyAlg!r})rKkeyAlgz)outgoing: {cip!r} {mac!r} {compression!r})rvr~ compressionz)incoming: {cip!r} {mac!r} {compression!r}r$)"r4rotherKexInitPayloadr rrrrrrrrKrVr?nextEncryptionsoutgoingCompressionTypeincomingCompressionTyperrr DISCONNECT_KEY_EXCHANGE_FAILED__dict__values_peerSupportsExtensionsrr;rQrSrRrTrrrr)rZrkstringsrestkexAlgskeyAlgsencCSencSCmacCSmacSCcompCScompSClangCSlangSCoutsinsserverclients&& r/ ssh_KEXINITSSHTransportBase.ssh_KEXINIT]sw6$)+#86#A  &+r "#2" -G ,          f%V$ ===T#D  & &  $ $  ! !  ! !        & &  & &  DGSVT!Wc!fd1gsSTvV ===#VFF&)VAY/ &)VAY/ ) q 6!9 % q 6!9 % q 6!9 % q 6!9 %   (+6!9fQi'@$'*6!9fQi'@$   ,,,,  {{t//1A1ABB   .0O   4''00779 9   .0O   $ D  43C3C ($  3;;;;   7$$//$$//44   7$$..$$..44    ! !T%A%A A%)%C%CD "    %%r1c \P!RVR,4^,p\VR,4wr4VPW#4VPP 4R#)z Called when we receive a MSG_DISCONNECT message. Payload:: long code string description This means that the other side has disconnected. Pass the message up and disconnect ourselves. @type packet: L{bytes} @param packet: The message data. rNr7Nr6N)rr r receiveErrorrloseConnection)rZr reasonCode descriptionfoos&& r/ssh_DISCONNECTSSHTransportBase.ssh_DISCONNECTsL]]44Q7  ,  *2 %%'r1c R#)z Called when we receive a MSG_IGNORE message. No payload. This means nothing; we simply return. @type packet: L{bytes} @param packet: The message data. Nr6rZrs&&r/ ssh_IGNORESSHTransportBase.ssh_IGNOREsr1c Z\P!RV4wpVPV4R#)z Called when we receive a MSG_UNIMPLEMENTED message. Payload:: long packet This means that the other side did not implement one of our packets. @type packet: L{bytes} @param packet: The message data. rN)rr receiveUnimplemented)rZrseqnums&& r/ssh_UNIMPLEMENTED"SSHTransportBase.ssh_UNIMPLEMENTEDs$MM$/  !!&)r1c \\VR,44p\VR,^4wr4pVPW#V4R#)z Called when we receive a MSG_DEBUG message. Payload:: bool alwaysDisplay string message string language This means the other side has passed along some debugging info. @type packet: L{bytes} @param packet: The message data. r#rN)boolr.r receiveDebug)rZr alwaysDisplaymessagelangrys&& r/ ssh_DEBUGSSHTransportBase.ssh_DEBUGs<S-. "6":q1s -$7r1c \P!RVR,4wpVR,p/p\V4Fp\V^4wrVpWcV&K W0nR#)a Called when we get a MSG_EXT_INFO message. Payload:: uint32 nr-extensions repeat the following 2 fields "nr-extensions" times: string extension-name string extension-value (binary) @type packet: L{bytes} @param packet: The message data. rrtr6N)rr ranger r)rZr numExtensions extensions_extNameextValues&& r/ ssh_EXT_INFOSSHTransportBase.ssh_EXT_INFOsY"==vbz: }%A(-fa(8 %Gv"*w &)r1c VPPRVPR7VP'dVPP 4WnWnVPP 4R#)z Set our service to service and start it running. If we were running a service previously, stop it first. @type service: C{SSHService} @param service: The service to attach. zstarting service {service!r})rN)rr;namerrrserviceStarted)rZrs&&r/ setServiceSSHTransportBase.setService!sQ 6 M <<< LL ' ' )   ##%r1c TP\V'dRMR\V4,\V4,4R#)a? Send a debug message to the other side. @param message: the message to send. @type message: L{str} @param alwaysDisplay: if True, tell the other side to always display this message. @type alwaysDisplay: L{bool} @param language: optionally, the language the message is in. @type language: L{str} rN)r MSG_DEBUGr)rZrrlanguages&&&&r/ sendDebugSSHTransportBase.sendDebug0s+  ER[H2h<W r1c DVP\\V44R#)z Send a message that will be ignored by the other side. This is useful to fool attacks based on guessing packet sizes in the encrypted stream. @param message: data to send with the message @type message: L{str} N)r MSG_IGNOREr)rZrs&&r/ sendIgnoreSSHTransportBase.sendIgnore@s  BwK0r1c tVPpVP\\P!RV44R#)zK Send a message to the other side that the last packet was not understood. z!LN)r rMSG_UNIMPLEMENTEDrrrZrs& r/r<"SSHTransportBase.sendUnimplementedKs) ,, )6;;tV+DEr1c VP\\P!RV4\ V4,\ R4,4VP P RVVR7VPP4R#)a Send a disconnect message to the other side and then disconnect. @param reason: the reason for the disconnect. Should be one of the DISCONNECT_* values. @type reason: L{int} @param desc: a descrption of the reason for the disconnection. @type desc: L{str} rr1z;Disconnecting with error, code {code} reason: {description}coderxN) rMSG_DISCONNECTrrrrrrrv)rZrdescs&&&r/r SSHTransportBase.sendDisconnectSs`  D&(ABtH(LrRUw(VW  J  %%'r1c  .VP'd}RP\P!R\ V44.VUUu.uF wr#\ V4\ V4,NK" upp,4pVP \V4R#R#uuppi)z Send an RFC 8308 extension advertisement to the remote peer. Nothing is sent if the peer doesn't support negotiations. @type extensions: L{list} of (L{bytes}, L{bytes}) @param extensions: a list of (extension-name, extension-value) pairs. r1rN)r_rrrrrrr)rZrrrNrs&& r/ sendExtInfoSSHTransportBase.sendExtInfoesx  ' ' 'hhT3z?34;EF:KD2d8bi'':FGG OOL' 2 (Gs&B c <\P!VPVP4pVP \ 44pVP 4VnVPP4P4Pp\V4Vn R#)z Prepares for a Diffie-Hellman key agreement exchange. Creates an ephemeral keypair in the group defined by (self.g, self.p) and stores it. N) rDHParameterNumbersr1g parametersrgenerate_private_key dhSecretKey public_keypublic_numbersyrdhSecretKeyPublicMP)rZnumbersrrs& r/_startEphemeralDH"SSHTransportBase._startEphemeralDHtsq''7''(9: %::<    ' ' ) 8 8 : < <#%a5 r1c \P!V\P!VPVP44P \ 44pVPPV4pV=VPR4p\VR,4pV^,'d7\P!R\V4^,4R,pWS,#\P!R\V44pWS,#)z Completes the Diffie-Hellman key agreement started by _startEphemeralDH, and forgets the ephemeral secret key. @type remoteDHpublicKey: L{int} @rtype: L{bytes} @return: The new shared secret, in SSH C{mpint} format. rr#r)rDHPublicNumbersrr1rrrrexchangelstripr.rrr)rZremoteDHpublicKey remoteKeysecretchprefixs&& r/_finishEphemeralDH#SSHTransportBase._finishEphemeralDHs&& r44TVVTVVD *_& ' !!**95   w'   99[[s6{Q7'AF[[s6{3Fr1c(V^8dQhRRRRRRRR/#)r}cr4 sharedSecret exchangeHashrr6)rs"r/rrs(!!!e!5!U!r1c \P!VP4pVPfQR4hV!W#,V,VP,4P 4pV!W#,V,4P 4pV!W#,V,V,4P 4pV!W#,V,V,V,4P 4pWV,V,V,#)z Get one of the keys for authentication/encryption. @param c: The letter identifying which key this is. @param sharedSecret: The shared secret K. @param exchangeHash: The hash H from key exchange. @return: The derived key. z*session ID must already have been assigned)rgetHashProcessorrKrr) rZrrr hashProcessork1k2k3k4s &&&& r/_getKeySSHTransportBase._getKeys--dkk: ~~)W+WW) <6:T^^K L S S U <6; < C C E <6;b@ A H H J <6;b@2E F M M Ow|b  r1c$V^8dQhRRRRRR/#r}rr4rrrr6)rs"r/rrs!**e*5*T*r1c  VP'gW nVPRW4pVPRW4pVPRW4pVPRW4pVPRW4pVPRW4pWFV.p W5V.p VP'dYrVPP V ^,V ^,V ^,V ^,V ^,V ^,4VP \ R4R#) a Set up the keys for the connection and sends MSG_NEWKEYS when finished. @param sharedSecret: a secret string agreed upon using a Diffie- Hellman exchange, so it is only shared between the server and the client. @param exchangeHash: A hash of various data known by both sides. ABCDEFr1N)rrrrYror MSG_NEWKEYS) rZrrinitIVCSinitIVSCencKeyCSencKeySC integKeyCS integKeySCrmrns &&& r/ _keySetupSSHTransportBase._keySetups~~~)N<<lA<<lA<<lA<<lA\\$ C \\$ C J/:. ===# $$T!Wd1gs1vs1vtAwPSTUPVW  S)r1c VPPR4VPVnVPR8Xd\ P !^4VnVPR8Xd\ P!4Vn VPVn VPpRVn VFwr#VPW#4K R#)a Called back by a subclass once a I{MSG_NEWKEYS} message has been received. This indicates key exchange has completed and new encryption and compression parameters should be adopted. Any messages which were queued during key exchange will also be flushed. zNEW KEYSrN)rr;rYrrZzlib compressobjrr[ decompressobjrrrrr)rZr9rrs& r/_newKeysSSHTransportBase._newKeyss  #"&"6"6  ' '7 2'+'7'7':D $  ' '7 2'+'9'9';D $!%!8!8--%)"$, K OOK 1%-r1c VR8XdVPPR8g#VR8XdVPPR8g#VR8Xd+VPR4;'dVPR4#\ R4h)z Check if the connection is encrypted in the given direction. @type direction: L{str} @param direction: The direction: one of 'out', 'in', or 'both'. @rtype: L{bool} @return: C{True} if it is encrypted. outrHinboth(direction must be "out", "in", or "both")rrQrR isEncrypted TypeErrorrZ directions&&r/rSSHTransportBase.isEncryptedsz  **55@ @ $ **44? ? & ##D)EEd.>.>u.E EFG Gr1c VR8XdVPPR8g#VR8XdVPPR8g#VR8Xd+VPR4;'dVPR4#\ R4h)z Check if the connection is verified/authentication in the given direction. @type direction: L{str} @param direction: The direction: one of 'out', 'in', or 'both'. @rtype: L{bool} @return: C{True} if it is verified. rrHrrr)rrSrT isVerifiedrrs&&r/rSSHTransportBase.isVerifiedsv  **55@ @ $ **44? ? & ??4(CCT__U-C CFG Gr1c 2VP\R4R#)zV Lose the connection to the other side, sending a DISCONNECT_CONNECTION_LOST message. suser closed connectionN)r r&rs&r/rvSSHTransportBase.loseConnections 68QRr1c BVPPRVVR7R#)a; Called when we receive a disconnect error message from the other side. @param reasonCode: the reason for the disconnect, one of the DISCONNECT_ values. @type reasonCode: L{int} @param description: a human-readable description of the disconnection. @type description: L{str} z3Got remote error, code {code} reason: {description}rN)rerror)rZrwrxs&&&r/ruSSHTransportBase.receiveErrors"  B#  r1c @VPPRVR7R#)z Called when we receive an unimplemented packet message from the other side. @param seqnum: the sequence number that was not understood. @type seqnum: L{int} z)other side unimplemented packet #{seqnum})rN)rwarnrs&&r/r%SSHTransportBase.receiveUnimplemented"s B6Rr1c TV'd VPPRVR7R#R#)a< Called when we receive a debug message from the other side. @param alwaysDisplay: if True, this message should always be displayed. @type alwaysDisplay: L{bool} @param message: the debug message @type message: L{str} @param lang: optionally the language the message is in. @type lang: L{str} zRemote Debug Message: {message})rN)rr;)rZrrrs&&&&r/rSSHTransportBase.receiveDebug,s!  IIOO=wO O r1c VPPR4'dP\PRVPR,,,p\ P!T\44#VPR9d\PP4#\ RPVP44h \d \ R4hi;i)a Generate an private key for ECDH key exchange. @rtype: The appropriate private key type matching C{self.kexAlg}: L{ec.EllipticCurvePrivateKey} for C{ecdh-sha2-nistp*}, or L{x25519.X25519PrivateKey} for C{curve25519-sha256}. @return: The generated private key. ecdh-sha2-nistprr6 unused-keyz3Cannot generate elliptic curve private key for {!r}scurve25519-sha256scurve25519-sha256@libssh.org) rKr)r _curveTableKeyErrorrrrrrX25519PrivateKeygenerater)rZcurves& r/_generateECPrivateKey&SSHTransportBase._generateECPrivateKey;s ;; ! !"4 5 5 9((DKKO)CD**5/2CD D [[S S**335 5&ELLKK  9*<88 9s /CCc VPPR4'dCVP\PP \P P4#VPR9dCVP\PP\P P4#\RVP: 24h)aJ Encode an elliptic curve public key to bytes. @type ecPub: The appropriate public key type matching C{self.kexAlg}: L{ec.EllipticCurvePublicKey} for C{ecdh-sha2-nistp*}, or L{x25519.X25519PublicKey} for C{curve25519-sha256}. @param ecPub: The public key to encode. @rtype: L{bytes} @return: The encoded public key. rz,Cannot encode elliptic curve public key for r ) rKr) public_bytesrEncodingX962 PublicFormatUncompressedPointRawr)rZecPubs&&r/_encodeECPublicKey#SSHTransportBase._encodeECPublicKeyTs ;; ! !"4 5 5%%&&++**<< [[S S%%&&**M,F,F,J,J '>t{{oN r1c DVPPR4'dv\PRVPR,,,p\ PPY24pTP\ P!4T4pMfVPR9d2\PPV4pVPV4pM$\ RPVP44h\V4# \d \ R4hi;i)aw Generate a shared secret for ECDH key exchange. @type ecPriv: The appropriate private key type matching C{self.kexAlg}: L{ec.EllipticCurvePrivateKey} for C{ecdh-sha2-nistp*}, or L{x25519.X25519PrivateKey} for C{curve25519-sha256}. @param ecPriv: Our private key. @rtype: L{bytes} @return: The generated shared secret, as an SSH multiple-precision integer. rrr6rz5Cannot generate elliptic curve shared secret for {!r}r )rKr)rr r rrEllipticCurvePublicKeyfrom_encoded_pointrECDHrX25519PublicKeyfrom_public_bytesrr0)rZecPrivtheirECPubBytesr theirECPubrs&&& r/_generateECSharedSecret(SSHTransportBase._generateECSharedSecretos ;; ! !"4 5 5 9((DKKO)CD22EEJ"??2779jAL [[S S//AA/RJ!??:6L&GNNKK  L))# 9*<88 9s /DD)rrJrr_r rrrrr%rr[rKrVrYrXr+rrrZrrr)rIrJrKrLrMr$) rsa-sha2-512 rsa-sha2-256ssh-rsasssh-dssr6)s1.99r)N)Fr1)r)Zr7r8r9r:r;r$rprotocolVersiontwisted_versionencodeversioncommentstriprrrrrgetSupportedKeyExchangesrreckeyr'replacered25519_supportedrrrr,rr%r rr rrrr<rrrrrrrrr_rrrrrrrrr3r/rBrFpropertyrKsetterrqrzr~rrrrrrr<r rrrrrrrrrvrurrrrr$r=r6r1r/rr=svp 8DOO227;;GG/!D(72T9GC eg,-M!99;' ::g " $ EMM'8$D#E E 'UU**,,"">2$g.)HJ C"I|"!%G %.8!<+  K K#)+N&+  N&& *0(d'4%)N<|  +&Z%@ E E  ]](x&t("  *8 )& & 1F($ 3 )<!(*22(H&H&S $S P26"*r1rc]tRtRtRtRt^tRRltRRltRR lt R R lt R R lt RRlt RRlt RRltRRltRRltRtR#)SSHServerTransportia SSHServerTransport implements the server side of the SSH protocol. @ivar isClient: since we are never the client, this is always False. @ivar ignoreNextPacket: if True, ignore the next key exchange packet. This is set when the client sends a guessed key exchange packet but with an incorrect guess. @ivar dhGexRequest: the KEX_DH_GEX_REQUEST(_OLD) that the client sent. The key generation needs this to be stored. @ivar g: the Diffie-Hellman group generator. @ivar p: the Diffie-Hellman group prime. Fc V^8dQhRRRR/#)r}rVr4rztuple[keys.Key, keys.Key]r6)rs"r/rSSHServerTransport.__annotate__sWW5W-FWr1c VR9dRpMTpVPPV,VPPV,3#)a[ Get the public and private host keys corresponding to the given public key signature algorithm. The factory stores public and private host keys by their key format, which is not quite the same as the key signature algorithm: for example, an ssh-rsa key can sign using any of the ssh-rsa, rsa-sha2-256, or rsa-sha2-512 algorithms. @type keyAlg: L{bytes} @param keyAlg: A public key signature algorithm name. @rtype: 2-L{tuple} of L{keys.Key} @return: The public and private host keys. @raises KeyError: if the factory does not have both a public and a private host key for this signature algorithm. r(>r'r&)r publicKeys privateKeys)rZrV keyFormats&& r/ _getHostKeysSSHServerTransport._getHostKeyss@& 7 7"II||&&y14<<3K3KI3VVVr1c V^8dQhRRRR/#r}rr4rrr6)rs"r/rr8s--%-D-r1c \PW4pV'gR#Vwr4p\VR,4'dJV^,VP^,8wg V^,VP^,8wd RVnR#R#R#)a Called when we receive a MSG_KEXINIT message. For a description of the packet, see SSHTransportBase.ssh_KEXINIT(). Additionally, this method checks if a guessed key exchange packet was sent. If it was sent, and it guessed incorrectly, the next key exchange packet MUST be ignored. Nr#T)rrqr.rrignoreNextPacket)rZrretvalrcrdrbs&& r/rqSSHServerTransport.ssh_KEXINITsq"--d; %+ "Gd tCy>> d88;;1:!9!9!!<<(,%= r1c V^8dQhRRRR/#r@r6)rs"r/rr8s737373473r1c  P\V4wr!VPVP4wr4VP4pVP 4VnVP VP 4pVPWR4p\P!VP4!4pVP\VP44VP\VP44VP\VP44VP\VP 44VP\VP#444VP\V44VP\V44VPV4VP%4p VP'\(\VP#44\V4,\VP+WPR74,4VP-Wy4R#)ar Called from L{ssh_KEX_DH_GEX_REQUEST_OLD} to handle elliptic curve key exchanges. Payload:: string client Elliptic Curve Diffie-Hellman public key Just like L{_ssh_KEXDH_INIT} this message type is also not dispatched directly. Extra check to determine if this is really KEX_ECDH_INIT is required. First we load the host's public/private keys. Then we generate the ECDH public/private keypair for the given curve. With that we generate the shared secret key. Then we compute the hash to sign and send back to the client Along with the server's public key and the ECDH public key. @param packet: The message data.  signatureTypeN)r r=rVrrrrr$rrrKrrr+rrXrblobrrMSG_KEXDH_REPLYsignr) rZrpktPub pubHostKey privHostKeyr!encPubrhrs && r/_ssh_KEX_ECDH_INIT%SSHServerTransport._ssh_KEX_ECDH_INITs,v#'"3"3DKK"@ ++-&&( ((433FC   ! !$++ . 0 D++,- D))*+ D,,-. D**+, JOO%&' F F xxz    z !j !!,kk!JK L |2r1c V^8dQhRRRR/#r@r6)rs"r/rr8s'3'3e'3'3r1c  N\V4wr#VPVP4wrE\P!VP 4wVnVnVP4VPV4p\P!VP 4!4pVP\VP44VP\VP44VP\VP44VP\VP 44VP\VP#444VP\%V44VPVP&4VPV4VP)4pVP+\,\VP#44VP&,\VP/WPR74,4VP1Wh4R#)a Called to handle the beginning of a non-group key exchange. Unlike other message types, this is not dispatched automatically. It is called from C{ssh_KEX_DH_GEX_REQUEST_OLD} because an extra check is required to determine if this is really a KEXDH_INIT message or if it is a KEX_DH_GEX_REQUEST_OLD message. The KEXDH_INIT payload:: integer e (the client's Diffie-Hellman public key) We send the KEXDH_REPLY with our host key and signature. @type packet: L{bytes} @param packet: The message data. rGN)rr=rVrgetDHGeneratorAndPrimerKrr1rrrrrr+rrXrrIrrrrrJrKr rZrclientDHpublicKeyryrMrNrrPrs && r/_ssh_KEXDH_INIT"SSHServerTransport._ssh_KEXDH_INITs$"'v"&"3"3DKK"@ 44T[[A  ../@A  ! !$++ . 0 D++,- D))*+ D,,-. D**+, JOO%&' %&' ))* xxz    z !&& '!!,kk!JK L |2r1c V^8dQhRRRR/#r@r6)rs"r/rr88s#K#K#K4#Kr1c VVP'd ^VnR#\P!VP4'dVP V4#\P !VP4'dVP V4#Wn\P!RV4^,pVPPV4wVn Vn VP4VP\ \#VP4\#VP4,4R#)a] This represents different key exchange methods that share the same integer value. If the message is determined to be a KEXDH_INIT, L{_ssh_KEXDH_INIT} is called to handle it. If it is a KEX_ECDH_INIT, L{_ssh_KEX_ECDH_INIT} is called. Otherwise, for KEX_DH_GEX_REQUEST_OLD payload:: integer ideal (ideal size for the Diffie-Hellman prime) We send the KEX_DH_GEX_GROUP message with the group that is closest in size to ideal. If we were told to ignore the next key exchange packet by ssh_KEXINIT, drop it on the floor and return. @type packet: L{bytes} @param packet: The message data. Nr)rBr isFixedGrouprKrXisEllipticCurverQ dhGexRequestrr r getDHPrimerr1rrMSG_KEX_DH_GEX_GROUPr)rZrideals&& r/ssh_KEX_DH_GEX_REQUEST_OLD-SSHServerTransport.ssh_KEX_DH_GEX_REQUEST_OLD8s&  $%D !    T[[ ) )''/ /  ! !$++ . .**62 2 & MM$/2E!\\44U;NDFDF  " " $ OO0"TVV*r$&&z2I Jr1c V^8dQhRRRR/#r@r6)rs"r/rr8]sGGUGtGr1c rVP'd ^VnR#Wn\P!RV4wr#pVPP V4wVnVnVP4VP\\VP4\VP 4,4R#)a Called when we receive a MSG_KEX_DH_GEX_REQUEST message. Payload:: integer minimum integer ideal integer maximum The client is asking for a Diffie-Hellman group between minimum and maximum size, and close to ideal if possible. We reply with a MSG_KEX_DH_GEX_GROUP message. If we were told to ignore the next key exchange packet by ssh_KEXINIT, drop it on the floor and return. @type packet: L{bytes} @param packet: The message data. Nz>3L) rBr^rr rr_rr1rrr`r)rZrminramaxs&& r/ssh_KEX_DH_GEX_REQUEST)SSHServerTransport.ssh_KEX_DH_GEX_REQUEST]s"  $%D ! " --v6C007   ,bj2dff:.EFr1c V^8dQhRRRR/#r@r6)rs"r/rr8ws(3(3%(3D(3r1c  \V4wr#VPVP4wrEVPV4p\P !VP 4!4pVP\VP44VP\VP44VP\VP44VP\VP44VP\VP444VPVP4VP\VP 44VP\VP"44VP\V44VPVP$4VPV4VP'4pVP)\*\VP44VP$,\VP-WPR74,4VP/Wh4R#)z Called when we get a MSG_KEX_DH_GEX_INIT message. Payload:: integer e (client DH public key) We send the MSG_KEX_DH_GEX_REPLY message with our host key and signature. @type packet: L{bytes} @param packet: The message data. rGN)rr=rVrrrrKrrr+rrXrrIr^rr1rrrrMSG_KEX_DH_GEX_REPLYrKrrVs && r/ssh_KEX_DH_GEX_INIT&SSHServerTransport.ssh_KEX_DH_GEX_INITws"'v"&"3"3DKK"@ ../@A  ! !$++ . 0 D++,- D))*+ D,,-. D**+, JOO%&' ""# DFF DFF %&' ))* xxz   z !&& '!!,kk!JK L |2r1c$V^8dQhRRRRRR/#rr6)rs"r/rr8s!e5Tr1c VPRJp\PWV4V'd0VPRRP VP 43.4R#R#)# See SSHTransportBase._keySetup(). Nsserver-sig-algsr)rrrrrr)rZrrfirstKeys&&& r/rSSHServerTransport._keySetupsT>>T)""4|D    $dii0H0H&IJK  r1c V^8dQhRRRR/#r@r6)rs"r/rr8s  % D r1c dVR8wdVP\R4R#VP4R#)z Called when we get a MSG_NEWKEYS message. No payload. When we get this, the keys have been set on both sides, and we start using them to encrypt and authenticate the connection. @param packet: The message data. r1NEWKEYS takes no dataN)r r rr}s&&r/ ssh_NEWKEYSSSHServerTransport.ssh_NEWKEYSs) S=    9;S T  r1c V^8dQhRRRR/#r@r6)rs"r/rr8s##%#D#r1c \V4wr#VPPW4pV'g VP\RV,4R#VP \ \V44VPV!44R#)a Called when we get a MSG_SERVICE_REQUEST message. Payload:: string serviceName The client has requested a service. If we can start the service, start it; otherwise, disconnect with DISCONNECT_SERVICE_NOT_AVAILABLE. @type packet: L{bytes} @param packet: The message data. sdon't have service N) r r getServicer  DISCONNECT_SERVICE_NOT_AVAILABLErrrr)rZrrrbclss&& r/ssh_SERVICE_REQUEST&SSHServerTransport.ssh_SERVICE_REQUESTsef ll%%d4   02H72R   OO.7 < OOCE "r1)r^rrrBr1N)r7r8r9r:r;rrBr=rqrQrXrbrhrmrrwr~r=r6r1r/r6r6sR"HW2-(73r'3R#KJG4(3T ##r1r6c]tRtRtRtRtRtRtRtRt Rt R t R t R t R tR tRtRtRtRtRRltRtRtRtR#)SSHClientTransportia SSHClientTransport implements the client side of the SSH protocol. @ivar isClient: since we are always the client, this is always True. @ivar _gotNewKeys: if we receive a MSG_NEWKEYS message before we are ready to transition to the new keys, this is set to True so we can transition when the keys are ready locally. @ivar x: our Diffie-Hellman private key. @ivar e: our Diffie-Hellman public key. @ivar g: the Diffie-Hellman group generator. @ivar p: the Diffie-Hellman group prime @ivar instance: the SSHService object we are requesting. @ivar _dhMinimalGroupSize: Minimal acceptable group size advertised by the client in MSG_KEX_DH_GEX_REQUEST. @type _dhMinimalGroupSize: int @ivar _dhMaximalGroupSize: Maximal acceptable group size advertised by the client in MSG_KEX_DH_GEX_REQUEST. @type _dhMaximalGroupSize: int @ivar _dhPreferredGroupSize: Preferred group size advertised by the client in MSG_KEX_DH_GEX_REQUEST. @type _dhPreferredGroupSize: int Tii ic >\PV4^VnR#)zc Called when the connection is started with the server. Just sets up a private instance variable. N)rr _gotNewKeysrs&r/r!SSHClientTransport.connectionMades ''-r1c  \PW4fR#\P!VP4'doVP 4VnVP P4VnVP\\VPVP444R#\P!VP4'd`\P!VP4wVnVnVP#4VP\$VP&4R#VP\(\*P,!RVP.VP0VP244R#)a Called when we receive a MSG_KEXINIT message. For a description of the packet, see SSHTransportBase.ssh_KEXINIT(). Additionally, this method sends the first key exchange packet. If the agreed-upon exchange is ECDH, generate a key pair for the corresponding curve and send the public key. If the agreed-upon exchange has a fixed prime/generator group, generate a public key and send it in a MSG_KEXDH_INIT message. Otherwise, ask for a 2048 bit group with a MSG_KEX_DH_GEX_REQUEST message. N!LLL)rrqrr]rKrr!rrrMSG_KEX_DH_GEX_REQUEST_OLDrrr\rUrr1rMSG_KEXDH_INITrMSG_KEX_DH_GEX_REQUESTrr_dhMinimalGroupSize_dhPreferredGroupSize_dhMaximalGroupSizer}s&&r/rqSSHClientTransport.ssh_KEXINIT s  ' ' 5 =     , ,446DK//1DJ OO*Bt/F/Ftzz/R,S   t{{ + +!88ENDFDF  " " $ OOND,D,D E OO& ,,..,,  r1c VaV3Rlp\V^4wr4rQRP\\V4P 44Uu.uFp\ P !V4NK up4pSPW74pVPW#WE4VPV3Rl4V#uupi)a] Called to handle a reply to a ECDH exchange message(KEX_ECDH_INIT). Like the handler for I{KEXDH_INIT}, this message type has an overlapping value. This method is called from C{ssh_KEX_DH_GEX_GROUP} if that method detects a non-group key exchange is in progress. Payload:: string serverHostKey string server Elliptic Curve Diffie-Hellman public key string signature We verify the host key and continue if it passes verificiation. Otherwise raise an exception and return. @type packet: L{bytes} @param packet: The message data. @return: A deferred firing when key exchange is complete. cx<TpSPSPV4p\P!SP4!4pVP \ SP44VP \ SP44VP \ SP44VP \ SP44VP \ V44VP \ SPSP444VP \ V44VP V4VP4p\PP!V4P#W74'gSP%\&R4R#SP)WW4R#) bad signatureN)r$r!rrrKrrrr+rrXrrrrKey fromStringrr r\r) ignoredhostKeypubKey signature theirECHostrrPrrZs &&&& r/_continue_KEX_ECDH_REPLYHSSHClientTransport._ssh_KEX_ECDH_REPLY.._continue_KEX_ECDH_REPLYOs&!K77 VLL%%dkk24A HHR--. / HHR//0 1 HHR../ 0 HHR001 2 HHR _ % HHR// ;< = HHRZ HH\ "88:L88&&{3::9SS##$BDTU|:r1:cT<SP\RV 2PR44#)zbad host key [ecdh] zutf-8)r "DISCONNECT_HOST_KEY_NOT_VERIFIABLEr+unusedrZs&r/8SSHClientTransport._ssh_KEX_ECDH_REPLY..ts(4..2&vh/66w?r1) r rr&rrbinasciihexlify verifyHostKey addCallback addErrback) rZrrrrrr fingerprintds f& r/_ssh_KEX_ECDH_REPLY&SSHClientTransport._ssh_KEX_ECDH_REPLY8s. ;2.361-=* ii,5c'l6I6I6K,L M,LbX  b !,L M    w 4 .K    NsB&c a\V4wr!\V4wr1\V4wrARP\\ V4P 44Uu.uFp\ P!V4NK up4pSPW&4pVPSPW#V4VPV3Rl4V#uupi)aI Called to handle a reply to a non-group key exchange message (KEXDH_INIT). Like the handler for I{KEXDH_INIT}, this message type has an overlapping value. This method is called from C{ssh_KEX_DH_GEX_GROUP} if that method detects a non-group key exchange is in progress. Payload:: string serverHostKey integer f (server Diffie-Hellman public key) string signature We verify the host key by calling verifyHostKey, then continue in _continueKEXDH_REPLY. @type packet: L{bytes} @param packet: The message data. @return: A deferred firing when key exchange is complete. rc0<SP\R4#s bad host keyr rrs&r/r5SSHClientTransport._ssh_KEXDH_REPLY..4..2Or1) r rrr&rrrrrr_continueKEXDH_REPLYr)rZrrr>rrrrsf& r/_ssh_KEXDH_REPLY#SSHClientTransport._ssh_KEXDH_REPLY{s.v&M !&M ii,5c&k6H6H6J,K L,KbX  b !,K L    v 3 d//IF    MCc \P!VP4'dVPV4#\P!VP4'dVP V4#\ V4wVnp\ V4wVnpVP4VP\VP4R#)aU This handles different messages which share an integer value. If the key exchange does not have a fixed prime/generator group, we generate a Diffie-Hellman public key and send it in a MSG_KEX_DH_GEX_INIT message. Payload:: string g (group generator) string p (group prime) @type packet: L{bytes} @param packet: The message data. N) rr\rKrr]rrr1rrrMSG_KEX_DH_GEX_INITr)rZrrbs&& r/ssh_KEX_DH_GEX_GROUP'SSHClientTransport.ssh_KEX_DH_GEX_GROUPs   T[[ ) )((0 0  ! !$++ . .++F3 3 =LDFD ;LDFD  " " $ OO/1I1I Jr1c 0\PPV4pVPV4p\P !VP 4!4pVP\VP44VP\VP44VP\VP44VP\VP44VP\V44VPVP4VP\V44VPV4VP4pVP!WH4'gVP#\$R4R#VP'Wh4R#)a The host key has been verified, so we generate the keys. @param ignored: Ignored. @param pubKey: the public key blob for the server's public key. @type pubKey: L{str} @param f: the server's Diffie-Hellman public key. @type f: L{int} @param signature: the server's signature, verifying that it has the correct private key. @type signature: L{str} rN)rrrrrrrKrrrr+rrXrrrrr r\r rZrrr>r serverKeyrrPrs &&&&& r/r'SSHClientTransport._continueKEXDH_REPLYsHH''/ ..q1  ! !$++ . 0 D))*+ D++,- D**+, D,,-. F ))* A xxz  88    >@P Q  |2r1c a\V4wr!\V4wr1\V4wrARP\\ V4P 44Uu.uFp\ P!V4NK up4pSPW&4pVPSPW#V4VPV3Rl4V#uupi)aN Called when we receive a MSG_KEX_DH_GEX_REPLY message. Payload:: string server host key integer f (server DH public key) We verify the host key by calling verifyHostKey, then continue in _continueGEX_REPLY. @type packet: L{bytes} @param packet: The message data. @return: A deferred firing once key exchange is complete. rc0<SP\R4#rrrs&r/r9SSHClientTransport.ssh_KEX_DH_GEX_REPLY..rr1) r rrr&rrrrrr_continueGEX_REPLYr)rZrrr>rrrrsf& r/ssh_KEX_DH_GEX_REPLY'SSHClientTransport.ssh_KEX_DH_GEX_REPLYsv&M !&M ii*3CK4F4F4H*I J*IQX  a *I J    v 3 d--v)D    Krc L\PPV4pVPV4p\P !VP 4!4pVP\VP44VP\VP44VP\VP44VP\VP44VP\V44VP\P!RVPVP VP"44VP\%VP&44VP\%VP(44VPVP*4VP\%V44VPV4VP-4pVP/WH4'gVP1\2R4R#VP5Wh4R#)rrrN)rrrrrrrKrrrr+rrXrrrrrrr1rrrrr r\rrs &&&&& r/r%SSHClientTransport._continueGEX_REPLYsuHH''/ ..q1  ! !$++ . 0 D))*+ D++,- D**+, D,,-. F  KK((**((    DFF DFF ))* A xxz  88    >@P Q  |2r1c |\PWV4VP'dVPR4R#R#)rqr1N)rrrrw)rZrrs&&&r/rSSHClientTransport._keySetups3 ""4|D       S ! r1c VR8wdVP\R4R#VPP'g ^VnR#VP 4VP 4R#)z Called when we receive a MSG_NEWKEYS message. No payload. If we've finished setting up our own keys, start using them. Otherwise, remember that we've received this message. @type packet: L{bytes} @param packet: The message data. r1rvN)r r rYrUrrconnectionSecurer}s&&r/rwSSHClientTransport.ssh_NEWKEYS'sR S=    9;S T ##000 D    r1c VR8XdVPPR4MB\V4^,pW PP8wdVP \ R4VPVP4R#)z Called when we receive a MSG_SERVICE_ACCEPT message. Payload:: string service name Start the service we requested. @type packet: L{bytes} @param packet: The message data. r1z"got SERVICE_ACCEPT without payloads.received accept for service we did not requestN)rrr instancerr r r)rZrrs&& r/ssh_SERVICE_ACCEPT%SSHClientTransport.ssh_SERVICE_ACCEPT9s` S= IINN? @=#D}})))##-E  &r1c V^8dQhRRRR/#)r}rr!rrr6)rs"r/rSSHClientTransport.__annotate__Ns!!z!d!r1c dVP\\VP44WnR#)z Request that a service be run over this transport. @type instance: subclass of L{twisted.conch.ssh.service.SSHService} @param instance: The service to run. N)rrrrr)rZrs&&r/requestService!SSHClientTransport.requestServiceNs! +R ->? r1c >\P!\44#)a! Returns a Deferred that gets a callback if it is a valid key, or an errback if not. @type hostKey: L{bytes} @param hostKey: The host key to verify. @type fingerprint: L{bytes} @param fingerprint: The fingerprint of the key. @return: A deferred firing with C{True} if the key is valid. )r"failNotImplementedError)rZrrs&&&r/r SSHClientTransport.verifyHostKeyZszz-/00r1c \4h)z Called when the encryption has been set up. Generally, requestService() is called to run another service over the transport. )rrs&r/r#SSHClientTransport.connectionSecureis "##r1)rr!rrrr1N)r7r8r9r:r;rrrrrrqrrrrrrrrwrrrrr=r6r1r/rrsq@H!-^AF$LK23>:'3R" $'*! 1$r1rc ]tRtRtRtRtRtR#)_NullEncryptionContextiqz@ An encryption context that does not actually encrypt anything. c V#)z 'Encrypt' new data by doing nothing. @type data: L{bytes} @param data: The data to 'encrypt'. @rtype: L{bytes} @return: The 'encrypted' data. r6)rZr.s&&r/r_NullEncryptionContext.updatevs  r1r6N)r7r8r9r:r;rr=r6r1r/rrqs  r1rc]tRtRtRt^@tRtR#)_DummyAlgorithmizB An encryption algorithm that does not actually encrypt anything. r6N)r7r8r9r:r;rer=r6r1r/rrsJr1rc4]tRtRtRt]!4tRtRtRt R#)ruiz A cipher for the none encryption method. @ivar block_size: the block size of the encryption. In the case of the none cipher, this is 8 bytes. c \4#)z6 Construct a noop encryptor. @return: The encryptor. rrs&r/rc_DummyCipher.encryptor &''r1c \4#)z6 Construct a noop decryptor. @return: The decryptor. rrs&r/rf_DummyCipher.decryptorrr1r6N) r7r8r9r:r;rrdrcrfr=r6r1r/rurus !I((r1rusdiffie-hellman-group14-sha1MSG_ MSG_KEXDH_rrJz7legacy SSH mnemonics should not end up in messages dict)|r; __future__rrrrtypesrhashlibrrrrrtypingrr r r r r cryptography.exceptionsrcryptography.hazmat.backendsrcryptography.hazmat.primitivesr)cryptography.hazmat.primitives.asymmetricrrr&cryptography.hazmat.primitives.ciphersrrrrtwistedrr*twisted.conch.sshrrrtwisted.conch.ssh.commonrrrrr twisted.conch.ssh.servicer!twisted.internetr"r#twisted.loggerr$twisted.pythonr%twisted.python.compatr&r'twisted.python.failurer(twisted.conch.ssh.factoryr)r0_Hashstr ModuleType _DigestModr4r,r3r?rProtocolrr6rrrrurU DH_GENERATORDH_PRIMErrrrrrrrrrrJrrr`rrl&DISCONNECT_HOST_NOT_ALLOWED_TO_CONNECTr r\DISCONNECT_RESERVEDrrr|rrr&DISCONNECT_BY_APPLICATIONDISCONNECT_TOO_MANY_CONNECTIONS!DISCONNECT_AUTH_CANCELLED_BY_USER)DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLEDISCONNECT_ILLEGAL_USER_NAMEr9rglobalsitemsrrNr)rr6r1r/r sR # 55CC888DDLL211>>0,!$:* 4 +  3U+U-=-== > z5%45,B/B/JBT*x((T*n"#)#D X$)X$v $((6445ST h      *+&!" #$ ,-)%&""$$&!,.)!  )*KD% vt|'D'D+ x#4#@ P QQ$Ar1