+ Dfj|Rt^RIHt^RIt^RIt^RIt^RIt^RIHtH t H t ^RI H t H t ^RIHt^RIt^RIHtHt^RIHt^RIHt^R IHt^R IHtHt^R IHtHtH t H!t!H"t"^R I#H$t$H%t%H&t&^R I'H(t(H)t)^RIH*t*^RI+H,t,H-t-^RI.H/t/^RI0H1t1^RI2H3t3H4t4^RI5H6t6^RI7H8t8H9t9R]Pz!4R]P|!4R]P~!4/t@RRRRRR/tA] PtB] PtC!RR ]D4tE!R!R"]D4tF!R#R$]D4tG!R%R&]D4tH!R'R(]4tI!R)R*]D4tJR+tK!R,R-4tLR/R.ltMR# ]:d ^RI7H;t8H} for Unicode characters in memorized secrets: it applies the Normalization Process for Stabilized Strings using NFKC normalization. The passphrase is then encoded using UTF-8. @type passphrase: L{bytes} or L{unicode} or L{None} @param passphrase: The passphrase to normalize. @return: The normalized passphrase, if any. @rtype: L{bytes} or L{None} @raises PassphraseNormalizationError: if the passphrase is Unicode and cannot be normalized using the available Unicode character database. c3T"TFp\P!V4R8HxK R#5i)CnN) unicodedatacategory).0cs& r2 '_normalizePassphrase..s C 1{##A&$. s&(TFNFKCzUTF-8) isinstancestranyr?rC normalizeencode passphrases&r2_normalizePassphraserQxsc&*c"" 3C C333C C C C/0 0$$VZ8??HHr1cB]tRt^tRt]R4Rl4t]R4Rl4t]R4t]R4t ]R4t ]R4t ]R 4t ]R 4t ]R 4t]R 4t]R 4t]R4t]R5Rl4t]R6Rl4t]R6Rl4t]R6Rl4t]R6Rl4tRtRRltRRltRtRt]P:3RltRRltRt Rt!R t"R!t#R"R#lt$R$t%R%t&]'!R&R'.R&R(..4R5R)l4t(R6R*lt)R4R+lt*R6R,lt+R7R-lt,R.t-R/t.R6R0R1llt/R2t0R3t1R#)8Keya] An object representing a key. A key can be either a public or private key. A public key can verify a signature; a private key can create or verify a signature. To generate a string that can be stored on disk, use the toString method. If you have a private key, but want the string representation of the public key, use Key.public().toString(). Nc \VR4;_uu_4pVPVP4W#4uuRRR4# +'giR#;i)a Load a key from a file. @param filename: The path to load key data from. @type type: L{str} or L{None} @param type: A string describing the format the key data is in, or L{None} to attempt detection of the type. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if there is no encryption. @rtype: L{Key} @return: The loaded key. rbN)open fromStringread)clsfilenametyperPfs&&&& r2fromFile Key.fromFiles6$(D ! !Q>>!&&(D=" ! ! !s A A c \V\4'dVPR4p\V4pVfVP V4pVf\ RV: 24h\ VRVP4 2R4pVf\ RV 24hVPP^8XdV'd \ R4hV!V4#V!W4#)a Return a Key object corresponding to the string data. type is optionally the type of string, matching a _fromString_* method. Otherwise, the _guessStringType() classmethod will be used to guess a type. If the key is encrypted, passphrase is used as the decryption key. @type data: L{bytes} @param data: The key data. @type type: L{str} or L{None} @param type: A string describing the format the key data is in, or L{None} to attempt detection of the type. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if there is no encryption. @rtype: L{Key} @return: The loaded key. utf-8Nzcannot guess the type of _fromString_zno _fromString method for zkey not encrypted) rJrKrNrQ_guessStringTyper(getattrupper__code__ co_argcount)rYdatar[rPmethods&&&& r2rWKey.fromStrings. dC ;;w'D)*5 <''-D < 9$BC C TZZ\N;TB > :4&AB B ?? & &! +!"566$< $+ +r1c  \P!V4wr#VR8XdN\P!V^4wrEpV!\P!WE4P \ 444#VR8Xdg\P!V^4wrgrpV!\P!V \P!WgVR7R7P \ 444#V\9dNV!\PP\V,\P!V^4^,44#VR8Xd9VP\P!V^4^,RR7p RV nV #VR 9dJ\P!V4wrVP!V 4p VP#R 4'dRV nV #\%R V 24h) a Return a public key object corresponding to this public key blob. The format of a RSA public key blob is:: string 'ssh-rsa' integer e integer n The format of a DSA public key blob is:: string 'ssh-dss' integer p integer q integer g integer y The format of ECDSA-SHA2-* public key blob is:: string 'ecdsa-sha2-[identifier]' integer x integer y identifier is the standard NIST curve name. The format of an Ed25519 public key blob is:: string 'ssh-ed25519' string a @type blob: L{bytes} @param blob: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type (the first string) is unknown. ssh-rsassh-dsspqgyparameter_numbers"sk-ecdsa-sha2-nistp256@openssh.comr&) encodedPointcurveTssk-ssh-unknown blob type: ) ssh-ed25519sk-ssh-ed25519@openssh.com)rgetNSgetMPrRSAPublicNumbers public_keyr rDSAPublicNumbersDSAParameterNumbers _curveTablerEllipticCurvePublicKeyfrom_encoded_point_fromECEncodedPoint_sk_fromEd25519Components startswithr() rYblobkeyTyperestenrnrorprr keyObjectas && r2_fromString_BLOBKey._fromString_BLOBsD T*  j dA.JA$s++A1<<_=NOP P j %||D!4 A!$$3+B+BQq+Q*_./  k !))<<(&,,tQ*?*B  ; ;//#\\$215,0I!IM  E Ell4(GA2215I!!*-- $  /y9::r1c \P!V4wr#VR8Xd1\P!V^4wrErgrpVPWEWhV R7#VR8Xd0\P!V^4wrrrVP WWV R7#V\ 9d\ V,p \P!V^4wrpV\ V PPR4,8wd\RV: RV: 24h\P!V4wrVPWVR7#VR 8Xd8\P!V^4wpppVR ,pVPVVR 7#\R V 24h) a Return a private key object corresponding to this private key blob. The blob formats are as follows: RSA keys:: string 'ssh-rsa' integer n integer e integer d integer u integer p integer q DSA keys:: string 'ssh-dss' integer p integer q integer g integer y integer x EC keys:: string 'ecdsa-sha2-[identifier]' string identifier string q integer privateValue identifier is the standard NIST curve name. Ed25519 keys:: string 'ssh-ed25519' string a string k || a @type blob: L{bytes} @param blob: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * the key type (the first string) is unknown * the curve name of an ECDSA key does not match the key type rkrrdrnrorlrrrprnroxasciizECDSA curve name z does not match key type )rurv privateValuerx:N N)krw) rrzr{_fromRSAComponents_fromDSAComponentsr _secToNistnamerNr(rr)rYrrrrrrurnrorprrrrv curveNamerrcombinedrs&& r2_fromString_PRIVATE_BLOBKey._fromString_PRIVATE_BLOB$sd\ T*  j %+\\$%: "A!d))Aa)B B  ""(,,tQ"7 A!))Aa)B B  #(E!'dA!6 I$Juzz'8'8'ABB!!*G5"(d!3 L**L+  &!' T1 5 Ax A--a1-5 5 3G9=> >r1c VPR4'dV!\V\444#\VP 4^,4pVP V4#)aL Return a public key object corresponding to this OpenSSH public key string. The format of an OpenSSH public key string is:: @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the blob type is unknown. s ecdsa-sha2)rrr rsplitr)rYrgrs&& r2_fromString_PUBLIC_OPENSSHKey._fromString_PUBLIC_OPENSSHosN ??= ) )*41BCD D4::<?+##D))r1c  VP4P4p\RPV^R44pVP R4'g \ R4hV\ R4Rp\P!V^4wrVrx\P!RVR,4^,p V ^8wd \ R4h\P!VR,^4wrp VR 8wEdaV'g \R 4hVR9d/\Pp ^p \VR ,4^,pT pM\ R V: 24hVR 8Xda\P!V4wpp\P!RVR,4^,p\P !VVW,VRR7pM\ RV: 24h\ V 4V ,^8wd \ R4h\#V !VRV4\$P&!VWV,4\)4R7P+4pVP-V 4VP/4,pMVR 8wd\ RV: R24hT p\P!RVR,4^,p\P!RVR,4^,pVV8wd\ RVV3,4hVP1VR,4#)a Return a private key object corresponding to this OpenSSH private key string, in the "openssh-key-v1" format introduced in OpenSSH 6.5. The format of an openssh-key-v1 private key string is:: -----BEGIN OPENSSH PRIVATE KEY----- -----END OPENSSH PRIVATE KEY----- The SSH protocol string is as described in U{PROTOCOL.key}. @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the SSH protocol encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key r1openssh-key-v1z"unknown OpenSSH private key formatN!L:NNzDonly OpenSSH private key files containing a single key are supportedrNNnone0Passphrase must be provided for an encrypted key:Nzunknown encryption type bcryptT)ignore_few_roundszunknown KDF type z bad paddingbackendzprivate key specifies KDF z but no cipher:rNz#check values do not match: %d != %d:rNN)s aes128-ctrs aes192-ctr aes256-ctr)strip splitlinesrjoinrr(lenrrzstructunpackr7rAESintbcryptkdfrrCTRr decryptorupdatefinalizer)rYrgrPlineskeyListcipherr kdfOptionsrr_encPrivKeyListalgorithmClass blockSizekeySizeivSizesaltroundsdecKeyr privKeyListcheck1check2s&&& r2_fromPrivateOpenSSH_v1Key._fromPrivateOpenSSH_v1s: '')chhuQr{34!!"566BC C#1245(. Wa(@%Z MM$R )! , 6-  &||DHa81 W 'IFF!+ fSk*a/"!$>N#i/A5!-00vhw/0 &V+;<=')ik  $**>:Y=O=O=QQKg~!GJL)Kt[_5a8t[%56q9 V CvvFVVW W++KO< PRIVATE KEY----- [Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,] ------END PRIVATE KEY------ The ASN.1 structure of a RSA key is:: (0, n, e, d, p, q) The ASN.1 structure of a DSA key is:: (0, p, q, g, y, x) The ASN.1 structure of a ECDSA key is:: (ECParameters, OID, NULL) @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the ASN.1 encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key Nrz&Failed to decode key (Bad Passphrase?)unknown key type )sECsRSAsDSA)rrrr TypeErrorr7 ValueErrorr()rYrgrPrkindkeys&&& r2_fromPrivateOpenSSH_PEMKey._fromPrivateOpenSSH_PEMsJ '')Qx3J * * L*4_=NOs8O 1$89 9 'F L!"JKK LsA''B Bc VP4P4^,^ RR8XdVPW4#VPW4#)ax Return a private key object corresponding to this OpenSSH private key string. If the key is encrypted, passphrase MUST be provided. Providing a passphrase for an unencrypted key is an error. @type data: L{bytes} @param data: The key data. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase the key is encrypted with, or L{None} if it is not encrypted. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if * a passphrase is provided for an unencrypted key * the encoding is incorrect @raises EncryptedKeyError: if * a passphrase is not provided for an encrypted key sOPENSSHr)rrrr)rYrgrPs&&&r2_fromString_PRIVATE_OPENSSHKey._fromString_PRIVATE_OPENSSHsK, ::< " " $Q '3 /: =--d? ?..t@ @r1c 2\P!\V^R44pV^,R8XgQh/pV^,R,F8wrA\P!\P !V44^,W4&K: V^,^,R8Xd2VP VR,VR,VR,VR,R7#V^,^,R 8Xd"VPVR ,VR ,R 7#\R V^,^, 24h)a Return a public key corresponding to this LSH public key string. The LSH public key string format is:: , ()+))> The names for a RSA (key type 'rsa-pkcs1-sha1') key are: n, e. The names for a DSA (key type 'dsa') key are: y, g, p, q. @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type is unknown public-keyNNdsaygpq)rrrprnrorsa-pkcs1-sha1ne)rrunknown lsh key type r) rparserrr{NSrrr(rYrgsexpkdrs&& r2_fromString_PUBLIC_LSHKey._fromString_PUBLIC_LSH3s"{{;tAbz23Aw-''' q'"++JD||FIIdO4Q7BH& 71: ))T(bh"T(bh* !WQZ, ,))BtH4)A A 5d1gaj\BC Cr1c 6\P!V4pV^,R8XgQh/pV^,R,F8wrA\P!\P!V44^,W4&K: V^,^,R8XdZ\ V4^8XgQ\ V44hVP VR,VR,VR,VR,VR,R 7#V^,^,R 8Xd\ V4^8XgQ\ V44hVR,VR,8dVR,VR,uVR&VR&VPVR ,VR ,VR ,VR,VR,R7#\RV^,^, 24h)a Return a private key corresponding to this LSH private key string. The LSH private key string format is:: , (, )+))> The names for a RSA (key type 'rsa-pkcs1-sha1') key are: n, e, d, p, q. The names for a DSA (key type 'dsa') key are: y, g, p, q, x. @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type is unknown private-keyrrrrrrxr rsa-pkcs1rrdrr) rrrr{rrrrr(rs&& r2_fromString_PRIVATE_LSHKey._fromString_PRIVATE_LSHSsg"{{4 Aw.((( q'"++JD||FIIdO4Q7BH& 71: r7a< (R (<))T(bh"T(bh"T(* !WQZ< 'r7a< (R (<$x"T("%'Xr$x"4"T())T(bh"T(bh"T(*   5d1gaj\BC Cr1c  \P!V4wr!VR8Xd\P!V4wr1\P!V4wrA\P!V4wrQ\P!V4wra\P!V4wrqVPWeW4VR7#VR8Xd\P!V4wr\P!V4wr\P!V4wr\P!V4wr\P!V4wr1\P!V4wrAVP WWWKR7#\ RV 24h)a' Return a private key object corresponsing to the Secure Shell Key Agent v3 format. The SSH Key Agent v3 format for a RSA key is:: string 'ssh-rsa' integer e integer d integer n integer u integer p integer q The SSH Key Agent v3 format for a DSA key is:: string 'ssh-dss' integer p integer q integer g integer y integer x @type data: L{bytes} @param data: The key data. @return: A new key. @rtype: L{twisted.conch.ssh.keys.Key} @raises BadKeyError: if the key type (the first string) is unknown rlrrk)rrrrnrorr)rrzr{rrr() rYrgrrnrorprrrrrrrs && r2_fromString_AGENTV3Key._fromString_AGENTV3ys< T*  j ll4(GAll4(GAll4(GAll4(GAll4(GA))Aa)B B  "ll4(GAll4(GAll4(GAll4(GAll4(GAll4(GA))Aa)G G 1';< >$// &C C HI I ??4 5 5 : : $ ??= ) )$ ??4  ??4   OO3 4 4899=>>QRRLMM"LL.MGE  & T 2 qy Nr1c  `\P!W!R7pVfVP\44pMr\P!VVV\P !W44\P !W54\P!WE4VR7p V P\44pV!V4#)aL Build a key from RSA numerical components. @type n: L{int} @param n: The 'n' RSA variable. @type e: L{int} @param e: The 'e' RSA variable. @type d: L{int} or L{None} @param d: The 'd' RSA variable (optional for a public key). @type p: L{int} or L{None} @param p: The 'p' RSA variable (optional for a public key). @type q: L{int} or L{None} @param q: The 'q' RSA variable (optional for a public key). @type u: L{int} or L{None} @param u: The 'u' RSA variable. Ignored, as its value is determined by p and q. @rtype: L{Key} @return: An RSA key constructed from the values as given. )rr)rnrordmp1dmq1iqmppublic_numbers) rr|r}r RSAPrivateNumbers rsa_crt_dmp1 rsa_crt_dmq1 rsa_crt_iqmp private_key) rYrrrrnror publicNumbersrprivateNumberss &&&&&&& r2rKey._fromRSAComponentss6,,q6 9%001BCI 22%%a+%%a+%%a+,N'22?3DEI9~r1c  \P!V\P!W#VR7R7pVfVP\ 44pM0\P !WVR7pVP \ 44pV!V4#)a Build a key from DSA numerical components. @type y: L{int} @param y: The 'y' DSA variable. @type p: L{int} @param p: The 'p' DSA variable. @type q: L{int} @param q: The 'q' DSA variable. @type g: L{int} @param g: The 'g' DSA variable. @type x: L{int} or L{None} @param x: The 'x' DSA variable (optional for a public key) @rtype: L{Key} @return: A DSA key constructed from the values as given. rmrq)rr)rr~rr}r DSAPrivateNumbersr) rYrrrnrorprrrrs &&&&&& r2rKey._fromDSAComponents sm.,,3#:#:Qq#I  9%001BCI 22QUN&22?3DEI9~r1c \P!W\V,R7pVfVP\ 44pM0\P !WER7pVP \ 44pV!V4#)a[ Build a key from EC components. @param x: The affine x component of the public point used for verifying. @type x: L{int} @param y: The affine y component of the public point used for verifying. @type y: L{int} @param curve: NIST name of elliptic curve. @type curve: L{bytes} @param privateValue: The private value. @type privateValue: L{int} )rrrrv) private_valuer)rEllipticCurvePublicNumbersrr}r EllipticCurvePrivateNumbersr)rYrrrrvrrrrs&&&&& r2_fromECComponentsKey._fromECComponents/sk$55K.   %001BCI;;*N'22?3DEI9~r1c Vf-\PP\V,V4pM+\P!V\V,\ 44pV!V4#)a Build a key from an EC encoded point. @param encodedPoint: The public point encoded as in SEC 1 v2.0 section 2.3.3. @type encodedPoint: L{bytes} @param curve: NIST name of elliptic curve. @type curve: L{bytes} @param privateValue: The private value. @type privateValue: L{int} )rrrrderive_private_keyr )rYrurvrrs&&&& r2rKey._fromECEncodedPointOsW  11DDE"LI--k%0/2CI9~r1c \e \f \R4hVf\PV4pM\P V4pV!V4#)zBuild a key from Ed25519 components. @param a: The Ed25519 public key, as defined in RFC 8032 section 5.1.5. @type a: L{bytes} @param k: The Ed25519 private key, as defined in RFC 8032 section 5.1.5. @type k: L{bytes} z)Ed25519 keys not supported on this system)Ed25519PublicKeyEd25519PrivateKeyr(from_public_bytesfrom_private_bytes)rYrrrs&&& r2rKey._fromEd25519ComponentsksK  #'8'@IJ J 9(::1=I)< Return True if other represents an object with the same key. )rJrSr[rgNotImplemented)r.r3s&&r2__eq__ Key.__eq__sG eS ! !99;%**,.NN499;%**,3N N! !r1cV^8dQhRR/#)r2r5rKr))r7s"r2r8r9s*$*$#*$r1c :VP4R8XdVP4pVR,PR4pVP4'd RVRR R2pM RVRR R2p\ VP 44F)wrEVR8XdVRV 2, pKVR V R V 2, pK+ VR ,#R \ VP44: R VP4;'d R;'gR: RVP4: R2.p\ VP4P 44FwrEVPRV R24VP4R8XdTM\P!V4R,pV'gKXVR,pVR,pRp \V4Fp V \V 4R R2,p K \V4^8dV RRp VPRV ,4Ku VR,R,VR&R PV4#)z0 Return a pretty representation of this object. ECrvr`z < z Public Keyz Private Keyz (zattr :Ed25519r:NN:rFNN02x >r)r[rgdecodeisPublicsorteditemsr sizeappendrMPrordrr) r.rgroutrvrbymorFs & r2__repr__ Key.__repr__s 99;$ 99;D=''0D}}4T"#YKvF5d23i[Gtzz|,<\$00CRs%s++C - ;  (!-MMO44 EE EIIK Etyy{0023 uQCq\*))+2Q ! R8Hb3ACBA&q\3q6#,a 00*1v{crFLL*4b CE"I99U# #r1c \VP\P\P \ P\P34#)zT Check if this instance is a public key. @return: C{True} if this is a public key. ) rJr-r RSAPublicKeyr DSAPublicKeyrrrr&r.s&r2rM Key.isPublicsA  OO    ))((    r1c xVP4'dV#\VPP44#)z Returns a version of this key containing only the public key data. If this is a public key, this may or may not be the same object as self. @rtype: L{Key} @return: A public key. )rMrSr-r}r^s&r2public Key.publics, ==??Kt1134 4r1c  V\PJd:\\\ VP 44P 444#V\PJdm\RP\\VP 44P 44Uu.uFp\P!V4NK up44#\RV 24huupi)a The fingerprint of a public key consists of the output of the message-digest algorithm in the specified format. Supported formats include L{FingerprintFormats.MD5_HEX} and L{FingerprintFormats.SHA256_BASE64} The input to the algorithm is the public key data as specified by [RFC4253]. The output of sha256[RFC4634] algorithm is presented to the user in the form of base64 encoded sha256 hashes. Example: C{US5jTUa0kgX5ZxdqaGF0yGRu8EgKXHNmoT8jHKo1StM=} The output of the MD5[RFC1321](default) algorithm is presented to the user as a sequence of 16 octets printed as hexadecimal with lowercase letters and separated by colons. Example: C{c1:b1:30:29:d7:b8:de:6c:97:77:10:d7:46:41:63:87} @param format: Format for fingerprint generation. Consists hash function and representation format. Default is L{FingerprintFormats.MD5_HEX} @since: 8.2 @return: the user presentation of this L{Key}'s fingerprint, as a string. @rtype: L{str} :z Unsupported fingerprint format: )r;r=r rrrdigestr<rrrbinasciihexlifyr9)r.r7rs&& r2 fingerprintKey.fingerprints: '55 5 &*=*D*D*F GH H )11 1 2;C VP'dVP4R8XdR#R#VP4R8XdBR\VPPP P R4,,#RRRR R R /VP4,#) a Get the type of the object we wrap as defined in the SSH protocol, defined in RFC 4253, Section 6.6 and RFC 8332, section 4 (this is a public key format name, not a public key algorithm name). Currently this can only be b'ssh-rsa', b'ssh-dss', b'ecdsa-sha2-[identifier]' or b'ssh-ed25519'. identifier is the standard NIST curve name @return: The key type format. @rtype: L{bytes} r@rtryrrrlrkrmrlrErx)rr[rr-rvrrNr^s&r2sshType Key.sshTypes 888yy{d"< 1 99;$ DOO,A,A,F,F,M,Mg,V!WW  : : ~  ))+  r1c VVP4R8Xd.RO#VP4.#)z Get the public key signature algorithms supported by this key. @return: A list of supported public key signature algorithm names. @rtype: L{list} of L{bytes} rl) rsa-sha2-512 rsa-sha2-256rk)r[rtr^s&r2supportedSignatureAlgorithms Key.supportedSignatureAlgorithms@s' 99;% A ALLN# #r1c  PVP4R8XdtWP48Xd^VP4pVR8:d\P!4#VR8:d\P !4#\P !4#R#VP4R8Xd\P !4#R\P!4R\P!4R\P !4R \P!4/PVP4V34#) z Return a hash algorithm for this key type given an SSH signature algorithm name, or L{None} if no such hash algorithm is defined for this key type. r@iNrE)rlrk)rlrx)rlrw)rmrl) r[rtrPrSHA256SHA384SHA512SHA1get)r. signatureTypers&& r2_getHashAlgorithmKey._getHashAlgorithmLs 99;$  .))+c>!==?*^!==?*!==?* 99;) #==? "  $fmmo $fmmo   #tyy{M* +  ,r1c VPf^#VP4R8Xd!VPPP#VP4R8XdR#VPP#)zV Return the size of the object we wrap. @return: The size of the key. @rtype: L{int} r@rEr|)r-r[rvkey_sizer^s&r2rPKey.sizeisV ?? " YY[D ??((11 1 YY[I %'''r1cV^8dQhRR/#)r2r5zdict[str, Any]r))r7s"r2r8r9xsJJJJnJJr1c \VP\P4'd5VPP 4pRVP RVP /#\VP\P4'dVPP4pRVPP RVPP RVPRVPRVPR\P!VPVP4/#\VP\P4'dkVPP 4pRVPRVP P"RVP PRVP P/#\VP\P$4'dVPP4pR VP&RVPPRVPP P"RVPP PRVPP P/#\VP\(P*4'dEVPP 4pR VP&RVPR VP-4/#\VP\(P.4'deVPP4pR VPP&RVPPR VP0R VP-4/#\VP\2P44'dOR VPP7\8P:P<\8P>P<4/#\VP\2P@4'dR VPPC4P7\8P:P<\8P>P<4R VPPE\8P:P<\8PFP<\8PH!44/#\KRVP 24h)zG Return the values of the public key as a dictionary. @rtype: L{dict} rrrrnrorrrrprrvrrrzUnexpected key type: )&rJr-rr\rrrrnprivate_numbersrrnrorrr]rrrsrprorrrrtrprrr& public_bytesrEncodingRaw PublicFormatr'r} private_bytes PrivateFormat NoEncryptionrq)r.rsa_pub_numbersrsa_priv_numbersdsa_pub_numbersdsa_priv_numbersec_pub_numbersec_priv_numberss& r2rgKey.dataxs doos'7'7 8 8"oo<<>O_&&_&& ):): ; ;#>>@ %4466%4466%''%''%''S%%&6&8&8:J:L:LM )9)9 : :"oo<<>O_&&_6688_6688_6688   ):): ; ;#>>@ %''%4466%44FFHH%44FFHH%44FFHH  )B)B C C!__;;=N^%%^%%  )C)C D D"oo==?O_3355_3355 = =   )A)A B BT__11!**.. 0J0J0N0N  )B)B C CT__//1>>!**.. 0J0J0N0NT__22!**..!//33!..0  !6t6GHI Ir1c VP4pVP4pVR8Xd[\P!R4\P!VR,4,\P!VR,4,#VR8Xd\P!R4\P!VR,4,\P!VR,4,\P!VR ,4,\P!VR ,4,#VR 8XdVP P P^,^,p\P!VR ,4\P!VR ,RR 4,\P!R\P!VR,V4,\P!VR ,V4,4,#VR8Xd9\P!R4\P!VR,4,#\RV 24h)a Return the public key blob for this key. The blob is the over-the-wire format for public keys. SECSH-TRANS RFC 4253 Section 6.6. RSA keys:: string 'ssh-rsa' integer e integer n DSA keys:: string 'ssh-dss' integer p integer q integer g integer y EC keys:: string 'ecdsa-sha2-[identifier]' integer x integer y identifier is the standard NIST curve name Ed25519 keys:: string 'ssh-ed25519' string a @rtype: L{bytes} rlrkrrrmrlrnrorprrr@rvNrrErxrunknown key type: ) r[rgrrrRr-rvrr rr()r.r[rg byteLengths& r2rKey.blobs@yy{yy{ 5=99Z(699T#Y+??&))DQTIBVV V U] *%))DI&'))DI&'))DI&'))DI& ' T\////881<BJ $w-())DM"#./0))((cJ?@((cJ?@ Y 99^,vyyc/CC C 24&9: :r1c VP4pVP4pVR8XEd\P!VR,VR,4p\P !R4\P !VR,4,\P !VR,4,\P !VR,4,\P !V4,\P !VR,4,\P !VR,4,#VR8Xd\P !R 4\P !VR,4,\P !VR,4,\P !VR ,4,\P !VR ,4,\P !VR ,4,#VR 8XdVPP4P\PP\PP4p\P !VR,4\P !VR,RR4,\P !V4,\P !VR,4,#VR8Xdi\P !R4\P !VR,4,\P !VR,VR,,4,#\RV 24h)aI Return the private key blob for this key. The blob is the over-the-wire format for private keys: Specification in OpenSSH PROTOCOL.agent RSA keys:: string 'ssh-rsa' integer n integer e integer d integer u integer p integer q DSA keys:: string 'ssh-dss' integer p integer q integer g integer y integer x EC keys:: string 'ecdsa-sha2-[identifier]' integer x integer y integer privateValue identifier is the NIST standard curve name. Ed25519 keys:: string 'ssh-ed25519' string a string k || a rlrnrorkrrrrmrlrprrrr@rvNrrErxrrrr)r[rgrrrrrRr-r}rrrX962rUncompressedPointr()r.r[rgrencPubs& r2 privateBlobKey.privateBlobsZRyy{yy{ 5=##DItCy9D *%))DI&'))DI&'))DI&'))D/ " ))DI& ' ))DI& ' U] *%))DI&'))DI&'))DI&'))DI& ' ))DI& ' T\__//1>>&&++**<<F  $w-())DM"#./0))F#$))D012  Y  .)))DI&'))DIS 123   24&9: :r1extracommentrPc RVe9\P!R\^R7VP4'dTpMTp\ V\ 4'dVP R4p\V4p\VRVP4 2R4pVf\RV 24hV!W4VR7#)aB Create a string representation of this key. If the key is a private key and you want the representation of its public key, use C{key.public().toString()}. type maps to a _toString_* method. @param type: The type of string to emit. Currently supported values are C{'OPENSSH'}, C{'LSH'}, and C{'AGENTV3'}. @type type: L{str} @param extra: Any extra data supported by the selected format which is not part of the key itself. For public OpenSSH keys, this is a comment. For private OpenSSH keys, this is a passphrase to encrypt with. (Deprecated since Twisted 20.3.0; use C{comment} or C{passphrase} as appropriate instead.) @type extra: L{bytes} or L{unicode} or L{None} @param subtype: A subtype of the requested C{type} to emit. Only supported for private OpenSSH keys, for which the currently supported subtypes are C{'PEM'} and C{'v1'}. If not given, an appropriate default is used. @type subtype: L{str} or L{None} @param comment: A comment to include with the key. Only supported for OpenSSH keys. Present since Twisted 20.3.0. @type comment: L{bytes} or L{unicode} or L{None} @param passphrase: A passphrase to encrypt the key with. Only supported for private OpenSSH keys. Present since Twisted 20.3.0. @type passphrase: L{bytes} or L{unicode} or L{None} @rtype: L{bytes} NzThe 'extra' argument to twisted.conch.ssh.keys.Key.toString was deprecated in Twisted 20.3.0; use 'comment' or 'passphrase' instead.) stacklevelr` _toString_r)subtyperrP) warningswarnDeprecationWarningrMrJrKrNrQrcrdr()r.r[rrrrPrhs&&&&&& r2toString Key.toStringSsZ   MMI#  }}" gs # #nnW-G)*5 DJJL>:DA > 24&9: :g:NNr1c VP4R8XdsV'gRpVPP\PP \P P 4R,V,P4#\VP44PRR4pV'gRpVP4R,V,R,V,P4#)z Return a public OpenSSH key string. See _fromString_PUBLIC_OPENSSH for the string format. @type comment: L{bytes} or L{None} @param comment: A comment to include with the key, or L{None} to omit the comment. r@r1  ) r[r-rrrOpenSSHrrrrreplacert)r.rb64Datas&& r2_toPublicOpenSSHKey._toPublicOpenSSHs 99;$ ,,!**22M4N4N4V4V  eg  diik*225#>G %/$6@GGIIr1c  V'dw\PpRpRpVP^,p^ pTp\P!V4p ^dp \ P !V 4\P!RV 4,p MRpRp^pRp \P!^4p W,VP4,\ P !T;'gR4,p ^p\V 4V,'d&V^, pV \V^,34, p K=V'd\P!VX XX,^d4p\X!VRV4\P !WWx,4\#4R7P%4pVP'V 4VP)4,pMT pR\ P !V4,\ P !V4,\ P !V 4,\P!R^4,\ P !VP+44,\ P !V4,p\-V4P/R R4pR .\1^\V4^@4Uu.uFpVVV^@,NK up,R .,pR P3V4R ,#uupi) a Return a private OpenSSH key string, in the "openssh-key-v1" format introduced in OpenSSH 6.5. See _fromPrivateOpenSSH_v1 for the string format. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase to encrypt the key with, or L{None} if it is not encrypted. rrrrr1Nrrrs#-----BEGIN OPENSSH PRIVATE KEY-----s!-----END OPENSSH PRIVATE KEY-----)rr block_sizer secureRandomrrrpackrrbytesrrrrrr encryptorrrrrrranger)r.rrPr cipherNamekdfNamerrrrrrcheckrpadByteencKeyrrrrirs&&& r2_toPrivateOpenSSH_v1Key._toPrivateOpenSSH_v1se  ^^F&JG))Q.IGF))&1DF46;;tV+DDJ JGIJ&&q)md&6&6&88699W^^PS;TT +** qLG 5'D.!23 3K ZZ D'F2BCHFvhw'( &7+;<=')ik  '--k:Y=O=O=QQN(N ii # $ii  !ii # $kk$"  # ii $  % ii'  ( d#++E37 3 4,1!S\2,FG,Fqwq1r6",FG H34 5  zz% 5((Hs Kc rV'g\P!4pM\P!V4pVP4R8wdNVPP \P P\PPV4#VP4R8XgQh\R4h)z Return a private OpenSSH key string, in the old PEM-based format. See _fromPrivateOpenSSH_PEM for the string format. @type passphrase: L{bytes} or L{None} @param passphrase: The passphrase to encrypt the key with, or L{None} if it is not encrypted. rEzBcannot serialize Ed25519 key to OpenSSH PEM format; use v1 instead) rrBestAvailableEncryptionr[r-rrPEMrTraditionalOpenSSLr)r.rPrs&& r2_toPrivateOpenSSH_PEMKey._toPrivateOpenSSH_PEMs%224I%==jII 99;) #??00&&**++>> 99;)+ ++W r1c VP4'dVPVR7#VR8XgVf(VP4R8XdVPW#R7#VeVR8XdVP VR7#\ RV 24h)a  Return a public or private OpenSSH string. See L{_fromString_PUBLIC_OPENSSH} and L{_fromPrivateOpenSSH_PEM} for the string formats. @param subtype: A subtype to emit. Only supported for private keys, for which the currently supported subtypes are C{'PEM'} and C{'v1'}. If not given, an appropriate default is used. @type subtype: L{str} or L{None} @param comment: Comment for a public key. @type comment: L{bytes} @param passphrase: Passphrase for a private key. @type passphrase: L{bytes} @rtype: L{bytes} )rv1rE)rrPrrOzunknown subtype )rMrr[rrr)r.rrrPs&&&&r2_toString_OPENSSHKey._toString_OPENSSH s& ==??(((9 9 _TYY[I5M,,W,T T _5 0---D D/y9: :r1c VP4pVP4pVP4'EdZVR8Xdf\P!RRR\ P !VR,4R,.R\ P !VR,4R,....4pMVR 8Xd\P!RR R \ P !VR ,4R,.R \ P !VR,4R,.R\ P !VR,4R,.R\ P !VR,4R,....4pM\RV 24hR\V4PRR4,R,#VR8XEdqVR ,VR,re\P!WV4p\P!RRR\ P !VR,4R,.R\ P !VR,4R,.R\ P !VR,4R,.R \ P !V4R,.R \ P !V4R,.R\ P !VR,V^, ,4R,.R\ P !VR,V^, ,4R,.R\ P !V4R,.. ..4#VR 8Xd\P!RR R \ P !VR ,4R,.R \ P !VR,4R,.R\ P !VR,4R,.R\ P !VR,4R,.R\ P !VR ,4R,....4#\RV R!24h)"z Return a public or private LSH key. See _fromString_PUBLIC_LSH and _fromString_PRIVATE_LSH for the key formats. @rtype: L{bytes} rlrrrrrrrrmrrrnrrorrprrrrrrr1}rrrrabcrr') rgr[rMrrrrRr(rrrr)r.kwargsrgr[keyDatarnrors&, r2 _toString_LSHKey._toString_LSH&s=yy{yy{ ==??u}*** 1!%vyyc';B'? @!%vyyc';B'? @  *** &!%vyyc';B'? @!%vyyc';B'? @!%vyyc';B'? @!%vyyc';B'? @    "$5dV"<==+g.66ucBBTI Iu}Cy$s)1''-zz+ ,!%vyyc';B'? @!%vyyc';B'? @!%vyyc';B'? @!%vyy|B'7 8!%vyy|B'7 8!%vyyca!e1D'Eb'I J!%vyyca!e1D'Eb'I J!%vyyr': ;  $zz+ &!%vyyc';B'? @!%vyyc';B'? @!%vyyc';B'? @!%vyyc';B'? @!%vyyc';B'? @    "$5dV1"=>>r1c VP4pVP4'gVP4R8Xd4VR,VR,VR,VR,VR,VR,3pM?VP4R8Xd+VR,VR,VR ,VR ,VR ,3p\P!VP 44R P \\PX44,#R #)zl Return a private Secure Shell Agent v3 key. See _fromString_AGENTV3 for the key format. @rtype: L{bytes} rlrrrrrnrormrprrrr1N) rgrMr[rrrtrmaprR)r.rrgvaluess&, r2_toString_AGENTV3Key._toString_AGENTV3xsyy{}}yy{e#IIIIII %s)T#YS 49d3iP99T\\^,sxxFIIv8N/OO Or1c$V^8dQhRRRRRR/#)r2rgrrz bytes | Noner5r))r7s"r2r8r9s!?.?.?.|?.u?.r1c fVP4pVfVP4pVPV4pVf\RV: RV R24hVR8XdIVPP V\ P!4V4p\P!V4pEMzVR8Xd\VPP W4p\V4wrx\P!\V^4\V^4,4pEMVR8XdVPP V\P!V44p \V 4wrx\V4p \V4p V ^,p V ^,'d RV ,p V ^,p V ^,'d RV ,p \P!\P!V 4\P!V 4,4pM6VR8Xd0\P!VPP V44p\P!V4X,#) a Sign some data with this key. SECSH-TRANS RFC 4253 Section 6.6. @param data: The data to sign. @param signatureType: The SSH public key algorithm name to sign this data with, or L{None} to use a reasonable default for the key. @return: A signature for the given data. zpublic key signature algorithm z is not defined for z keysrlrmr@rE)r[rtrr4r-signrPKCS1v15rrr"rrECDSA)r.rgrr hashAlgorithmsigretrs signaturerUsbrcompscomps&&& r2rKey.signs))+  !LLNM..}=  ,1-1BC&iu.  e //&&tW-=-=-?OC))C.C  //&&t;C)#.FQ ))LB/,q"2EEFC _,,T288M3JKI))4FQaBaBqEEt||r\qEEt||r\))FIIbMFIIbM9:C  !))DOO0067Cyy'#--r1c j\V4^(8XdR\P!V4rM\P!V4wr1VP V4pVfR#VP 4pVR8XdiVP pVP4'gVP4p\P!V4^,V\P!4V3pEMVR8Xd\P!V4^,p\PVR,R4p \PVR,R4p \W4pVP pVP4'gVP4pWV3pEMVR8Xd\P!V4^,p\P!V^4wrp \PV R4p \PV R4p \W4pVP pVP4'gVP4pW\P!V43pMXVR 8XdRVP pVP4'gVP4p\P!V4^,V3pXP !X!R # \"dR#i;i) z Verify a signature using this key. @type signature: L{bytes} @param signature: The signature to verify. @type data: L{bytes} @param data: The signed data. @rtype: L{bool} @return: C{True} if the signature is valid. rlFrlrm:NNbig:rNNr@rET)rrrrzrr[r-rMr}rrr from_bytesr#rrverifyr )r.rrgrrrrargsconcatenatedSignaturerrrstrsstrrs&&& r2r Key.verifys y>R '1699Y3G9'-||I'> $M..}=  ))+ e A==??LLN Y'*  " D  $*LL$;A$> !4S95AA4S95AA,Q2IA==??LLN]3D _$*LL$;A$> !%||,A1E DtU+AtU+A,Q2IA==??LLNRXXm%<=D  !A==??LLNLL+A.5D  HHdO   sJ## J21J2r,)NN)NNNN)N)NNN)2r+r,r-r.r/ classmethodr]rWrrrrrrrrrrbrrr rrr/r<rYrMrar;r<rhr[rtryrrPrgrrr!rrrrrrrrrr0r)r1r2rSrSs->>(%,%,ND;D;LH?H?T**(V=V=p6:6:pAA8DD>#D#DJ.=.=`22h**X  D>6, "*$X 5"4!;!;&TPO.B $,: (JJX:;xQ;f! i l #  :O  :OxJ4<)|8;:P?dP,?.BDr1rScdVP4PRR7VP4'g\P!RV\ 4R7pVP \PP\PP\P!4R7pVPV4VPR4;_uu_4p\P!VP!4R\ 4R7p\#V4uuRRR4# +'giR#;i) a This function returns a persistent L{Key}. The key is loaded from a PEM file in C{location}. If it does not exist, a key with the key size of C{keySize} is generated and saved. @param location: Where the key is stored. @type location: L{twisted.python.filepath.FilePath} @param keySize: The size of the key, if it needs to be generated. @type keySize: L{int} @returns: A persistent key. @rtype: L{Key} T)ignoreExistingDirectoryi)public_exponentrr)encodingr7encryption_algorithmrUN)passwordr)parentmakedirsexistsrgenerate_private_keyr rrrrrrr setContentrVrrXrS)locationr privateKeypemkeyFiles&& r2_getPersistentRSAKeyr s  OOt< ??  --!G_=N &&"++// ..AA!.!;!;!='  C t  "77 LLNT?3D :    s :D D/ )i)Nr/ __future__rrfrrCrbase64rrrhashlibrrtypingrr constantlyr r cryptographyr cryptography.exceptionsr cryptography.hazmat.backendsr cryptography.hazmat.primitivesrr)cryptography.hazmat.primitives.asymmetricrrrrr&cryptography.hazmat.primitives.ciphersrrr,cryptography.hazmat.primitives.serializationrrrtwisted.conch.sshrrtwisted.conch.ssh.commonrtwisted.pythonrtwisted.python.compatrr twisted.python.deprecater!/cryptography.hazmat.primitives.asymmetric.utilsr"r# ImportErrorr$r% SECP256R1 SECP384R1 SECP521R1rrr&r' Exceptionr(r4r7r9r;r?rQrSr r)r1r2r"s? # 66 +48@TTLL+1$9@ BLLNBLLNBLLN +++ ++--) 9 $$"9>||~3(W7s EE%$E%