U ´cifã@sšddlZddlmZddlmZddlmZddlmZeee e fe dœdd„Z eee e fe d œd d „Z Gd d „d e ƒZeee e fedœdd„ZdS)éN)Údeque)Ú ModuleType)ÚUnion)Ústrxor)ÚcipherÚ plaintextÚreturnc s®‡fdd„tdtˆƒdƒDƒ}t|ƒ}d|d}|d}t|dd…ƒ}td|dƒD]F}t d|¡}| || ¡¡} t| dd…|ƒ}| | dd…¡qX|d  |¡S) Ncsg|]}ˆ||d…‘qS©é©©Ú.0Úi©rr ú>/tmp/pip-unpacked-wheel-juw9_yux/Cryptodome/Cipher/_mode_kw.pyÚ szW..rr ééú>Qó) ÚrangeÚlenrÚstructÚpackZencryptÚpopleftrÚappendÚjoin) rrÚSÚnÚsÚAÚRÚtÚt_64Úctr rrÚW s  r%)rÚ ciphertextrc s¬‡fdd„tdtˆƒdƒDƒ}t|ƒ}d|d}|d}t|dd…ƒ}t|ddƒD]F}t d|¡}| t||ƒ| ¡¡} | dd…}| | dd…¡qV|d   |¡S) Ncsg|]}ˆ||d…‘qSr r r ©r&r rrszW_inverse..rr rréÿÿÿÿrr) rrrrrZdecryptrÚpopÚ appendleftr) rr&ÚCrrr r!r"r#Úptr r'rÚ W_inverses   r-c@sXeZdZdZeeeefdœdd„Zeeefedœdd„Z eeefedœd d „Z d S) ÚKWModeaKey Wrap (KW) mode. This is a deterministic Authenticated Encryption (AE) mode for protecting cryptographic keys. See `NIST SP800-38F`_. It provides both confidentiality and authenticity, and it designed so that any bit of the ciphertext depends on all bits of the plaintext. This mode is only available for ciphers that operate on 128 bits blocks (e.g., AES). .. _`NIST SP800-38F`: http://csrc.nist.gov/publications/nistpubs/800-38F/SP-800-38F.pdf :undocumented: __init__ )ÚfactoryÚkeycCs:|j|_|jdkrtdƒ‚||_| ||j¡|_d|_dS)NézKKey Wrap mode is only available for ciphers that operate on 128 bits blocksF)Ú block_sizeÚ ValueErrorÚ_factoryÚnewZMODE_ECBÚ_cipherÚ_done)Úselfr/r0r r rÚ__init__?s  zKWMode.__init__)rrcCsd|jrtdƒ‚t|ƒdr"tdƒ‚t|ƒdkr6tdƒ‚t|ƒdkrJtdƒ‚t|jd|ƒ}d |_|S) aEncrypt and authenticate (wrap) a cryptographic key. Args: plaintext: The cryptographic key to wrap. It must be at least 16 bytes long, and its length must be a multiple of 8. Returns: The wrapped key. ú(The cipher cannot be used more than oncer z2The plaintext must have length multiple of 8 bytesr1z,The plaintext must be at least 16 bytes longlzThe plaintext is too long󦦦¦¦¦¦¦T)r7r3rr%r6)r8rÚresr r rÚsealLs    z KWMode.seal)r&rcCsl|jrtdƒ‚t|ƒdr"tdƒ‚t|ƒdkr6tdƒ‚t|j|ƒ}|dd…dkrZtdƒ‚d |_|dd…S) awDecrypt and authenticate (unwrap) a cryptographic key. Args: ciphertext: The cryptographic key to unwrap. It must be at least 24 bytes long, and its length must be a multiple of 8. Returns: The original key. Raises: ValueError If the ciphertext or the key are not valid. r:r z3The ciphertext must have length multiple of 8 byteséz-The ciphertext must be at least 24 bytes longNr;zIncorrect integrity check valueT)r7r3rr-r6)r8r&r,r r rÚunsealis   z KWMode.unsealN) Ú__name__Ú __module__Ú __qualname__Ú__doc__rrÚbytesÚ bytearrayr9r=r?r r r rr..s  þ r.)r/Úkwargsrc KsJz |d}Wn2tk r>}ztdt|ƒƒ‚W5d}~XYnXt||ƒS)aCreate a new block cipher in Key Wrap mode. Args: factory: A block cipher module, taken from `Cryptodome.Cipher`. The cipher must have block length of 16 bytes, such as AES. Keywords: key: The secret key to use to seal or unseal. r0zMissing parameter:N)ÚKeyErrorÚ TypeErrorÚstrr.)r/rFr0Úer r rÚ_create_kw_cipher‹s  "rK)rÚ collectionsrÚtypesrÚtypingrZCryptodome.Util.strxorrrDrEr%r-Úobjectr.rKr r r rÚs"     ÿ  ÿ ] ÿ