U ´cicã@s^ddlZddlmZddlmZddlmZmZGdd„deƒZ eee e fe dœd d „Z dS) éN)Ú ModuleType)ÚUnioné)ÚWÚ W_inversec@sXeZdZdZeeeefdœdd„Zeeefedœdd„Z eeefedœd d „Z d S) ÚKWPModeaKey Wrap with Padding (KWP) mode. This is a deterministic Authenticated Encryption (AE) mode for protecting cryptographic keys. See `NIST SP800-38F`_. It provides both confidentiality and authenticity, and it designed so that any bit of the ciphertext depends on all bits of the plaintext. This mode is only available for ciphers that operate on 128 bits blocks (e.g., AES). .. _`NIST SP800-38F`: http://csrc.nist.gov/publications/nistpubs/800-38F/SP-800-38F.pdf :undocumented: __init__ )ÚfactoryÚkeycCs:|j|_|jdkrtdƒ‚||_| ||j¡|_d|_dS)NézXKey Wrap with Padding mode is only available for ciphers that operate on 128 bits blocksF)Ú block_sizeÚ ValueErrorÚ_factoryÚnewZMODE_ECBÚ_cipherÚ_done)Úselfrr ©rú?/tmp/pip-unpacked-wheel-juw9_yux/Cryptodome/Cipher/_mode_kwp.pyÚ__init__s  zKWPMode.__init__)Ú plaintextÚreturncCs˜|jrtdƒ‚t|ƒdkr"tdƒ‚t|ƒdkr6tdƒ‚dt|ƒd}|d|}dt d t|ƒ¡}t|ƒdkr„|j ||¡}nt|j||ƒ}|S) z»Encrypt and authenticate (wrap) a cryptographic key. Args: plaintext: The cryptographic key to wrap. Returns: The wrapped key. ú(The cipher cannot be used more than oncerz%The plaintext must be at least 1 bytelzThe plaintext is too longéóó¦YY¦ú>I)rr ÚlenÚstructÚpackrZencryptr)rrÚpadlenZpaddedZAIVÚresrrrÚseal's     z KWPMode.seal)Ú ciphertextrcCsì|jrtdƒ‚t|ƒdr"tdƒ‚t|ƒdkr6tdƒ‚t|ƒdkrP|j |¡}n t|j|ƒ}|dd…dkrttd ƒ‚t d |dd…¡d }t|ƒd|}|d ks¬|d kr´td ƒ‚|t|ƒ|d…d |krØtd ƒ‚|dt|ƒ|…S)awDecrypt and authenticate (unwrap) a cryptographic key. Args: ciphertext: The cryptographic key to unwrap. It must be at least 16 bytes long, and its length must be a multiple of 8. Returns: The original key. Raises: ValueError If the ciphertext or the key are not valid. rrz3The ciphertext must have length multiple of 8 bytesr z-The ciphertext must be at least 24 bytes longNérzIncorrect decryptionrrér)rr rrZdecryptrrÚunpack)rr"ÚSZPlenrrrrÚunsealGs$    zKWPMode.unsealN) Ú__name__Ú __module__Ú __qualname__Ú__doc__rrÚbytesÚ bytearrayrr!r'rrrrr s  þ  r)rÚkwargsrc KsJz |d}Wn2tk r>}ztdt|ƒƒ‚W5d}~XYnXt||ƒS)a%Create a new block cipher in Key Wrap with Padding mode. Args: factory: A block cipher module, taken from `Cryptodome.Cipher`. The cipher must have block length of 16 bytes, such as AES. Keywords: key: The secret key to use to seal or unseal. r zMissing parameter:N)ÚKeyErrorÚ TypeErrorÚstrr)rr.r ÚerrrÚ_create_kwp_cipherts  "r3) rÚtypesrÚtypingrZ_mode_kwrrÚobjectrr,r-r3rrrrÚs  k ÿ