o
    ˷e                     @   s   d Z ddlmZ ddlmZ ddlmZ ddlmZ ddl	m
Z
 ddlZddlZddlmZ dd	lmZ d
ZdZdZdZe
 Zdd ZG dd dejZG dd dejejZdS )zPure-Python RSA cryptography implementation.

Uses the ``rsa``, ``pyasn1`` and ``pyasn1_modules`` packages
to parse PEM files storing PKCS#1 or PKCS#8 keys as well as
certificates. There is no support for p12 files.
    )absolute_import)decoder)pem)Certificate)PrivateKeyInfoN)_helpers)base)   @                      s   -----BEGIN CERTIFICATE-----)z-----BEGIN RSA PRIVATE KEY-----z-----END RSA PRIVATE KEY-----)z-----BEGIN PRIVATE KEY-----z-----END PRIVATE KEY-----c                 C   sb   t | }t }tjd|dD ]}| ||d  }tdd tjt|D }|| qt	|S )zConverts an iterable of 1s and 0s to bytes.

    Combines the list 8 at a time, treating each group of 8 bits
    as a single byte.

    Args:
        bit_list (Sequence): Sequence of 1s and 0s.

    Returns:
        bytes: The decoded bytes.
    r   r   c                 s   s    | ]	\}}|| V  qd S N ).0valdigitr   r   T/var/www/ideatree/venv/lib/python3.10/site-packages/google/auth/crypt/_python_rsa.py	<genexpr>9   s    z%_bit_list_to_bytes.<locals>.<genexpr>)
len	bytearraysixmovesxrangesumzip_POW2appendbytes)bit_listnum_bits	byte_valsstart	curr_bitschar_valr   r   r   _bit_list_to_bytes)   s   r(   c                   @   s8   e Zd ZdZdd Zeejdd Z	e
dd ZdS )	RSAVerifierzVerifies RSA cryptographic signatures using public keys.

    Args:
        public_key (rsa.key.PublicKey): The public key used to verify
            signatures.
    c                 C   s
   || _ d S r   )_pubkey)self
public_keyr   r   r   __init__F   s   
zRSAVerifier.__init__c              	   C   s<   t |}z
tj||| jW S  ttjjfy   Y dS w )NF)r   to_bytesrsapkcs1verifyr*   
ValueErrorVerificationError)r+   message	signaturer   r   r   r1   I   s   
zRSAVerifier.verifyc           	      C   s   t |}t|v }|r<tj|d}tj|t d\}}|dkr%t	d||d d }t
|d }tj|d}| |S tj|d	}| |S )
a  Construct an Verifier instance from a public key or public
        certificate string.

        Args:
            public_key (Union[str, bytes]): The public key in PEM format or the
                x509 public key certificate.

        Returns:
            google.auth.crypt._python_rsa.RSAVerifier: The constructed verifier.

        Raises:
            ValueError: If the public_key can't be parsed.
        CERTIFICATEasn1Spec    Unused bytestbsCertificatesubjectPublicKeyInfosubjectPublicKeyDERPEM)r   r.   _CERTIFICATE_MARKERr/   r   load_pemr   decoder   r2   r(   	PublicKey
load_pkcs1)	clsr,   is_x509_certder	asn1_cert	remaining	cert_info	key_bytespubkeyr   r   r   from_stringQ   s   

zRSAVerifier.from_stringN)__name__
__module____qualname____doc__r-   r   copy_docstringr   Verifierr1   classmethodrM   r   r   r   r   r)   >   s    

r)   c                   @   sT   e Zd ZdZdddZeeej	dd Z
eej	dd Zedd	d
ZdS )	RSASignera?  Signs messages with an RSA private key.

    Args:
        private_key (rsa.key.PrivateKey): The private key to sign with.
        key_id (str): Optional key ID used to identify this private key. This
            can be useful to associate the private key with its associated
            public key or certificate.
    Nc                 C   s   || _ || _d S r   )_key_key_id)r+   private_keykey_idr   r   r   r-   |   s   
zRSASigner.__init__c                 C   s   | j S r   )rW   )r+   r   r   r   rY      s   zRSASigner.key_idc                 C   s   t |}tj|| jdS )NzSHA-256)r   r.   r/   r0   signrV   )r+   r4   r   r   r   rZ      s   
zRSASigner.signc           	      C   s   t |}tt|tt\}}|dkrtj	j
j|dd}n+|dkrFtj|td\}}|dkr5td||d}tj	j
j| dd}ntd	| ||d
S )a  Construct an Signer instance from a private key in PEM format.

        Args:
            key (str): Private key in PEM format.
            key_id (str): An optional key id used to identify the private key.

        Returns:
            google.auth.crypt.Signer: The constructed signer.

        Raises:
            ValueError: If the key cannot be parsed as PKCS#1 or PKCS#8 in
                PEM format.
        r   r>   )formatr   r7   r9   r:   
privateKeyzNo key could be detected.)rY   )r   
from_bytesr   readPemBlocksFromFiler   StringIO_PKCS1_MARKER_PKCS8_MARKERr/   key
PrivateKeyrD   r   rB   _PKCS8_SPECr2   getComponentByNameasOctets)	rE   rb   rY   	marker_idrK   rX   key_inforI   private_key_infor   r   r   rM      s    


zRSASigner.from_stringr   )rN   rO   rP   rQ   r-   propertyr   rR   r   SignerrY   rZ   rT   rM   r   r   r   r   rU   r   s    
	


rU   )rQ   
__future__r   pyasn1.codec.derr   pyasn1_modulesr   pyasn1_modules.rfc2459r   pyasn1_modules.rfc5208r   r/   r   google.authr   google.auth.cryptr   r   r@   r`   ra   rd   r(   rS   r)   rk   FromServiceAccountMixinrU   r   r   r   r   <module>   s$   4