o
    Rf                     @   s   d dl mZ d dlmZ d dlmZmZ d dlmZm	Z	 d dl
mZ d dlmZ G dd de	ZG d	d
 d
eZG dd deZG dd deZG dd deZG dd deZdS )    )default_backend)hashes)ecutils)CryptographyPrivateKeyCryptographyPublicKey)	Algorithm)DNSKEYc                   @   s|   e Zd ZU ejed< ejZeed< ej	ed< ej
ed< eed< dededd	fd
dZdefddZededd fddZd	S )PublicECDSAkey	algorithmchosen_hashcurveoctets	signaturedatareturnNc                 C   sT   |d| j  }|| j d  }tt|dt|d}| j||t| j	 d S )Nr   big)
r   r   encode_dss_signatureint
from_bytesr   verifyr   ECDSAr   )selfr   r   sig_rsig_ssig r   M/home/ubuntu/webapp/venv/lib/python3.10/site-packages/dns/dnssecalgs/ecdsa.pyr      s   zPublicECDSA.verifyc                 C   s*   | j  }|j| jd|j| jd S )z,Encode a public key per RFC 6605, section 4.r   )r   public_numbersxto_bytesr   y)r   pnr   r   r   encode_key_bytes   s   
 zPublicECDSA.encode_key_bytesc                 C   s`   |  | |jd| j }|j| j| jd  }| tj| jt|dt|ddt	 dS )Nr      r   )r   r    r"   r   )
!_ensure_algorithm_key_combinationr   r   r   EllipticCurvePublicNumbersr   r   r   
public_keyr   )clsr   ecdsa_xecdsa_yr   r   r   from_dnskey   s   


zPublicECDSA.from_dnskey)__name__
__module____qualname__r   EllipticCurvePublicKey__annotations__key_clsr   r   HashAlgorithmEllipticCurver   bytesr   r$   classmethodr	   r-   r   r   r   r   r
   
   s   
 


r
   c                   @   sH   e Zd ZU ejed< ejZeZdde	de
de	fddZeddd	Zd
S )PrivateECDSAr   Fr   r   r   c                 C   sf   | j |t| jj}t|\}}tj	|| jj
ddtj	|| jj
dd }|r1|  || |S )z1Sign using a private key per RFC 6605, section 4.r   )length	byteorder)r   signr   r   
public_clsr   r   decode_dss_signaturer   r!   r   r)   r   )r   r   r   der_signaturedsa_rdsa_sr   r   r   r   r;   2   s   
zPrivateECDSA.signc                 C   s   | t j| jjt ddS )N)r   backendr&   )r   generate_private_keyr<   r   r   )r*   r   r   r   generate=   s
   
zPrivateECDSA.generateN)F)r   r8   )r.   r/   r0   r   EllipticCurvePrivateKeyr2   r3   r
   r<   r6   boolr;   r7   rC   r   r   r   r   r8   -   s   
 
r8   c                   @   &   e Zd ZejZe Ze	
 ZdZdS )PublicECDSAP256SHA256    N)r.   r/   r0   r   ECDSAP256SHA256r   r   SHA256r   r   	SECP256R1r   r   r   r   r   r   rG   F   
    rG   c                   @      e Zd ZeZdS )PrivateECDSAP256SHA256N)r.   r/   r0   rG   r<   r   r   r   r   rN   M       rN   c                   @   rF   )PublicECDSAP384SHA3840   N)r.   r/   r0   r   ECDSAP384SHA384r   r   SHA384r   r   	SECP384R1r   r   r   r   r   r   rP   Q   rL   rP   c                   @   rM   )PrivateECDSAP384SHA384N)r.   r/   r0   rP   r<   r   r   r   r   rU   X   rO   rU   N)cryptography.hazmat.backendsr   cryptography.hazmat.primitivesr   )cryptography.hazmat.primitives.asymmetricr   r   dns.dnssecalgs.cryptographyr   r   dns.dnssectypesr   dns.rdtypes.ANY.DNSKEYr	   r
   r8   rG   rN   rP   rU   r   r   r   r   <module>   s    #