YfjLdZddlZddlZddlmZddlmZddlmZddl m Z ddl m Z ddl mZe d Zed Zer9dd lmZdd lmZdd lmZddlmZmZmZeZndZdZGddejZGddejZ dS)z& Tests for L{twisted.conch.ssh.keys}. N)dedent)keydata) randbytes)FilePath) requireModule)unittest cryptographyz Cannot run without cryptography.)default_backend)hashes)padding)commonkeyssexpyFc"tsd|_|S)Nz$ed25519 not supported on this system)ED25519_SUPPORTEDskip)fs N/var/www/html/env/lib/python3.11/site-packages/twisted/conch/test/test_keys.pyskipWithoutEd25519r$s 87 HceZdZeeZdZdZdZdZ dZ dZ dZ d Z d Zd Zd Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!dZ"dZ#d Z$d!Z%d"Z&d#Z'd$Z(d%Z)d&Z*e+d'Z,d(Z-d)Z.d*Z/d+Z0e+d,Z1d-Z2d.Z3d/Z4e+d0Z5d1Z6d2Z7d3Z8d4Z9e+d5Z:d6Z;d7Zd:Z?d;Z@d<ZAe+d=ZBe+d>ZCd?ZDd@ZEdAZFdBZGdCZHdDZIdEZJdFZKdGZLdHZMdIZNe+dJZOdKZPdLZQdMZRdNZSdOZTdPZUdQZVdRZWe+dSZXe+dTZYdS)UKeyTestsNc ttjtjdtjdtjdtjdtjdtjdj|_tjtjdtjdtjdtjd tjd  j|_ tj tj d tj dtj d tj d j|_ tj tj d tj dtj d tj d j|_tj tjd tjdtjd tjd j|_t"rKtjtjdtjdj|_d|_d|_|t0dd||_t7|jd5}|tjddddS#1swxYwYdS)Nnedpqu)rrrrrrygx)r rrr!r" privateValuecurve)r"r r#r$ak)r%r&sssh-rsa~YWpu@1SOE/xG3U d ,'=QgxjIޯb@r ΣzM1q5 {wjKNCi}RT DJH l[|^nъaYBǾ7 9j.9p?N/) >AµjUWԮBtyfˆkuNɓY.VL44`CǦ6Y% 4^rY .%HAs7ssh-dss(?;TFA E@4,d ٮ[-nQfjrgp< secureRandomc d|zS)N)r"s rz KeyTests.setUp..hs ! rwb)rKey_fromRSAComponentsrRSAData _keyObjectrsaObj_fromDSAComponentsDSADatadsaObj_fromECComponentsECDatanistp256ecObjECDatanistp384ecObj384ECDatanistp521ecObj521r_fromEd25519Components Ed25519Data ed25519Obj rsaSignature dsaSignaturepatchrmktempkeyFileopenwriteprivateRSA_lsh)selfrs rsetUpzKeyTests.setUp.sh11oc"oc"oc"oc"oc"oc" 2    h11oc"oc"oc"oc"oc" 2   X//$S)$S) /?(1 0   22$S)$S) /?(1 3   22$S)$S) /?(1 3    "h==%c*g.A#.F> O ;     9n.C.CDDD{{}} $, % % , GGG* + + + , , , , , , , , , , , , , , , , , ,s L--L14L1c8tj|jdSN)osunlinkrCrGs rtearDownzKeyTests.tearDownms $,rc |tj|jd|tj|jd|tj|jd|tj|jd|tj|jdtrA|tj|j ddSdS)zU The L{keys.Key.size} method returns the size of key object in bits. ii N) assertEqualrr-r1sizer4r7r9r;rr>rMs r test_sizezKeyTests.test_sizeps3 $+..3355t<<< $+..3355t<<< $*--2244c::: $-005577=== $-005577===  D   TXdo66;;==s C C C C C D Drcn |tjtjd|tjtjd|tjtjdtr=|tjtj d|tjtj d|tjtj d|tjtj d|tjtj d|tjtjd|tjtjdtr=|tjtjd|tjtjd|tjtjd|tjtjd|tjtjd|tjtjd|tjtjd|tjdd|tjdd|tjd d d S) z_ Test that the _guessStringType method guesses string types correctly. public_opensshprivate_openssh public_lsh private_lshagentv3sssh-rsablobsssh-dsss not a keyN)rSrr-_guessStringTyperpublicRSA_opensshpublicDSA_opensshpublicECDSA_opensshrpublicEd25519_opensshprivateRSA_opensshprivateRSA_openssh_newprivateDSA_opensshprivateDSA_openssh_newprivateECDSA_opensshprivateECDSA_openssh_newprivateEd25519_openssh_new publicRSA_lsh publicDSA_lshrFprivateDSA_lshprivateRSA_agentv3privateDSA_agentv3rMs rtest__guessStringTypezKeyTests.test__guessStringType|s  H % %g&? @ @BR     H % %g&? @ @BR     H % %g&A B BDT        ))'*GHH      H % %g&@ A ACT     H % %g&D E EGX     H % %g&@ A ACT     H % %g&D E EGX     H % %g&B C CEV     H % %g&F G G         ))'*LMM!    2273HII<XXX 2273HII<XXX  H % %g&< = =}     H % %g&< = =}     H % %g&@ A A9     H % %g&@ A A9     H % %&T U U      H % %&T U U     22<@@$GGGGGrcxtjtj}tjtj}|||tjtj}tjtj }|||tjtj }tjtj }|||trtjtj }tjtj}|||dSdS)zn The L{keys.Key.public} method returns a public key for both public and private keys. N)rr- fromStringrrbr^rSpublicrdr_rfr`rrhra) rG privateRSAKey publicRSAKey privateDSAKey publicDSAKeyprivateECDSAKeypublicECDSAKeyprivateEd25519KeypublicEd25519Keys r test_publiczKeyTests.test_publics++G,FGG x**7+DEE  --//1D1D1F1FGGG++G,FGG x**7+DEE  --//1D1D1F1FGGG(--g.JKK,,W-HII //11>3H3H3J3JKKK  T $ 3 3G4V W W #x2273PQQ    .55779I9P9P9R9R S S S S S T Trc`tjtj}tjtj}tjtj}|| | | || | | || | | trtjtj }|| | | dSdS)zg The L{keys.Key.isPublic} method returns True for public keys otherwise False. N) rr-rprrbrdrf assertTruerqisPublic assertFalserrh)rGrsaKeydsaKeyecdsaKey ed25519Keys r test_isPubliczKeyTests.test_isPublics $$W%?@@$$W%?@@8&&w'CDD  0022333 **+++  0022333 **+++ ))2244555 **,,---  4,,W-OPPJ OOJ--//88:: ; ; ;   Z0022 3 3 3 3 3 4 4rcb||||||||dSrJ)_testPublicFromString_testPrivateFromString)rGrqprivatetypedatas r_testPublicPrivateFromStringz%KeyTests._testPublicPrivateFromStrings8 ""64666 ##GT488888rcrtj|}||||||D]!\}}||||"dSrJ) rr-rpr|r}rSrritems)rGrqrr publicKeyr&vs rrzKeyTests._testPublicFromStringsH''//   **,,--- ))4000NN$$**,, ) )DAq   T!Wa ( ( ( ( ) )rcrtj|}||||||D]3\}}||||4dSrJ) rr-rpr~r}rSrrr)rGrrr privateKeyr&rs rrzKeyTests._testPrivateFromStringsX((11  ,,../// **D111JJLL 6 6DAq   Z__..q11 5 5 5 5 6 6rc|tjtjdtj|tjtjdtj|tj tj dtj tj|tj tjdtjt r8|tjtjdtjdSdS)zN Test that keys are correctly generated from OpenSSH strings. ECRSA encrypted passphraseDSAEd25519N)rrr`rfr6r^rbr/rSrr-rpprivateRSA_openssh_encryptedr_rdr3rrarhr=rMs rtest_fromOpenSSHzKeyTests.test_fromOpenSSHs, ))  '  (   "    ))  %  &  O     H  4    H   : ; ;    ))  %  &  O        - --2#        rcld}|tjtjj|ddS)z. Tests for invalid key types. s -----BEGIN FOO PRIVATE KEY----- MIGkAgEBBDAtAi7I8j73WCX20qUM5hhHwHuFzYWYYILs2Sh8UZ+awNkARZ/Fu2LU LLl5RtOQpbWgBwYFK4EEACKhZANiAATU17sA9P5FRwSknKcFsjjsk0+E3CeXPYX0 Tk/M0HK3PpWQWgrO8JdRHP9eFE9O/23P8BumwFt7F/AvPlCzVd35VfraFT0o4cCW G0RqpQ+np31aKmeJshkcYALEchnU+tQ= -----END EC PRIVATE KEY-----N) assertRaisesr BadKeyErrorr-_fromString_PRIVATE_OPENSSHrGbadKeys rtest_fromOpenSSHErrorszKeyTests.test_fromOpenSSHErrors"s>    dhBFD     rcd}|tj|tj|dzdS)zP If key strings have trailing whitespace, it should be ignored. -----BEGIN DSA PRIVATE KEY----- MIIBuwIBAAKBgQDylESNuc61jq2yatCzZbenlr9llG+p9LhIpOLUbXhhHcwC6hrh EZIdCKqTO0USLrGoP5uS9UHAUoeN62Z0KXXWTwOWGEQn/syyPzNJtnBorHpNUT9D Qzwl1yUa53NNgEctpo4NoEFOx8PuU6iFLyvgHCjNn2MsuGuzkZm7sI9ZpQIVAJiR 9dPc08KLdpJyRxz8T74b4FQRAoGAGBc4Z5Y6R/HZi7AYM/iNOM8su6hrk8ypkBwR a3Dbhzk97fuV3SF1SDrcQu4zF7c4CtH609N5nfZs2SUjLLGPWln83Ysb8qhh55Em AcHXuROrHS/sDsnqu8FQp86MaudrqMExCOYyVPE7jaBWW+/JWFbKCxmgOCSdViUJ esJpBFsCgYEA7+jtVvSt9yrwsS/YU1QGP5wRAiDYB+T5cK4HytzAqJKRdC5qS4zf C7R0eKcDHHLMYO39aPnCwXjscisnInEhYGNblTDyPyiyNxAOXuC8x7luTmwzMbNJ /ow0IqSj0VF72VJN9uSoPpFd4lLT0zN8v42RWja0M8ohWNf+YNJluPgCFE0PT4Vm SUrCyZXsNh6VXwjs3gKQ -----END DSA PRIVATE KEY----- N)rSrr-rprGprivateDSADatas r test_fromOpenSSH_with_whitespacez)KeyTests.test_fromOpenSSH_with_whitespace0sX !  H   / / H   6 7 7     rc4tjtjd}||dtjtjdzd}|||dS)z Newer versions of OpenSSH generate encrypted keys which have a longer IV than the older versions. These newer keys are also loaded. stestxprrrN)rr-rpr privateRSA_openssh_encrypted_aesrSr)rGkeykey2s rtest_fromNewerOpenSSHzKeyTests.test_fromNewerOpenSSHGs h!!  4"   U+++x""  4u <#   d#####rcltjtjftjtjftjtjftjtjftj tj ffD]U\}}| tj |tj |V| tj tjdtj tjddS)z OpenSSH 6.5 introduced a newer "openssh-key-v1" private key format (made the default in OpenSSH 7.8). Loading keys in this format produces identical results to loading the same keys in the old PEM-based format. rrN)rrbrcrdrerfrgprivateECDSA_openssh384privateECDSA_openssh384_newprivateECDSA_openssh521privateECDSA_openssh521_newrSrr-rp privateRSA_openssh_encrypted_newr)rGoldnews rtest_fromOpenSSH_v1_formatz#KeyTests.test_fromOpenSSH_v1_formatUs ')G H  ')G H  )7+K L  ,g.Q R  ,g.Q R   Q QHC   TX0055tx7J7J37O7O P P P P  H  8\    H  4         rc d}|tj|tj|dddS)zp Test that keys are correctly generated from OpenSSH strings with Windows line endings. rrs N)rSrr-rpreplacers r%test_fromOpenSSH_windows_line_endingsz.KeyTests.test_fromOpenSSH_windows_line_endingsmsc !  H   / / H   6 6ug F F G G     rctjddddgggg}|tjtjjdtj|zdzdS) za C{BadKeyError} exception is raised when public key has an unknown type. s public-keybad-keyp2{})rN) rpackrrrr-rpbase64 b64encoderGsexps r!test_fromLSHPublicUnsupportedTypez*KeyTests.test_fromLSHPublicUnsupportedTypesq zMJt +EFGHH    H (...5      rctjddddgggg}|tjtjj|dS)zb C{BadKeyError} exception is raised when private key has an unknown type. s private-keyrrrN)rrrrrr-rprs r"test_fromLSHPrivateUnsupportedTypez+KeyTests.test_fromLSHPrivateUnsupportedTypesW zNZ$,FGHII    H       rcr|tjtjdtjdS)zR RSA public and private keys can be generated from a LSH strings. rN)rrrirFr/rMs rtest_fromLSHRSAzKeyTests.test_fromLSHRSA: ))  !  "  O      rcr|tjtjdtjdS)zH DSA public and private key can be generated from LSHs. rN)rrrjrkr3rMs rtest_fromLSHDSAzKeyTests.test_fromLSHDSArrc|tjdtj|tjdtj|tjtj j ddS)zO Test that keys are correctly generated from Agent v3 strings. rrs$ssh-fooN) rrrlr/rmr3rrrr-rprMs rtest_fromAgentv3zKeyTests.test_fromAgentv3sq ##G$>wWWW ##G$>wWWW    H  D     rcXtj|j}|dd}|tj|d||tjtjj|ddS)zf L{keys.Key.fromString} applies Normalization Form KC to Unicode passphrases. opensshverschlüsseltrverschlüsseltunassigned ￿N) rr-r1toStringencoderSrprPassphraseNormalizationErrorrGrkey_datas r*test_fromStringNormalizesUnicodePassphrasez3KeyTests.test_fromStringNormalizesUnicodePassphrases ht{##<< 6J6Q6Q6S6S<TT  H  5J  K KS     - H  *      rc|tjtjjd|tjtjjdd|tjtjjt jd|tjtjjtj|j dd|tjtjjd|tjtjjdd |tjtjjd d |tjtjjd d |tjtjjd d d S)zW keys.Key.fromString should raise BadKeyError when the key is invalid. rbad_types unencryptedrrrs-----BEGIN RSA KEY----- wA== s-----BEGIN ENCRYPTED RSA KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: weird type 4Ed/a9OgJWHJsne7yOGWeWMzHYKsxuP9w1v0aYcp+puS75wvhHLiUnNwxz0KDi6n T3YkKLBsoCWS68ApR2J9yeQ6R+EyS+UQDrO9nwqo3DB5BT3Ggt8S1wE7vjNLQD0H g/SJnlqwsECNhh8aAx+Ag0m3ZKOZiRD5mCkcDQsZET7URSmFytDKOjhFn3u6ZFVB sXrfpYc6TJtOQlHd/52JB6aAbjt6afSv955Z7enIi+5yEJ5y7oYQTaE5zrFMP7N5 9LbfJFlKXxEddy/DErRLxEjmC+t4svHesoJKc2jjjyNPiOoGGF3kJXea62vsjdNV gMK5Eged3TBVIk2dv8rtJUvyFeCUtjQ1UJZIebScRR47KrbsIpCmU8I4/uHWm5hW 0mOwvdx1L/mqx/BHqVU9Dw2COhOdLbFxlFI92chkovkmNk4P48ziyVnpm7ME22sE vfCMsyirdqB1mrL4CSM7FXONv+CgfBfeYVkYW8RfJac9U1L/O+JNn7yee414O/rS hRYw4UdWnH6Gg6niklVKWNY0ZwUZC8zgm2iqy8YCYuneS37jC+OEKP+/s6HSKuqk 2bzcl3/TcZXNSM815hnFRpz0anuyAsvwPNRyvxG2/DacJHL1f6luV4B0o6W410yf qXQx01DLo7nuyhJqoH3UGCyyXB+/QUs0mbG2PAEn3f5dVs31JMdbt+PrxURXXjKk 4cexpUcIpqqlfpIRe3RD0sDVbH4OXsGhi2kiTfPZu7mgyFxKopRbn1KwU1qKinfY EU9O4PoTak/tPT+5jFNhaP+HrURoi/pU8EAUNSktl7xAkHYwkN/9Cm7DeBghgf3n 8+tyCGYDsB5utPD0/Xe9yx0Qhc/kMm4xIyQDyA937dk3mUvLC9vulnAP8I+Izim0 fZ182+D1bWwykoD0997mUHG/AUChWR01V1OLwRyPv2wUtiS8VNG76Y2aqKlgqP1P V+IvIEqR4ERvSBVFzXNF8Y6j/sVxo8+aZw+d0L1Ns/R55deErGg3B8i/2EqGd3r+ 0jps9BqFHHWW87n3VyEB3jWCMj8Vi2EJIfa/7pSaViFIQn8LiBLf+zxG5LTOToK5 xkN42fReDcqi3UNfKNGnv4dsplyTR2hyx65lsj4bRKDGLKOuB1y7iB0AGb0LtcAI dcsVlcCeUquDXtqKvRnwfIMg+ZunyjqHBhj3qgRgbXbT6zjaSdNnih569aTg0Vup VykzZ7+n/KVcGLmvX0NesdoI7TKbq4TnEIOynuG5Sf+2GpARO5bjcWKSZeN/Ybgk gccf8Cqf6XWqiwlWd0B7BR3SymeHIaSymC45wmbgdstrbk7Ppa2Tp9AZku8M2Y7c 8mY9b+onK075/ypiwBm4L4GRNTFLnoNQJXx0OSl4FNRWsn6ztbD+jZhu8Seu10Jw SEJVJ+gmTKdRLYORJKyqhDet6g7kAxs4EoJ25WsOnX5nNr00rit+NkMPA7xbJT+7 CfI51GQLw7pUPeO2WNt6yZO/YkzZrqvTj5FEwybkUyBv7L0gkqu9wjfDdUw0fVHE xEm4DxjEoaIp8dW/JOzXQ2EF+WaSOgdYsw3Ac+rnnjnNptCdOEDGP6QBkt+oXj4P -----END RSA PRIVATE KEY----- encrypteds-----BEGIN ENCRYPTED RSA KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: FOO-123-BAR,01234567 4Ed/a9OgJWHJsne7yOGWeWMzHYKsxuP9w1v0aYcp+puS75wvhHLiUnNwxz0KDi6n T3YkKLBsoCWS68ApR2J9yeQ6R+EyS+UQDrO9nwqo3DB5BT3Ggt8S1wE7vjNLQD0H g/SJnlqwsECNhh8aAx+Ag0m3ZKOZiRD5mCkcDQsZET7URSmFytDKOjhFn3u6ZFVB sXrfpYc6TJtOQlHd/52JB6aAbjt6afSv955Z7enIi+5yEJ5y7oYQTaE5zrFMP7N5 9LbfJFlKXxEddy/DErRLxEjmC+t4svHesoJKc2jjjyNPiOoGGF3kJXea62vsjdNV gMK5Eged3TBVIk2dv8rtJUvyFeCUtjQ1UJZIebScRR47KrbsIpCmU8I4/uHWm5hW 0mOwvdx1L/mqx/BHqVU9Dw2COhOdLbFxlFI92chkovkmNk4P48ziyVnpm7ME22sE vfCMsyirdqB1mrL4CSM7FXONv+CgfBfeYVkYW8RfJac9U1L/O+JNn7yee414O/rS hRYw4UdWnH6Gg6niklVKWNY0ZwUZC8zgm2iqy8YCYuneS37jC+OEKP+/s6HSKuqk 2bzcl3/TcZXNSM815hnFRpz0anuyAsvwPNRyvxG2/DacJHL1f6luV4B0o6W410yf qXQx01DLo7nuyhJqoH3UGCyyXB+/QUs0mbG2PAEn3f5dVs31JMdbt+PrxURXXjKk 4cexpUcIpqqlfpIRe3RD0sDVbH4OXsGhi2kiTfPZu7mgyFxKopRbn1KwU1qKinfY EU9O4PoTak/tPT+5jFNhaP+HrURoi/pU8EAUNSktl7xAkHYwkN/9Cm7DeBghgf3n 8+tyCGYDsB5utPD0/Xe9yx0Qhc/kMm4xIyQDyA937dk3mUvLC9vulnAP8I+Izim0 fZ182+D1bWwykoD0997mUHG/AUChWR01V1OLwRyPv2wUtiS8VNG76Y2aqKlgqP1P V+IvIEqR4ERvSBVFzXNF8Y6j/sVxo8+aZw+d0L1Ns/R55deErGg3B8i/2EqGd3r+ 0jps9BqFHHWW87n3VyEB3jWCMj8Vi2EJIfa/7pSaViFIQn8LiBLf+zxG5LTOToK5 xkN42fReDcqi3UNfKNGnv4dsplyTR2hyx65lsj4bRKDGLKOuB1y7iB0AGb0LtcAI dcsVlcCeUquDXtqKvRnwfIMg+ZunyjqHBhj3qgRgbXbT6zjaSdNnih569aTg0Vup VykzZ7+n/KVcGLmvX0NesdoI7TKbq4TnEIOynuG5Sf+2GpARO5bjcWKSZeN/Ybgk gccf8Cqf6XWqiwlWd0B7BR3SymeHIaSymC45wmbgdstrbk7Ppa2Tp9AZku8M2Y7c 8mY9b+onK075/ypiwBm4L4GRNTFLnoNQJXx0OSl4FNRWsn6ztbD+jZhu8Seu10Jw SEJVJ+gmTKdRLYORJKyqhDet6g7kAxs4EoJ25WsOnX5nNr00rit+NkMPA7xbJT+7 CfI51GQLw7pUPeO2WNt6yZO/YkzZrqvTj5FEwybkUyBv7L0gkqu9wjfDdUw0fVHE xEm4DxjEoaIp8dW/JOzXQ2EF+WaSOgdYsw3Ac+rnnjnNptCdOEDGP6QBkt+oXj4P -----END RSA PRIVATE KEY-----s-----BEGIN ENCRYPTED RSA KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: AES-128-CBC,01234 4Ed/a9OgJWHJsne7yOGWeWMzHYKsxuP9w1v0aYcp+puS75wvhHLiUnNwxz0KDi6n T3YkKLBsoCWS68ApR2J9yeQ6R+EyS+UQDrO9nwqo3DB5BT3Ggt8S1wE7vjNLQD0H g/SJnlqwsECNhh8aAx+Ag0m3ZKOZiRD5mCkcDQsZET7URSmFytDKOjhFn3u6ZFVB sXrfpYc6TJtOQlHd/52JB6aAbjt6afSv955Z7enIi+5yEJ5y7oYQTaE5zrFMP7N5 9LbfJFlKXxEddy/DErRLxEjmC+t4svHesoJKc2jjjyNPiOoGGF3kJXea62vsjdNV gMK5Eged3TBVIk2dv8rtJUvyFeCUtjQ1UJZIebScRR47KrbsIpCmU8I4/uHWm5hW 0mOwvdx1L/mqx/BHqVU9Dw2COhOdLbFxlFI92chkovkmNk4P48ziyVnpm7ME22sE vfCMsyirdqB1mrL4CSM7FXONv+CgfBfeYVkYW8RfJac9U1L/O+JNn7yee414O/rS hRYw4UdWnH6Gg6niklVKWNY0ZwUZC8zgm2iqy8YCYuneS37jC+OEKP+/s6HSKuqk 2bzcl3/TcZXNSM815hnFRpz0anuyAsvwPNRyvxG2/DacJHL1f6luV4B0o6W410yf qXQx01DLo7nuyhJqoH3UGCyyXB+/QUs0mbG2PAEn3f5dVs31JMdbt+PrxURXXjKk 4cexpUcIpqqlfpIRe3RD0sDVbH4OXsGhi2kiTfPZu7mgyFxKopRbn1KwU1qKinfY EU9O4PoTak/tPT+5jFNhaP+HrURoi/pU8EAUNSktl7xAkHYwkN/9Cm7DeBghgf3n 8+tyCGYDsB5utPD0/Xe9yx0Qhc/kMm4xIyQDyA937dk3mUvLC9vulnAP8I+Izim0 fZ182+D1bWwykoD0997mUHG/AUChWR01V1OLwRyPv2wUtiS8VNG76Y2aqKlgqP1P V+IvIEqR4ERvSBVFzXNF8Y6j/sVxo8+aZw+d0L1Ns/R55deErGg3B8i/2EqGd3r+ 0jps9BqFHHWW87n3VyEB3jWCMj8Vi2EJIfa/7pSaViFIQn8LiBLf+zxG5LTOToK5 xkN42fReDcqi3UNfKNGnv4dsplyTR2hyx65lsj4bRKDGLKOuB1y7iB0AGb0LtcAI dcsVlcCeUquDXtqKvRnwfIMg+ZunyjqHBhj3qgRgbXbT6zjaSdNnih569aTg0Vup VykzZ7+n/KVcGLmvX0NesdoI7TKbq4TnEIOynuG5Sf+2GpARO5bjcWKSZeN/Ybgk gccf8Cqf6XWqiwlWd0B7BR3SymeHIaSymC45wmbgdstrbk7Ppa2Tp9AZku8M2Y7c 8mY9b+onK075/ypiwBm4L4GRNTFLnoNQJXx0OSl4FNRWsn6ztbD+jZhu8Seu10Jw SEJVJ+gmTKdRLYORJKyqhDet6g7kAxs4EoJ25WsOnX5nNr00rit+NkMPA7xbJT+7 CfI51GQLw7pUPeO2WNt6yZO/YkzZrqvTj5FEwybkUyBv7L0gkqu9wjfDdUw0fVHE xEm4DxjEoaIp8dW/JOzXQ2EF+WaSOgdYsw3Ac+rnnjnNptCdOEDGP6QBkt+oXj4P -----END RSA PRIVATE KEY-----s-----BEGIN ENCRYPTED RSA KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,01234 4Ed/a9OgJWHJsne7yOGWeWMzHYKsxuP9w1v0aYcp+puS75wvhHLiUnNwxz0KDi6n T3YkKLBsoCWS68ApR2J9yeQ6R+EyS+UQDrO9nwqo3DB5BT3Ggt8S1wE7vjNLQD0H g/SJnlqwsECNhh8aAx+Ag0m3ZKOZiRD5mCkcDQsZET7URSmFytDKOjhFn3u6ZFVB sXrfpYc6TJtOQlHd/52JB6aAbjt6afSv955Z7enIi+5yEJ5y7oYQTaE5zrFMP7N5 9LbfJFlKXxEddy/DErRLxEjmC+t4svHesoJKc2jjjyNPiOoGGF3kJXea62vsjdNV gMK5Eged3TBVIk2dv8rtJUvyFeCUtjQ1UJZIebScRR47KrbsIpCmU8I4/uHWm5hW 0mOwvdx1L/mqx/BHqVU9Dw2COhOdLbFxlFI92chkovkmNk4P48ziyVnpm7ME22sE vfCMsyirdqB1mrL4CSM7FXONv+CgfBfeYVkYW8RfJac9U1L/O+JNn7yee414O/rS hRYw4UdWnH6Gg6niklVKWNY0ZwUZC8zgm2iqy8YCYuneS37jC+OEKP+/s6HSKuqk 2bzcl3/TcZXNSM815hnFRpz0anuyAsvwPNRyvxG2/DacJHL1f6luV4B0o6W410yf qXQx01DLo7nuyhJqoH3UGCyyXB+/QUs0mbG2PAEn3f5dVs31JMdbt+PrxURXXjKk 4cexpUcIpqqlfpIRe3RD0sDVbH4OXsGhi2kiTfPZu7mgyFxKopRbn1KwU1qKinfY EU9O4PoTak/tPT+5jFNhaP+HrURoi/pU8EAUNSktl7xAkHYwkN/9Cm7DeBghgf3n 8+tyCGYDsB5utPD0/Xe9yx0Qhc/kMm4xIyQDyA937dk3mUvLC9vulnAP8I+Izim0 fZ182+D1bWwykoD0997mUHG/AUChWR01V1OLwRyPv2wUtiS8VNG76Y2aqKlgqP1P V+IvIEqR4ERvSBVFzXNF8Y6j/sVxo8+aZw+d0L1Ns/R55deErGg3B8i/2EqGd3r+ 0jps9BqFHHWW87n3VyEB3jWCMj8Vi2EJIfa/7pSaViFIQn8LiBLf+zxG5LTOToK5 xkN42fReDcqi3UNfKNGnv4dsplyTR2hyx65lsj4bRKDGLKOuB1y7iB0AGb0LtcAI dcsVlcCeUquDXtqKvRnwfIMg+ZunyjqHBhj3qgRgbXbT6zjaSdNnih569aTg0Vup VykzZ7+n/KVcGLmvX0NesdoI7TKbq4TnEIOynuG5Sf+2GpARO5bjcWKSZeN/Ybgk gccf8Cqf6XWqiwlWd0B7BR3SymeHIaSymC45wmbgdstrbk7Ppa2Tp9AZku8M2Y7c 8mY9b+onK075/ypiwBm4L4GRNTFLnoNQJXx0OSl4FNRWsn6ztbD+jZhu8Seu10Jw SEJVJ+gmTKdRLYORJKyqhDet6g7kAxs4EoJ25WsOnX5nNr00rit+NkMPA7xbJT+7 CfI51GQLw7pUPeO2WNt6yZO/YkzZrqvTj5FEwybkUyBv7L0gkqu9wjfDdUw0fVHE xEm4DxjEoaIp8dW/JOzXQ2EF+WaSOgdYsw3Ac+rnnjnNptCdOEDGP6QBkt+oXj4P -----END RSA PRIVATE KEY-----N) rrrr-rprriEncryptedKeyErrorr1rrMs rtest_fromStringErrorszKeyTests.test_fromStringErrorss $*DH,?EEE $*DH,?jQQQ    H   !%       " H  HT[ ! ! * *9 * N N     dh13U       H  !<#C " " " H    H  !<#C " " " H    H  !<#C " " " H    H  !<#C " " " " " rc|tj|jtjt j|tj tjj|jd|tj tjj|jddS)z5 Test that fromFile works correctly. r unencryptedrN) rSrr-fromFilerCrprrFrrrMs r test_fromFilezKeyTests.test_fromFile{s  H  dl + +TX-@-@AW-X-X    $*DH,=t|ZXXX   dh/-      rctjddj}tj|}||j|dS)zJ Test that the PublicKey object is initialized correctly. rrN)rr-r.r0rS)rGobjrs r test_initzKeyTests.test_initsLh))A)33>hsmm -----rctj|j}tj|j}tjtjddj}tj|j}|||k|||k|||k||tk||dkdS)z? Test that Key objects are compared correctly. rrrN) rr-r1r.r0r4r|r~objectrGrsa1rsa2rsa3dsas r test_equalzKeyTests.test_equalsx $$x $$x33a13==HIIht{##  %%% &&& %%% ((( &&&&&rctj|j}tj|j}tjtjddj}tj|j}|||k|||k|||k||tk||dkdS)zC Test that Key objects are not-compared correctly. rrrN) rr-r1r.r0r4r~r|rrs r test_notEqualzKeyTests.test_notEqualsx $$x $$x33a13==HIIht{## &&&  %%%  $$$ '''  %%%%%rcntjd}|t|jdS)zO The L{keys.Key.data} method raises RuntimeError for bad keys. rN)rr-r RuntimeErrorrrs rtest_dataErrorzKeyTests.test_dataErrors/# , 44444rc|tj|jd|tj|jddS)z Test that the fingerprint method returns fingerprint in L{FingerprintFormats.MD5-HEX} format by default. /85:25:04:32:58:55:96:9f:57:ee:fb:a8:1a:ea:69:da/63:15:b3:0e:e6:4f:50:de:91:48:3d:01:6b:b3:13:c1N)rSrr-r1 fingerprintr4rMs rtest_fingerprintdefaultz KeyTests.test_fingerprintdefaults|  HT[ ! ! - - / / =     HT[ ! ! - - / / =     rcB|tj|jtjjd|tj|jtjjddS)z fingerprint method generates key fingerprint in L{FingerprintFormats.MD5-HEX} format if explicitly specified. rrN)rSrr-r1rFingerprintFormatsMD5_HEXr4rMs rtest_fingerprint_md5_hexz!KeyTests.test_fingerprint_md5_hexs  HT[ ! ! - -d.E.M N N =     HT[ ! ! - -d.E.M N N =     rcB|tj|jtjjd|tj|jtjjddS)z fingerprint method generates key fingerprint in L{FingerprintFormats.SHA256-BASE64} format if explicitly specified. z,FBTCOoknq0mHy+kpfnY9tDdcAJuWtCpuQMaV3EsvbUI=z,Wz5o2YbKyxOEcJn1au/UaALSVruUzfz0vaLI1xiIGyY=N)rSrr-r1rr SHA256_BASE64r4rMs rtest_fingerprintsha256zKeyTests.test_fingerprintsha256s  HT[ ! ! - -d.E.S T T :     HT[ ! ! - -d.E.S T T :     rc|tj5}tj|jddddn #1swxYwY|d|jjddS)zk A C{BadFingerPrintFormat} error is raised when unsupported formats are requested. z sha256-baseNz+Unsupported fingerprint format: sha256-baser) rrBadFingerPrintFormatr-r1rrS exceptionargs)rGems rtest_fingerprintBadFormatz"KeyTests.test_fingerprintBadFormats   t8 9 9 =R HT[ ! ! - -m < < < = = = = = = = = = = = = = = =  92<;LQ;O     s-AA Ac|tj|jd|tj|jd|tj|jd|tj|jd|tj|jd|tj|jtj dtr~|tj|j d|tj|j d| ttjd j| ttjd j| ttj|j| ttj|jd S) zS Test that the type method returns the correct type for an object. rssh-rsarssh-dssrr$r ssh-ed25519N)rSrr-r1rsshTyper4r7rr6rr>rrrMs r test_typezKeyTests.test_types $+..3355u=== $+..6688*EEE $+..3355u=== $+..6688*EEE $*--2244d;;;  HTZ ( ( * *G,B7,K     R   TXdo66;;==y I I I   TXdo66>>@@. Q Q Q ,(;<<< ,(>??? ,(;<<< ,(>?????rc|tj|jgd|tj|jdg|tj|jdgtr@|tj|jdg| ttjdj| ttj|jdS)z L{keys.Key.supportedSignatureAlgorithms} returns the appropriate public key signature algorithms for each key type. ) rsa-sha2-512 rsa-sha2-256rr secdsa-sha2-nistp256r N) rSrr-r1supportedSignatureAlgorithmsr4r7rr>rrrMs r!test_supportedSignatureAlgorithmsz*KeyTests.test_supportedSignatureAlgorithmssA  HT[ ! ! > > @ @ : : :     HT[ ! ! > > @ @:,     HTZ = = ? ? # $        ))FFHH     ,(STTT ,(STTTTTrctjd}|tjtjj|dS)ze A C{BadKeyError} error is raised whey the blob has an unsupported key type. ssh-badN)r NSrrrr-rprGbadBlobs rtest_fromBlobUnsupportedTypez%KeyTests.test_fromBlobUnsupportedTypes9 )J'' $*DH,?IIIIIrctjdtjdd}tjdtj|dztj|dz}t j|}|| | || dS)zQ A public RSA key is correctly generated from a public key blob. rrrrN) rr/r rMPrr-rpr|r}rSr)rG rsaPublicDatarsaBlobrs rtest_fromBlobRSAzKeyTests.test_fromBlobRSAs %%  Ij ! !i c*++ ,i c*++ ,  $$W-- ))***  66666rcptjdtjdtjdtjdd}tjdtj|dztj|dztj|dztj|dz}t j|}|| | || dS)zQ A public DSA key is correctly generated from a public key blob. rrr!r )rrr!r r N) rr3r rrrr-rpr|r}rSr)rG dsaPublicDatadsaBlobrs rtest_fromBlobDSAzKeyTests.test_fromBlobDSA/s %%%%    Ij ! !i c*++ ,i c*++ ,i c*++ ,i c*++  , $$W-- ))***  66666rcrddlm}tjdtjdtjdd}t j|dt j|dddzt jd ||dd z||dd zz}tj |}| | | || dS) zA Key.fromString generates ECDSA keys from blobs. rutilsr"r r$r"r r$N )r r#rr6r r int_to_bytesrr-rpr|r}rSr)rGr# ecPublicDataecblobeckeys rtest_fromBlobECDSAzKeyTests.test_fromBlobECDSAFs& '&&&&&',',+G4   Il7+ , ,i W-bcc233 4i$$\#%6;;<$$\#%6;;<  ##F++ (())) uzz||44444rchdtjdi}tjdtj|dz}tj|}||| || dS)zU A public Ed25519 key is correctly generated from a public key blob. r%r N) rr=r rrr-rpr|r}rSr)rGed25519PublicData ed25519Blobrs rtest_fromBlobEd25519zKeyTests.test_fromBlobEd25519`s $S) i//&)>>>>rctjd}|tjtjj|dS)zh C{BadKeyError} is raised when loading a private blob with an unsupported type. rN)r rrrrr-_fromString_PRIVATE_BLOBrs r#test_fromPrivateBlobUnsupportedTypez,KeyTests.test_fromPrivateBlobUnsupportedTypeps9 )J'' $*DH,MwWWWWWrcdtjdtjtjdztjtjdztjtjdztjtjdztjtjdztjtjdz}t j|}|| | tj| | |t j| dS) zS A private RSA key is correctly generated from a private key blob. rrrrrrrN) r rrrr/rr-r2r~r}rSr privateBlob)rGrrs rtest_fromPrivateBlobRSAz KeyTests.test_fromPrivateBlobRSAysL Ij ! !i,-- .i,-- .i,-- .i,--  . i,--  . i,--  . 227;; **+++ &++--888  DH55f6H6H6J6JKK     rctjdtjtjdztjtjdztjtjdztjtjdztjtjdz}t j|}|| | tj| | |t j| dS)zS A private DSA key is correctly generated from a private key blob. r rrr!r r"N) r rrrr3rr-r2r~r}rSrr5)rGrrs rtest_fromPrivateBlobDSAz KeyTests.test_fromPrivateBlobDSAs1 Ij ! !i,-- .i,-- .i,-- .i,--  . i,--  . 227;; **+++ &++--888  DH55f6H6H6J6JKK     rcddlm}ddlm}|t jdt jd|}tj t jdtj t jddd ztj | t |j j|jjztjt jd z}t$j|}|||t j|||t$j|d S) zR A private EC key is correctly generated from a private key blob. r serialization)ecr"r r$r$r%Nr#)cryptography.hazmat.primitivesr;)cryptography.hazmat.primitives.asymmetricr<EllipticCurvePublicNumbersrr6 SECP256R1r r public_keyr public_bytesEncodingX962 PublicFormatUncompressedPointrrr-r2r~r}rSrr5)rGr;r< publicNumbersr*r+s rtest_fromPrivateBlobECDSAz"KeyTests.test_fromPrivateBlobECDSAs A@@@@@@@@@@@55$S)$S),,..6  Ig,W5 6 6i.w7<== >i(():):;;HH!*/!.@ i.~>?? @ 11&99 ))*** />>>  A A%BSBSBUBU V VWWWWWrcbtjdtjtjdztjtjdtjdzz}tj|}||| tj| | |tj| dS)zW A private Ed25519 key is correctly generated from a private key blob. r r%r&N) r rrr=rr-r2r~r}rSrr5)rGr/rs rtest_fromPrivateBlobEd25519z$KeyTests.test_fromPrivateBlobEd25519s In % %i+C011 2i+C073Fs3KKLL M  X66{CC  ,,../// ,joo.?.?@@@  99*:P:P:R:RSS     rc|tj|jt jdt j|jj j zt j|jj j zdS)zL Return the over-the-wire SSH format of the RSA public key. rN) rSrr-r1r\r rrprivate_numberspublic_numbersrrrMs r test_blobRSAzKeyTests.test_blobRSAs  HT[ ! ! & & ( ( Ij ! !i 3355DFGG Hi 3355DFGG H     rc|jj}|t j|jtjdtj |j j ztj |j j ztj |j j ztj |jzdS)zL Return the over-the-wire SSH format of the DSA public key. r N)r4rLrMrSrr-r\r rrparameter_numbersrrr!r rGrGs r test_blobDSAzKeyTests.test_blobDSAs 3355D   HT[ ! ! & & ( ( Ij ! !i 79:: ;i 79:: ;i 79:: ;i ((  )     rc fddlm}|jjjdzdz}|t j|jtj tj dtj tj dddztj d| |jjj|z| |jjj|zzdS) zK Return the over-the-wire SSH format of the EC public key. rr"r$r%Nr&)r r#r7r$key_sizerSrr-r\r rrr6r(rLrMr"r )rGr# byteLengths r test_blobECzKeyTests.test_blobECs '&&&&&j&/!39   HTZ % % ' ' Ig,W5 6 6i.w7<== >i$$J..00?A:$$J..00?A:   rc`ddlm}|j|jj|jj}|tj |j tj dtj |zdS)zP Return the over-the-wire SSH format of the Ed25519 public key. rr:r N)r=r;r>rArBrCRawrErSrr-r\r r)rGr; publicBytess rtest_blobEd25519zKeyTests.test_blobEd25519s A@@@@@o0022??  " & (B(F    HT_ % % * * , , In % % +(>(> >     rcntjd}|t|jdS)zx C{RuntimeError} is raised when the blob is requested for a Key which is not wrapping anything. N)rr-rrr\rs rtest_blobNoKeyzKeyTests.test_blobNoKeys/ $ , 44444rc&|j}|tj|jt jdt j|j j zt j|j j zt j|j zt j|j zt j|jzt j|jzdS)zn L{keys.Key.privateBlob} returns the SSH protocol-level format of an RSA private key. rN)r1rLrSrr-r5r rrrMrrriqmprr)rGnumberss rtest_privateBlobRSAzKeyTests.test_privateBlobRSAs +--//  HT[ ! ! - - / / Ij ! !i.011 2i.011 2i "" #i %%  & i ""  # i ""  # rc4|jj}|t j|jtjdtj |j j ztj |j j ztj |j j ztj |jztj |jjzdS)zm L{keys.Key.privateBlob} returns the SSH protocol-level format of a DSA private key. r N)r4rLrMrSrr-r5r rrrPrrr!r r"rQs rtest_privateBlobDSAzKeyTests.test_privateBlobDSA/s  3355D   HT[ ! ! - - / / Ij ! !i 79:: ;i 79:: ;i 79:: ;i ((  ) i 3355788  9     rc 8ddlm}|tj|jtjtj dtjtj dddztj|j |j j|jjztj|jjzdS)zj L{keys.Key.privateBlob} returns the SSH ptotocol-level format of EC private key. rr:r$r%N)r=r;rSrr-r7r5r rrr6rArBrCrDrErFrrL private_value)rGr;s rtest_privateBlobECzKeyTests.test_privateBlobEC@s A@@@@@  HTZ , , . . Ig,W5 6 6i.w7<== >i %%''44!*/!.@ i 2244BCC D rcddlm}|j|jj|jj}|j|jj|j j| }| tj |jtjdtj|ztj||zzdS)zr L{keys.Key.privateBlob} returns the SSH protocol-level format of an Ed25519 private key. rr:r N)r=r;r>rArBrCrZrE private_bytes PrivateFormat NoEncryptionrSrr-r5r r)rGr;r[ privateBytess rtest_privateBlobEd25519z KeyTests.test_privateBlobEd25519Ts A@@@@@o0022??  " & (B(F  44  " &  ' +  & & ( (   HT_ % % 1 1 3 3 In % %i $$ %i {233 4     rcntjd}|t|jdS)zV Raises L{RuntimeError} if the underlying key object does not exists. N)rr-rrr5rs rtest_privateBlobNoKeyObjectz$KeyTests.test_privateBlobNoKeyObjectls0$ ,(:;;;;;rctjtj}||dtj| |dd ddk|| dtj dd|| dd tj dS) zO L{keys.Key.toString} serializes an RSA key in OpenSSH format. rrrsDEK-InforNr%commentcomment) rr-rprrlrSrstriprbr|findrqr^rGrs rtest_toOpenSSHRSAzKeyTests.test_toOpenSSHRSAtsh!!'"<== i006688':TUUU  LL|L < < A A+ N NQR R     JJLL ! !) , ,g.G.L     JJLL ! !)Z ! @ @  %     rc>tjtj}|dd}|ddd}|d|d|d|d||tj|||tj|dd S) zT L{keys.Key.toString} serializes an RSA key in OpenSSH's v1 format. rv1subtyperr{r#-----BEGIN OPENSSH PRIVATE KEY-----rrN)rr-rprrbrrS splitlinesrGr new_key_datanew_enc_key_datas rtest_toOpenSSHRSA_v1_formatz$KeyTests.test_toOpenSSHRSA_v1_formath!!'"<==||It|<< << 4K<XX  2L4K4K4M4Ma4P     24D4O4O4Q4QRS4T    dh11,??@@@  $$%5+$NN     rc tjtj}||dtj|| ddtj || dtj dddS)zN L{keys.Key.toString} serializes a DSA key in OpenSSH format. rrqrrNr%) rr-rprrkrSrrtrdrqr_rvs rtest_toOpenSSHDSAzKeyTests.test_toOpenSSHDSAsh!!'"899 i006688':TUUU  JJLL ! !)Z ! @ @  %     JJLL ! !) , ,g.G.L     rc>tjtj}|dd}|ddd}|d|d|d|d||tj|||tj|dd S) zS L{keys.Key.toString} serializes a DSA key in OpenSSH's v1 format. rryrzrr|r}rrN)rr-rprrdrrSr~rs rtest_toOpenSSHDSA_v1_formatz$KeyTests.test_toOpenSSHDSA_v1_formatrrctjtj}||ddtj||dtjdddS)zQ L{keys.Key.toString} serializes an ECDSA key in OpenSSH format. rrqrrNr%) rr-rprrfrSrqrr`rvs rtest_toOpenSSHECDSAzKeyTests.test_toOpenSSHECDSAsh!!'">??  JJLL ! !)Z ! @ @  '     JJLL ! !) , ,g.I#2#.N     rc>tjtj}|dd}|ddd}|d|d|d|d||tj|||tj|dd S) zV L{keys.Key.toString} serializes an ECDSA key in OpenSSH's v1 format. rryrzrr|r}rrN)rr-rprrfrrSr~rs rtest_toOpenSSHECDSA_v1_formatz&KeyTests.test_toOpenSSHECDSA_v1_formatsh!!'">??||It|<< << 4K<XX  2L4K4K4M4Ma4P     24D4O4O4Q4QRS4T    dh11,??@@@  $$%5+$NN     rctjtj}|d}|dd}|d|d|d|d||tj|||tj|d|||dddS) zX L{keys.Key.toString} serializes an Ed25519 key in OpenSSH's v1 format. rrrr}rryrzN)rr-rprrhrrSr~rs rtest_toOpenSSHEd25519zKeyTests.test_toOpenSSHEd25519s, h!!'"DEE||I.. << k<JJ  2L4K4K4M4Ma4P     24D4O4O4Q4QRS4T    dh11,??@@@  $$%5+$NN    s||It|'L'LMMMMMrctjtj}|t |jdddS)z L{keys.Key.toString} refuses to serialize an Ed25519 key in OpenSSH's old PEM format, as no encoding of Ed25519 is defined for that format. rPEMrzN)rr-rprrhr ValueErrorrrvs r test_toOpenSSHEd25519_PEM_formatz)KeyTests.test_toOpenSSHEd25519_PEM_formatsAh!!'"DEE *clIuMMMMMrcHtjtj}||dtj||dtj dS)zK L{keys.Key.toString} serializes an RSA key in LSH format. lshN) rr-rprrbrSrrFrqrirvs r test_toLSHRSAzKeyTests.test_toLSHRSAvh!!'"<== e,,g.DEEE ..u55w7LMMMMMrcHtjtj}||dtj||dtj dS)zJ L{keys.Key.toString} serializes a DSA key in LSH format. rN) rr-rprrdrSrrkrqrjrvs r test_toLSHDSAzKeyTests.test_toLSHDSArrctjtj}||dtjdS)zP L{keys.Key.toString} serializes an RSA key in Agent v3 format. r[N)rr-rprrbrSrrlrvs rtest_toAgentv3RSAzKeyTests.test_toAgentv3RSAGh!!'"<== i00'2LMMMMMrctjtj}||dtjdS)zO L{keys.Key.toString} serializes a DSA key in Agent v3 format. r[N)rr-rprrdrSrrmrvs rtest_toAgentv3DSAzKeyTests.test_toAgentv3DSA rrcDtj|j}|dd}|tj|d||tj|jdddS)zd L{keys.Key.toString} applies Normalization Form KC to Unicode passphrases. rrrrrN) rr-r1rrSrprrrrs r(test_toStringNormalizesUnicodePassphrasez1KeyTests.test_toStringNormalizesUnicodePassphrases ht{##<< 6K<LL  H  5I5P5P5R5R  S S      - L *      rc|tjtj|jjddS)zm L{keys.Key.toString} raises L{keys.BadKeyError} when passed an invalid format type. rN)rrrr-r1rrMs rtest_toStringErrorszKeyTests.test_toStringErrors&s4 $*DHT[,A,A,JJWWWWWrc d}tjtj}||}||||||||tj |\}}| |d| |j tj |d|tjt#jdS)zR Signed data can be verified using RSA (with SHA-1, the default). some-datarrN)rr-rprrbsignr|rqverifyr getNSrS assertIsNoner0rAr PKCS1v15r SHA1rGrr signature signatureTypes rtest_signAndVerifyRSAzKeyTests.test_signAndVerifyRSA-sh!!'"<==HHTNN   ++It<<===  9d33444#)< #:#: y  333  N % % ' ' . . Y''*D'2B2D2Dfkmm       rc d}tjtj}||d}||||||||tj |\}}| |d| |j tj |d|tjt#jdS)zE Signed data can be verified using RSA with SHA-256. rrrrN)rr-rprrbrr|rqrr rrSrr0rAr rr SHA256rs rtest_signAndVerifyRSASHA256z$KeyTests.test_signAndVerifyRSASHA256?h!!'"<==HHTHAA   ++It<<===  9d33444#)< #:#: y 888  N % % ' ' . . Y''*D'2B2D2Dfmoo       rc d}tjtj}||d}||||||||tj |\}}| |d| |j tj |d|tjt#jdS)zE Signed data can be verified using RSA with SHA-512. rrrrN)rr-rprrbrr|rqrr rrSrr0rAr rr SHA512rs rtest_signAndVerifyRSASHA512z$KeyTests.test_signAndVerifyRSASHA512QrrcNd}tjtj}||}||||||||dS)z8 Signed data can be verified using DSA. rN) rr-rprrdrr|rqrrGrrrs rtest_signAndVerifyDSAzKeyTests.test_signAndVerifyDSAcsh!!'"<==HHTNN   ++It<<===  9d3344444rcd}tjtj}||}tjtj}||}tjtj}||}|| |||| |||| |||| |||| |||| ||dS)z7 Signed data can be verified using EC. rN) rr-rprrfrrrr|rqr)rGrrrkey384 signature384key521 signature521s rtest_signAndVerifyECzKeyTests.test_signAndVerifyECmsfh!!'">??HHTNN $$W%DEE{{4(( $$W%DEE{{4((   ++It<<===  9d33444  ..|TBBCCC  lD99:::  ..|TBBCCC  lD99:::::rcNd}tjtj}||}||||||||dS)z< Signed data can be verified using Ed25519. rN) rr-rprrhrr|rqrrs rtest_signAndVerifyEd25519z"KeyTests.test_signAndVerifyEd25519s h!!'"DEEHHTNN   ++It<<===  9d3344444rcJtjtj}|tj|jddtjtj}|tj|jdddS)z L{keys.Key.sign} raises L{keys.BadSignatureAlgorithmError} when asked to sign with a public key algorithm that doesn't make sense with the given key. s some datar rN) rr-rprrbrBadSignatureAlgorithmErrorrrfrvs rtest_signWithWrongAlgorithmz$KeyTests.test_signWithWrongAlgorithms h!!'"<==   + H $    h!!'">??   + H $      rcltjtj}|||jd|||jd|||j ddS)zC A known-good RSA signature verifies successfully. raN) rr-rprr^r|rr?r~r@rvs rtest_verifyRSAzKeyTests.test_verifyRSAh!!'";<<  4#4c::;;; D$5t<<=== D$5s;;<<<<N)rSreprrr-r1rMs rtest_reprPrivateRSAzKeyTests.test_reprPrivateRSAsH  $+&& ' 'F !I I I I I rc|ttj|jddS)zm The repr of a L{keys.Key} contains all of the RSA components for an RSA public key. a\N)rSrrr-r1rqrMs rtest_reprPublicRSAzKeyTests.test_reprPublicRSA sN  $+&&--// 0 0      rc|ttj|jt djditj dS)zl The repr of a L{keys.Key} contains all the OpenSSH format for an ECDSA public key. z Nr*) rSrrr-r7rqrformatrr6rMs rtest_reprPublicECDSAzKeyTests.test_reprPublicECDSA+s  $*%%,,.. / / F   / /- / / rc|ttj|jt djditjdS)zm The repr of a L{keys.Key} contains all the OpenSSH format for an ECDSA private key. a Nr*) rSrrr-r7rrrr6rMs rtest_reprPrivateECDSAzKeyTests.test_reprPrivateECDSA?st  $*%% & & F    / /- / /     rc|ttj|jt ddS)zn The repr of a L{keys.Key} contains all the OpenSSH format for an Ed25519 public key. z N)rSrrr-r>rqrrMs rtest_reprPublicEd25519zKeyTests.test_reprPublicEd25519Us[  $/**1133 4 4    rc|ttj|jt ddS)zo The repr of a L{keys.Key} contains all the OpenSSH format for an Ed25519 private key. a N)rSrrr-r>rrMs rtest_reprPrivateEd25519z KeyTests.test_reprPrivateEd25519gsO  $/** + +         r)Z__name__ __module__ __qualname__r skipCryptographyrrHrNrUrnrzrrrrrrrrrrrrrrrrrrrrrrrrrrr rrrr r,rr0r3r6r8rHrJrNrRrXr\r^rbrdrgrmrorwrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr*rrrr*s=,=,=,~    D D DAHAHAHFTTT0444(999)))666###J       . $ $ $   0   ,                       &g g g R    ... ' ' ' & & &555                @@@(UUU0JJJ777&777.5554 ? ? ?XXX   ,   *XXX<   $           ,     555   "   "   (   .<<<   "   $       $       $NNN&NNNNNNNNNNNNNNN   (XXX   $   $   $555;;;*555   *======BBBN N N `   >   (   ,   "     rrc,eZdZdZeeZdZdZdZ dS)PersistentRSAKeyTestsz1 Tests for L{keys._getPersistentRSAKey}. Nc<t|}|d}tj|d}||d||dS)z L{keys._getPersistentRSAKey} will put the key in C{directory}/C{filename}, with the key length of C{keySize}. mykey.pemrQkeySizeN) rrBchildr_getPersistentRSAKeyrSrTr|existsrGtempDirrCrs rtest_providedArgumentsz,PersistentRSAKeyTests.test_providedArgumentss 4;;==))-- ,,'>>> T*** (()))))rc0t|}|d}tj|d}||d||| }tj|d}||d|| |dS)zm L{keys._getPersistentRSAKey} will not regenerate the key if the key already exists. rrQrrPN) rrBrrrrSrTr|r getContent)rGrrCr keyContents rtest_noRegenerationz)PersistentRSAKeyTests.test_noRegenerations 4;;==))-- ,,'>>> T*** (()))'')) '>>> T*** ++--z:::::rct|}|d}tj|d}d|_||ddS)z If the key generated by L{keys.getPersistentRSAKey} is set to None the key size should then become 0. rrQrNr)rrBrrrr0rSrTrs rtest_keySizeZeroz&PersistentRSAKeyTests.test_keySizeZerosj 4;;==))-- ,,'>>> Q'''''r) rrr__doc__r rrrrrr*rrrr~sX * * *;;;& ( ( ( ( (rr)!rrrKtextwraprtwisted.conch.testrtwisted.pythonrtwisted.python.filepathrtwisted.python.reflectr twisted.trialrr rcryptography.hazmat.backendsr r=r r>r twisted.conch.sshr rred25519_supportedrrTestCaserrr*rrrs  &&&&&&$$$$$$,,,,,,000000""""""}^,, 9 <<<<<<555555AAAAAA5555555555'));;==   Q Q Q Q Q x Q Q Q h21(1(1(1(1(H-1(1(1(1(1(r