+ h#cs$^RIHt^RIt^RIHt^RIHtHt^RIH t ^RI H t ^RI H t ^RIHt^R IHtHtHtHt]!R R ]44t!R R ]4t]!RR7!RR]44t]!RR7!RR]44t!RR4tR#)) annotationsN) dataclass)IntEnumunique)FidoU2FAttestation)ES256) CtapDevice)CTAPHID) ByteBuffer bytes2intwebsafe_decodewebsafe_encodecs&]tRt^)tRtRtRtRtRtR#)APDUzAPDU response codes.iiiijN) __name__ __module__ __qualname____firstlineno____doc__OKZUSE_NOT_SATISFIEDZ WRONG_DATA__static_attributes__r0/usr/lib/python3.14/site-packages/fido2/ctap1.pyr r )s BJrr cs0]tRt^2tRtRRRlltRtRtR#) ApduErrorzAn Exception thrown when a response APDU doesn't have an OK (0x9000) status. :param code: APDU response code. :param data: APDU response body. c V^8dQhRRRR/#)codeintdatabytesrZformat"r __annotate__ZApduError.__annotate__;sSrc sWnW nR#Nrr)selfrr&&&r__init__ZApduError.__init__;s   rc sRRVPR R\VP4R R2#)zAPDU error: 0xZ04XZ Zdz bytes of data)rlenrr$&r__repr__ZApduError.__repr__?s( #aDIIq/APPrr#N)r)rrrrrr&r*rrrrrr2sQrrF)Zinitcsa]tRt^Ct$RtR]R&R]R&R]R&R]R&RV3Rllt]R R l4tR R lt ] R Rl4t Rt V;t #)RegistrationDataa[Binary response data for a CTAP1 registration. :param _: The binary contents of the response data. :ivar public_key: Binary representation of the credential public key. :ivar key_handle: Binary key handle of the credential. :ivar certificate: Attestation certificate of the authenticator, DER encoded. :ivar signature: Attestation signature. r public_key key_handle certificate signaturecV^8dQhRR/#r_rrrr rr!RegistrationData.__annotate__Ts''%'rc s<\SV`4\V4pVPR4^8wd \ R4hVP ^A4VnVP VPR44VnVP ^4pV^,pV^8d.V^, pVP V4pW6, p\V4pW2P V4,Vn VP 4Vn R#)BzReserved byte != 0x05N) superr&r unpackZ ValueErrorreadr,r-r r.r/)r$r2readerZcert_bufZcert_lenZn_bytesZ len_bytes __class__s&& rr&ZRegistrationData.__init__Ts D! ==  %45 5 ++b/ ++fmmC&89;;q>A; d?oG G,I  !H +H#kk(&;;rcr0rreturnstrrrr rr!r3i$$S$rc \V4#)z6Websafe base64 encoded string of the RegistrationData.r r(r)rb64ZRegistrationData.b64hd##rc$V^8dQhRRRRRR/#)r app_paramr client_paramr;Nonerrr rr!r3ms!   U t rc s\P!VVVPVPVPVP 4R#)zVerify the included signature with regard to the given app and client params. :param app_param: SHA256 hash of the app ID used for the request. :param client_param: SHA256 hash of the ClientData used for the request. N)rZverify_signaturer-r,r.r/)r$rCrDr%rverifyZRegistrationData.verifyms6 ++   OO OO    NN  rcr)rrr<r;r+rrr rr!r3~s))C)$4)rc $V!\V44#)zParse a RegistrationData from a websafe base64 encoded string. :param data: Websafe base64 encoded string. :return: The decoded and parsed RegistrationData. r Zclsr&&rfrom_b64ZRegistrationData.from_b64}>$'((r)r.r-r,r/rrrrrZ__annotations__r&Zpropertyr@rFZ classmethodrKrZ __classcell__r9@rr+r+CsY''($$ ))rr+csa]tRt^t$RtR]R&R]R&R]R&RV3Rllt]R R l4tR R lt ] R Rl4t Rt V;t #) SignatureDatazBinary response data for a CTAP1 authentication. :param _: The binary contents of the response data. :ivar user_presence: User presence byte. :ivar counter: Signature counter. :ivar signature: Cryptographic signature. r user_presencecounterrr/cr0r1rrr rr!SignatureData.__annotate__s''%'rc s<\SV`4\V4pVPR4VnVPR4VnVP 4VnR#)r4z>IN)r5r&r r6rQrRr7r/)r$r2r8r9s&& rr&ZSignatureData.__init__sF D!#]]3/}}T* rcr0r:rrr rr!rSr=rc r>)z8str: Websafe base64 encoded string of the SignatureData.r?r(r)rr@ZSignatureData.b64rArcs(V^8dQhRRRRRRRR/#)rrCrrDr,r;rErrr rr!rSs) ? ? ?U ? ?RV ?rc sWR,,V,p\P!V4PW@P4R#)a=Verify the included signature with regard to the given app and client params, using the given public key. :param app_param: SHA256 hash of the app ID used for the request. :param client_param: SHA256 hash of the ClientData used for the request. :param public_key: Binary representation of the credential public key. :NiNN)rZ from_ctap1rFr/)r$rCrDr,Zms&&&& rrFZSignatureData.verifys2 R < / $++A~~>rcr)rrr<r;rPrrr rr!rSs))C)M)rc rG)zParse a SignatureData from a websafe base64 encoded string. :param data: Websafe base64 encoded string. :return: The decoded and parsed SignatureData. rHrIrJrrKZSignatureData.from_b64rLr)rRr/rQrMrNrOrrPrPsR L''$$ ?))rrPcs~]tRt^tRt]!RR]44tRRltRRRllt RR lt R R lt RR R llt Rt R#)Ctap1zdImplementation of the CTAP1 specification. :param device: A CtapHidDevice handle supporting CTAP1. cs"]tRt^t^t^t^tRtR#) Ctap1.INSrN)rrrrREGISTER AUTHENTICATEVERSIONrrrrINSrUs rrYcr0)rdevicerrrr rr!Ctap1.__annotate__szrc sWnR#r"rZ)r$rZrJrr&ZCtap1.__init__s rc s0V^8dQhRRRRRRRRRRRR/#) rclarinsp1p2rrr;rrr rr!r[s<!$.1;>JO rc  sH\P!RWW4^\V44V,R,pVPP \ P V4p\P!RVRR4^,pVRRpV\P8wd \W4hV#)aPacks and sends an APDU for use in CTAP1 commands. This is a low-level method mainly used internally. Avoid calling it directly if possible, and use the get_version, register, and authenticate methods if possible instead. :param cla: The CLA parameter of the request. :param ins: The INS parameter of the request. :param p1: The P1 parameter of the request. :param p2: The P2 parameter of the request. :param data: The body of the request. :return: The response APDU data of a successful request. :raise: ApduError z>BBBBBHsz>HNi) structpackr'rZZcallrZMSGr6r rr) r$r]r^r_r`rZapduresponseZstatuss &&&&&& r send_apduZCtap1.send_apdus {{9c3t9ELwV;;##GKK6tXbc]3A6} TWW F) ) rcr0r:rrr rr!r[s>>S>rc srVP\PPR7P 4#)z~Get the U2F version implemented by the authenticator. The only version specified is "U2F_V2". :return: A U2F version string. )r^)rdrTrYrXZdecoder(r)r get_versionZCtap1.get_versions( ~~%))"3"3~4;;==rcrB)rrDrrCr;r+rrr rr!r[s" * *U *u *AQ *rc s~W,pVP\PPVR7p\ V4#)zRegister a new U2F credential. :param client_param: SHA256 hash of the ClientData used for the request. :param app_param: SHA256 hash of the app ID used for the request. :return: The registration response from the authenticator. )r^r)rdrTrYrVr+)r$rDrCrrcs&&& rregisterZCtap1.registers3'>>eii&8&8t>D))rc s,V^8dQhRRRRRRRRRR/#) rrDrrCr- check_onlyZboolr;rPrrr rr!r[s<'''' '  '  'rc sW,\P!R\V44,V,pV'd^M^pVP\P P WeR7p\V4#)aAuthenticate a previously registered credential. :param client_param: SHA256 hash of the ClientData used for the request. :param app_param: SHA256 hash of the app ID used for the request. :param key_handle: The binary key handle of the credential. :param check_only: True to send a "check-only" request, which is used to determine if a key handle is known. :return: The authentication response from the authenticator. z>B)r^r_r)rarbr'rdrTrYrWrP)r$rDrCr-rgrr_rcs&&&&& r authenticateZCtap1.authenticatesZ"  $v{{4Z'I IJ V  TT>>eii&<&<>OX&&rr\N)rrrrr)F)rrrrrrrrYr&rdrerfrhrrrrrTrTs@  g  2> *''rrT)Z __future__rraZ dataclassesrZenumrrZ attestationrZcoserZctaprZhidrZutilsr r r r r Z Exceptionrrr+rPrTrrrris8# ! +HH7Q Q" @)u@)@)F ,)E,),)^P'P'r