+ +bc s ^RIt^RIHtHt^RIHt^RIHt^RIH t ^RI H t ^RI H t Ht^RIHt^R IHt^R IHt^R IHt^R IHtHt^R IHtHt!RR4t.t^RIHtHt]P=R4^RI H!t!H"t"]P=R4^RI#H$t$H%t%]&!]%RR4t']'f]h]P=R4^RI(H)t)H*t*]P=R4]!RR4t+]!RR4t,]!RR4t-]!RR4t.R]+!]]4R],!]!]"4R]-!]$]%4R].!])]*4/t/RRRRRRRR /t0!R!R"]4t1]!R#R$4t2RR%]2!R&R'R']1Pf4R(]2!R)R'R']1Ph4R*]2!R+R'R']1Ph4R,]2!R-R.R.]1Ph4/RR/]2!R0R'R']1Ph4R1]2!R2R'R']1Pj4R,]2!R3R.R.]1Pj4R4]2!R5R.R.]1Pj4R6]2!R7R.R.]1Pj4R8]2!R9R.R.]1Pj4R:]2!R;R.R.]1Pj4R<]2!R=R.R.]1Pj4R>]2!R?R.R.]1Pl4/ RR@]2!RAR.R']1Ph4/RR%]2!R&R'R']1Pf4R(]2!RBR'R']1Ph4R,]2!RCR.R.]1Ph4//t7RD]2!RER'RR4RF]2!RGR'RR4RH]2!RIR'RR4RJ]2!RKR'RR4RL]2!RMR'RR4RN]2!ROR'RR4RP]2!RQR'RR4RR]2!RSR'RR4RT]2!RUR'RR4/ t8RVRWRXRYRZR[R\R]RR^RR_RR`RRa/t9RbRcRdRe/t:RfRgRhRiRjRkRlRmRnRoRpRqRrRsRtRu/t;RvRVRwRXRxRZR\R\/ttER?tFR@tGV3RAltH]RB4tIRCtJRDtKVtLV;tM#)KJWKizJSON Web Key object This object represents a Key. It must be instantiated by using the standard defined key/value pairs as arguments of the initialization function. c s<\\V` 4RVnRVnRV9dVP !R/VBR#V'dVP !R/VBR#R#)aCreates a new JWK object. The function arguments must be valid parameters as defined in the 'IANA JSON Web Key Set Parameters registry' and specified in the :data:`JWKParamsRegistry` variable. The 'kty' parameter must always be provided and its value must be a valid one as defined by the 'IANA JSON Web Key Types registry' and specified in the :data:`JWKTypesRegistry` variable. The valid key parameters per key type are defined in the :data:`JWKValuesRegistry` variable. To generate a new random key call the class method generate() with the appropriate 'kty' parameter, and other parameters as needed (key size, public exponents, curve types, etc..) Valid options per type, when generating new keys: * oct: size(int) * RSA: public_exponent(int), size(int) * EC: crv(str) (one of P-256, P-384, P-521, secp256k1) * OKP: crv(str) (one of Ed25519, Ed448, X25519, X448) Deprecated: Alternatively if the 'generate' parameter is provided with a valid key type as value then a new key will be generated according to the defaults or provided key strength options (type specific). :param \**kwargs: parameters (otional). :raises InvalidJWKType: if the key type is invalid :raises InvalidJWKValue: if incorrect or inconsistent parameters are provided. Nrr!)r^rr_ _cache_pub_k _cache_pri_k generate_key import_key)rakwargsrbs&,rr_Z JWK.__init__&sS@ c4!#        ' '  OO %f %rc sV!4pRpVR,p\VRV,4pT!T4T# \\3dp\T4ThRp?ii;i)NrI _generate_%s)getattrKeyErrorAttributeErrorr])rrobjrIgenrBs&, rrZ JWK.generateOs_e --C#~34C F  .) - %1 , -s1A AAc sRpVPR4p\VRV,4pT!T4R# \\3dp\ T4ThRp?ii;i)Nrr)poprrrr])raparamsrIrrBs&, rrZJWK.generate_key[sX -**Z(C$ 45C F .) - %1 , -s$2A AAcsTpRV9dVPR4pV#RV9d,^RIHpVPVR,4pTP pV# \dp\ R4ThRp?ii;i)sizerL)JWAzInvalid 'alg' parameterN)rZ jwcrypto.jwarZinstantiate_algr ValueErrorZkeysize)rarZ default_sizerrrLrB&&& r _get_gen_sizeZJWK._get_gen_sizees| V ::f%D f_ C,))&-8;;D  C !:;B CsA A- A((A-csVPV^4p\P!V^,4pRVR&\V4VR&VP!R/VBR#)ir6rIrHNr!)rosZurandomrr)rarrkey&& r _generate_octZJWK._generate_octrsL!!&#.jj#u &s+s  !&!rcs^pVeV^,^,^,p\V4PR4PR4p\V4pW58d W5,pM V^,p\ \ VR,V,44#)rZLZ0xZ0)ZhexZrstripZlstriplenrr)raZiZbit_sizeZextendZhexiZhexl&&& r _encode_intZJWK._encode_intyst  !|)Q.F1v}}S!((.4y = NFAXF &3,*= >??rcsRpVPVR4pRV9dVPR4p\P!W#\ 44pVP !V3/VBR#)iiZpublic_exponentN)rrr generate_private_keyr_import_pyca_pri_rsa)rarZpubexprr&& r _generate_RSAZJWK._generate_RSAsX!!&$/  &ZZ 12F&&v_5FG !!#00rc s6VP4pVPRVPVPP4VPVPP 4VPVP 4VPVP4VPVP4VPVP4VPVP4VPVP4R7 VP!R/VBR#)r5) rIrArBr@rCrDrErFrGNr!) private_numbersupdaterpublic_numbersrArBr@rCrDZdmp1Zdmq1Ziqmprrarrpn&&, rrZJWK._import_pyca_pri_rsas  " r00223r00223rtt$rtt$rtt$(((   !&!rc sVP4pVPRVPVP4VPVP4R7VP !R/VBR#)r5)rIrArBNr!)rrrrArBrrrr_import_pyca_pub_rsaZJWK._import_pyca_pub_rsasY    ! rtt$rtt$  !&!rcs>VPR4pVfTpM VR8XdRpMTpV'd&TpVR8XdRpWT8wd\RV: RV: R24hVPR4pVeVeWb8wd\RV: RV: R24hVR 8Xd\P!4#VR 8Xd\P !4#VR 8Xd\P !4#VR8Xd\P!4#V\9d\V,#\R V,4h) r=zP-256KrQzCurve requested is "z", but key curve is "rqrIzCurve Requested is of type "z", but key curve is of type "rNrOrPzUnknown Curve Name [%s]) getr~r]r Z SECP256R1Z SECP384R1Z SECP521R1Z SECP256K1_OKP_CURVES_TABLE)rar9ctyper=ZcnameZccrvrIrr_get_curve_by_nameZJWK._get_curve_by_nameshhuo <E X  EE Dx"}%=A3'HIIhhuo ?u0S\ @Es"LM M G <<> ! g <<> ! g <<> ! k !<<> ! ' '$U+ +!";t"DE ErcsRpRV9dVPR4pRV9dVPR4pVPVR4p\P!V\ 44pVP !V3/VBR#)rNcurver=r4N)rrr rr_import_pyca_pri_ec)rarrcurve_fnrrr _generate_ECZJWK._generate_ECsn f JJw'E F?JJu%E**5$7%%h0AB   //rc sVP4pVPPPpVP R\ VPP ,VPVPPV4VPVPPV4VPVPV4R7VP!R/VBR#)r4)rIr=r>r?r@Nr!) rrrkey_sizerJWKpycaCurveMapr9rr>r?Z private_valuerrarrrr&&, rrZJWK._import_pyca_pri_ecs  "$$**33  /r0022H=r0022H=r//:   !&!rc sFVP4pVPPpVPR\VPP ,VP VPV4VP VPV4R7VP!R/VBR#)r4)rIr=r>r?Nr!) rrrrrr9rr>r?rrrr_import_pyca_pub_ecZJWK._import_pyca_pub_ecs|    !88$$  /rttX.rttX.  !&!rcsRV9d \R4hVPVR,R4pVPP4pVP!V3/VBR#)r=z)Must specify "crv" for OKP key generationr7N)r~rprivkeyr_import_pyca_pri_okp)rarrrrr _generate_OKPZJWK._generate_OKPsS  !"MN N**6%=%@'') !!#00rcs\P4F0wr#\WPVP34'gK.Vu# \ RV,4h)zInvalid OKP Key object %r)ritems isinstancepubkeyrr~)rarr9valrr_okp_curve_from_pyca_keyZJWK._okp_curve_from_pyca_keysG*002ID# CKK899 39C?@@rc sVPRVPV4\VP\P P \PP \P!444\VP4P\P P \PP 44R7VP!R/VBR#)r7)rIr=r@r>Nr!) rrr private_bytesrEncodingRaw PrivateFormat NoEncryption public_key public_bytes PublicFormatrrarr&&,rrZJWK._import_pyca_pri_okps --c2s00&&**++//**, ./s~~/<<&&****.. 01   !&!rc sVPRVPV4\VP\P P \PP 44R7VP!R/VBR#)r7)rIr=r>Nr!) rrrrrrrrrrrr_import_pyca_pub_okpZJWK._import_pyca_pub_okp sh --c2s//&&****.. 01   !&!rc s/p^pRVnRVn\VP44p\\P44F.pWQ9gK W,W%&WT9gKVP V4K VP R4pV\9d \V4h\\V,P44F7pWQ9gK W,W%&V^, pWT9gK&VP V4K \V,P4FwrWVP'dWR9d\RV,4hVP\P8XdWR9d\RV,4hVP\P 8XdWR9d\#W%,4VP\P&8XgKWR9gKVP)W%,4K VF pW,W%&K V^8Xd \R4hRV9dFVR,F8p ^p VR,Fp W8XgK V ^, p K V ^8wgK/\R 4h R V9doRV9dhR R .p .ROp VR ,R 8Xd#V FpWR,9gK\R4h M/VR ,R8Xd"V FpWR,9gK\R4h VP+4VP-RVR,4VP/V4R# \$dp\RT,4ThRp?ii;i \$dp\RT,4ThRp?ii;i)rNrIzMissing required value %szUnsupported parameter %s"%s" is not base64url encoded!"%s" is not Base64urlUInt encodedzNo Key Values foundrKzDuplicate values in "key_ops"rJrTrUrRzBIncompatible "use" and "key_ops" values specified at the same timerS)rVrWrXrYrZr[)rrrcreJWKParamsRegistryZremoverrdr]JWKValuesRegistryrrequiredr~typer8r<r:r Exceptionr; _decode_intZclear __setitem__r)rarZnewkeyZkey_valsZnamesr9rIrrBZkoZcZckoZsiglZenclrws&, rrZJWK.import_keys   V[[]#*//12D~%| mLL& 3 jj & & % %*3/4467D~%| A mLL& 8+3/557ID||| 2%&AD&HIIxx8///DN%&@4&GHHxx8<<'DN$V\2 xx8==(T^$$V\2!8.D!!);dBs0(L #M M+L>>M M)M$$M)c sV!4p\V4pTP!R/TBT# \d p\ThRp?ii;i)zCreates a RFC 7517 JWK from the standard JSON format. :param key: The RFC 7517 representation of a JWK. :return: A JWK object that holds the json key. :rtype: JWK Nr!)rrr~r)rrrZjkeyrBrr from_jsonZ JWK.from_jsonlsJe )s#D   )!q ( )s ( ?:?c sRVRJdVPV4#VPV4#)aExports the key in the standard JSON format. Exports the key regardless of type, if private_key is False and the key is_symmetric an exception is raised. :param private_key(bool): Whether to export the private key. Defaults to True. :return: A portable representation of the key. If as_dict is True then a dictionary is returned. By default a json string :rtype: `str` or `dict` T) _export_all export_public)ra private_keyas_dict&&&rexportZ JWK.export}s0 $ ##G, ,!!'**rc sHVP4pVRJdV#\V4#)awExports the public key in the standard JSON format. It fails if one is not available like when this function is called on a symmetric key. :param as_dict(bool): If set to True export as python dict not JSON :return: A portable representation of the public key only. If as_dict is True then a dictionary is returned. By default a json string :rtype: `str` or `dict` T)_public_paramsr)rarpub&& rrZJWK.export_publics)!!# d?J3rcsVP'g \R4h/p\pVFFpW#,P'gKW0P 49gK3VP V4W&KH \ VP R4,pVF0pW#,P'gKVP V4W&K2 V#)No public key availablerI) has_publicr]rpublicrerr)rarregr9r}rrZJWK._public_paramss !:; ;Dy99;& $CI 0Dy HHTN  rcsN/pVPV4VRJdV#\V4#)T)rr)rarr@rrrZJWK._export_alls(   d?H1~rc s^VP'dVPV4#\R4h)aYExport the private key in the standard JSON format. It fails for a JWK that has only a public key or is symmetric. :param as_dict(bool): If set to True export as python dict not JSON :return: A portable representation of a private key. If as_dict is True then a dictionary is returned. By default a json string :rtype: `str` or `dict` No private key available) has_privaterr]rar&&rexport_privateZJWK.export_privates-    ##G, ,788rcs^VP'dVPV4#\R4h)zNot a symmetric key) is_symmetricrr]rrrexport_symmetricZJWK.export_symmetrics+    ##G, ,233rcs8VP4p\R/VB#)Nr!)rr)rar& rrZ JWK.publics!!#zSzrc sVP'dR#\VPR4,pVF4pW,P'gKW P 49gK3R# R#)z4Whether this JWK has an asymmetric Public key value.FrITrrrrrerarr9rurrZJWK.has_publicsP    0DyDIIK$7rc sVP'dR#\VPR4,pVF4pW,P'dKW P 49gK3R# R#)z5Whether this JWK has an asymmetric Private key value.FrITrrrurrZJWK.has_privatesP    0D9### (;rc s*VPR4R8H#)z$Whether this JWK is a symmetric key.rIr6rrfrrrZJWK.is_symmetricsxx%''rc $VPR4#)z The Key typerIrrfrrkey_typeZ JWK.key_typesxxrc r)zNThe Key ID. Provided by the kid parameter if present, otherwise returns None. rMrrfrrkey_idZ JWK.key_ids xxrc sfVPR4R9d \R4hVPR4#)zThe Curve Name.rIzNot an EC or OKP keyr=)r4r7)rr]rfrr key_curveZ JWK.key_curves. 88E?- / !78 8xxrc s$VPV4#)aGets the Elliptic Curve associated with the key. :param arg: an optional curve name :raises InvalidJWKType: the key is not an EC or OKP key. :raises InvalidJWKValue: if the curve name is invalid. :return: An EllipticCurve object :rtype: `EllipticCurve` )r)raargrr get_curveZ JWK.get_curves&&s++rcsVPR4pV'dW18wd \W4hVPR4pV'd-\V\4'gV.pW$9d \ W$4hR#R#)rJrKN)rrmrrcrv)rarsryrJZopss&&& r_check_constraintsZJWK._check_constraintssahhuo 3<!%- -hhy! c4((e#))99$ rcs>\\\V44^4#)i)Zintrr )rarArrrZJWK._decode_ints7+A./44rcsVPVPR44pVPVPR44p\P!W4#)rBrA)rrr ZRSAPublicNumbers)rarBrArur _rsa_pub_nZJWK._rsa_pub_nsC   TXXc] +   TXXc] +##A))rc sVPVPR44pVPVPR44pVPVPR44pVPVPR44pVPVPR44pVPVPR44p\P!WW4WVVP 44#)rCrDr@rErFrG)rrr ZRSAPrivateNumbersr)rarCrDr@rErFrGs& r _rsa_pri_nZJWK._rsa_pri_n#s   TXXc] +   TXXc] +   TXXc] +   dhhtn -   dhhtn -   dhhtn -$$Q1"$//:KLLrcVPpVf.VP4P\44pWnV#r)rrrrrarHrr_rsa_pubZ JWK._rsa_pub,s7    9!,,_->?A ! rcrr)rrrrrrr_rsa_priZ JWK._rsa_pri3s7    9!--o.?@A ! rcsVPVPR44pVPVPR44pVPVRR7p\P!W#V4#)r>r?r4)r)rrrr ZEllipticCurvePublicNumbers)rarr>r?rrr _ec_pub_nZ JWK._ec_pub_n:sZ   TXXc] +   TXXc] +**5*=,,Q8<)rrrrrr~r r)rarHr=rrBr>& r_okp_pubZ JWK._okp_pubRs    9((5/C I*3/66!#/A((+A !   I%&:S&@AqH IA-- B8B  Bcr)Nr=rr@)rrrrrr~r r )rarHr=rrBr@rr_okp_priZ JWK._okp_pri`s    9((5/C I+C088!#/A**1-A !   I%&:S&@AqH IrcVPR4pVR8XdVPR4#VR8XdVP4#VR8XdVPV4#VR8XdVP4#\hrIr6rHr5r4r7)rrrrrrarZktyperr_get_public_keyZJWK._get_public_keynf E>88C= e^==? " d]<<$ $ e^==? "% %rcrr)rrrrrrrr_get_private_keyZJWK._get_private_key{rrc sZVPR\\P444pV\JdV.pVf3VPR4R8XdVPR4#\ W4hVR8Xd$VP RV4VP V4#VR8Xd$VP RV4VPV4#VR8XgVR 8Xd$VP R V4VPV4#VR 8XgVR 8Xd$VP R V4VP V4#\h) aGet the key object associated to the requested operation. For example the public RSA key for the 'verify' operation or the private EC key for the 'decrypt' operation. :param operation: The requested operation. The valid set of operations is available in the :data:`JWKOperationsRegistry` registry. :param arg: An optional, context specific, argument. For example a curve name. :raises InvalidJWKOperation: if the operation is unknown or not permitted with this key. :raises InvalidJWKUsage: if the use constraints do not permit the operation. :return: A Python Cryptography key object for asymmetric keys or a baseurl64_encoded octet string for symmetric keys rKrIr6rHrTrRrUrVrXrSrWrY) rrcrzrervrrrr)raryrZvalidops&&& r get_op_keyZJWK.get_op_keys&88I !6!;!;!=>@ 4  zH  xx%'xx}$%i: : &  # #E9 5((- - ( "  # #E9 5'', , ) #yI'=  # #E9 5'', , ) #yK'?  # #E9 5((- -% %rcsz\V\P4'dVPV4R#\V\P4'dVP V4R#\V\ P4'dVPV4R#\V\ P4'dVPV4R#\V\\34'dVPV4R#\V\\34'dVP!V4R#\#RV,4h)zUnknown key object %rN)rr Z RSAPrivateKeyrZ RSAPublicKeyrr ZEllipticCurvePrivateKeyrZEllipticCurvePublicKeyrr-r/rr,r.rr~rarrrimport_from_pycaZJWK.import_from_pycas c3,, - -  % %c * S-- . .  % %c * R77 8 8  $ $S ) R66 7 7  $ $S ) /A B B  % %c * .? @ @  % %c *!"9C"?@ @rc s\P!W\4R7pTPT4TfTP4pTPRT4R# \dpTeTh\P!T\4R7pRp?Lp \dJ\ P !T\4R7pTP4pRp?L \dThi;ii;iRp?ii;i)aDImports a key from data loaded from a PEM file. The key may be encrypted with a password. Private keys (PKCS#8 format), public keys, and X509 certificate's public keys can be imported with this interface. :param data(bytes): The data contained in a PEM file. :param password(bytes): An optional password to unwrap the key. )passwordbackendNr rM) rZload_pem_private_keyrrZload_pem_public_keyrZload_pem_x509_certificaterr thumbprintr)radatar rMrrBZcerts&&&& rimport_from_pemZJWK.import_from_pems 441BDC" c" ;//#C $% # #77/"35 99o&79D//+C!G   sA A C.&C)- B C&0CC)C""C&&C))C.c sj\PPpV'dVP'g \ R4h\P P pVf\P!4pMI\V\4'd\P!V4pMVRJd \R4h\R4hVP4PW4VR7#VP'g \ R4h\P P"pVP%4P'W4R7#)a Exports keys to a data buffer suitable to be stored as a PEM file. Either the public or the private key can be exported to a PEM file. For private keys the PKCS#8 format is used. If a password is provided the best encryption method available as determined by the cryptography module is used to wrap the key. :param private_key: Whether the private key should be exported. Defaults to `False` which means the public key is exported by default. :param password(bytes): A password for wrapping the private key. Defaults to False which will cause the operation to fail. To avoid encryption the user must explicitly pass None, otherwise the user needs to provide a password in a bytes buffer. :return: A serialized bytes buffer containing a PEM formatted key. :rtype: `bytes` rFz+The password must be None or a bytes stringz!The password string must be bytes)encodingformatZencryption_algorithmr)rr)rrZPEMrr]rZPKCS8rrbytesZBestAvailableEncryptionr TypeErrorrrrrZSubjectPublicKeyInforr)rarr rBZfZarr export_to_pemZJWK.export_to_pems"  " " & & ###$%?@@++11A!..0He,,!99(CU" !NOO CDD((*8819> >???$%>??**??A'')666L Lrc6V!4pVPV4V#r)r)rrrrr from_pycaZ JWK.from_pyca se S! rc s6V!4pVPW4V#)aCreates a key from PKCS#8 formatted data loaded from a PEM file. See the function `import_from_pem` for details. :param data(bytes): The data contained in a PEM file. :param password(bytes): An optional password to unwrap the key. :return: A JWK object. :rtype: JWK )r)rr r rrrfrom_pemZ JWK.from_pemse D+ rc sRVPR4/p\VR,,P4F,wr4VP'gKVPV4W#&K. \P !V\ 4R7pVP\\V4PR444\VP44#)zReturns the key thumbprint as specified by RFC 7638. :param hashalg: A hash function (defaults to SHA256) :return: A base64url encoded digest of the key :rtype: `str` rIr utf8) rrrrrZHashrrrrencoderZfinalize)raZhashalgtr9rZdigests&& rr ZJWK.thumbprintsDHHUO $*1U84::!);dBs0&G=H#= H HH # I.IIc l\V/VBP4Fwr4VPW44K R#z> :param \*args: arguments :param \**kwargs: keyword arguments NdictrrrarrrHr|&*, rrZ JWK.update1 $)&)//1DA   Q "2rcnWP49dVPW4VPV4#rrerrrarZdefaultrr setdefaultZJWK.setdefault* iik !   S *xx}rcs<VPV4pVf \V4hVR8XdJ\\V,P 44F!pVPV4fK\R4h VPR4pVe8V\\V,P 449dRVnRVn\\V`'V4R#)NrIz#Cannot remove 'kty', values present) rrrcrrerrr^r __delitem__)rarZparamr9rIrbs&& rr)ZJWK.__delitem__s =4. 5=.u5::<=88D>-"#HII>hhuo ?tt,=c,B,G,G,I'JJ $D  $D  c4$T*rcs\V\4'g\#VP4VP48H;'d$VP R4VP R48H#rM)rrZNotImplementedr r)raZotherrr__eq__Z JWK.__eq__sU%%%! ! E$4$4$6600 HHUOuyy/ / 0rcsV\VP4VPR434#r*)Zhashr rrfrr__hash__Z JWK.__hash__s!T__&899rcsV\P49d&WP49dVPV4#VPR4pVeOV\\V,P449d&WP49dVPV4#\ h \ d\ T4Rhi;i)rIN)rrerrcrrr)rarrIrr __getattr__ZJWK.__getattr__s 1(--//99;&88D>)((5/C4 1# 6 ; ; =>>yy{*#xx~-N 1 &D 0 1s=B)A"B)#B))Ccsz<V\P49dVPW4\\P44F?pV\\ V,P449gK.VPW4KA \ \V`#W4R# \d\T4Rhi;ir) rrerrcrdrr^r __setattr__rr)rarr`r9rbs&&& rr.ZJWK.__setattr__s 1(--//  --22454 1$ 7 < < >??$$T16 #t ( 5 1 &D 0 1sB"AB"8(B""B:c sV!4pRR/p\VPR44VR&TP!R/TBT# \d p\ThRp?ii;i)zCreates a symmetric JWK key from a user password. :param password: A password in utf8 format. :return: a JWK object :rtype: JWK rIr6rrHNr!)rrrr~r)rr rrrBrr from_passwordZJWK.from_passwords`e )*8??6+BCF3K     )!q ( )s> A AAcsl/pVPRR4VR&VP4VR&\V4#)rMzMissing Key IDr )rr r)ra repr_dictrr__repr__Z JWK.__repr__s9 88E+;< %"&//"3 ,9%%r)rrrTF)F)NN)FF)r\)Nr"r#r$r%rir_r&rrrrrrrrrrrrrrrrrrrrrrrrrZpropertyrrrr rrrrrrrrrrrrrrrrrrrrrrrrrSHA256r rrrr'r)r+r,r-r.r/r1r'r(rjrkrlrrrs;'&R   " @1 ""&FP 0 " "1A ""Un +( "  94 ((   , , :5* M= H   & &(&TA %B$ML   "(3"M.72r# +$0: 1 1$&&rrcs&a]tRtRtoRtRtVtR#)_JWKkeysic sr\V\4'g \R4h\P W4R#)zrAdds a JWK object to the set :param elem: the JWK object to add. :raises TypeError: if the object is not a JWK. z#Only JWK objects are valid elementsN)rrrsetaddraZelemrrr6Z _JWKkeys.adds)$$$AB B rr!N)r"r#r$r%r6r'r(r)r+rr4r4s  rr4csaa]tRtRtoRtV3RltRtRtV3RltRt RRlt R t RR lt R t ]R 4tR tRtRtRtVtV;t#)JWKSetizA set of JWK objects. Inherits from the standard 'dict' builtin type. Creates a special key 'keys' that is of a type derived from 'set' The 'keys' attribute accepts only :class:`jwcrypto.jwk.JWK` elements. cs<\\V` 4\\V`R\ 44VP !V/VBR#reN)r^r8r_rr4r)rarrrbs&*,rr_ZJWKSet.__init__s4 fd$& fd' ; T$V$rcs0VR,P4#re)__iter__rfrrr;ZJWKSet.__iter__sF|$$&&rcs2VR,PV4#r:) __contains__rrrr<ZJWKSet.__contains__sF|((--rcs<VR8Xd1\V\4'gVR,PV4R#\\V`W4R#r9)rr4r6r^r8r)rarrrbrnrrZJWKSet.__setitem__s7 &=C!:!: L  S ! &$ +C 5rc rrrr!r"rrZ JWKSet.updater#rcr$rr%r&rrr'ZJWKSet.setdefault r(rcs6VR,PV4R#r9)r6r7rrr6Z JWKSet.adds V rc  s/pVP4F?wrEVR8Xd0.pVF%pVPVPVRR74K' TpWSV&KA VRJdV#\V4#)aExports a RFC 7517 key set. Exports as json by default, or as dict if requested. :param private_key(bool): Whether to export private keys. Defaults to True. :param as_dict(bool): Whether to return a dict instead of a JSON object :return: A portable representation of the key set. If as_dict is True then a dictionary is returned. By default a json string :rtype: `str` or `dict` reT)r)rr{rr)raZ private_keysrZexp_dictrHr|rejwks&&& rrZ JWKSet.exportsoJJLDAF{CKK < FGQK ! d?O8$$rc  s \V4pRT9d\hTP4F<wrETR8Xd-TF$pTR,P \ R/TB4K& K8YPT&K> R# \d p\ThRp?ii;i)zzImports a RFC 7517 key set using the standard JSON format. :param keyset: The RFC 7517 representation of a JOSE key set. Nrer!)rrr~rr6r)rakeysetZjwksetrBrHr|r=s&& r import_keysetZJWKSet.import_keyset+s  ) (F  ! !LLNDAF{CL$$SZ3Z0Q #  )!q ( )s A,, B7A>>Bc r)zCreates a RFC 7517 key set from the standard JSON format. :param keyset: The RFC 7517 representation of a JOSE key set. :return: A JWKSet object. :rtype: JWKSet )r?)rr>rrrrZJWKSet.from_json?se &! rc sVPV4p\V4^8d \R4h\V4^,# \dR#i;i)zhGets a key from the set. :param kid: the 'kid' key identifier. :return: A JWK from the set :rtype: JWK z3Duplicate keys found with requested kid: 1 expectedN)get_keysrr~ZtupleZ IndexError)rarMrerrget_keyZJWKSet.get_keyLsT}}S! t9q=!EG G ;q> !  sA AAc slVR,Uu0uFq"PR4V8XgKVkK up#uupi)zxGets keys from the set with matching kid. :param kid: the 'kid' key identifier. :return: a List of keys :rtype: `list` rerMr)rarMrrrr@ZJWKSet.get_keys\s/ $F|E|wwu~/D|EEEs11cs/pVP4F7wr#VR8Xd(.pVFpVP\V44K TpW1V&K9 \V4#r:)rr{Zreprr)rar0rHr|rer=rrr1ZJWKSet.__repr__esX JJLDAF{CKKS *aL !9%%rr!rr2)r"r#r$r%rir_r;r<rrr'r6rr?r&rrAr@r1r'r(rjrkrlrr8r8s` % '.6 # %4(   F & &rr8)PrZbinasciirrZ collectionsrZenumrZ cryptographyrZcryptography.hazmat.backendsrZcryptography.hazmat.primitivesrrZ)cryptography.hazmat.primitives.asymmetricr r r Zjwcrypto.commonr r rrrrZImplementedOkpCurvesZ1cryptography.hazmat.primitives.asymmetric.ed25519r,r-r{Z ImportErrorZ/cryptography.hazmat.primitives.asymmetric.ed448r.r/Z0cryptography.hazmat.primitives.asymmetric.x25519r0r1rZ priv_bytesZ.cryptography.hazmat.primitives.asymmetric.x448r2r3Z_Ed25519_CURVEZ _Ed448_CURVEZ _X25519_CURVEZ _X448_CURVErrdr8Z JWKParameterr9r:r;r<rrZJWKEllipticCurveRegistryrrrzrr3ZSHA384ZSHA512ZSHA3_224ZSHA3_256ZSHA3_384ZSHA3_512ZBLAKE2sZBLAKE2brr]rmrvr~r rr5r4r8r!rrrBs '"8@89!'>4 " " 1 */( 0)+?FJ).' I'78'#34 8%56 !12  ~.0AB \./ : mO-=> K ~ 6 *5++-" *t*+'IJ  |GT4? \.$hll C \.$hll C \+UE8<< H     \)T4 > \*dD(-- @ \,eUHMM J \.uhmm L \/x}} M l6 %8 l7 %8 l2 %8 |/!5(*>*>@   \+udHLL A   |GT4? \,dHLL A \-x|| D 3># < D$ 5 <($d ; |,dD$? < T4 6 <$d 3 < T4 6 <14t D <<dD * C!4/ '$]#]#]')?%'N#%J$&A"$=?*3' !C!#D"$5"%A"M$'A$l%'L N% - v}}44$$$ v}} v}}!!!!6>>"%46>>"%-)& 7[ 7JkJ2N+N6kz&$z&z s E&TE&y%1/01/-N.O/0.O/0.,M-N.sH"Q<Q)Q+Q= QQ Q('Q(+ Q:9Q:= R  R