+ xiTcsRt^RIHt^RIt^RIt^RIHt^RIHtH t ]'d ^RI H t ^RI H t RRltRR R lltRR R lltRR RlltRRRllt!RR4t!RR4tR#)zModule that handles encrypted PSKC values. This module defines an Encryption class that handles the encryption key, algorithms and decryption. The encryption key can be derived using the KeyDerivation class. ) annotationsN)Sequence) TYPE_CHECKINGType)BlockCipherAlgorithm)PSKCc V^8dQhRRRR/#) algorithm str | Nonereturn Sequence[int]Zformat"4/usr/lib/python3.14/site-packages/pskc/encryption.py __annotate__r*sGGZGMGcs^RIHpVf V!R4hVPR4'g/VPR4'gVPR4'd\VRR4^,.#VPR4'gVPR4'd^^.#VPR 4'g/VPR 4'gVPR 4'd\VRR4^,.#VPR 4'g/VPR 4'gVPR4'd\VRR4^,.#VPR4'g/VPR4'gVPR4'd\VRR4^,.#V!RV,4h)z=Return the possible key lengths for the configured algorithm.DecryptionErrorNNo algorithm specified #aes128-cbc #aes192-cbc #aes256-cbc#tripledes-cbc #kw-tripledes #kw-aes128 #kw-aes192 #kw-aes256#camellia128-cbc#camellia192-cbc#camellia256-cbc#kw-camellia128#kw-camellia192#kw-camellia256Unsupported algorithm: %riii)pskc.exceptionsrendswithint)rr& ralgorithm_key_lengthsr(*s/677   M * *   } - -   } - -Ib$%*++   , - -    / /Bx   L ) )   | , ,   | , ,IbcN#q())   / 0 0   1 2 2   1 2 2Ib$%*++   . / /   0 1 1   0 1 1IbcN#q())9IEFFrc ,V^8dQhRRRRRRRRRR/#) rrType[BlockCipherAlgorithm]keybytes ciphertextiv bytes | Noner r r rrrrFs:11)1 11  1  1rcs^RIHp^RIHp^RIHpHp^RIHpV'g,VRVP^,pW P^,RpV!V!V4VPV4V!4R7p V P4p VPVP4P4p V PV PV4V P4,4V P4,# \ d T!R4hi;i)6Decrypt the ciphertext and return the plaintext value.default_backendpaddingCiphermodesrNZbackendzInvalid padding)cryptography.hazmat.backendsr2cryptography.hazmat.primitivesr4&cryptography.hazmat.primitives.ciphersr6r7r$r block_sizeCBC decryptorPKCS7unpadderupdatefinalize ValueError) rr+r-r.r2r4r6r7rcipherr>r@s &&&& r _decrypt_cbcrEFs=6D/ 2--2 3 4 4 9 :; # " /@BF  "I}}Y112;;=H1   Z (     !"$,$5$5$78 8 1/001s -A C77D c ,V^8dQhRRRRRRRRRR/#) rrr r+r/r-r,r.r r r rrrr`s0""z" "%"\"ej"rc ^RIHp^RIHpVf V!R4hVf V!R4h\ V4\ V49d V!R4hVP R4'g/VP R4'gVP R4'd\VPWV4#VP R 4'd\VPWV4#VP R 4'g/VP R 4'gVP R 4'd^R I H pV!W!4#VP R4'd^R I H pV!W!4#VP R4'g/VP R4'gVP R4'd\VPWV4#VP R4'g/VP R4'gVP R4'd^R I H pV!W!VPR7#Qh)r0 algorithmsrNo key availablerInvalid key lengthrrrrrrr)unwraprrrrr r!r"r)r;rIr$rlenr(r%rEAES TripleDESpskc.crypto.aeskwrLpskc.crypto.tripledeskwCamellia)rr+r-r.rIrZ easkw_unwrapZtripledeskw_unwrap&&&& rdecryptrU`sA/ {011677 3x,Y77233-((   } - -   } - -JNNCR@@   , - -J00#2FF   L ) )   | , ,   | , ,<J,,   O , ,H!*22   / 0 0   1 2 2   1 2 2J//"EE   . / /   0 1 1   0 1 1<Jz7J7JKK5rc r)) rrr*r+r, plaintextr.r/r r r rrrrs2  6 U u Zf rw rcs^RIHp^RIHp^RIHpHpT;'g(\P!VP^,4pV!V!V4VPV4V!4R7pVP4p VPVP4P4p W9PV PV4V P4,4,V P4,#)[a-z0-9-]+)$ZhashzUnsupported PRF: %rzIncomplete PBKDF2 configurationrz%Pseudorandom function unsupported: %r)Zhashlibrr$rrreZsearchZgroupZallrgrirhZ isinstanceZtypeZencoderC)rlrrrprfZmatchs&& r derive_pbkdf2ZKeyDerivation.derive_pbkdf2s '6 ???II4dooGEkk&)()DOO;==H..0F0F**,--$%FG G(DI..(H Kt//1G1G&&( ( K$7$//IK K Ks (D%D)crrr r rrrrds > >6 >5 >rc s^RIHpVPf V!R4hVPPR4'dVP V4#V!RVP,4h)zDerive a key from the password.rrz#pbkdf2r#)r$rrr%r)rlrrr~rderiveZKeyDerivation.derivesZ6 >> !$%=> > >> " "9 - -%%h/ /$+dnn<> >rNcs4V^8dQhRRRRRRRRR RR R R R /#)rrrsaltr/ salt_lengthr& key_length int | None iterationsrr r r,r r rrrrd sP,,),, ,  ,  ,, ,rc sRVnVf\P!V4pW nV'dWPnMVPfRVnV'dW@nV'dW`nVPV4#)z+Configure PBKDF2 key derivation properties.Zpbkdf2i)rrXrYrgrhrirr)rlrrrrrrs&&&&&&&r setup_pbkdf2ZKeyDerivation.setup_pbkdf2 sc" <::k*D %/ "  # # +%+D " %/ " !O!!(++r)rfrjrrhrirrg)NiNNN)__name__ __module__ __qualname____firstlineno____doc__rnpropertyrsetterrrrr__static_attributes__r rrr`r`s} , 55 66K6 >,,rr`cs]tRtRtRtRRlt]RRl4t]PRRl4t]R R l4t ] PR R l4t ]R Rl4t RRlt RRRRRRRRRR/RRllt RRRRRRRRRRRRRR/RRllt RRRRRRRRRRRRRRR^RRR R/ R!R"llt]R#R$l4tR,R%R&lltR'R(ltR)R*ltR+tR#)- Encryptioni%aClass for handling encryption keys that are used in the PSKC file. Encryption generally uses a symmetric key that is used to encrypt some of the information stored in PSKC files (typically the seed). This class provides the following values: id: identifier of the key algorithm: the encryption algorithm used key_names: list of names for the key key_name: (first) name of the key (usually there is only one) key: the key value itself (binary form) iv: optional initialization vector for CBC based encryption fields: a list of Key fields that will be encrypted on writing The key can either be assigned to the key property or derived using the `derive_key()` method. cr)rpskcrr rcr r rrrEncryption.__annotate__8s$$T$d$rc sWnRVnRVn.VnRVnRVn\ 4Vn.VnR#re) ridrf key_namesr+r.r` derivationfields)rlr&&rrnZEncryption.__init__8s: "&*$&!% $'/!# rcraror r rrrrCs*rc sPVP'dVP^,#R#)z$Provide the name of the (first) key.Nrrkrmrkey_nameEncryption.key_nameBs >>>>>!$ $rcrrur r rrrrJs  j T rc s8V'd V.VnR#.VnR#rer)rlrvrrrrIs #WDNDNrcraror r rrrrQrprc rq)z&Provide the encryption algorithm used.NrrrkrmrrEncryption.algorithmPrtrcrrur r rrrrXrwrc rxryr{r}r~rrrWrrcra)rr Zboolr r rrrr]s  d rc s^RIHpVPPF>pVPVP VP 3VPVP3K@ R# TdR#i;i)z5Test whether the PSKC file requires a decryption key.rTF) r$rrkeyssecretcounter time_offset time_interval time_drift)rlrr+s& r is_encryptedZEncryption.is_encrypted\s_ 4 yy~~ CKK8!!3>>1&   sAA""A-,A-cr)rrrr rcr r rrrrhs 4 4#: 4t 4rc sFVPPV4VnR#)aDerive a key from the password. The supplied password, together with the information embedded in the PSKC file (generally algorithm, salt, etc.) is used to create a decryption key. This function may raise a :exc:`~pskc.exceptions.KeyDerivationError` exception if key derivation fails. N)rrr+)rlrrr derive_keyZEncryption.derive_keyhs??))(3rrNrrrrc s0V^8dQhRRRRRRRRRRRR /#) rrr rrrlist[str] | Nonerr rcr r rrrrssH"" " "  " $ "!" "rc s^VeWnVeW nVeW0nVeW@nVeWPnVP'gRVnVP'g R.VnVPP R4'd'VP PP4R#R#)Nz aes128-cbcrz-cbc) rrrrrr%rmacZsetup)rlrrrrrs&$$$$$r_setup_encryptionZEncryption._setup_encryptionss >G  &N  $M  &N   K~~~)DN{{{#*DK >> " "6 * * IIMM   ! +rr+rcs8V^8dQhRRRRRRRRRRR R R R R R /#)rr+r/rr rrrrrrrr rcr r rrrrs\---  -  -  --$-!- -rc sVPVVVVVR7V'g4T;'gVPR,p\P!V4pWnR#)aConfigure pre-shared key encryption when writing the file. :param key: the encryption key to use :param id: encryption key identifier :param algorithm: encryption algorithm :param key_length: encryption key length in bytes :param key_name: a name for the key :param key_names: a number of names for the key :param fields: a list of fields to encrypt This is a utility function to easily set up encryption. Encryption can also be set up by manually by setting the correct :class:`~pskc.encryption.Encryption` properties. This method will generate a key if required and set the passed values. By default AES128-CBC encryption will be configured and unless a key is specified one of the correct length will be generated. If the algorithm does not provide integrity checks (e.g. CBC-mode algorithms) integrity checking in the PSKC file will be set up using :func:`~pskc.mac.MAC.setup()`. By default only the :attr:`~pskc.key.Key.secret` property will be encrypted when writing the file. rrrrrN)rr(rXrYr+)rlr+rrrrrrs&$$$$$$$rsetup_preshared_keyZEncryption.setup_preshared_keysWF   #EEt'A'A"'EJ**Z(CrrrrrcsHV^8dQhRRRRRRRRRRR R R RR R RRRR RRRR/ #)rrrrr rrrrrrrrr/rr&rrr rcr r rrrrs1 1 )1   1  1  1 $1 1 !1 1 1 1 1  1 rc  sVPVVVVVR7VPPTTT T;'gVPR,V V R7VnR#)aConfigure password-based PSKC encryption when writing the file. :param password: the password to use (required) :param id: encryption key identifier :param algorithm: encryption algorithm :param key_length: encryption key length in bytes :param key_name: a name for the key :param key_names: a number of names for the key :param fields: a list of fields to encrypt :param salt: PBKDF2 salt :param salt_length: used when generating random salt :param iterations: number of PBKDF2 iterations :param prf: PBKDF2 pseudorandom function Defaults for the above parameters are similar to those for :func:`setup_preshared_key()` but the password parameter is required. By default 12000 iterations will be used and a random salt with the length of the to-be-generated encryption key will be used. r)rrrrrNr)rrrr(r+) rlrrrrrrrrrrrs &&$$$$$$$$$$rrZEncryption.setup_pbkdf2siF   ??// #!CCT%?%?%C! 0 rcra)rr r r r rrrrs55}5rc s,\VP4#)z>Provide the possible key lengths for the configured algorithm.)r(rrkrmrr(Z Encryption.algorithm_key_lengthss%T^^44rcs$V^8dQhRRRRRR/#)r cipher_valuer,rr r r r rrrrs'JJ%JJJRWJrc sl\T;'g VPVPWP4#)z8Decrypt the cipher_value and return the plaintext value.)rUrr+r.)rlrrs&&&r decrypt_valueZEncryption.decrypt_values,  ' '<J Jrcs V^8dQhRRRR/#)rrVr,r r r rrrrsurc s\VPVPWP4pVP'dV\ VP4RpV#)z7Encrypt the provided value and return the cipher_value.N)r_rr+r.rN)rlrVrr~r encrypt_valueZEncryption.encrypt_values?t~~txxGGL 777'DGG 6Lrcrarbr r rrrrs**4*rc sTVPPFXpVPVnVPVnVPVnVP VnVP VnKZ RVPPnRVPPn RVn RVn.Vn RVn RVn .Vn RVPnRVPnRVPnRVPnRVPnR#)zDecrypt all values and remove the encryption from the PSKC file. This can be used to read and encrypted PSKC file, decrypt the file, remove the encryption and output an unencrypted PSKC file or to replace the encryption algorithm. N)rrrrrrrrrr+rrr.rrrgrhrir)rlr+r'rremove_encryptionZEncryption.remove_encryptions99>>CCJ++CK!ooCO # 1 1C  ^^CN "#'    $(!&*#,0),0)%)"r) rfrrrrr.r+rrrre)rrrrrrnrrrrrrrrrr(rrrrr rrrr%s$$ __   55   4""!% " $ " '+ "$(":-!- - !% - "& - $-'+-$(-^1  1 !% 1 $ 1 '+1 "&1 $(1 "1 1 "&1 1 f55J **rrre)rZ __future__rrXrZcollections.abcrZtypingrrr;rrrr(rErUr\r_r`rr rrrsY*# $&KG814"J  "Jh,h,V{*{*r