+ xi csRt^RIHt^RIt^RIt^RIt^RIHt^RIH t H t H t ^RI H t HtRRlt]P !R4tR R R lltR R ltR#)z;Implement Triple DES key wrapping as described in RFC 3217.) annotationsN)default_backend)Cipher algorithmsmodes)DecryptionErrorEncryptionErrorcs V^8dQhRRRR/#)valuebytesreturnZformat"Return the key hash algorithm described in RFC 3217 section 2.NN)hashlibZsha1Zdigest)rs&r _cms_hashr#s <<  % % ' ++rZ4adda22c79e82105cs(V^8dQhRRRRRRRR/#)r plaintextr keyivz bytes | Noner r r r rrr+s(>>E>><>5>rcs^\V4,\PP,^8wd \ R4hVf\ P !^4p\4p\\P!V4\P!V4V4pVP4pW%PV\V4,4,VP4,p\\P!V4\P!\4V4pVP4pVPVRRR1,4VP4,#)zWrap one key (typically a Triple DES key) with another Triple DES key. This uses the algorithm from RFC 3217 to encrypt the plaintext (the key to wrap) using the provided key. If the iv is None, it is randomly generated. zPlaintext length wrongN)lenr TripleDES block_sizerosZurandomrrrCBC encryptorupdaterfinalize RFC3217_IV)rrrbackendcipherrtmps&&& rwrapr%+s 3y>J00;;;q@677 z ZZ]G J((-uyy}g FF  "I  i)I*>> ?? J((-uyy/Dg NF  "I   C"I &););)= ==rcs$V^8dQhRRRRRR/#)r ciphertextr rr r r r rrrAs!44u454U4rcs^\V4,\PP,^8wd \ R4h\ 4p\ \P!V4\P!\4V4pVP4pVPV4VP4,RRR1,p\ \P!V4\P!VR,4V4pVP4pVPVR,4VP4,pVRR\VRR48XdVRR#\ R4h)zUnwrap a key (typically Triple DES key ) with another Triple DES key. This uses the algorithm from RFC 3217 to decrypt the ciphertext (the previously wrapped key) using the provided key. zCiphertext length wrongNr:rNNzCMS key checksum errorri)rrrrrrrrrr! decryptorrr r)r&rr"r#r'r$s&& runwrapr(As  3z?Z11<<<A788G J((-uyy/Dg NF  "I   J ')*<*<*> >" EC J((-uyyR/A7 KF  "I   3r7 #i&8&8&: :C 23x9S"X&&3Bx 2 33r)N)Z__doc__Z __future__rZbinasciirrZcryptography.hazmat.backendsrZ&cryptography.hazmat.primitives.ciphersrrrZpskc.exceptionsrrrZa2b_hexr!r%r(r rrr)sE*B" 8LL<,   0 1 >,4r