+ :i2Ccs^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RIH t H t ^RI H t ^RI HtHt^RIHt^RIHt^RIHt^R IHtHtHt^R IHtHtHtHtHtHtH t H!t!^R I"H#t#H$t$H%t%H&t&]PN!](4t)^qt*^rt+^st,^tt-^ut.^vt/^wt0^xt1^yt2^zt3^|t4^t5^t6^t7^t8^t9^t:^t;^t<^t=^t>]P~!R 4t@^tA^tB^tC^tD^tE^tF^tG]!R R]44tH]!RR]44tI^tJRRltKRtL] !RR44tM] !RR44tN]] !RRR7!RR444tO]C3RltPRtQRtRR tSR!tTR"tUR#tVR$tW!R%R&4tXR#)') annotationsN) b32decode b64encode) dataclass)IntEnumunique)total_ordering)time)Mapping)parse_qsunquoteurlparse)BadResponseErrorNotSupportedErrorTlvVersion_override_version bytes2int int2bytesrequire_version)AID ScpKeyParamsSmartCardConnectionSmartCardProtocolz^((\d+)/)?(([^:]+):)?(.+)$cs"]tRt^Et^t^t^tRtR#)HASH_ALGORITHMN)__name__ __module__ __qualname____firstlineno__SHA1ZSHA256ZSHA512__static_attributes__r1/usr/lib/python3.14/site-packages/yubikit/oath.pyrrEs D F Fr!rcs]tRt^Lt^t^ tRtR#) OATH_TYPErN)rrrrHOTPTOTPr rr!r"r#r#Ls D Dr!r#cV^8dQhRR/#)keystrrZformat"r" __annotate__r,Ussr!csVP4PRR4pVR\V4)^,,, p\V4#)z?Parse Base32 encoded key. :param key: The Base32 encoded key. Z Z=)upperreplacelenr)r(&r" parse_b32_keyr2Us? ))+  c2 &C33s8)a-  C S>r!cs\P!V4p\P!\P !V\ ,44VP\4VP\43#N) rZ parse_dictrZpatchrZ from_bytes TAG_VERSIONgetTAG_NAME TAG_CHALLENGE)responsedata& r" _parse_selectr;_sP >>( #D 2 24 3D EF   r!cs]tRt^ht$RtR]R&R]R&R]R&R]R &]tR ]R &]t R ]R &] t R ]R &Rt R]R&] RRl4tRRltRtR#)CredentialDataz'An object holding OATH credential data.r)namer# oath_typerhash_algorithmbytessecretintdigitsperiodcounterN str | Noneissuerc V^8dQhRRRR/#)r'urir)returnr<rr*r+r"r,CredentialData.__annotate__vs  C N r!c s \VP44pVPR8wd \R4hVPf \R4h\ VPP 4,p\R\VP4P444pRp\VP4R,pRV9dVPR^4wrVV!VV\VPRR 4P 4,\!VR ,4\#VPR \$44\#VPR \&44\#VPR \(44VPRV4R7#)zIParse OATH credential data from URI. :param uri: The URI to parse from. ZotpauthzInvalid URI schemeNzMissing OATH typec3s:"TFwrW^,3xK R#5i)rNr)Z.0ZkZvs& r"Z Z+CredentialData.parse_uri..sK,JDAqA$i,JsNN:Z algorithmrrArCrDrErG)r=r>r?rArCrDrErG)r ZstripZscheme ValueErrorZhostnamer#r.Zdictr ZqueryZitemsr Zpathsplitrr5r2rBDEFAULT_DIGITSDEFAULT_PERIOD DEFAULT_IMF)ZclsrIZparsedr>ZparamsrGr=&& r" parse_uriZCredentialData.parse_urius/ #))+& ==I %12 2 ?? "01 1foo3356 KHV\\,B,H,H,JKKv{{#B' $;::c1-LF)&**[&*I*O*O*QR !12vzz(N;<vzz(N;< 9k:;::h/  r!cr&)r'rJr@rr*r+r"r,rKsTTTr!c sn\VPVPVPVP4#r3)_format_cred_idrGr=r>rDselfr1r"get_idZCredentialData.get_ids#t{{DIIt~~t{{SSr!r)rrrr__doc____annotations__rQrCrRrDrSrErGZ classmethodrUrYr rr!r"r<r<hsa1 I"" M FC  FC GSFJ  <TTr!r<cs:]tRt^t$RtR]R&R]R&R]R&RtR#) CodezAn OATH code object.r)valuerB valid_fromvalid_torN)rrrrrZr[r rr!r"r\r\s JOMr!r\FT)ZorderZfrozencst]tRt^t$RtR]R&R]R&R]R&R]R&R ]R &R ]R &R ]R&RtRtRtRt R#) CredentialzAn OATH credential object.r) device_idr@idrFrGr=r#r>rBrDz bool | Nonetouch_requiredc s*VP;'g VPP4VPP43pVP;'g VPP4VPP43pW#8#r3)rGr=Zlower)rXotherZaZb&& r"__lt__ZCredential.__lt__sgkk&&TYY - - /1B Cll((ejj / / 15::3C3C3E Fu r!c s\V\V44;'d;VPVP8H;'dVPVP8H#r3)Z isinstanceZtyperarb)rXrd&&r"__eq__ZCredential.__eq__sI ud4j ) $ $%//1 $ $588# r!c sD\VPVP34#r3)ZhashrarbrWr1r"__hash__ZCredential.__hash__sT^^TWW-..r!rN) rrrrrZr[rfrhrir rr!r"r`r`s<%N I  I K  /r!r`csRpV\P8XdV\8wdVRV,, pV'dW@R,, pWA, pVP4#)r-z%d/rN)r#r%rRencode)rGr=r>rDcred_ids&&&& r"rVrVsKGINN"v'?56>! C< OG >> r!csVP4pV\P8Xds\P V4pV'dMVP ^4pVP ^4VP ^4V'd \ V43#\3#RV\3#RV9d$V^,R8wdVPR^4wrRMRpWR^3#)r'NrN) decoder#r%TOTP_ID_PATTERNmatchZgrouprBrRrP)rkr>r9rnZ period_strrGs&& r"_parse_cred_idros >> DINN"%%d+ QJ A A#-J 4B  ~- - $;47c>::c1-LFDF ?r!cs\P!V4P4R,p\V4P RR4P 4#):NiNs=r!)hashlibZsha256digestrr/rl)saltdr:r"_get_device_idrts>t##%c*A Q<  c * 1 1 33r!csL\P!WR4P4#)sha1)hmacnewrq)r(Zmessagergr" _hmac_sha1rxs 88C& ) 0 0 22r!csR\P!RVP4VR^4#)rui)rpZ pbkdf2_hmacrj)rrZ passphrasergr" _derive_keyrys$   vz'8'8':D$ KKr!cs\P!VP4p\V4VP8d"VP V4VP 4pV#r3)rprwr=r0Z block_sizeZupdaterq)r(ZalgoZh&& r"_hmac_shorten_keyr{s? DIIA 3x!,,  hhj Jr!cs@W,p\P!RV4#)z>q)structpack) timestamprD time_steprzr"_get_challengers#I ;;tY ''r!csnVP\P8Xd@WP,pW0P,pV^,VP,pMTpRpV^,p\ \ \ VR,4R,^ V,,4PVR4VV4#)rMlrLiZ0)r>r#r%rDr\r)rZrjust) credentialr~Z truncatedrr^r_rC&&& r" _format_codersy~~-!2!22 !2!22 MZ%6%66 % q\F  Yy} % 2b&j @AGGPST r!cs"]tRtRtRtR'RRllt]RRl4t]RR l4t]R R l4t ]R R l4t RRlt RRlt RRlt RRltRRltR(RRlltR'RRlltRRltRRltR R!ltR'R"R#lltR'R$R%lltR&tR#)) OathSessioni z$A session with the OATH application.NcrH)r' connectionrscp_key_paramszScpKeyParams | Nonerr*r+r"r,OathSession.__annotate__ s  ' , r!c s\V\4Vn\VPP \ P 44wVnVnVn VPPVP4V'dCRVPu;8:dR8dMM \R4hVPPV4W nVPRJVn\!VP4VnV'*;'dVPR8Vn\&P)RVP RVP R24R#) z,SCP for OATH requires YubiKey 5.6.3 or laterNz"OATH session initialized (version=z , has_key=))rrr)ri)rrr)rINS_SEND_REMAININGprotocolr;selectrOATH_version_salt _challengeZ configureversionrinit_scp _scp_params_has_keyrt _device_id_neo_unlock_workaroundloggerdebug)rXrrs&&&r"__init__ZOathSession.__init__ s **6HI 5B MM  *6 2 tz4?  - DMM5I5'(VWW MM " "> 2)t3 (4*8&8&U&UT\\I=U# 0?}}oQ ( r!cr&)r'rJrrr*r+r"r,r&sr!c VP#)z$The version of the OATH application.)rrWr1r"rZOathSession.version%}}r!cr&)r'rJr)rr*r+r"r,r+s3r!c r)zJThe device ID. A random static identifier that is re-generated on reset. )rrWr1r"raZOathSession.device_id*s r!cr&r'rJboolrr*r+r"r,r3sr!c r)z+If True, the YubiKey has an access key set.)rrWr1r"has_keyZOathSession.has_key2rr!cr&rrr*r+r"r,r8s+++r!c sVPRJ#)zDIf True, the OATH application is currently locked via an access key.N)rrWr1r"lockedZOathSession.locked7sd**r!cr&r'rJNonerr*r+r"r,r<s55t5r!c sVPP^\^^4\VPP \ P 44wqnVnVP'd&VPPVP4\PR4RVn \VP4VnR#)z0Perform a factory reset on the OATH application.z%OATH application data reset performedFN)r send_apdu INS_RESETr;rrrrrrrrinforrtr)rX_r:r"resetZOathSession.reset<s 9dD9)6t}}7K7KCHH7U)V&:t     MM " "4#3#3 4 ;< (4r!crH)r'passwordr)rJr@rr*r+r"r,rFs113151r!c s.\VPV4#)zQDerive an access key from a password. :param password: The derivation password. )ryr)rXrrgr" derive_keyZOathSession.derive_keyFs 4::x00r!crHr'r(r@rJrrr*r+r"r,rMs,,E,d,r!c s\PR4\WP4p\P !^4p\ \V4\ \V4,pVPP^\^^V4p\W4p\P!\ P!\V4V4'g \R4hRVnRVnR#)ziValidate authentication with access key. This unlocks the session for use. :param key: The access key. zUnlocking sessionz5Response from validation does not match verification!NF)rrrxrosurandomr TAG_RESPONSEr7rr INS_VALIDATErvZcompare_digestunpackr r)rXr(r8 challenger9respZ verificationrTr"validateZOathSession.validateMs  ()c??3JJqM <*S -JJ}}&&q,1dC!#1 ""3::lD#A<PP"G &+#r!crHrrr*r+r"r,ras5Tr!c  s\P!^4p\W4pVPP ^\ ^^\ \\\P\P,4V,4\ \V4,\ \V4,4\P!R4RVnVP$'dg\P'R4\)VPP+\,P.44^,VnVP3V4R#R#)zCSet an access key for authentication. :param key: The access key. zNew access code setTz/Performing NEO workaround, re-select and unlockN)rrrxrr INS_SET_CODErTAG_KEYrr#r%rrr7rrrrrrr;rrrrr)rXr(rr8rer"set_keyZOathSession.set_keyas JJqM c-   GYy~~8K8K'KLsRSmY/0lH-.   )*  & & & LLJ K+DMM,@,@,JKANDO MM#  'r!cr&rrr*r+r"r,rzs4r!c  sVPP^\^^\\44\ P R4RVnR#)z[Remove the access key. This removes the need to authentication a session before using it. zAccess code removedFN)rrrrrrrrrWr1r" unset_keyZOathSession.unset_keyzs6 <As7|D )* r!c$V^8dQhRRRRRR/#)r'credential_datar<rcrrJr`rr*r+r"r,rs$' ' -' ?C' ' r!c sTpVP4p\VPVP4pVP \ R4p\ \V4\ \\P!RVPVP,VP4V,4,pV'd(V\P!R\\4, pVP^8d7V\ \ \P!RVP44, p\"P%RVP: RVP: RVP RVP& RVP R V R 2 4VP(P+^\,^^V4\"P/R 4\1VP2VVP4VP6VPVP&V4#) zoAdd an OATH credential. :param credential_data: The credential data. :param touch_required: The touch policy. sz>BBz>IzImporting credential (type=z, hash=z , digits= , period=z, imf=z, touch_required=rzCredential imported)rYr{rAr?ZljustHMAC_MINIMUM_KEY_SIZErr6rr|r}r>rC TAG_PROPERTYPROP_REQUIRE_TOUCHrETAG_IMFrrrDrrINS_PUTrr`rarGr=)rXrrcrsrkrAr9rr"put_credentialZOathSession.put_credentials ((*"188Q-=-=>3U;8W%  KKq{{Q-=-==qxx H6 Q)    FKK|5GH HD 99q= CT199!=> >D )!++@P@P?SThhZy & D,-Q 0 7Aq$7 )* NN  HH FF KK HH   r!cs(V^8dQhRRRRRRRR/#)r' credential_idr@r=r)rGrFrJrr*r+r"r,rs,"*-7A r!c  s\PRV: RV RV R24\VPR4\ V\ P 4wrE\W2\ P V4pVPP^\^^\\V4\\V4,4\PR4V#)zRename a OATH credential. :param credential_id: The id of the credential. :param name: The new name of the credential. :param issuer: The credential issuer. zRenaming credential 'z' to 'rNZ'zCredential renamed)rrrM)rrrrror#r%rVrr INS_RENAMErr6r)rXrr=rGrrDZnew_ids&&&& r"rename_credentialZOathSession.rename_credentials  ,],=VF81TFRSTU i0%mY^^D 1 y~~vF  z1aX}!=Hf@U!U   () r!cr&)r'rJzlist[Credential]rr*r+r"r,rs"2r!c  s\PR4.p\P!VPP ^\ ^^44Fzp\P!\V4p\\V^,,4pVR,p\WT4wrgpVP\VPWVWtVR44K| V#)zList OATH credentials.zListing OATH credentials...rLN)rrr parse_listrrINS_LISTr TAG_NAME_LISTr# MASK_TYPEroZappendr`ra) rXZcredstlvr9r>rkrGr=rDs & r"list_credentialsZOathSession.list_credentialss 23>>$--"9"9!Xq!"LMC::mS1D!)d1g"56I2hG#1'#E F& LLNNGTfd  N r!cs$V^8dQhRRRRRR/#)r'rr@rrJrr*r+r"r,rs!u5r!c s\PRV: 24\P!\VP P ^\^^\\V4\\V4,44pVR,#)z~Perform a calculate for an OATH credential. :param credential_id: The id of the credential. :param challenge: The challenge. z%Calculating response for credential: rL) rrrrrrr INS_CALCULATEr6r7)rXrrrs&&& r" calculateZOathSession.calculatesi  <]ZtouchrGr=rDrZcodes&& r" calculate_allZOathSession.calculate_allsE ++TV, "9n=  6ykBC~~ MM # #$aC y,I   djj488A;7G((1+CwwH*2h*> INNI )E#1'#E F&#&JD=(^+' syyIDLL#A&!JK..zED"&J r!cr)r'rr`r~rrJr\rr*r+r"r,rs$ = =$ =1; =  =r!c sTVPVP8wd \R4h\T;'g \44pVP\ P 8Xd<\PRV RVP 24\W!P4pM\PR4Rp\P!\VPP^\ ^^\\"VP$4\\&V4,44p\)WV4#)zsCalculate code for an OATH credential. :param credential: The credential object. :param timestamp: The timestamp. z*Credential does not belong to this YubiKeyzCalculating TOTP code for time=rzCalculating HOTP coder!)rarOrBrr>r#r%rrrDrrrrrrrr6rbr7r)rXrr~rr8s&&& r"rZOathSession.calculate_codes   4>> 1IJ J ++TV,   9>> 1 LL1)=$++,. 'y2C2CDI LL0 1I::  MM # #Hjmm,s=)/LL    J8<rs"  '! $44   VU   8 $                  **:;     W   ,T,T ,T^   t$//%/65C*4 3L( "m=m=r!