+ :icsa0t$^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI H t ^RI H t H t ^RIHt^RIHtHtHt^RIHtHtHt^RIHt^R IHt^R IHt^R IHtH t H!t!H"t"^R I#H$t$^R I%H&t&^RI'H(t(H)t)H*t*^RI+H,t,^RI-H.t.H/t/H0t0H1t1^RI2H3t3H4t4H5t5H6t6H7t7H8t8H9t9H:t:H;t;^RIt>H?t?H@t@HAtAHBtB]'d^RICHDtD]P!]F4tG]!P]P,] P,]"P,tLR]MR&]!P]P,] P,]"P,tRR]MR&]!RR]S]44tT]!RR]44tU]!RR]44tVRtW^tX^tY]!RR]44tZ]!R R!]44t[]!R"R#]44t\]!R$R%]44t]RHt^^t_^t`^ ta^$tb^,tc^Gtd^te^tf^tg^th^ti^tj^tk^tl^tm^tn^to^tp^tq^tr^ts^tt^tu^Stv^\tw^ptx^qty^|tz^t{^t|^t}^t~^t^t^t^t^t^t^t^t^t^t^t^t^t^t^t^tR&tR't] !R(R)44t] !R*R+44t] !R,R-44t] !R.R/44tRIR0ltR1R2ltR3tR4tR5tRJt] !R6R744t] !R8R97!R:R;44tR<tR=tRKR>R?lltRLR@RAlltRBt] !RC4tRDRElt!RFRG4tR#)M) annotationsN) b64decode)astuple dataclass)date)EnumIntEnumunique) TYPE_CHECKING TypeAliasoverload)x509)default_backend)hashes)eced25519rsax25519)AsymmetricPadding) Prehashed)Cipher algorithmsmodes)bytes_eq)Encoding NoEncryption PrivateFormat PublicFormat) BadResponseErrorInvalidPinErrorNotSupportedErrorTlvVersion_override_version bytes2int int2bytesrequire_version)AIDSW ApduError ScpKeyParamsSmartCardConnectionSmartCardProtocol)PublicKeyTypesr PublicKey PrivateKeycs]tRt^ctRtRtRtR#) ALGORITHMrrN)__name__ __module__ __qualname____firstlineno__ECRSA__static_attributes__r00/usr/lib/python3.14/site-packages/yubikit/piv.pyr/r/cs B Cr8r/cs~]tRt^it^t^t^t^t^t^t ^t ^t Rt ] RRl4t] RRl4t]RRl4tRtR #) KEY_TYPEc VP#Nnameself&r9__str__ZKEY_TYPE.__str__ts yyr8cV^8dQhRR/#)returnr/r0Zformat"r9 __annotate__KEY_TYPE.__annotate__xsNN9Nr8c sVPPR4'd\P#\P#)r6)r>Z startswithr/r6r5r?rAr9 algorithmZKEY_TYPE.algorithmws) $ 4 4U ; ;y}}MMr8crCrDrEintr0rFrGr9rHrI|s'''r8c sV\P\P39dR#\P!RVP 4pV'd\ VP44#\R4h)iz\d+$z No bit_len) r:ED25519X25519reZsearchr>rLZgroup ValueError)r@Zmatch& r9bit_lenZKEY_TYPE.bit_len{sO H$$hoo6 6 '499- u{{}% %&&r8c V^8dQhRRRR/#)rDkeyr,rEr:r0rFrGr9rHrIsHH.HXHr8c s\V\P4'd\VRVP,4#\V\P4'dKVPPpVR8Xd VP#VR8Xd VP#\ RV 24h\V\P4'd VP#\V\ P"4'd VP$#\ R\'V4P( 24h \ d\ RTP,4hi;i)zRSA%dzUnsupported RSA key size: %dZ secp256r1Z secp384r1zUnsupported EC curve: zUnsupported key type: ) isinstancer RSAPublicKeygetattrZkey_sizeAttributeErrorrPrEllipticCurvePublicKeycurver>ECCP256ECCP384rEd25519PublicKeyrMrX25519PublicKeyrNZtyper1)clsrTZ curve_name&& r9from_public_keyZKEY_TYPE.from_public_keys  c3++ , , PsGcll$:;;R66 7 7J[({{"{*{{"5j\BC C W55 6 6;;  V33 4 4:: 1$s)2D2D1EFGG" P !?#,,!NOO Ps D""(E r0N)r1r2r3r4RSA1024ZRSA2048RSA3072RSA4096r[r\rMrNrBpropertyrJrR classmethodrar7r0r8r9r:r:isoGGGGGGG FNN''HHr8r:csR]tRt^t^t^t^ t^ t]RRl4t ]RRl4t Rt R#)MANAGEMENT_KEY_TYPEcrCrKr0rFrGr9rH MANAGEMENT_KEY_TYPE.__annotate__s'''r8c snVPR8Xd^#\VPR,4^,#)TDES:NN)r>rLr?rAr9key_lenZMANAGEMENT_KEY_TYPE.key_lens) 99 499R=!Q&&r8crCrKr0rFrGr9rHrhssr8c s,VPR8Xd^#^#)rir=r?rAr9 challenge_lenZ!MANAGEMENT_KEY_TYPE.challenge_lens 99 r8r0N) r1r2r3r4riZAES128ZAES192ZAES256rerkrlr7r0r8r9rgrgs< D F F F '' r8rgcsV\P8Xd^RIHpV!V4#\ P !V4# \d\ PpL;i;i)r) TripleDES)rgriZ/cryptography.hazmat.decrepit.ciphers.algorithmsrmZ ImportErrorrZAES)key_typemanagement_keyrmr`r9_parse_management_keyrpsQ&+++ - Q((~~n--  -",,I -s;AAcs]tRt^t^t^t^t^t^t^t ^t ^t ^t ^t ^t^t^t^t^t^t^t^t^t^t^t^t^t^t^tRRltRtR#)SLOTcrC)rDrEstrr0rFrGr9rHZSLOT.__annotate__s000r8c s:\V4R RVP R2#)Z02Xz ())rLr>r?rAr9rBZ SLOT.__str__sd)C499+Q//r8r0N)r1r2r3r4AUTHENTICATION SIGNATUREKEY_MANAGEMENT CARD_AUTHRETIRED1RETIRED2RETIRED3RETIRED4RETIRED5RETIRED6RETIRED7RETIRED8RETIRED9 RETIRED10 RETIRED11 RETIRED12 RETIRED13 RETIRED14 RETIRED15 RETIRED16 RETIRED17 RETIRED18 RETIRED19 RETIRED20 ATTESTATIONrBr7r0r8r9rqrqsNINIHHHHHHHHHIIIIIIIIIIIK00r8rqcs]tRt^tRtRtRtRtRtRt Rt Rt R t R t ^~tR tR tR tRtRtRtRtRtRtRtRtRtRtRtRtRtRtRt Rt!Rt"Rt#R t$R!t%]&R"R#l4t'R$t(R%#)& OBJECT_IDi_i_i_i_i_i_i _i _i _i_i _i!_i _i_i_i_i_i_i_i_i_i_i_i_i_i_i_i_i_i_i_i _i_crS)rDslotrqrErr0rFrGr9rHZOBJECT_ID.__annotate__ s--T-i-r8c s@\V\V4P4#r<)rWrqr>)r_r&&r9 from_slotZOBJECT_ID.from_slotssDJOO,,r8r0N))r1r2r3r4Z CAPABILITYZCHUIDrtZ FINGERPRINTSZSECURITYZFACIALZPRINTEDrurvrw DISCOVERYZ KEY_HISTORYZIRISrxryrzr{r|r}r~rrrrrrrrrrrrrrrfrr7r0r8r9rrsJ ENLH FGINIIK DHHHHHHHHHIIIIIIIIIIIK--r8rcs.]tRtRt^t^t^t^t^t^t Rt R#) PIN_POLICYi r0N) r1r2r3r4DEFAULTNEVERZONCEALWAYS MATCH_ONCE MATCH_ALWAYSr7r0r8r9rr s G E D FJLr8rcs&]tRtRt^t^t^t^tRtR#) TOUCH_POLICYir0N) r1r2r3r4rrrCACHEDr7r0r8r9rrsG E F Fr8rcsVP4p\V4\8d \R4hVP \R4#)z&PIN/PUK must be no longer than 8 bytess)encodelenPIN_LENrPZljust)pinrAr9 _pin_bytesras6 **,C 3x'ABB 99Wg &&r8csV\P8Xd^#VR,R8Xd V^,#VR,R8Xd V^,#R#)riiciicN)r'ZAUTH_METHOD_BLOCKED)swrAr9_retries_from_swrhsB R # ## F{fDy f Dy r8cs6]tRtRt$R]R&R]R&R]R&RtR#) PinMetadatairbool default_valuerLZtotal_attemptsattempts_remainingr0Nr1r2r3r4__annotations__r7r0r8r9rrrsr8rcs6]tRtRt$R]R&R]R&R]R&RtR #) ManagementKeyMetadataiyrgrnrrr touch_policyr0Nrr0r8r9rrys!!r8rcsZ]tRtRt$R]R&R]R&R]R&R]R &R ]R &]R 4tR tR#) SlotMetadatair:rnr pin_policyrrrZ generatedbytespublic_key_encodedc sB\VPVP4#r<)_parse_device_public_keyrnrr?rAr9 public_keyZSlotMetadata.public_keys' t7N7NOOr8r0N)r1r2r3r4rrerr7r0r8r9rrs3O PPr8rcs6]tRtRt$R]R&R]R&R]R&RtR#) BioMetadatair configuredrLr temporary_pinr0Nrr0r8r9rrsr8rcsV^ ,R RRR1,pV\VPR4^,^,4, pV^8XdV#\V^ ,V^, 4V,#) Z04bNZ1)rrZcount_bcd)ZvallnZbitsr`r9rrs^Bhs^TrT "DCC1$) **D74>SBYQ 7$ >>r8crS)rDvalueszdict[int, bytes | None]rErr0rFrGr9rHrHs2ur8csNRPRVP444#)r8c3sH"TFwrVfK \W4xK R#5ir<)r ).0Ztagvalue& r9 Z!_dump_tlv_dict..s*8JCEC.s"")joinZitems)rrAr9_dump_tlv_dictrs& 88*0,,. r8Z11010Z10110Z11111cs]tRtRt$RtR]R&R]R&R]R&R]R&R]R&R]R &R]R &R]R &R]R &R t]RRl4tRt Rt R#)FascNizNFASC-N data structure https://www.idmanagement.gov/docs/pacs-tig-scepacs.pdf rL agency_codeZ system_codeZcredential_numberZcredential_seriesZindividual_credential_issueZperson_identifierZorganizational_categoryorganizational_identifierZ!organization_association_categoryc s\R\\V4\444p\\ V4,\ ,\ V4,\ ,\ V4,\ ,\ V4,\ ,\ V4,\ ,\ V4,\ V4,\ V4,\ V4,\,p^p\^\V4^4FpV\W$V^,^4,pK! \\V^4^,V,4#)c3s<"TFwr\W4xK R#5ir<)r)rZvrrr9rZ"FascN.__bytes__..sK+J%!$q+++Js) Ziterzipr _FASCN_LENSBCD_SSZnextBCD_FSBCD_ESrangerrLr$)r@Zvsbslrcis& r9 __bytes__ZFascN.__bytes__s0 K3wt}k+JK K 2h  2h    2h     2h  2h  2h 2h 2h 2h   (q#b'1%A 3ra!e}a( (C&Rq3.//r8crS)rDrrrErr0rFrGr9rHZFascN.__annotate__sur8c  sa\V4R p\^^^4Uu.uF"p\W#V^,RRR1,^4NK$ upoV3Rl\R\44pV!V!#uupi)Z0200bNc 3s|<"TF1wr\RPRSWV,444xK3 R#5i)c3s8"TFp\V4xK R#5ir<)rr)rdrQr9rZ-FascN.from_bytes...s=(<1A(.s= Q =4)(<== > >Ps9<r) i iiii i!i%)r#rrLrr)r_rrrargsrs&& @r9 from_bytesZFascN.from_bytesst% '38C3C D3Cac"Q-"%q)3C D  BKP  Dz Es(A)c s&R\V4,#)z$[%04d-%04d-%06d-%d-%d-%010d%d%04d%d])rr?rAr9rBZ FascN.__str__s5 EEr8r0N) r1r2r3r4__doc__rrrfrrBr7r0r8r9rrs^ !$$  ""'**0>Fr8rT)Zkw_onlycs]tRtRt$RtR]R&R]R&RtR]R&RtR]R &RtR]R &R ]R &R ]R&Rt R]R&R ]R&Rt R]R&RRRllt ] RRl4t Rt]RRl4tRtR#)ChuidiNz int | None buffer_lengthrfasc_n bytes | Nonerrdunsrguidrexpiration_dateauthentication_key_mapasymmetric_signaturercrS)rDinclude_signaturerrErr0rFrGr9rHChuid.__annotate__s  D E r8c s\^VPe\VP4MR^0\VP4^1VP ^2VP ^3VP^4VP^5VPP4PRR4P4^=VP^>V'd VPMR\VP e\VP .4/ 4#R/ 4#)NZ-rr8)rrr$rrrrrrrZ isoformatZreplacerrrTAG_LRCr)r@rrr9 _get_bytesZChuid._get_bytess%%1  2 23eDKK(d&&d44diidiid**446>>sBGNNPd113Dd//$dhh.Bz*   IL   r8crC)rDrErr0rFrGr9rHrs8858r8c s&VPRR7#)F)rrr?rAr9 tbs_bytesZChuid.tbs_bytess77r8c s"VP4#r<rr?rAr9rZChuid.__bytes__ s  r8crS)rDrrrErr0rFrGr9rHr s  u  r8c  sD\P!V4pVP^4pVP\4pV^5,p\ \ VR,4\ VR,4\ VR,44pT!V'd \ V4MR\PV^0,4VP^14VP^24VP^34V^4,TVP^=4V^>,V'dV^,R7 #RR7 #)r:NN:rrN:rNN) rrrrrrrrrr) r parse_dictgetrrrLr#rr)r_rdatarrrrs&& r9rZChuid.from_bytes s~~e$ hhw Js1R5z3qv;AcF D6C)M2##DJ/&*hhtn$d+#'88D>!%dA  $(  r8r0T)r1r2r3r4rrrrrrrrrerrrfrr7r0r8r9rrs $M:$ M $K$.2|2D, K+/L/C $88!  r8rcs.V\P\P39dV#VP\P 8Xd\ V\4'dTpM@\P!V\44pVPV4VP4pVP^,p\V4V8dVPV^,R4#VRV#VP\P 8XdRp\"P$!WpP\44pVP'WV4p VP)4P+4P,p \/\1\3V 4Wz4VP^,4#R#)rN)r:rMrNrJr/r5rUrrZHashr updatefinalizerRrZrjustr6rgenerate_private_keysignrpublic_numbersnr$powr#) rnmessagehash_algorithmpaddingZhashedZhZbyte_lenedummyZ signaturers &&&& r9 _pad_messager"s2H$$hoo66Y\\) ni 0 0F NO,=>A HHW ZZ\F##q( v; !<<A u5 5ix    y}} , ((,<,OPJJw@     - - / 1 1Yy118(:J:Ja:OPP -r8cs(Rp\P!V\V4^,\44pVP 4P 4P p\\\V4W$4\V44pVPWQ4#)r) rrrr rrrr$rr#decrypt)paddedrrrr encrypted&& r9_unpad_messager:sn A  $ $QF a9J KE ))+--A#i/6F DI == ,,r8c s0V^8dQhRRRRRRRRR R R R /#) rDversionr!rnr:rrrrgeneraterrENoner0rFrGr9rHrHCsLQQ QQQ Q  Q  Qr8csV\P!R\4\WW#V4R#)a Check if a key type is supported by a specific YubiKey firmware version. This method will return None if the key (with PIN and touch policies) is supported, or it will raise a NotSupportedError if it is not. :deprecated: Use PivSession.check_key_support() instead. z7Deprecated: use PivSession.check_key_support() instead.N)warningswarnDeprecationWarning_do_check_key_support)rrnrrrs&&&&&r9check_key_supportrCs$ MMA'ZxPr8cs4V^8dQhRRRRRRRRR R R R R R /#)rDrr!rnr:rrrrrrfips_restrictionsrErr0rFrGr9rHrHXsW&Y&Y &Y&Y&Y &Y  &Y  &Y &Yr8csV\P8Xd\VR R4V\P8wgV\ P8wd\VR R4V\P 8Xd\VR R4R Tu;8:dR 8d6MM2V'd+VP\P8Xd \R4hV'gR Tu;8:dR8dTMMPV\P\P39d \R4hV\ P8Xd \R4hV\P\P\P \P39d\VRV R24R#R#)rz#ECCP384 requires YubiKey 4 or laterz,PIN/Touch policy requires YubiKey 4 or laterz1Cached touch policy requires YubiKey 4.3 or laterz0RSA key generation not supported on this YubiKeyz&RSA 1024 not supported on YubiKey FIPSz,PIN_POLICY.NEVER not allowed on YubiKey FIPSz requires YubiKey 5.7 or laterN)rrrrrjr)rrDr)rrj)rrr)rrrrir)r:r\r%rrrrrJr/r6rrbrNrrcrdrM)rrnrrrr&&&&&&r9rrXs38###,QR|+++zZ=O=O/O Y N |*** Y S G'i' **imm;#$VW WI<9< (((//: :#$LM M )) )#$RS S  xj8V,WX r8cs\P!V4pVP\P8XdR\ V^,4p\ V^,4p\ P!WC4P\44#V\P8Xd'\PPV^,4#V\P8Xd'\ P"PV^,4#V\P$8Xd\&P(pM\&P*p\&P,P/V!4V^,4#)i)r rrJr/r6r#rZRSAPublicNumbersrr r:rMrr]Zfrom_public_bytesrNrr^r[rZ SECP256R1Z SECP384R1rYZfrom_encoded_point)rnZencodedrZmodulusZexponentrZrr9rrs >>' "DY]]*DJ'T$Z(##H6AA/BSTT X%% %''99$t*EE X__ $%%77T CC x'' ',.LLELLE((;;EGT$ZPPr8a MIIBOTCCASOgAwIBAgIBATANBgkqhkiG9w0BAQUFADAZMRcwFQYDVQQDEw5odHRw Oi8vd3d3LmNvbTAeFw0xMDA1MTExOTEzMDNaFw0xMTA1MTExOTEzMDNaMF8xEDAO BgkqhkiG9w0BCQEWAUAxCjAIBgNVBAMTASAxCzAJBgNVBAYTAlVTMQswCQYDVQQI EwJXSTELMAkGA1UEChMCb24xDDAKBgNVBAsTA291bjEKMAgGA1UEBRMBIDAfMA0G CSqGSIb3DQEBAQUAAw4AMAsCBG6G5ZUCAwEAAaNNMEswCQYDVR0TBAIwADAdBgNV HQ4EFgQUHSkK6busCxxK6PKpBlL9q8K1mcQwHwYDVR0jBBgwFoAUn7r/DVMuEpK9 Rxq3nyiLml10+nQwDQYJKoZIhvcNAQEFBQADAQA= cs V^8dQhRRRR/#)rD cert_datarrEr0rFrGr9rHrHs!?!?e!?!?r8cs \PR4VR,R8Xd\PVR,R4p\P !\P \R7pVPVR,4p\V4V8wd,\PRV\V44\R 4h\PR 4V#\P!V4p\PR 4V# \P\3d\PR 4L`i;i \P\P3d\PR 4Mi;i\R4h)z< Decompress a compressed certificate using various methods. z+Certificate is compressed, decompressing...:NrDNs:rDrNZlittle)ZwbitsZzdict:rNNz3Unexpected decompressed length, expected %d, got %dz2Decompressed length does not match expected lengthz0Decompressed certificate with CXF deflate formatz$Failed to decompress with CXF formatz/Decompressed certificate with basic gzip formatz-Failed to decompressed with basic gzip formatz Failed to decompress certificate)loggerdebugrLrzlibZ decompressobjZ MAX_WBITS_cxf_dictionaryZ decompressrZerrorrPZwarninggzipZ BadGzipFiler)r Zexpected_lengthZ decompressorrr9decompress_certificaters5 LL>?} !..3B))oV  C$// " >I9~0 I# N !!UVV LLK L  HOOI.  FG J' C NNA B C JJ(( )HFGH = >>s%,A)D,D:0D76D7::E76E7cs]tRtRtRtRPRRllt]RRl4t]RR l4tR R lt R R lt ] RRl4t ] RRl4t RRlt RQRRllt RRltRRRRlltRRltRRltRRltR R!ltR"R#ltR$R%ltR&R'ltR(R)ltR*R+ltR,R-ltR.R/ltRPR0R1lltR2R3ltR4R5ltR6R7ltRPR8R9lltR:R;lt RQR<R=llt!R>R?lt"]#PH]%PH3R@RAllt&]#PH]%PH3RBRCllt'RDRElt(RFRGlt)RHRIlt*RJt+RKt,RLt-RQRMRNllt.ROt/R#)S PivSessioniz#A session with the PIV application.NcrS)rD connectionr*scp_key_paramszScpKeyParams | Noner0rFrGr9rHPivSession.__annotate__s"JJ'J,Jr8c  s\V4VnVPP\P4V'dVPP V4\ PR4\P!\P!VPP^\^^444VnVPPVP 4VP#4P$Vn^Vn^Vn\ PRVP R24R# \(d\*P,TnLUi;i)zGetting PIV versionz!PIV session initialized (version=rsN)r+protocolZselectr&ZPIVZinit_scpr r r"Zpatchr!r send_apduINS_GET_VERSION_versionZ configurerget_management_key_metadatarn_management_key_typerrgri_current_pin_retries_max_pin_retries)r@rr&&&r9__init__ZPivSession.__init__s **5  SWW%  MM " "> 2 *+)//   t}}66q/1aP Q    - A(,(H(H(J(S(SD %%&! ! 8aHI ! A(;(@(@D % As'D99 EEcrC)rDrEr!r0rFrGr9rHrsr8c r;)zOThe version of the PIV application, typically the same as the YubiKey firmware.)rr?rAr9rZPivSession.versions}}r8crC)rDrErgr0rFrGr9rHrs))%8)r8c r;)z5The algorithm of the management key currently in use.)rr?rAr9management_key_typeZPivSession.management_key_types(((r8crCrDrErr0rFrGr9rHrs3<3>5>T>r8c R#r<r0)r@rorr9 authenticatePivSession.authenticate*s;>r8c$V^8dQhRRRRRR/#)rDrnrgrorrErr0rFrGr9rHr/s$+=B r8c r-r<r0)r@rnrorr9r.r/-sr8crCrr0rFrGr9rHr3s8C8Ct8Cr8c sVPR4pVPR4p\V4^8XdVwr4M<\V4^8Xd V^,pM"VPR4pVPR4pV'd8\P!R\4VP V8wd \ R4h\V\4'g \R4hVP p\PRV 24VPP^\V\\!\"\!\$444p\ P&!\$\ P&!\"V44p\(P*!VP,4p\/4p\1W44p \3V \4P6!4V4p V P94p V P;V4V P=4,p VPP^\V\\!\"\!\$V 4\!\>V4,44p\ P&!\@\ P&!\"V44p V PC4pVP;V4VP=4,p\EW4'g \GR4hR#) zhAuthenticate to PIV with management key. :param bytes management_key: The management key in raw bytes. rnrozDDeprecated: call authenticate() without passing management_key_type.zIncorrect management key typezmanagement_key must be byteszAuthenticating with key type: zDevice response is incorrectN)$rrrrrrrPrUrZ TypeErrorr r rrINS_AUTHENTICATESLOT_CARD_MANAGEMENTr TAG_DYN_AUTHTAG_AUTH_WITNESSunpackosZurandomrlr rprrZECB decryptorrrTAG_AUTH_CHALLENGETAG_AUTH_RESPONSE encryptorrr)r@rZkwargsrnror+ZwitnessZ challengeZbackendZ cipher_keyZcipherr7Z decryptedrr:expecteds&*, r9r.r/3s- ::j)$45 t9>'+ $Hn Y!^!!WNzz*-H#ZZ(89N  MMV" ''83 !@AA.%00:; ;++ 5hZ@A==**    c"23 4  **-szz,/QRJJx556 !#*8D  EIIK9$$& $$W- 0B0B0DD ==**   $i037I93UU   JJ0#**\82TU $$& ##I.1C1C1EE,,"#AB B-r8c(V^8dQhRRRRRRRR/#) rDrnrgror require_touchrrErr0rFrGr9rHrms2**%** *  *r8c  s\V4p\PRV 24V\P8wd\ VP R4\ V4VP8wd\RVP,4hVPP^\^V'd^M^\V4\\V4,4Wn\P!R4R#)zSet a new management key. :param key_type: The management key type. :param management_key: The management key in raw bytes. :param require_touch: The touch policy. z Setting management key of type: zManagement key must be %d byteszManagement key setN)rrr)rgr r rir%rrrkrPrrINS_SET_MGMKEYr$r r2rr()r@rnror=s&&&&r9set_management_keyZPivSession.set_management_keyms'x0 7zBC *// / DLL) 4 ~ ("2"2 2>AQAQQR R   !Dt h #&:N"K K  %-! ()r8crS)rDrrrrErr0rFrGr9rHrs++c+d+r8c  s0\PR4VPP^\^\ \ V44VPVnR# \d1p\TP4pTfhY0n\T4hRp?ii;i)zVerify the user by PIN. NOTE: InvalidPinError raised from this method will cap remaining_attempts at 15, even if the true number of remaining attempts is higher. :param pin: The PIN. z Verifying PINN) r r rr INS_VERIFYr&rrrr(rrrr@rrretries&& r9r"ZPivSession.verify_pinsx  _% + MM # #Az1fjo N(,(=(=D % +&qtt,G(/ %!'* *  +sAA B%+BBc$V^8dQhRRRRRR/#)rDrr check_onlyrErr0rFrGr9rHrs$(3(3!(37;(3 (3r8c s\PR4V'dV'd \R4hV'dRpMV'd \^4pM \^4pVPP ^\ ^\V4pT'dT#R# \dZpTP\P8Xd \R4h\TP4pTfh\TRT R24hRp?ii;i)a/Verify the user by fingerprint (YubiKey Bio only). Fingerprint verification will allow usage of private keys which have a PIN policy allowing MATCH. For those using MATCH_ALWAYS, the fingerprint must be verified just prior to using the key, or by first requesting a temporary PIN and then later verifying the PIN just prior to key use. :param temporary_pin: Request a temporary PIN for later use within the session. :param check_only: Do not verify the user, instead immediately throw an InvalidPinException containing the number of remaining attempts. z Verifying UVz?Cannot request temporary PIN when doing check-only verificationr84Biometric verification not supported by this YuibKeyNzFingerprint mismatch,  attempts remaining)r r rPr rrr@ SLOT_OCC_AUTHr(rr'REFERENCE_DATA_NOT_FOUNDrrr)r@rrErr+rrBs&&& r9 verify_uvZPivSession.verify_uvs  ^$ ZQ  D q6Dq6D }}..q*aPTUH)x2d2 ttr222'J'qtt,G!1':MN  s'B C3AC..C3crS)rDrrrErr0rFrGr9rHrs$r8c  s\PR4\V4\8wd\ R\ R24hVP P ^\^\\^V44R# \dZpTP\P8Xd \R4h\TP4pTfh\!TRT R24hRp?ii;i)zdVerify the user via temporary PIN. :param pin: A temporary PIN previously requested via verify_uv. zVerifying temporary PINzTemporary PIN must be exactly  bytesrFNzInvalid temporary PIN, rG)r r rTEMPORARY_PIN_LENrPrrr@rHr r(rr'rIrrrrArCr9verify_temporary_pinZPivSession.verify_temporary_pins  ./ s8( (=>O=PPVWX X  MM # #Az1mSC[ Q ttr222'J'qtt,G!27);NO  s1A11 C> ''+;Q ND 5w?B B % &q ) 4g>qA A   tt33R5K5KLL'J   s:B,, C77;C22C7c s0V^8dQhRRRRRRRRR R R R/#) rDrrqrnr:rrrzhashes.HashAlgorithm | NonerzAsymmetricPadding | NonerEr0rFrGr9rHr}sNDDDD D 4 D * D Dr8c  s\V4p\V4p\PRV RV RV RV 24\ W#WE4pVP WVR4#)a Sign message with key. Requires PIN verification. :param slot: The slot of the key to use. :param key_type: The type of the key to sign with. :param message: The message to sign. :param hash_algorithm: The pre-signature hash algorithm to use. :param padding: The pre-signature padding. zSigning data with key in slot of type z using hash=z , padding=F)rqr:r r r_use_private_key)r@rrnrrrrs&&&&&& r9rZPivSession.sign}sj$DzH% ,TF)H:F"#:gY 8 hI$$TVUCCr8cs(V^8dQhRRRRRRRR/#)rDrrq cipher_textrrrrEr0rFrGr9rHrs,///',/7H/ /r8c s \V4p\\R\V4^, 24p\ PRT RT RT 24TPYTR4p\YS4# \d \ R4hi;i)zDecrypt cipher text. Requires PIN verification. :param slot: The slot. :param cipher_text: The cipher text to decrypt. :param padding: The padding of the plain text. r6zInvalid length of ciphertextz!Decrypting data with key in slot rvz using padding=F) rqrWr:rrXrPr r rwr)r@rrxrrnrs&&&& r9rZPivSession.decryptsDz =x3s;/?!/C.D)EFH  /vYxjIi ! &&t{EJf.. =;< < =s #A,,Bcr0)rDrrqpeer_public_keyzCec.EllipticCurvePublicKeyWithSerialization | x25519.X25519PublicKeyrErr0rFrGr9rHrs.AAA P A  Ar8c s\V4p\PV4pVP\P 8wd \ R4h\PRV RV 24V\P8Xd0VP\P\P4pM.VP\P\P4pVP!WVR4#)zCalculate shared secret using ECDH. Requires PIN verification. :param slot: The slot. :param peer_public_key: The peer's public key. zUnsupported key typez*Performing key agreement with key in slot rvT)rqr:rarJr/r5rPr r rN public_bytesrRawrZX962ZUncompressedPointrw)r@rryrnrs&&& r9calculate_secretZPivSession.calculate_secretsDz++O<    -34 4 8iz R  x &"// l>N>NOD"// |==D$$TT4@@r8crS)rD object_idrLrErr0rFrGr9rHrs??C?E?r8c sz\PR\V4 24V\P8Xd\PpM\ p\ P!VVPP^\^?^\ \\V4444# \dp\RT4hRp?ii;i)znGet object by ID. Requires PIN verification for protected objects. :param object_id: The object identifier. zReading data from object slot zMalformed object dataN)r r hexrr TAG_OBJ_DATAr r5rr INS_GET_DATA TAG_OBJ_IDr$rPr)r@r}r;rrCr9 get_objectZPivSession.get_objects  5c)n5EFG  ++ +%//H#H ?:: ''  Ii$89    ?"#:A> > ?sAB B:) B55B:cr0)rDr}rLrrrErr0rFrGr9rHrs&EECE|EtEr8c  sVPP^\^?^\\\ V44\\ T;'gR4,4\PR\V4 24R#)zWrite data to PIV object. Requires authentication with management key. :param object_id: The object identifier. :param data: The object data. r8zData written to object slot N) rr INS_PUT_DATAr rr$rr r(r~)r@r}rrr9 put_objectZPivSession.put_objects^      Ii0 1C dkkc4R R    23y>2BCDr8crSrDrrqrEx509.Certificater0rFrGr9rHrs==D=-==r8c s\V4p\PRV 24\P!VP \ PV444pV\,p\V9dV\,^,M^pT^8Xd \T4pMT^8wd \R4h\P !T\#44# \\3d \R4hi;i \$dp\RT4hRp?ii;i)zOGet certificate from slot. :param slot: The slot to get the certificate from. zReading certificate in slot z!Malformed certificate data objectzUnsupported value in CertInfozInvalid certificateN)rqr r r rrrrTAG_CERTIFICATE TAG_CERT_INFOrPZKeyErrorrrrr load_der_x509_certificater Z Exception)r@rrr  cert_inforrr9get_certificateZPivSession.get_certificates Dz 3D6:; H>>$//)2E2Ed2K"LMD_-I2?42G]+A.QI >.y9I !^#$CD D =11)_=NO OH% H"#FG G H ="#8!< < =s$A&C1C0C-0 D ; DD cr<) rDrrq certificatercompressrrErr0rFrGr9rHrs2SSS'7SCGS Sr8c sN\V4p\PRV 24VP\P 4p\PR\ V4 RV 24V'd<Rp\P!V4p\PR\ V4 R24MRp\\V4\\V4,\\4,pVP\PV4V4\P!RV R V 24R #) zImport certificate to slot. Requires authentication with management key. :param slot: The slot to import the certificate to. :param certificate: The certificate to import. :param compress: If the certificate should be compressed or not. zStoring certificate in slot zCertificate is z bytes, compression=szCompressed size: rKrzCertificate written to slot z, compression=N)rqr r rzrZDERrrrr rrrrrrr()r@rrrr rrs&&&& r9put_certificateZPivSession.put_certificatesDz 3D6:;,,X\\:  s9~&66J8*UV I i0I LL,S^, >D  C()L*AB BD ,ZL ~ V  >84H 3D68*MNr8c r) rDrrqrnr:rrrrrEr-r0rFrGr9rHrssC P P P P P # P  Pr8c  s.\V4p\V4pVPW#VR4\\\ V44pV'd!V\\ \ V44, pV'd!V\\\ V44, p\PRV RV 24VPP^\^V\^V44p\PRV RV 24\V\P!RV44#)zGenerate private key in slot. Requires authentication with management key. :param slot: The slot to generate the private key in. :param key_type: The key type. :param pin_policy: The PIN policy. :param touch_policy: The touch policy. TzGenerating key with pin_policy=rzPrivate key generated in slot rviI)rqr:rr TAG_GEN_ALGORITHMr$rrr r rrINS_GENERATE_ASYMMETRICr(rr5)r@rrnrrrr+&&&&& r9 generate_keyZPivSession.generate_keyss DzH% x\4H+Yx-@A  C *(=> >D  C()L*AB BD -j\ W ==** &4T4   4TF)H:NO'#**VX2NOOr8crSrr0rFrGr9rHrs K Kt K(8 Kr8c s\VPR4\V4pVPP ^\ V^4p\ PRV 24\P!V\44#)zkAttest key in slot. :param slot: The slot where the key has been generated. :return: A X.509 certificate. zAttested key in slot r) r%rrqrr INS_ATTESTr r r rr )r@rr+r`r9 attest_keyZPivSession.attest_keys_  i0Dz==**1j$B ,TF34--h8IJJr8crD)rDrrqto_slotrErr0rFrGr9rHrs& E E$ E E$ Er8c s \VPR4\V4p\V4p\P RV RV 24VP P ^\W!4\PRV RV 24R#)zMove key from one slot to another. Requires authentication with management key. :param from_slot: The slot containing the key to move. :param to_slot: The new slot to move the key to. zMoving key from slot z to zKey moved from slot Nr r%rrqr r rr INS_MOVE_KEYr()r@rrrr9move_keyZPivSession.move_keysn  i0O w- ,YKtG9EF <D *9+T'CDr8crSrr0rFrGr9rHrs 3 3t 3 3r8c s\VPR4\V4p\P RV 24VP P ^\^V4\PRV 24R#)z{Delete a key in a slot. Requires authentication with management key. :param slot: The slot containing the key to delete. zDeleting key in slot zKey deleted in slot Nrrrrr9 delete_keyZPivSession.delete_keys[  i0Dz ,TF34 <t< *4&12r8c  s VPP^V^V\V4\V4,4R# \d<p\ TP 4pTfhT\ 8XdY`n\T4hRp?ii;irN) rrrr(rrr&rr)r@Zinsp2Zvalue1Zvalue2rrBrr9r$ZPivSession._change_referencess + MM # #32z&1Jv4FF  +&qtt,GV|,3)!'* *  +s8< B6A==Bc s\VPR4\P!VPP ^\ ^V44pV\,p\V\,R8gV\,V\,4#)rrrg) r%rr rrrrhrtrrkINDEX_RETRIES_TOTALINDEX_RETRIES_REMAINING)r@rrZattemptsrCr9reZ PivSession._get_pin_puk_metadatasl i0~~dmm55a9I1bQR,- ( )U 2 ( ) , -  r8c sVPP^\TT\\\\ 4\V'd\ M\V4,44p\P!\ \P!\V44# \d(pTP\P8XdThhRp?ii;ir) rrr1r r3r9TAG_AUTH_EXPONENTIATIONr8r5r(rr'ZINCORRECT_PARAMETERS)r@rrnrZexponentiationr+rrr9rwZPivSession._use_private_keys }}..  )* .4!3   H$::!    ttr...  sBB C ""CC c s0V^8dQhRRRRRRRRR RR R /#) rDrnr:rrrrrrrrErr0rFrGr9rHrsF$$$$# $  $  $ $r8c s\VPVVVVV4V\P\P39dVP 4R#R#)aqCheck if a key type is supported by this YubiKey. This method will return None if the key (with PIN and touch policies) is supported, or it will raise a NotSupportedError if it is not. Set the generate parameter to True to check if generating the key is supported (in addition to importing). Set fips_restrictions to True to apply restrictions based on FIPS status. N)rrrrrr )r@rnrrrrrr9rZPivSession.check_key_supportsO&  LL        *//1H1HI I  ! ! # Jr8)rrrrrr<)F)FF)0r1r2r3r4rrrerrr)r,r r.r?r"rJrMr!rSrZr]rarNr#rrrr rrr|rrrrrrrrrrrrrr$rerwrr7r0r8r9rrs:-J2 ))3> 8Ct*<+&(3T,& #$(.2 2   $ 0D6/.A:?6E"=2S: 3",!3!3%1%9%9 8|",!3!3%1%9%9 PD K E 3 + @$$r8rs)r) rrrrrrrrrr)TF)__conditional_annotations__Z __future__rrZloggingr6rOrr Zbase64rZ dataclassesrrZdatetimerZenumrrrZtypingr r r Z cryptographyr Zcryptography.hazmat.backendsr Zcryptography.hazmat.primitivesrZ)cryptography.hazmat.primitives.asymmetricrrrrZ1cryptography.hazmat.primitives.asymmetric.paddingrZ/cryptography.hazmat.primitives.asymmetric.utilsrZ&cryptography.hazmat.primitives.ciphersrrrZ,cryptography.hazmat.primitives.constant_timerZ,cryptography.hazmat.primitives.serializationrrrrZcorerrrr r!r"r#r$r%Zcore.smartcardr&r'r(r)r*r+Z/cryptography.hazmat.primitives.asymmetric.typesr,Z getLoggerr1r rVrYr]r^r-rZRSAPrivateKeyWithSerializationZ(EllipticCurvePrivateKeyWithSerializationZEd25519PrivateKeyZX25519PrivateKeyr.rrr/r:rgrpr2rHrqrrrZDEFAULT_MANAGEMENT_KEYrrLr@rRr%rr1rrrrhr*rr`r'rrr>r4r8r9rrrrrrr3rrrrjrirorqrkrtrsrurpZORIGIN_IMPORTEDrnrlrrr&rWZUV_P2rrrrrrrrrrrrrrrrrrrr rr)rs@r9rs8#"   *&&5581NNOELLA   N   8 $    9&&112    IT ,Hw,H,H^'( . 0700B(-(-(-V7*             "!   '        P P  P   ?    *  ;F;F ;F| 48 8 8 vQ0-Q*&YRQ.!?HJ $J $r8