o Fh@sdZddlmZddlZddlmZddlmZddlm Z ddl m Z ddl Z ddl mZdd l mZdd lmZd Zd Zd ZdZe ZddZGdddejZGdddejejZdS)zPure-Python RSA cryptography implementation. Uses the ``rsa``, ``pyasn1`` and ``pyasn1_modules`` packages to parse PEM files storing PKCS#1 or PKCS#8 keys as well as certificates. There is no support for p12 files. )absolute_importN)decoder)pem) Certificate)PrivateKeyInfo)_helpers) exceptions)base)@ s-----BEGIN CERTIFICATE-----)z-----BEGIN RSA PRIVATE KEY-----z-----END RSA PRIVATE KEY-----)z-----BEGIN PRIVATE KEY-----z-----END PRIVATE KEY-----cCsZt|}t}td|dD]}|||d}tddtt|D}||q t|S)zConverts an iterable of 1s and 0s to bytes. Combines the list 8 at a time, treating each group of 8 bits as a single byte. Args: bit_list (Sequence): Sequence of 1s and 0s. Returns: bytes: The decoded bytes. rrcss|] \}}||VqdSN).0valdigitrrV/var/www/html/loop/nvenv/lib/python3.10/site-packages/google/auth/crypt/_python_rsa.py ;sz%_bit_list_to_bytes..)len bytearrayrangesumzip_POW2appendbytes)bit_listnum_bits byte_valsstart curr_bitschar_valrrr_bit_list_to_bytes+s  r'c@s8eZdZdZddZeejddZ e ddZ dS) RSAVerifierzVerifies RSA cryptographic signatures using public keys. Args: public_key (rsa.key.PublicKey): The public key used to verify signatures. cCs ||_dSr)_pubkey)self public_keyrrr__init__Hs zRSAVerifier.__init__c Cs<t|}z tj|||jWSttjjfyYdSw)NF)rto_bytesrsapkcs1verifyr) ValueErrorVerificationError)r*message signaturerrrr0Ks zRSAVerifier.verifyc Cst|}t|v}|r=tj|d}tj|td\}}|dkr&t d||dd}t |d}tj |d}||Stj |d }||S) aConstruct an Verifier instance from a public key or public certificate string. Args: public_key (Union[str, bytes]): The public key in PEM format or the x509 public key certificate. Returns: google.auth.crypt._python_rsa.RSAVerifier: The constructed verifier. Raises: ValueError: If the public_key can't be parsed. CERTIFICATEasn1Spec Unused bytestbsCertificatesubjectPublicKeyInfosubjectPublicKeyDERPEM)rr-_CERTIFICATE_MARKERr.rload_pemrdecoderr InvalidValuer' PublicKey load_pkcs1) clsr+ is_x509_certder asn1_cert remaining cert_info key_bytespubkeyrrr from_stringSs    zRSAVerifier.from_stringN) __name__ __module__ __qualname____doc__r,rcopy_docstringr Verifierr0 classmethodrMrrrrr(@s  r(c@sTeZdZdZd ddZeeej ddZ eej ddZ e d d d Z dS) RSASignera?Signs messages with an RSA private key. Args: private_key (rsa.key.PrivateKey): The private key to sign with. key_id (str): Optional key ID used to identify this private key. This can be useful to associate the private key with its associated public key or certificate. NcCs||_||_dSr)_key_key_id)r* private_keykey_idrrrr,~s zRSASigner.__init__cCs|jSr)rW)r*rrrrYszRSASigner.key_idcCst|}tj||jdS)NzSHA-256)rr-r.r/signrV)r*r3rrrrZs zRSASigner.signc Cst|}tt|tt\}}|dkrtj j j |dd}n-|dkrGt j |td\}}|dkr6td||d}tj j j |dd}ntd |||d S) aConstruct an Signer instance from a private key in PEM format. Args: key (str): Private key in PEM format. key_id (str): An optional key id used to identify the private key. Returns: google.auth.crypt.Signer: The constructed signer. Raises: ValueError: If the key cannot be parsed as PKCS#1 or PKCS#8 in PEM format. rr=)formatrr6r8r9 privateKeyzNo key could be detected.)rY)r from_bytesrreadPemBlocksFromFileioStringIO _PKCS1_MARKER _PKCS8_MARKERr.key PrivateKeyrDrrA _PKCS8_SPECrrBgetComponentByNameasOctetsMalformedError) rErcrY marker_idrKrXkey_inforIprivate_key_inforrrrMs      zRSASigner.from_stringr)rNrOrPrQr,propertyrrRr SignerrYrZrTrMrrrrrUts     rU)rQ __future__rr_pyasn1.codec.derrpyasn1_modulesrpyasn1_modules.rfc2459rpyasn1_modules.rfc5208rr. google.authrrgoogle.auth.cryptr rr?rarbrer'rSr(rmFromServiceAccountMixinrUrrrrs&        4