o
    CZhq(                     @  sh   d dl mZ d dlZd dlmZmZmZ d dlmZ d dl	m
Z
mZ ejr+d dlmZ G dd dZdS )	    )annotationsN)
InvalidTagUnsupportedAlgorithm_Reasons)ciphers)
algorithmsmodes)Backendc                   @  sb   e Zd ZdZdZdZdd
dZdddZd ddZd!ddZ	d"ddZ
d#ddZed$ddZdS )%_CipherContext   r   i    backendr	   	operationintreturnNonec                 C  s@  || _ || _|| _|| _d | _t| jtjr| jjd | _	nd| _	| j j
 }| j j|| j j
j}| j j}z|t|t|f }W n tyY   td|j|rS|jn|tjw || j ||}|| j jjkrd|j d}	|d ur||	d|j d7 }	|	d| j  7 }	t|	tjt|tjr| j j|j}
n2t|tjr| j j|j}
n#t|tjr| j j|j }
nt|t!j"r| j j|j }
n| j jj}
| j j
#||| j jj| j jj| j jj|}| j $|d	k | j j
%|t&|j'}| j $|d	k t|tj(rA| j j
)|| j j
j*t&|
| j jj}| j $|d	k |j+d urA| j j
)|| j j
j,t&|j+|j+}| j $|d	k |j+| _| j j
#|| j jj| j jj| j j|j'|
|}| j - }| j j
}|d	kr|j.sv|d	 /|j0|j1s|j2r|d	 /|j3|j4rt5d
| j j$|d	k|d | j j
6|d	 || _7d S )N   r   z6cipher {} in {} mode is not supported by this backend.zcipher  zin z mode z_is not supported by this backend (Your version of OpenSSL may be too old. Current version: {}.)r   z+In XTS mode duplicated keys are not allowederrors)8_backendZ_cipher_mode
_operation_tag
isinstancer   ZBlockCipherAlgorithm
block_size_block_size_bytes_libZEVP_CIPHER_CTX_new_ffigcZEVP_CIPHER_CTX_freeZ_cipher_registrytypeKeyErrorr   formatnamer   ZUNSUPPORTED_CIPHERNULLZopenssl_version_textr   ZModeWithInitializationVectorfrom_bufferZinitialization_vectorZModeWithTweakZtweakZModeWithNoncenoncer   ZChaCha20ZEVP_CipherInit_exopenssl_assertZEVP_CIPHER_CTX_set_key_lengthlenkeyGCMEVP_CIPHER_CTX_ctrlZEVP_CTRL_AEAD_SET_IVLENtagEVP_CTRL_AEAD_SET_TAG_consume_errorsZCRYPTOGRAPHY_IS_LIBRESSL_lib_reason_matchERR_LIB_EVPZEVP_R_XTS_DUPLICATED_KEYSCryptography_HAS_PROVIDERSERR_LIB_PROVZPROV_R_XTS_DUPLICATED_KEYS
ValueErrorZEVP_CIPHER_CTX_set_padding_ctx)selfr   ciphermoder   ctxregistryadapterZ
evp_ciphermsgZiv_nonceresr   lib r=   c/var/www/html/lang_env/lib/python3.10/site-packages/cryptography/hazmat/backends/openssl/ciphers.py__init__   s   
	




	
z_CipherContext.__init__databytesc                 C  s2   t t|| j d }| ||}t|d | S )Nr   )	bytearrayr'   r   update_intorA   )r4   r@   bufnr=   r=   r>   update   s   z_CipherContext.updaterD   c                 C  s  t |}t ||| j d k rtdt || j d d}d}| jjd}| jjj|dd}| jj|}||kr|| }	|| }
t| j	|| }| jj
| j|	||
|}|dkrlt| jtjrl| j  td| j|dk ||7 }||d 7 }||ks<|S )Nr   z1buffer must be at least {} bytes for this payloadr   int *T)Zrequire_writablezeIn XTS mode you must supply at least a full block in the first update call. For AES this is 16 bytes.)r'   r   r2   r!   r   r   newr$   min_MAX_CHUNK_SIZEr   EVP_CipherUpdater3   r   r   r   ZXTSr-   r&   )r4   r@   rD   Ztotal_data_lenZdata_processedZ	total_outoutlenZ
baseoutbufZ	baseinbufZoutbufZinbufZinlenr;   r=   r=   r>   rC      s:   
z_CipherContext.update_intoc                 C  s  | j | jkrt| jtjr| jd u rtd| jj	
d| j}| jj	
d}| jj| j||}|dkrt| j }|sDt| jtjrDt| jj}| jj|d |j|jpl|joa|d |j|jpl|jol|d j|jk|d tdt| jtjr| j | jkr| jj	
d| j}| jj| j| jjj| j|}| j|dk | jj	|d d  | _ | jj!| j}| j|dk | jj	|d |d  S )Nz4Authentication tag must be provided when decrypting.zunsigned char[]rG   r   r   zFThe length of the provided data is not a multiple of the block length.r   )"r   _DECRYPTr   r   r   ZModeWithAuthenticationTagr+   r2   r   r   rH   r   r   ZEVP_CipherFinal_exr3   r-   r)   r   r&   r.   r/   Z'EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTHr0   r1   ZPROV_R_WRONG_FINAL_BLOCK_LENGTHZCRYPTOGRAPHY_IS_BORINGSSLreasonZ*CIPHER_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH_ENCRYPTr*   ZEVP_CTRL_AEAD_GET_TAGbufferr   ZEVP_CIPHER_CTX_reset)r4   rD   rL   r;   r   r<   Ztag_bufr=   r=   r>   finalize   sh   

z_CipherContext.finalizer+   c                 C  s~   t |}|| jjk rtd| jj|| jkr td| j| jj| j	| jjj
t ||}| j|dk || _|  S )Nz.Authentication tag must be {} bytes or longer.z0Authentication tag cannot be more than {} bytes.r   )r'   r   Z_min_tag_lengthr2   r!   r   r   r   r*   r3   r,   r&   r   rQ   )r4   r+   Ztag_lenr;   r=   r=   r>   finalize_with_tag   s&   
z _CipherContext.finalize_with_tagc                 C  sN   | j jd}| j j| j| j jj|| j j|t|}| j 	|dk d S )NrG   r   )
r   r   rH   r   rK   r3   r#   r$   r'   r&   )r4   r@   rL   r;   r=   r=   r>   authenticate_additional_data  s   z+_CipherContext.authenticate_additional_databytes | Nonec                 C  s   | j S )N)r   )r4   r=   r=   r>   r+     s   z_CipherContext.tagN)r   r	   r   r   r   r   )r@   rA   r   rA   )r@   rA   rD   rA   r   r   )r   rA   )r+   rA   r   rA   )r@   rA   r   r   )r   rT   )__name__
__module____qualname__rO   rM   rJ   r?   rF   rC   rQ   rR   rS   propertyr+   r=   r=   r=   r>   r
      s    

y

$
@
r
   )
__future__r   typingZcryptography.exceptionsr   r   r   Zcryptography.hazmat.primitivesr   Z&cryptography.hazmat.primitives.ciphersr   r   TYPE_CHECKINGZ,cryptography.hazmat.backends.openssl.backendr	   r
   r=   r=   r=   r>   <module>   s   