a {a@sJddlZddlZejdddejd<ddlmZddlmZddl m Z m Z ddl m Z dd lmZdd lmZdd lmZdd lmZdd lmZddlmZddlmZddlmZddlmZddlm Z!ddl"m#Z#m$Z$Gddde%Z&Gddde%Z'Gddde(Z)ddZ*ddZ+ddZ,d d!Z-d"d#Z.d$d%Z/d&d'Z0Gd(d)d)e%Z1Gd*d+d+e1Z2Gd,d-d-e2Z3Gd.d/d/e2Z4Gd0d1d1e4Z5Gd2d3d3e4Z6Gd4d5d5e1Z7Gd6d7d7e%Z8Gd8d9d9e8Z9Gd:d;d;e9Z:Gdd?d?e9ZGdDdEdEe8Z?GdFdGdGe8Z@e&jAe3e&jBe5e&jCe6e&jDe7iZEe'jFee'jKe?e'jLe@iZMdHdIZNdJdKZOGdLdMdMe%ZPdNdOZQdPdQZRdidRdSZSdjdTdUZTdVdWZUdXdYZVdZd[ZWd\d]ZXd^d_ZYd`daZZdkdbdcZ[dddeZ\GdfdgdgeZ]e^dhkrFddl_Z_e_`dS)lNz bin/python1ZPYTHONUNBUFFERED)gcd)reduce)packunpack)crc32)hashes)hmac) algorithms)modes)Cipher)default_backend) PBKDF2HMAC)TestCase) Credentials)generate_random_bytes) get_string get_bytesc@s(eZdZdZdZdZdZdZdZdZ dS) EnctypeN) __name__ __module__ __qualname__ZDES_CRCZDES_MD4ZDES_MD5DES3AES128AES256RC4r#r#:/usr/lib/python3/dist-packages/samba/tests/krb5/kcrypto.pyrDsrc@s4eZdZdZdZdZdZdZdZdZ dZ d Z d Z d S) Cksumtyperrr rivN) rrrCRC32ZMD4ZMD4_DESMD5ZMD5_DES SHA1_DES3SHA1 SHA1_AES128 SHA1_AES256HMAC_MD5r#r#r#r$r%Nsr%c@s eZdZdS)InvalidChecksumN)rrrr#r#r#r$r2[sr2cCs |t|||}|t|SN)lenbytes)spadsizeZpadlenr#r#r$_zeropad_sr8cCs,t|t|ksJtddt||DS)NcSsg|]\}}||AqSr#r#).0xyr#r#r$ hz_xorbytes..)r4r5zip)Zb1Zb2r#r#r$ _xorbytesesr?cCs@t|t|ksJd}t||D]\}}|||AO}q"|dkS)Nr)r4r>)Zmac1Zmac2resr:r;r#r#r$ _mac_equalks rAcCs"t|t}|||Sr3)rZHashr updatefinalize)stringalgo_clsZhash_ctxr#r#r$ SIMPLE_HASHus rFcCs$t||t}|||Sr3)r ZHMACr rBrC)keyrDrEZhmac_ctxr#r#r$ HMAC_HASH{s rHcsrdddd}t}|t|}dfddt||Dfddtd |D}t||S) Ncs<|dt|dtfddttDS)Nr'cs8g|]0}|?|dd>d@BqSrr'r#r9inbytesZremainstrr#r$r<sz0_nfold..rotate_right..)r4r5range)rOZnbitsr#rMr$ rotate_rights z_nfold..rotate_rightcsZt|ddt||DtddDrHfddtDqtddDS)NcSsg|]\}}||qSr#r#)r9abr#r#r$r<r=z7_nfold..add_ones_complement..css|]}|d@VqdS)iNr#r9r:r#r#r$ r=z6_nfold..add_ones_complement..cs,g|]$}|dd?|d@qSrIr#rKnvr#r$r<r=cSsg|]}|qSr#r#rTr#r#r$r<r=)r4r>anyrPr5)Zstr1Zstr2r#rVr$add_ones_complements z#_nfold..add_ones_complementr=c3s|]}d|VqdS) Nr#rK)rQrOr#r$rUr=z_nfold..c3s|]}||VqdSr3r#r9p)bigstrrNr#r$rUr=r)r4rjoinrPr)rOrNrZZslenZlcmZslicesr#)r^rNrQrOr$_nfolds "r`cCs|dvS)N)ssssssssssssssssr#)keybytesr#r#r$_is_weak_des_keysrbc@seZdZeddZdS)_EnctypeProfilecCs"t||jkrtdt|j|S)NWrong seed length)r4seedsize ValueErrorKeyenctype)clsseedr#r#r$ random_to_keysz_EnctypeProfile.random_to_keyN)rrr classmethodrkr#r#r#r$rcs rcc@s<eZdZeddZeddZeddZeddZd S) _SimplifiedEnctypecCsLt||j}d}t||jkr8|||}||7}|}q||d|jS)Nr=r)r` blocksizer4re basic_encryptrk)rirGZconstant plaintextZrndseed ciphertextr#r#r$derives  z_SimplifiedEnctype.derivec Cst||td|d}||td|d}|dur:t|j}|t||j}t|j||j}| |||d|j S)N>iBU) rrrget_random_bytesrnr8r7rHcontentshashalgoromacsize) rirGkeyusagerp confounderkikebasic_plaintextr r#r#r$encrypts z_SimplifiedEnctype.encryptc Cs||td|d}||td|d}t||j|jkrDtd|d|j ||j d}}t||jdkrtd|||}t|j ||j } | d|j} t || st d||jdS)Nrsrtruciphertext too shortrz,ciphertext does not meet padding requirementciphertext integrity failure) rrrr4rnryrfr7 basic_decryptrHrwrxrAr2) rirGrzrqr|r} basic_ctextZmacr~r Zexpmacr#r#r$decrypts"  z_SimplifiedEnctype.decryptcCs<t||j}|dt||j }||d}|||S)Nsprf)rFrxr4rnrrro)rirGrDZhashvalZ truncatedZkpr#r#r$prfs  z_SimplifiedEnctype.prfN)rrrrlrrrrrr#r#r#r$rms    rmc@s\eZdZejZdZdZdZdZ dZ e j Z eddZeddZed d Zed d Zd S)_DES3CBCr'cCsddd}t|dkrtd||dd||dd||dd}}}t|j|||S)NcsddtdksJfddD}tfddtdD}tdd||gD}t|r~t|dd Ag|d<|S) NcSs*|dM}t|d@ddr"|S|dBS)Nrrr)bincount)rSr#r#r$paritysz6_DES3CBC.random_to_key..expand..parityr&csg|]}|d@qS)rr#r9rS)rr#r$r<r=z:_DES3CBC.random_to_key..expand..c3s"|]}|d@|d>VqdS)rNr#rK)rjr#r$rUr=z9_DES3CBC.random_to_key..expand..cSsg|]}|qSr#r#rr#r#r$r<r=)r4sumrPr5rb)rjZ firstbytesZlastbyterar#)rrjr$expandsz&_DES3CBC.random_to_key..expandrrdr&r))r4rfrgrh)rirjrk1k2Zk3r#r#r$rks  4z_DES3CBC.random_to_keycCs8|dur|dkrtd|t||d}||dS)Nr=z%Invalid DES3 string-to-key parametersrkerberos)rfrkr`rr)rirDsaltparamskr#r#r$ string_to_key&sz_DES3CBC.string_to_keycCsNt|ddksJt|j}ttd}t||t }| |}|SNr'r) r4ciphers TripleDESrwr CBCr5r r encryptorrB)rirGrpalgocbcrrqr#r#r$ro-s   z_DES3CBC.basic_encryptcCsNt|ddksJt|j}ttd}t||t }| |}|Sr) r4rrrwr rr5r r decryptorrB)rirGrqrrrrpr#r#r$r6s   z_DES3CBC.basic_decryptN)rrrrrrhkeysizerernr7ryrr.rxrlrkrrorr#r#r#r$rs   rc@sBeZdZdZdZdZejZe ddZ e ddZ e dd Z d S) _AESEnctyperrr(c CsRtd|p d\}t|}tt|j||td}||}||}||dS)Nz>Ls) algorithmZlengthr iterationsZbackendr) rrrrr.rer rrrk) rirDrrrZpwbytesZkdfrjZtkeyr#r#r$rGs  z_AESEnctype.string_to_keycst|dksJt|j}ttd}t||tfdd}|t |d}t|dkrt|dpld}|dd|dd|ddd|}|S)Nrcs}||}|Sr3)rrB)rprrqaes_ctxr#r$ aes_encrypt\s z._AESEnctype.basic_encrypt..aes_encryptii) r4rAESrwr rr5r r r8)rirGrprrrctextlastlenr#rr$roTs   ,z_AESEnctype.basic_encryptc stdksJt|j}ttd}t||tfdd}tdkrX|Sfddt dtdD}t|d}td}d} |dd D]} | t || |7} | }q||d } t | d||d} | |d} | t ||d| |7} | | S) Nrcs}||}|Sr3)rrB)rqrrprr#r$ aes_decryptqs z._AESEnctype.basic_decrypt..aes_decryptcsg|]}||dqS)rr#r\)rqr#r$r<yr=z-_AESEnctype.basic_decrypt..rr=r) r4rrrwr rr5r r rPr?) rirGrqrrrZcblocksrZ prev_cblockrprSZ lastplaintextZomittedr#)rrqr$ris&      z_AESEnctype.basic_decryptN) rrrrnr7ryrr.rxrlrrorr#r#r#r$r@s  rc@seZdZejZdZdZdS) _AES128CTSrN)rrrrr rhrrer#r#r#r$rsrc@seZdZejZdZdZdS) _AES256CTS N)rrrrr!rhrrer#r#r#r$rsrc@sVeZdZejZdZdZeddZ e ddZ e ddZ e dd Z e d d Zd S) _RC4rcCs(ddd}||vr||n|}td|S)Nr'r[)rrd?Z"d@dAZ#dBdCZ$dDdEZ%dFdGZ&dHdIZ'dJdKZ(dLdMZ)dNdOZ*dPdQZ+dRdSZ,dTdUZ-dVdWZ.dXdYZ/dZd[Z0d\S)] KcrytoTestzkcrypto Test case.cCsZtd}td}d}d}td}ttj|}|t||||||t||||dS)N 9062430C8CDA3388922E6D6A509F5B7AZ 94B491F481485B9A0678CD3C4EA386ADrs 9 bytesssZJ68FB9679601F45C78857B2BF820FD6E53ECA8D42FD4B1D7024A09205ABB7CD2EC26C355D2F)rrgrr assertEqualrrrkbZconfrzplainZctxtrr#r#r$test_aes128_cryprs zKcrytoTest.test_aes128_cryprcCsZtd}td}d}d}td}ttj|}|t||||||t||||dS)NZ@F1C795E9248A09338D82C3F8D5B567040B0110736845041347235B1404231398Z E45CA518B42E266AD98E165E706FFB60r30 bytes bytes bytes bytes bytZtD1137A4D634CFECE924DBC3BF6790648BD5CFF7DE0E7B99460211D0DAEF3D79A295C688858F3B34B9CBD6EEBAE81DAF6B734D4D498B6714F1C1D)rrgrr!rrrrr#r#r$test_aes256_crypts zKcrytoTest.test_aes256_cryptcCs:td}d}d}td}ttj|}ttj||||dS)Nrrs%eight nine ten eleven twelve thirteenZ01A4B088D45628F6946614E3)rrgrr rr%r/rrrzrrrr#r#r$test_aes128_checksums  zKcrytoTest.test_aes128_checksumcCs:td}d}d}td}ttj|}ttj||||dS)NZ@B1AE4CD8462AFF1677053CC9279AAC30B796FB81CE21474DD3DDBCFEA4EC76D7rsfourteenZE08739E3279E2903EC8E3836)rrgrr!rr%r0rr#r#r$test_aes256_checksums  zKcrytoTest.test_aes256_checksumcCs:d}d}td}td}ttj|||}||j|dS)NpasswordATHENA.MIT.EDUraeburnZ00000002Z C651BF29E2300AC27FA469D693BDDA13)rrrr rrwrrDrrrrr#r#r$test_aes128_string_to_keys z$KcrytoTest.test_aes128_string_to_keycCs:d}d}td}td}ttj|||}||j|dS)Ns@XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXspass phrase equals block sizeZ000004B0Z@89ADEE3608DB8BC71F1BFBFE459486B05618B70CBAE22092534E56C553BA4B34)rrrr!rrwrr#r#r$test_aes256_string_to_keys z$KcrytoTest.test_aes256_string_to_keycCs,td}ttjdd}|t|d|dS)NZ 77B39A37A868920F2A51F9DD150C5717key1sa)rrrr rrrrrr#r#r$test_aes128_prfszKcrytoTest.test_aes128_prfcCs,td}ttjdd}|t|d|dS)NZ 0D674DD0F9A6806525A4D92E828BD15Akey2sb)rrrr!rrrr#r#r$test_aes256_prfszKcrytoTest.test_aes256_prfcCsDtd}ttjdd}ttjdd}t||dd}||j|dS)NZ 97DF97E4B798B29EB31ED7280287A92Arrab)rrrr rrrwrrrrrr#r#r$test_aes128_cf2s zKcrytoTest.test_aes128_cf2cCsDtd}ttjdd}ttjdd}t||dd}||j|dS)NZ@4D6CA4E629785C1F01BAF55E2E548566B9617AE3A96868C337CB93B5E72B1C7Brrrr)rrrr!rrrwrr#r#r$test_aes256_cf2s zKcrytoTest.test_aes256_cf2cCs`td}td}d}d}td}ttj|}|t||||||t|||t|ddS)NZ00DD52094E0F41CECCB5BE510A764B35176E3981332F1E598Z94690A17B2DA3C9Brs 13 bytes byteZX839A17081ECBAFBCDC91B88C6955DD3C4514023CF177B77BF0D0177A16F705E849CB7781D76A316B193F8D30r')rrgrrrrrr8rr#r#r$test_des3_crypts zKcrytoTest.test_des3_cryptcCs0d}d}td}ttj||}||j|dS)NrrZ0850BB51358548CD05E86768C313E3BFEF7511937DCF72C3E)rrrrrrw)rrDrrrr#r#r$test_des3_string_to_key#s z"KcrytoTest.test_des3_string_to_keycCs:td}d}d}td}ttj|}ttj||||dS)NZ07A25DF8992296DCEDA0E135BC4046E2375B3C14C98FBC162rs six sevenZ(0EEFC9C3E049AABC1BA5C401677D9AB699082BB4)rrgrrrr%r-rr#r#r$test_des3_checksum+s  zKcrytoTest.test_des3_checksumcCsDtd}ttjdd}ttjdd}t||dd}||j|dS)NZ0E58F9EB643862C13AD38E529313462A7F73E62834FE54A01rrrr)rrrrrrrwrr#r#r$ test_des3_cf24s zKcrytoTest.test_des3_cf2cCsZtd}td}d}d}td}ttj|}|t||||||t||||dS)NZ 68F263DB3FCE15D031C9EAB02D67107AZ37245E73A45FBF72rrZl95F9047C3AD75891C2E9B04B16566DC8B6EB9CE4231AFB2542EF87A7B5A0F260A99F0460508DE0CECC632D07C354124E46C5D2234EB8)rrgrr"rrrrr#r#r$test_rc4_crypt<s zKcrytoTest.test_rc4_cryptcCs,d}td}ttj|d}||j|dS)NsfooZ AC8E657F83DF82BEEA5D43BDAF7800CC)rrrr"rrw)rrDrrr#r#r$test_rc4_string_to_keyHsz!KcrytoTest.test_rc4_string_to_keycCs:td}d}d}td}ttj|}ttj||||dS)NZ F7D3A155AF5E238A0B7A871A96BA2AB2"seventeen eighteen nineteen twentyZ EB38CC97E2230F59DA4117DC5859D7EC)rrgrr"rr%r1rr#r#r$test_rc4_checksumOs  zKcrytoTest.test_rc4_checksumcCsDtd}ttjdd}ttjdd}t||dd}||j|dS)NZ 24D7F6B6BAE4E5C00D2082C5EBAB3672rrrr)rrrr"rrrwrr#r#r$ test_rc4_cf2Xs zKcrytoTest.test_rc4_cf2cCs6d}d}t|||}d}td}ttj||||dS)NspwdsbytesrZ 9d9588cdef3a8cefc9d2c208d978f60c)rrrr%r,retypeZusageZpwrrGrrr#r#r$_test_md5_unkeyed_checksum`s  z%KcrytoTest._test_md5_unkeyed_checksumcCs|tjdSN(r rrrr#r#r$'test_md5_unkeyed_checksum_des3_usage_40isz2KcrytoTest.test_md5_unkeyed_checksum_des3_usage_40cCs|tjdSN2rrr#r#r$'test_md5_unkeyed_checksum_des3_usage_50lsz2KcrytoTest.test_md5_unkeyed_checksum_des3_usage_50cCs|tjdSrr rr"rr#r#r$&test_md5_unkeyed_checksum_rc4_usage_40osz1KcrytoTest.test_md5_unkeyed_checksum_rc4_usage_40cCs|tjdSrrrr#r#r$&test_md5_unkeyed_checksum_rc4_usage_50rsz1KcrytoTest.test_md5_unkeyed_checksum_rc4_usage_50cCs|tjdSrr rr rr#r#r$)test_md5_unkeyed_checksum_aes128_usage_40usz4KcrytoTest.test_md5_unkeyed_checksum_aes128_usage_40cCs|tjdSrrrr#r#r$)test_md5_unkeyed_checksum_aes128_usage_50xsz4KcrytoTest.test_md5_unkeyed_checksum_aes128_usage_50cCs|tjdSrr rr!rr#r#r$)test_md5_unkeyed_checksum_aes256_usage_40{sz4KcrytoTest.test_md5_unkeyed_checksum_aes256_usage_40cCs|tjdSrrrr#r#r$)test_md5_unkeyed_checksum_aes256_usage_50~sz4KcrytoTest.test_md5_unkeyed_checksum_aes256_usage_50cCs6d}d}t|||}d}td}ttj||||dS)Nrsalts"twenty nineteen eighteen seventeenZ(381c870d8875d1913555de19af5c885fd27b7da9)rrrr%r.r r#r#r$_test_sha1_unkeyed_checksums  z&KcrytoTest._test_sha1_unkeyed_checksumcCs|tjdSrr rrrr#r#r$(test_sha1_unkeyed_checksum_des3_usage_40sz3KcrytoTest.test_sha1_unkeyed_checksum_des3_usage_40cCs|tjdSrr!rr#r#r$(test_sha1_unkeyed_checksum_des3_usage_50sz3KcrytoTest.test_sha1_unkeyed_checksum_des3_usage_50cCs|tjdSrr rr"rr#r#r$'test_sha1_unkeyed_checksum_rc4_usage_40sz2KcrytoTest.test_sha1_unkeyed_checksum_rc4_usage_40cCs|tjdSrr$rr#r#r$'test_sha1_unkeyed_checksum_rc4_usage_50sz2KcrytoTest.test_sha1_unkeyed_checksum_rc4_usage_50cCs|tjdSrr rr rr#r#r$*test_sha1_unkeyed_checksum_aes128_usage_40sz5KcrytoTest.test_sha1_unkeyed_checksum_aes128_usage_40cCs|tjdSrr'rr#r#r$*test_sha1_unkeyed_checksum_aes128_usage_50sz5KcrytoTest.test_sha1_unkeyed_checksum_aes128_usage_50cCs|tjdSrr rr!rr#r#r$*test_sha1_unkeyed_checksum_aes256_usage_40sz5KcrytoTest.test_sha1_unkeyed_checksum_aes256_usage_40cCs|tjdSrr*rr#r#r$*test_sha1_unkeyed_checksum_aes256_usage_50sz5KcrytoTest.test_sha1_unkeyed_checksum_aes256_usage_50cCs6d}d}t|||}d}td}ttj||||dS)Nrrs$africa america asia australia europeZce595a53)rrrr%r+r r#r#r$_test_crc32_unkeyed_checksums  z'KcrytoTest._test_crc32_unkeyed_checksumcCs|tjdSrr-rrrr#r#r$)test_crc32_unkeyed_checksum_des3_usage_40sz4KcrytoTest.test_crc32_unkeyed_checksum_des3_usage_40cCs|tjdSrr.rr#r#r$)test_crc32_unkeyed_checksum_des3_usage_50sz4KcrytoTest.test_crc32_unkeyed_checksum_des3_usage_50cCs|tjdSrr-rr"rr#r#r$(test_crc32_unkeyed_checksum_rc4_usage_40sz3KcrytoTest.test_crc32_unkeyed_checksum_rc4_usage_40cCs|tjdSrr1rr#r#r$(test_crc32_unkeyed_checksum_rc4_usage_50sz3KcrytoTest.test_crc32_unkeyed_checksum_rc4_usage_50cCs|tjdSrr-rr rr#r#r$+test_crc32_unkeyed_checksum_aes128_usage_40sz6KcrytoTest.test_crc32_unkeyed_checksum_aes128_usage_40cCs|tjdSrr4rr#r#r$+test_crc32_unkeyed_checksum_aes128_usage_50sz6KcrytoTest.test_crc32_unkeyed_checksum_aes128_usage_50cCs|tjdSrr-rr!rr#r#r$+test_crc32_unkeyed_checksum_aes256_usage_40sz6KcrytoTest.test_crc32_unkeyed_checksum_aes256_usage_40cCs|tjdSrr7rr#r#r$+test_crc32_unkeyed_checksum_aes256_usage_50sz6KcrytoTest.test_crc32_unkeyed_checksum_aes256_usage_50N)1rrr__doc__rrrrrrrrrrrrrrrrr r r rrrrrrrrr r"r#r%r&r(r)r+r,r-r/r0r2r3r5r6r8r9r#r#r#r$rs\              r__main__)N)N)N)asysospathinsertenvironZmathr functoolsrZstructrrZbinasciirZcryptography.hazmat.primitivesrr Z&cryptography.hazmat.primitives.ciphersr rr Z+cryptography.hazmat.primitives.ciphers.baser Zcryptography.hazmat.backendsr Z)cryptography.hazmat.primitives.kdf.pbkdf2rZ samba.testsrZsamba.credentialsrZsambarrvZ samba.compatrrobjectrr%rfr2r8r?rArFrHr`rbrcrmrrrrrrrrrrrrrrrr r!r"rr-r/r0r1r,r.r+rrrrgrerkrrrrrrrrrrrrZunittestmainr#r#r#r$-s                 !?:OA