ih^ddlZddlmZddlmZddlmZddlmZdedee e fde fd Z ded ee e fde fd Z Gd d e Zdedee e fdefdZy)N)deque) ModuleType)Union)strxorcipher plaintextreturnctdt|dDcgc] }|||dz }}t|}d|dz z}|d}t|dd}td|dzD]]}tjd|} |j ||j z} t| dd| }|j| dd_|dj|zScc}w)Nr>Q) rangelenrstructpackencryptpopleftrappendjoin) rriSnsARtt_64cts T/var/www/html/dev/engine/venv/lib/python3.12/site-packages/Crypto/Cipher/_mode_kw.pyWr" s$)C NA#>?a1QqS ?A? AA QU A !A ae A 1a!e_{{4# ^^A O , 2bq64  AB  sxx{? @sC ciphertextctdt|dDcgc] }|||dz }}t|}d|dz z}|d}t|dd}t|ddD]]}tjd|} |j t || |jz} | dd}|j| dd_|dj|zScc}w)Nrr r r rr) rrrrrdecryptrpop appendleftr) rr#rCrrrrrrpts r! W_inverser+s%*!S_a$@AqAac AAA AA QU A !A ae A 1a_{{4# ^^F1dOaeeg5 6 rF RV  sxx{? BsCc^eZdZdZdedeeeffdZdeeefdefdZ deeefdefd Z y ) KWModeaKey Wrap (KW) mode. This is a deterministic Authenticated Encryption (AE) mode for protecting cryptographic keys. See `NIST SP800-38F`_. It provides both confidentiality and authenticity, and it designed so that any bit of the ciphertext depends on all bits of the plaintext. This mode is only available for ciphers that operate on 128 bits blocks (e.g., AES). .. _`NIST SP800-38F`: http://csrc.nist.gov/publications/nistpubs/800-38F/SP-800-38F.pdf :undocumented: __init__ factorykeyc|j|_|jdk7r td||_|j||j|_d|_y)NzKKey Wrap mode is only available for ciphers that operate on 128 bits blocksF) block_size ValueError_factorynewMODE_ECB_cipher_done)selfr.r/s r!__init__zKWMode.__init__?sZ",, ??b @A A  {{3(8(89  rrr c |jr tdt|dzr tdt|dkr tdt|dk\r tdt|jd|z}d |_|S) aEncrypt and authenticate (wrap) a cryptographic key. Args: plaintext: The cryptographic key to wrap. It must be at least 16 bytes long, and its length must be a multiple of 8. Returns: The wrapped key. (The cipher cannot be used more than oncer z2The plaintext must have length multiple of 8 bytesr1z,The plaintext must be at least 16 bytes longlzThe plaintext is too longT)r8r3rr"r7)r9rress r!sealz KWMode.sealLs ::GH H y>A QR R y>B KL L y>U "89 9 AIMN  rr#c|jr tdt|dzr tdt|dkr tdt|j|}|dddk7r tdd |_|ddS) awDecrypt and authenticate (unwrap) a cryptographic key. Args: ciphertext: The cryptographic key to unwrap. It must be at least 24 bytes long, and its length must be a multiple of 8. Returns: The original key. Raises: ValueError If the ciphertext or the key are not valid. r<r z3The ciphertext must have length multiple of 8 bytesz-The ciphertext must be at least 24 bytes longNr=zIncorrect integrity check valueT)r8r3rr+r7)r9r#r*s r!unsealz KWMode.unsealis ::GH H z?Q RS S z?R LM M t||Z 0 bq68 8>? ? !"v rN) __name__ __module__ __qualname____doc__rrbytes bytearrayr:r?rBrr!r-r-.s` $ E9,- eE9$45%:ui'7!8Urr-r.kwargsc v |d}t||S#t$r}tdt|zd}~wwxYw)aCreate a new block cipher in Key Wrap mode. Args: factory: A block cipher module, taken from `Crypto.Cipher`. The cipher must have block length of 16 bytes, such as AES. Keywords: key: The secret key to use to seal or unseal. r/zMissing parameter:N)KeyError TypeErrorstrr-)r.rJr/es r!_create_kw_cipherrPsF7Um '3  7,s1v5667s 838)r collectionsrtypesrtypingrCrypto.Util.strxorrrGrHr"r+objectr-rPrIrr!rVs %jui'(-2$jy 016;$ZVZz z %eY&6 7