zj9@ddlmZmZmZmZmZddlZddlmZddlm Z ddl m Z ddl mZmZmZGddej"eZGd d ej"eZed d ZGdd ej"eZedeeZGddeeej"eZy))ClassVarGenericOptionalTypeTypeVarN)encoding) exceptions)Encoder)EncryptedMessage StringFixerrandomceZdZUdZej j Zee e d<e jfde de jfdZde fdZde fdZd edefd Zd edefd Zy ) PublicKeya= The public key counterpart to an Curve25519 :class:`nacl.public.PrivateKey` for encrypting messages. :param public_key: [:class:`bytes`] Encoded Curve25519 public key :param encoder: A class that is able to decode the `public_key` :cvar SIZE: The size that the public key is required to be SIZE public_keyencoderc.|j||_t|jtst j dt |j|jk7r.t jdj|jy)Nz'PublicKey must be created from 32 bytesz,The public key must be exactly {} bytes long) decode _public_key isinstancebytesexc TypeErrorlenr ValueErrorformat)selfrrs L/var/www/api.ozpay.ru/ozpay/venv/lib/python3.12/site-packages/nacl/public.py__init__zPublicKey.__init__$sw #>>*5$**E2-- IJ J t DII -..>EEII  .returnc|jSNrrs r __bytes__zPublicKey.__bytes__4r c*tt|Sr#)hashrr%s r__hash__zPublicKey.__hash__7sE$K  r otherct||jsytjj t |t |SNF)r __class__naclbindings sodium_memcmprrr+s r__eq__zPublicKey.__eq__:s2%0}}**5;e EEr c||k( Sr#r2s r__ne__zPublicKey.__ne__?EM""r N)__name__ __module__ __qualname____doc__r/r0crypto_box_PUBLICKEYBYTESrrint__annotations__r RawEncoderrr rr&r*objectboolr3r6r5r rrrs--AAD(3-A %-$7$7!!  5 !#!FFFtF #F#t#r rcZeZdZUdZej j Zee e d<ej jZ ee e d<e jfdede j fdZee jfdede j ddfd Zdefd Zde fd Zd edefd Zd edefdZeddZy) PrivateKeya{ Private key for decrypting messages using the Curve25519 algorithm. .. warning:: This **must** be protected and remain secret. Anyone who knows the value of your :class:`~nacl.public.PrivateKey` can decrypt any message encrypted by the corresponding :class:`~nacl.public.PublicKey` :param private_key: The private key used to decrypt messages :param encoder: The encoder class used to decode the given keys :cvar SIZE: The size that the private key is required to be :cvar SEED_SIZE: The size that the seed used to generate the private key is required to be r SEED_SIZE private_keyrc>|j|}t|trt||jk(s.t j dj|jtjj|}||_ t||_ y)Nz>PrivateKey must be created from a {} bytes long raw secret key)rrrrrrrrr/r0crypto_scalarmult_base _private_keyrr)rrErraw_public_keys rrzPrivateKey.__init__Wsz nn[1  {E *s;/?499/L--T&#  ==kJ'#N3r seedr!c$|j|}t|trt||jk(s.t j dj|jtjj|\}}||S)ah Generate a PrivateKey using a deterministic construction starting from a caller-provided seed .. warning:: The seed **must** be high-entropy; therefore, its generator **must** be a cryptographic quality random function like, for example, :func:`~nacl.utils.random`. .. warning:: The seed **must** be protected and remain secret. Anyone who knows the seed is really in possession of the corresponding PrivateKey. :param seed: The seed used to generate the private key :rtype: :class:`~nacl.public.PrivateKey` z7PrivateKey seed must be a {} bytes long binary sequence) rrrrrDrrrr/r0crypto_box_seed_keypair)clsrJrraw_pkraw_sks r from_seedzPrivateKey.from_seedmsq,~~d#4'CI,F--M&'  >>tD6{r c|jSr#)rHr%s rr&zPrivateKey.__bytes__s   r cTtt|t|jfSr#)r)typerrr%s rr*zPrivateKey.__hash__sT$Zt!7899r r+cbt||jsy|j|jk(Sr-)rr.rr2s rr3zPrivateKey.__eq__s(%0%"2"222r c||k( Sr#r5r2s rr6zPrivateKey.__ne__r7r c`|ttjtjS)z~ Generates a random :class:`~nacl.public.PrivateKey` object :rtype: :class:`~nacl.public.PrivateKey` r)r rCrrr?)rMs rgeneratezPrivateKey.generates 6*//*H4G4GHHr N)r!rC)r8r9r:r;r/r0crypto_box_SECRETKEYBYTESrrr=r>crypto_box_SEEDBYTESrDrr?rr r classmethodrPr&r*r@rAr3r6rXr5r rrCrCCs --AAD(3-A#}}AAIx}A %-$7$744!!4,%-$7$7  !!    D!5!:#:3F3t3 #F#t#IIr rC_BoxBox)boundc XeZdZUdZej j Zee e d<e e d<de de fdZde fdZeej$fd eed e d edefd Zd ej$fde dee d ej*defdZd ej$fde dee d ej*de fdZde fdZy )r]a/ The Box class boxes and unboxes messages between a pair of keys The ciphertexts generated by :class:`~nacl.public.Box` include a 16 byte authenticator which is checked as part of the decryption. An invalid authenticator will cause the decrypt function to raise an exception. The authenticator is not a signature. Once you've decrypted the message you've demonstrated the ability to create arbitrary valid message, so messages you send are repudiable. For non-repudiable messages, sign them after encryption. :param private_key: :class:`~nacl.public.PrivateKey` used to encrypt and decrypt messages :param public_key: :class:`~nacl.public.PublicKey` used to encrypt and decrypt messages :cvar NONCE_SIZE: The size that the nonce is required to be. NONCE_SIZE _shared_keyrErc0t|trt|tstjdt j j|jtj|jtj|_ y)Nz5Box must be created from a PrivateKey and a PublicKeyrW) rrCrrrr/r0crypto_box_beforenmencoderr?ra)rrErs rrz Box.__init__su+z2*  ; --G  ==<<   h&9&9  :   x':':  ; r r!c|jSr#rar%s rr&z Box.__bytes__r'r rMencodedrcT|j|}|j||_|S)z[ Alternative constructor. Creates a Box from an existing Box's shared key. )__new__rra)rMrgrboxs rrz Box.decodes)KK$"..1 r N plaintextnoncec|t|j}t||jk7r"tjd|jzt j j|||j}|j|}|j|}tj|||j||zS)a Encrypts the plaintext message using the given `nonce` (or generates one randomly if omitted) and returns the ciphertext encoded with the encoder. .. warning:: It is **VITALLY** important that the nonce is a nonce, i.e. it is a number used only once for any given key. If you fail to do this, you compromise the privacy of the messages encrypted. :param plaintext: [:class:`bytes`] The plaintext message to encrypt :param nonce: [:class:`bytes`] The nonce to use in the encryption :param encoder: The encoder to use to encode the ciphertext :rtype: [:class:`nacl.utils.EncryptedMessage`] 'The nonce must be exactly %s bytes long) r r`rrrr/r0crypto_box_easy_afternmrardr _from_parts)rrkrlr ciphertext encoded_nonceencoded_ciphertexts rencryptz Box.encrypts( =4??+E u: (..9DOOK ]]::       u- $^^J7++   NN5:- .  r rqc2|j|}||d|j}||jd}t||jk7r"tjd|jzt j j|||j}|S)a Decrypts the ciphertext using the `nonce` (explicitly, when passed as a parameter or implicitly, when omitted, as part of the ciphertext) and returns the plaintext message. :param ciphertext: [:class:`bytes`] The encrypted message to decrypt :param nonce: [:class:`bytes`] The nonce used when encrypting the ciphertext :param encoder: The encoder used to decode the ciphertext. :rtype: [:class:`bytes`] Nrn) rr`rrrr/r0crypto_box_open_easy_afternmra)rrqrlrrks rdecryptz Box.decrypt s$^^J/ =01E#DOO$56J u: (..9DOOK MM>>      r c|jS)a Returns the Curve25519 shared secret, that can then be used as a key in other symmetric ciphers. .. warning:: It is **VITALLY** important that you use a nonce with your symmetric cipher. If you fail to do this, you compromise the privacy of the messages encrypted. Ensure that the key length of your cipher is 32 bytes. :rtype: [:class:`bytes`] rfr%s r shared_keyzBox.shared_key1sr )r8r9r:r;r/r0crypto_box_NONCEBYTESr`rr=r>rrCrrr&r[rr?rr\r rrr rtrwryr5r rr]r]s&!% C CJ C  J  I   5 > ++ ? D --L r r!c|jSr#r$r%s rr&zSealedBox.__bytes__jr'r rkrc|tjj||j}|j |}|S)a{ Encrypts the plaintext message using a random-generated ephemeral key pair and returns a "composed ciphertext", containing both the public part of the key pair and the ciphertext proper, encoded with the encoder. The private part of the ephemeral key-pair will be scrubbed before returning the ciphertext, therefore, the sender will not be able to decrypt the generated ciphertext. :param plaintext: [:class:`bytes`] The plaintext message to encrypt :param encoder: The encoder to use to encode the ciphertext :return bytes: encoded ciphertext )r/r0crypto_box_sealrrd)rrkrrqrss rrtzSealedBox.encryptms5(]]229d>N>NO $^^J7!!r rzSealedBox[PrivateKey]rqc|j|}|j tdtjj ||j |j}|S)a Decrypts the ciphertext using the ephemeral public key enclosed in the ciphertext and the SealedBox private key, returning the plaintext message. :param ciphertext: [:class:`bytes`] The encrypted message to decrypt :param encoder: The encoder used to decode the ciphertext. :return bytes: The original plaintext :raises TypeError: if this SealedBox was created with a :class:`~nacl.public.PublicKey` rather than a :class:`~nacl.public.PrivateKey`. z4SealedBoxes created with a public key cannot decrypt)rrHrr/r0crypto_box_seal_openr)rrqrrks rrwzSealedBox.decryptsa$^^J/    $F MM66        r N)r8r9r:r;rr>rr{rr&rr?r rtrwr5r rr}r}Cs"5/!d$ 5 %-$7$7""!!"  ":%-$7$7%!!  r r})typingrrrrr nacl.bindingsr/rr r nacl.encodingr nacl.utilsr r r EncodablerrCr\r]r{r}r5r rrs>="!<<)#""K)#XbI##[bIJvU#R (  kR jvy*-b x11;br