o gf(@sUddlmZddlmZddlmZmZddlm Z e Z e e d<edZe e d<eZe e d<eZe e d <eZe e d <eZe e d <d eeeffd dZded eeeffddZdeded efddZdeded efddZded efddZded efddZded efd d!Zded efd"d#ZGd$d%d%Z d&e d'ed d(fd)d*Z!d&e ded efd+d,Z"d&e d-eded e#fd.d/Z$d(S)0)Tuple) exceptions)ffilib)ensurecrypto_sign_BYTEScrypto_sign_SEEDBYTEScrypto_sign_PUBLICKEYBYTEScrypto_sign_SECRETKEYBYTEScrypto_sign_curve25519_BYTES crypto_sign_ed25519ph_STATEBYTESreturncCs`tdt}tdt}t||}t|dkdtjdt |tddt |tddfS)zu Returns a randomly generated public key and secret key. :rtype: (bytes(public_key), bytes(secret_key)) unsigned char[]rUnexpected library errorraisingN) rnewr r rcrypto_sign_keypairrexc RuntimeErrorbuffer)pkskrcrD/usr/local/lib/python3.10/dist-packages/nacl/bindings/crypto_sign.pyr s   rseedcCsxt|tkr tdtdt}tdt}t |||}t |dkdtj dt |tddt |tddfS)z Computes and returns the public key and secret key using the seed ``seed``. :param seed: bytes :rtype: (bytes(public_key), bytes(secret_key)) z Invalid seedrrrrN) lenr r ValueErrorrrr r rcrypto_sign_seed_keypairrrr)rrrrrrrr 2s    r messagercCs`tdt|t}td}t|||t||}t|dkdtjdt ||dddS)z Signs the message ``message`` using the secret key ``sk`` and returns the signed message. :param message: bytes :param sk: bytes :rtype: bytes runsigned long long *rrrN) rrrrr crypto_signrrrr)r!rsigned signed_lenrrrrr#Hs  r#r$rcCsVtdt|}td}t|||t||dkrtdt||dddS)z Verifies the signature of the signed message ``signed`` using the public key ``pk`` and returns the unsigned message. :param signed: bytes :param pk: bytes :rtype: bytes rr"rSignature was forged or corruptN)rrrrcrypto_sign_openrBadSignatureErrorr)r$rr! message_lenrrrr'Zs  r'public_key_bytescCZt|tkr tdt}td|}t||}t |dkdtj dt ||ddS)a Converts a public Ed25519 key (encoded as bytes ``public_key_bytes``) to a public Curve25519 key as bytes. Raises a ValueError if ``public_key_bytes`` is not of length ``crypto_sign_PUBLICKEYBYTES`` :param public_key_bytes: bytes :rtype: bytes zInvalid curve public keyrrrrN) rr rrr rrr$crypto_sign_ed25519_pk_to_curve25519rrr)r*curve_public_key_lencurve_public_keyrrrrr,o  r,secret_key_bytescCr+)a Converts a secret Ed25519 key (encoded as bytes ``secret_key_bytes``) to a secret Curve25519 key as bytes. Raises a ValueError if ``secret_key_bytes``is not of length ``crypto_sign_SECRETKEYBYTES`` :param secret_key_bytes: bytes :rtype: bytes zInvalid curve secret keyrrrrN) rr rrr rrr$crypto_sign_ed25519_sk_to_curve25519rrr)r0curve_secret_key_lencurve_secret_keyrrrrr1r/r1cCs"t|tkr td|tdS)a  Extract the public Ed25519 key from a secret Ed25519 key (encoded as bytes ``secret_key_bytes``). Raises a ValueError if ``secret_key_bytes``is not of length ``crypto_sign_SECRETKEYBYTES`` :param secret_key_bytes: bytes :rtype: bytes Invalid secret keyNrr rrr r0rrrcrypto_sign_ed25519_sk_to_pk  r7cCs"t|tkr td|dtS)z Extract the seed from a secret Ed25519 key (encoded as bytes ``secret_key_bytes``). Raises a ValueError if ``secret_key_bytes``is not of length ``crypto_sign_SECRETKEYBYTES`` :param secret_key_bytes: bytes :rtype: bytes r4Nr5r6rrrcrypto_sign_ed25519_sk_to_seedr8r9c@s eZdZdZdgZdddZdS)crypto_sign_ed25519ph_statezO State object wrapping the sha-512 state used in ed25519ph computation staterNcCs2tdt|_t|j}t|dkdtjddS)Nrrrr) rrr r;rcrypto_sign_ed25519ph_initrrr)selfrrrr__init__s  z$crypto_sign_ed25519ph_state.__init__)rN)__name__ __module__ __qualname____doc__ __slots__r>rrrrr:sr:edphpmsgNcCsXtt|tdtjdtt|tdtjdt|j|t |}t|dkdtj ddS)z Update the hash state wrapped in edph :param edph: the ed25519ph state being updated :type edph: crypto_sign_ed25519ph_state :param pmsg: the partial message :type pmsg: bytes :rtype: None /edph parameter must be a ed25519ph_state objectrz%pmsg parameter must be a bytes objectrrN) r isinstancer:r TypeErrorbytesrcrypto_sign_ed25519ph_updater;rr)rDrErrrrrJs rJcCstt|tdtjdtt|tdtjdtt|tkdttjdt dt }t |j|t j|}t|dkdtjdt |t ddS) aR Create a signature for the data hashed in edph using the secret key sk :param edph: the ed25519ph state for the data being signed :type edph: crypto_sign_ed25519ph_state :param sk: the ed25519 secret part of the signing key :type sk: bytes :return: ed25519ph signature :rtype: bytes rFrz+secret key parameter must be a bytes objectz secret key must be {} bytes longrrrN)rrGr:rrHrIrr formatrrrr"crypto_sign_ed25519ph_final_creater;NULLrr)rDr signaturerrrrrLs.   rLrNcCstt|tdtjdtt|tdtjdtt|tkdttjdtt|tdtjdtt|t kdt tjdt |j ||}|dkrPt dd S) a Verify a prehashed signature using the public key pk :param edph: the ed25519ph state for the data being verified :type edph: crypto_sign_ed25519ph_state :param signature: the signature being verified :type signature: bytes :param pk: the ed25519 public part of the signing key :type pk: bytes :return: True if the signature is valid :rtype: boolean :raises exc.BadSignatureError: if the signature is not valid rFrz*signature parameter must be a bytes objectzsignature must be {} bytes longz+public key parameter must be a bytes objectz public key must be {} bytes longrr&T)rrGr:rrHrIrrrKr r"crypto_sign_ed25519ph_final_verifyr;r()rDrNrrrrrrOs>   rO)%typingrnaclrr nacl._sodiumrrnacl.exceptionsrcrypto_sign_bytesrint__annotations__crypto_sign_secretkeybytesr crypto_sign_publickeybytesr r crypto_box_secretkeybytesr crypto_sign_ed25519ph_statebytesr rIrr r#r'r,r1r7r9r:rJrLboolrOrrrrsT    )