&NjƕSrSSKrSSKrSSKrSSKrSSKJrJr SSKJr SSK J r J r SSK J r SSKJr SSKJrJrJr SSKrSS KJr SS KJrJrJr SS KJr SS KJr SS KJ r SSK!J"r"J#r#J$r$ SSK%J&r& SSK'J(r( SSK)J*r* SSK+J,r,J-r- SSK.J/r/J0r0 SSK1J2r2 Sr5Sr6"SS\75r8"SS\5r9\\ \\4r:\9"\RvRx\RzR|S9r>\9"\RvR~\RzR|S9r@"SS5rA"SS5rBg!\3a SSK4J2r2 Nf=f) z! Common API for all public keys. N) decodebytes encodebytes) unhexlify)md5sha256) RawIOBase)Path) NamedTupleOptionalUnion)default_backend) asymmetricpadding serialization)EllipticCurvePrivateKey)Ed25519PrivateKey) RSAPrivateKey)Cipher algorithmsmodes)util)o600)Message)PasswordRequiredException SSHException)bu) TripleDESsopenssh-key-v1cUSnSUs=::aS:aU$ US:a [S5e[U5HnXU- US-:wdM[S5e USU*$)N z Invalid key)rrange)datapadding_lengthis J/home/mande/repo/quber/.venv/lib/python3.13/site-packages/paramiko/pkey.py_unpad_opensshr*Csw"XN ~$$ %=)) > " N" #q1u ,}- -#  . !!c(\rSrSrSrSSjrSrSrg)UnknownKeyTypeRzC An unknown public/private key algorithm was attempted to be read. NcXlX lgNkey_type key_bytes)selfr2r3s r)__init__UnknownKeyType.__init__Ws  "r+cPSUR<S[UR5S3$)NzUnknownKeyType(type=z , bytes=))r2lenr3r4s r)__str__UnknownKeyType.__str__[s'%dmm%6iDNN@S?TTVWWr+r3r2NN)__name__ __module__ __qualname____firstlineno____doc__r5r:__static_attributes__r+r)r-r-Rs#Xr+r-cR\rSrSr%\R \S'\R\S'Srg) FileFormat_formatencodingrDN) r>r?r@rAr PrivateFormat__annotations__EncodingrCrDr+r)rFrF_s  ' ''$$$r+rF)rHrIc \rSrSrSr\R SS\RS.\R SS\RS.\ SS\RS.S.r S r S r \ R"S 5r\ R"S 5r\S8S\\4Sjj5r\S8S\S\S\\4Sjj5r\S5rS9SjrSrSrSrSrSr\S5r Sr!\S5r"Sr#Sr$Sr%\S 5r&S!r'S8S"jr(S#r)\S8S$j5r*\S8S%j5r+S \,4S&\S\\S'\-4S(jjr.S \,4S)\/S\\S'\-4S*jjr0S8S+jr1S8S,jr2S-r3S.r4S/r5S0r6S8S&\S1\7S'\-S\\4S2jjr8S8S3\/S1\7S'\-S\\4S4jjr9S5r:S6r;S7r,,.O..0 ""$ "77F  fjnn:: ; ;I  2 2 D D E E"I  E E F F I 4:J:JK K ]]_,,R,CC       Y 0 5 "77F *_sFF=F:9F:= G r2r3chSSKJn UHnXR5;dMU"XS9s $ [XS9e)a Given type `str` & raw `bytes`, return a `PKey` subclass instance. For example, ``PKey.from_type_string("ssh-ed25519", )`` will (if successful) return a new `.Ed25519Key`. :param str key_type: The key type, eg ``"ssh-ed25519"``. :param bytes key_bytes: The raw byte data forming the key material, as expected by subclasses' ``data`` parameter. :param str password: Optional password used to decrypt ``key_bytes``. :returns: A `PKey` subclass instance. :raises: `UnknownKeyType`, if no registered classes knew about this type. .. versionadded:: 3.2 .. versionchanged:: 5.0 Added the ``password`` kwarg. r) key_classesr]r1)r_r{ identifiersr-)r2r3rXr{rus r)from_type_stringPKey.from_type_strings88 )$I0022 iCC%hDDr+cUR/$)z returns an iterable of key format/name strings this class can handle. Most classes only have a single identifier, and thus this default implementation suffices; see `.ECDSAKey` for one example of an override. )name)clss r)r|PKey.identifiersszr+cg)a Create a new instance of this public key type. If ``msg`` is given, the key's public part(s) will be filled in from the message. If ``data`` is given, the key's public part(s) will be filled in from the string. :param .Message msg: an optional SSH `.Message` containing a public key of this type. :param bytes data: optional, the bytes of a public key of this type :raises: `.SSHException` -- if a key cannot be created from the ``data`` or ``msg`` given, or no key was passed in. NrD)r4msgr&s r)r5 PKey.__init__s r+cSn[US5(a!UR(aSUR<3nSURSUR5SURUS3$)Ncommentz , comment=z PKey(alg=z, bits=z, fp=))hasattrralgorithm_nameget_bits fingerprint)r4rs r)__repr__ PKey.__repr__/sb 4 # # "4<<"23G4../wt}}6GuTM]M]L^_f^gghiir+c[5$)z Return a string of an SSH `.Message` made up of the public part(s) of this key. This string is suitable for passing to `__init__` to re-create the key object later. bytesr9s r)asbytes PKey.asbytes7s wr+c"UR5$r0)rr9s r) __bytes__PKey.__bytes__?s||~r+cb[U[5=(a URUR:H$r0)rgrN_fieldsr4others r)__eq__ PKey.__eq__Bs!%&H4<<5==+HHr+c,[UR5$r0)hashrr9s r)__hash__ PKey.__hash__EsDLL!!r+c[er0)NotImplementedErrorr9s r)r PKey._fieldsHs!!r+cg)z Return the name of this private key implementation. :return: name of this private key type, in SSH terminology, as a `str` (for example, ``"ssh-rsa"``). rrDr9s r)get_name PKey.get_nameLsr+cUR5RSS5nSnX!;a"URUS5nUR5$URS5SnUR5$)z Return the key algorithm identifier for this key. Similar to `get_name`, but aimed at pure algorithm name instead of SSH protocol field value. zssh-rz-cert-v01@openssh.comz-cert-r)rreplacesplitupper)r4r cert_tails r)rPKey.algorithm_nameVse}}&&vr2+  << 73Dzz|::c?1%Dzz|r+cg)z Return the number of significant bits in this key. This is useful for judging the relative security of a key. :return: bits in the key (as an `int`) rrDr9s r)r PKey.get_bitsjsr+cg)zN Return ``True`` if this key has the private part necessary for signing data. FrDr9s r)can_sign PKey.can_signvs r+cP[UR55R5$)z Return an MD5 fingerprint of the public part of this key. Nothing secret is revealed. :return: a 16-byte `string ` (binary) of the MD5 fingerprint, in SSH format. )rrdigestr9s r)get_fingerprintPKey.get_fingerprint}s4<<>"))++r+c[[U55nURR5n[ UR 55n[ U5R5RS5nUSU3$)z Modern fingerprint property designed to be comparable to OpenSSH. Currently only does SHA256 (the OpenSSH default). .. versionadded:: 3.2 =:) rrrrrrrstriprstrip)r4hashy hash_nameb64edcleaneds r)rPKey.fingerprints`uT{#JJ$$& ELLN+E(.."))#.AgY''r+cf[[UR555RSS5$)a Return a base64 string containing the public part of this key. Nothing secret is revealed. This format is compatible with that used to store public key files or recognized host keys. :return: a base64 `string ` containing the public part of the key.  r)rrrrr9s r) get_base64PKey.get_base64s'T\\^,-55dB??r+c[5$)a} Sign a blob of data with this private key, and return a `.Message` representing an SSH signature message. :param bytes data: the data to sign. :param str algorithm: the signature algorithm to use, if different from the key's internal name. Default: ``None``. :return: an SSH signature `message <.Message>`. .. versionchanged:: 2.9 Added the ``algorithm`` kwarg. r)r4r& algorithms r) sign_ssh_dataPKey.sign_ssh_datas wr+cg)a& Given a blob of data, and an SSH message representing a signature of that data, verify that it was signed with this key. :param bytes data: the data that was signed. :param .Message msg: an SSH signature message :return: ``True`` if the signature verifies correctly; ``False`` otherwise. FrD)r4r&rs r)verify_ssh_sigPKey.verify_ssh_sigsr+cU"XS9nU$)a% Create a key object by reading a private key file. If the private key is encrypted and ``password`` is not ``None``, the given password will be used to decrypt the key (otherwise `.PasswordRequiredException` is thrown). Through the magic of Python, this factory method will exist in all subclasses of PKey (such as `.RSAKey`), but is useless on the abstract PKey class. :param str filename: name of the file to read :param str password: an optional password to use to decrypt the key file, if it's encrypted :return: a new `.PKey` based on the given private key :raises: ``IOError`` -- if there was an error reading the file :raises: `.PasswordRequiredException` -- if the private key file is encrypted, and ``password`` is ``None`` :raises: `.SSHException` -- if the key file is invalid )filenamerXrD)rrrXrws r)from_private_key_filePKey.from_private_key_files*87 r+cU"XS9nU$)a Create a key object by reading a private key from a file (or file-like) object. If the private key is encrypted and ``password`` is not ``None``, the given password will be used to decrypt the key (otherwise `.PasswordRequiredException` is thrown). :param file_obj: the file-like object to read from :param str password: an optional password to use to decrypt the key, if it's encrypted :return: a new `.PKey` based on the given private key :raises: ``IOError`` -- if there was an error reading the key :raises: `.PasswordRequiredException` -- if the private key file is encrypted, and ``password`` is ``None`` :raises: `.SSHException` -- if the key file is invalid )file_objrXrD)rrrXrws r)rmPKey.from_private_keys$87 r+r file_formatc<URUURUUS9 g)a Write private key contents into a file. If the password is not ``None``, the key is encrypted before writing. :param str filename: name of the file to write :param str password: an optional password to use to encrypt the key file :param FileFormat file_format: what format+encoding pair to use; defaults to the original behavior, namely PEM. :raises: ``IOError`` -- if there was an error writing the file :raises: `.SSHException` -- if the key is invalid rrXN)_write_private_key_file private_key)r4rrXrs r)write_private_key_filePKey.write_private_key_files)( $$    # % r+rc<URUURUUS9 g)a Write private key contents into a file (or file-like) object. If the password is not ``None``, the key is encrypted before writing. :param file_obj: the file-like object to write into :param str password: an optional password to use to encrypt the key :param FileFormat file_format: what format+encoding pair to use; defaults to the original behavior, namely PEM. :raises: ``IOError`` -- if there was an error writing to the file :raises: `.SSHException` -- if the key is invalid rN)_write_private_keyr)r4rrXrs r)write_private_keyPKey.write_private_keys)&     #  r+cx[US5nURXU5nSSS5 U$!,(df  W$=f)ab Read an SSH2-format private key file, looking for a string of the type ``"BEGIN xxx PRIVATE KEY"`` for some ``xxx``, base64-decode the text we find, and return it as a string. If the private key is encrypted and ``password`` is not ``None``, the given password will be used to decrypt the key (otherwise `.PasswordRequiredException` is thrown). :param str tag: ``"RSA"`` (or etc), the tag used to mark the data block. :param str filename: name of the file to read. :param str password: an optional password to use to decrypt the key file, if it's encrypted. :return: the `bytes` that make up the private key. :raises: ``IOError`` -- if there was an error reading the file. :raises: `.PasswordRequiredException` -- if the private key file is encrypted, and ``password`` is ``None``. :raises: `.SSHException` -- if the key file is invalid. rN)rl_read_private_key)r4tagrrXfr&s r)_read_private_key_filePKey._read_private_key_file s:.(C A))#(;D! !  s* 9cTUR5nU(d[SRU55eSnURR XE5n[ U5S- nXW:a7U(d0US- nURR XE5nXW:a U(dM0US- nU(aUR S5OSnU[ U5:dUc[SRU55eUn URR XI5nX:a7U(d0U S- n URR XI5nX:a U(dM0X:Xa!URXIU5n URn X4$US:Xa#URXEU U5n URn X4$[SRX55e)Nzno lines in {} private key filerr$znot a valid {} private key fileOPENSSHz#encountered {} key, expected {} key) readlinesrrH BEGIN_TAGmatchr8groupEND_TAG_read_private_key_pem_PRIVATE_KEY_FORMAT_ORIGINAL_read_private_key_openssh_PRIVATE_KEY_FORMAT_OPENSSH) r4rrrXlinesstartm line_rangekeytypeendr&pkformats r)rPKey._read_private_key;s @GGLM M NN  .Z!^   QJE$$U\2A    !!''!*t CJ '/@GGLM M LL  uz *q 1HC ""5:.Aqq >--e(CD88H~ !11%c2BHMD77H ~ 5<)r4id_errs r)_got_bad_key_format_idPKey._got_bad_key_format_id`s'M3::dnn&=&=sCDDr+c Sn0nUS- nU[U5:a_XRS5n[U5S:XaO$$_5i@!!/26:7$%%c47C 3Kd_-> )+ #))$/)2D2D2FF==!2!23<<> K??>2X5F5F5HH HE$$ F:AA!DE E F KIJ J* KIJ J Ks09%H I=!I/I=II I,/Jc[[SRU555nUSSnU[:wa [ S5eURUSSS5nUupxpn U S:a [ S5eURU S 5upU[S 5:XGa"U[S 5:Xa[RnOIU[S 5:Xa[RnO)[ S RURS555eUc [S5eURU S5unn[R "[U5[U5SUSS9nUSSnUSSn[#[$R&"U5U"U5[)55R+5nUR-U 5nUUR/5- nO,U[S5:XaU[S5:XaU nO [ S5eURUS5nUunnnnUU:wa [ S5e[1U5$![RR an[ SRU55eSnAff=f)z Read the new OpenSSH SSH2 private key format available since OpenSSH version 6.5 Reference: https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.key rrNr#z)unexpected OpenSSH key header encounteredsssurr$z.unsupported: private keyfile has multiple keysssbcryptz aes256-cbcz aes256-ctrz,unknown cipher `{}` used in private key filezutf-8zprivate key file is encryptedsu0T)ignore_few_roundsr!nonez.unknown cipher or kdf used in private key fileuusrz/OpenSSH private key file checkints do not match)rrrrrrrrHOPENSSH_AUTH_MAGIC_uint32_cstruct_unpackrCBCCTRdecoderrkdfrrAESr r r r r*)r4rrXr&r auth_magiccstructrQkdfname kdf_options num_pubkeys remainderpubkey privkey_blobrTrroundskey_ivrwivr decrypted_privkey checkint1 checkint2rkeydatas r)rPKey._read_private_key_opensshs` Fq01D #2Y + +JK K--d23iA?F<9 ?@  $::9dK ak !<(yy1\?*yy"BII g./3  66{DILD&ZZ( $#'F"+CBs#T"X/@ik !* 0 0 >  !3!3!5 5  qy W& %9 , @  --.?H18. 9gw  !A g&&W$$ F:AA!DE E Fs#HI0I  Ic~/nSnUGHnUS:Xa?[R"SXUS-5SnUS- nXXF-nXF- nURU5 US:XaX[R"SXUS-5SnUS- nXXF-nXF- n[R"US5nURU5 MUS:Xa7[R"SXUS-5Sn US- nURU 5 MUS:XdMXS nURU5 O [U5$![ an [ [U 55eS n A ff=f) a Used to read new OpenSSH private key format. Unpacks a c data structure containing a mix of 32-bit uints and variable length strings prefixed by 32-bit uint size field, according to the specified format. Returns the unpacked vars in a tuple. Format strings: s - denotes a string i - denotes a long integer, encoded as a byte string u - denotes a 32-bit unsigned integer r - the remainder of the input string, returned as a string rsz>Lr(TrrN) structunpackappendr inflate_long Exceptionrr`tuple) r4r& strformatarridxrs_sizer9r(rrs r)r"PKey._uint32_cstruct_unpacksM '8#]]4C!G1DEaHF1HC3<0AMCJJqM8#]]4C!G1DEaHF1HC3<0AMC))!T2AJJqM#X dDsQw,?@CA1HCJJqM#XT AJJqM3>Sz  's1v& &  's$C*D4D D D<#D77D<rwc[R"[R"U[R[R-[R -[ S9S5nURXRX4S9 SSS5 g!,(df  g=f)N)flagsrTwr^)osfdopenrlO_WRONLYO_TRUNCO_CREATrr)r4rrwrrXrs r)rPKey._write_private_key_fileslYY GGkkBJJ.;      # #AK # K    s A:: BrcUc[R"5nO[R"[U55nUR UR UR URU5R55 gr0) r NoEncryptionBestAvailableEncryptionrwrite private_bytesrIrHr%)r4rrwrrX encryptions r)rPKey._write_private_key9s`  &335J&>>q{KJ    $$k&8&8* fh r+cUnUn[U[5(aU/n[U[5(aU/nUc [S5eUR5 UR 5nXd;agXe;a9UR [ UR555 UR5 gSn[URURRU55e)ai Perform message type-checking & optional certificate loading. This includes fast-forwarding cert ``msg`` objects past the nonce, so that the subsequent fields are the key numbers; thus the caller may expect to treat the message as key material afterwards either way. The obtained key type is returned for classes which need to know what it was (e.g. ECDSA.) NzKey object may not be emptyz%Invalid key (class: {}, data type: {}) rgr`rrewindget_textrorr get_stringrHrkr>)r4rr2 cert_type key_types cert_typestype_rs r)_check_type_and_load_certPKey._check_type_and_load_certKs  h $ $" I j# & &$J ;<= =        ! !'#++-"8 9 NN 9Cszz$..*A*A5IJ Jr+c[U[5(aSnO)[RR U5(aSnOSn[ [ U5"U5nURRUR55(d5Sn[URURUR555eX0l g)a Supplement the private key contents with data loaded from an OpenSSH public key (``.pub``) or certificate (``-cert.pub``) file, a string containing such a file, or a `.Message` object. The .pub contents adds no real value, since the private key file includes sufficient information to derive the public key info. For certificates, however, this can be used on the client side to offer authentication requests to the server based on certificate instead of raw public key. See: https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.certkeys Note: very little effort is made to validate the certificate contents, that is for the server to decide if it is good enough to authenticate successfully. from_message from_file from_stringz0PublicBlob type {} incompatible with key type {}N) rgrrIrpisfilegetattr PublicBlobr2 startswithrrerH public_blob)r4value constructorblobrs r)roPKey.load_certificate|s& eW % %(K WW^^E " "%K'Kz;/6}}'' 88DCSZZ t}}GH Hr+)rhr0r=)=r>r?r@rArBrr'rr#rrrrrecompilerr staticmethodr r`rxrr} classmethodr|r5rrrrrpropertyrrrrrrrrrrrrmPEMrFrrrrrrrrr" PrivateKeyrrr^rorCrDr+r)rNrNvs!nnII  !nnII   II  M($% "# MNIjjIJGH(3-HHTCG E E"' E3;C= E ED  0jI"""&  , ( (@" ..#'"%   3-   <#'"%   3-   46#JE2KhT'l/l#' LLL L 3- L>#'      3-  $/Kb r+rNcd\rSrSrSrS Sjr\S5r\S5r\S5r Sr S r S r S r g) rfiah OpenSSH plain public key or OpenSSH signed public key (certificate). Tries to be as dumb as possible and barely cares about specific per-key-type data. .. note:: Most of the time you'll want to call `from_file`, `from_string` or `from_message` for useful instantiation, the main constructor is basically "I should be using ``attrs`` for this." Nc(XlX lX0lg)z Create a new public blob of given type and contents. :param str type_: Type indicator, eg ``ssh-rsa``. :param bytes blob: The blob bytes themselves. :param str comment: A comment, if one was given (e.g. file-based.) N)r2key_blobr)r4r]rkrs r)r5PublicBlob.__init__s   r+c[U5nUR5nSSS5 URW5$!,(df  N=f)z? Create a public blob from a ``-cert.pub``-style file on disk. N)rlreadrc)rrrstrings r)rbPublicBlob.from_files4 (^qVVXFv&&^s 6 AcURSS5n[U5S:aSn[URU55eUSn[ [ US55nUSR 5n[U5nUR5nX:wa+SRXH5n [SRU 55eU"XEUS9$![a SnN`f=f) z9 Create a public blob from a ``-cert.pub``-style string. NrWz%Not enough fields for public blob: {}rr$z!key type={!r}, but blob type={!r}zInvalid PublicBlob contents: {})r]rkr) rr8rerHrrr IndexErrorrrX) rrzfieldsrr2rvrr blob_typedeetss r)rcPublicBlob.from_strings dA& v;?9CSZZ/0 0!9q|, Qioo'G H JJL  7>>E>EEeLM M'BB G sC CCcJUR5nU"X!R5S9$)z Create a public blob from a network `.Message`. Specifically, a cert-bearing pubkey auth packet, because by definition OpenSSH-style certificates 'are' their own network representation." )r]rk)rXr)rmessager]s r)raPublicBlob.from_messages$  "__%677r+cSRUR5nUR(aUSRUR5- nU$)Nz{} public key/certificatez- {})rHr2r)r4rets r)r:PublicBlob.__str__s9)00? << 6==. .C r+cXU=(a" U=(a URUR:H$r0)rvrs r)rPublicBlob.__eq__sAA$--5>>"AAr+c X:X+$r0rDrs r)__ne__PublicBlob.__ne__s   r+)rrvr2r0)r>r?r@rArBr5rprbrcrar:rrrCrDr+r)rfrfsZ  ''CC488 B!r+rf)CrBrrIrmr;rrrrhashlibrriorpathlibr typingr r r rcryptography.hazmat.backendsr cryptography.hazmat.primitivesrrr,cryptography.hazmat.primitives.asymmetric.ecr1cryptography.hazmat.primitives.asymmetric.ed25519r-cryptography.hazmat.primitives.asymmetric.rsar&cryptography.hazmat.primitives.ciphersrrrr_rparamiko.commonrparamiko.messagerparamiko.ssh_exceptionrr paramiko.utilrr/cryptography.hazmat.decrepit.ciphers.algorithmsr ImportError1cryptography.hazmat.primitives.ciphers.algorithmsr!r*r?r-rFrsrJTraditionalOpenSSLrLrrOpenSSHrrNrfrDr+r)rs%& +.. 8MMPGLL $JLI + " XY X%%="9;LL M   & & 9 9  # # ' '   & & . .  # # ' ' c  c  XT!T!MLKLsD.. D=<D=