Source code
Revision control
Copy as Markdown
Other Tools
#!/usr/bin/env python
#
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
"""
Reads a key specification from stdin or a file and outputs a
PKCS #8 file representing the (private) key. Also provides
methods for signing data and representing the key as a subject
public key info for use with pyasn1.
The key specification format is as follows:
default: a 2048-bit RSA key
alternate: a different 2048-bit RSA key
ev: a 2048-bit RSA key that, when combined with the right pycert
specification, results in a certificate that is enabled for
extended validation in debug Firefox (see ExtendedValidation.cpp).
evRSA2040: a 2040-bit RSA key that, when combined with the right pycert
specification, results in a certificate that is enabled for
extended validation in debug Firefox.
rsa2040: a 2040-bit RSA key
rsa1024: a 1024-bit RSA key
rsa1016: a 1016-bit RSA key
secp256k1: an ECC key on the curve secp256k1
secp244r1: an ECC key on the curve secp244r1
secp256r1: an ECC key on the curve secp256r1
secp384r1: an ECC key on the curve secp384r1
secp521r1: an ECC key on the curve secp521r1
"""
import base64
import binascii
import hashlib
import math
import sys
import ecdsa
import rsa
import six
from pyasn1.codec.der import encoder
from pyasn1.type import namedtype, tag, univ
from pyasn1_modules import rfc2459
# "constants" to make it easier for consumers to specify hash algorithms
HASH_MD5 = "hash:md5"
HASH_SHA1 = "hash:sha1"
HASH_SHA256 = "hash:sha256"
HASH_SHA384 = "hash:sha384"
HASH_SHA512 = "hash:sha512"
# These libraries differ somewhat in terms of functionality and interface. In
# order to ensure there are no diffs and that the generated signatures are
# exactly the same between the two libraries, we need to patch some stuff in.
def _gen_k(curve):
# This calculation is arbitrary, but it matches what we were doing pre-
# non-random; the ecdsa library exposes an option to deterministically
# generate a value of k for us, but it doesn't match up to what we were
# doing before so we have to inject a custom value.
num_bytes = int(math.log(curve.order - 1, 2) + 1) // 8 + 8
entropy = int.from_bytes(b"\04" * num_bytes, byteorder="big")
p = curve.curve.p()
return (entropy % (p - 1)) + 1
# As above, the library has built-in logic for truncating digests that are too
# large, but they use a slightly different technique than our previous library.
# Re-implement that logic here.
def _truncate_digest(digest, curve):
i = int.from_bytes(digest, byteorder="big")
p = curve.curve.p()
while i > p:
i >>= 1
return i.to_bytes(math.ceil(i.bit_length() / 8), byteorder="big")
def byteStringToHexifiedBitString(string):
"""Takes a string of bytes and returns a hex string representing
those bytes for use with pyasn1.type.univ.BitString. It must be of
the form "'<hex bytes>'H", where the trailing 'H' indicates to
pyasn1 that the input is a hex string."""
return "'%s'H" % six.ensure_binary(string).hex()
class UnknownBaseError(Exception):
"""Base class for handling unexpected input in this module."""
def __init__(self, value):
super(UnknownBaseError, self).__init__()
self.value = value
self.category = "input"
def __str__(self):
return 'Unknown %s type "%s"' % (self.category, repr(self.value))
class UnknownKeySpecificationError(UnknownBaseError):
"""Helper exception type to handle unknown key specifications."""
def __init__(self, value):
UnknownBaseError.__init__(self, value)
self.category = "key specification"
class UnknownHashAlgorithmError(UnknownBaseError):
"""Helper exception type to handle unknown key specifications."""
def __init__(self, value):
UnknownBaseError.__init__(self, value)
self.category = "hash algorithm"
class UnsupportedHashAlgorithmError(Exception):
"""Helper exception type for unsupported hash algorithms."""
def __init__(self, value):
super(UnsupportedHashAlgorithmError, self).__init__()
self.value = value
def __str__(self):
return 'Unsupported hash algorithm "%s"' % repr(self.value)
class RSAPublicKey(univ.Sequence):
"""Helper type for encoding an RSA public key"""
componentType = namedtype.NamedTypes(
namedtype.NamedType("N", univ.Integer()),
namedtype.NamedType("E", univ.Integer()),
)
class RSAPrivateKey(univ.Sequence):
"""Helper type for encoding an RSA private key"""
componentType = namedtype.NamedTypes(
namedtype.NamedType("version", univ.Integer()),
namedtype.NamedType("modulus", univ.Integer()),
namedtype.NamedType("publicExponent", univ.Integer()),
namedtype.NamedType("privateExponent", univ.Integer()),
namedtype.NamedType("prime1", univ.Integer()),
namedtype.NamedType("prime2", univ.Integer()),
namedtype.NamedType("exponent1", univ.Integer()),
namedtype.NamedType("exponent2", univ.Integer()),
namedtype.NamedType("coefficient", univ.Integer()),
)
class ECPrivateKey(univ.Sequence):
"""Helper type for encoding an EC private key
ECPrivateKey ::= SEQUENCE {
version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1),
privateKey OCTET STRING,
parameters [0] ECParameters {{ NamedCurve }} OPTIONAL,
(NOTE: parameters field is not supported)
publicKey [1] BIT STRING OPTIONAL
}"""
componentType = namedtype.NamedTypes(
namedtype.NamedType("version", univ.Integer()),
namedtype.NamedType("privateKey", univ.OctetString()),
namedtype.OptionalNamedType(
"publicKey",
univ.BitString().subtype(
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)
),
),
)
class ECPoint(univ.Sequence):
"""Helper type for encoding a EC point"""
componentType = namedtype.NamedTypes(
namedtype.NamedType("x", univ.Integer()),
namedtype.NamedType("y", univ.Integer()),
)
class PrivateKeyInfo(univ.Sequence):
"""Helper type for encoding a PKCS #8 private key info"""
componentType = namedtype.NamedTypes(
namedtype.NamedType("version", univ.Integer()),
namedtype.NamedType("privateKeyAlgorithm", rfc2459.AlgorithmIdentifier()),
namedtype.NamedType("privateKey", univ.OctetString()),
)
class RSAKey(object):
# For reference, when encoded as a subject public key info, the
# base64-encoded sha-256 hash of this key is
# VCIlmPM9NkgFQtrs4Oa5TeFcDu6MWRTKSNdePEhOgD8=
sharedRSA_N = int(
"00ba8851a8448e16d641fd6eb6880636103d3c13d9eae4354ab4ecf56857"
"6c247bc1c725a8e0d81fbdb19c069b6e1a86f26be2af5a756b6a6471087a"
"a55aa74587f71cd5249c027ecd43fc1e69d038202993ab20c349e4dbb94c"
"c26b6c0eed15820ff17ead691ab1d3023a8b2a41eea770e00f0d8dfd660b"
"2bb02492a47db988617990b157903dd23bc5e0b8481fa837d38843ef2716"
"d855b7665aaa7e02902f3a7b10800624cc1c6c97ad96615bb7e29612c075"
"31a30c91ddb4caf7fcad1d25d309efb9170ea768e1b37b2f226f69e3b48a"
"95611dee26d6259dab91084e36cb1c24042cbf168b2fe5f18f991731b8b3"
"fe4923fa7251c431d503acda180a35ed8d",
16,
)
sharedRSA_E = 65537
sharedRSA_D = int(
"009ecbce3861a454ecb1e0fe8f85dd43c92f5825ce2e997884d0e1a949da"
"a2c5ac559b240450e5ac9fe0c3e31c0eefa6525a65f0c22194004ee1ab46"
"3dde9ee82287cc93e746a91929c5e6ac3d88753f6c25ba5979e73e5d8fb2"
"39111a3cdab8a4b0cdf5f9cab05f1233a38335c64b5560525e7e3b92ad7c"
"7504cf1dc7cb005788afcbe1e8f95df7402a151530d5808346864eb370aa"
"79956a587862cb533791307f70d91c96d22d001a69009b923c683388c9f3"
"6cb9b5ebe64302041c78d908206b87009cb8cabacad3dbdb2792fb911b2c"
"f4db6603585be9ae0ca3b8e6417aa04b06e470ea1a3b581ca03a6781c931"
"5b62b30e6011f224725946eec57c6d9441",
16,
)
sharedRSA_P = int(
"00dd6e1d4fffebf68d889c4d114cdaaa9caa63a59374286c8a5c29a717bb"
"a60375644d5caa674c4b8bc7326358646220e4550d7608ac27d55b6db74f"
"8d8127ef8fa09098b69147de065573447e183d22fe7d885aceb513d9581d"
"d5e07c1a90f5ce0879de131371ecefc9ce72e9c43dc127d238190de81177"
"3ca5d19301f48c742b",
16,
)
sharedRSA_Q = int(
"00d7a773d9ebc380a767d2fec0934ad4e8b5667240771acdebb5ad796f47"
"8fec4d45985efbc9532968289c8d89102fadf21f34e2dd4940eba8c09d6d"
"1f16dcc29729774c43275e9251ddbe4909e1fd3bf1e4bedf46a39b8b3833"
"28ef4ae3b95b92f2070af26c9e7c5c9b587fedde05e8e7d86ca57886fb16"
"5810a77b9845bc3127",
16,
)
sharedRSA_exp1 = int(
"0096472b41a610c0ade1af2266c1600e3671355ba42d4b5a0eb4e9d7eb35"
"81400ba5dd132cdb1a5e9328c7bbc0bbb0155ea192972edf97d12751d8fc"
"f6ae572a30b1ea309a8712dd4e33241db1ee455fc093f5bc9b592d756e66"
"21474f32c07af22fb275d340792b32ba2590bbb261aefb95a258eea53765"
"5315be9c24d191992d",
16,
)
sharedRSA_exp2 = int(
"28b450a7a75a856413b2bda6f7a63e3d964fb9ecf50e3823ef6cc8e8fa26"
"ee413f8b9d1205540f12bbe7a0c76828b7ba65ad83cca4d0fe2a220114e1"
"b35d03d5a85bfe2706bd50fce6cfcdd571b46ca621b8ed47d605bbe765b0"
"aa4a0665ac25364da20154032e1204b8559d3e34fb5b177c9a56ff93510a"
"5a4a6287c151de2d",
16,
)
sharedRSA_coef = int(
"28067b9355801d2ef52dfa96d8adb589673cf8ee8a9c6ff72aeeabe9ef6b"
"e58a4f4abf05f788947dc851fdaa34542147a71a246bfb054ee76aa346ab"
"cd2692cfc9e44c51e6f069c735e073ba019f6a7214961c91b26871caeabf"
"8f064418a02690e39a8d5ff3067b7cdb7f50b1f53418a703966c4fc774bf"
"7402af6c43247f43",
16,
)
# For reference, when encoded as a subject public key info, the
# base64-encoded sha-256 hash of this key is
# MQj2tt1yGAfwFpWETYUCVrZxk2CD2705NKBQUlAaKJI=
alternateRSA_N = int(
"00c175c65266099f77082a6791f1b876c37f5ce538b06c4acd22b1cbd46f"
"a65ada2add41c8c2498ac4a3b3c1f61487f41b698941bd80a51c3c120244"
"c584a4c4483305e5138c0106cf08be9a862760bae6a2e8f36f23c5d98313"
"b9dfaf378345dace51d4d6dcd2a6cb3cc706ebcd3070ec98cce40aa591d7"
"295a7f71c5be66691d2b2dfec84944590bc5a3ea49fd93b1d753405f1773"
"7699958666254797ed426908880811422069988a43fee48ce68781dd22b6"
"a69cd28375131f932b128ce286fa7d251c062ad27ef016f187cdd54e832b"
"35b8930f74ba90aa8bc76167242ab1fd6d62140d18c4c0b8c68fc3748457"
"324ad7de86e6552f1d1e191d712168d3bb",
16,
)
alternateRSA_E = 65537
alternateRSA_D = int(
"7e3f6d7cb839ef66ae5d7dd92ff5410bb341dc14728d39034570e1a37079"
"0f30f0681355fff41e2ad4e9a9d9fcebfbd127bdfab8c00affb1f3cea732"
"7ead47aa1621f2ac1ee14ca02f04b3b2786017980b181a449d03b03e69d1"
"12b83571e55434f012056575d2832ed6731dce799e37c83f6d51c55ab71e"
"b58015af05e1af15c747603ef7f27d03a6ff049d96bbf854c1e4e50ef5b0"
"58d0fb08180e0ac7f7be8f2ff1673d97fc9e55dba838077bbf8a7cff2962"
"857785269cd9d5bad2b57469e4afcd33c4ca2d2f699f11e7c8fbdcd484f0"
"8d8efb8a3cb8a972eb24bed972efaae4bb712093e48fe94a46eb629a8750"
"78c4021a9a2c93c9a70390e9d0a54401",
16,
)
alternateRSA_P = int(
"00e63fc725a6ba76925a7ff8cb59c4f56dd7ec83fe85bf1f53e11cac9a81"
"258bcfc0ae819077b0f2d1477aaf868de6a8ecbeaf7bb22b196f2a9ad82d"
"3286f0d0cc29de719e5f2be8e509b7284d5963edd362f927887a4c4a8979"
"9d340d51b301ac7601ab27179024fcaadd38bf6522af63eb16461ec02a7f"
"27b06fe09ddda7c0a1",
16,
)
alternateRSA_Q = int(
"00d718b1fe9f8f99f00e832ae1fbdc6fe2ab27f34e049c498010fa0eb708"
"4852182346083b5c96c3eee5592c014a410c6b930b165c13b5c26aa32eac"
"6e7c925a8551c25134f2f4a72c6421f19a73148a0edfaba5d3a6888b35cb"
"a18c00fd38ee5aaf0b545731d720761bbccdee744a52ca415e98e4de01cd"
"fe764c1967b3e8cadb",
16,
)
alternateRSA_exp1 = int(
"01e5aca266c94a88d22e13c2b92ea247116c657a076817bdfd30db4b3a9d"
"3095b9a4b6749647e2f84e7a784fc7838b08c85971cf7a036fa30e3b91c3"
"c4d0df278f80c1b6e859d8456adb137defaa9f1f0ac5bac9a9184fd4ea27"
"9d722ea626f160d78aad7bc83845ccb29df115c83f61b7622b99bd439c60"
"9b5790a63c595181",
16,
)
alternateRSA_exp2 = int(
"0080cc45d10d2484ee0d1297fc07bf80b3beff461ea27e1f38f371789c3a"
"f66b4a0edd2192c227791db4f1c77ae246bf342f31856b0f56581b58a95b"
"1131c0c5396db2a8c3c6f39ea2e336bc205ae6a2a0b36869fca98cbba733"
"cf01319a6f9bb26b7ca23d3017fc551cd8da8afdd17f6fa2e30d34868798"
"1cd6234d571e90b7df",
16,
)
alternateRSA_coef = int(
"6f77c0c1f2ae7ac169561cca499c52bdfbe04cddccdbdc12aec5a85691e8"
"594b7ee29908f30e7b96aa6254b80ed4aeec9b993782bdfc79b69d8d58c6"
"8870fa4be1bc0c3527288c5c82bb4aebaf15edff110403fc78e6ace6a828"
"27bf42f0cfa751e507651c5638db9393dd23dd1f6b295151de44b77fe55a"
"7b0df271e19a65c0",
16,
)
evRSA_N = int(
"00b549895c9d00108d11a1f99f87a9e3d1a5db5dfaecf188da57bf641368"
"8f2ce4722cff109038c17402c93a2a473dbd286aed3fdcd363cf5a291477"
"01bdd818d7615bf9356bd5d3c8336aaa8c0971368a06c3cd4461b93e5142"
"4e1744bb2eaad46aab38ce196821961f87714a1663693f09761cdf4d6ba1"
"25eacec7be270d388f789f6cdf78ae3144ed28c45e79293863a7a22a4898"
"0a36a40e72d579c9b925dff8c793362ffd6897a7c1754c5e97c967c3eadd"
"1aae8aa2ccce348a0169b80e28a2d70c1a960c6f335f2da09b9b643f5abf"
"ba49e8aaa981e960e27d87480bdd55dd9417fa18509fbb554ccf81a4397e"
"8ba8128a34bdf27865c189e5734fb22905",
16,
)
evRSA_E = 65537
evRSA_D = int(
"00983d54f94d6f4c76eb23d6f93d78523530cf73b0d16254c6e781768d45"
"f55681d1d02fb2bd2aac6abc1c389860935c52a0d8f41482010394778314"
"1d864bff30803638a5c0152570ae9d18f3d8ca163efb475b0dddf32e7e16"
"ec7565e6bb5e025c41c5c66e57a03cede554221f83045347a2c4c451c3dc"
"e476b787ce0c057244be9e04ef13118dbbb3d5e0a6cc87029eafd4a69ed9"
"b14759b15e39d8a9884e56f54d2f9ab013f0d15f318a9ab6b2f73d1ec3c9"
"fe274ae89431a10640be7899b0011c5e5093a1834708689de100634dabde"
"60fbd6aaefa3a33df34a1f36f60c043036b748d1c9ee98c4031a0afec60e"
"fda0a990be524f5614eac4fdb34a52f951",
16,
)
evRSA_P = int(
"00eadc2cb33e5ff1ca376bbd95bd6a1777d2cf4fac47545e92d11a6209b9"
"d5e4ded47834581c169b3c884742a09ea187505c1ca55414d8d25b497632"
"d5ec2aaa05233430fad49892777a7d68e038f561a3b8969e60b0a263defb"
"fda48a9b0ff39d95bc88b15267c8ade97b5107948e41e433249d87f7db10"
"9d5d74584d86bcc1d7",
16,
)
evRSA_Q = int(
"00c59ae576a216470248d944a55b9e9bf93299da341ec56e558eba821abc"
"e1bf57b79cf411d2904c774f9dba1f15185f607b0574a08205d6ec28b66a"
"36d634232eaaf2fea37561abaf9d644b68db38c9964cb8c96ec0ac61eba6"
"4d05b446542f423976f5acde4ecc95536d2df578954f93f0cfd9c58fb78b"
"a2a76dd5ac284dc883",
16,
)
evRSA_exp1 = int(
"00c1d2ef3906331c52aca64811f9fe425beb2898322fb3db51032ce8d7e9"
"fc32240be92019cf2480fcd5e329837127118b2a59a1bfe06c883e3a4447"
"f3f031cd9aebd0b8d368fc79740d2cce8eadb324df7f091eafe1564361d5"
"4920b01b0471230e5e47d93f8ed33963c517bc4fc78f6d8b1f9eba85bcce"
"db7033026508db6285",
16,
)
evRSA_exp2 = int(
"008521b8db5694dfbe804a315f9efc9b65275c5490acf2a3456d65e6e610"
"bf9f647fc67501d4f5772f232ac70ccdef9fc2a6dfa415c7c41b6afc7af9"
"d07c3ca03f7ed93c09f0b99f2c304434322f1071709bbc1baa4c91575fa6"
"a959e07d4996956d95e22b57938b6e47c8d51ffedfc9bf888ce0d1a3e42b"
"65a89bed4b91d3e5f5",
16,
)
evRSA_coef = int(
"00dc497b06b920c8be0b0077b798e977eef744a90ec2c5d7e6cbb22448fa"
"c72da81a33180e0d8a02e831460c7fc7fd3a612f7b9930b61b799f8e908e"
"632e9ba0409b6aa70b03a3ba787426263b5bd5843df8476edb5d14f6a861"
"3ebaf5b9cd5ca42f5fbd2802e08e4e49e5709f5151510caa5ab2c1c6eb3e"
"fe9295d16e8c25c916",
16,
)
evRSA2040_N = int(
"00ca7020dc215f57914d343fae4a015111697af997a5ece91866499fc23f"
"1b88a118cbd30b10d91c7b9a0d4ee8972fcae56caf57f25fc1275a2a4dbc"
"b982428c32ef587bf2387410330a0ffb16b8029bd783969ef675f6de38c1"
"8f67193cb6c072f8b23d0b3374112627a57b90055771d9e62603f53788d7"
"f63afa724f5d108096df31f89f26b1eb5f7c4357980e008fcd55d827dd26"
"2395ca2f526a07897cc40c593b38716ebc0caa596719c6f29ac9b73a7a94"
"4748a3aa3e09e9eb4d461ea0027e540926614728b9d243975cf9a0541bef"
"d25e76b51f951110b0e7644fc7e38441791b6d2227384cb8004e23342372"
"b1cf5cc3e73e31b7bbefa160e6862ebb",
16,
)
evRSA2040_E = 65537
evRSA2040_D = int(
"00b2db74bce92362abf72955a638ae8720ba3033bb7f971caf39188d7542"
"eaa1c1abb5d205b1e2111f4791c08911a2e141e8cfd7054702d23100b564"
"2c06e1a31b118afd1f9a2f396cced425c501d91435ca8656766ced2b93bb"
"b8669fce9bacd727d1dacb3dafabc3293e35389eef8ea0b58e1aeb1a20e6"
"a61f9fcd453f7567fe31d123b616a26fef4df1d6c9f7490111d028eefd1d"
"972045b1a242273dd7a67ebf111db2741a5a93c7b2289cc4a236f5a99a6e"
"c7a8206fdae1c1d04bdbb1980d4a298c5a17dae4186474a5f7835d882bce"
"f24aef4ed6f149f94d96c9f7d78e647fc778a9017ff208d3b4a1768b1821"
"62102cdab032fabbab38d5200a324649",
16,
)
evRSA2040_P = int(
"0f3844d0d4d4d6a21acd76a6fc370b8550e1d7ec5a6234172e790f0029ae"
"651f6d5c59330ab19802b9d7a207de7a1fb778e3774fdbdc411750633d8d"
"1b3fe075006ffcfd1d10e763c7a9227d2d5f0c2dade1c9e659c350a159d3"
"6bb986f12636d4f9942b288bc0fe21da8799477173144249ca2e389e6c5c"
"25aa78c8cad7d4df",
16,
)
evRSA2040_Q = int(
"0d4d0bedd1962f07a1ead6b23a4ed67aeaf1270f052a6d29ba074945c636"
"1a5c4f8f07bf859e067aed3f4e6e323ef2aa8a6acd340b0bdc7cfe4fd329"
"e3c97f870c7f7735792c6aa9d0f7e7542a28ed6f01b0e55a2b8d9c24a65c"
"6da314c95484f5c7c3954a81bb016b07ed17ee9b06039695bca059a79f8d"
"c2423d328d5265a5",
16,
)
evRSA2040_exp1 = int(
"09f29a2ff05be8a96d614ba31b08935420a86c6bc42b99a6692ea0da5763"
"f01e596959b7ddce73ef9c2e4f6e5b40710887500d44ba0c3cd3132cba27"
"475f39c2df7552e2d123a2497a4f97064028769a48a3624657f72bf539f3"
"d0de234feccd3be8a0aa90c6bf6e9b0bed43070a24d061ff3ed1751a3ef2"
"ff7f6b90b9dbd5fb",
16,
)
evRSA2040_exp2 = int(
"01a659e170cac120a03be1cf8f9df1caa353b03593bd7476e5853bd874c2"
"87388601c6c341ce9d1d284a5eef1a3a669d32b816a5eaecd8b7844fe070"
"64b9bca0c2b318d540277b3f7f1510d386bb36e03b04771e5d229e88893e"
"13b753bfb94518bb638e2404bd6e6a993c1668d93fc0b82ff08aaf34347d"
"3fe8397108c87ca5",
16,
)
evRSA2040_coef = int(
"040257c0d4a21c0b9843297c65652db66304fb263773d728b6abfa06d37a"
"c0ca62c628023e09e37dc0a901e4ce1224180e2582a3aa4b6a1a7b98e2bd"
"70077aec14ac8ab66a755c71e0fc102471f9bbc1b46a95aa0b645f2c38e7"
"6450289619ea3f5e8ae61037bffcf8249f22aa4e76e2a01909f3feb290ce"
"93edf57b10ebe796",
16,
)
rsa2040_N = int(
"00bac0652fdfbc0055882ffbaeaceec88fa2d083c297dd5d40664dd3d90f"
"52f9aa02bd8a50fba16e0fd991878ef475f9b350d9f8e3eb2abd717ce327"
"b09788531f13df8e3e4e3b9d616bb8a41e5306eed2472163161051180127"
"6a4eb66f07331b5cbc8bcae7016a8f9b3d4f2ac4553c624cf5263bcb348e"
"8840de6612870960a792191b138fb217f765cec7bff8e94f16b39419bf75"
"04c59a7e4f79bd6d173e9c7bf3d9d2a4e73cc180b0590a73d584fb7fc9b5"
"4fa544607e53fc685c7a55fd44a81d4142b6af51ea6fa6cea52965a2e8c5"
"d84f3ca024d6fbb9b005b9651ce5d9f2ecf40ed404981a9ffc02636e311b"
"095c6332a0c87dc39271b5551481774b",
16,
)
rsa2040_E = 65537
rsa2040_D = int(
"603db267df97555cbed86b8df355034af28f1eb7f3e7829d239bcc273a7c"
"7a69a10be8f21f1b6c4b02c6bae3731c3158b5bbff4605f57ab7b7b2a0cb"
"a2ec005a2db5b1ea6e0aceea5bc745dcd2d0e9d6b80d7eb0ea2bc08127bc"
"e35fa50c42cc411871ba591e23ba6a38484a33eff1347f907ee9a5a92a23"
"11bb0b435510020f78e3bb00099db4d1182928096505fcba84f3ca1238fd"
"1eba5eea1f391bbbcc5424b168063fc17e1ca6e1912ccba44f9d0292308a"
"1fedb80612529b39f59d0a3f8180b5ba201132197f93a5815ded938df8e7"
"d93c9b15766588f339bb59100afda494a7e452d7dd4c9a19ce2ec3a33a18"
"b20f0b4dade172bee19f26f0dcbe41",
16,
)
rsa2040_P = int(
"0ec3869cb92d406caddf7a319ab29448bc505a05913707873361fc5b986a"
"499fb65eeb815a7e37687d19f128087289d9bb8818e7bcca502c4900ad9a"
"ece1179be12ff3e467d606fc820ea8f07ac9ebffe2236e38168412028822"
"3e42dbe68dfd972a85a6447e51695f234da7911c67c9ab9531f33df3b994"
"32d4ee88c9a4efbb",
16,
)
rsa2040_Q = int(
"0ca63934549e85feac8e0f5604303fd1849fe88af4b7f7e1213283bbc7a2"
"c2a509f9273c428c68de3db93e6145f1b400bd6d4a262614e9043ad362d4"
"eba4a6b995399c8934a399912199e841d8e8dbff0489f69e663796730b29"
"80530b31cb70695a21625ea2adccc09d930516fa872211a91e22dd89fd9e"
"b7da8574b72235b1",
16,
)
rsa2040_exp1 = int(
"0d7d3a75e17f65f8a658a485c4095c10a4f66979e2b73bca9cf8ef21253e"
"1facac6d4791f58392ce8656f88f1240cc90c29653e3100c6d7a38ed44b1"
"63b339e5f3b6e38912126c69b3ceff2e5192426d9649b6ffca1abb75d2ba"
"2ed6d9a26aa383c5973d56216ff2edb90ccf887742a0f183ac92c94cf187"
"657645c7772d9ad7",
16,
)
rsa2040_exp2 = int(
"03f550194c117f24bea285b209058032f42985ff55acebe88b16df9a3752"
"7b4e61dc91a68dbc9a645134528ce5f248bda2893c96cb7be79ee73996c7"
"c22577f6c2f790406f3472adb3b211b7e94494f32c5c6fcc0978839fe472"
"4c31b06318a2489567b4fca0337acb1b841227aaa5f6c74800a2306929f0"
"2ce038bad943df41",
16,
)
rsa2040_coef = int(
"080a7dbfa8c2584814c71664c56eb62ce4caf16afe88d4499159d674774a"
"3a3ecddf1256c02fc91525c527692422d0aba94e5c41ee12dc71bb66f867"
"9fa17e096f28080851ba046eb31885c1414e8985ade599d907af17453d1c"
"caea2c0d06443f8367a6be154b125e390ee0d90f746f08801dd3f5367f59"
"fba2e5a67c05f375",
16,
)
rsa1024_N = int(
"00d3a97440101eba8c5df9503e6f935eb52ffeb3ebe9d0dc5cace26f973c"
"a94cbc0d9c31d66c0c013bce9c82d0d480328df05fb6bcd7990a5312ddae"
"6152ad6ee61c8c1bdd8663c68bd36224a9882ae78e89f556dfdbe6f51da6"
"112cbfc27c8a49336b41afdb75321b52b24a7344d1348e646351a551c757"
"1ccda0b8fe35f61a75",
16,
)
rsa1024_E = 65537
rsa1024_D = int(
"5b6708e185548fc07ff062dba3792363e106ff9177d60ee3227162391024"
"1813f958a318f26db8b6a801646863ebbc69190d6c2f5e7723433e99666d"
"76b3987892cd568f1f18451e8dc05477c0607ee348380ebb7f4c98d0c036"
"a0260bc67b2dab46cbaa4ce87636d839d8fddcbae2da3e02e8009a21225d"
"d7e47aff2f82699d",
16,
)
rsa1024_P = int(
"00fcdee570323e8fc399dbfc63d8c1569546fb3cd6886c628668ab1e1d0f"
"ca71058febdf76d702970ad6579d80ac2f9521075e40ef8f3f39983bd819"
"07e898bad3",
16,
)
rsa1024_Q = int(
"00d64801c955b4eb75fbae230faa8b28c9cc5e258be63747ff5ac8d2af25"
"3e9f6d6ce03ea2eb13ae0eb32572feb848c32ca00743635374338fedacd8"
"c5885f7897",
16,
)
rsa1024_exp1 = int(
"76c0526d5b1b28368a75d5d42a01b9a086e20b9310241e2cd2d0b166a278"
"c694ff1e9d25d9193d47789b52bb0fa194de1af0b77c09007f12afdfeef9"
"58d108c3",
16,
)
rsa1024_exp2 = int(
"008a41898d8b14217c4d782cbd15ef95d0a660f45ed09a4884f4e170367b"
"946d2f20398b907896890e88fe17b54bd7febe133ebc7720c86fe0649cca"
"7ca121e05f",
16,
)
rsa1024_coef = int(
"22db133445f7442ea2a0f582031ee214ff5f661972986f172651d8d6b4ec"
"3163e99bff1c82fe58ec3d075c6d8f26f277020edb77c3ba821b9ba3ae18"
"ff8cb2cb",
16,
)
rsa1016_N = int(
"00d29bb12fb84fddcd29b3a519cb66c43b8d8f8be545ba79384ce663ed03"
"df75991600eb920790d2530cece544db99a71f05896a3ed207165534aa99"
"057e47c47e3bc81ada6fa1e12e37268b5046a55268f9dad7ccb485d81a2e"
"19d50d4f0b6854acaf6d7be69d9a083136e15afa8f53c1c8c84fc6077279"
"dd0e55d7369a5bdd",
16,
)
rsa1016_E = 65537
rsa1016_D = int(
"3c4965070bf390c251d5a2c5277c5b5fd0bdee85cad7fe2b27982bb28511"
"4a507004036ae1cf8ae54b25e4db39215abd7e903f618c2d8b2f08cc6cd1"
"2dbccd72205e4945b6b3df389e5e43de0a148bb2c84e2431fdbe5920b044"
"bb272f45ecff0721b7dfb60397fc613a9ea35c22300530cae8f9159c534d"
"f3bf0910951901",
16,
)
rsa1016_P = int(
"0f9f17597c85b8051b9c69afb55ef576c996dbd09047d0ccde5b9d60ea5c"
"67fe4fac67be803f4b6ac5a3f050f76b966fb14f5cf105761e5ade6dd960"
"b183ba55",
16,
)
rsa1016_Q = int(
"0d7b637112ce61a55168c0f9c9386fb279ab40cba0d549336bba65277263"
"aac782611a2c81d9b635cf78c40018859e018c5e9006d12e3d2ee6f346e7"
"9fa43369",
16,
)
rsa1016_exp1 = int(
"09fd6c9a3ea6e91ae32070f9fc1c210ff9352f97be5d1eeb951bb39681e9"
"dc5b672a532221b3d8900c9a9d99b9d0a4e102dc450ca1b87b0b1389de65"
"16c0ae0d",
16,
)
rsa1016_exp2 = int(
"0141b832491b7dd4a83308920024c79cae64bd447df883bb4c5672a96bab"
"48b7123b34f26324452cdceb17f21e570e347cbe2fd4c2d8f9910eac2cb6"
"d895b8c9",
16,
)
rsa1016_coef = int(
"0458dd6aee18c88b2f9b81f1bc3075ae20dc1f9973d20724f20b06043d61"
"47c8789d4a07ae88bc82c8438c893e017b13947f62e0b18958a31eb664b1"
"9e64d3e0",
16,
)
def __init__(self, specification):
if specification == "default":
self.RSA_N = self.sharedRSA_N
self.RSA_E = self.sharedRSA_E
self.RSA_D = self.sharedRSA_D
self.RSA_P = self.sharedRSA_P
self.RSA_Q = self.sharedRSA_Q
self.RSA_exp1 = self.sharedRSA_exp1
self.RSA_exp2 = self.sharedRSA_exp2
self.RSA_coef = self.sharedRSA_coef
elif specification == "alternate":
self.RSA_N = self.alternateRSA_N
self.RSA_E = self.alternateRSA_E
self.RSA_D = self.alternateRSA_D
self.RSA_P = self.alternateRSA_P
self.RSA_Q = self.alternateRSA_Q
self.RSA_exp1 = self.alternateRSA_exp1
self.RSA_exp2 = self.alternateRSA_exp2
self.RSA_coef = self.alternateRSA_coef
elif specification == "ev":
self.RSA_N = self.evRSA_N
self.RSA_E = self.evRSA_E
self.RSA_D = self.evRSA_D
self.RSA_P = self.evRSA_P
self.RSA_Q = self.evRSA_Q
self.RSA_exp1 = self.evRSA_exp1
self.RSA_exp2 = self.evRSA_exp2
self.RSA_coef = self.evRSA_coef
elif specification == "evRSA2040":
self.RSA_N = self.evRSA2040_N
self.RSA_E = self.evRSA2040_E
self.RSA_D = self.evRSA2040_D
self.RSA_P = self.evRSA2040_P
self.RSA_Q = self.evRSA2040_Q
self.RSA_exp1 = self.evRSA2040_exp1
self.RSA_exp2 = self.evRSA2040_exp2
self.RSA_coef = self.evRSA2040_coef
elif specification == "rsa2040":
self.RSA_N = self.rsa2040_N
self.RSA_E = self.rsa2040_E
self.RSA_D = self.rsa2040_D
self.RSA_P = self.rsa2040_P
self.RSA_Q = self.rsa2040_Q
self.RSA_exp1 = self.rsa2040_exp1
self.RSA_exp2 = self.rsa2040_exp2
self.RSA_coef = self.rsa2040_coef
elif specification == "rsa1024":
self.RSA_N = self.rsa1024_N
self.RSA_E = self.rsa1024_E
self.RSA_D = self.rsa1024_D
self.RSA_P = self.rsa1024_P
self.RSA_Q = self.rsa1024_Q
self.RSA_exp1 = self.rsa1024_exp1
self.RSA_exp2 = self.rsa1024_exp2
self.RSA_coef = self.rsa1024_coef
elif specification == "rsa1016":
self.RSA_N = self.rsa1016_N
self.RSA_E = self.rsa1016_E
self.RSA_D = self.rsa1016_D
self.RSA_P = self.rsa1016_P
self.RSA_Q = self.rsa1016_Q
self.RSA_exp1 = self.rsa1016_exp1
self.RSA_exp2 = self.rsa1016_exp2
self.RSA_coef = self.rsa1016_coef
else:
raise UnknownKeySpecificationError(specification)
def toDER(self):
privateKeyInfo = PrivateKeyInfo()
privateKeyInfo["version"] = 0
algorithmIdentifier = rfc2459.AlgorithmIdentifier()
algorithmIdentifier["algorithm"] = rfc2459.rsaEncryption
# Directly setting parameters to univ.Null doesn't currently work.
nullEncapsulated = encoder.encode(univ.Null())
algorithmIdentifier["parameters"] = univ.Any(nullEncapsulated)
privateKeyInfo["privateKeyAlgorithm"] = algorithmIdentifier
rsaPrivateKey = RSAPrivateKey()
rsaPrivateKey["version"] = 0
rsaPrivateKey["modulus"] = self.RSA_N
rsaPrivateKey["publicExponent"] = self.RSA_E
rsaPrivateKey["privateExponent"] = self.RSA_D
rsaPrivateKey["prime1"] = self.RSA_P
rsaPrivateKey["prime2"] = self.RSA_Q
rsaPrivateKey["exponent1"] = self.RSA_exp1
rsaPrivateKey["exponent2"] = self.RSA_exp2
rsaPrivateKey["coefficient"] = self.RSA_coef
rsaPrivateKeyEncoded = encoder.encode(rsaPrivateKey)
privateKeyInfo["privateKey"] = univ.OctetString(rsaPrivateKeyEncoded)
return encoder.encode(privateKeyInfo)
def toPEM(self):
output = "-----BEGIN PRIVATE KEY-----"
der = self.toDER()
b64 = six.ensure_text(base64.b64encode(der))
while b64:
output += "\n" + b64[:64]
b64 = b64[64:]
output += "\n-----END PRIVATE KEY-----"
return output
def asSubjectPublicKeyInfo(self):
"""Returns a subject public key info representing
this key for use by pyasn1."""
algorithmIdentifier = rfc2459.AlgorithmIdentifier()
algorithmIdentifier["algorithm"] = rfc2459.rsaEncryption
# Directly setting parameters to univ.Null doesn't currently work.
nullEncapsulated = encoder.encode(univ.Null())
algorithmIdentifier["parameters"] = univ.Any(nullEncapsulated)
spki = rfc2459.SubjectPublicKeyInfo()
spki["algorithm"] = algorithmIdentifier
rsaKey = RSAPublicKey()
rsaKey["N"] = univ.Integer(self.RSA_N)
rsaKey["E"] = univ.Integer(self.RSA_E)
subjectPublicKey = univ.BitString(
byteStringToHexifiedBitString(encoder.encode(rsaKey))
)
spki["subjectPublicKey"] = subjectPublicKey
return spki
def sign(self, data, hashAlgorithm):
"""Returns a hexified bit string representing a
signature by this key over the specified data.
Intended for use with pyasn1.type.univ.BitString"""
hashAlgorithmName = None
if hashAlgorithm == HASH_MD5:
hashAlgorithmName = "MD5"
elif hashAlgorithm == HASH_SHA1:
hashAlgorithmName = "SHA-1"
elif hashAlgorithm == HASH_SHA256:
hashAlgorithmName = "SHA-256"
elif hashAlgorithm == HASH_SHA384:
hashAlgorithmName = "SHA-384"
elif hashAlgorithm == HASH_SHA512:
hashAlgorithmName = "SHA-512"
else:
raise UnknownHashAlgorithmError(hashAlgorithm)
rsaPrivateKey = rsa.PrivateKey(
self.RSA_N, self.RSA_E, self.RSA_D, self.RSA_P, self.RSA_Q
)
signature = rsa.sign(data, rsaPrivateKey, hashAlgorithmName)
return byteStringToHexifiedBitString(signature)
ecPublicKey = univ.ObjectIdentifier("1.2.840.10045.2.1")
secp256k1 = univ.ObjectIdentifier("1.3.132.0.10")
secp224r1 = univ.ObjectIdentifier("1.3.132.0.33")
secp256r1 = univ.ObjectIdentifier("1.2.840.10045.3.1.7")
secp384r1 = univ.ObjectIdentifier("1.3.132.0.34")
secp521r1 = univ.ObjectIdentifier("1.3.132.0.35")
def longToEvenLengthHexString(val):
h = format(val, "x")
if not len(h) % 2 == 0:
h = "0" + h
return h
class ECCKey(object):
secp256k1KeyPair = (
"35ee7c7289d8fef7a86afe5da66d8bc2ebb6a8543fd2fead089f45ce7acd0fa6"
+ "4382a9500c41dad770ffd4b511bf4b492eb1238800c32c4f76c73a3f3294e7c5",
"67cebc208a5fa3df16ec2bb34acc59a42ab4abb0538575ca99b92b6a2149a04f",
)
secp224r1KeyPair = (
"668d72cca6fd6a1b3557b5366104d84408ecb637f08e8c86bbff82cc"
+ "00e88f0066d7af63c3298ba377348a1202b03b37fd6b1ff415aa311e",
"04389459926c3296c242b83e10a6cd2011c8fe2dae1b772ea5b21067",
)
secp256r1KeyPair = (
"4fbfbbbb61e0f8f9b1a60a59ac8704e2ec050b423e3cf72e923f2c4f794b455c"
+ "2a69d233456c36c4119d0706e00eedc8d19390d7991b7b2d07a304eaa04aa6c0",
"2191403d5710bf15a265818cd42ed6fedf09add92d78b18e7a1e9feb95524702",
)
secp384r1KeyPair = (
"a1687243362b5c7b1889f379154615a1c73fb48dee863e022915db608e252de4b71"
+ "32da8ce98e831534e6a9c0c0b09c8d639ade83206e5ba813473a11fa330e05da8c9"
+ "6e4383fe27873da97103be2888cff002f05af71a1fddcc8374aa6ea9ce",
"035c7a1b10d9fafe837b64ad92f22f5ced0789186538669b5c6d872cec3d926122b"
+ "393772b57602ff31365efe1393246",
)
secp521r1KeyPair = (
"014cdc9cacc47941096bc9cc66752ec27f597734fa66c62b792f88c519d6d37f0d1"
+ "6ea1c483a1827a010b9128e3a08070ca33ef5f57835b7c1ba251f6cc3521dc42b01"
+ "0653451981b445d343eed3782a35d6cff0ff484f5a883d209f1b9042b726703568b"
+ "2f326e18b833bdd8aa0734392bcd19501e10d698a79f53e11e0a22bdd2aad90",
"014f3284fa698dd9fe1118dd331851cdfaac5a3829278eb8994839de9471c940b85"
+ "8c69d2d05e8c01788a7d0b6e235aa5e783fc1bee807dcc3865f920e12cf8f2d29",
)
def __init__(self, specification):
if specification == "secp256k1":
key_pair = self.secp256k1KeyPair
self.keyOID = secp256k1
self.curve = ecdsa.SECP256k1
elif specification == "secp224r1":
key_pair = self.secp224r1KeyPair
self.keyOID = secp224r1
self.curve = ecdsa.NIST224p
elif specification == "secp256r1":
key_pair = self.secp256r1KeyPair
self.keyOID = secp256r1
self.curve = ecdsa.NIST256p
elif specification == "secp384r1":
key_pair = self.secp384r1KeyPair
self.keyOID = secp384r1
self.curve = ecdsa.NIST384p
elif specification == "secp521r1":
key_pair = self.secp521r1KeyPair
self.keyOID = secp521r1
self.curve = ecdsa.NIST521p
else:
raise UnknownKeySpecificationError(specification)
self.public_key, self.private_key = (
binascii.unhexlify(key_pair[0]),
binascii.unhexlify(key_pair[1]),
)
self.key = ecdsa.SigningKey.from_string(self.private_key, curve=self.curve)
def getPublicKeyHexifiedString(self):
"""Returns the EC public key as a hex string using the uncompressed
point representation. This is intended to be used in the encoder
functions, as it surrounds the value with ''H to indicate its type."""
p1, p2 = (
self.public_key[: len(self.public_key) // 2],
self.public_key[len(self.public_key) // 2 :],
)
# We don't want leading zeroes.
p1, p2 = (p1.lstrip(b"\0"), p2.lstrip(b"\0"))
# '04' indicates that the points are in uncompressed form.
return byteStringToHexifiedBitString(b"\04" + p1 + p2)
def toPEM(self):
"""Return the EC private key in PEM-encoded form."""
output = "-----BEGIN EC PRIVATE KEY-----"
der = self.toDER()
b64 = six.ensure_text(base64.b64encode(der))
while b64:
output += "\n" + b64[:64]
b64 = b64[64:]
output += "\n-----END EC PRIVATE KEY-----"
return output
def toDER(self):
"""Return the EC private key in DER-encoded form, encoded per SEC 1
section C.4 format."""
privateKeyInfo = PrivateKeyInfo()
privateKeyInfo["version"] = 0
algorithmIdentifier = rfc2459.AlgorithmIdentifier()
algorithmIdentifier["algorithm"] = ecPublicKey
algorithmIdentifier["parameters"] = self.keyOID
privateKeyInfo["privateKeyAlgorithm"] = algorithmIdentifier
ecPrivateKey = ECPrivateKey()
ecPrivateKey["version"] = 1
ecPrivateKey["privateKey"] = self.private_key
ecPrivateKey["publicKey"] = univ.BitString(
self.getPublicKeyHexifiedString()
).subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))
ecPrivateKeyEncoded = encoder.encode(ecPrivateKey)
privateKeyInfo["privateKey"] = univ.OctetString(ecPrivateKeyEncoded)
return encoder.encode(privateKeyInfo)
def asSubjectPublicKeyInfo(self):
"""Returns a subject public key info representing
this key for use by pyasn1."""
algorithmIdentifier = rfc2459.AlgorithmIdentifier()
algorithmIdentifier["algorithm"] = ecPublicKey
algorithmIdentifier["parameters"] = self.keyOID
spki = rfc2459.SubjectPublicKeyInfo()
spki["algorithm"] = algorithmIdentifier
spki["subjectPublicKey"] = univ.BitString(self.getPublicKeyHexifiedString())
return spki
def signRaw(self, data, hashAlgorithm):
"""Performs the ECDSA signature algorithm over the given data.
The returned value is a string representing the bytes of the
resulting point when encoded by left-padding each of (r, s) to
the key size and concatenating them.
"""
assert hashAlgorithm.startswith("hash:")
hashAlgorithm = hashAlgorithm[len("hash:") :]
k = _gen_k(self.curve)
digest = hashlib.new(hashAlgorithm, six.ensure_binary(data)).digest()
digest = _truncate_digest(digest, self.curve)
# NOTE: Under normal circumstances it's advisable to use
# sign_digest_deterministic. In this case we don't want the library's
# default generation of k, so we call the normal "sign" method and
# inject it here.
return self.key.sign_digest(digest, sigencode=ecdsa.util.sigencode_string, k=k)
def sign(self, data, hashAlgorithm):
"""Returns a hexified bit string representing a
signature by this key over the specified data.
Intended for use with pyasn1.type.univ.BitString"""
# signRaw returns an encoded point, which is useful in some situations.
# However, for signatures on X509 certificates, we need to decode it so
# we can encode it as a BITSTRING consisting of a SEQUENCE of two
# INTEGERs.
raw = self.signRaw(data, hashAlgorithm)
point = ECPoint()
point["x"] = int.from_bytes(raw[: len(raw) // 2], byteorder="big")
point["y"] = int.from_bytes(raw[len(raw) // 2 :], byteorder="big")
return byteStringToHexifiedBitString(encoder.encode(point))
def keyFromSpecification(specification):
"""Pass in a specification, get the appropriate key back."""
if specification.startswith("secp"):
return ECCKey(specification)
return RSAKey(specification)
# The build harness will call this function with an output file-like
# object and a path to a file containing a specification. This will
# read the specification and output the key as ASCII-encoded PKCS #8.
def main(output, inputPath):
with open(inputPath) as configStream:
output.write(keyFromSpecification(configStream.read().strip()).toPEM() + "\n")
# When run as a standalone program, this will read a specification from
# stdin and output the certificate as PEM to stdout.
if __name__ == "__main__":
print(keyFromSpecification(sys.stdin.read().strip()).toPEM())