a _mg, @sddlmZmZddlZzddlmZWneyBgdZYn0ddeDZddlmZddlZddl Z ddl m Z ddl mZmZmZmZmZd d lmZd d lmZd d lmZmZd d lmZmZd dlmZmZmZd dlmZm Z m!Z!m"Z"m#Z#m$Z$d dl%m&Z&dZ'ddeDZ(de j)vr4eegZgZ*e+edddD]bZ,dde+e(dddDD]@Z-ej.e,eej/e-dZ0e*1d2e,e-e0j3e0j4e'edfqfqHej56ddde*DddZ7e j8d d!Z9iZ:e j;d"krdd#l med?ee*de#ededee*de#ed ed d@ee*de#ed gdAdBdCZNdDde*DZOeOdEde*D7ZOefieAee9eOdFdGZPdS)H)with_statementdivisionN)algorithms_available)md5sha1sha224sha256sha384sha512cCsg|]}|dvr|qS))Zmdc2Zmd2Zmd4Z whirlpoolZ ripemd160).0ir r P/var/www/html/idle/venv/lib/python3.9/site-packages/ecdsa/test_malformed_sigs.py sr)partial)noteassumegivensettingsexample) SigningKey)BadSignatureError) sigencode_dersigencode_string) sigdecode_dersigdecode_string)curves SECP112r2 SECP128r1)encode_integerencode_bitstringencode_octet_string encode_oidencode_sequenceencode_constructed) CurveEdTwssome data to signcCsg|]}|t|jfqSr )hashlibnew digest_size)r namer r rr2sz--fastcCs|jSN)baselenxr r rCr/)keycCs.g|]&\}}d|kr"tjkrnq|qS)r)curver,)r r*sizer r rrDscCs|dS)Nrr r-r r rr/Fr0)hashfuncz{0} {1})Z sigencodezverifying_key,signaturecCs"g|]\}}}tj|||dqS))id)pytestparam)r r*Zvksigr r rrYr0cCs|j|ttdsJdSNZ sigdecode)verify example_datar) verifying_key signaturer r rtest_signaturesWsr?c Cs^|t|\}}}td|t|}|tjtjdt|dddd}|t |D] }||=q^td|d}|r|t tjdt|ddtjdd d}| D]\}} ||| N<qtd ||tjdt|d} |tj d d } |d| | || d}td | | t |}t|pF|pF| t||k||fS)z Hypothesis strategy that generates pairs of VerifyingKey and malformed signatures created by fuzzing of a valid signature. Configuration: {0}rr min_value max_valueT)uniquezRemove bytes: {0}Nz xors: {0}max_sizez%Inserted at position {0} bytes: {1!r})st sampled_fromrformat bytearraylistsintegerslensortreversedZ dictionariesitemsbinarybytesr) draw keys_and_sigsr*r=Zold_sigr8 to_remover ZxorsvalZ insert_posZ insert_datar r r st_fuzzed_sigas>    rY)) HealthCheckideadlineZsuppress_health_checkZ max_examples cCsF|\}}tt |j|ttdWdn1s80YdSr9r6raisesrr;r<r)argsr=r8r r rtest_fuzzed_der_signaturess rccCs|tt\}}}td|t|jj}|tjd|d>dtj|d?|ddB}|tjd|d>dtj|d?|ddB}t t |t |}||fS)z Hypothesis strategy for selecting random values and encoding them to ECDSA-Sig-Value object:: ECDSA-Sig-Value ::= SEQUENCE { r INTEGER, s INTEGER } r@rrArZr) rIrJrVrrKintr2orderrNr$r )rUr*r=_rfrsr8r r rst_random_der_ecdsa_sig_values  rjcCsF|\}}tt |j|ttdWdn1s80YdS)zd Check if random values encoded in ECDSA-Sig-Value structure are rejected as signature. r:Nr`paramsr=r8r r rtest_random_der_ecdsa_sig_values rmcOs(d|vrd|d<tttj|i|S)z Hypothesis strategy that returns a random positive integer as DER INTEGER. Parameters are passed to hypothesis.strategy.integer. rBr)rIbuildsr rNrbkwargsr r rst_der_integersrqcOs`|tj|i|}|rR|tjddd}t|}|dd| M<t|}nd}t||S)z| Hypothesis strategy that returns a random DER BIT STRING. Parameters are passed to hypothesis.strategy.binary. rr[rArZ)rIrSrNrLrTr!)rUrbrpdataZunusedr r rst_der_bit_strings rtcOstttj|i|S)z Hypothesis strategy that returns a random DER OCTET STRING object. Parameters are passed to hypothesis.strategy.binary )rIrnr"rSror r rst_der_octet_stringsrucCs tdS)z; Hypothesis strategy that returns DER NULL object. s)rIjustr r r r st_der_nullsrwcCsv|tjddd}|dkr.|tjddd}n|tjdddd}|tjtjdddddd}t||g|RS)zI Hypothesis strategy that returns DER OBJECT IDENTIFIER objects. rrZrA'i2rG)rIrNrMr#)rUfirstsecondrestr r r st_der_oidsr}cCsHtjtdtdddBtddBtddBtBtBddd d S) z Hypothesis strategy that returns random DER structures. A valid DER structure is any primitive object, an octet encoding of a valid DER structure, sequence of valid DER objects or a constructed encoding of any of the above. r0rZi)rCrGcSs`ttt|tddt|Btddtj|ddBtttjdddt|BS) NcSs t|dS)Nr)r!r-r r rr/.r0z*st_der....cSst|Sr+)r$r-r r rr/0r0rGr?rA)rIrnr"Zone_ofrMr%rN)childrenr r rr/-s zst_der..()Z max_leaves)rI recursivervrqrtrurwr}r r r rst_ders  rcCsH|\}}}tt |j|ttdWdn1s:0YdS)z8Check if random DER structures are rejected as signaturer:Nr`rlderr*r=rgr r rtest_random_der_as_signature;s  rr~rGcCsH|\}}}tt |j|ttdWdn1s:0YdS)z/Check if random bytes are rejected as signaturer:Nr`rr r rtest_random_bytes_as_signatureEs  rcCsBg|]:\}}}t|jjts||tt||jjd|jjifqS)rf) isinstancer2r&rrrfr r*r=r8r r rrWs  cCs*g|]"\}}}t|jjtr|||fqSr )rr2r&rr r rris cCsF|\}}tt |j|ttdWdn1s80YdSr9)r6rarr;r<rrkr r rtest_fuzzed_string_signaturests r)Q __future__rrr'r ImportError functoolsrr6sysZhypothesis.strategies strategiesrIZ hypothesisrrrrrkeysrrutilrrrrrrrrr r!r"r#r$r%Z ellipticcurver&r<Z hash_and_sizeargvrVsortedr2Zhash_alggenerater(skappendrKr=signmarkZ parametrizer?Z compositerYrl version_infor\Zdata_too_largeZfilter_too_muchZtoo_slowdictZ slow_paramsrcrjrmrqrtrurwr}rrJrrSrZkeys_and_string_sigsrr r r rs                 3         !