67 lines
2.0 KiB
Python
67 lines
2.0 KiB
Python
from Crypto.Hash import SHA256
|
|
import Crypto.PublicKey.RSA as RSA
|
|
from Crypto.PublicKey.RSA import RsaKey
|
|
from Crypto.Signature import pkcs1_15
|
|
|
|
from libp2p.crypto.keys import KeyPair, KeyType, PrivateKey, PublicKey
|
|
|
|
|
|
class RSAPublicKey(PublicKey):
|
|
def __init__(self, impl: RsaKey) -> None:
|
|
self.impl = impl
|
|
|
|
def to_bytes(self) -> bytes:
|
|
return self.impl.export_key("DER")
|
|
|
|
@classmethod
|
|
def from_bytes(cls, key_bytes: bytes) -> "RSAPublicKey":
|
|
rsakey = RSA.import_key(key_bytes)
|
|
return cls(rsakey)
|
|
|
|
def get_type(self) -> KeyType:
|
|
return KeyType.RSA
|
|
|
|
def verify(self, data: bytes, signature: bytes) -> bool:
|
|
h = SHA256.new(data)
|
|
try:
|
|
# NOTE: the typing in ``pycryptodome`` is wrong on the arguments to ``verify``.
|
|
pkcs1_15.new(self.impl).verify(h, signature) # type: ignore
|
|
except (ValueError, TypeError):
|
|
return False
|
|
return True
|
|
|
|
|
|
class RSAPrivateKey(PrivateKey):
|
|
def __init__(self, impl: RsaKey) -> None:
|
|
self.impl = impl
|
|
|
|
@classmethod
|
|
def new(cls, bits: int = 2048, e: int = 65537) -> "RSAPrivateKey":
|
|
private_key_impl = RSA.generate(bits, e=e)
|
|
return cls(private_key_impl)
|
|
|
|
def to_bytes(self) -> bytes:
|
|
return self.impl.export_key("DER")
|
|
|
|
def get_type(self) -> KeyType:
|
|
return KeyType.RSA
|
|
|
|
def sign(self, data: bytes) -> bytes:
|
|
h = SHA256.new(data)
|
|
# NOTE: the typing in ``pycryptodome`` is wrong on the arguments to ``sign``.
|
|
return pkcs1_15.new(self.impl).sign(h) # type: ignore
|
|
|
|
def get_public_key(self) -> PublicKey:
|
|
return RSAPublicKey(self.impl.publickey())
|
|
|
|
|
|
def create_new_key_pair(bits: int = 2048, e: int = 65537) -> KeyPair:
|
|
"""Returns a new RSA keypair with the requested key size (``bits``) and the
|
|
given public exponent ``e``.
|
|
|
|
Sane defaults are provided for both values.
|
|
"""
|
|
private_key = RSAPrivateKey.new(bits, e)
|
|
public_key = private_key.get_public_key()
|
|
return KeyPair(private_key, public_key)
|