o
    Æb7ō  ć                   @   są   d Z ddlZddlZddlmZ ddlmZ ddlmZ ddl	m
Z
 ddlmZ ddlmZ ed	Zedu r8d
ZedZerVerVddlmZ ddlmZmZmZ e  ” ZndZdd ZG dd dejZG dd dejZdS )z&
Tests for L{twisted.conch.ssh.keys}.
é    N)Śdedent)Śkeydata)Ś	randbytes)ŚFilePath)ŚrequireModule)ŚunittestŚcryptographyz Cannot run without cryptography.Śpyasn1)Śdefault_backend)ŚcommonŚkeysŚsexpyFc                 C   s   t sd| _| S )Nz$ed25519 not supported on this system)ŚED25519_SUPPORTEDŚskip)Śf© r   ś>/usr/lib/python3/dist-packages/twisted/conch/test/test_keys.pyŚskipWithoutEd25519$   s   r   c                   @   sĄ  e Zd Zedu r
eZedu rdZdd Zdd Zdd Z	d	d
 Z
dd Zdd Zdd Zdd Zdd Zdd Zdd Zdd Zdd Zdd Zdd  Zd!d" Zd#d$ Zd%d& Zd'd( Zd)d* Zd+d, Zd-d. Zd/d0 Zd1d2 Zd3d4 Zd5d6 Z d7d8 Z!d9d: Z"d;d< Z#d=d> Z$d?d@ Z%dAdB Z&dCdD Z'dEdF Z(dGdH Z)dIdJ Z*e+dKdL Z,dMdN Z-dOdP Z.dQdR Z/dSdT Z0e+dUdV Z1dWdX Z2dYdZ Z3d[d\ Z4e+d]d^ Z5d_d` Z6dadb Z7dcdd Z8dedf Z9e+dgdh Z:didj Z;dkdl Z<dmdn Z=dodp Z>dqdr Z?dsdt Z@dudv ZAe+dwdx ZBe+dydz ZCd{d| ZDd}d~ ZEdd ZFdd ZGdd ZHdd ZIdd ZJdd ZKdd ZLe+dd ZMdd ZNdd ZOdd ZPdd ZQdd ZRdd ZSdd ZTe+dd ZUe+dd  ZVdS )”ŚKeyTestsNzCannot run without PyASN1c                 C   s  t jjtjd tjd tjd tjd tjd tjd dj| _t jjtjd tjd tjd tjd	 tjd
 dj| _	t jj
tjd
 tjd tjd tjd dj| _t jj
tjd
 tjd tjd tjd dj| _t jj
tjd
 tjd tjd tjd dj| _trt jjtjd tjd dj| _d| _d| _|  tddd ” |  ” | _t| jd}| tj” W d    d S 1 sĀw   Y  d S )NŚnŚeŚdŚpŚqŚu)r   r   r   r   r   r   ŚyŚgŚx)r   r   r   r   r   ŚprivateValueŚcurve)r   r   r   r   ŚaŚk)r    r!   s     ssh-rsa   ~Y£×żWĘpu@Ų1”SóOŚEō/xńįG3ŁÖUŁĮŲdÉē²É,'=QgēxµjŪIĄŽÆb×@ŹrĪ£zM1q5Žś{wjKNĖCåĆłiŪŹ}ŪRTłDJHĻló[¢żĪ|ū^nŌķāŃ·aYB¤Ē¾7µ9j¤.÷šŚ×Ņł9pż?ņNĻ/)
>AĀµjłUWŌ®Bęt¢y¢ŖfĖåkćĪąuėNÉYĆ.V±L44`CĒ¦6ÆśYś¤%Õ 4^¹rYŗ ł.%H¾As7      ssh-dss   (?Ēė;ÕTFA“ßÄE@4,d¼	Ł®Ż[ķ-nQfčįjrgp<ŚsecureRandomc                 S   s   d|  S )Nó   ’r   )r   r   r   r   Ś<lambda>k   s    z KeyTests.setUp.<locals>.<lambda>Śwb)r   ŚKeyŚ_fromRSAComponentsr   ŚRSADataŚ
_keyObjectŚrsaObjŚ_fromDSAComponentsŚDSADataŚdsaObjŚ_fromECComponentsŚECDatanistp256ŚecObjŚECDatanistp384ŚecObj384ŚECDatanistp521ŚecObj521r   Ś_fromEd25519ComponentsŚEd25519DataŚ
ed25519ObjŚrsaSignatureŚdsaSignatureŚpatchr   ŚmktempŚkeyFileŚopenŚwriteŚprivateRSA_lsh)Śselfr   r   r   r   ŚsetUp1   st   śłūśüūüūüū’ž’’
"’zKeyTests.setUpc                 C   s   t  | j” d S ©N)ŚosŚunlinkr<   ©r@   r   r   r   ŚtearDownp   s   zKeyTests.tearDownc                 C   s   |   t | j” ” d” |   t | j” ” d” |   t | j” ” d” |   t | j” ” d” |   t | j” ” d” t	rL|   t | j
” ” d” dS dS )zU
        The L{keys.Key.size} method returns the size of key object in bits.
        i   é   é   i  i	  N)ŚassertEqualr   r&   r*   Śsizer-   r0   r2   r4   r   r7   rE   r   r   r   Ś	test_sizes   s   ’zKeyTests.test_sizec                 C   s¾  |   tj tj”d” |   tj tj”d” |   tj tj”d” tr.|   tj tj	”d” |   tj tj
”d” |   tj tj”d” |   tj tj”d” |   tj tj”d” |   tj tj”d” |   tj tj”d” tr}|   tj tj”d” |   tj tj”d” |   tj tj”d” |   tj tj”d” |   tj tj”d” |   tj tj”d” |   tj tj”d” |   tj d”d” |   tj d”d” |   tj d	”d
” d
S )z_
        Test that the _guessStringType method guesses string types
        correctly.
        Śpublic_opensshŚprivate_opensshŚ
public_lshŚprivate_lshŚagentv3s      ssh-rsa   Śblobs      ssh-dss   s	   not a keyN)rI   r   r&   Ś_guessStringTyper   ŚpublicRSA_opensshŚpublicDSA_opensshŚpublicECDSA_opensshr   ŚpublicEd25519_opensshŚprivateRSA_opensshŚprivateRSA_openssh_newŚprivateDSA_opensshŚprivateDSA_openssh_newŚprivateECDSA_opensshŚprivateECDSA_openssh_newŚprivateEd25519_openssh_newŚpublicRSA_lshŚpublicDSA_lshr?   ŚprivateDSA_lshŚprivateRSA_agentv3ŚprivateDSA_agentv3rE   r   r   r   Śtest__guessStringType   sz   ’’’ž’’’’’žž’’’’
ž
žzKeyTests.test__guessStringTypec           	      C   sĢ   t j tj”}t j tj”}|  | ” | ” ” t j tj”}t j tj	”}|  | ” | ” ” t j tj
”}t j tj”}|  | ” | ” ” trdt j tj”}t j tj”}|  | ” | ” ” dS dS )zn
        The L{keys.Key.public} method returns a public key for both
        public and private keys.
        N)r   r&   Ś
fromStringr   rW   rS   rI   ŚpublicrY   rT   r[   rU   r   r]   rV   )	r@   ŚprivateRSAKeyŚpublicRSAKeyŚprivateDSAKeyŚpublicDSAKeyŚprivateECDSAKeyŚpublicECDSAKeyŚprivateEd25519KeyŚpublicEd25519Keyr   r   r   Śtest_publicĀ   s   żzKeyTests.test_publicc                 C   sÄ   t j tj”}t j tj”}t j tj”}|  | ”  	” ” |  
| 	” ” |  | ”  	” ” |  
| 	” ” |  | ”  	” ” |  
| 	” ” tr`t j tj”}|  | ”  	” ” |  
| 	” ” dS dS )zg
        The L{keys.Key.isPublic} method returns True for public keys
        otherwise False.
        N)r   r&   rd   r   rW   rY   r[   Ś
assertTruere   ŚisPublicŚassertFalser   r]   )r@   ŚrsaKeyŚdsaKeyŚecdsaKeyŚ
ed25519Keyr   r   r   Śtest_isPublicŚ   s   żzKeyTests.test_isPublicc                 C   s    |   |||” |  |||” d S rB   )Ś_testPublicFromStringŚ_testPrivateFromString)r@   re   ŚprivateŚtypeŚdatar   r   r   Ś_testPublicPrivateFromStringī   s   z%KeyTests._testPublicPrivateFromStringc                 C   sT   t j |”}|  | ” ” |  | ” |” | ”  ” D ]\}}|  || |” qd S rB   )	r   r&   rd   ro   rp   rI   rz   r{   Śitems)r@   re   rz   r{   Ś	publicKeyr!   Śvr   r   r   rw   ņ   s   ’zKeyTests._testPublicFromStringc                 C   sT   t j |”}|  | ” ” |  | ” |” | ” D ]\}}|  | ” | |” qd S rB   )	r   r&   rd   rq   rp   rI   rz   r}   r{   )r@   ry   rz   r{   Ś
privateKeyr!   r   r   r   r   rx   ł   s   ’zKeyTests._testPrivateFromStringc                 C   sØ   |   tjtjdtj” |   tjtjdtj” |  t	j
jtjddt	j
 tj”” |  t	j
 tj”t	j
 tj”” |   tjtjdtj” trR|   tjtjdtj” dS dS )zN
        Test that keys are correctly generated from OpenSSH strings.
        ŚECŚRSAó	   encrypted©Ś
passphraseŚDSAŚEd25519N)r|   r   rU   r[   r/   rS   rW   r(   rI   r   r&   rd   ŚprivateRSA_openssh_encryptedŚprivateRSA_openssh_alternaterT   rY   r,   r   rV   r]   r6   rE   r   r   r   Śtest_fromOpenSSH   sH   üü’üžüü’zKeyTests.test_fromOpenSSHc                 C   s   d}|   tjtjj|d” dS )z.
        Tests for invalid key types.
        s   -----BEGIN FOO PRIVATE KEY-----
MIGkAgEBBDAtAi7I8j73WCX20qUM5hhHwHuFzYWYYILs2Sh8UZ+awNkARZ/Fu2LU
LLl5RtOQpbWgBwYFK4EEACKhZANiAATU17sA9P5FRwSknKcFsjjsk0+E3CeXPYX0
Tk/M0HK3PpWQWgrO8JdRHP9eFE9O/23P8BumwFt7F/AvPlCzVd35VfraFT0o4cCW
G0RqpQ+np31aKmeJshkcYALEchnU+tQ=
-----END EC PRIVATE KEY-----N)ŚassertRaisesr   ŚBadKeyErrorr&   Ś_fromString_PRIVATE_OPENSSH©r@   ŚbadKeyr   r   r   Śtest_fromOpenSSHErrors)  s   ’zKeyTests.test_fromOpenSSHErrorsc                 C   s(   d}|   tj |”tj |d ”” dS )zP
        If key strings have trailing whitespace, it should be ignored.
        ó  -----BEGIN DSA PRIVATE KEY-----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-----END DSA PRIVATE KEY-----ó   
N)rI   r   r&   rd   ©r@   ŚprivateDSADatar   r   r   Ś test_fromOpenSSH_with_whitespace7  s
   
žz)KeyTests.test_fromOpenSSH_with_whitespacec                 C   sH   t jjtjdd}|  | ” d” t jjtjd dd}|  ||” dS )z
        Newer versions of OpenSSH generate encrypted keys which have a longer
        IV than the older versions.  These newer keys are also loaded.
        s   testxpr   r   r   N)r   r&   rd   r   Ś privateRSA_openssh_encrypted_aesrI   rz   )r@   ŚkeyŚkey2r   r   r   Śtest_fromNewerOpenSSHN  s   ’
’zKeyTests.test_fromNewerOpenSSHc                 C   s   t jt jft jt jft jt jft jt jft j	t j
ffD ]\}}|  tj |”tj |”” q|  tjjt jddtjjt jdd” dS )zż
        OpenSSH 6.5 introduced a newer "openssh-key-v1" private key format
        (made the default in OpenSSH 7.8).  Loading keys in this format
        produces identical results to loading the same keys in the old
        PEM-based format.
        r   r   N)r   rW   rX   rY   rZ   r[   r\   ŚprivateECDSA_openssh384ŚprivateECDSA_openssh384_newŚprivateECDSA_openssh521ŚprivateECDSA_openssh521_newrI   r   r&   rd   Ś privateRSA_openssh_encrypted_newr   )r@   ŚoldŚnewr   r   r   Śtest_fromOpenSSH_v1_format\  s   




ū’’üz#KeyTests.test_fromOpenSSH_v1_formatc              	   C   s,   d}|   tj |”tj | dd””” dS )zp
        Test that keys are correctly generated from OpenSSH strings with
        Windows line endings.
        r   r   s   
N)rI   r   r&   rd   Śreplacer   r   r   r   Ś%test_fromOpenSSH_windows_line_endingst  s
   
žz.KeyTests.test_fromOpenSSH_windows_line_endingsc                 C   s@   t  ddddgggg”}| jtjtjjdt |” d d dS )	za
        C{BadKeyError} exception is raised when public key has an unknown
        type.
        s
   public-keyó   bad-keyó   pó   2ó   {ó   })r{   N)	r   Śpackr   r   r   r&   rd   Śbase64Ś	b64encode©r@   Śsexpr   r   r   Ś!test_fromLSHPublicUnsupportedType  s   
żz*KeyTests.test_fromLSHPublicUnsupportedTypec                 C   s0   t  ddddgggg”}|  tjtjj|” dS )zb
        C{BadKeyError} exception is raised when private key has an unknown
        type.
        s   private-keyr¤   r„   r¦   N)r   r©   r   r   r   r&   rd   r¬   r   r   r   Ś"test_fromLSHPrivateUnsupportedType  s   żz+KeyTests.test_fromLSHPrivateUnsupportedTypec                 C   ó   |   tjtjdtj” dS )zR
        RSA public and private keys can be generated from a LSH strings.
        r   N)r|   r   r^   r?   r(   rE   r   r   r   Śtest_fromLSHRSA¤  ó   üzKeyTests.test_fromLSHRSAc                 C   r°   )zH
        DSA public and private key can be generated from LSHs.
        r   N)r|   r   r_   r`   r,   rE   r   r   r   Śtest_fromLSHDSAÆ  r²   zKeyTests.test_fromLSHDSAc                 C   s<   |   tjdtj” |   tjdtj” |  tjtj	j
d” dS )zO
        Test that keys are correctly generated from Agent v3 strings.
        r   r   s$      ssh-foo               N)rx   r   ra   r(   rb   r,   r   r   r   r&   rd   rE   r   r   r   Śtest_fromAgentv3ŗ  s   żzKeyTests.test_fromAgentv3c                 C   sR   t  | j”}|jdd ” d}|  t jj|dd|” | jt jt jj|dd dS )zf
        L{keys.Key.fromString} applies Normalization Form KC to Unicode
        passphrases.
        Śopensshõ   verschlĆ¼sseltr   õ   verschluĢsseltõ   unassigned ļææN)	r   r&   r*   ŚtoStringŚencoderI   rd   r   ŚPassphraseNormalizationError©r@   r   Śkey_datar   r   r   Ś*test_fromStringNormalizesUnicodePassphraseĘ  s   ’
üz3KeyTests.test_fromStringNormalizesUnicodePassphrasec                 C   sā   |   tjtjjd” |   tjtjjdd” | j tjtjjtjdd |   tjtjjt | j”j	ddd” |   tjtjjd” | j tjtjjdd	d | j tjtjjd
d	d | j tjtjjdd	d | j tjtjjdd	d dS )zW
        keys.Key.fromString should raise BadKeyError when the key is invalid.
        ó    Śbad_types   unencryptedr   rµ   r   s   -----BEGIN RSA KEY-----
wA==
sÅ  -----BEGIN ENCRYPTED RSA KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: weird type
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-----END RSA PRIVATE KEY-----Ś	encryptedsĻ  -----BEGIN ENCRYPTED RSA KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: FOO-123-BAR,01234567
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-----END RSA PRIVATE KEY-----sĢ  -----BEGIN ENCRYPTED RSA KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: AES-128-CBC,01234
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-----END RSA PRIVATE KEY-----sĶ  -----BEGIN ENCRYPTED RSA KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,01234
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-----END RSA PRIVATE KEY-----N)
r   r   r   r&   rd   r   r^   ŚEncryptedKeyErrorr*   r¹   rE   r   r   r   Śtest_fromStringErrorsŁ  sP   üż’ß$ß$ß$
ßzKeyTests.test_fromStringErrorsc                 C   sV   |   tj | j”tj tj”” |  tj	tjj| jd” | jtj	tjj| jdd dS )z5
        Test that fromFile works correctly.
        rĄ   Śunencryptedr   N)
rI   r   r&   ŚfromFiler<   rd   r   r?   r   r   rE   r   r   r   Śtest_fromFile  s   ’
’zKeyTests.test_fromFilec                 C   s.   t jjdddj}t  |”}|  |j|” dS )zJ
        Test that the PublicKey object is initialized correctly.
        é   é   ©r   r   N)r   r&   r'   r)   rI   )r@   Śobjr   r   r   r   Ś	test_init  s   
zKeyTests.test_initc                 C   s   t  | j”}t  | j”}t  t jjdddj”}t  | j”}|  ||k” |  ||k” |  ||k” |  |tk” |  |dk” dS )z?
        Test that Key objects are compared correctly.
        rĒ   rČ   rÉ   N)	r   r&   r*   r'   r)   r-   ro   rq   Śobject©r@   Śrsa1Śrsa2Śrsa3Śdsar   r   r   Ś
test_equal  ó   zKeyTests.test_equalc                 C   s   t  | j”}t  | j”}t  t jjdddj”}t  | j”}|  ||k” |  ||k” |  ||k” |  |tk” |  |dk” dS )zC
        Test that Key objects are not-compared correctly.
        rĒ   rČ   rÉ   N)	r   r&   r*   r'   r)   r-   rq   ro   rĢ   rĶ   r   r   r   Śtest_notEqual¤  rÓ   zKeyTests.test_notEqualc                 C   s   t  d”}|  t|j” dS )zO
        The L{keys.Key.data} method raises RuntimeError for bad keys.
        ræ   N)r   r&   r   ŚRuntimeErrorr{   r   r   r   r   Śtest_dataError²  s   
zKeyTests.test_dataErrorc                 C   s4   |   t | j” ” d” |   t | j” ” d” dS )z
        Test that the fingerprint method returns fingerprint in
        L{FingerprintFormats.MD5-HEX} format by default.
        ś/85:25:04:32:58:55:96:9f:57:ee:fb:a8:1a:ea:69:daś/63:15:b3:0e:e6:4f:50:de:91:48:3d:01:6b:b3:13:c1N)rI   r   r&   r*   Śfingerprintr-   rE   r   r   r   Śtest_fingerprintdefault¹  s   žžz KeyTests.test_fingerprintdefaultc                 C   ó@   |   t | j” tjj”d” |   t | j” tjj”d” dS )z
        fingerprint method generates key fingerprint in
        L{FingerprintFormats.MD5-HEX} format if explicitly specified.
        r×   rŲ   N)rI   r   r&   r*   rŁ   ŚFingerprintFormatsŚMD5_HEXr-   rE   r   r   r   Śtest_fingerprint_md5_hexĒ  ó   žžz!KeyTests.test_fingerprint_md5_hexc                 C   rŪ   )z
        fingerprint method generates key fingerprint in
        L{FingerprintFormats.SHA256-BASE64} format if explicitly specified.
        z,FBTCOoknq0mHy+kpfnY9tDdcAJuWtCpuQMaV3EsvbUI=z,Wz5o2YbKyxOEcJn1au/UaALSVruUzfz0vaLI1xiIGyY=N)rI   r   r&   r*   rŁ   rÜ   ŚSHA256_BASE64r-   rE   r   r   r   Śtest_fingerprintsha256Õ  rß   zKeyTests.test_fingerprintsha256c                 C   sV   |   tj”}t | j” d” W d   n1 sw   Y  |  d|jjd ” dS )zk
        A C{BadFingerPrintFormat} error is raised when unsupported
        formats are requested.
        zsha256-baseNz+Unsupported fingerprint format: sha256-baser   )	r   r   ŚBadFingerPrintFormatr&   r*   rŁ   rI   Ś	exceptionŚargs)r@   Śemr   r   r   Śtest_fingerprintBadFormatć  s   ’’z"KeyTests.test_fingerprintBadFormatc                 C   s  |   t | j” ” d” |   t | j” ” d” |   t | j” ” d” |   t | j” ” d” |   t | j” ” d” |   t | j” ” tj	d ” t
re|   t | j” ” d” |   t | j” ” d” |  tt d	”j” |  tt d	”j” |  tt | ”j” |  tt | ”j” d	S )
zS
        Test that the type method returns the correct type for an object.
        r   ó   ssh-rsar   ó   ssh-dssr   r   r   ó   ssh-ed25519N)rI   r   r&   r*   rz   ŚsshTyper-   r0   r   r/   r   r7   r   rÕ   rE   r   r   r   Ś	test_typeī  s   ’zKeyTests.test_typec                 C   ó"   t  d”}|  tjtjj|” dS )ze
        A C{BadKeyError} error is raised whey the blob has an unsupported
        key type.
        ó   ssh-badN)r   ŚNSr   r   r   r&   rd   ©r@   ŚbadBlobr   r   r   Śtest_fromBlobUnsupportedType  ó   
z%KeyTests.test_fromBlobUnsupportedTypec                 C   sj   t jd t jd d}t d”t |d ” t |d ” }tj |”}|  | 	” ” |  
|| ” ” dS )zQ
        A public RSA key is correctly generated from a public key blob.
        r   r   rÉ   rē   N)r   r(   r   rī   ŚMPr   r&   rd   ro   rp   rI   r{   )r@   ŚrsaPublicDataŚrsaBlobrr   r   r   r   Śtest_fromBlobRSA  s   ž’ž’zKeyTests.test_fromBlobRSAc                 C   s   t jd t jd t jd t jd d}t d”t |d ” t |d ” t |d ” t |d ” }tj |”}|  | 	” ” |  
|| ” ” dS )zQ
        A public DSA key is correctly generated from a public key blob.
        r   r   r   r   )r   r   r   r   rč   N)r   r,   r   rī   ró   r   r&   rd   ro   rp   rI   r{   )r@   ŚdsaPublicDataŚdsaBlobrs   r   r   r   Śtest_fromBlobDSA  s$   ü’žżü’zKeyTests.test_fromBlobDSAc                 C   s¦   ddl m} tjd tjd tjd d}t |d ”t |d dd ” t d	| |d d
” | |d d
” ” }tj 	|”}|  
| ” ” |  || ” ” dS )zA
        Key.fromString generates ECDSA keys from blobs.
        r   ©Śutilsr   r   r   ©r   r   r   éų’’’Nó   é    )r   rū   r   r/   r   rī   Śint_to_bytesr   r&   rd   ro   rp   rI   r{   )r@   rū   ŚecPublicDataŚecblobŚeckeyr   r   r   Śtest_fromBlobECDSA5  s(   ż’’ž’ž’
zKeyTests.test_fromBlobECDSAc                 C   sT   dt jd i}t d”t |d ” }tj |”}|  | ” ” |  	|| 
” ” dS )zU
        A public Ed25519 key is correctly generated from a public key blob.
        r    ré   N)r   r6   r   rī   r   r&   rd   ro   rp   rI   r{   )r@   Śed25519PublicDataŚed25519Blobru   r   r   r   Śtest_fromBlobEd25519O  s   
’zKeyTests.test_fromBlobEd25519c                 C   rģ   )zh
        C{BadKeyError} is raised when loading a private blob with an
        unsupported type.
        rķ   N)r   rī   r   r   r   r&   Ś_fromString_PRIVATE_BLOBrļ   r   r   r   Ś#test_fromPrivateBlobUnsupportedType_  rņ   z,KeyTests.test_fromPrivateBlobUnsupportedTypec                 C   s²   t  d”t  tjd ” t  tjd ” t  tjd ” t  tjd ” t  tjd ” t  tjd ” }tj |”}|  | 	” ” |  
tj| ” ” |  
|tj | ” ”” dS )	zS
        A private RSA key is correctly generated from a private key blob.
        rē   r   r   r   r   r   r   N)r   rī   ró   r   r(   r   r&   r  rq   rp   rI   r{   ŚprivateBlob)r@   rõ   rr   r   r   r   Śtest_fromPrivateBlobRSAh  s(   ’žżüūś’
’z KeyTests.test_fromPrivateBlobRSAc                 C   s¢   t  d”t  tjd ” t  tjd ” t  tjd ” t  tjd ” t  tjd ” }tj |”}|  | 	” ” |  
tj| ” ” |  
|tj | ” ”” dS )zS
        A private DSA key is correctly generated from a private key blob.
        rč   r   r   r   r   r   N)r   rī   ró   r   r,   r   r&   r  rq   rp   rI   r{   r
  )r@   rų   rs   r   r   r   Śtest_fromPrivateBlobDSA~  s$   ’žżüū’	’z KeyTests.test_fromPrivateBlobDSAc                 C   sŚ   ddl m} ddlm} |jtjd tjd | ” d}t 	tjd ”t 	tjd dd	 ” t 	| 
t ” |jj|jj”” t tjd
 ” }tj |”}|  | ” ” |  tj| ” ” |  |tj | ” ”” d	S )zR
        A private EC key is correctly generated from a private key blob.
        r   ©Śserialization)Śecr   r   rü   r   rż   Nr   )Ścryptography.hazmat.primitivesr  Ś)cryptography.hazmat.primitives.asymmetricr  ŚEllipticCurvePublicNumbersr   r/   Ś	SECP256R1r   rī   Ś
public_keyr
   Śpublic_bytesŚEncodingŚX962ŚPublicFormatŚUncompressedPointró   r   r&   r  rq   rp   rI   r{   r
  )r@   r  r  ŚpublicNumbersr  r  r   r   r   Śtest_fromPrivateBlobECDSA  s0   ż’ž’žų’z"KeyTests.test_fromPrivateBlobECDSAc                 C   s|   t  d”t  tjd ” t  tjd tjd  ” }tj |”}|  | ” ” |  	tj| 
” ” |  	|tj | ” ”” dS )zW
        A private Ed25519 key is correctly generated from a private key blob.
        ré   r    r!   N)r   rī   r   r6   r   r&   r  rq   rp   rI   r{   r
  )r@   r  ru   r   r   r   Śtest_fromPrivateBlobEd25519±  s   ’ž’’z$KeyTests.test_fromPrivateBlobEd25519c                 C   sJ   |   t | j” ” t d”t | j ” j	j
” t | j ” j	j” ” dS )zL
        Return the over-the-wire SSH format of the RSA public key.
        rē   N)rI   r   r&   r*   rQ   r   rī   ró   Śprivate_numbersŚpublic_numbersr   r   rE   r   r   r   Śtest_blobRSAÄ  s   ’žžzKeyTests.test_blobRSAc                 C   sd   | j  ” j}|  t | j ” ” t d”t 	|j
j” t 	|j
j” t 	|j
j” t 	|j” ” dS )zL
        Return the over-the-wire SSH format of the DSA public key.
        rč   N)r-   r  r  rI   r   r&   rQ   r   rī   ró   Śparameter_numbersr   r   r   r   ©r@   r  r   r   r   Śtest_blobDSAĻ  s   ’žż
üžzKeyTests.test_blobDSAc                 C   s   ddl m} | jjjd d }|  t | j” ” t	 
tjd ”t	 
tjd dd ” t	 
d| | j ” jj|” | | j ” jj|” ” ” dS )	zK
        Return the over-the-wire SSH format of the EC public key.
        r   rś   é   é   r   rż   Nrž   )r   rū   r0   r   Śkey_sizerI   r   r&   rQ   r   rī   r   r/   r   r  r  r   r   )r@   rū   Ś
byteLengthr   r   r   Śtest_blobECŽ  s(   ’’’’ü’žžzKeyTests.test_blobECc                 C   sR   ddl m} | j ”  |jj|jj”}|  t	 
| j” ” t d”t |” ” dS )zP
        Return the over-the-wire SSH format of the Ed25519 public key.
        r   r  ré   N)r  r  r7   r  r  r  ŚRawr  rI   r   r&   rQ   r   rī   )r@   r  ŚpublicBytesr   r   r   Śtest_blobEd25519ō  s   
’žzKeyTests.test_blobEd25519c                 C   ó   t  d”}|  t|j” dS )zx
        C{RuntimeError} is raised when the blob is requested for a Key
        which is not wrapping anything.
        N)r   r&   r   rÕ   rQ   r   r   r   r   Śtest_blobNoKey  s   
zKeyTests.test_blobNoKeyc                 C   sx   | j  ” }|  t | j ” ” t d”t |j	j
” t |j	j” t |j” t |j” t |j” t |j” ” dS )zn
        L{keys.Key.privateBlob} returns the SSH protocol-level format of an
        RSA private key.
        rē   N)r*   r  rI   r   r&   r
  r   rī   ró   r  r   r   r   Śiqmpr   r   )r@   Śnumbersr   r   r   Śtest_privateBlobRSA  s"   
’ž
ż
ü
ū
śžzKeyTests.test_privateBlobRSAc                 C   sv   | j  ” j}|  t | j ” ” t d”t 	|j
j” t 	|j
j” t 	|j
j” t 	|j” t 	| j  ” j” ” dS )zm
        L{keys.Key.privateBlob} returns the SSH protocol-level format of a DSA
        private key.
        rč   N)r-   r  r  rI   r   r&   r
  r   rī   ró   r   r   r   r   r   r   r!  r   r   r   Śtest_privateBlobDSA  s   ’žż
üūžzKeyTests.test_privateBlobDSAc              
   C   s~   ddl m} |  t | j” ” t t	j
d ”t t	j
d dd ” t | j ”  |jj|jj”” t | j ” j” ” dS )zj
        L{keys.Key.privateBlob} returns the SSH ptotocol-level format of EC
        private key.
        r   r  r   rż   N)r  r  rI   r   r&   r0   r
  r   rī   r   r/   r  r  r  r  r  r  ró   r  Śprivate_value)r@   r  r   r   r   Śtest_privateBlobEC/  s    ’
ž’žųžzKeyTests.test_privateBlobECc                 C   s|   ddl m} | j ”  |jj|jj”}| j |jj|j	j| 
” ”}|  t | j” ” t d”t |” t || ” ” dS )zr
        L{keys.Key.privateBlob} returns the SSH protocol-level format of an
        Ed25519 private key.
        r   r  ré   N)r  r  r7   r  r  r  r(  r  Śprivate_bytesŚPrivateFormatŚNoEncryptionrI   r   r&   r
  r   rī   )r@   r  r)  ŚprivateBytesr   r   r   Śtest_privateBlobEd25519C  s"   
’ż’žžz KeyTests.test_privateBlobEd25519c                 C   r+  )zV
        Raises L{RuntimeError} if the underlying key object does not exists.
        N)r   r&   r   rÕ   r
  r   r   r   r   Śtest_privateBlobNoKeyObject[  s   
z$KeyTests.test_privateBlobNoKeyObjectc                 C   sz   t j tj”}|  | d”tj” |  |jdddtj” |  | 	”  d”tj
dd ” |  | 	” jdddtj
” dS )zO
        L{keys.Key.toString} serializes an RSA key in OpenSSH format.
        rµ   r   r   Nrż   ó   comment©Ścomment)r   r&   rd   r   ra   rI   r¹   rW   r   re   rS   ©r@   r   r   r   r   Śtest_toOpenSSHRSAc  s   ž’žzKeyTests.test_toOpenSSHRSAc                 C   ó   t j tj”}|jddd}|jdddd}|  d| ” d ” |  d| ” d ” |  |t j |”” |  |t jj|dd” d	S )
zT
        L{keys.Key.toString} serializes an RSA key in OpenSSH's v1 format.
        rµ   Śv1©ŚsubtyperĮ   ©rA  r   ó#   -----BEGIN OPENSSH PRIVATE KEY-----r   r   N)r   r&   rd   r   rW   r¹   rI   Ś
splitlines©r@   r   Śnew_key_dataŚnew_enc_key_datar   r   r   Śtest_toOpenSSHRSA_v1_formatu  ó   ’’’z$KeyTests.test_toOpenSSHRSA_v1_formatc                 C   sb   t j tj”}|  | d”tj” |  | ” jdddtj	” |  | ”  d”tj	dd ” dS )zN
        L{keys.Key.toString} serializes a DSA key in OpenSSH format.
        rµ   r9  r:  Nrż   )
r   r&   rd   r   r`   rI   r¹   rY   re   rT   r<  r   r   r   Śtest_toOpenSSHDSA  s   ž’zKeyTests.test_toOpenSSHDSAc                 C   r>  )
zS
        L{keys.Key.toString} serializes a DSA key in OpenSSH's v1 format.
        rµ   r?  r@  rĮ   rB  rC  r   r   N)r   r&   rd   r   rY   r¹   rI   rD  rE  r   r   r   Śtest_toOpenSSHDSA_v1_format  rI  z$KeyTests.test_toOpenSSHDSA_v1_formatc                 C   sN   t j tj”}|  | ” jdddtj” |  | ”  d”tjdd ” dS )zQ
        L{keys.Key.toString} serializes an ECDSA key in OpenSSH format.
        rµ   r9  r:  Nrż   )	r   r&   rd   r   r[   rI   re   r¹   rU   r<  r   r   r   Śtest_toOpenSSHECDSA§  s   ž’zKeyTests.test_toOpenSSHECDSAc                 C   r>  )
zV
        L{keys.Key.toString} serializes an ECDSA key in OpenSSH's v1 format.
        rµ   r?  r@  rĮ   rB  rC  r   r   N)r   r&   rd   r   r[   r¹   rI   rD  rE  r   r   r   Śtest_toOpenSSHECDSA_v1_format“  rI  z&KeyTests.test_toOpenSSHECDSA_v1_formatc                 C   s   t j tj”}| d”}|jddd}|  d| ” d ” |  d| ” d ” |  |t j |”” |  |t jj|dd” |  ||jddd” dS )	zX
        L{keys.Key.toString} serializes an Ed25519 key in OpenSSH's v1 format.
        rµ   rĮ   r   rC  r   r?  r@  N)r   r&   rd   r   r]   r¹   rI   rD  rE  r   r   r   Śtest_toOpenSSHEd25519Ę  s   
’’’zKeyTests.test_toOpenSSHEd25519c                 C   s&   t j tj”}| jt|jddd dS )z­
        L{keys.Key.toString} refuses to serialize an Ed25519 key in
        OpenSSH's old PEM format, as no encoding of Ed25519 is defined for
        that format.
        rµ   ŚPEMr@  N)r   r&   rd   r   r]   r   Ś
ValueErrorr¹   r<  r   r   r   Ś test_toOpenSSHEd25519_PEM_formatŚ  s   z)KeyTests.test_toOpenSSHEd25519_PEM_formatc                 C   ó>   t j tj”}|  | d”tj” |  | ”  d”tj	” dS )zK
        L{keys.Key.toString} serializes an RSA key in LSH format.
        ŚlshN)
r   r&   rd   r   rW   rI   r¹   r?   re   r^   r<  r   r   r   Śtest_toLSHRSAä  ó   zKeyTests.test_toLSHRSAc                 C   rR  )zJ
        L{keys.Key.toString} serializes a DSA key in LSH format.
        rS  N)
r   r&   rd   r   rY   rI   r¹   r`   re   r_   r<  r   r   r   Śtest_toLSHDSAģ  rU  zKeyTests.test_toLSHDSAc                 C   ó&   t j tj”}|  | d”tj” dS )zP
        L{keys.Key.toString} serializes an RSA key in Agent v3 format.
        rP   N)r   r&   rd   r   rW   rI   r¹   ra   r<  r   r   r   Śtest_toAgentv3RSAō  ó   zKeyTests.test_toAgentv3RSAc                 C   rW  )zO
        L{keys.Key.toString} serializes a DSA key in Agent v3 format.
        rP   N)r   r&   rd   r   rY   rI   r¹   rb   r<  r   r   r   Śtest_toAgentv3DSAū  rY  zKeyTests.test_toAgentv3DSAc                 C   sP   t  | j”}|jddd}|  t jj|d ” d|” | jt j|jddd dS )zd
        L{keys.Key.toString} applies Normalization Form KC to Unicode
        passphrases.
        rµ   r·   r   r¶   rø   N)	r   r&   r*   r¹   rI   rd   rŗ   r   r»   r¼   r   r   r   Ś(test_toStringNormalizesUnicodePassphrase  s   ž
üz1KeyTests.test_toStringNormalizesUnicodePassphrasec                 C   s   |   tjt | j”jd” dS )zm
        L{keys.Key.toString} raises L{keys.BadKeyError} when passed an invalid
        format type.
        rĄ   N)r   r   r   r&   r*   r¹   rE   r   r   r   Śtest_toStringErrors  s   zKeyTests.test_toStringErrorsc                 C   óH   d}t j tj”}| |”}|  | ”  ||”” |  | ||”” dS )z8
        Signed data can be verified using RSA.
        ó	   some-dataN)	r   r&   rd   r   rW   Śsignro   re   Śverify©r@   r{   r   Ś	signaturer   r   r   Śtest_signAndVerifyRSA  ó
   
zKeyTests.test_signAndVerifyRSAc                 C   r]  )z8
        Signed data can be verified using DSA.
        r^  N)	r   r&   rd   r   rY   r_  ro   re   r`  ra  r   r   r   Śtest_signAndVerifyDSA'  rd  zKeyTests.test_signAndVerifyDSAc                 C   sČ   d}t j tj”}| |”}t j tj”}| |”}t j tj”}| |”}|  | 	”  
||”” |  | 
||”” |  | 	”  
||”” |  | 
||”” |  | 	”  
||”” |  | 
||”” dS )z7
        Signed data can be verified using EC.
        r^  N)r   r&   rd   r   r[   r_  r   r   ro   re   r`  )r@   r{   r   rb  Śkey384Śsignature384Śkey521Śsignature521r   r   r   Śtest_signAndVerifyEC1  s   


zKeyTests.test_signAndVerifyECc                 C   r]  )z<
        Signed data can be verified using Ed25519.
        r^  N)	r   r&   rd   r   r]   r_  ro   re   r`  ra  r   r   r   Śtest_signAndVerifyEd25519F  s
   
z"KeyTests.test_signAndVerifyEd25519c                 C   óN   t j tj”}|  | | jd”” |  | | jd”” |  | | j	d”” dS )zC
        A known-good RSA signature verifies successfully.
        ræ   ó   aN)
r   r&   rd   r   rS   ro   r`  r8   rq   r9   r<  r   r   r   Śtest_verifyRSAQ  ó   zKeyTests.test_verifyRSAc                 C   rl  )zC
        A known-good DSA signature verifies successfully.
        ræ   rm  N)
r   r&   rd   r   rT   ro   r`  r9   rq   r8   r<  r   r   r   Śtest_verifyDSAZ  ro  zKeyTests.test_verifyDSAc                 C   s.   t j tj”}|  | | jdd d”” dS )z
        Some commercial SSH servers send DSA keys as 2 20-byte numbers;
        they are still verified as valid keys.
        iŲ’’’Nræ   )r   r&   rd   r   rT   ro   r`  r9   r<  r   r   r   Śtest_verifyDSANoPrefixc  s    zKeyTests.test_verifyDSANoPrefixc                 C   s   |   tt | j”d” dS )zn
        The repr of a L{keys.Key} contains all of the RSA components for an RSA
        private key.
        a\  <RSA Private Key (2048 bits)
attr d:
	21:4c:08:66:a2:28:d5:b4:fb:8e:0f:72:1b:85:09:
	00:b9:f2:4e:37:f0:1c:57:4b:e3:51:7f:9e:23:a7:
	e4:3a:98:55:1b:ea:8b:7a:98:1e:bc:d8:ba:b1:f9:
	89:12:18:60:ac:e8:cc:0b:4e:09:5a:40:6a:ba:2f:
	99:f8:b3:24:60:84:b9:ce:69:95:9a:f9:e2:fc:1f:
	51:4d:27:15:db:2b:27:ad:ef:b4:69:ac:be:7d:10:
	eb:86:47:70:73:b4:00:87:95:15:3b:37:f9:e7:14:
	e7:80:bb:68:1e:1b:e6:dd:bb:73:63:b9:67:e6:b2:
	27:7f:cf:cf:30:9b:c2:98:fd:d9:18:36:2f:36:2e:
	f1:3d:81:7a:9f:e1:03:2d:47:db:34:51:62:39:dd:
	4f:e9:ac:a8:8b:d9:d6:f3:84:c4:17:b9:71:9d:06:
	08:42:78:4d:bb:c5:2a:f4:c3:58:cd:55:2b:ed:be:
	33:5f:04:ea:7b:e6:04:24:63:f2:2d:d7:3d:1b:6c:
	d5:9c:63:43:2f:92:88:8d:3e:6e:da:18:37:d8:0f:
	25:67:89:1d:b9:46:34:5e:c9:ce:c4:8b:ed:92:5a:
	33:07:0f:df:86:08:f9:92:e9:db:eb:38:08:36:c9:
	cd:cd:0a:01:48:5b:39:3e:7a:ca:c6:80:a9:dc:d4:
	39
attr e:
	01:00:01
attr n:
	00:d5:6a:ac:78:23:d6:d6:1b:ec:25:a1:50:c4:77:
	63:50:84:45:01:55:42:14:2a:2a:e0:d0:60:ee:d4:
	e9:a3:ad:4a:fa:39:06:5e:84:55:75:5f:00:36:bf:
	6f:aa:2a:3f:83:26:37:c1:69:2e:5b:fd:f0:f3:d2:
	7d:d6:98:cd:3a:40:78:d5:ca:a8:18:c0:11:93:24:
	09:0c:81:4c:8f:f7:9c:ed:13:16:6a:a4:04:e9:49:
	77:c3:e4:55:64:b3:79:68:9e:2c:08:eb:ac:e8:04:
	2d:21:77:05:a7:8e:ef:53:30:0d:a5:e5:bb:3d:6a:
	e2:09:36:6f:fd:34:d3:7d:6f:46:ff:87:da:a9:29:
	27:aa:ff:ad:f5:85:e6:3e:1a:b8:7a:1d:4a:b1:ea:
	c0:5a:f7:30:df:1f:c2:a4:e4:ef:3f:91:49:96:40:
	d5:19:77:2d:37:c3:5e:ec:9d:a6:3a:44:a5:c2:a4:
	29:dd:d5:ba:9c:3d:45:b3:c6:2c:18:64:d5:ba:3d:
	df:ab:7f:cd:42:ac:a7:f1:18:0b:a0:58:15:62:0b:
	a4:2a:6e:43:c3:e4:04:9f:35:a3:47:8e:46:ed:33:
	a5:65:bd:bc:3b:29:6e:02:0b:57:df:74:e8:13:b4:
	37:35:7e:83:5f:20:26:60:a6:dc:ad:8b:c6:6c:79:
	98:f7
attr p:
	00:d9:70:06:d8:e2:bc:d4:78:91:50:94:d4:c1:1b:
	89:38:6c:46:64:5a:51:a0:9a:07:3d:48:8f:03:51:
	cc:6b:12:8e:7d:1a:b1:65:e7:71:75:39:e0:32:05:
	75:8d:18:4c:af:93:b1:49:b1:66:5f:78:62:7a:d1:
	0c:ca:e6:4d:43:b3:9c:f4:6b:7d:e6:0c:98:dc:cf:
	21:62:8e:d5:2e:12:de:04:ae:d7:24:6e:83:31:a2:
	15:a2:44:3d:22:a9:62:26:22:b9:b2:ed:54:0a:9d:
	08:83:a7:07:0d:ff:19:18:8e:d8:ab:1d:da:48:9c:
	31:68:11:a1:66:6d:e3:d8:1d
attr q:
	00:fb:44:17:8b:a4:36:be:1e:37:1d:a7:f6:61:6c:
	04:c4:aa:dd:78:3e:07:8c:1e:33:02:ae:03:14:87:
	83:7a:e5:9e:7d:08:67:a8:f2:aa:bf:12:70:cf:72:
	a9:a7:c7:0b:1d:88:d5:20:fd:9c:63:ca:47:30:55:
	4e:8b:c4:cf:f4:7f:16:a4:92:12:74:a1:09:c2:c4:
	6e:9c:8c:33:ef:a5:e5:f7:e0:2b:ad:4f:5c:11:aa:
	1a:84:37:5b:fd:7a:ea:c3:cd:7c:b0:c8:e4:1f:54:
	63:b5:c7:af:df:f4:09:a7:fc:c7:25:fc:5c:e9:91:
	d7:92:c5:98:1e:56:d3:b1:23
attr u:
	00:85:4b:1b:7a:9b:12:10:37:9e:1f:ad:5e:da:fe:
	c6:96:fe:df:35:6b:b9:34:e2:16:97:92:26:09:bd:
	bd:70:20:03:a7:35:bd:2d:1b:a0:d2:07:47:2b:d4:
	de:a8:a8:07:07:1b:b8:04:20:a7:27:41:3c:6c:39:
	39:e9:41:ce:e7:17:1d:d1:4c:5c:bc:3d:d2:26:26:
	fe:6a:d6:fd:48:72:ae:46:fa:7b:c3:d3:19:60:44:
	1d:a5:13:a7:80:f5:63:29:d4:7a:5d:06:07:16:5d:
	f6:8b:3d:cb:64:3a:e2:84:5a:4d:8c:06:2d:2d:9d:
	1c:eb:83:4c:78:3d:79:54:ce>N)rI   Śreprr   r&   r*   rE   r   r   r   Śtest_reprPrivateRSAk  s   žzKeyTests.test_reprPrivateRSAc                 C   s    |   tt | j” ” d” dS )zm
        The repr of a L{keys.Key} contains all of the RSA components for an RSA
        public key.
        a\  <RSA Public Key (2048 bits)
attr e:
	01:00:01
attr n:
	00:d5:6a:ac:78:23:d6:d6:1b:ec:25:a1:50:c4:77:
	63:50:84:45:01:55:42:14:2a:2a:e0:d0:60:ee:d4:
	e9:a3:ad:4a:fa:39:06:5e:84:55:75:5f:00:36:bf:
	6f:aa:2a:3f:83:26:37:c1:69:2e:5b:fd:f0:f3:d2:
	7d:d6:98:cd:3a:40:78:d5:ca:a8:18:c0:11:93:24:
	09:0c:81:4c:8f:f7:9c:ed:13:16:6a:a4:04:e9:49:
	77:c3:e4:55:64:b3:79:68:9e:2c:08:eb:ac:e8:04:
	2d:21:77:05:a7:8e:ef:53:30:0d:a5:e5:bb:3d:6a:
	e2:09:36:6f:fd:34:d3:7d:6f:46:ff:87:da:a9:29:
	27:aa:ff:ad:f5:85:e6:3e:1a:b8:7a:1d:4a:b1:ea:
	c0:5a:f7:30:df:1f:c2:a4:e4:ef:3f:91:49:96:40:
	d5:19:77:2d:37:c3:5e:ec:9d:a6:3a:44:a5:c2:a4:
	29:dd:d5:ba:9c:3d:45:b3:c6:2c:18:64:d5:ba:3d:
	df:ab:7f:cd:42:ac:a7:f1:18:0b:a0:58:15:62:0b:
	a4:2a:6e:43:c3:e4:04:9f:35:a3:47:8e:46:ed:33:
	a5:65:bd:bc:3b:29:6e:02:0b:57:df:74:e8:13:b4:
	37:35:7e:83:5f:20:26:60:a6:dc:ad:8b:c6:6c:79:
	98:f7>N)rI   rr  r   r&   r*   re   rE   r   r   r   Śtest_reprPublicRSA»  s   žzKeyTests.test_reprPublicRSAc                 C   s2   |   tt | j” ” tdjdi tj	¤” dS )zl
        The repr of a L{keys.Key} contains all the OpenSSH format for an ECDSA
        public key.
        zÓ                <Elliptic Curve Public Key (256 bits)
                curve:
                	ecdsa-sha2-nistp256
                x:
                	{x}
                y:
                	{y}>
                Nr   )
rI   rr  r   r&   r0   re   r   Śformatr   r/   rE   r   r   r   Śtest_reprPublicECDSAŚ  s   ’
ö
öžzKeyTests.test_reprPublicECDSAc                 C   s.   |   tt | j”tdjdi tj¤” dS )zm
        The repr of a L{keys.Key} contains all the OpenSSH format for an ECDSA
        private key.
        a                  <Elliptic Curve Private Key (256 bits)
                curve:
                	ecdsa-sha2-nistp256
                privateValue:
                	{privateValue}
                x:
                	{x}
                y:
                	{y}>
                Nr   )	rI   rr  r   r&   r0   r   ru  r   r/   rE   r   r   r   Śtest_reprPrivateECDSAī  s   ’ōōžzKeyTests.test_reprPrivateECDSAc                 C   s$   |   tt | j” ” td” dS )zn
        The repr of a L{keys.Key} contains all the OpenSSH format for an
        Ed25519 public key.
        zÜ                <Ed25519 Public Key (256 bits)
                attr a:
                	f1:16:d1:15:4a:1e:15:0e:19:5e:19:46:b5:f2:44:
                	0d:b2:52:a0:ae:2a:6b:23:13:73:45:fd:40:d9:57:
                	7b:8b>N)rI   rr  r   r&   r7   re   r   rE   r   r   r   Śtest_reprPublicEd25519  s   ’žzKeyTests.test_reprPublicEd25519c                 C   s    |   tt | j”td” dS )zo
        The repr of a L{keys.Key} contains all the OpenSSH format for an
        Ed25519 private key.
        a                  <Ed25519 Private Key (256 bits)
                attr a:
                	f1:16:d1:15:4a:1e:15:0e:19:5e:19:46:b5:f2:44:
                	0d:b2:52:a0:ae:2a:6b:23:13:73:45:fd:40:d9:57:
                	7b:8b
                attr k:
                	37:2f:25:da:8d:d4:a8:9a:78:7c:61:f0:98:01:c6:
                	f4:5e:6d:67:05:69:31:37:4c:69:0d:05:55:bb:c9:
                	44:58>N)rI   rr  r   r&   r7   r   rE   r   r   r   Śtest_reprPrivateEd25519  s   ’žz KeyTests.test_reprPrivateEd25519)WŚ__name__Ś
__module__Ś__qualname__r   ŚskipCryptographyr   r	   rA   rF   rK   rc   rn   rv   r|   rw   rx   r   r   r   r   r”   r£   r®   rÆ   r±   r³   r“   r¾   rĆ   rĘ   rĖ   rŅ   rŌ   rÖ   rŚ   rŽ   rį   rę   rė   rń   rö   rł   r  r   r  r	  r  r  r  r  r  r"  r'  r*  r,  r/  r0  r2  r7  r8  r=  rH  rJ  rK  rL  rM  rN  rQ  rT  rV  rX  rZ  r[  r\  rc  re  rj  rk  rn  rp  rq  rs  rt  rv  rw  rx  ry  r   r   r   r   r   *   s¼    ?C) *	
	

	


	



		P
r   c                   @   s4   e Zd ZdZedu reZdd Zdd Zdd Z	dS )	ŚPersistentRSAKeyTestsz1
    Tests for L{keys._getPersistentRSAKey}.
    Nc                 C   sF   t |  ” }| d”}tj|dd}|  | ” d” |  | ” ” dS )z
        L{keys._getPersistentRSAKey} will put the key in
        C{directory}/C{filename}, with the key length of C{keySize}.
        ś	mykey.pemé   ©ŚkeySizeN)	r   r;   Śchildr   Ś_getPersistentRSAKeyrI   rJ   ro   Śexists©r@   ŚtempDirr<   r   r   r   r   Śtest_providedArguments5  s
   
z,PersistentRSAKeyTests.test_providedArgumentsc                 C   s|   t |  ” }| d”}tj|dd}|  | ” d” |  | ” ” | 	” }tj|dd}|  | ” d” |  | 	” |” dS )zm
        L{keys._getPersistentRSAKey} will not regenerate the key if the key
        already exists.
        r  r  r  rG   N)
r   r;   r  r   r  rI   rJ   ro   r  Ś
getContent)r@   r  r<   r   Ś
keyContentr   r   r   Śtest_noRegenerationA  s   
z)PersistentRSAKeyTests.test_noRegenerationc                 C   s>   t |  ” }| d”}tj|dd}d|_|  | ” d” dS )z
        If the key generated by L{keys.getPersistentRSAKey} is set to None
        the key size should then become 0.
        r  r  r  Nr   )r   r;   r  r   r  r)   rI   rJ   r  r   r   r   Śtest_keySizeZeroT  s
   
z&PersistentRSAKeyTests.test_keySizeZero)
rz  r{  r|  Ś__doc__r   r}  r   r  r  r  r   r   r   r   r~  -  s    r~  )r  rŖ   rC   Śtextwrapr   Śtwisted.conch.testr   Śtwisted.pythonr   Śtwisted.python.filepathr   Śtwisted.python.reflectr   Śtwisted.trialr   r   r}  r	   Ścryptography.hazmat.backendsr
   Śtwisted.conch.sshr   r   r   Śed25519_supportedr   r   ŚTestCaser   r~  r   r   r   r   Ś<module>   sB               