o 6 h, @sddlmZmZddlZzddlmZWn ey!gdZYnwddeDZddlmZddlZddl Z ddl m Z ddl mZmZmZmZmZd d lmZd d lmZd d lmZmZd d lmZmZd dlmZmZmZd dlmZm Z m!Z!m"Z"m#Z#m$Z$d dl%m&Z&dZ' ddeDZ( de j)vreegZgZ* e+edddD]/Z,dde+e(dddDD]Z-ej.e,eej/e-dZ0e*1d2e,e-e0j3e0j4e'edfqqej56ddde*DddZ7e j8d d!Z9iZ:e j;d"kr dd#l med?ee*de#ededee*de#ed ed d@ee*de#ed gdAdBdCZNdDde*DZO eOdEde*D7ZOedHieAee9eOdFdGZPdS)I)with_statementdivisionN)algorithms_available)md5sha1sha224sha256sha384sha512cCsg|]}|dvr|qS))mdc2md2md4 whirlpool ripemd160).0irrm/var/www/html/construction_image-detection-poc/venv/lib/python3.10/site-packages/ecdsa/test_malformed_sigs.py s r)partial)noteassumegivensettingsexample) SigningKey)BadSignatureError) sigencode_dersigencode_string) sigdecode_dersigdecode_string)curves SECP112r2 SECP128r1)encode_integerencode_bitstringencode_octet_string encode_oidencode_sequenceencode_constructed) CurveEdTwssome data to signcCsg|] }|t|jfqSr)hashlibnew digest_size)rnamerrrr2sz--fastcCs|jSN)baselenxrrrCsr4)keycCs.g|]\}}d|krtjkrnn|qS)r)curver1)rr/sizerrrrDs cCs|dS)Nrrr2rrrr4F)hashfuncz{0} {1}) sigencodezverifying_key,signaturecCs"g|] \}}}tj|||dqS))id)pytestparam)rr/vksigrrrrYs"cCs|j|ttds JdSN sigdecode)verify example_datar ) verifying_key signaturerrrtest_signaturesWsrGc CsZ|t|\}}}td|t|}|tjtjdt|dddd}|t |D]}||=q/td|d}|rn|t tjdt|ddtjdd d}| D] \}} ||| N<qZtd ||tjdt|d} |tj d d } |d| | || d}td | | t |}t|p|p| t||k||fS)z Hypothesis strategy that generates pairs of VerifyingKey and malformed signatures created by fuzzing of a valid signature. Configuration: {0}rr min_value max_valueT)uniquezRemove bytes: {0}Nz xors: {0}max_sizez%Inserted at position {0} bytes: {1!r})st sampled_fromrformat bytearraylistsintegerslensortreversed dictionariesitemsbinarybytesr) draw keys_and_sigsr/rEold_sigr? to_removerxorsval insert_pos insert_datarrr st_fuzzed_sigas>    rf)) HealthCheckideadlinesuppress_health_check max_examples cCH|\}}tt|j|ttdWddS1swYdSr@r<raisesrrCrDr )argsrEr?rrrtest_fuzzed_der_signatures "rscCs|tt\}}}td|t|jj}|tjd|d>dtj|d?|ddB}|tjd|d>dtj|d?|ddB}t t |t |}||fS)z Hypothesis strategy for selecting random values and encoding them to ECDSA-Sig-Value object:: ECDSA-Sig-Value ::= SEQUENCE { r INTEGER, s INTEGER } rHrrIrgr) rQrRr_rrSintr6orderrVr)r%)r^r/rE_rwrsr?rrrst_random_der_ecdsa_sig_values  r{cCsH|\}}tt|j|ttdWddS1swYdS)zd Check if random values encoded in ECDSA-Sig-Value structure are rejected as signature. rANrpparamsrEr?rrrtest_random_der_ecdsa_sig_values "r~cOs(d|vrd|d<tttj|i|S)z Hypothesis strategy that returns a random positive integer as DER INTEGER. Parameters are passed to hypothesis.strategy.integer. rJr)rQbuildsr%rVrrkwargsrrrst_der_integersrcOs`|tj|i|}|r)|tjddd}t|}|dd| M<t|}nd}t||S)z| Hypothesis strategy that returns a random DER BIT STRING. Parameters are passed to hypothesis.strategy.binary. rrhrIrg)rQr\rVrTr]r&)r^rrrdataunusedrrrst_der_bit_strings  rcOstttj|i|S)z Hypothesis strategy that returns a random DER OCTET STRING object. Parameters are passed to hypothesis.strategy.binary )rQrr'r\rrrrst_der_octet_stringsrcCs tdS)z; Hypothesis strategy that returns DER NULL object. s)rQjustrrrr st_der_nulls rcCsv|tjddd}|dkr|tjddd}n |tjdddd}|tjtjdddddd}t||g|RS)zI Hypothesis strategy that returns DER OBJECT IDENTIFIER objects. rrgrI'i2rO)rQrVrUr()r^firstsecondrestrrr st_der_oidsrcCsHtjtdtdddBtddBtddBtBtBddd d S) z Hypothesis strategy that returns random DER structures. A valid DER structure is any primitive object, an octet encoding of a valid DER structure, sequence of valid DER objects or a constructed encoding of any of the above. rgi)rKrOcSs`ttt|tddt|Btddtj|ddBtttjdddt|BS) NcSs t|dS)Nr)r&r2rrrr4.s z*st_der....cSst|Sr0)r)r2rrrr40r8rOr?rI)rQrr'one_ofrUr*rV)childrenrrrr4-s zst_der..() max_leaves)rQ recursiverrrrrrrrrrst_ders  rcCJ|\}}}tt|j|ttdWddS1swYdS)z8Check if random DER structures are rejected as signaturerANrpr}derr/rErxrrrtest_random_der_as_signature;s  "rrrOcCr)z/Check if random bytes are rejected as signaturerANrprrrrtest_random_bytes_as_signatureEs "rcCsBg|]\}}}t|jjts||tt||jjd|jjifqS)rw) isinstancer6r+rr rwrr/rEr?rrrrWs  cCs*g|]\}}}t|jjtr|||fqSr)rr6r+rrrrris cCror@)r<rqrrCrDr!r|rrrtest_fuzzed_string_signaturestrtrr)Q __future__rrr,r ImportError functoolsrr<syshypothesis.strategies strategiesrQ hypothesisrrrrrkeysrrutilrrr r!r"r#r$rr%r&r'r(r)r* ellipticcurver+rD hash_and_sizeargvr_sortedr6hash_alggenerater-skappendrSrEsignmark parametrizerG compositerfr} version_inforidata_too_largefilter_too_muchtoo_slowdict slow_paramsrsr{r~rrrrrrrRrr\rkeys_and_string_sigsrrrrrs                 3          !