//usr/lib64/python3.9/site-packages/cryptography/hazmat/backends/openssl
21 items
NAME ↑ SIZE MODIFIED PERMS ACTIONS
.. / Parent Directory
__pycache__ — dir
2026-06-04 04:18 · rwxr-xr-x
— 2026-06-04 04:18 rwxr-xr-x
__init__.py — 271 B
2021-12-14 21:49 · rw-r--r--
271 B 2021-12-14 21:49 rw-r--r--
aead.py — 6.1 KB
2021-12-14 21:49 · rw-r--r--
6.1 KB 2021-12-14 21:49 rw-r--r--
backend.py — 86.21 KB
2025-09-18 08:50 · rw-r--r--
86.21 KB 2025-09-18 08:50 rw-r--r--
ciphers.py — 10.15 KB
2025-09-18 08:50 · rw-r--r--
10.15 KB 2025-09-18 08:50 rw-r--r--
cmac.py — 2.78 KB
2021-12-14 21:49 · rw-r--r--
2.78 KB 2021-12-14 21:49 rw-r--r--
decode_asn1.py — 1.09 KB
2021-12-14 21:49 · rw-r--r--
1.09 KB 2021-12-14 21:49 rw-r--r--
dh.py — 10.95 KB
2021-12-14 21:49 · rw-r--r--
10.95 KB 2021-12-14 21:49 rw-r--r--
dsa.py — 10.46 KB
2021-12-14 21:49 · rw-r--r--
10.46 KB 2021-12-14 21:49 rw-r--r--
ec.py — 12.54 KB
2021-12-14 21:49 · rw-r--r--
12.54 KB 2021-12-14 21:49 rw-r--r--
ed25519.py — 5.65 KB
2021-12-14 21:49 · rw-r--r--
5.65 KB 2021-12-14 21:49 rw-r--r--
ed448.py — 5.61 KB
2021-12-14 21:49 · rw-r--r--
5.61 KB 2021-12-14 21:49 rw-r--r--
encode_asn1.py — 570 B
2021-12-14 21:49 · rw-r--r--
570 B 2021-12-14 21:49 rw-r--r--
hashes.py — 3.03 KB
2021-12-14 21:49 · rw-r--r--
3.03 KB 2021-12-14 21:49 rw-r--r--
hmac.py — 2.87 KB
2021-12-14 21:49 · rw-r--r--
2.87 KB 2021-12-14 21:49 rw-r--r--
poly1305.py — 2.29 KB
2021-12-14 21:49 · rw-r--r--
2.29 KB 2021-12-14 21:49 rw-r--r--
rsa.py — 20.95 KB
2025-09-18 08:50 · rw-r--r--
20.95 KB 2025-09-18 08:50 rw-r--r--
utils.py — 2.39 KB
2021-12-14 21:49 · rw-r--r--
2.39 KB 2021-12-14 21:49 rw-r--r--
x25519.py — 4.51 KB
2021-12-14 21:49 · rw-r--r--
4.51 KB 2021-12-14 21:49 rw-r--r--
x448.py — 4.04 KB
2021-12-14 21:49 · rw-r--r--
4.04 KB 2021-12-14 21:49 rw-r--r--
x509.py — 1.42 KB
2021-12-14 21:49 · rw-r--r--
1.42 KB 2021-12-14 21:49 rw-r--r--
ONLINE
openssl
21 items
22:55:55
TERMINAL FM
NAVIGATION
ACTIONS
SELECTION
Edit
Preview
Download
Rename
Copy
Chmod
Delete
# This file is dual licensed under the terms of the Apache License, Version # 2.0, and the BSD License. See the LICENSE file in the root of this repository # for complete details. from cryptography.exceptions import InvalidTag _ENCRYPT = 1 _DECRYPT = 0 def _aead_cipher_name(cipher): from cryptography.hazmat.primitives.ciphers.aead import ( AESCCM, AESGCM, AESOCB3, ChaCha20Poly1305, ) if isinstance(cipher, ChaCha20Poly1305): return b"chacha20-poly1305" elif isinstance(cipher, AESCCM): return "aes-{}-ccm".format(len(cipher._key) * 8).encode("ascii") elif isinstance(cipher, AESOCB3): return "aes-{}-ocb".format(len(cipher._key) * 8).encode("ascii") else: assert isinstance(cipher, AESGCM) return "aes-{}-gcm".format(len(cipher._key) * 8).encode("ascii") def _aead_setup(backend, cipher_name, key, nonce, tag, tag_len, operation): evp_cipher = backend._lib.EVP_get_cipherbyname(cipher_name) backend.openssl_assert(evp_cipher != backend._ffi.NULL) ctx = backend._lib.EVP_CIPHER_CTX_new() ctx = backend._ffi.gc(ctx, backend._lib.EVP_CIPHER_CTX_free) res = backend._lib.EVP_CipherInit_ex( ctx, evp_cipher, backend._ffi.NULL, backend._ffi.NULL, backend._ffi.NULL, int(operation == _ENCRYPT), ) backend.openssl_assert(res != 0) res = backend._lib.EVP_CIPHER_CTX_set_key_length(ctx, len(key)) backend.openssl_assert(res != 0) res = backend._lib.EVP_CIPHER_CTX_ctrl( ctx, backend._lib.EVP_CTRL_AEAD_SET_IVLEN, len(nonce), backend._ffi.NULL, ) backend.openssl_assert(res != 0) if operation == _DECRYPT: res = backend._lib.EVP_CIPHER_CTX_ctrl( ctx, backend._lib.EVP_CTRL_AEAD_SET_TAG, len(tag), tag ) backend.openssl_assert(res != 0) elif cipher_name.endswith(b"-ccm"): res = backend._lib.EVP_CIPHER_CTX_ctrl( ctx, backend._lib.EVP_CTRL_AEAD_SET_TAG, tag_len, backend._ffi.NULL ) backend.openssl_assert(res != 0) nonce_ptr = backend._ffi.from_buffer(nonce) key_ptr = backend._ffi.from_buffer(key) res = backend._lib.EVP_CipherInit_ex( ctx, backend._ffi.NULL, backend._ffi.NULL, key_ptr, nonce_ptr, int(operation == _ENCRYPT), ) backend.openssl_assert(res != 0) return ctx def _set_length(backend, ctx, data_len): intptr = backend._ffi.new("int *") res = backend._lib.EVP_CipherUpdate( ctx, backend._ffi.NULL, intptr, backend._ffi.NULL, data_len ) backend.openssl_assert(res != 0) def _process_aad(backend, ctx, associated_data): outlen = backend._ffi.new("int *") res = backend._lib.EVP_CipherUpdate( ctx, backend._ffi.NULL, outlen, associated_data, len(associated_data) ) backend.openssl_assert(res != 0) def _process_data(backend, ctx, data): outlen = backend._ffi.new("int *") buf = backend._ffi.new("unsigned char[]", len(data)) res = backend._lib.EVP_CipherUpdate(ctx, buf, outlen, data, len(data)) backend.openssl_assert(res != 0) return backend._ffi.buffer(buf, outlen[0])[:] def _encrypt(backend, cipher, nonce, data, associated_data, tag_length): from cryptography.hazmat.primitives.ciphers.aead import AESCCM cipher_name = _aead_cipher_name(cipher) ctx = _aead_setup( backend, cipher_name, cipher._key, nonce, None, tag_length, _ENCRYPT ) # CCM requires us to pass the length of the data before processing anything # However calling this with any other AEAD results in an error if isinstance(cipher, AESCCM): _set_length(backend, ctx, len(data)) _process_aad(backend, ctx, associated_data) processed_data = _process_data(backend, ctx, data) outlen = backend._ffi.new("int *") # All AEADs we support besides OCB are streaming so they return nothing # in finalization. OCB can return up to (16 byte block - 1) bytes so # we need a buffer here too. buf = backend._ffi.new("unsigned char[]", 16) res = backend._lib.EVP_CipherFinal_ex(ctx, buf, outlen) backend.openssl_assert(res != 0) processed_data += backend._ffi.buffer(buf, outlen[0])[:] tag_buf = backend._ffi.new("unsigned char[]", tag_length) res = backend._lib.EVP_CIPHER_CTX_ctrl( ctx, backend._lib.EVP_CTRL_AEAD_GET_TAG, tag_length, tag_buf ) backend.openssl_assert(res != 0) tag = backend._ffi.buffer(tag_buf)[:] return processed_data + tag def _decrypt(backend, cipher, nonce, data, associated_data, tag_length): from cryptography.hazmat.primitives.ciphers.aead import AESCCM if len(data) < tag_length: raise InvalidTag tag = data[-tag_length:] data = data[:-tag_length] cipher_name = _aead_cipher_name(cipher) ctx = _aead_setup( backend, cipher_name, cipher._key, nonce, tag, tag_length, _DECRYPT ) # CCM requires us to pass the length of the data before processing anything # However calling this with any other AEAD results in an error if isinstance(cipher, AESCCM): _set_length(backend, ctx, len(data)) _process_aad(backend, ctx, associated_data) # CCM has a different error path if the tag doesn't match. Errors are # raised in Update and Final is irrelevant. if isinstance(cipher, AESCCM): outlen = backend._ffi.new("int *") buf = backend._ffi.new("unsigned char[]", len(data)) res = backend._lib.EVP_CipherUpdate(ctx, buf, outlen, data, len(data)) if res != 1: backend._consume_errors() raise InvalidTag processed_data = backend._ffi.buffer(buf, outlen[0])[:] else: processed_data = _process_data(backend, ctx, data) outlen = backend._ffi.new("int *") # OCB can return up to 15 bytes (16 byte block - 1) in finalization buf = backend._ffi.new("unsigned char[]", 16) res = backend._lib.EVP_CipherFinal_ex(ctx, buf, outlen) processed_data += backend._ffi.buffer(buf, outlen[0])[:] if res == 0: backend._consume_errors() raise InvalidTag return processed_data