/usr/lib/python2.7/dist-packages/libnacl/public.py is in python-libnacl 1.5.0-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 | # -*- coding: utf-8 -*-
'''
High level classes and routines around public key encryption and decryption
'''
# import libnacl libs
import libnacl
import libnacl.utils
import libnacl.encode
import libnacl.dual
import libnacl.base
class PublicKey(libnacl.base.BaseKey):
'''
This class is used to manage public keys
'''
def __init__(self, pk):
self.pk = pk
class SecretKey(libnacl.base.BaseKey):
'''
This class is used to manage keypairs
'''
def __init__(self, sk=None):
'''
If a secret key is not passed in then it will be generated
'''
if sk is None:
self.pk, self.sk = libnacl.crypto_box_keypair()
elif len(sk) == libnacl.crypto_box_SECRETKEYBYTES:
self.sk = sk
self.pk = libnacl.crypto_scalarmult_base(sk)
else:
raise ValueError('Passed in invalid secret key')
class Box(object):
'''
TheBox class is used to create cryptographic boxes and unpack
cryptographic boxes
'''
def __init__(self, sk, pk):
if isinstance(sk, (SecretKey, libnacl.dual.DualSecret)):
sk = sk.sk
if isinstance(pk, (SecretKey, libnacl.dual.DualSecret)):
raise ValueError('Passed in secret key as public key')
if isinstance(pk, PublicKey):
pk = pk.pk
if pk and sk:
self._k = libnacl.crypto_box_beforenm(pk, sk)
def encrypt(self, msg, nonce=None, pack_nonce=True):
'''
Encrypt the given message with the given nonce, if the nonce is not
provided it will be generated from the libnacl.utils.rand_nonce
function
'''
if nonce is None:
nonce = libnacl.utils.rand_nonce()
elif len(nonce) != libnacl.crypto_box_NONCEBYTES:
raise ValueError('Invalid nonce size')
ctxt = libnacl.crypto_box_afternm(msg, nonce, self._k)
if pack_nonce:
return nonce + ctxt
else:
return nonce, ctxt
def decrypt(self, ctxt, nonce=None):
'''
Decrypt the given message, if a nonce is passed in attempt to decrypt
it with the given nonce, otherwise assum that the nonce is attached
to the message
'''
if nonce is None:
nonce = ctxt[:libnacl.crypto_box_NONCEBYTES]
ctxt = ctxt[libnacl.crypto_box_NONCEBYTES:]
elif len(nonce) != libnacl.crypto_box_NONCEBYTES:
raise ValueError('Invalid nonce')
msg = libnacl.crypto_box_open_afternm(ctxt, nonce, self._k)
return msg
|