<[j#`ddlmZddlZddlmZddlmZmZddlm Z ddl m Z ddl m Z dd lmZdd lmZmZmZmZeGd d eZGd deZedGddeZedGddeZGddZdS)) annotationsN) dataclass)IntEnumunique)FidoU2FAttestation)ES256) CtapDevice)CTAPHID) ByteBuffer bytes2intwebsafe_decodewebsafe_encodeceZdZdZdZdZdZdS)APDUzAPDU response codes.iiiijN)__name__ __module__ __qualname____doc__OKUSE_NOT_SATISFIED WRONG_DATAS/home/thesage/.hermes/hermes-agent/venv/lib/python3.11/site-packages/fido2/ctap1.pyrr)s$ BJJJrrc"eZdZdZd d dZdZd S) ApduErrorzAn Exception thrown when a response APDU doesn't have an OK (0x9000) status. :param code: APDU response code. :param data: APDU response body. rcodeintdatabytesc"||_||_dSN)rr )selfrr s r__init__zApduError.__init__;s  rcFd|jddt|jddS)NzAPDU error: 0x04X dz bytes of data)rlenr r$s r__repr__zApduError.__repr__?s+P PPPDIPPPPPrN)r)rrr r!)rrrrr%r,rrrrr2sKQQQQQrrF)initceZdZUdZded<ded<ded<ded<dfd Zedd ZddZe ddZ xZ S)RegistrationDataawBinary response data for a CTAP1 registration. :param _: The binary contents of the response data. :ivar public_key: Binary representation of the credential public key. :ivar key_handle: Binary key handle of the credential. :ivar certificate: Attestation certificate of the authenticator, DER encoded. :ivar signature: Attestation signature. r! public_key key_handle certificate signature_cRtt|}|ddkrt d|d|_||d|_|d}|d}|dkr.|dz }||}||z }t|}|||z|_ ||_ dS)NBzReserved byte != 0x05Ar) superr%r unpack ValueErrorreadr0r1r r2r3)r$r4readercert_bufcert_lenn_bytes len_bytes __class__s rr%zRegistrationData.__init__Ts D!! ==   % %455 5 ++b// ++fmmC&8&899;;q>>A; d??oG G,,I  !H ++H#fkk(&;&;;rreturnstrc t|S)z6Websafe base64 encoded string of the RegistrationData.rr+s rb64zRegistrationData.b64hd###r app_param client_paramNonec`tj|||j|j|j|jdS)zVerify the included signature with regard to the given app and client params. :param app_param: SHA256 hash of the app ID used for the request. :param client_param: SHA256 hash of the ClientData used for the request. N)rverify_signaturer1r0r2r3)r$rKrLs rverifyzRegistrationData.verifyms> +   O O   N      rr c2|t|S)zParse a RegistrationData from a websafe base64 encoded string. :param data: Websafe base64 encoded string. :return: The decoded and parsed RegistrationData. rclsr s rfrom_b64zRegistrationData.from_b64}s>$''(((rr4r!rErF)rKr!rLr!rErM)r rFrEr/ rrrr__annotations__r%propertyrIrP classmethodrU __classcell__rDs@rr/r/Cs''''''($$$X$    )))[)))))rr/c|eZdZUdZded<ded<ded<dfd Zedd ZddZe ddZ xZ S) SignatureDatazBinary response data for a CTAP1 authentication. :param _: The binary contents of the response data. :ivar user_presence: User presence byte. :ivar counter: Signature counter. :ivar signature: Cryptographic signature. r user_presencecounterr!r3r4ctt|}|d|_|d|_||_dS)Nr6z>I)r;r%r r<rarbr>r3)r$r4r?rDs rr%zSignatureData.__init__s` D!!#]]3//}}T** rrErFc t|S)z8str: Websafe base64 encoded string of the SignatureData.rHr+s rrIzSignatureData.b64rJrrKrLr0rMc||ddz|z}tj|||jdS)aeVerify the included signature with regard to the given app and client params, using the given public key. :param app_param: SHA256 hash of the app ID used for the request. :param client_param: SHA256 hash of the ClientData used for the request. :param public_key: Binary representation of the credential public key. Nr7)r from_ctap1rPr3)r$rKrLr0ms rrPzSignatureData.verifysD RaR < / $$++At~>>>>>rr c2|t|S)zParse a SignatureData from a websafe base64 encoded string. :param data: Websafe base64 encoded string. :return: The decoded and parsed SignatureData. rRrSs rrUzSignatureData.from_b64rVrrWrX)rKr!rLr!r0r!rErM)r rFrEr`rYr^s@rr`r`sLLL''''''$$$X$ ? ? ? ?)))[)))))rr`cneZdZdZeGddeZddZ d d!dZd"dZ d#dZ d$d%dZ dS)&Ctap1zlImplementation of the CTAP1 specification. :param device: A CtapHidDevice handle supporting CTAP1. ceZdZdZdZdZdS) Ctap1.INSrr9N)rrrREGISTER AUTHENTICATEVERSIONrrrINSrls rrqdevicer c||_dSr#)rr)r$rrs rr%zCtap1.__init__s  rrrclarinsp1p2r r!rEc Dtjd||||dt||zdz}|jt j|}tjd|ddd}|dd}|tj krt|||S)a\Packs and sends an APDU for use in CTAP1 commands. This is a low-level method mainly used internally. Avoid calling it directly if possible, and use the get_version, register, and authenticate methods if possible instead. :param cla: The CLA parameter of the request. :param ins: The INS parameter of the request. :param p1: The P1 parameter of the request. :param p2: The P2 parameter of the request. :param data: The body of the request. :return: The response APDU data of a successful request. :raise: ApduError z>BBBBBHrsz>HN) structpackr*rrcallr MSGr<rrr) r$rtrurvrwr apduresponsestatuss r send_apduzCtap1.send_apdus {9c3B3t99EELwV;##GK66tXbcc]33A6} TW  FD)) ) rrFcp|tjjS)zGet the U2F version implemented by the authenticator. The only version specified is "U2F_V2". :return: A U2F version string. )ru)rrjrqrpdecoder+s r get_versionzCtap1.get_versions) ~~%)"3~44;;===rrLrKr/cv||z}|tjj|}t |S)aRegister a new U2F credential. :param client_param: SHA256 hash of the ClientData used for the request. :param app_param: SHA256 hash of the app ID used for the request. :return: The registration response from the authenticator. )rur )rrjrqrnr/)r$rLrKr rs rregisterzCtap1.registers6i'>>ei&8t>DD)))rFr1 check_onlyboolr`c||ztjdt|z|z}|rdnd}|tjj||}t|S)aAuthenticate a previously registered credential. :param client_param: SHA256 hash of the ClientData used for the request. :param app_param: SHA256 hash of the app ID used for the request. :param key_handle: The binary key handle of the credential. :param check_only: True to send a "check-only" request, which is used to determine if a key handle is known. :return: The authentication response from the authenticator. z>Brm)rurvr )rzr{r*rrjrqror`)r$rLrKr1rr rvrs r authenticatezCtap1.authenticatesg" 9 $v{4Z'I'I IJ V  )TTT>>ei&<$>OOX&&&rN)rrr )rrrrr) rtrrurrvrrwrr r!rEr!rX)rLr!rKr!rEr/)F) rLr!rKr!r1r!rrrEr`) rrrrrrrqr%rrrrrrrrjrjs  g V SV2>>>> * * * * ! '''''''rrj) __future__rrz dataclassesrenumrr attestationrcoser ctapr hidr utilsr r rrr Exceptionrr!r/r`rjrrrrs8#""""" !!!!!! ++++++HHHHHHHHHHHH7QQQQQ QQQ" @)@)@)@)@)u@)@)@)F ,),),),),)E,),),)^P'P'P'P'P'P'P'P'P'P'r