<[j ddlmZddlZddlmZddlmZddlmZddl m Z ddl m Z m Z d d lmZmZmZmZmZGd d eZdS) ) annotationsN)x509)default_backend)bytes_eq)CoseKey)sha256websafe_decode) AttestationAttestationResultAttestationType InvalidDatacatch_builtinsc2eZdZdZdd dZedZdS) AndroidSafetynetAttestationzandroid-safetynetF allow_rootedboolc||_dSN)r)selfrs a/home/thesage/.hermes/hermes-agent/venv/lib/python3.11/site-packages/fido2/attestation/android.py__init__z$AndroidSafetynetAttestation.__init__2s(c|d}d|dD\}}}tj|d}|js|ddurt dt ||z} t| t|dst d tj|d}d |d D} tj | d t} | j tjj} | d jd krt dt#j|d| |ddd |t/t0j| S)Nresponsec34K|]}t|VdSrr .0xs r z5AndroidSafetynetAttestation.verify..8s*KKaq 1 1KKKKKKr.utf8ctsProfileMatchTzctsProfileMatch must be true!noncezNonce does not match!c,g|]}t|Srrs r z6AndroidSafetynetAttestation.verify..As 666Q~a  666rx5crzattest.android.comz-Certificate not issued to attest.android.com!algr )splitjsonloadsdecoderrr rr rload_der_x509_certificatersubjectget_attributes_for_oidNameOID COMMON_NAMEvaluerfor_namefrom_cryptography_key public_keyverifyrsplitr rBASIC) r statement auth_dataclient_data_hashjwtheaderpayloadsigdataexpected_noncer*certcns rr9z"AndroidSafetynetAttestation.verify5s #KK399T??KKKz'..0011  ?T*;%> > ,< <==tG}(E(EFF 7566 6z&--//0066$u+666-c!fo6G6GHH \ 0 01I J J a5;. . .MNN Ne%%;;DOOrRs8#""""" 888888AAAAAA********=====+=====r