OXIESEC PANEL
- Current Dir:
/
/
opt
/
gsutil
/
third_party
/
pyu2f
/
pyu2f
/
__pycache__
Server IP: 2a02:4780:11:1594:0:ef5:22d7:a
Upload:
Create Dir:
Name
Size
Modified
Perms
📁
..
-
02/11/2025 08:19:48 AM
rwxr-xr-x
📄
__init__.cpython-39.pyc
198 bytes
02/11/2025 08:19:48 AM
rw-r--r--
📄
apdu.cpython-39.pyc
3.77 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
errors.cpython-39.pyc
3.16 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
hardware.cpython-39.pyc
5.12 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
hidtransport.cpython-39.pyc
9.66 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
model.cpython-39.pyc
2.44 KB
02/11/2025 08:19:48 AM
rw-r--r--
📄
u2f.cpython-39.pyc
5.49 KB
02/11/2025 08:19:48 AM
rw-r--r--
Editing: u2f.cpython-39.pyc
Close
a ��a} � @ sp d Z ddlZddlZddlZddlmZ ddlmZ ddlmZ ddlmZ e� � fdd�Z G d d � d e �Z dS ) aN Implement a high level U2F API analogous to the javascript API spec. This modules implements a high level U2F API that is analogous in spirit to the high level U2F javascript API. It supports both registration and authetication. For the purposes of this API, the "origin" is the hostname of the machine this library is running on. � N)�errors)�hardware)� hidtransport)�modelc C sN t �� }|D ]4}zttj|d�| d�W S tjy> Y q 0 q t�� �dS )zEObtains a U2FInterface for the first valid local U2FHID device found.)� transport)� security_key�originN)r ZDiscoverLocalHIDU2FDevices� U2FInterfacer Z SecurityKeyr �UnsupportedVersionException�NoDeviceFoundError)r Zhid_transports�t� r �*/opt/gsutil/third_party/pyu2f/pyu2f/u2f.py�GetLocalU2FInterface! s � r c @ s8 e Zd ZdZe�� fdd�Zdd� Zdd� Zdd � Z d S ) r a� High level U2F interface. Implements a high level interface in the spirit of the FIDO U2F javascript API high level interface. It supports registration and authentication (signing). IMPORTANT NOTE: This class does NOT validate the app id against the origin. In particular, any user can assert any app id all the way to the device. The security model of a python library is such that doing so would not provide significant benfit as it could be bypassed by the caller talking to a lower level of the API. In fact, so could the origin itself. The origin is still set to a plausible value (the hostname) by this library. TODO(gdasher): Figure out a plan on how to address this gap/document the consequences of this more clearly. c C s& || _ || _| j�� dkr"t�� �d S )Ns U2F_V2)r r Z CmdVersionr r )�selfr r r r r �__init__C s zU2FInterface.__init__c C s� t �t jj|| j�}| �|�� �}| �|�}|D ]�}z0|jdkrDW q0| j�|||j d�}t � d��W q0 t j y� t � t j j��Y q0 t jy� } z W Y d} ~ q0d} ~ 0 t j y� } z t � t j j| ��W Y d} ~ q0d} ~ 0 0 q0td�D ]�} z | j�||�}t �||�W S t j �yJ } z | j�� t�d� W Y d} ~ q�d} ~ 0 t j �y� } z t � t j j| ��W Y d} ~ q�d} ~ 0 0 q�t � t j j��dS )a� Registers app_id with the security key. Executes the U2F registration flow with the security key. Args: app_id: The app_id to register the security key against. challenge: Server challenge passed to the security key. registered_keys: List of keys already registered for this app_id+user. Returns: RegisterResponse with key_handle and attestation information in it ( encoded in FIDO U2F binary format within registration_data field). Raises: U2FError: There was some kind of problem with registration (e.g. the device was already registered or there was a timeout waiting for the test of user presence). �U2F_V2TzShould Never HappenN� � �?)r � ClientData�TYP_REGISTRATIONr �InternalSHA256�GetJson�versionr �CmdAuthenticate� key_handler � HardwareError�TUPRequiredError�U2FError�DEVICE_INELIGIBLE�InvalidKeyHandleError� BAD_REQUEST�rangeZ CmdRegister�RegisterResponse�CmdWink�time�sleep�TIMEOUT) r �app_id� challenge�registered_keys� client_data�challenge_param� app_param�key�resp�e�_r r r �RegisterJ s: � �( (zU2FInterface.Registerc C s8 t �t jj|| j�}| �|�}| �|�� �}d}|D ]�}zx|jdkrHW q4td�D ]\} z.| j� |||j �} t � |j | |�W W S t j y� | j�� t�d� Y qP0 qPW q4 t jy� |d7 }Y q4Y q4 t j�y } z t �t jj| ��W Y d} ~ q4d} ~ 0 0 q4|t|�k�r&t �t jj��t �t jj��dS )a� Authenticates app_id with the security key. Executes the U2F authentication/signature flow with the security key. Args: app_id: The app_id to register the security key against. challenge: Server challenge passed to the security key as a bytes object. registered_keys: List of keys already registered for this app_id+user. Returns: SignResponse with client_data, key_handle, and signature_data. The client data is an object, while the signature_data is encoded in FIDO U2F binary format. Raises: U2FError: There was some kind of problem with authentication (e.g. there was a timeout while waiting for the test of user presence.) r r r r � N)r r �TYP_AUTHENTICATIONr r r r r" r r r � SignResponser r r$ r% r& r r r r! �lenr r' ) r r( r) r* r+ r- r, Znum_invalid_keysr. r1 r/ r0 r r r � Authenticate� s6 � � (zU2FInterface.Authenticatec C s t �� }|�|�� � |�� S )N)�hashlib�sha256�update�encode�digest)r �string�mdr r r r � s zU2FInterface.InternalSHA256N) �__name__� __module__� __qualname__�__doc__�socket� gethostnamer r2 r7 r r r r r r 0 s 91r ) rB r8 rC r% �pyu2fr r r r rD r �objectr r r r r �<module> s