1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
# -*- coding: utf-8 -*-
'''
Implement the base key object for other keys to inherit convenience functions
'''
# Import libnacl libs
import libnacl.encode
# Import python libs
import os
import stat
class BaseKey(object):
'''
Include methods for key management convenience
'''
def __init__(self):
self.sk_hex = self.hex_sk()
self.pk_hex = self.hex_pk()
self.kx_sk_hex = self.hex_kx_sk()
self.kx_pk_hex = self.hex_kx_pk()
self.vk_hex = self.hex_vk()
def hex_sk(self):
if hasattr(self, 'sk'):
return libnacl.encode.hex_encode(self.sk)
def hex_pk(self):
if hasattr(self, 'pk'):
return libnacl.encode.hex_encode(self.pk)
def hex_kx_pk(self):
if hasattr(self, 'kx_pk'):
return libnacl.encode.hex_encode(self.kx_pk)
def hex_kx_sk(self):
if hasattr(self, 'kx_sk'):
return libnacl.encode.hex_encode(self.kx_sk)
def hex_vk(self):
if hasattr(self, 'vk'):
return libnacl.encode.hex_encode(self.vk)
def hex_seed(self):
if hasattr(self, 'seed'):
return libnacl.encode.hex_encode(self.seed)
def for_json(self):
'''
Return a dictionary of the secret values we need to store.
'''
pre = {}
sk = self.hex_sk()
pk = self.hex_pk()
kx_sk = self.hex_kx_sk()
kx_pk = self.hex_kx_pk()
vk = self.hex_vk()
seed = self.hex_seed()
if sk:
pre['priv'] = sk.decode('utf-8')
if pk:
pre['pub'] = pk.decode('utf-8')
if kx_sk:
pre['kx_priv'] = kx_sk.decode('utf-8')
if kx_pk:
pre['kx_pub'] = kx_pk.decode('utf-8')
if vk:
pre['verify'] = vk.decode('utf-8')
if seed:
pre['sign'] = seed.decode('utf-8')
return pre
def save(self, path, serial='json'):
'''
Safely save keys with perms of 0400
'''
pre = self.for_json()
if serial == 'msgpack':
import msgpack
packaged = msgpack.dumps(pre)
elif serial == 'json':
import json
packaged = json.dumps(pre)
perm_other = stat.S_IROTH | stat.S_IWOTH | stat.S_IXOTH
perm_group = stat.S_IRGRP | stat.S_IWGRP | stat.S_IXGRP
cumask = os.umask(perm_other | perm_group)
with open(path, 'w+') as fp_:
fp_.write(packaged)
os.umask(cumask)
|
