1# This file is dual licensed under the terms of the Apache License, Version
2# 2.0, and the BSD License. See the LICENSE file in the root of this repository
3# for complete details.
4
5from __future__ import annotations
6
7import abc
8
9from cryptography.exceptions import UnsupportedAlgorithm, _Reasons
10from cryptography.hazmat.bindings._rust import openssl as rust_openssl
11from cryptography.hazmat.primitives import _serialization
12
13
14class X448PublicKey(metaclass=abc.ABCMeta):
15 @classmethod
16 def from_public_bytes(cls, data: bytes) -> X448PublicKey:
17 from cryptography.hazmat.backends.openssl.backend import backend
18
19 if not backend.x448_supported():
20 raise UnsupportedAlgorithm(
21 "X448 is not supported by this version of OpenSSL.",
22 _Reasons.UNSUPPORTED_EXCHANGE_ALGORITHM,
23 )
24
25 return rust_openssl.x448.from_public_bytes(data)
26
27 @abc.abstractmethod
28 def public_bytes(
29 self,
30 encoding: _serialization.Encoding,
31 format: _serialization.PublicFormat,
32 ) -> bytes:
33 """
34 The serialized bytes of the public key.
35 """
36
37 @abc.abstractmethod
38 def public_bytes_raw(self) -> bytes:
39 """
40 The raw bytes of the public key.
41 Equivalent to public_bytes(Raw, Raw).
42 """
43
44 @abc.abstractmethod
45 def __eq__(self, other: object) -> bool:
46 """
47 Checks equality.
48 """
49
50
51if hasattr(rust_openssl, "x448"):
52 X448PublicKey.register(rust_openssl.x448.X448PublicKey)
53
54
55class X448PrivateKey(metaclass=abc.ABCMeta):
56 @classmethod
57 def generate(cls) -> X448PrivateKey:
58 from cryptography.hazmat.backends.openssl.backend import backend
59
60 if not backend.x448_supported():
61 raise UnsupportedAlgorithm(
62 "X448 is not supported by this version of OpenSSL.",
63 _Reasons.UNSUPPORTED_EXCHANGE_ALGORITHM,
64 )
65
66 return rust_openssl.x448.generate_key()
67
68 @classmethod
69 def from_private_bytes(cls, data: bytes) -> X448PrivateKey:
70 from cryptography.hazmat.backends.openssl.backend import backend
71
72 if not backend.x448_supported():
73 raise UnsupportedAlgorithm(
74 "X448 is not supported by this version of OpenSSL.",
75 _Reasons.UNSUPPORTED_EXCHANGE_ALGORITHM,
76 )
77
78 return rust_openssl.x448.from_private_bytes(data)
79
80 @abc.abstractmethod
81 def public_key(self) -> X448PublicKey:
82 """
83 Returns the public key associated with this private key
84 """
85
86 @abc.abstractmethod
87 def private_bytes(
88 self,
89 encoding: _serialization.Encoding,
90 format: _serialization.PrivateFormat,
91 encryption_algorithm: _serialization.KeySerializationEncryption,
92 ) -> bytes:
93 """
94 The serialized bytes of the private key.
95 """
96
97 @abc.abstractmethod
98 def private_bytes_raw(self) -> bytes:
99 """
100 The raw bytes of the private key.
101 Equivalent to private_bytes(Raw, Raw, NoEncryption()).
102 """
103
104 @abc.abstractmethod
105 def exchange(self, peer_public_key: X448PublicKey) -> bytes:
106 """
107 Performs a key exchange operation using the provided peer's public key.
108 """
109
110
111if hasattr(rust_openssl, "x448"):
112 X448PrivateKey.register(rust_openssl.x448.X448PrivateKey)