????
Your IP : 216.73.217.84
a
�w\� � @ sr d Z ddlmZ ddlmZ G dd� dej�ZG dd� de�ZG dd � d e�ZG d
d � d e �Z
G d d
� d
e �Z dS )z!
module for Yubikey base classes
� )� __version__)�yubico_exceptionc s" e Zd ZdZd� fdd� Z� ZS )� YubiKeyErrorzu
Exception raised concerning YubiKey operations.
Attributes:
reason -- explanation of the error
�
no detailsc s t t| ��|� d S �N)�superr �__init__��self�reason�� __class__� �7/usr/lib/python3.9/site-packages/yubico/yubikey_base.pyr s zYubiKeyError.__init__)r ��__name__�
__module__� __qualname__�__doc__r �
__classcell__r r r r r
s r c s" e Zd ZdZd� fdd� Z� ZS )�YubiKeyTimeoutzz
Exception raised when a YubiKey operation timed out.
Attributes:
reason -- explanation of the error
r c s t t| ��|� d S r )r r r r r r r r s zYubiKeyTimeout.__init__)r r r r r r r s r c s" e Zd ZdZd� fdd� Z� ZS )�YubiKeyVersionErrorz�
Exception raised when the YubiKey is not capable of something requested.
Attributes:
reason -- explanation of the error
r c s t t| ��|� d S r )r r r r r r r r % s z YubiKeyVersionError.__init__)r r r r r r r s r c @ s� e Zd ZdZdZdZdZdZd,dd�Zd d
� Z d d � Z
d
d� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zdd � Zd-d d �Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� ZdS ).�YubiKeyCapabilitiesa�
Class expressing the functionality of a YubiKey.
This base class should be the superset of all sub-classes.
In this base class, we lie and say 'yes' to all capabilities.
If the base class is used (such as when creating a YubiKeyConfig()
before getting a YubiKey()), errors must be handled at runtime
(or later, when the user is unable to use the YubiKey).
ZUnknown)� r r r TNc C sF || _ |d ur|| _|d urB|| _|\}}}|d> |d> B |B | _d S )N� � )�model�default_answer�version� version_num)r
r r r �major�minorZbuildr r r r ; s
z YubiKeyCapabilities.__init__c C s$ d| j jtt| ��| j| j| jf S )Nz/<%s instance at %s: Device %s %s (default: %s)>)r
r �hex�idr r r �r
r r r �__repr__F s
�z YubiKeyCapabilities.__repr__c C s | j S r �r r$ r r r �have_yubico_OTPO s z#YubiKeyCapabilities.have_yubico_OTPc C s | j S r r& �r
�moder r r � have_OATHR s z YubiKeyCapabilities.have_OATHc C s | j S r r& r( r r r �have_challenge_responseU s z+YubiKeyCapabilities.have_challenge_responsec C s | j S r r& r$ r r r �have_serial_numberX s z&YubiKeyCapabilities.have_serial_numberc C s | j S r r& �r
�flagr r r �have_ticket_flag[ s z$YubiKeyCapabilities.have_ticket_flagc C s | j S r r& r- r r r �have_config_flag^ s z$YubiKeyCapabilities.have_config_flagc C s | j S r r& r- r r r �have_extended_flaga s z&YubiKeyCapabilities.have_extended_flagc C s | j S r r& r$ r r r � have_extended_scan_code_moded s z0YubiKeyCapabilities.have_extended_scan_code_modec C s | j S r r& r$ r r r �have_shifted_1_modeg s z'YubiKeyCapabilities.have_shifted_1_moder c C s | j S r r& )r
�slotr r r �
have_nfc_ndefj s z!YubiKeyCapabilities.have_nfc_ndefc C s | j S r r& r$ r r r �have_configuration_slotm s z+YubiKeyCapabilities.have_configuration_slotc C s | j S r r& r$ r r r �have_device_configp s z&YubiKeyCapabilities.have_device_configc C s | j S r r& r( r r r �
have_usb_modes s z!YubiKeyCapabilities.have_usb_modec C s | j S r r& r$ r r r � have_scanmapv s z YubiKeyCapabilities.have_scanmapc C s | j S r r& r$ r r r �have_capabilitiesy s z%YubiKeyCapabilities.have_capabilitiesc C s | j S r r& )r
Z
capabilityr r r �have_capability| s z#YubiKeyCapabilities.have_capability)NNN)r )r r r r r r r r r r% r' r* r+ r, r/ r0 r1 r2 r3 r5 r6 r7 r8 r9 r: r; r r r r r ) s.
r c @ sN e Zd ZdZdZdZddd�Zdd� Zddd �Zdd d
�Z dd� Z
dd� Z dS )�YubiKeyz+
Base class for accessing YubiKeys
Nc C s& || _ |d u r tdd�| _n|| _d S )NFr& )�debugr � capabilities)r
r= r> r r r r � s
zYubiKey.__init__c C s dS )z2 Get the connected YubiKey's version as a string. Nr r$ r r r r � s zYubiKey.versionTc C s dS )a�
Get the connected YubiKey's serial number.
Note that since version 2.?.? this requires the YubiKey to be
configured with the extended flag SERIAL_API_VISIBLE.
If the YubiKey is configured with SERIAL_BTN_VISIBLE set to True,
it will start blinking and require a button press before revealing
the serial number, with a 15 seconds timeout. Set `may_block'
to False to abort if this is the case.
Nr )r
� may_blockr r r �serial� s zYubiKey.serial�HMACr c C s dS )a�
Get the response to a challenge from a connected YubiKey.
`mode' is either 'HMAC' or 'OTP'.
`slot' is 1 or 2.
`variable' is only relevant for mode == HMAC.
If variable is True, challenge will be padded such that the
YubiKey will compute the HMAC as if there were no padding.
If variable is False, challenge will always be NULL-padded
to 64 bytes.
The special case of no input will be HMACed by the YubiKey
(in variable HMAC mode) as data = 0x00, length = 1.
In mode 'OTP', the challenge should be exactly 6 bytes. The
response will be a YubiKey "ticket" with the 6-byte challenge
in the ticket.uid field. The rest of the "ticket" will contain
timestamp and counter information, so two identical challenges
will NOT result in the same responses. The response is
decryptable using AES ECB if you have access to the AES key
programmed into the YubiKey.
Nr )r
� challenger) r4 �variabler? r r r rB � s zYubiKey.challengec C s dS )zQ
Return a YubiKey configuration object for this type of YubiKey.
Nr r$ r r r � init_config� s zYubiKey.init_configc C s dS )zC
Configure a YubiKey using a configuration object.
Nr )r
Zcfgr4 r r r � write_config� s zYubiKey.write_config)N)T)rA r TT) r r r r r= r> r r r@ rB rD rE r r r r r< � s
r< N) r Zyubico_versionr � r Z YubicoErrorr r r �objectr r< r r r r �<module> s
W