Warning: session_start(): Session cannot be started after headers have already been sent in /home/tvrreohg/public_html/manga.php on line 13
3
jC ) @ s d dl Z d dlZd dlZd dlmZ d dlmZmZmZm Z m
Z
m Z ddl m
Z
ddlmZ ddlmZmZmZmZmZmZmZ G dd d ZG d
d d eZyd d lmZm Z d d
l m Z G dd deZ G dd deZ e!e!e!dddZ"e!e!e!dddZ#e!e!e!dddZ$e!e!e!dddZ%e!e!e!e!dd d Z&e!e!e!e!dd d Z'W n e(k
r G d d deZ G d!d deZ e!e!e!dd"dZ"e!e!e!dd#dZ#e!e!e!dd$dZ$e!e!e!dd%dZ%e!e!e!e!dd&d Z&e!e!e!e!dd'd Z'Y nX G d(d) d)Z)e!d*d+d,d-d,d.d/d0d1d d,d2d3d4dd5d6d6d d7d8d9d:d;dd?d1d@dAdBg Z*e!e!dCdDdEZ+G dFdG dGZ,G dHdI dIZ-G dJdK dKeZ.G dLdM dMZ/dS )N N)IntEnum)AnyDictOptionalTupleUnioncast )logger_warning)DependencyError) ArrayObjectByteStringObjectDictionaryObject PdfObject StreamObjectTextStringObjectcreate_string_objectc @ s, e Zd ZeedddZeedddZdS ) CryptBase)datareturnc C s |S )N )selfr r r 4/tmp/pip-build-vnmlutbd/PyPDF2/PyPDF2/_encryption.pyencrypt0 s zCryptBase.encryptc C s |S )Nr )r r r r r decrypt3 s zCryptBase.decryptN)__name__
__module__ __qualname__bytesr r r r r r r / s r c @ s e Zd ZdS )
CryptIdentityN)r r r r r r r r 7 s r )AESARC4)padc @ s< e Zd ZeddddZeedddZeeddd ZdS )
CryptRC4N)keyr c C s
|| _ d S )N)r$ )r r$ r r r __init__@ s zCryptRC4.__init__)r r c C s t j| jj|S )N)r!
ARC4Cipherr$ r )r r r r r r C s zCryptRC4.encryptc C s t j| jj|S )N)r! r& r$ r )r r r r r r F s zCryptRC4.decrypt)r r r r r% r r r r r r r# ? s r# c @ s< e Zd ZeddddZeedddZeeddd ZdS )
CryptAESN)r$ r c C s
|| _ d S )N)r$ )r r$ r r r r% J s zCryptAES.__init__)r r c sl t tdd tdD }dt|d |t t fddt D 7 }tj| jtj|}||j| S )Nc s s | ]}t jd dV qdS )r N)randomrandint).0_r r r N s z#CryptAES.encrypt.. c 3 s | ]
} V qd S )Nr )r+ r, )pr r r- P s ) r bytearrayrangelenr newr$ MODE_CBCr )r r ivaesr )r/ r r M s
"zCryptAES.encryptc C sp |d d }|dd }t j| jt j|}t|d r@t|d}|j|}t|dkrZ|S |d |d S d S )Nr. r r )r r3 r$ r4 r2 r" r )r r r5 r6 dr r r r T s
zCryptAES.decrypt)r r r r r% r r r r r r r' I s r' )r$ r r c C s t j| j|S )N)r! r& r )r$ r r r r RC4_encrypt` s r9 c C s t j| j|S )N)r! r& r )r$ r r r r RC4_decryptc s r: c C s t j| t jj|S )N)r r3 MODE_ECBr )r$ r r r r AES_ECB_encryptf s r< c C s t j| t jj|S )N)r r3 r; r )r$ r r r r AES_ECB_decrypti s r= )r$ r5 r r c C s t j| t j|j|S )N)r r3 r4 r )r$ r5 r r r r AES_CBC_encryptl s r> c C s t j| t j|j|S )N)r r3 r4 r )r$ r5 r r r r AES_CBC_decrypto s r? c @ s< e Zd ZeddddZeedddZeeddd ZdS )
r# N)r$ r c C sl t td| _d}xTtdD ]H}|| j| ||t| d }| j| | j| | j|< | j|< q W d S )N r )listr1 Sr2 )r r$ jir r r r% u s
"zCryptRC4.__init__)r r c C s t | j}t dd tt|D }d\}}xrtt|D ]b}|d d }||| d }|| || ||< ||< ||| || d }|| |A ||< q:W tt|S )Nc s s | ]
}d V qdS )r Nr )r+ r, r r r r- ~ s z#CryptRC4.encrypt..r r r@ )r r )rA rB r1 r2 r r0 )r r rB outrD rC kxr r r r | s
zCryptRC4.encryptc C s
| j |S )N)r )r r r r r r s zCryptRC4.decrypt)r r r r r% r r r r r r r# t s c @ s< e Zd ZeddddZeedddZeeddd ZdS )
r' N)r$ r c C s d S )Nr )r r$ r r r r% s zCryptAES.__init__)r r c C s t dd S )Nz*PyCryptodome is required for AES algorithm)r )r r r r r r s zCryptAES.encryptc C s t dd S )Nz*PyCryptodome is required for AES algorithm)r )r r r r r r s zCryptAES.decrypt)r r r r r% r r r r r r r' s c C s t | j|S )N)r# r )r$ r r r r r9 s c C s t | j|S )N)r# r )r$ r r r r r: s c C s t dd S )Nz*PyCryptodome is required for AES algorithm)r )r$ r r r r r< s c C s t dd S )Nz*PyCryptodome is required for AES algorithm)r )r$ r r r r r= s c C s t dd S )Nz*PyCryptodome is required for AES algorithm)r )r$ r5 r r r r r> s c C s t dd S )Nz*PyCryptodome is required for AES algorithm)r )r$ r5 r r r r r? s c @ s@ e Zd ZeeeddddZeedddZeeddd ZdS )
CryptFilterN)stmCryptstrCryptefCryptr c C s || _ || _|| _d S )N)rI rJ rK )r rI rJ rK r r r r% s zCryptFilter.__init__)objr c C s t S )N)NotImplemented)r rL r r r encrypt_object s zCryptFilter.encrypt_objectc C s t |ttfr&| jj|j}t|}nt |trB| jj|j |_ nft |t
rvxZt |j D ]\}}| j
|||< qZW n2t |trx&tt|D ]}| j
|| ||< qW |S )N)
isinstancer
r rJ r original_bytesr r rI _datar rA itemsdecrypt_objectr r1 r2 )r rL r ZdictkeyvaluerD r r r rS s
zCryptFilter.decrypt_object)r r r r r% r rN rS r r r r rH s rH ( N ^ u A d V r( . h > / S i z )r r c C s | t d d S )N )_PADDING)r r r r _padding s ro c @ s e Zd ZeeeeeeeeedddZeeeeedddZeeeeeddd Z eeeeed
d d Z
eeeeeeeeeed
ddZ eeeeeeeeeed ddZ dS )AlgV4)passwordrevkey_sizeo_entryP id1_entrymetadata_encryptedr c C s t | }tj|}|j| |jtjd| |j| |dkrR|dkrR|jd |j } |d }
|dkrx&tdD ]} tj| d|
j } qtW | d|
S ) u
Algorithm 2: Computing an encryption key.
a) Pad or truncate the password string to exactly 32 bytes. If the
password string is more than 32 bytes long,
use only its first 32 bytes; if it is less than 32 bytes long, pad it
by appending the required number of
additional bytes from the beginning of the following padding string:
< 28 BF 4E 5E 4E 75 8A 41 64 00 4E 56 FF FA 01 08
2E 2E 00 B6 D0 68 3E 80 2F 0C A9 FE 64 53 69 7A >
That is, if the password string is n bytes long, append
the first 32 - n bytes of the padding string to the end
of the password string. If the password string is empty (zero-length),
meaning there is no user password,
substitute the entire padding string in its place.
b) Initialize the MD5 hash function and pass the result of step (a)
as input to this function.
c) Pass the value of the encryption dictionary’s O entry to the
MD5 hash function. ("Algorithm 3: Computing
the encryption dictionary’s O (owner password) value" shows how the
O value is computed.)
d) Convert the integer value of the P entry to a 32-bit unsigned binary
number and pass these bytes to the
MD5 hash function, low-order byte first.
e) Pass the first element of the file’s file identifier array (the value
of the ID entry in the document’s trailer
dictionary; see Table 15) to the MD5 hash function.
f) (Security handlers of revision 4 or greater) If document metadata is
not being encrypted, pass 4 bytes with
the value 0xFFFFFFFF to the MD5 hash function.
g) Finish the hash.
h) (Security handlers of revision 3 or greater) Do the following
50 times: Take the output from the previous
MD5 hash and pass the first n bytes of the output as input into a new
MD5 hash, where n is the number of
bytes of the encryption key as defined by the value of the encryption
dictionary’s Length entry.
i) Set the encryption key to the first n bytes of the output from the
final MD5 hash, where n shall always be 5
for security handlers of revision 2 but, for security handlers of
revision 3 or greater, shall depend on the
value of the encryption dictionary’s Length entry.
zx tdD ]}tj|j }q(W |d|d }|S )uJ
Algorithm 3: Computing the encryption dictionary’s O (owner password) value.
a) Pad or truncate the owner password string as described in step (a)
of "Algorithm 2: Computing an encryption key".
If there is no owner password, use the user password instead.
b) Initialize the MD5 hash function and pass the result of step (a) as
input to this function.
c) (Security handlers of revision 3 or greater) Do the following 50 times:
Take the output from the previous
MD5 hash and pass it as input into a new MD5 hash.
d) Create an RC4 encryption key using the first n bytes of the output
from the final MD5 hash, where n shall
always be 5 for security handlers of revision 2 but, for security
handlers of revision 3 or greater, shall
depend on the value of the encryption dictionary’s Length entry.
e) Pad or truncate the user password string as described in step (a) of
"Algorithm 2: Computing an encryption key".
f) Encrypt the result of step (e), using an RC4 encryption function with
the encryption key obtained in step (d).
g) (Security handlers of revision 3 or greater) Do the following 19 times:
Take the output from the previous
invocation of the RC4 function and pass it as input to a new
invocation of the function; use an encryption
key generated by taking each byte of the encryption key obtained in
step (d) and performing an XOR
(exclusive or) operation between that byte and the single-byte value
of the iteration counter (from 1 to 19).
h) Store the output from the final invocation of the RC4 function as
the value of the O entry in the encryption dictionary.
ry rz Nr_ )ro r{ r| r r1 )r rr rs r Z
o_hash_digestr, rc4_keyr r r compute_O_value_key2 s !zAlgV4.compute_O_value_key)r
user_passwordrr r c sV t |}t| |}|dkrRx6tddD ]( tt fdd| D }t||}q&W |S )z See :func:`compute_O_value_key`.ry r c 3 s | ]}| A V qd S )Nr )r+ rG )rD r r r- d s z(AlgV4.compute_O_value..)ro r9 r1 r r0 )r r rr r rc4_encr$ r )rD r compute_O_value] s
zAlgV4.compute_O_value)r$ rr rv r c sx |dkrt | t}|S tjt}|j| t | |j }x6tddD ]( tt fdd| D }t ||}qDW t |S )u]
Algorithm 4: Computing the encryption dictionary’s U (user password) value.
(Security handlers of revision 2)
a) Create an encryption key based on the user password string, as
described in "Algorithm 2: Computing an encryption key".
b) Encrypt the 32-byte padding string shown in step (a) of
"Algorithm 2: Computing an encryption key", using an RC4 encryption
function with the encryption key from the preceding step.
c) Store the result of step (b) as the value of the U entry in the
encryption dictionary.
r r c 3 s | ]}| A V qd S )Nr )r+ rG )rD r r r- s z(AlgV4.compute_U_value..)
r9 rn r{ r| r} r r1 r r0 ro )r$ rr rv rT r r r r )rD r compute_U_valueh s
zAlgV4.compute_U_value) r rr rs rt u_entryru rv rw r c
C sT t j| ||||||}t j|||} |dkrD| dd } |dd }| |krPd}|S )u
Algorithm 6: Authenticating the user password.
a) Perform all but the last step of "Algorithm 4: Computing the encryption dictionary’s U (user password)
value (Security handlers of revision 2)" or "Algorithm 5: Computing the encryption dictionary’s U (user
password) value (Security handlers of revision 3 or greater)" using the supplied password string.
b) If the result of step (a) is equal to the value of the encryption dictionary’s U entry (comparing on the first 16
bytes in the case of security handlers of revision 3 or greater), the password supplied is the correct user
password. The key obtained in step (a) (that is, in the first step of "Algorithm 4: Computing the encryption
dictionary’s U (user password) value (Security handlers of revision 2)" or "Algorithm 5: Computing the
encryption dictionary’s U (user password) value (Security handlers of revision 3 or greater)") shall be used
to decrypt the document.
ry Nr. )rp r r )
r rr rs rt r ru rv rw r$ u_valuer r r verify_user_password s zAlgV4.verify_user_password) r rr rs rt r ru rv rw r c sx t j| ||}|dkr"t||} n>|} x8tdddD ]( tt fdd|D }
t|
| } q4W t j| |||||||S )u
Algorithm 7: Authenticating the owner password.
a) Compute an encryption key from the supplied password string, as described in steps (a) to (d) of
"Algorithm 3: Computing the encryption dictionary’s O (owner password) value".
b) (Security handlers of revision 2 only) Decrypt the value of the encryption dictionary’s O entry, using an RC4
encryption function with the encryption key computed in step (a).
(Security handlers of revision 3 or greater) Do the following 20 times: Decrypt the value of the encryption
dictionary’s O entry (first iteration) or the output from the previous iteration (all subsequent iterations),
using an RC4 encryption function with a different encryption key at each iteration. The key shall be
generated by taking the original key (obtained in step (a)) and performing an XOR (exclusive or) operation
between each byte of the key and the single-byte value of the iteration counter (from 19 to 0).
c) The result of step (b) purports to be the user password. Authenticate this user password using "Algorithm 6:
Authenticating the user password". If it is correct, the password supplied is the correct owner password.
r r c 3 s | ]}| A V qd S )Nr )r+ rG )rD r r r- s z.AlgV4.verify_owner_password..r7 r7 )rp r r: r1 r r0 r ) r rr rs rt r ru rv rw r r r$ r )rD r verify_owner_password s zAlgV4.verify_owner_passwordN)
r r r staticmethodr intboolr r r r r r r r r r rp sF ;*
3rp c @ s e Zd ZeeeeeeedddZeeeeeedddZeeeeeeddd Zeeeee e d
d d Z
eeeeee e e e f d
ddZ
eeeeeef dddZeeeeeeef dddZeeee edddZdS )AlgV5)Rrq o_valueoe_valuer r c C s |dd }t j| ||dd |dd |dd kr.r. )r calculate_hashr r1 r? )r rq r r r r5 tmp_keyr$ r r r r s ! zAlgV5.verify_owner_password)r rq r ue_valuer c C sn |dd }t j| ||dd d|dd kr4dS tdd tdD }t j| ||dd d}t|||S )
z"See :func:`verify_owner_password`.Nr rm rU r c s s | ]
}d V qdS )r Nr )r+ r, r r r r- # s z-AlgV5.verify_user_password..r. r )r r r r1 r? )r rq r r r5 r r r r r s $zAlgV5.verify_user_password)r rq saltudatar c C s t j|| | j }| dk r"|S d}x|d7 }|| | }t|d d |dd |d }t jt jt jft|d d d }||j }|dkr(|d |d kr(P q(W |d d S ) N r r r. rm @ ry r7 )r{ sha256r r> sha384sha512sum) r rq r r KcountZK1EZhash_fnr r r r ' s zAlgV5.calculate_hash)r$ permsr/ rw r c C s> |rdnd}t jd|d | d }t| |}||dd kS )zBSee :func:`verify_owner_password` and :func:`compute_Perms_value`. T Fz.r. Nr_ c s s | ]
}d V qdS )r Nr )r+ r, r r r r- l s )r r1 r{ r r r> ) rq r$ random_bytesval_saltkey_saltr r r5 r r r r r Y s
zAlgV5.compute_U_value)rq r$ r r c
C s t dd tdD }|dd }|dd }tj| | | j | | }tj| | | j }t dd tdD }t|||} || fS )u+
Algorithm 3.9 Computing the encryption dictionary’s O (owner password) and OE (owner encryption key) values.
1. Generate 16 random bytes of data using a strong random number generator. The first 8 bytes are the
Owner Validation Salt. The second 8 bytes are the Owner Key Salt. Compute the 32-byte SHA-256 hash
of the password concatenated with the Owner Validation Salt and then concatenated with the 48-byte
U string as generated in Algorithm 3.8. The 48-byte string consisting of the 32-byte hash followed by
the Owner Validation Salt followed by the Owner Key Salt is stored as the O key.
2. Compute the 32-byte SHA-256 hash of the password concatenated with the Owner Key Salt and then
concatenated with the 48-byte U string as generated in Algorithm 3.8. Using this hash as the key,
encrypt the file encryption key using AES-256 in CBC mode with no padding and an initialization vector
of zero. The resulting 32-byte string is stored as the OE key.
c s s | ]}t jd dV qdS )r r@ N)r) r )r+ r, r r r r- s z(AlgV5.compute_O_value..r. Nr_ c s s | ]
}d V qdS )r Nr )r+ r, r r r r- s )r r1 r{ r r r> )
rq r$ r r r r r r r5 r r r r r p s zAlgV5.compute_O_value)r$ r/ rw r c C sL |rdnd}t dd tdD }tjd|d | d | }t| |}|S ) u
Algorithm 3.10 Computing the encryption dictionary’s Perms (permissions) value
1. Extend the permissions (contents of the P integer) to 64 bits by setting the upper 32 bits to all 1’s. (This
allows for future extension without changing the format.)
2. Record the 8 bytes of permission in the bytes 0-7 of the block, low order byte first.
3. Set byte 8 to the ASCII value ' T ' or ' F ' according to the EncryptMetadata Boolean.
4. Set bytes 9-11 to the ASCII characters ' a ', ' d ', ' b '.
5. Set bytes 12-15 to 4 bytes of random data, which will be ignored.
6. Encrypt the 16-byte block using AES-256 in ECB mode with an initialization vector of zero, using the file
encryption key as the key. The result (16 bytes) is stored as the Perms string, and checked for validity
when the file is opened.
r r c s s | ]}t jd dV qdS )r r@ N)r) r )r+ r, r r r r- s z,AlgV5.compute_Perms_value..rx z tk
r6 |jd}Y q>X n|}| jdkrR| j|n| j|\}}|tjkrv|| _ || _
|S )Nzlatin-1zutf-8rx ) rO strencode Exceptionr verify_v4 verify_v5r r r r )r rq pwdr$ rcr r r verify s
"
zEncryption.verifyc C s t t| jd }t t| jd }|d d }| jjd}|rB|jnd}t t| jd j j}t t| jd j j}tj ||| j
|||| j |}|r|t j
fS tj||| j
|||| j |}|r|t jfS dt jfS ) Nz/Rz/Pl z/EncryptMetadataTz/Oz/Ur )r r r r rT r
get_objectrP rp r rs rv r r r r r ) r rq r ru emrw rt r r$ r r r r s<
zEncryption.verify_v4c C s t t| jd j j}t t| jd j j}t t| jd j j}t t| jd j j}tj| j||||}tj }|stj
| j|||}tj }|sdtj fS t t| jd j j}t t
| jd } | d d } | jjd d
}
tj||| |
std t ||fS ) Nz/Oz/Uz/OEz/UEr z/Permsz/Pl z/EncryptMetadataTz ignore '/Perms' verify failed)r r
r r rP r r r r r r r r r r r r
r ) r rq rt r Zoe_entryZue_entryr$ r r ru rw r r r r < s&
zEncryption.verify_v5)encryption_entryr r c
C s6 | j d}|dkrtdd| kr*tdd}d}d}| j dd}|d krZtd| d|d kr| d }| j dd}| j dd}| j d|}|dkr|| d }|dkr|| d }|dkr|| d }d }||krtd||k rtd| d||krtd| dtt| d } t|| | ||||S ) Nz/Filterz /Standardz1only Standard PDF encryption handler is availablez
/SubFilterz/SubFilter NOT supported/V2z/Vr r r ry rx r z
Encryption V=z NOT supportedz/CFz/StmF /Identityz/StrFz/EFFz/CFM/AESV2/AESV3z!StmF Method {StmF} NOT supported!z StrF Method z NOT supported!z EFF Method z/R)r r ry rx r )r r r r )r NotImplementedErrorr r r )
r r filterr r r VfiltersZallowed_methodsr r r r readW s@
zEncryption.read)r r r r r r r r% r r r rS r r r r r r r r r r r r r r r s$ 5
%r )0r{ r) r~ enumr typingr r r r r r _utilsr
errorsr Zgenericr r
r r r r r r r Z
Crypto.Cipherr r! ZCrypto.Util.Paddingr" r# r' r r9 r: r< r= r> r? ImportErrorrH rn ro rp r r r r r r r s $
6