varun-r-mallya/py-libp2p
1
0
Fork 0
mirror of https://github.com/varun-r-mallya/py-libp2p.git synced 2026-02-12 16:10:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

rufuse large RSA keys

Browse Source
This commit is contained in:
Khwahish Patel
2025-03-05 12:29:52 +05:30
committed by Paul Robinson
parent 7d324b129b
commit e150d3153a
1 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
libp2p/crypto/rsa.py
View File

@ -9,6 +9,9 @@ from Crypto.Signature import (
pkcs1_15, pkcs1_15,
) )
from libp2p.crypto.exceptions import (
CryptographyError,
)
from libp2p.crypto.keys import ( from libp2p.crypto.keys import (
KeyPair, KeyPair,
KeyType, KeyType,
@ -16,9 +19,26 @@ from libp2p.crypto.keys import (
PublicKey, PublicKey,
) )
MAX_RSA_KEY_SIZE = 4096
def validate_rsa_key_size(key: RsaKey) -> None:
"""
Validate that an RSA key's size is within acceptable bounds.
:param key: The RSA key to validate
:raises CryptographyError: If the key size exceeds the maximum allowed size
"""
key_size = key.size_in_bits()
if key_size > MAX_RSA_KEY_SIZE:
msg = f"RSA key size {key_size} "
msg += f"exceeds maximum allowed size {MAX_RSA_KEY_SIZE}"
raise CryptographyError(msg)
class RSAPublicKey(PublicKey): class RSAPublicKey(PublicKey):
def __init__(self, impl: RsaKey) -> None: def __init__(self, impl: RsaKey) -> None:
validate_rsa_key_size(impl)
self.impl = impl self.impl = impl
def to_bytes(self) -> bytes: def to_bytes(self) -> bytes:
@ -27,6 +47,7 @@ class RSAPublicKey(PublicKey):
@classmethod @classmethod
def from_bytes(cls, key_bytes: bytes) -> "RSAPublicKey": def from_bytes(cls, key_bytes: bytes) -> "RSAPublicKey":
rsakey = RSA.import_key(key_bytes) rsakey = RSA.import_key(key_bytes)
validate_rsa_key_size(rsakey)
return cls(rsakey) return cls(rsakey)
def get_type(self) -> KeyType: def get_type(self) -> KeyType:
@ -43,10 +64,15 @@ class RSAPublicKey(PublicKey):
class RSAPrivateKey(PrivateKey): class RSAPrivateKey(PrivateKey):
def __init__(self, impl: RsaKey) -> None: def __init__(self, impl: RsaKey) -> None:
validate_rsa_key_size(impl)
self.impl = impl self.impl = impl
@classmethod @classmethod
def new(cls, bits: int = 2048, e: int = 65537) -> "RSAPrivateKey": def new(cls, bits: int = 2048, e: int = 65537) -> "RSAPrivateKey":
if bits > MAX_RSA_KEY_SIZE:
msg = f"Requested RSA key size {bits} "
msg += f"exceeds maximum allowed size {MAX_RSA_KEY_SIZE}"
raise CryptographyError(msg)
private_key_impl = RSA.generate(bits, e=e) private_key_impl = RSA.generate(bits, e=e)
return cls(private_key_impl) return cls(private_key_impl)