eiXddlZddlmZddlmZddlmZmZ ddlm Z ddl m Z m Z ddl mZddlmZdd lmZdd lmZmZmZmZd Zn#e$rdZ d \Z Z ZZZd \ZZZZdZYnwxYwddlmZddlmZmZmZddl m!Z!ddl"m#Z#ddl$m%Z%erddl&m'Z'edZ(edZ)GddeZ*GddeZ+GddeZ,GddeZ-Gdd eZ.Gd!d"e.Z/Gd#d$e.Z0dS)%N) b64decode)Sequence) TYPE_CHECKING no_type_check)default_backend)MGF1OAEP)Cipher)AES)CBC)SHA1SHA256SHA512HashT)NNNNN)NNNNF)TelegramObject)de_json_optionalde_list_optionalparse_sequence_arg) TextEncoding)JSONDict)PassportDecryptionError)Botctstdttt }|||z|}|dd|dd}}tt|t|t }| }|||z}ttt }|||} | |krtd| d|||ddS) a Decrypt per telegram docs at https://core.telegram.org/passport. Args: secret (:obj:`str` or :obj:`bytes`): The encryption secret, either as bytes or as a base64 encoded string. hash (:obj:`str` or :obj:`bytes`): The hash, either as bytes or as a base64 encoded string. data (:obj:`str` or :obj:`bytes`): The data to decrypt, either as bytes or as a base64 encoded string. file (:obj:`bool`): Force data to be treated as raw data, instead of trying to b64decode it. Raises: :class:`PassportDecryptionError`: Given hash does not match hash of decrypted data. Returns: :obj:`bytes`: The decrypted data as bytes. cTo use Telegram Passports, PTB must be installed via `pip install "python-telegram-bot[passport]"`.)backendN 0zHashes are not equal! z != r) CRYPTO_INSTALLED RuntimeErrorrrrupdatefinalizer r r decryptorrr) secrethashdatadigestsecret_hash_hashkey init_vectorcipherr" data_hashs b/home/div/.hermes/hermes-agent/venv/lib/python3.11/site-packages/telegram/_passport/credentials.pydecryptr-3sY,   0   &((O$5$5 6 6 6F MM&4-   ((',.>rG|.LC CHHc+..8I8I J J JF  ""I   D ! !I$6$6$8$8 8D &((O$5$5 6 6 6F MM$!!ID%&Ty&T&Td&T&TUUU Q ?ctjt|||tjS)zPDecrypts data using secret and hash and then decodes utf-8 string and loads json)jsonloadsr-decoderUTF_8)r#r$r%s r, decrypt_jsonr4ds1 :gfdD11889KLL M MMr.c xeZdZdZdZdddededededzffd Zed e fd Z edd Z xZ S)EncryptedCredentialsaDContains data required for decrypting and authenticating EncryptedPassportElement. See the Telegram Passport Documentation for a complete description of the data decryption and authentication processes. Objects of this class are comparable in terms of equality. Two objects of this class are considered equal, if their :attr:`data`, :attr:`hash` and :attr:`secret` are equal. Note: This object is decrypted only when originating from :attr:`telegram.PassportData.decrypted_credentials`. Args: data (:class:`telegram.Credentials` | :obj:`str`): Decrypted data with unique user's nonce, data hashes and secrets used for EncryptedPassportElement decryption and authentication or base64 encrypted data. hash (:obj:`str`): Base64-encoded data hash for data authentication. secret (:obj:`str`): Decrypted or encrypted secret used for decryption. Attributes: data (:class:`telegram.Credentials` | :obj:`str`): Decrypted data with unique user's nonce, data hashes and secrets used for EncryptedPassportElement decryption and authentication or base64 encrypted data. hash (:obj:`str`): Base64-encoded data hash for data authentication. secret (:obj:`str`): Decrypted or encrypted secret used for decryption. )_decrypted_data_decrypted_secretr%r$r#N api_kwargsr%r$r#r:ct|||_||_||_|j|j|jf|_d|_d|_|dSNr9) super__init__r%r$r# _id_attrsr8r7_freeze)selfr%r$r#r: __class__s r,r>zEncryptedCredentials.__init__sj J///  ! )TY </337 r.returnc |jtstd |jt |jttttd|_n"#t$r}t||d}~wwxYw|jS)z :obj:`bytes`: Lazily decrypt and return secret. Raises: telegram.error.PassportDecryptionError: Decryption failed. Usually due to bad private/public key but can also suggest malformed/tampered data. Nr) algorithm)mgfrElabel) r8rrget_bot private_keyr-rr#r rr ValueErrorr)rA exceptions r,decrypted_secretz%EncryptedCredentials.decrypted_secrets  ! )# "8 H)-)C)K)Kdk**TDFF333tvvTRRR**&& H H H-i88iG H%%sA:B B9$B44B9 Credentialsc |jjtt|jt |jt |j||_|jS)a~ :class:`telegram.Credentials`: Lazily decrypt and return credentials data. This object also contains the user specified nonce as `decrypted_data.nonce`. Raises: telegram.error.PassportDecryptionError: Decryption failed. Usually due to bad private/public key but can also suggest malformed/tampered data. ) r7rMde_jsonr4rLrr$r%rH)rAs r,decrypted_dataz#EncryptedCredentials.decrypted_datasc   '#.#6#6T2Idi4H4H)TXT]J^J^__ $$D ##r.)rCrM) __name__ __module__ __qualname____doc__ __slots__strrr>propertybytesrLrP __classcell__rBs@r,r6r6js6I'+   tO *&%&&&X&<$$$X$$$$$r.r6cjeZdZdZdZdddddededzffd Zedd ed d d dffd Z xZ S)rMz Attributes: secure_data (:class:`telegram.SecureData`): Credentials for encrypted data nonce (:obj:`str`): Bot-specified nonce )nonce secure_dataNr9r] SecureDatar\r:ct|||_||_|dSr<)r=r>r]r\r@)rAr]r\r:rBs r,r>zCredentials.__init__s@ J///'2  r.r%bot Bot | NonerCc||}t|dt||d<t ||S),See :meth:`telegram.TelegramObject.de_json`.r]r%r`) _parse_datargetr^r=rOclsr%r`rBs r,rOzCredentials.de_jsonsSt$$.txx /F/F TWXX]wwDc222r.N) rQrRrSrTrUrVrr> classmethodrOrYrZs@r,rMrMs )I'+   !   tO      3383,3-33333[33333r.rMceZdZdZdZ dddddddddd dd dd dd dd ddddddddedzffdZeddeddddffd ZxZ S)r^a This object represents the credentials that were used to decrypt the encrypted data. All fields are optional and depend on fields that were requested. Args: personal_details (:class:`telegram.SecureValue`, optional): Credentials for encrypted personal details. passport (:class:`telegram.SecureValue`, optional): Credentials for encrypted passport. internal_passport (:class:`telegram.SecureValue`, optional): Credentials for encrypted internal passport. driver_license (:class:`telegram.SecureValue`, optional): Credentials for encrypted driver license. identity_card (:class:`telegram.SecureValue`, optional): Credentials for encrypted ID card address (:class:`telegram.SecureValue`, optional): Credentials for encrypted residential address. utility_bill (:class:`telegram.SecureValue`, optional): Credentials for encrypted utility bill. bank_statement (:class:`telegram.SecureValue`, optional): Credentials for encrypted bank statement. rental_agreement (:class:`telegram.SecureValue`, optional): Credentials for encrypted rental agreement. passport_registration (:class:`telegram.SecureValue`, optional): Credentials for encrypted registration from internal passport. temporary_registration (:class:`telegram.SecureValue`, optional): Credentials for encrypted temporary registration. Attributes: personal_details (:class:`telegram.SecureValue`): Optional. Credentials for encrypted personal details. passport (:class:`telegram.SecureValue`): Optional. Credentials for encrypted passport. internal_passport (:class:`telegram.SecureValue`): Optional. Credentials for encrypted internal passport. driver_license (:class:`telegram.SecureValue`): Optional. Credentials for encrypted driver license. identity_card (:class:`telegram.SecureValue`): Optional. Credentials for encrypted ID card address (:class:`telegram.SecureValue`): Optional. Credentials for encrypted residential address. utility_bill (:class:`telegram.SecureValue`): Optional. Credentials for encrypted utility bill. bank_statement (:class:`telegram.SecureValue`): Optional. Credentials for encrypted bank statement. rental_agreement (:class:`telegram.SecureValue`): Optional. Credentials for encrypted rental agreement. passport_registration (:class:`telegram.SecureValue`): Optional. Credentials for encrypted registration from internal passport. temporary_registration (:class:`telegram.SecureValue`): Optional. Credentials for encrypted temporary registration. ) addressbank_statementdriver_license identity_cardinternal_passportpassportpassport_registrationpersonal_detailsrental_agreementtemporary_registration utility_billNr9rszSecureValue | Nonerqrprnrorlrvrmrtrrrur:c t| | |_| |_| |_||_||_||_||_||_ ||_ ||_ ||_ | dSr<)r=r>rurrrtrmrvrlrornrprqrsr@)rArsrqrprnrorlrvrmrtrrrur:rBs r,r>zSecureData.__init__6s J///;Q#9N"4D2@0<+2 1>2@5F,4 4D r.r%r`rarCc<||}t|dt||d<t|dt||d<t|dt||d<t|dt||d<t|dt||d<t|dt||d<t|dt||d<t|dt||d<t|d t||d <t|d t||d <t|d t||d <t || S) rcrurrrtrmrvrlrornrprqrsrd)rerrf SecureValuer=rOrgs r,rOzSecureData.de_jsonWst$$)9 HH- . . S* *  %&)9 HH, - -{C) )  $%$4DHH=O4P4PR]_b#c#c  !1$((;K2L2Lk[^!_!_ /0H0H+WZ[[^*488I+>+> SQQY 0/1J1JKY\ ] ]_!1$((;K2L2Lk[^!_!_ $4 HH( ) );% %  !,DHHZ,@,@+sSSZ#3DHH=O4P4PR]_b#c#c  wwDc222r.) NNNNNNNNNNNri) rQrRrSrTrUrr>rjrOrYrZs@r,r^r^sE//b I 26)-26/3.2(,-1/3156:7;'+.'0  -  , &+-/ 4!5tOB3383,3,33333[33333r.r^ceZdZdZdZ dddddddd dd dd ed dzd ed dzdedzffdZeddeddddffd Z xZ S)rya? This object represents the credentials that were used to decrypt the encrypted value. All fields are optional and depend on the type of field. Args: data (:class:`telegram.DataCredentials`, optional): Credentials for encrypted Telegram Passport data. Available for "personal_details", "passport", "driver_license", "identity_card", "identity_passport" and "address" types. front_side (:class:`telegram.FileCredentials`, optional): Credentials for encrypted document's front side. Available for "passport", "driver_license", "identity_card" and "internal_passport". reverse_side (:class:`telegram.FileCredentials`, optional): Credentials for encrypted document's reverse side. Available for "driver_license" and "identity_card". selfie (:class:`telegram.FileCredentials`, optional): Credentials for encrypted selfie of the user with a document. Can be available for "passport", "driver_license", "identity_card" and "internal_passport". translation (list[:class:`telegram.FileCredentials`], optional): Credentials for an encrypted translation of the document. Available for "passport", "driver_license", "identity_card", "internal_passport", "utility_bill", "bank_statement", "rental_agreement", "passport_registration" and "temporary_registration". files (list[:class:`telegram.FileCredentials`], optional): Credentials for encrypted files. Available for "utility_bill", "bank_statement", "rental_agreement", "passport_registration" and "temporary_registration" types. Attributes: data (:class:`telegram.DataCredentials`): Optional. Credentials for encrypted Telegram Passport data. Available for "personal_details", "passport", "driver_license", "identity_card", "identity_passport" and "address" types. front_side (:class:`telegram.FileCredentials`): Optional. Credentials for encrypted document's front side. Available for "passport", "driver_license", "identity_card" and "internal_passport". reverse_side (:class:`telegram.FileCredentials`): Optional. Credentials for encrypted document's reverse side. Available for "driver_license" and "identity_card". selfie (:class:`telegram.FileCredentials`): Optional. Credentials for encrypted selfie of the user with a document. Can be available for "passport", "driver_license", "identity_card" and "internal_passport". translation (tuple[:class:`telegram.FileCredentials`]): Optional. Credentials for an encrypted translation of the document. Available for "passport", "driver_license", "identity_card", "internal_passport", "utility_bill", "bank_statement", "rental_agreement", "passport_registration" and "temporary_registration". .. versionchanged:: 20.0 |tupleclassattrs| files (tuple[:class:`telegram.FileCredentials`]): Optional. Credentials for encrypted files. Available for "utility_bill", "bank_statement", "rental_agreement", "passport_registration" and "temporary_registration" types. .. versionchanged:: 20.0 * |tupleclassattrs| * |alwaystuple| )r%files front_side reverse_sideselfie translationNr9r%zDataCredentials | Noner|zFileCredentials | Noner}r~r{FileCredentialsrr:ct|||_||_||_||_t ||_t ||_| dSr<) r=r>r%r|r}r~rr{rr@) rAr%r|r}r~r{rr:rBs r,r>zSecureValue.__init__sm J///,0 2<4@.4 2DU2K2K 8J;8W8W r.r`rarCc||}t|dt||d<t|dt||d<t|dt||d<t|dt||d<t |dt||d<t |dt||d<t ||S)rcr%r|r}r~r{rrd)rerrfDataCredentialsrrr=rOrgs r,rOzSecureValue.de_jsonst$$'(8(8/3OOV -dhh|.D.DoWZ[[\/0H0H/[^__^)$((8*<*rjrOrYrZs@r,ryryqs55nYI*./315+/48:>'+&-/  )  )*T1 /047tO* 3 38 3, 3- 3 3 3 3 3[ 3 3 3 3 3r.ryc@eZdZdZdZdddedededzffdZxZS) _CredentialsBasez3Base class for DataCredentials and FileCredentials.)r+ file_hashr$r#Nr9r$r#r:ct||5||_||_|j|_|j|_ddddS#1swxYwYdSr<)r=r> _unfrozenr$r#rr+)rAr$r#r:rBs r,r>z_CredentialsBase.__init__s J/// ^^   , ,!DI%DK#')DN"&)DN  , , , , , , , , , , , , , , , , , ,s'A,,A03A0 rQrRrSrTrUrVrr>rYrZs@r,rrsw==r@)rAr+r#r:rBs r,r>zDataCredentials.__init__3 i:NNN r.rrZs@r,rrt  IUY#s8d?r.rc@eZdZdZdZdddedededzffdZxZS) ra These credentials can be used to decrypt encrypted files from the front_side, reverse_side, selfie and files fields in EncryptedPassportData. Args: file_hash (:obj:`str`): Checksum of encrypted file secret (:obj:`str`): Secret of encrypted file Attributes: hash (:obj:`str`): Checksum of encrypted file secret (:obj:`str`): Secret of encrypted file rNr9rr#r:cxt||||dSrr)rArr#r:rBs r,r>zFileCredentials.__init__ rr.rrZs@r,rrrr.r)1r0base64rcollections.abcrtypingrrcryptography.hazmat.backendsr1cryptography.hazmat.primitives.asymmetric.paddingrr &cryptography.hazmat.primitives.ciphersr 1cryptography.hazmat.primitives.ciphers.algorithmsr ,cryptography.hazmat.primitives.ciphers.modesr %cryptography.hazmat.primitives.hashesr rrrr ImportErrortelegram._telegramobjectrtelegram._utils.argumentparsingrrrtelegram._utils.stringsrtelegram._utils.typesrtelegram.errorrtelegramrr-r4r6rMr^ryrrrrr.r,rs2( $$$$$$////////<<<<<<LLLLLLLL======EEEEEE@@@@@@PPPPPPPPPPPPO#A D$S!9D&&$ 433333bbbbbbbbbb000000******222222---`NNN h$h$h$h$h$>h$h$h$V33333.333Bx3x3x3x3x3x3x3x3v[3[3[3[3[3.[3[3[3|,,,,,~,,,,&*&s.A A$#A$