%hC SSKrSSKrSSKrSSKJr SSKJrJrJrJ r J r J r SSK J r SSKJr SSKJrJrJrJrJrJrJr "SS 5r"S S \5rSS KJrJr SS KJr "SS\5r"SS\5r S\!S\!S\!4Sjr"S\!S\!S\!4Sjr#S\!S\!S\!4Sjr$S\!S\!S\!4Sjr%S\!S\!S\!S\!4Sjr&S\!S\!S\!S\!4Sjr'"S$S%5r)\!"/S&Q5r*S\!S\!4S'jr+"S(S)5r,"S*S+5r-"S,S-\5r."S.S/5r/g!\(a_ "SS\5r"SS\5r S\!S\!S\!4Sjr"S\!S\!S\!4Sjr#S\!S\!S\!4S jr$S\!S\!S\!4S!jr%S\!S\!S\!S\!4S"jr&S\!S\!S\!S\!4S#jr'Nf=f)0N)IntEnum)AnyDictOptionalTupleUnioncast)logger_warningDependencyError) ArrayObjectByteStringObjectDictionaryObject PdfObject StreamObjectTextStringObjectcreate_string_objectc8\rSrSrS\S\4SjrS\S\4SjrSrg) CryptBase/datareturncU$Nselfrs J/var/www/auris/envauris/lib/python3.13/site-packages/PyPDF2/_encryption.pyencryptCryptBase.encrypt0 cU$rrrs rdecryptCryptBase.decrypt3r"r#rN)__name__ __module__ __qualname____firstlineno__bytesr r%__static_attributes__rr#rrr/s(EeEer#rc\rSrSrSrg) CryptIdentity7rN)r'r(r)r*r,rr#rr.r.7sr#r.)AESARC4)padcJ\rSrSrS\SS4SjrS\S\4SjrS\S\4SjrS rg) CryptRC4?keyrNcXlgrr6rr6s r__init__CryptRC4.__init__@Hr#rc`[R"UR5RU5$r)r1 ARC4Cipherr6r rs rr CryptRC4.encryptC ??488,44T: :r#c`[R"UR5RU5$r)r1r>r6r%rs rr%CryptRC4.decryptFr@r#r8 r'r(r)r*r+r:r r%r,rr#rr4r4?s;  $  ; ;% ; ; ;% ;r#r4cJ\rSrSrS\SS4SjrS\S\4SjrS\S\4SjrS rg) CryptAESIr6rNcXlgrr8r9s rr:CryptAES.__init__Jr<r#rc H^[[S[S5555nS[U5S-- mU[[U4Sj[T5555- n[R "UR [RU5nX#RU5-$)Nc3P# UHn[R"SS5v M g7f)rN)randomrandint.0_s r #CryptAES.encrypt..Ns KA3!7!7$&c3(># UHnTv M g7frr)rOrPps rrQrRPs#8x!Axs) r+ bytearrayrangelenr0newr6MODE_CBCr )rrivaesrVs @rr CryptAES.encryptMsxy Kr KKLBSY^#A E)#8uQx#889 9D''$((CLL"5C D)) )r#c USSnUSSn[R"UR[RU5n[ U5S-(a [ US5nUR U5n[ U5S:XaU$USUS*$)NrTr)r0rZr6r[rYr2r%)rrr\r]ds rr%CryptAES.decryptTsxcrB9D''$((CLL"5C4y2~4} D!A1v{AbE6{"r#r8rCrr#rrErEIs;  $  * *% * # #% #r#rEr6rrcL[R"U5RU5$r)r1r>r r6rs r RC4_encryptre`s#++D11r#cL[R"U5RU5$r)r1r>r%rds r RC4_decryptrhcrfr#cj[R"U[R5RU5$r)r0rZMODE_ECBr rds rAES_ECB_encryptrkf"wwsCLL)11$77r#cj[R"U[R5RU5$r)r0rZrjr%rds rAES_ECB_decryptrnirlr#r\cl[R"U[RU5RU5$r)r0rZr[r r6r\rs rAES_CBC_encryptrql$wwsCLL"-55d;;r#cl[R"U[RU5RU5$r)r0rZr[r%rps rAES_CBC_decryptrtorrr#cJ\rSrSrS\SS4SjrS\S\4SjrS\S\4SjrS rg) r4tr6rNc[[S55UlSn[S5HanX RU-X[U5--S-nURUURUsURU'URU'Mc g)Nr)listrXSrY)rr6jis rr:r;usu%*%DFA3Z]SSX%66#='+vvay$&&)$q 466!9 r#rcH[UR5n[S[[U5555nSupE[[U55H:nUS-S-nXRU-S-nX%X$sX$'X%'X"UX%-S-nXU- X6'M< [ [ U55$)Nc3&# UHnSv M g7frNrrNs rrQ#CryptRC4.encrypt..~s3"2Qq"2)rrr rx)ryrzrXrYr+rW)rrrzoutr|r{kxs rr r?|sTVV A3%D "233CDA3t9%UcM1X$T14 adtad{c)*1 & 3( (r#c$URU5$r)r rs rr%rBs<<% %r#)rzrCrr#rr4r4ts; < <$ < ) )% ) & &% &r#cJ\rSrSrS\SS4SjrS\S\4SjrS\S\4SjrS rg) rEr6rNcgrrr9s rr:rHs r#rc[S5eNz*PyCryptodome is required for AES algorithmr rs rr r^!"NO Or#c[S5err rs rr%rbrr#rrCrr#rrErEsA  $  P P% P P P% Pr#c6[U5RU5$r)r4r rds rrere}$$T**r#c6[U5RU5$r)r4r%rds rrhrhrr#c[S5err rds rrkrkJKKr#c[S5err rds rrnrnrr#c[S5err rps rrqrqrr#c[S5err rps rrtrtrr#cR\rSrSrS\S\S\SS4SjrS\S\4S jrS\S\4S jrS r g) CryptFilterstmCryptstrCryptefCryptrNc(XlX lX0lgr)rrr)rrrrs rr:CryptFilter.__init__s!   r#objc[$r)NotImplemented)rrs rencrypt_objectCryptFilter.encrypt_objectsr#cD[U[[45(a2URR UR 5n[ U5nU$[U[5(a,URR UR5Ul U$[U[5(a7[UR55Hup4URU5X'M U$[U[5(a0[[!U55HnURX5X'M U$r) isinstancerrrr%original_bytesrrr_datarryitemsdecrypt_objectrrXrY)rrrdictkeyvaluer|s rrCryptFilter.decrypt_objects c,.>? @ @==((););r rSizcU[-SS$)N )_PADDING)rs r_paddingrs 8OSb !!r#c$\rSrSr\S\S\S\S\S\S\S\S \4S j5r\S \S\S\S \4S j5r \S \S\S\S \4Sj5r \S\S\S\S \4Sj5r \S\S\S\S\S\S\S\S\S \4Sj5r \S \S\S\S\S\S\S\S\S \4Sj5r Srg)AlgV4passwordrevkey_sizeo_entryP id1_entrymetadata_encryptedrc[U5n[R"U5nURU5 UR[R "SU55 URU5 US:aUSLaURS5 UR 5n US-n US:a9[S5H*n [R"U SU 5R 5n M, U SU $) u Algorithm 2: Computing an encryption key. a) Pad or truncate the password string to exactly 32 bytes. If the password string is more than 32 bytes long, use only its first 32 bytes; if it is less than 32 bytes long, pad it by appending the required number of additional bytes from the beginning of the following padding string: < 28 BF 4E 5E 4E 75 8A 41 64 00 4E 56 FF FA 01 08 2E 2E 00 B6 D0 68 3E 80 2F 0C A9 FE 64 53 69 7A > That is, if the password string is n bytes long, append the first 32 - n bytes of the padding string to the end of the password string. If the password string is empty (zero-length), meaning there is no user password, substitute the entire padding string in its place. b) Initialize the MD5 hash function and pass the result of step (a) as input to this function. c) Pass the value of the encryption dictionary’s O entry to the MD5 hash function. ("Algorithm 3: Computing the encryption dictionary’s O (owner password) value" shows how the O value is computed.) d) Convert the integer value of the P entry to a 32-bit unsigned binary number and pass these bytes to the MD5 hash function, low-order byte first. e) Pass the first element of the file’s file identifier array (the value of the ID entry in the document’s trailer dictionary; see Table 15) to the MD5 hash function. f) (Security handlers of revision 4 or greater) If document metadata is not being encrypted, pass 4 bytes with the value 0xFFFFFFFF to the MD5 hash function. g) Finish the hash. h) (Security handlers of revision 3 or greater) Do the following 50 times: Take the output from the previous MD5 hash and pass the first n bytes of the output as input into a new MD5 hash, where n is the number of bytes of the encryption key as defined by the value of the encryption dictionary’s Length entry. i) Set the encryption key to the first n bytes of the output from the final MD5 hash, where n shall always be 5 for security handlers of revision 2 but, for security handlers of revision 3 or greater, shall depend on the value of the encryption dictionary’s Length entry. # UH oT- v M g7frrrOrr|s rrQ(AlgV4.compute_O_value..d%=W!eW)rrerXr+rW)rrrrrc4_encr6r|s @rcompute_O_valueAlgV4.compute_O_value]sV ] #g) !81b\I%=W%==>%c3"r#r6cL^US::a[U[5nU$[R"[5nUR U5 [XR 55n[ SS5H,m[[U4SjU555n[Xe5nM. [U5$)u  Algorithm 4: Computing the encryption dictionary’s U (user password) value. (Security handlers of revision 2) a) Create an encryption key based on the user password string, as described in "Algorithm 2: Computing an encryption key". b) Encrypt the 32-byte padding string shown in step (a) of "Algorithm 2: Computing an encryption key", using an RC4 encryption function with the encryption key from the preceding step. c) Store the result of step (b) as the value of the U entry in the encryption dictionary. r rc3,># UH oT- v M g7frrrs rrQ(AlgV4.compute_U_value..s%9S!eSr) rerrrrrrXr+rWr)r6rrrrrrr|s @rcompute_U_valueAlgV4.compute_U_valuehs !8X.EL 2X& i c==?3q"AI%9S%99:G!'3G  r#u_entryc [RXX#XVU5n[RXU5n US:a U SSn USSnX:waSnU$)u Algorithm 6: Authenticating the user password. a) Perform all but the last step of "Algorithm 4: Computing the encryption dictionary’s U (user password) value (Security handlers of revision 2)" or "Algorithm 5: Computing the encryption dictionary’s U (user password) value (Security handlers of revision 3 or greater)" using the supplied password string. b) If the result of step (a) is equal to the value of the encryption dictionary’s U entry (comparing on the first 16 bytes in the case of security handlers of revision 3 or greater), the password supplied is the correct user password. The key obtained in step (a) (that is, in the first step of "Algorithm 4: Computing the encryption dictionary’s U (user password) value (Security handlers of revision 2)" or "Algorithm 5: Computing the encryption dictionary’s U (user password) value (Security handlers of revision 3 or greater)") shall be used to decrypt the document. rNrTr#)rrr) rrrrrrrrr6u_values rverify_user_passwordAlgV4.verify_user_passwords_0 1AS '')< !8crlGcrlG  C r#c  ^ [RXU5nUS::a [X5n O?Un [SSS5H,m [ [ U 4SjU555n [X5n M. [R U UUUUUUU5$)u Algorithm 7: Authenticating the owner password. a) Compute an encryption key from the supplied password string, as described in steps (a) to (d) of "Algorithm 3: Computing the encryption dictionary’s O (owner password) value". b) (Security handlers of revision 2 only) Decrypt the value of the encryption dictionary’s O entry, using an RC4 encryption function with the encryption key computed in step (a). (Security handlers of revision 3 or greater) Do the following 20 times: Decrypt the value of the encryption dictionary’s O entry (first iteration) or the output from the previous iteration (all subsequent iterations), using an RC4 encryption function with a different encryption key at each iteration. The key shall be generated by taking the original key (obtained in step (a)) and performing an XOR (exclusive or) operation between each byte of the key and the single-byte value of the iteration counter (from 19 to 0). c) The result of step (b) purports to be the user password. Authenticate this user password using "Algorithm 6: Authenticating the user password". If it is correct, the password supplied is the correct owner password. rr`c3,># UH oT- v M g7frrrs rrQ.AlgV4.verify_owner_password..rr)rrrhrXr+rWr) rrrrrrrrrrr6r|s @rverify_owner_passwordAlgV4.verify_owner_passwords4++NJ !8'9M#M2r2&I%=W%==> +C ? '))         r#rN)r'r(r)r* staticmethodr+intboolrrrrrrr,rr#rrrsA&A& A&A& A&  A&  A&!A& A&A&F(E((s(u((Tu351!U1!1!1!51!1!f           !    D+ + + +  +  +  + + !+  + + r#rcj\rSrSr\S\S\S\S\S\S\4 Sj5r\S\S\S\S \S\4 S j5r\S\S\S \S \S\4 S j5r \S\S\S\S\ S\ 4 Sj5r \S\S\S\S\S\ S\ \ \ 44 Sj5r\S\S\S\\\44Sj5r\S\S\S\S\\\44Sj5r\S\S\S\ S\4Sj5rSrg)AlgV5iRro_valueoe_valuerrcUSSn[RXUSSUSS5USS:wag[S[S555n[RXUSSUSS5n[ XeU5nU$) u Algorithm 3.2a Computing an encryption key. To understand the algorithm below, it is necessary to treat the O and U strings in the Encrypt dictionary as made up of three sections. The first 32 bytes are a hash value (explained below). The next 8 bytes are called the Validation Salt. The final 8 bytes are called the Key Salt. 1. The password string is generated from Unicode input by processing the input string with the SASLprep (IETF RFC 4013) profile of stringprep (IETF RFC 3454), and then converting to a UTF-8 representation. 2. Truncate the UTF-8 representation to 127 bytes if it is longer than 127 bytes. 3. Test the password against the owner key by computing the SHA-256 hash of the UTF-8 password concatenated with the 8 bytes of owner Validation Salt, concatenated with the 48-byte U string. If the 32-byte result matches the first 32 bytes of the O string, this is the owner password. Compute an intermediate owner key by computing the SHA-256 hash of the UTF-8 password concatenated with the 8 bytes of owner Key Salt, concatenated with the 48-byte U string. The 32-byte result is the key used to decrypt the 32-byte OE string using AES-256 in CBC mode with no padding and an initialization vector of zero. The 32-byte result is the file encryption key. 4. Test the password against the user key by computing the SHA-256 hash of the UTF-8 password concatenated with the 8 bytes of user Validation Salt. If the 32 byte result matches the first 32 bytes of the U string, this is the user password. Compute an intermediate user key by computing the SHA-256 hash of the UTF-8 password concatenated with the 8 bytes of user Key Salt. The 32-byte result is the key used to decrypt the 32-byte UE string using AES-256 in CBC mode with no padding and an initialization vector of zero. The 32-byte result is the file encryption key. 5. Decrypt the 16-byte Perms string using AES-256 in ECB mode with an initialization vector of zero and the file encryption key as the key. Verify that bytes 9-11 of the result are the characters ‘a’, ‘d’, ‘b’. Bytes 0-3 of the decrypted Perms entry, treated as a little-endian integer, are the user permissions. They should match the value in the P key. Nrr0r#c3&# UHnSv M g7frrrNs rrQ.AlgV5.verify_owner_password..(i1irrTrcalculate_hashr+rXrt)r rr r rr\tmp_keyr6s rrAlgV5.verify_owner_passwordsBDS>  gbngcrl Ks|  (eBi( (&&qGBrNGCRLQg84 r#ue_valuecUSSn[RXUSSS5USS:wag[S[S555n[RXUSSS5n[ XTU5$) z"See :func:`verify_owner_password`.Nr rrr#c3&# UHnSv M g7frrrNs rrQ-AlgV5.verify_user_password..#rrrTrr)r rrrr\rs rrAlgV5.verify_user_passwordsp DS>   WR^S AWSb\ Q (eBi( (&&qGBrNCHwH55r#saltudatac[R"X-U-5R5nUS:aU$SnUS- nX-U-n[USSUSSUS-5n[R[R[R 4[ USS5S-nU"U5R5nUS:a USUS- ::aOMUSS$) Nrr rTr@rr`)rsha256rrqsha384sha512sum) r rrrKcountK1Ehash_fns rrAlgV5.calculate_hash's NN8?U2 3 : : < q5H QJE%B#2"R"r':A!CR&kAo G  !!#A{qu 2"v r#r6permsrVrc|U(aSOSn[R"SU5S-U-S-n[X5nXVSS:H$)zBSee :func:`verify_owner_password` and :func:`compute_Perms_value`.TFrradbNr)rrrn)r6r*rVrb8p1p2s r verify_permsAlgV5.verify_perms<sE (TT [[q !$7 7" .f Iy!V--a55yrSrTNrc3&# UHnSv M g7frrrNs rrQrBlrrr+rXrr rrq) rr6 random_bytesval_saltkey_saltrrr\rs rrAlgV5.compute_U_valueYsIuRyII ##..!45<<>IHT..!45<<> (eBi( ("74  r#cP[S[S555nUSSnUSSn[R"X-U-5R 5U-U-n[R"X-U-5R 5n[S[S555n[ XxU5n Xi4$)u Algorithm 3.9 Computing the encryption dictionary’s O (owner password) and OE (owner encryption key) values. 1. Generate 16 random bytes of data using a strong random number generator. The first 8 bytes are the Owner Validation Salt. The second 8 bytes are the Owner Key Salt. Compute the 32-byte SHA-256 hash of the password concatenated with the Owner Validation Salt and then concatenated with the 48-byte U string as generated in Algorithm 3.8. The 48-byte string consisting of the 32-byte hash followed by the Owner Validation Salt followed by the Owner Key Salt is stored as the O key. 2. Compute the 32-byte SHA-256 hash of the password concatenated with the Owner Key Salt and then concatenated with the 48-byte U string as generated in Algorithm 3.8. Using this hash as the key, encrypt the file encryption key using AES-256 in CBC mode with no padding and an initialization vector of zero. The resulting 32-byte string is stored as the OE key. c3P# UHn[R"SS5v M g7fr?r@rNs rrQ(AlgV5.compute_O_value..rCrSrTNrc3&# UHnSv M g7frrrNs rrQrLrrrE) rr6rrFrGrHr rr\r s rrAlgV5.compute_O_valueps"IuRyII ## NN8.8 9 @ @ BX MPX X ..!4w!>?FFH (eBi( ("74  r#cU(aSOSn[S[S555n[R"SU5S-U-S-U-n[ X5nU$)u. Algorithm 3.10 Computing the encryption dictionary’s Perms (permissions) value 1. Extend the permissions (contents of the P integer) to 64 bits by setting the upper 32 bits to all 1’s. (This allows for future extension without changing the format.) 2. Record the 8 bytes of permission in the bytes 0-7 of the block, low order byte first. 3. Set byte 8 to the ASCII value ' T ' or ' F ' according to the EncryptMetadata Boolean. 4. Set bytes 9-11 to the ASCII characters ' a ', ' d ', ' b '. 5. Set bytes 12-15 to 4 bytes of random data, which will be ignored. 6. Encrypt the 16-byte block using AES-256 in ECB mode with an initialization vector of zero, using the file encryption key as the key. The result (16 bytes) is stored as the Perms string, and checked for validity when the file is opened. r,r-c3P# UHn[R"SS5v M g7fr?r@rNs rrQ,AlgV5.compute_Perms_value..s >X6##As++XrSrrrr.)r+rXrrrk)r6rVrr/rrrr*s rr:AlgV5.compute_Perms_valuesU(TT >U1X> >{{4#&99B>G"L* r#rN)r'r(r)r*rrr+rrrrr2rrr;rrrr:r,rr#rrrs) ))*/);@)KP) ))V 6  6 6*/ 6;@ 6  6 6#eEe(  %(>B        !  c3h   $!%!e!eUl8K!!,!!#!.3! ue| !!83DUr#rc \rSrSrSrSrSrSrg) PasswordTypeirr rrN)r'r(r)r* NOT_DECRYPTED USER_PASSWORDOWNER_PASSWORDr,rr#rrUrUsMMNr#rUc\rSrSrS\S\S\S\S\S\S\S S 4S jrS \ 4S jr S \ S\S\S \ 4Sjr \ S\S\S\S\S \4 Sj5rS\\\4S \4SjrS\S \\\44SjrS\S \\\44Sjr\ S\S\S S4Sj5rSrg ) EncryptionialgValgRentryfirst_id_entryStmFStrFEFFrNcXlX lX0lURSS5UlX@lXPlX`lXpl[RUl SUl g)Nz/Lengthr) r[r\r]getrrr_r`rarUrV_password_type_key)rr[r\r]r^r_r`ras rr:Encryption.__init__sP    )R0 '  +88%) r#c<UR[R:g$r)rdrUrV)rs r is_decryptedEncryption.is_decrypteds""l&@&@@@r#ridnum generationc[R"SU5SSn[R"SU5SSnUR(deURnURS:XaSOURS-nUSUU-U-n[ R "U5n U R5S[US-S5n U RS 5 U R5S[US-S5n Un URURXU 5n URURXU 5nURURXU 5n[XU5nURU5$) u Algorithm 1: Encryption of data using the RC4 or AES algorithms. a) Obtain the object number and generation number from the object identifier of the string or stream to be encrypted (see 7.3.10, "Indirect Objects"). If the string is a direct object, use the identifier of the indirect object containing it. b) For all strings and streams without crypt filter specifier; treating the object number and generation number as binary integers, extend the original n-byte encryption key to n + 5 bytes by appending the low-order 3 bytes of the object number and the low-order 2 bytes of the generation number in that order, low-order byte first. (n is 5 unless the value of V in the encryption dictionary is greater than 1, in which case n is the value of Length divided by 8.) If using the AES algorithm, extend the encryption key an additional 4 bytes by adding the value “sAlT”, which corresponds to the hexadecimal values 0x73, 0x41, 0x6C, 0x54. (This addition is done for backward compatibility and is not intended to provide additional security.) c) Initialize the MD5 hash function and pass the result of step (b) as input to this function. d) Use the first (n + 5) bytes, up to a maximum of 16, of the output from the MD5 hash as the key for the RC4 or AES symmetric key algorithms, along with the string or stream data to be encrypted. If using the AES algorithm, the Cipher Block Chaining (CBC) mode, which requires an initialization vector, is used. The block size parameter is set to 16 bytes, and the initialization vector is a 16-byte random number that is stored as the first 16 bytes of the encrypted stream or string. Algorithm 3.1a Encryption of data using the AES algorithm 1. Use the 32-byte file encryption key for the AES-256 symmetric key algorithm, along with the string or stream data to be encrypted. Use the AES algorithm in Cipher Block Chaining (CBC) mode, which requires an initialization vector. The block size parameter is set to 16 bytes, and the initialization vector is a 16-byte random number that is stored as the first 16 bytes of the encrypted stream or string. The output is the encrypted data to be stored in the PDF file. zE!!#aDD :H Ewr#encryption_entryc HURS5nUS:wa [S5eSU;a [S5eSnSnSnURSS5nUS ;a[S US 35eUS :aUS nURSS5nURSS5nURSU5nUS:waXsSnUS:waXtSnUS:waXuSnSnX8;a [S5eXH;a[SUS35eXX;a[SUS35e[[US5n [ XiXX4U5$)Nz/Filterz /Standardz1only Standard PDF encryption handler is availablez /SubFilterz/SubFilter NOT supported/V2z/Vr)r rrrrmz Encryption V=z NOT supportedrz/CFz/StmFr~z/StrFz/EFFz/CFM)r~rr}r|z!StmF Method {StmF} NOT supported!z StrF Method z NOT supported!z EFF Method r)rcNotImplementedErrorr rrZ) rr^filterr_r`raVfiltersallowed_methodsr s rreadEncryption.readWsp!%%i0 [ %C  + +%&@A A  q ) O #% aS&GH H 6&u-G#''=D#''=D"&&vt4C{"}V,{"}V,k!l6*FO*)*MNN*)Lo*NOO))KuO*LMM &t, -! 0$cRRr#) rar_r`rerdr\r[r]rr)r'r(r)r*rrr+rr:rrhrrrrrorrUrrrrrr,rr#rrZrZsG*** *  *  *** *2AdA3&)3&C3&S3&Y3&j % %# %16 %DI %  % % uUCZ0 \ #/%#/E%2E,F#/J%E%2E,F6'S/'S'S<'S'Sr#rZ)0rrLrenumrtypingrrrrrr _utilsr errorsr genericrrrrrrrrr. Crypto.Cipherr0r1Crypto.Util.Paddingr2r4rEr+rerhrkrnrqrt ImportErrorrrrrrrUrZrr#rrsb8 ::"# I jL'';9;#9#.22e2222e228U8%8E88U8%8E8