U dejdedejdejddddejd?edejd0de!d@dAd3d4edBdCZ%dS)DN)cli_root)pyhanko_exception_manager)_warn_empty_passphrase readable_file)load_certs_from_pemder)crypt)StandardSecurityHandler)PubKeyPermissions) PdfFileReader)copy_into_new_writerdecrypt encrypt_filez encrypt PDF files (AES-256 only)encrypt)helpnameinfile)typeoutfileTF)writabledir_okayz --passwordz!password to encrypt the file with)rrequiredrz --recipientzIcertificate(s) corresponding to entities that can decrypt the output file)readabler)rmultiplerrc Cs|r|rtdn|s(|s(tjdd}d}|r>tt|d}tht|dR}t|}t|}|rr| |n |j |dt|d}| |W5QRXW5QRXW5QRXdS)Nz2Specify either a password or a list of recipients.zOutput file password: prompt)Z cert_filesrb)Z owner_passwb) clickClickExceptiongetpasslistrropenr r Zencrypt_pubkeyrwrite) rrpasswordZ recipientZrecipient_certsinfrwoutfr(>/tmp/pip-unpacked-wheel-w101_d3s/pyhanko/cli/commands/crypt.pyr s$     z6decrypt PDF files (any standard PDF encryption scheme)cCsdS)Nr(r(r(r(r)r =sz--forcez1ignore access restrictions (use at your own risk))rrris_flagdefaultzdecrypt using passwordr#z!password to decrypt the file withc Cstt|d}t|}|jdkr2tdnt|jtsHtd|sXtjdd}| |}|j t j j kr|stdn|j t j jkrtdt|}t|d}||W5QRXW5QRXW5QRXdS) NrFile is not encrypted.zIFile is not encrypted with the standard (password-based) security handlerzFile password: rzjPassword specified was the user password, not the owner password. Pass --force to decrypt the file anyway.zPassword didn't match.r)rr!r security_handlerrr isinstancerrr statusr AuthStatusUSERFAILEDr r") rrr#forcer$r% auth_resultr&r'r(r(r)decrypt_with_passwordOs*         r5z#decrypt using private key (PEM/DER)Zpemderz--keyz5file containing the recipient's private key (PEM/DER))rrrz--certz5file containing the recipient's certificate (PEM/DER))rrrz --passfilerz2file containing the passphrase for the private keystdin)rrr show_defaultz --no-passz*assume the private key file is unencrypted)rrr*r+r7c Csh|dk r|}|n*|s@tjddd}|sDtd}nd}tjj|||d}t||||dS)NKey passphrase: rutf-8)Zkey_passphrase) readcloserencoderrSimpleEnvelopeKeyDecrypterload_decrypt_pubkey) rrkeycertpassfiler3Zno_pass passphrasesedkr(r(r)decrypt_with_pemderss  rE)rDc Cstt|d}t|}|jdkr0tdt|jtjsHtd| |}|j tj j kr|s|j rtj|j krtdn|j tj jkrtdt|}t|d}||W5QRXW5QRXW5QRXdS)Nrr,z:File was not encrypted with a public-key security handler.zhChange of encryption is typically not allowed with user access. Pass --force to decrypt the file anyway.zFailed to decrypt the file.r)rr!r r-rrr.rZPubKeySecurityHandlerZdecrypt_pubkeyr/r0r1Zpermission_flagsr ZALLOW_ENCRYPTION_CHANGEr2r r") rDrrr3r$r%r4r&r'r(r(r)r?s6      r?z#decrypt using private key (PKCS#12)pkcs12pfxr%z3file containing the passphrase for the PKCS#12 filecCsX|dkrtjddd}n|d}|tjj||d}t||||dS)Nr8rr9)rC) rr<readlinestripr;rr= load_pkcs12r?)rrrGrBr3rCrDr(r(r)decrypt_with_pkcs12s rK)&rrZpyhanko.cli._rootrZpyhanko.cli.runtimerZpyhanko.cli.utilsrrZ pyhanko.keysrZpyhanko.pdf_utilsrZpyhanko.pdf_utils.cryptrZ#pyhanko.pdf_utils.crypt.permissionsr Zpyhanko.pdf_utils.readerr Zpyhanko.pdf_utils.writerr __all__commandargumentPathoptionstrr groupr boolZdecrypt_force_flagr5ZFilerEr=r?rKr(r(r(r)s                 !