FM / primitives

/usr/share/doc/python3-cryptography/docs/hazmat/primitives/

/usr/share/doc/python3-cryptography/docs/hazmat/primitives

Name	Size	Mode	Actions
asymmetric/	-	0755	rm
mac/	-	0755	rm
aead.rst	10322	0644	edit dl rm
constant-time.rst	1592	0644	edit dl rm
cryptographic-hashes.rst	9153	0644	edit dl rm
index.rst	246	0644	edit dl rm
key-derivation-functions.rst	39929	0644	edit dl rm
keywrap.rst	3116	0644	edit dl rm
padding.rst	4670	0644	edit dl rm
symmetric-encryption.rst	31500	0644	edit dl rm
twofactor.rst	10562	0644	edit dl rm

Edit: /usr/share/doc/python3-cryptography/docs/hazmat/primitives/keywrap.rst (3116B)

.. hazmat::

.. module:: cryptography.hazmat.primitives.keywrap

Key wrapping
============

Key wrapping is a cryptographic construct that uses symmetric encryption to
encapsulate key material. Key wrapping algorithms are occasionally utilized
to protect keys at rest or transmit them over insecure networks. Many of the
protections offered by key wrapping are also offered by using authenticated
:doc:`symmetric encryption </hazmat/primitives/symmetric-encryption>`.

.. function:: aes_key_wrap(wrapping_key, key_to_wrap, backend=None)

.. versionadded:: 1.1

This function performs AES key wrap (without padding) as specified in
    :rfc:`3394`.

:param bytes wrapping_key: The wrapping key.

:param bytes key_to_wrap: The key to wrap.

:param backend: An optional
        :class:`~cryptography.hazmat.backends.interfaces.CipherBackend`
        instance that supports
        :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES`.

:return bytes: The wrapped key as bytes.

.. function:: aes_key_unwrap(wrapping_key, wrapped_key, backend=None)

.. versionadded:: 1.1

This function performs AES key unwrap (without padding) as specified in
    :rfc:`3394`.

:param bytes wrapping_key: The wrapping key.

:param bytes wrapped_key: The wrapped key.

:return bytes: The unwrapped key as bytes.

:raises cryptography.hazmat.primitives.keywrap.InvalidUnwrap: This is
        raised if the key is not successfully unwrapped.

.. function:: aes_key_wrap_with_padding(wrapping_key, key_to_wrap, backend=None)

.. versionadded:: 2.2

This function performs AES key wrap with padding as specified in
    :rfc:`5649`.

:param bytes wrapping_key: The wrapping key.

:param bytes key_to_wrap: The key to wrap.

:return bytes: The wrapped key as bytes.

.. function:: aes_key_unwrap_with_padding(wrapping_key, wrapped_key, backend=None)

.. versionadded:: 2.2

This function performs AES key unwrap with padding as specified in
    :rfc:`5649`.

:param bytes wrapping_key: The wrapping key.

:param bytes wrapped_key: The wrapped key.

:return bytes: The unwrapped key as bytes.

:raises cryptography.hazmat.primitives.keywrap.InvalidUnwrap: This is
        raised if the key is not successfully unwrapped.

Exceptions
~~~~~~~~~~

.. class:: InvalidUnwrap

This is raised when a wrapped key fails to unwrap. It can be caused by a
    corrupted or invalid wrapped key or an invalid wrapping key.

.. hazmat:: .. module:: cryptography.hazmat.primitives.keywrap Key wrapping ============ Key wrapping is a cryptographic construct that uses symmetric encryption to encapsulate key material. Key wrapping algorithms are occasionally utilized to protect keys at rest or transmit them over insecure networks. Many of the protections offered by key wrapping are also offered by using authenticated :doc:`symmetric encryption `. .. function:: aes_key_wrap(wrapping_key, key_to_wrap, backend=None) .. versionadded:: 1.1 This function performs AES key wrap (without padding) as specified in :rfc:`3394`. :param bytes wrapping_key: The wrapping key. :param bytes key_to_wrap: The key to wrap. :param backend: An optional :class:`~cryptography.hazmat.backends.interfaces.CipherBackend` instance that supports :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES`. :return bytes: The wrapped key as bytes. .. function:: aes_key_unwrap(wrapping_key, wrapped_key, backend=None) .. versionadded:: 1.1 This function performs AES key unwrap (without padding) as specified in :rfc:`3394`. :param bytes wrapping_key: The wrapping key. :param bytes wrapped_key: The wrapped key. :param backend: An optional :class:`~cryptography.hazmat.backends.interfaces.CipherBackend` instance that supports :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES`. :return bytes: The unwrapped key as bytes. :raises cryptography.hazmat.primitives.keywrap.InvalidUnwrap: This is raised if the key is not successfully unwrapped. .. function:: aes_key_wrap_with_padding(wrapping_key, key_to_wrap, backend=None) .. versionadded:: 2.2 This function performs AES key wrap with padding as specified in :rfc:`5649`. :param bytes wrapping_key: The wrapping key. :param bytes key_to_wrap: The key to wrap. :param backend: An optional :class:`~cryptography.hazmat.backends.interfaces.CipherBackend` instance that supports :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES`. :return bytes: The wrapped key as bytes. .. function:: aes_key_unwrap_with_padding(wrapping_key, wrapped_key, backend=None) .. versionadded:: 2.2 This function performs AES key unwrap with padding as specified in :rfc:`5649`. :param bytes wrapping_key: The wrapping key. :param bytes wrapped_key: The wrapped key. :param backend: An optional :class:`~cryptography.hazmat.backends.interfaces.CipherBackend` instance that supports :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES`. :return bytes: The unwrapped key as bytes. :raises cryptography.hazmat.primitives.keywrap.InvalidUnwrap: This is raised if the key is not successfully unwrapped. Exceptions ~~~~~~~~~~ .. class:: InvalidUnwrap This is raised when a wrapped key fails to unwrap. It can be caused by a corrupted or invalid wrapped key or an invalid wrapping key.