mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-07-10 07:04:52 +00:00
63 lines
1.9 KiB
Python
63 lines
1.9 KiB
Python
from django.conf import settings
|
|
from django.core.exceptions import ImproperlyConfigured
|
|
from common.sdk.gm import piico
|
|
|
|
from .common import *
|
|
from .session import *
|
|
from .rsa_aes import *
|
|
from .gm import *
|
|
|
|
|
|
class Crypto:
|
|
cryptor_map = {
|
|
'aes_ecb': aes_ecb_crypto,
|
|
'aes_gcm': aes_crypto,
|
|
'aes': aes_crypto,
|
|
'gm_sm4_ecb': gm_sm4_ecb_crypto,
|
|
'gm': gm_sm4_ecb_crypto,
|
|
}
|
|
cryptos = []
|
|
|
|
def __init__(self):
|
|
crypt_algo = settings.SECURITY_DATA_CRYPTO_ALGO
|
|
if not crypt_algo:
|
|
if settings.GMSSL_ENABLED:
|
|
if settings.PIICO_DEVICE_ENABLE:
|
|
piico_driver_path = settings.PIICO_DRIVER_PATH if settings.PIICO_DRIVER_PATH \
|
|
else "./lib/libpiico_ccmu.so"
|
|
device = piico.open_piico_device(piico_driver_path)
|
|
self.cryptor_map["piico_gm"] = get_piico_gm_sm4_ecb_crypto(device)
|
|
crypt_algo = 'piico_gm'
|
|
else:
|
|
crypt_algo = 'gm'
|
|
else:
|
|
crypt_algo = 'aes'
|
|
cryptor = self.cryptor_map.get(crypt_algo, None)
|
|
if cryptor is None:
|
|
raise ImproperlyConfigured(
|
|
f'Crypto method not supported {settings.SECURITY_DATA_CRYPTO_ALGO}'
|
|
)
|
|
others = set(self.cryptor_map.values()) - {cryptor}
|
|
self.cryptos = [cryptor, *others]
|
|
|
|
@property
|
|
def encryptor(self):
|
|
return self.cryptos[0]
|
|
|
|
def encrypt(self, text):
|
|
if text is None:
|
|
return text
|
|
return self.encryptor.encrypt(text)
|
|
|
|
def decrypt(self, text):
|
|
for cryptor in self.cryptos:
|
|
try:
|
|
origin_text = cryptor.decrypt(text)
|
|
if origin_text:
|
|
# 有时不同算法解密不报错，但是返回空字符串
|
|
return origin_text
|
|
except Exception:
|
|
continue
|
|
|
|
|
|
crypto = Crypto() |