authorityKeyIdentifier: keyid:71:10:32:AE:74:71:7B:54:8E:F1:D6:AB:62:54:AE:FC:3E:C0:BB:16
E-3023531445, STREET=Nordufer 20, OID.2.5.4.17=13353, L=Berlin, CN=Robert Koch-Institut, OU=Elektronischer Impfnachweis, O=Robert Koch-Institut, C=DE
-----BEGIN EC PRIVATE KEY----- MHcCAQEEIICXhlDKAkd37q3LEtYmjoCuaIvne9/FzV0BClH2X52AoAoGCCqGSM49 AwEHoUQDQgAEL8eW9/mJUjRX0G6+dA2M9DHquAx5Q07wHFdZ0vM5WzkbOMNea2X2 iirLZ+RmhRAuDMZ6SN7Gj5uRrOo89+7KFA== -----END EC PRIVATE KEY-----
-----BEGIN PUBLIC KEY----- MFYwEAYHKoZIzj0CAQYFK4EEAAoDQgAEj5vmeQB6NRCKOcML6c g2XJp8CNjs+9O9 JBZxubYx03aUMDNn8mEedex2kY5qtm3ie/bHrsrMtbI3QQnkX1nNAA== -----END PUBLIC KEY-----
{"kid":"dhSzPDr4G2M=","publicKey":"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsLa/zRhSxxsmrPE/RwPNKXGblvI4JrdqfPNYpuPn3TpkExb/vod11MuW7BismmErZcJC+oWuItW1UH+wcXHJcQ=="},
{
"kty" : "EC",
"x5t#S256" : "dhSzPDr4G2ONgZYpJtfqI5rADFSfd---DA8BZR7VAZQ",
"use" : "sig",
"crv" : "P-256",
"kid" : "dhSzPDr4G2M=",
"x5c" : [ "MIIHUTCCBQmgAwIBAgIQaGDRZfTGbC39OIGT8bGzTDA9Bgkqh kiG9w0BAQowMKANMAsGCWCGSAFlAwQCA6EaMBgGCSqGSIb3DQE BCDALBglghkgBZQMEAgOiAwIBQDBbMQswCQYDVQQGEwJERTEVM BMGA1UEChMMRC1UcnVzdCBHbWJIMRwwGgYDVQQDExNELVRSVVN UIENBIDItMiAyMDE5MRcwFQYDVQRhEw5OVFJERS1IUkI3NDM0N jAeFw0yMTA1MDcxNDEzMzFaFw0yMzA1MTExNDEzMzFaMIHrMQs wCQYDVQQGEwJERTEdMBsGA1UEChMUUm9iZXJ0IEtvY2gtSW5zd Gl0dXQxJDAiBgNVBAsTG0VsZWt0cm9uaXNjaGVyIEltcGZuYWN od2VpczEdMBsGA1UEAxMUUm9iZXJ0IEtvY2gtSW5zdGl0dXQxD zANBgNVBAcTBkJlcmxpbjEOMAwGA1UEEQwFMTMzNTMxFDASBgN VBAkTC05vcmR1ZmVyIDIwMRkwFwYDVQRhExBEVDpERS0zMDIzN TMxNDQ1MRUwEwYDVQQFEwxDU00wMjYxNjQxNjgxDzANBgNVBAg TBkJlcmxpbjBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABLC2v 80YUscbJqzxP0cDzSlxm5byOCa3anzzWKbj5906ZBMW/76HddTLluwYrJphK2XCQvqFriLVtVB/sHFxyXGjggLpMIIC5TAfBgNVHSMEGDAWgBRxEDKudHF7VI7x1q tiVK78PsC7FjAtBggrBgEFBQcBAwQhMB8wCAYGBACORgEBMBMG BgQAjkYBBjAJBgcEAI5GAQYCMIH+BggrBgEFBQcBAQSB8TCB7j A3BggrBgEFBQcwAYYraHR0cDovL2QtdHJ1c3QtY2EtMi0yLTIw MTkub2NzcC5kLXRydXN0Lm5ldDBCBggrBgEFBQcwAoY2aHR0cD ovL3d3dy5kLXRydXN0Lm5ldC9jZ2ktYmluL0QtVFJVU1RfQ0Ff Mi0yXzIwMTkuY3J0MG8GCCsGAQUFBzAChmNsZGFwOi8vZGlyZW N0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBDQSUyMDIt MiUyMDIwMTksTz1ELVRydXN0JTIwR21iSCxDPURFP2NBQ2VydG lmaWNhdGU/YmFzZT8wcAYDVR0gBGkwZzAJBgcEAIvsQAEBMFoGCysGAQQBpT QCgRYFMEswSQYIKwYBBQUHAgEWPWh0dHA6Ly93d3cuZC10cnVz dC5uZXQvaW50ZXJuZXQvZmlsZXMvRC1UUlVTVF9DU01fUEtJX0 NQUy5wZGYwgfAGA1UdHwSB6DCB5TCB4qCB36CB3IZpbGRhcDov L2RpcmVjdG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwQ0 ElMjAyLTIlMjAyMDE5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9j ZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0hjJodHRwOi8vY3JsLm QtdHJ1c3QubmV0L2NybC9kLXRydXN0X2NhXzItMl8yMDE5LmNy bIY7aHR0cDovL2Nkbi5kLXRydXN0LWNsb3VkY3JsLm5ldC9jcm wvZC10cnVzdF9jYV8yLTJfMjAxOS5jcmwwHQYDVR0OBBYEFOD+ kCm/8vMqv2+fE52qq6SyHE5iMA4GA1UdDwEB/wQEAwIGwDA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCA6E aMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgOiAwIBQAOCAgEAQ QNbHHkUH2QW8zZWFzaUTJy+OwzoXYxyFt+sAOcYoeEv9057PPy JNDqZSbJV0Mt1jFHaukPrhFjlmnFd5BLGmljCL82d2hQWWzPKE 1yYe/dim1pU3CVlbhWq49VL9pPeSXRfBeMue3EyeKpGjX68i84XAUcl BeuHRt6OGIlRpX+8LMj3d7FPtU5YXOTixkIzQf/D+LeIC9kTkKChBEP30t+MXb2qc/XSPHYxr4Ommq68PY+63YpMxLFCTXgiPnpu4SVGI92EZyfiGOGf PHRWMYwhsYmvei4N28CFMTT3a0dRx5qPFXdAhNqZMI/bUd2m2BlyNE5kUeQAWi6LH+cmnbWP37S6CgDInh4wg68CO4XRt N7GmdHQ3msQ/v1hg3A4yCbA+iOf+E0ktuVcFdz5qTNQE906+gf9A3aUB+Iwzo6 l+Raweiw7J4H5nrzBRV2VbXO1JzKke79h3S1F4DDBfJrG8nojt GsXWlaKl3LAIr0jmqn3cRz4VJ6wa2W5/9TNXInqjlbCcqaTC8p9pApicfwYqI02ROeaL/ubAp+5Ytbms2Xbc07JUZuEN1bMeHT87DWOSr1aB+f15KxpDCjU IlkrFlzkDyvnCabSQGrSH+Zhgs4JwOL33X6n+MtRZ1BOFwW//PP03obm86XUQtO5Ml48mhiH1ngbkHolP8BLnC0=" ],
"x" : "sLa_zRhSxxsmrPE_RwPNKXGblvI4JrdqfPNYpuPn3To",
"y" : "ZBMW_76HddTLluwYrJphK2XCQvqFriLVtVB_sHFxyXE"
}
{
"certificateType": "DSC",
"country": "DE",
"kid": "dhSzPDr4G2M=",
"rawData": "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",
"signature": "MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCAMIIFTjCCBDagAwIBAgIQeQJYn+2D5dqB2rpatIzUezANBgkqhkiG9w0BAQsFADBQMQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSowKAYDVQQDDCFELVRSVVNUIExpbWl0ZWQgQmFzaWMgQ0EgMS0yIDIwMTkwHhcNMjEwNTIzMTk1ODI3WhcNMjExMTIyMjA1ODI3WjCBizELMAkGA1UEBhMCREUxFDASBgNVBAoTC3ViaXJjaCBHbWJIMSEwHwYDVQQDExh1cGxvYWQuZGUuZHNjLnViaXJjaC5jb20xDjAMBgNVBAcTBUtvZWxuMRUwEwYDVQQFEwxDU00wMjYyOTQyNjUxHDAaBgNVBAgTE05vcmRyaGVpbi1XZXN0ZmFsZW4wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAS7vWbF4ktHYoVMgQGN5PpIDUxvyTJ5NJ3m4wmceQzgwmSIuX2y/0N1H/tcBhFEbzKhTZs3p6bSilCB4fD230fRo4ICsTCCAq0wEwYDVR0lBAwwCgYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0A0+3Aiv40EIZuDc8vqZai3fGLkwggEvBggrBgEFBQcBAQSCASEwggEdMEUGCCsGAQUFBzABhjlodHRwOi8vZC10cnVzdC1saW1pdGVkLWJhc2ljLWNhLTEtMi0yMDE5Lm9jc3AuZC10cnVzdC5uZXQwUAYIKwYBBQUHMAKGRGh0dHA6Ly93d3cuZC10cnVzdC5uZXQvY2dpLWJpbi9ELVRSVVNUX0xpbWl0ZWRfQmFzaWNfQ0FfMS0yXzIwMTkuY3J0MIGBBggrBgEFBQcwAoZ1bGRhcDovL2RpcmVjdG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwTGltaXRlZCUyMEJhc2ljJTIwQ0ElMjAxLTIlMjAyMDE5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jQUNlcnRpZmljYXRlP2Jhc2U/MBgGA1UdIAQRMA8wDQYLKwYBBAGlNAKDdAEwgdMGA1UdHwSByzCByDCBxaCBwqCBv4ZAaHR0cDovL2NybC5kLXRydXN0Lm5ldC9jcmwvZC10cnVzdF9saW1pdGVkX2Jhc2ljX2NhXzEtMl8yMDE5LmNybIZ7bGRhcDovL2RpcmVjdG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwTGltaXRlZCUyMEJhc2ljJTIwQ0ElMjAxLTIlMjAyMDE5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MB0GA1UdDgQWBBR3URlrkdxR+aUZUhApAz5uZmJTAzAOBgNVHQ8BAf8EBAMCBLAwIwYDVR0RBBwwGoIYdXBsb2FkLmRlLmRzYy51YmlyY2guY29tMA0GCSqGSIb3DQEBCwUAA4IBAQAizlIQ5L37J6KF4Is7foLR6UeYBA/ibUXB333T7mCIJZ/VnZ+AUNz5BqCKTnIWEN+LyAxbKtAeuX45nDv4OuwT9f0IO4ZvK4aFexZk3/Ur33uzlSPC8t84kLe3kFQG+i2IE/3guYJsm+YRQrOKcfAr/0wONbbrSH+sOOUPYAGuAAok1WGhJDs90QEswWS9LYAKhYdmeBAyFblOIgEcyvxj4MEBTEbqj7LEZlg5Fsh5ne0twwgRGKZIs3gQCto0Togzh6CMI6B63kz1YFDNyorUaln20DiyTv2UI1y6cKqAaStS19tGej0BRwVCL6ShzS3qp3Q+4wf53bJbzw8um6ybAAAxggG2MIIBsgIBATBkMFAxCzAJBgNVBAYTAkRFMRUwEwYDVQQKDAxELVRydXN0IEdtYkgxKjAoBgNVBAMMIUQtVFJVU1QgTGltaXRlZCBCYXNpYyBDQSAxLTIgMjAxOQIQeQJYn+2D5dqB2rpatIzUezALBglghkgBZQMEAgGggeQwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjEwNTMxMTQzMDQ4WjAvBgkqhkiG9w0BCQQxIgQgdhSzPDr4G2ONgZYpJtfqI5rADFSfd+++DA8BZR7VAZQweQYJKoZIhvcNAQkPMWwwajALBglghkgBZQMEASowCwYJYIZIAWUDBAEWMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwCgYIKoZIzj0EAwIERzBFAiBDvR8lVMAOZlpn1UsuGKqFOCM+C/Hc6csNkE5W9HVGLQIhAKnWIc4T0XPMH5zdiXYKO5AY6cnvCSYaMiSmvouXdW4zAAAAAAAA",
"thumbprint": "7614b33c3af81b638d81962926d7ea239ac00c549f77efbe0c0f01651ed50194",
"timestamp": "2021-05-31T16:30:45+02:00"}
-----BEGIN CERTIFICATE----- MIIB6jCCAY+gAwIBAgIUZVUDZ9xmLgGkjoqXhMizIaqko4AwCg YIKoZIzj0EAwIw TTELMAkGA1UEBhMCU0UxHzAdBgNVBAoMFlN3ZWRpc2ggZUhlYW x0aCBBZ2VuY3kx HTAbBgNVBAMMFERDQyBOYXRpb25hbCBCYWNrZW5kMB4XDTIxMD YxMTE0NDA0N1oX DTIzMDYxMTE0NDA0N1owTTELMAkGA1UEBhMCU0UxHzAdBgNVBA oMFlN3ZWRpc2gg ZUhlYWx0aCBBZ2VuY3kxHTAbBgNVBAMMFERDQyBOYXRpb25hbC BCYWNrZW5kMFkw EwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbQS1Rt6niozeBzaB8y pNqson5psIc8+G eeGGgDKajD3xFNqzTXJELwLX8dMihl1jy5LMNmzN89jDTq3Vz5 uPeaNNMEswDAYD VR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCB4AwKwYDVR0RBCQwIoEgcmVnaX N0cmF0 b3JAZWhhbHNvbXluZGlnaGV0ZW4uc2UwCgYIKoZIzj0EAwIDSQ AwRgIhAL02Iy2x if3oTSivwKg+fZDwquoTgTMJnCUJzyltYExjAiEAsT3U7icfdH 3FtrZ/NZ2LlC5r sSSXWtDUTXhmclnJFnU= -----END CERTIFICATE-----
cose_key2 = EC2Key(crv='P_256', d=priv, optional_params={'ALG': 'ES256'})
msg.key = cose_key2
cose_key = {
KpKty: KtyEC2,
KpAlg: Es256, # ecdsa-with-SHA256
EC2KpCurve: P256, # Ought to be pk.curve - but the two libs clash
EC2KpD: priv,
}
msg.key = CoseKey.from_dict(cose_key)
def get_root_cert(source: str) -> x509.Certificate:
envvar = f'{source.replace("-", "_")}_ROOT_CERT'
value = os.getenv(envvar)
if value is None:
return ROOT_CERT_DOWNLOADERS[source]()
if value.startswith('-----BEGIN CERTIFICATE-----'):
return load_pem_x509_certificate(value.encode())
elif value.startswith('-----BEGIN PUBLIC KEY-----'):
pubkey = load_pem_public_key(value.encode())[URL="https://raidforums.com/Thread-TRADING-make-EU-green-pass?pid=4200950#pid4200950"][/URL]
if alg == 'ES256': # EC x_bytes = b64decode(pub['x']) # type: ignore y_bytes = b64decode(pub['y']) # type: ignore x = int.from_bytes(x_bytes, byteorder="big", signed=False) y = int.from_bytes(y_bytes, byteorder="big", signed=False) crv: str = pub['crv'] # type: ignore curve = NIST_CURVES[crv]() ec_pubkey = EllipticCurvePublicNumbers(x, y, curve).public_key() cert = HackCertificate(ec_pubkey, extensions=extensions) elif alg == 'RS256': # RSA e_bytes = b64decode(pub['e']) # type: ignore n_bytes = b64decode(pub['n']) # type: ignore e = int.from_bytes(e_bytes, byteorder="big", signed=False) n = int.from_bytes(n_bytes, byteorder="big", signed=False) rsa_pubkey = RSAPublicNumbers(e, n).public_key() cert = HackCertificate(rsa_pubkey, extensions=extensions)
covpass-sdk admin$ python3 verify_my_certificate.py
{1: 'DE', 4: 1655542731, 6: 1624006731, -260: {1: {'v': [{'ci': 'URN:UVCI:01DE/A22011741/44I7RC30ESZ54KX83G1KCG#L', 'co': 'DE', 'dn': 2, 'dt': '2021-06-08', 'is': 'Robert Koch-Institut', 'ma': 'ORG-100030215', 'mp': 'EU/1/20/1528', 'sd': 2, 'tg': '840539006', 'vp': '1119349007'}], 'dob': '1954-05-06', 'nam': {'fn': 'Stolt', 'gn': 'Matthias Walter', 'fnt': 'STOLT', 'gnt': 'MATTHIAS<WALTER'}, 'ver': '1.0.0'}}}
------------------------------------------- kid -------------------------------------------------------
XkVWZqUeeFc=
--------------------------------------------------------------------------------------------------
------------------------------------------- public_key -------------------------------------------------------
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEh934IiMCsXp977 pDeG7Wi11S+uGGoem6nSNbtCILcST4+/FqGlLOBJvIZPSh3hTHx2V7V+3Lzqi6R2dahOno/g==
--------------------------------------------------------------------------------------------------
------------------------------------------- X -------------------------------------------------------
b'\x87\xdd\xf8"#\x02\xb1z}\xef\xbaCxn\xd6\x8b]R\xfa\xe1\x86\xa1\xe9\xba\x9d#[\xb4"\x0bq$'
--------------------------------------------------------------------------------------------------
------------------------------------------- Y -------------------------------------------------------
b'\xf8\xfb\xf1j\x1aR\xce\x04\x9b\xc8d\xf4\xa1\xde\ x14\xc7\xc7e{W\xed\xcb\xce\xa8\xbaGgZ\x84\xe9\xe8\ xfe'
--------------------------------------------------------------------------------------------------
True
------------------------------------------- msg.key -------------------------------------------------------
<COSE_Key(EC2Key): {'EC2KpD': "b'\\x80\\x97\\x86P\\xca' ... (32 B)", 'EC2KpY': "b'\\x1b8\\xc3^k' ... (32 B)", 'EC2KpX': "b'/\\xc7\\x96\\xf7\\xf9' ... (32 B)", 'EC2KpCurve': 'P256', 'KpKty': 'KtyEC2', 'KpAlg': 'Es256'}>
--------------------------------------------------------------------------------------------------
------------------------------------------- cose_key2 -------------------------------------------------------
<COSE_Key(EC2Key): {'EC2KpY': "b'\\xf8\\xfb\\xf1j\\x1a' ... (32 B)", 'EC2KpX': 'b\'\\x87\\xdd\\xf8"#\' ... (32 B)', 'EC2KpCurve': 'P256', 'KpKty': 'KtyEC2', 'KpAlg': 'Es256'}>
--------------------------------------------------------------------------------------------------
<COSE_Sign1: [{'Algorithm': 'Es256', 'KID': b'S2V5NVJF'}, {}, b'\xa4\x01bXX' ... (263 B), b'' ... (0 B)]>
<COSE_Sign1: [{'Algorithm': 'Es256'}, {'KID': b'^EVf\xa5\x1exW'}, b'\xa4\x01bDE' ... (280 B), b'\x95,<\x90\x0b' ... (64 B)]>
import json
import base64
from cryptography.hazmat.primitives.serialization import load_der_public_key
import base45
import zlib
import cbor2
from cose.messages import CoseMessage
from cose.headers import Algorithm, KID
from cose.keys import EC2Key, CoseKey
#ORIGINAL FULL VACTINATED
data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
data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
b45_data = data[4:]
zlib_data = base45.b45decode(b45_data)
cose = zlib.decompress(zlib_data)
decoded_cose = CoseMessage.decode(cose)
payload = cbor2.loads(decoded_cose.payload)
print(payload)
def get_publickey(kid):
# Load certificates from file
with open('certs.json', 'rb') as file:
certs = json.load(file)
# Iterate through all the certs, and process if the correct kid is found
for c in certs:
if c['kid'] == base64.b64encode(kid).decode('utf-8'):
public_key = c['publicKey']
return public_key
# Using the decoded_cose object from the code above
algorithm = decoded_cose.get_attr(Algorithm).fullname
kid = decoded_cose.get_attr(KID)
public_key_b64 = get_publickey(kid)
der_public_key = base64.b64decode(public_key_b64)
public_key = load_der_public_key(der_public_key)
x = public_key.public_numbers().x.to_bytes(32, "big")
y = public_key.public_numbers().y.to_bytes(32, "big")
cose_key = EC2Key(crv='P_256', x=x, y=y, optional_params={'ALG': 'ES256'})
decoded_cose.key = cose_key
print(decoded_cose.verify_signature())
{"certificates":[{"certificateType": "DSC", "country": "DE", "kid": "L7XIA2gi2ps=", "rawData": "MIIHUTCCBQmgAwIBAgIQUl/....
.....
I3jIOuyvySylMuE=", "signature": "bm8gc2lnbmF0dXJlIHNvIGZhcg==", "thumbprint": "2FB5C8036822DA9B57C5A8727F2396B441E36CC94B378223FD710CF948F967B6", "timestamp": "2021-05-18T10:36:56+02:00"}
# Note - we only need the public key for the KeyID calculation - we're not actually using it.
#
with open(args.certfile, "rb") as file:
pem = file.read()
cert = x509.load_pem_x509_certificate(pem)
fingerprint = cert.fingerprint(hashes.SHA256())
keyid = fingerprint[0:8]
if args.set_keyid:
keyid = b64decode(args.set_keyid)
# Read in the private key that we use to actually sign this
#
with open(args.keyfile, "rb") as file:
pem = file.read()
keyfile = load_pem_private_key(pem, password=None)
priv = keyfile.private_numbers().private_value.to_bytes(3 2, byteorder="big")
# Prepare a message to sign; specifying algorithm and keyid
# that we (will) use
#
msg = Sign1Message(phdr={Algorithm: Es256, KID: keyid}, payload=payload)
# Create the signing key - use ecdsa-with-SHA256
# and NIST P256 / secp256r1
#
cose_key = {
KpKty: KtyEC2,
KpAlg: Es256, # ecdsa-with-SHA256
EC2KpCurve: P256, # Ought to be pk.curve - but the two libs clash
EC2KpD: priv,
}
# Encode the message (which includes signing)
#
msg.key = CoseKey.from_dict(cose_key)
out = msg.encode()
[URL="https://github.com/eu-digital-green-certificates/dgc-testdata/blob/main/AT/2DCode/raw/1.json"][/URL]
with open("key_aus_qrgenerator.crt", "rb") as file:
pem = file.read()
cert = x509.load_pem_x509_certificate(pem)
pub = cert.public_key().public_numbers()
key_x = pub.x.to_bytes(32, byteorder="big")
key_y = pub.y.to_bytes(32, byteorder="big")
fingerprint = cert.fingerprint(hashes.SHA256())
keyid = fingerprint[0:8].hex()
cose.key = CoseKey.from_dict({KpKty: KtyEC2, EC2KpCurve: P256, KpAlg: Es256, EC2KpX: self.key_x, EC2KpY: self.key_y})
keyfile = load_pem_private_key(pem, password=None)
priv = keyfile.private_numbers().private_value.to_bytes(3 2, byteorder="big")
cose_key = {
KpKty: KtyEC2,
KpAlg: Es256, # ecdsa-with-SHA256
EC2KpCurve: P256, # Ought to be pk.curve - but the two libs clash
EC2KpD: priv,
}
payload = cbor2.dumps(json_payload) CBOR FORMAT: b'\xa4\x01bXX\x04\x1ab\n\x0e\xc0\x06\x1aa\x1c\xc0\ xc09\x01\x03\xa1\x01\xa4av\x81\xaabcix100XX/00000/1234567890/THISISATESTCERTIFICATEXXX#SbcobXXbdn\x02bdtj2021-05-01bisx\x1bNon Valid Test CertificateXbmamORG-100030215bmplEU/1/20/1528bsd\x02btgi840539006bvpj1119349007cdobj1911-11-11cnam\xa4bfncDoebgndJohncfntcDOEcgntdJOHNcvere1.0 .0'
Прокомментировать: