Convert an integer to a byte string. @param n: positive integer to convert @param length: minimum length @return: converted bytestring, o

Parse a DKIM Tag=Value list. Interprets the syntax specified by RFC6376 section 3.2. Assumes that folding whitespace is already unfolded.

Parse a data structure according to an ASN.1 template. @param template: tuples comprising the ASN.1 template @param data: byte string data to

Return the default list of headers to sign: those in should_sign or frozen_sign, with those in frozen_sign signed an extra time to prevent add

Construct the canonicalization policy described by a c= value. May raise an C{InvalidCanonicalizationPolicyError} if the given value

Validate DKIM or ARC Signature fields. Basic checks for presence and correct formatting of mandatory fields. Raises a ValidationError if check

Encode a digest with RFC8017 EMSA-PKCS1-v1_5. @param hash: hash object to encode @param mlen: desired message length @return: encoded dig

Fold a header line into multiple crlf-separated lines of text at column 72. The crlf does not count for line length. >>> text(fold(b'foo'))

Update hash for signed message header fields.

Parse a PEM RSA private key. @param data: RFC8017 RSAPrivateKey in PEM format. @return: RSA private key

Select message header fields to be signed/verified. >>> h = [('from','biz'),('foo','bar'),('from','baz'),('subject','boring')] >>> i = ['from

Convert a byte string to an integer. @param s: byte string representing a positive integer to convert @return: converted integer

Given a ed25519 key, extract the bit we should place in DNS.

Given a key, extract the bit we should place in DNS.

Generates a base64 encoded private key for ed25519 DKIM signing. Output is unprotected. You should protect your keys.

Generates a suitable private key. Output is unprotected. You should encrypt your keys.

Sign a digest with RFC8017 RSASSA-PKCS1-v1_5. @param hash: hash object to sign @param private_key: private key data @return: signed diges

Verify a digest signed with RFC8017 RSASSA-PKCS1-v1_5. @param hash: hash object to check @param signature: signed digest byte string @par

Add headers not in should_not_sign to frozen_sign. @param s: list of headers to add to frozen_sign @since: 0.9 >>> dkim = DKIM() >>>

Build a DER-encoded ASN.1 data structure. @param node: (type, data) tuples comprising the ASN.1 structure @return: DER-encoded ASN.1 byte str

Return a string representing a field length in ASN.1 format. @param n: integer field length @return: ASN.1 field length

Return size of long in bits.

Get the default dkimpy logger.

Parse an RSA private key. @param data: DER-encoded RFC8017 RSAPrivateKey. @return: RSA private key

Parse an RSA public key. @param data: DER-encoded X.509 subjectPublicKeyInfo containing an RFC8017 RSAPublicKey. @return: RSA public

Parse a message in RFC822 format. @param message: The message in RFC822 format. Either CRLF or LF is an accepted line separator. @return: Ret

Perform RSA decryption/signing @param message: byte string to operate on @param pk: private key data @param mlen: desired output length

Perform RSA encryption/verification @param message: byte string to operate on @param pk: public key data @param mlen: desired output leng

Add headers not in should_not_sign to frozen_sign. @param s: list of headers to add to frozen_sign @since: 0.5 >>> dkim = DKIM() >>>

Return header list of all existing headers not in should_not_sign. @since: 0.5

Sign an RFC822 message and return the ARC set header lines for the next instance @param message: an RFC822 formatted message (with either \\n or \

Verify the ARC chain on an RFC822 formatted message. @param message: an RFC822 formatted message (with either \\n or \\r\\n line endings) @par

Return a TXT record associated with a DNS name. @param name: The bytestring domain name to look up.

Return a TXT record associated with a DNS name.