관리-도구
편집 파일: fernet.cpython-39.opt-1.pyc
a �a � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ d dlm Z d dl m Z m Z d dl mZmZmZ d dlmZ G dd� de�Zd ZG d d � d e�ZG d d � d e�ZdS )� N)�utils)�InvalidSignature)�hashes�padding)�Cipher� algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__� __module__� __qualname__� r r �9/usr/lib64/python3.9/site-packages/cryptography/fernet.pyr s r �< c @ s e Zd Zd!ejeef ejd�dd�Ze ed�dd��Z eed�d d �Z ee ed �d d �Z ee eed�dd�Zd"eeje ed�dd�Zee e ed�dd�Zee d�dd�Zeeeje ef d�dd��Zedd�d d �Zee ejeje e f ed �d d �ZdS )#�FernetN)�key�backendc C s> t �|�}t|�dkr td��|d d� | _|dd � | _d S )N� z4Fernet key must be 32 url-safe base64-encoded bytes.� )�base64�urlsafe_b64decode�len� ValueError� _signing_key�_encryption_key)�selfr r r r r �__init__ s �zFernet.__init__)�returnc C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key* s zFernet.generate_key)�datar c C s | � |tt�� ��S �N��encrypt_at_time�int�time)r r$ r r r �encrypt. s zFernet.encrypt)r$ � current_timer c C s t �d�}| �|||�S )Nr )r r! �_encrypt_from_parts)r r$ r+ �ivr r r r' 1 s zFernet.encrypt_at_time)r$ r+ r- r c C s� t �d|� t�tjj��� }|�|�|� � }t t�| j �t � |���� }|�|�|� � }dt�d|� | | }t| jt�� �} | �|� | � � } t�|| �S )Nr$ � ��>Q)r � _check_bytesr �PKCS7r �AES� block_size�padder�update�finalizer r r �CBC� encryptor�struct�packr r r �SHA256r r ) r r$ r+ r- r4 Z padded_datar8 � ciphertextZ basic_parts�hZhmacr r r r, 5 s �� zFernet._encrypt_from_parts)�token�ttlr c C s: t �|�\}}|d u r d }n|tt�� �f}| �|||�S r% )r �_get_unverified_token_datar( r) � _decrypt_data)r r> r? � timestampr$ � time_infor r r �decryptK s zFernet.decrypt)r> r? r+ r c C s0 |d u rt d��t�|�\}}| �||||f�S )Nz6decrypt_at_time() can only be used with a non-None ttl)r r r@ rA )r r> r? r+ rB r$ r r r �decrypt_at_timeS s �zFernet.decrypt_at_time)r> r c C s t �|�\}}| �|� |S r% )r r@ �_verify_signature)r r> rB r$ r r r �extract_timestamp] s zFernet.extract_timestampc C s� t �d| � zt�| �}W n ttjfy6 t�Y n0 |rH|d dkrLt�zt� d|dd� �\}W n tj y~ t�Y n0 ||fS )Nr> r � r/ � � ) r r0 r r � TypeError�binascii�Errorr r9 �unpack�error)r> r$ rB r r r r@ c s z!Fernet._get_unverified_token_datac C sT t | jt�� �}|�|d d� � z|�|dd � � W n tyN t�Y n0 d S )N���)r r r r; r5 Zverifyr r )r r$ r= r r r rF t s zFernet._verify_signature)r$ rB rC r c C s� |d ur0|\}}|| |k r t �|t |k r0t �| �|� |dd� }|dd� }tt�| j�t�|��� � }|� |�} z| |� � 7 } W n t y� t �Y n0 t �tjj��� } | � | �} z| | � � 7 } W n t y� t �Y n0 | S )NrJ � rP )r �_MAX_CLOCK_SKEWrF r r r2 r r r7 � decryptorr5 r6 r r r1 r3 �unpadder) r r$ rB rC r? r+ r- r< rS Zplaintext_paddedrT Zunpaddedr r r rA | s0 � zFernet._decrypt_data)N)N)r r r �typing�Union�bytes�str�Anyr � classmethodr# r* r( r' r, �OptionalrD rE rG � staticmethod�Tupler@ rF rA r r r r r s2 � � � � �r c @ s� e Zd Zeje d�dd�Zeed�dd�Zee ed�dd �Z eed�d d �Z deej e ed �dd�Z ee e ed�dd�Zd S )� MultiFernet)�fernetsc C s t |�}|std��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r r_ r r r r � s �zMultiFernet.__init__)�msgr c C s | � |tt�� ��S r% r& )r rb r r r r* � s zMultiFernet.encrypt)rb r+ r c C s | j d �||�S )Nr )ra r' )r rb r+ r r r r' � s zMultiFernet.encrypt_at_timec C sh t �|�\}}| jD ]0}z|�||d �}W qJW q tyB Y q0 qt�t�d�}| jd �|||�S )Nr r )r r@ ra rA r r r! r, )r rb rB r$ �f�pr- r r r �rotate� s zMultiFernet.rotateN)rb r? r c C s: | j D ]*}z|�||�W S ty. Y q0 qt�d S r% )ra rD r )r rb r? rc r r r rD � s zMultiFernet.decrypt)rb r? r+ r c C s< | j D ],}z|�|||�W S ty0 Y q0 qt�d S r% )ra rE r )r rb r? r+ rc r r r rE � s zMultiFernet.decrypt_at_time)N)r r r rU �Iterabler r rW r* r( r' re r[ rD rE r r r r r^ � s �r^ )r rL r r9 r) rU Z cryptographyr Zcryptography.exceptionsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr r r Z#cryptography.hazmat.primitives.hmacr � Exceptionr rR �objectr r^ r r r r �<module> s