관리-도구
편집 파일: argon2.cpython-39.pyc
a f�Wc� � @ s� d Z ddlmZmZ ddlZe�e�ZddlZddl Z ddl m Z dZ da ddlmZ ddlmZ ddlmZmZmZ ddlmZmZ dd lmZmZm Z m Z m Z ddl m m!Z" d gZ#ed �Z$ed �Z%ed �Z&e&e$e%fZ'e(e'�Z)dZ*z ddl+Z W n e,�y dZ Y n,0 e-e d��s$dZ*dZ ne-e d��s8dZ*dZ e-e d��rVe �.� Z/e j0j1Z2nG dd� d�Z3e3� Z/dZ2G dd� de"j4e"j5e"j6e"j7e"j8e"j9�Z:G dd� de:�Z;G dd� de:�Z<G d d � d e:�Z=G d d � d e;e:�Z+dS ) a� passlib.handlers.argon2 -- argon2 password hash wrapper References ========== * argon2 - home: https://github.com/P-H-C/phc-winner-argon2 - whitepaper: https://github.com/P-H-C/phc-winner-argon2/blob/master/argon2-specs.pdf * argon2 cffi wrapper - pypi: https://pypi.python.org/pypi/argon2_cffi - home: https://github.com/hynek/argon2_cffi * argon2 pure python - pypi: https://pypi.python.org/pypi/argon2pure - home: https://github.com/bwesterb/argon2pure � )�with_statement�absolute_importN)�warn)�exc)� MAX_UINT32)� classproperty�to_bytes� render_bytes)� b64s_encode� b64s_decode)�u�unicode� bascii_to_str� uascii_to_str�PY2�argon2�i�d�id�Typezb'argon2' module points to unsupported 'argon2' pypi package; please install 'argon2-cffi' instead.� low_levelz@'argon2-cffi' is too old, please update to argon2_cffi >= 18.2.0�PasswordHasherc @ s$ e Zd ZdZdZdZdZdZdZdS )�_DummyCffiHashera dummy object to use as source of defaults when argon2_cffi isn't present. this tries to mimic the attributes of ``argon2.PasswordHasher()`` which the rest of this module reads. .. note:: values last synced w/ argon2 19.2 as of 2019-11-09 � i � N) �__name__� __module__� __qualname__�__doc__� time_cost� memory_cost� parallelism�salt_len�hash_len� r$ r$ �;/usr/lib/python3.9/site-packages/passlib/handlers/argon2.pyr ] s r � c sf e Zd ZdZdZdZejZe j j d Z e j j d Z ej ZdZeZejZdZeZdZd ZeZd ZdZd Z d Z i Z e d d� �Z e!Z"ej#Z#eZ$ej%Z%e&dd� �Z'd Z(e)d.� fdd� �Z*e)dd� �Z+e,�-d�Z.e)dd� �Z/e,�-de,j0�Z1e)dd� �Z2dd � Z3d/� fd d � Z4e)d d � �Z5e)d!d"� �Z6e)d0d#d$��Z7e)d%d&� �Z8� fd'd(�Z9d)Z:e)d*d+� �Z;e)d1d,d-��Z<� Z=S )2� _Argon2Commona& Base class which implements brunt of Argon2 code. This is then subclassed by the various backends, to override w/ backend-specific methods. When a backend is loaded, the bases of the 'argon2' class proper are modified to prepend the correct backend-specific subclass. r ) �salt� salt_sizer" �roundsr r r! � digest_sizer# �type)r, )r" r r# r+ � � Zlineari��� N���Fc C s | � � t| j�S )zj return tuple of types supported by this backend .. versionadded:: 1.7.2 )� get_backend�tuple�_backend_type_map)�clsr$ r$ r% � type_values� s z_Argon2Common.type_valuesc C s | j tkS )zn flag indicating a Type D hash .. deprecated:: 1.7.2; will be removed in passlib 2.0 )r, �TYPE_D��selfr$ r$ r% �type_d� s z_Argon2Common.type_dc sj |d ur d| v rt d��|| d< |d ur@d| v r8t d��|| d< |d ur\|d urXt d��|}|d urx|d urtt d��|}tt| �jf i | ��} |d ur�| �|�| _| �d�} |d ur�t|tj �r�t |�}tj | |dt d | d �| _ |d u�rt|tj �r�t |�}| j|| d �| _| �| j| j� |d u�rft|tj ��r>t |�}|d k �r`|d k�r`td|f ��|| _| S )Nr* z/'time_cost' and 'rounds' are mutually exclusiver) z1'salt_len' and 'salt_size' are mutually exclusivez3'hash_len' and 'digest_size' are mutually exclusivez8'checksum_size' and 'digest_size' are mutually exclusive�relaxedr r+ )�min�max�paramr9 )r9 r. r/ z7max_threads (%d) must be -1 (unlimited), or at least 1.)� TypeError�superr' �using� _norm_typer, �get� isinstance�uhZnative_string_types�int� norm_integerr � checksum_size�_norm_memory_costr �_validate_constraintsr! � ValueError� max_threads) r3 r, r r" r r+ rF r# rJ �kwds�subclsr9 �� __class__r$ r% r? sP � �z_Argon2Common.usingc C s* d| }||k r&t d| j|||f ��d S )Nr- zO%s: memory_cost (%d) is too low, must be at least 8 * parallelism (8 * %d = %d))rI �name)r3 r r! �min_memory_costr$ r$ r% rH B s ��z#_Argon2Common._validate_constraintsz^\$argon2[a-z]+\$c C s t �|�}| j�|�d uS �N)rC Zto_unicode_for_identify� _ident_regex�match)r3 �hashr$ r$ r% �identifyT s z_Argon2Common.identifys� ^ \$argon2(?P<type>[a-z]+)\$ (?: v=(?P<version>\d+) \$ )? m=(?P<memory_cost>\d+) , t=(?P<time_cost>\d+) , p=(?P<parallelism>\d+) (?: ,keyid=(?P<keyid>[^,$]+) )? (?: ,data=(?P<data>[^,$]+) )? (?: \$ (?P<salt>[^$]+) (?: \$ (?P<digest>.+) )? )? $ c C s� t |t�r|�d�}t |t�s*t�|d��| j�|�}|sDt�| ��|� ddddddd d d � \ }}}}}}} } } |r|t d ��| |� d �|r�t |�ndt |�t |�t |�| r�t | �nd | r�t | �nd | r�t | �nd d�S )N�utf-8rT r, �versionr r r! �keyid�datar( �digestz&argon2 'keyid' parameter not supported�asciir )r, rW r r* r! r( rY �checksum)rB r �encode�bytesr ZExpectedStringError� _hash_regexrS �MalformedHashError�group�NotImplementedError�decoderD r ) r3 rT �mr, rW r r r! rX rY r( rZ r$ r$ r% � from_string� s. ���z_Argon2Common.from_stringc C sv | j }|dkrd}nd| }| j}|r:dtt| j�� }nd}dt| j�|| j| j| j|tt| j ��tt| j ��f S )Nr � zv=%d$z,data=z"$argon2%s$%sm=%d,t=%d,p=%d%s$%s$%s) rW rY r r r r, r r* r! r( r\ )r7 rW ZvstrrY Zkdstrr$ r$ r% � to_string� s$ �z_Argon2Common.to_stringc s |r t d� |d u sJ �t}|�d�}|d ur8t|�| _tt| �jf i |�� |d u rrtj | | j | j dd�s~J �n | � |�| _ |d u r�tj | | j | j dd�s�J �n | � |�| _ |d u r�tj | | j| jdd�s�J �n | �|�| _|d u r�| jd u s�J �n"t|t��stj�|dd��|| _d S ) Nzoargon2 `type_d=True` keyword is deprecated, and will be removed in passlib 2.0; please use ``type="d"`` insteadr\ r, )r< rW r r^ rY )r r5 rA �lenrF r> r' �__init__rC Zvalidate_default_valuer, r@ rW � _norm_versionr rG rY rB r^ r �ExpectedTypeError)r7 r, r8 rW r rY rK r\ rM r$ r% ri � s4 � � z_Argon2Common.__init__c C sf t |t�s4tr$t |t�r$|�d�}ntj�|dd��|tv r@|S |� � }|tv rT|S t d|f ��d S )Nr[ �strr, z unknown argon2 hash type: %r) rB r r r^ rc rC r rk � ALL_TYPES_SET�lowerrI )r3 �valueZtempr$ r$ r% r@ � s z_Argon2Common._norm_typec C sh t |tj�s tj�|dd��|dk r:|dkr:td|f ��| �� }|| jkrdtd| j||| jf ��|S )NZintegerrW r& r z invalid argon2 hash version: %dzk%s: hash version 0x%X not supported by %r backend (max version is 0x%X); try updating or switching backends) rB rC Z int_typesr rk rI r0 � max_versionrO )r3 rW �backendr$ r$ r% rj s �z_Argon2Common._norm_versionc C s t j| || jd|d�S )Nr )r: r< r9 )rC rE rP )r3 r r9 r$ r$ r% rG s �z _Argon2Common._norm_memory_costc C s< z | j | W S ty Y n0 d|| �� f }t|��dS )z> helper to resolve backend constant from type z=unsupported argon2 hash (type %r not supported by %s backend)N)r2 �KeyErrorr0 rI )r3 ro �msgr$ r$ r% �_get_backend_type% s �z _Argon2Common._get_backend_typec sz t | �}| j |j krdS |j}|d u s0||jkr6|j}| j|k rDdS | j|jkrTdS | j|jkrddS tt| �jf i |��S )NT) r, �min_desired_versionrp rW r rF r> r' �_calc_needs_update)r7 rK r3 ZminverrM r$ r% rv 7 s z _Argon2Common._calc_needs_updatez> -- recommend you install one (e.g. 'pip install argon2_cffi')c C sp | j }t|t�r|dks J �|dk r6td| tjj� tD ]}|| jv r:|| _ qlq:td| tjj � t | _ dS )z� helper called by from backend mixin classes' _load_backend_mixin() -- invoked after backend imports have been loaded, and performs feature detection & testing common to all backends. r r& z6%r doesn't support argon2 v1.3, and should be upgradedz)%r lacks support for all known hash typesT) rp rB rD r rC r �PasslibSecurityWarning� ALL_TYPESr2 r, ZPasslibRuntimeWarning�TYPE_ID)� mixin_clsrO �dryrunrp r, r$ r$ r% �_finalize_backend_mixinM s � z%_Argon2Common._finalize_backend_mixinc C s� | � � }|du r"|dur"| �|�}|durT|�|j|j� |dkrT|jdurTtd��t|�}|dvrtd|||f }nt|�}t j | |d��dS )z} internal helper invoked when backend has hash/verification error; used to adapt to passlib message. N� argon2_cffiz8argon2_cffi backend doesn't support the 'data' parameter)zDecoding failedz%s reported: %s: hash=%r)�reason) r0 re rH r r! rY rb rl �reprr r` )r3 �errrT r7 rq �textr~ r$ r$ r% �_adapt_backend_errorg s z"_Argon2Common._adapt_backend_error)NNNNNNNN)NFNNN)F)NN)>r r r r rO Z setting_kwds�_default_settingsr# rF rC �GenericHandlerZ_always_parse_settingsZ_unparsed_settingsr" Zdefault_salt_sizeZ min_salt_sizer Z max_salt_sizer �default_roundsZ min_roundsZ max_roundsZ rounds_costZmax_parallelism�_default_versionrp ru rP rJ �pure_use_threadsr2 r r4 ry r, r! rW r �propertyr8 rY � classmethodr? rH �re�compilerR rU �Xr_ re rg ri r@ rj rG rt rv Z_no_backend_suggestionr| r� � __classcell__r$ r$ rM r% r' s s~ �� �; � 2 r' c sR e Zd ZdZedd� �Zedd� �Zejddd�ed d � ��Z � fd d �Z � Z S ) � _NoBackendz� mixin used before any backend has been loaded. contains stubs that force loading of one of the available backends. c C s | � � | �|�S rQ )�_stub_requires_backendrT )r3 �secretr$ r$ r% rT � s z_NoBackend.hashc C s | � � | �||�S rQ )r� �verify)r3 r� rT r$ r$ r% r� � s z_NoBackend.verifyz1.7z2.0)Z deprecatedZremovedc C s | � � | �||�S rQ )r� �genhash)r3 r� �configr$ r$ r% r� � s z_NoBackend.genhashc s | � � tt| ��|�S rQ )r� r> r �_calc_checksum�r7 r� rM r$ r% r� � s z_NoBackend._calc_checksum) r r r r r� rT r� rC Zdeprecated_methodr� r� r� r$ r$ rM r% r� � s r� c @ sZ e Zd ZdZedd� �Zedd� �Zedd� eD ��Z edd � �Z ed d � �Z d d � Z dS )� _CffiBackendz argon2_cffi backend c C s� | t u s J �td u r&tr"t�t��dS tjj}t�dtj |� tj }i }t D ]F}zt ||� � �||< W qL ty� |ttfvs�J d| ��Y qL0 qL|| _| | _| _| �||�S )NFzOdetected 'argon2_cffi' backend, version %r, with support for 0x%x argon2 hashes�unexpected missing type: %r)r� � _argon2_cffi�_argon2_cffi_errorr ZPasslibSecurityErrorr �ARGON2_VERSION�log�debug� __version__r rx �getattr�upper�AttributeError�TYPE_Ir5 r2 rW rp r| )rz rO r{ rp ZTypeEnum�type_mapr, r$ r$ r% �_load_backend_mixin� s& � z _CffiBackend._load_backend_mixinc C s� t �|� t|d�}z8ttjj| �| j�| j | j | j t| � � �| j |d��W S tjjy~ } z| �|��W Y d }~n d }~0 0 d S )NrV )r, r r r! r( r# r� )rC �validate_secretr r r� r � hash_secretrt r, r r� r! Z_generate_saltrF � exceptions� HashingErrorr� )r3 r� r� r$ r$ r% rT � s � z_CffiBackend.hashc c s" | ]}t d |�d��|fV qdS )s $argon2%s$r[ N)r r] )�.0r, r$ r$ r% � <genexpr>� s �z_CffiBackend.<genexpr>c C s� t �|� t|d�}t|d�}| j�|d d|�dd� � t�}| �|�}z"tj � |||�}|du shJ �W dS tj j y� Y dS tj j y� } z| j||d��W Y d }~n d }~0 0 d S )NrV r[ r. � $TF�rT )rC r� r �_byte_ident_maprA �findr� rt r� r Z verify_secretr� ZVerifyMismatchErrorZVerificationErrorr� )r3 r� rT r, � type_code�resultr� r$ r$ r% r� � s " z_CffiBackend.verifyc C s� t �|� t|d�}| �|�}z<ttjj| �|j �|j |j |j t|j �|j||jd��}W n6 tjjy� } z| j||d��W Y d }~n d }~0 0 |jdkr�|�dd�}|S )NrV )r, r r r! r( r# r� rW r� r z$v=16$�$)rC r� r re r r� r r� rt r, r r* r! r( rF rW r� r� r� �replace)r3 r� r� r7 r� r� r$ r$ r% r� s& � $ z_CffiBackend.genhashc C s t d��d S )Nz-shouldn't be called under argon2_cffi backend)�AssertionErrorr� r$ r$ r% r� * s z_CffiBackend._calc_checksumN) r r r r r� r� rT �dictrx r� r� r� r� r$ r$ r$ r% r� � s � r� c @ s$ e Zd ZdZedd� �Zdd� ZdS )� _PureBackendz argon2pure backend c C s� | t u s J �z dd laW n ty, Y dS 0 zddlm} W n ty\ t�d� Y dS 0 t�d|� |sztdt j � i }t D ]J}zt td|� � �||< W q� ty� |ttfvs�J d| ��Y q�0 q�|| _| | _| _| �||�S ) Nr F)�ARGON2_DEFAULT_VERSIONz\detected 'argon2pure' backend, but package is too old (passlib requires argon2pure >= 1.2.3)zBdetected 'argon2pure' backend, with support for 0x%x argon2 hashesz�Using argon2pure backend, which is 100x+ slower than is required for adequate security. Installing argon2_cffi (via 'pip install argon2_cffi') is strongly recommendedZARGON2r� )r� � argon2pure� _argon2pure� ImportErrorr� r� Zwarningr� r r rw rx r� r� r� r� r5 r2 rW rp r| )rz rO r{ rp r� r, r$ r$ r% r� < s4 �� z _PureBackend._load_backend_mixinc C s� t �|� t|d�}t|| j| j| j| j| j| � | j �| j d�}| j dkrT| j |d< | j rbd|d< | jrr| j|d< ztjf i |��W S tjy� } z| j|| d��W Y d }~n d }~0 0 d S ) NrV )�passwordr( r r r! Z tag_lengthr� rW r �threadsTZ use_threadsZassociated_datar6 )rC r� r r� r( r* r r! rF rt r, rW rJ r� rY r� r Z Argon2Errorr� )r7 r� rK r� r$ r$ r% r� n s, � z_PureBackend._calc_checksumN)r r r r r� r� r� r$ r$ r$ r% r� 4 s 1r� c @ s$ e Zd ZdZdZdZeeed�Z dS )r a� This class implements the Argon2 password hash [#argon2-home]_, and follows the :ref:`password-hash-api`. Argon2 supports a variable-length salt, and variable time & memory cost, and a number of other configurable parameters. The :meth:`~passlib.ifc.PasswordHash.replace` method accepts the following optional keywords: :type type: str :param type: Specify the type of argon2 hash to generate. Can be one of "ID", "I", "D". This defaults to "ID" if supported by the backend, otherwise "I". :type salt: str :param salt: Optional salt string. If specified, the length must be between 0-1024 bytes. If not specified, one will be auto-generated (this is recommended). :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. :type rounds: int :param rounds: Optional number of rounds to use. This corresponds linearly to the amount of time hashing will take. :type time_cost: int :param time_cost: An alias for **rounds**, for compatibility with underlying argon2 library. :param int memory_cost: Defines the memory usage in kibibytes. This corresponds linearly to the amount of memory hashing will take. :param int parallelism: Defines the parallelization factor. *NOTE: this will affect the resulting hash value.* :param int digest_size: Length of the digest in bytes. :param int max_threads: Maximum number of threads that will be used. -1 means unlimited; otherwise hashing will use ``min(parallelism, max_threads)`` threads. .. note:: This option is currently only honored by the argon2pure backend. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. versionchanged:: 1.7.2 Added the "type" keyword, and support for type "D" and "ID" hashes. (Prior versions could verify type "D" hashes, but not generate them). .. todo:: * Support configurable threading limits. )r} r� T)Nr} r� N) r r r r ZbackendsZ_backend_mixin_targetr� r� r� Z_backend_mixin_mapr$ r$ r$ r% r � s P�)>r Z __future__r r ZloggingZ getLoggerr r� r� �types�warningsr r� r� Zpasslibr Zpasslib.crypto.digestr Z passlib.utilsr r r Zpasslib.utils.binaryr r Zpasslib.utils.compatr r r r r Zpasslib.utils.handlersZutils�handlersrC �__all__r� r5 ry rx �setrm r� r r� �hasattrr r� r r� r� r ZSubclassBackendMixinZParallelismMixinZ HasRoundsZ HasRawSaltZHasRawChecksumr� r' r� r� r� r$ r$ r$ r% �<module> sf � � � *|Z