관리-도구
편집 파일: des_crypt.cpython-39.pyc
a f�Wc_W � @ s$ d Z ddlZddlZe�e�ZddlmZ ddlm Z m Z m Z ddl m Z mZ ddlmZmZmZmZmZ ddlmZ ddlm mZ g d�Zd Z d d � Z d d � Z dd� Z dd� Z G dd� dej!ej"ej#ej$�Z%G dd� dej"ej&ej#ej$�Z'G dd� dej#ej$�Z(G dd� dej!ej#ej$�Z)dS )zFpasslib.handlers.des_crypt - traditional unix (DES) crypt and variants� N)�warn)� safe_crypt� test_crypt� to_unicode)�h64�h64big)�byte_elem_value�u� uascii_to_str�unicode�suppress_cause)�des_encrypt_int_block)� des_crypt� bsdi_crypt�bigcrypt�crypt16� c C s t dd� t| dd� �D ��S )z�convert secret to 64-bit DES key. this only uses the first 8 bytes of the secret, and discards the high 8th bit of each byte at that. a null parity bit is inserted after every 7th bit of the output. c s s* | ]"\}}t |�d @ d|d > V qdS )� �9 � N)r )�.0�i�c� r �>/usr/lib/python3.9/site-packages/passlib/handlers/des_crypt.py� <genexpr>( s �z'_crypt_secret_to_key.<locals>.<genexpr>Nr )�sum� enumerate)�secretr r r �_crypt_secret_to_key s �r c C sp t |�dksJ �t�|�}t| t�r.| �d�} t| t�s<J �t| v rPtj � t ��t | �}t |d|d�}t�|�S )z pure-python backed for des_crypt� �utf-8r � )�lenr � decode_int12� isinstancer �encode�bytes�_BNULL�uh�exc�NullPasswordErrorr r r r � encode_int64)r �salt� salt_value� key_value�resultr r r �_raw_des_crypt+ s r1 c C sL t | �}d}t| �}||k rH|d }t | ||� �}t||�|A }|}q|S )z,convert secret to DES key used by bsdi_cryptr )r r# r )r r/ �idx�end�nextZ tmp_valuer r r �_bsdi_secret_to_keyI s r5 c C s` t �|�}t| t�r | �d�} t| t�s,J �t| v r@tj� t ��t | �}t |d||�}t �|�S )z"pure-python backend for bsdi_cryptr! r )r � decode_int24r% r r& r' r( r) r* r+ r r5 r r r, )r �roundsr- r. r/ r0 r r r �_raw_bsdi_cryptU s r8 c @ s� e Zd ZdZd ZdZejZdZ d Z Z ejZ dZ e�ed�ejejB �Zedd� �Zd d � Zd d � Zd Zedd� �Zdd� Zedd� �Zdd� Z dS )r a� This class implements the des-crypt password hash, and follows the :ref:`password-hash-api`. It supports a fixed-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :param bool truncate_error: By default, des_crypt will silently truncate passwords larger than 8 bytes. Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash` to raise a :exc:`~passlib.exc.PasswordTruncateError` instead. .. versionadded:: 1.7 :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 �r- Ztruncate_error� r r zU ^ (?P<salt>[./a-z0-9]{2}) (?P<chk>[./a-z0-9]{11})? $c C s6 t |dd�}|d d� |dd � }}| ||p0d d�S )N�ascii�hashr �r- �checksum)r )�clsr< r- �chkr r r � from_string� s zdes_crypt.from_stringc C s t d�| j| jf }t|�S �Nz%s%s�r r- r> r ��selfr< r r r � to_string� s zdes_crypt.to_stringc C s | j r| �|� | �|�S )N)� use_defaults�_check_truncate_policyZ_calc_checksum_backend�rE r r r r �_calc_checksum� s zdes_crypt._calc_checksum�Zos_cryptZbuiltinc C s" t dd�r| �| j� dS dS d S )N�testZ abgOeLfPimXQoTF�r �_set_calc_checksum_backend�_calc_checksum_os_crypt�r? r r r �_load_backend_os_crypt� s z des_crypt._load_backend_os_cryptc C sT t || j�}|d u r | �|�S |�| j�r6t|�dkrHtj�| | j|��|dd � S )N� r )r r- �_calc_checksum_builtin� startswithr# r) r* �CryptBackendError)rE r r< r r r rO � s z!des_crypt._calc_checksum_os_cryptc C s | � | j� dS �NT�rN rS rP r r r �_load_backend_builtin� s z des_crypt._load_backend_builtinc C s t || j�d���d�S �Nr; )r1 r- r& �decoderI r r r rS � s z des_crypt._calc_checksum_builtinN) �__name__� __module__� __qualname__�__doc__�name� setting_kwdsr) � HASH64_CHARS�checksum_chars� checksum_size� min_salt_size� max_salt_size� salt_chars� truncate_size�re�compiler �X�I� _hash_regex� classmethodrA rF rJ �backendsrQ rO rX rS r r r r r p s, $ � r c s� e Zd ZdZd ZdZdZejZ d Z Z ejZ dZ dZdZdZe�ed �ejejB �Zed d � �Zd d � ZdZe� fdd��Ze� fdd��Z � fdd�Z dZ edd� �Z dd� Z edd� �Z!d d � Z"� Z#S ) r a This class implements the BSDi-Crypt password hash, and follows the :ref:`password-hash-api`. It supports a fixed-length salt, and a variable number of rounds. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 4 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :type rounds: int :param rounds: Optional number of rounds to use. Defaults to 5001, must be between 1 and 16777215, inclusive. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. versionadded:: 1.6 .. versionchanged:: 1.6 :meth:`hash` will now issue a warning if an even number of rounds is used (see :ref:`bsdi-crypt-security-issues` regarding weak DES keys). )r- r7 r: � i� � i��� Zlinearz� ^ _ (?P<rounds>[./a-z0-9]{4}) (?P<salt>[./a-z0-9]{4}) (?P<chk>[./a-z0-9]{11})? $c C sV t |dd�}| j�|�}|s(tj�| ��|�ddd�\}}}| t�|� d��||d�S )Nr; r< r7 r- r@ )r7 r- r> ) r rl �matchr) r* �InvalidHashError�groupr r6 r& )r? r< �mr7 r- r@ r r r rA 4 s �zbsdi_crypt.from_stringc C s, t d�t�| j��d�| j| jf }t|�S )Nz_%s%s%sr; )r r Z encode_int24r7 rZ r- r> r rD r r r rF A s �zbsdi_crypt.to_stringTc s2 t t| �jf i |��}|jd@ s.tdtjj� |S )Nrp zHbsdi_crypt rounds should be odd, as even rounds may reveal weak DES keys)�superr �using�default_roundsr r) r* ZPasslibSecurityWarning)r? �kwds�subcls�� __class__r r rv N s �zbsdi_crypt.usingc s t t| ��� }|dB S )Nrp )ru r �_generate_rounds)r? r7 rz r r r| W s zbsdi_crypt._generate_roundsc s$ | j d@ sdS tt| �jf i |��S )Nrp T)r7 ru r �_calc_needs_update)rE rx rz r r r} e s z bsdi_crypt._calc_needs_updaterK c C s" t dd�r| �| j� dS dS d S )NrL z_/...lLDAxARksGCHin.TFrM rP r r r rQ t s z!bsdi_crypt._load_backend_os_cryptc C s^ | � � }t||�}|d u r$| �|�S |�|d d� �rBt|�dkrRtj�| ||��|dd � S )N� � ���)rF r rS rT r# r) r* rU )rE r Zconfigr< r r r rO | s z"bsdi_crypt._calc_checksum_os_cryptc C s | � | j� dS rV rW rP r r r rX � s z bsdi_crypt._load_backend_builtinc C s t || j| j�d���d�S rY )r8 r7 r- r& rZ rI r r r rS � s z!bsdi_crypt._calc_checksum_builtin)$r[ r\ r] r^ r_ r` rc r) ra rb rd re rf rw Z min_roundsZ max_roundsZ rounds_costrh ri r rj rk rl rm rA rF Z_avoid_even_roundsrv r| r} rn rQ rO rX rS � __classcell__r r rz r r � s< # � r c sr e Zd ZdZd ZdZejZd Z Z ejZ e � ed�e je jB �Zedd� �Zdd� Zd� fd d � Zd d � Z� ZS )r ag This class implements the BigCrypt password hash, and follows the :ref:`password-hash-api`. It supports a fixed-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 22 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 )r- r zX ^ (?P<salt>[./a-z0-9]{2}) (?P<chk>([./a-z0-9]{11})+)? $c C sD t |dd�}| j�|�}|s(tj�| ��|�dd�\}}| ||d�S �Nr; r< r- r@ r= �r rl rq r) r* rr rs �r? r< rt r- r@ r r r rA � s zbigcrypt.from_stringc C s t d�| j| jf }t|�S rB rC rD r r r rF � s zbigcrypt.to_stringFc s0 t t| �j||d�}t|�d r,tj�| ��|S )N)�relaxedr: )ru r �_norm_checksumr# r) r* rr )rE r> r� rz r r r� � s zbigcrypt._norm_checksumc C sp t |t�r|�d�}t|| j�d��}d}t|�}||k rf|d }|t|||� |dd� �7 }|}q2|�d�S )Nr! r; r r� i����)r% r r& r1 r- r# rZ )rE r r@ r2 r3 r4 r r r rJ � s zbigcrypt._calc_checksum)F)r[ r\ r] r^ r_ r` r) ra rb rd re rf rh ri r rj rk rl rm rA rF r� rJ r� r r rz r r � s � r c @ sh e Zd ZdZd ZdZdZejZ d Z Z ejZ dZ e�ed�ejejB �Zedd� �Zd d � Zd d � Zd S )r a� This class implements the crypt16 password hash, and follows the :ref:`password-hash-api`. It supports a fixed-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :param bool truncate_error: By default, crypt16 will silently truncate passwords larger than 16 bytes. Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash` to raise a :exc:`~passlib.exc.PasswordTruncateError` instead. .. versionadded:: 1.7 :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 r9 � r � zU ^ (?P<salt>[./a-z0-9]{2}) (?P<chk>[./a-z0-9]{22})? $c C sD t |dd�}| j�|�}|s(tj�| ��|�dd�\}}| ||d�S r� r� r� r r r rA + s zcrypt16.from_stringc C s t d�| j| jf }t|�S rB rC rD r r r rF 4 s zcrypt16.to_stringc C s� t |t�r|�d�}| jr$| �|� zt�| j�d��}W n tyX t td���Y n0 t |�}t |d|d�}t |dd� �}t |d|d�}t � |�t � |� }|�d�S ) Nr! r; zinvalid chars in saltr r r r� � )r% r r& rG rH r r$ r- � ValueErrorr r r r r, rZ )rE r r. Zkey1Zresult1Zkey2Zresult2r@ r r r rJ ; s zcrypt16._calc_checksumN)r[ r\ r] r^ r_ r` rc r) ra rb rd re rf rg rh ri r rj rk rl rm rA rF rJ r r r r r � s $ � r )*r^ rh ZloggingZ getLoggerr[ �log�warningsr Z passlib.utilsr r r Zpasslib.utils.binaryr r Zpasslib.utils.compatr r r r r Zpasslib.crypto.desr Zpasslib.utils.handlersZutils�handlersr) �__all__r( r r1 r5 r8 Z TruncateMixinZHasManyBackendsZHasSaltZGenericHandlerr Z HasRoundsr r r r r r r �<module> s( $S