관리-도구
편집 파일: pbkdf2.cpython-39.opt-1.pyc
a f�WcBJ � @ s� d Z ddlmZmZ ddlmZmZ ddlZe�e �Z ddl m Z ddl mZmZ ddlmZmZmZmZ ddlmZ ddlm mZ g d �ZG d d � d ej ej ej ej �Z d de fd d�Z!e!ddded�d�Z"e!ddd�Z#e!ddd�Z$ej%de"ddd d�Z&ej%d e#d d d d�Z'ej%d e$d!d"d d�Z(d#Z)G d$d%� d%ej ej ej ej �Z*G d&d'� d'ej ej+ej �Z,G d(d)� d)ej ej ej �Z-G d*d+� d+ej ej ej ej �Z.dS ),z,passlib.handlers.pbkdf - PBKDF2 based hashes� )�hexlify� unhexlify)� b64encode� b64decodeN)� to_unicode)� ab64_decode� ab64_encode)� str_to_bascii�u� uascii_to_str�unicode)� pbkdf2_hmac)� pbkdf2_sha1� pbkdf2_sha256� pbkdf2_sha512�cta_pbkdf2_sha1�dlitz_pbkdf2_sha1�grub_pbkdf2_sha512c @ sR e Zd ZdZdZejZdZdZ dZ dZ dZ dZ dZed d � �Zd d � Zd d� ZdS )�Pbkdf2DigestHandlerz1base class for various pbkdf2_{digest} algorithms��saltZ salt_size�rounds� � N� � �� �linearc C sF t j|| j| d�\}}}t|�d��}|r8t|�d��}| |||d�S )N)�handler�ascii�r r �checksum)�uh� parse_mc3�identr �encode��cls�hashr r �chk� r) �;/usr/lib/python3.9/site-packages/passlib/handlers/pbkdf2.py� from_string? s z Pbkdf2DigestHandler.from_stringc C s4 t | j��d�}t | j��d�}t�| j| j||�S �Nr )r r �decoder r! � render_mc3r# r ��selfr r( r) r) r* � to_stringG s z Pbkdf2DigestHandler.to_stringc C s t | j|| j| j| j�S )N)r �_digestr r � checksum_size�r0 �secretr) r) r* �_calc_checksumL s z"Pbkdf2DigestHandler._calc_checksum)�__name__� __module__� __qualname__�__doc__� setting_kwdsr! � HASH64_CHARSZchecksum_chars�default_salt_size� max_salt_size�default_rounds� min_rounds� max_rounds� rounds_costr2 � classmethodr+ r1 r6 r) r) r) r* r s r i�. c C sd d| }|du r t d�| f }t}t||ft|||| |||d d d dt| �� |j|d� d ��S ) z;create new Pbkdf2DigestHandler subclass for a specific hashZpbkdf2_Nz $pbkdf2-%s$� � � a$ This class implements a generic ``PBKDF2-HMAC-%(digest)s``-based password hash, and follows the :ref:`password-hash-api`. It supports a variable-length salt, and a variable number of rounds. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt bytes. If specified, the length must be between 0-1024 bytes. If not specified, a %(dsc)d byte salt will be autogenerated (this is recommended). :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. Defaults to %(dsc)d bytes, but can be any value between 0 and 1024. :type rounds: int :param rounds: Optional number of rounds to use. Defaults to %(dr)d, but must be within ``range(1,1<<32)``. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. versionadded:: 1.6 )�digestZdscZdr)r8 �namer# r2 r? r3 Zencoded_checksum_sizer: )r r �type�dict�upperr= )Z hash_name� digest_sizer r# �modulerH �baser) r) r* �create_pbkdf2_hashP s ��rO �sha1� i�� z$pbkdf2$)r# Zsha256� iHq �sha512�@ i�a �ldap_pbkdf2_sha1z{PBKDF2}T�ldap_pbkdf2_sha256z{PBKDF2-SHA256}z$pbkdf2-sha256$�ldap_pbkdf2_sha512z{PBKDF2-SHA512}z$pbkdf2-sha512$s -_c @ sZ e Zd ZdZd ZdZed�ZdZdZ dZ e j Z dZ dZd Zed d � �Zd d � Zdd� ZdS )r a� This class implements Cryptacular's PBKDF2-based crypt algorithm, and follows the :ref:`password-hash-api`. It supports a variable-length salt, and a variable number of rounds. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt bytes. If specified, it may be any length. If not specified, a one will be autogenerated (this is recommended). :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. Defaults to 16 bytes, but can be any value between 0 and 1024. :type rounds: int :param rounds: Optional number of rounds to use. Defaults to 60000, must be within ``range(1,1<<32)``. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. versionadded:: 1.6 r �$p5k2$rQ r r r r r c C sL t j|| jd| d�\}}}t|�d�t�}|r>t|�d�t�}| |||d�S )Nr )� rounds_baser r r )r! r" r# r r$ � CTA_ALTCHARSr% r) r) r* r+ � s zcta_pbkdf2_sha1.from_stringc C s< t | jt��d�}t | jt��d�}tj| j| j||dd�S )Nr r �rY ) r r rZ r- r r! r. r# r r/ r) r) r* r1 � s zcta_pbkdf2_sha1.to_stringc C s t d|| j| jd�S )NrP rQ �r r r r4 r) r) r* r6 � s z cta_pbkdf2_sha1._calc_checksumN)r7 r8 r9 r: rH r; r r# r3 r= r> r r? r@ rA rB rC r+ r1 r6 r) r) r) r* r � s % r c @ sl e Zd ZdZd ZdZed�Zed�ZdZ dZ e j Z ejZdZdZd Zed d � �Zd d � Zdd� Zdd� ZdS )r aC This class implements Dwayne Litzenberger's PBKDF2-based crypt algorithm, and follows the :ref:`password-hash-api`. It supports a variable-length salt, and a variable number of rounds. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If specified, it may be any length, but must use the characters in the regexp range ``[./0-9A-Za-z]``. If not specified, a 16 character salt will be autogenerated (this is recommended). :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. Defaults to 16 bytes, but can be any value between 0 and 1024. :type rounds: int :param rounds: Optional number of rounds to use. Defaults to 60000, must be within ``range(1,1<<32)``. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. versionadded:: 1.6 r rX z1000000000000000000000000000000000000000000000000=r r r r r c C s* t j|| jdd| d�\}}}| |||d�S )Nr � )rY r? r r )r! r" r# r% r) r) r* r+ 9 s � z dlitz_pbkdf2_sha1.from_stringc C s, | j }|dkrd }tj| j|| j| jdd�S �Nr] r r[ )r r! r. r# r r �r0 r r) r) r* r1 ? s zdlitz_pbkdf2_sha1.to_stringc C s* | j }|dkrd }tj| j|| jd dd�S r^ )r r! r. r# r r_ r) r) r* � _get_configE s z dlitz_pbkdf2_sha1._get_configc C s( | � � }td||| jd�}t|��d�S )NrP � r )r` r r r r- )r0 r5 r �resultr) r) r* r6 N s z dlitz_pbkdf2_sha1._calc_checksumN)r7 r8 r9 r: rH r; r r# Z_stub_checksumr= r> r! r< Z salt_charsr r? r@ rA rB rC r+ r1 r` r6 r) r) r) r* r � s" % r c @ sH e Zd ZdZd ZdZed�ZdZd Z Z e dd� �Z dd � Z d d � Zd S ) �atlassian_pbkdf2_sha1aB This class implements the PBKDF2 hash used by Atlassian. It supports a fixed-length salt, and a fixed number of rounds. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt bytes. If specified, the length must be exactly 16 bytes. If not specified, a salt will be autogenerated (this is recommended). :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 )r z {PKCS5S2}rR r c C sh t |dd�}| j}|�|�s(tj�| ��t|t|�d � �d��}|d d� |dd � }}| ||d�S )Nr r' r )r r ) r r# � startswithr! �excZInvalidHashErrorr �lenr$ )r& r' r# �datar r( r) r) r* r+ { s z!atlassian_pbkdf2_sha1.from_stringc C s( | j | j }| jt|��d� }t|�S r, )r r r# r r- r )r0 rg r' r) r) r* r1 � s z atlassian_pbkdf2_sha1.to_stringc C s t d|| jdd�S )NrP i' rR )r r r4 r) r) r* r6 � s z$atlassian_pbkdf2_sha1._calc_checksumN)r7 r8 r9 r: rH r; r r# r3 Z min_salt_sizer> rC r+ r1 r6 r) r) r) r* rc [ s rc c @ sZ e Zd ZdZd ZdZed�ZdZdZ dZ e j Z dZ dZdZed d � �Zd d � Zd d� ZdS )r a� This class implements Grub's pbkdf2-hmac-sha512 hash, and follows the :ref:`password-hash-api`. It supports a variable-length salt, and a variable number of rounds. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt bytes. If specified, the length must be between 0-1024 bytes. If not specified, a 64 byte salt will be autogenerated (this is recommended). :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. Defaults to 64 bytes, but can be any value between 0 and 1024. :type rounds: int :param rounds: Optional number of rounds to use. Defaults to 19000, but must be within ``range(1,1<<32)``. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. versionadded:: 1.6 r zgrub.pbkdf2.sha512.rT r r r r c C sL t j|| jtd�| d�\}}}t|�d��}|r>t|�d��}| |||d�S )N�.)�sepr r r )r! r" r# r r r$ r% r) r) r* r+ � s � z grub_pbkdf2_sha512.from_stringc C sD t | j��d��� }t | j��d��� }tj| j| j||t d�d�S )Nr rh )ri ) r r r- rK r r! r. r# r r r/ r) r) r* r1 � s z grub_pbkdf2_sha512.to_stringc C s t d|| j| jd�S )NrS rT r\ r4 r) r) r* r6 � s z!grub_pbkdf2_sha512._calc_checksumN)r7 r8 r9 r: rH r; r r# r3 r= r> r r? r@ rA rB rC r+ r1 r6 r) r) r) r* r � s r )/r: Zbinasciir r �base64r r ZloggingZ getLoggerr7 �logZ passlib.utilsr Zpasslib.utils.binaryr r Zpasslib.utils.compatr r r r Zpasslib.crypto.digestr Zpasslib.utils.handlersZutils�handlersr! �__all__Z HasRoundsZ HasRawSaltZHasRawChecksumZGenericHandlerr rO r r r Z PrefixWrapperrU rV rW rZ r ZHasSaltr rc r r) r) r) r* �<module> s, 33 `i8