관리-도구
편집 파일: scrypt.cpython-39.pyc
a f�WcB7 � @ s� d Z ddlmZmZ ddlZe�e�Zddlm Z ddl m Z m Z ddlm Z mZmZ ddlmZmZmZ ddlmZ ddlm mZ d gZed �Z ed �Z ed �Z G d d � d ej ej ej!ej"ej#ej$�Z dS )z/passlib.handlers.scrypt -- scrypt password hash� )�with_statement�absolute_importN)�scrypt)�h64�to_bytes)r � b64s_decode� b64s_encode)�u� bascii_to_str�suppress_cause)� classpropertyr z$scrypt$z$7$�$c s e Zd ZdZd ZdZdZeZee fZ dZ dZ dZ dZdZdZdZd Zed+� fd d � �Zed d� �Zedd� �Zedd� �Zedd� �Zdd� Zd,� fdd� Zed-dd��Z� fd d �Z e d d � �Z ed d!� �Z ed.d#d$��Z ed/d%d&��Z!d'd(� Z"� fd)d*�Z#� Z$S )0r a� This class implements an SCrypt-based password [#scrypt-home]_ hash, and follows the :ref:`password-hash-api`. It supports a variable-length salt, a variable number of rounds, as well as some custom tuning parameters unique to scrypt (see below). The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If specified, the length must be between 0-1024 bytes. If not specified, one will be auto-generated (this is recommended). :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. Defaults to 16 bytes, but can be any value between 0 and 1024. :type rounds: int :param rounds: Optional number of rounds to use. Defaults to 16, but must be within ``range(1,32)``. .. warning:: Unlike many hash algorithms, increasing the rounds value will increase both the time *and memory* required to hash a password. :type block_size: int :param block_size: Optional block size to pass to scrypt hash function (the ``r`` parameter). Useful for tuning scrypt to optimal performance for your CPU architecture. Defaults to 8. :type parallelism: int :param parallelism: Optional parallelism to pass to scrypt hash function (the ``p`` parameter). Defaults to 1. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. note:: The underlying scrypt hash function has a number of limitations on it's parameter values, which forbids certain combinations of settings. The requirements are: * ``linear_rounds = 2**<some positive integer>`` * ``linear_rounds < 2**(16 * block_size)`` * ``block_size * parallelism <= 2**30-1`` .. todo:: This class currently does not support configuring default values for ``block_size`` or ``parallelism`` via a :class:`~passlib.context.CryptContext` configuration. )�ident�saltZ salt_size�rounds� block_size� parallelism� � i � � Zlog2� Nc s� t t| �jf i |��}|d urHt|tj�r2t|�}|j||�d�d�|_ z t � d| j > | j | j � W n8 ty� } z ttdt|� ���W Y d }~n d }~0 0 |S )N�relaxed)r r z&scrypt: invalid settings combination: )�superr �using� isinstance�uhZnative_string_types�int�_norm_block_size�getr �_scryptZvalidate�default_roundsr � ValueErrorr �str)�clsr �kwds�subcls�err�� __class__� �;/usr/lib/python3.9/site-packages/passlib/handlers/scrypt.pyr � s *z scrypt.usingc C s | f i | � |���S �N)�parse)r$ �hashr* r* r+ � from_string� s zscrypt.from_stringc C s@ | � |�\}}t| d|�t� d �}|r0||�S tj�| ��d S )Nz_parse_%s_string)Z _parse_ident�getattr�strip�_UDOLLARr �excZInvalidHashError)r$ r. r �suffix�funcr* r* r+ r- � s z scrypt.parsec C s� |� d�}t|�dkr"|\}}}n(t|�dkr<|\}}d }ntj�| d��|� d�}t|�dkr�|\}}}|�d�sxJ �|�d�s�J �|�d�s�J �ntj�| d ��ttt|dd � �t|dd � �t|dd � �t |� d ��|r�t |� d ��nd d �S ) Nr � � zmalformed hash�,zln=zr=zp=zmalformed settings field�ascii�r r r r r �checksum) �split�lenr r3 �MalformedHashError� startswith�dict� IDENT_SCRYPTr r �encode) r$ r4 �parts�paramsr �digestZnstrZbstrZpstrr* r* r+ �_parse_scrypt_string� s, �zscrypt._parse_scrypt_stringc C s� |� d��d�}t|�dkr&|\}}n"t|�dkr>|\}d }n tj�� �t|�dk rbtj�| d��ttt� |d d� �t� |dd� �t� |dd� �|dd � |r�t� |�nd d�S ) Nr9 � $r7 r � zparams field too short� r: ) rB r< r= r r3 r> r@ �IDENT_7r Z decode_int6Z decode_int30Z decode_bytes)r$ r4 rC rD rE r* r* r+ �_parse_7_string� s" �zscrypt._parse_7_stringc C s� | j }|tkr:d| j| j| jtt| j��tt| j��f S |t ksFJ �| j}z|� d� W n t yx t t d���Y n0 td�dt�| j�t�| j�t�| j�| jdt�| j�g��S d S )Nz $scrypt$ln=%d,r=%d,p=%d$%s$%sr9 z.scrypt $7$ hashes dont support non-ascii salts� s $7$rG )r rA r r r r r r r; rJ �decode�UnicodeDecodeErrorr �NotImplementedError�joinr Z encode_int6Z encode_int30Z encode_bytes)�selfr r r* r* r+ � to_string s0 � �zscrypt.to_stringc sJ t t| �jf i |�� |d u r:tj| | j| jdd�sFJ �n | �|�| _d S )Nr ��param)r r �__init__r Zvalidate_default_valuer r )rQ r r% r( r* r+ rU 1 s � zscrypt.__init__Fc C s t j| |dd|d�S )Nr r )�minrT r )r Z norm_integer)r$ r r r* r* r+ r > s zscrypt._norm_block_sizec s$ t t| ��� }| jtkr t|�}|S r, )r r �_generate_saltr rJ r )rQ r r( r* r+ rW B s zscrypt._generate_saltc C s t jS r, )r Zbackend_values�r$ r* r* r+ �backendsP s zscrypt.backendsc C s t jS r, )r ZbackendrX r* r* r+ � get_backendT s zscrypt.get_backend�anyc C s2 z| j |dd� W dS tjjy, Y dS 0 d S )NT��dryrunF)� set_backendr r3 ZMissingBackendError)r$ �namer* r* r+ � has_backendX s zscrypt.has_backendc C s t j||d� d S )Nr\ )r Z _set_backend)r$ r_ r] r* r* r+ r^ ` s zscrypt.set_backendc C s0 t |dd�}tj|| jd| j> | j| j| jd�S )N�secretrS r )�n�r�pZkeylen)r r r r r r r � checksum_size)rQ ra r* r* r+ �_calc_checksumg s �zscrypt._calc_checksumc s* | j t| �j krdS tt| �jf i |��S )zR mark hash as needing update if rounds is outside desired bounds. T)r �typer r �_calc_needs_update)rQ r% r( r* r+ rh p s zscrypt._calc_needs_update)N)N)F)r[ )r[ F)%�__name__� __module__� __qualname__�__doc__r_ Z setting_kwdsre rA Z default_identrJ Z ident_valuesZdefault_salt_sizeZ max_salt_sizer! Z min_roundsZ max_roundsZ rounds_costr r � classmethodr r/ r- rF rK rR rU r rW r rY rZ r` r^ rf rh � __classcell__r* r* r( r+ r ! sN G - )%rl Z __future__r r ZloggingZ getLoggerri �logZpasslib.cryptor r Z passlib.utilsr r Zpasslib.utils.binaryr r Zpasslib.utils.compatr r r Zpasslib.utils.decorr Zpasslib.utils.handlersZutils�handlersr �__all__rA rJ r2 ZParallelismMixinZ HasRoundsZ HasRawSaltZHasRawChecksumZ HasManyIdentsZGenericHandlerr* r* r* r+ �<module> s � �