관리-도구
편집 파일: sha2_crypt.cpython-39.pyc
a f�Wc(U � @ s� d Z ddlZddlZe�e�ZddlmZmZm Z m Z ddl m Z ddl mZmZmZmZ ddlm mZ ddgZdZd Zd Zd Zdd d�Zed�Z ed�Z ed�Z G dd� dej ej ej!ej"�Z#G dd� de#�Z$G dd� de#�Z%dS )z9passlib.handlers.sha2_crypt - SHA256-Crypt / SHA512-Crypt� N)� safe_crypt� test_crypt� repeat_string� to_unicode)�h64)�byte_elem_value�u� uascii_to_str�unicode� sha512_crypt� sha256_crypt� ))r � �� � �r r )r � r r �r r )� r r r )r r r r r )r r r r )r r r r r ) � � r � r � r � � � � r � r � r � � � � � � � � � � � � � � � � )@�* r r r �+ r r r �, �- r r r �. r r" r �/ �0 r' r$ r& �1 r) r+ r( �2 �3 r. r- r �4 r/ � r �5 �6 �! r r �7 �" �# r �8 �9 �$ r! r# �: �% �& r% �; �< �' r* r, �= �( �) r �> �? Fc s� t | t�r| �d�} t | t�s"J �t| v r>tj�|r8tnt ��t | �}d| krZdksdn J d��t |t�svJ d��|�d�}t |�}|dk s�J d��|r�t j }t }n t j}t}|| | | ��� }|| | �} | j} | t||�� |} | �r| | d @ r�|n| � | d L } q�| �� } |d k �r8t|| | ��� |�} n>|| �}|j}|d } | �rh|| � | d 8 } �qNt|�� |�} t | �|k�s�J �||d t| d � ��� d |� }t |�|k�s�J d��| | }| | }| |||| || || g� � fdd�tD �}| }t|d�\}}|�rP|D ]&\}}||||| ��� ��� }�q |d 8 }�q|�r�|d ? }|d |� D ]&\}}||||| ��� ��� }�qj|d @ �r�|||| d ��� }t�||��d�S )a� perform raw sha256-crypt / sha512-crypt this function provides a pure-python implementation of the internals for the SHA256-Crypt and SHA512-Crypt algorithms; it doesn't handle any of the parsing/validation of the hash strings themselves. :arg pwd: password chars/bytes to hash :arg salt: salt chars to use :arg rounds: linear rounds cost :arg use_512: use sha512-crypt instead of sha256-crypt mode :returns: encoded checksum chars zutf-8�� �ɚ;zinvalid roundszsalt not unicode�asciir% zsalt too larger �` r# r Nz salt_len somehow > hash_len!c s g | ]\}}� | � | f�qS � rT )�.0�even�odd�ZpermsrT �?/usr/lib/python3.9/site-packages/passlib/handlers/sha2_crypt.py� <listcomp>� � z#_raw_sha2_crypt.<locals>.<listcomp>r0 )� isinstancer �encode�bytes�_BNULL�uh�excZNullPasswordErrorr r �len�hashlibZsha512�_512_transpose_mapZsha256�_256_transpose_map�digest�updater r �_c_digest_offsets�divmodr Zencode_transposed_bytes�decode)�pwd�salt�roundsZuse_512Zpwd_lenZsalt_lenZ hash_constZ transpose_mapZdbZa_ctxZ a_ctx_update�i�daZdpZtmp_ctxZtmp_ctx_updateZdsZdp_dpZdp_ds�dataZdcZblocks�tailrV rW �pairsrT rX rY �_raw_sha2_crypt8 sl ! $. rs zrounds=�$�0c s� e Zd ZdZdZejZdZejZ dZ dZ dZ dZ dZdZd � fd d � Zd d � Zd d� Zedd� �Zdd� ZdZdZedd� �Zdd� Zedd� �Zdd� Z� Z S ) � _SHA2_CommonzBclass containing common code shared by sha256_crypt & sha512_crypt)rl rm �implicit_roundsZ salt_sizer# rP rQ ZlinearFNc s8 t t| �jf i |�� |d u r.| jo,| jdk}|| _d S )N� )�superrv �__init__Z use_defaultsrm rw )�selfrw �kwds�� __class__rT rY rz s z_SHA2_Common.__init__c C s | j || jd u d�S �N)Zrelaxed)Z _norm_salt�checksum)r{ rl rT rT rY � _parse_salt s z_SHA2_Common._parse_saltc C s | j || jd u d�S r )Z _norm_roundsr� )r{ rm rT rT rY � _parse_rounds# s z_SHA2_Common._parse_roundsc C s� t |dd�}| j}|�|�s(tj�| ��t|�dks8J �|dd � �t�}|d �t �r�tt �dkshJ �|� d�dd � }|�t �r�|t kr�tj� | ��t |�}d}nd}d}t|�d kr�|\}}n&t|�d kr�|d }d }n tj�| ��| |||p�d |d �S ) NrR �hashr r r& Frx Tr r )rm rl r� rw )r �ident� startswithr` ra ZInvalidHashErrorrb �split�_UDOLLAR�_UROUNDS�pop�_UZEROZZeroPaddedRoundsError�intZMalformedHashError)�clsr� r� �partsrm rw rl ZchkrT rT rY � from_string' s6 �z_SHA2_Common.from_stringc C s^ | j dkr2| jr2td�| j| j| jp*td�f }n$td�| j| j | j| jpPtd�f }t|�S )Nrx z%s%s$%s� z%srounds=%d$%s$%s)rm rw r r� rl r� r )r{ r� rT rT rY � to_stringT s ��z_SHA2_Common.to_string)Zos_cryptZbuiltinc C s" t | j� r| �| j� dS dS d S )NTF)r � _test_hash�_set_calc_checksum_backend�_calc_checksum_os_crypt�r� rT rT rY �_load_backend_os_crypti s z#_SHA2_Common._load_backend_os_cryptc C sf | � � }t||�}|d u r$| �|�S | j}|�| j�rH|| d tkrXtj� | ||��|| d � S )Nr ) r� r �_calc_checksum_builtin� checksum_sizer� r� r� r` ra ZCryptBackendError)r{ �secretZconfigr� �csrT rT rY r� q s z$_SHA2_Common._calc_checksum_os_cryptc C s | � | j� dS )NT)r� r� r� rT rT rY �_load_backend_builtin� s z"_SHA2_Common._load_backend_builtinc C s t || j| j| j�S )N)rs rl rm � _cdb_use_512)r{ r� rT rT rY r� � s �z#_SHA2_Common._calc_checksum_builtin)N) �__name__� __module__� __qualname__�__doc__Z setting_kwdsr` Z HASH64_CHARSZchecksum_charsZ max_salt_sizeZ salt_charsZ min_roundsZ max_roundsZ rounds_costr� Z_rounds_prefixrw rz r� r� � classmethodr� r� Zbackendsr� r� r� r� r� � __classcell__rT rT r} rY rv � s2 , rv c @ s( e Zd ZdZd Zed�ZdZdZdZ dS )r aK This class implements the SHA256-Crypt password hash, and follows the :ref:`password-hash-api`. It supports a variable-length salt, and a variable number of rounds. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 0-16 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :type rounds: int :param rounds: Optional number of rounds to use. Defaults to 535000, must be between 1000 and 999999999, inclusive. .. note:: per the official specification, when the rounds parameter is set to 5000, it may be omitted from the hash string. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. versionadded:: 1.6 .. commented out, currently only supported by :meth:`hash`, and not via :meth:`using`: :type implicit_rounds: bool :param implicit_rounds: this is an internal option which generally doesn't need to be touched. this flag determines whether the hash should omit the rounds parameter when encoding it to a string; this is only permitted by the spec for rounds=5000, and the flag is ignored otherwise. the spec requires the two different encodings be preserved as they are, instead of normalizing them. z$5$r1 i�) )�testz?$5$rounds=1000$test$QmQADEXMG8POI5WDsaeho0P36yK3Tcrgboabng6bkb/N) r� r� r� r� �namer r� r� �default_roundsr� rT rT rT rY r � s .c @ s, e Zd ZdZd Zed�ZdZdZdZ dZ dS )r aK This class implements the SHA512-Crypt password hash, and follows the :ref:`password-hash-api`. It supports a variable-length salt, and a variable number of rounds. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 0-16 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :type rounds: int :param rounds: Optional number of rounds to use. Defaults to 656000, must be between 1000 and 999999999, inclusive. .. note:: per the official specification, when the rounds parameter is set to 5000, it may be omitted from the hash string. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. versionadded:: 1.6 .. commented out, currently only supported by :meth:`hash`, and not via :meth:`using`: :type implicit_rounds: bool :param implicit_rounds: this is an internal option which generally doesn't need to be touched. this flag determines whether the hash should omit the rounds parameter when encoding it to a string; this is only permitted by the spec for rounds=5000, and the flag is ignored otherwise. the spec requires the two different encodings be preserved as they are, instead of normalizing them. z$6$�V Ti� )r� zj$6$rounds=1000$test$2M/Lx6MtobqjLjobw0Wmo4Q5OFx5nVLJvmgseatA6oMnyWeBdRDx4DU.1H3eGmse6pgsOgDisWBGI5c7TZauS0N) r� r� r� r� r� r r� r� r� r� r� rT rT rT rY r � s /)F)&r� rc ZloggingZ getLoggerr� �logZ passlib.utilsr r r r Zpasslib.utils.binaryr Zpasslib.utils.compatr r r r Zpasslib.utils.handlersZutils�handlersr` �__all__r_ rh re rd rs r� r� r� ZHasManyBackendsZ HasRoundsZHasSaltZGenericHandlerrv r r rT rT rT rY �<module> s0 � B� B