�
XR_BJ � �p � S r SSKJrJr SSKJrJr SSKr\R " \ 5 r
SSK J r SSK
JrJr SSKJrJrJrJr SSKJr SSKJs Jr / S Qr " S
S \R8 \R: \R< \R> 5 r S S\ 4S
jr!\!" SSS\" S5 S9r"\!" SSS5 r#\!" SSS5 r$\RJ " S\"SSSS9r&\RJ " S \#S S SS9r'\RJ " S \$S S!SS9r(S"r) " S# S$\R8 \R: \R< \R> 5 r* " S% S&\R8 \RV \R> 5 r, " S' S(\R: \R< \R> 5 r- " S) S*\R8 \R: \R< \R> 5 r.g)+z,passlib.handlers.pbkdf - PBKDF2 based hashes� )�hexlify� unhexlify)� b64encode� b64decodeN)�
to_unicode)� ab64_decode� ab64_encode)�
str_to_bascii�u�
uascii_to_str�unicode)� pbkdf2_hmac)� pbkdf2_sha1�
pbkdf2_sha256�
pbkdf2_sha512�cta_pbkdf2_sha1�dlitz_pbkdf2_sha1�grub_pbkdf2_sha512c �l � \ rS rSrSrSr\R rSr Sr
Sr Sr Sr
S rSr\S
5 rS rS rS
rg)�Pbkdf2DigestHandler� z1base class for various pbkdf2_{digest} algorithms��salt� salt_size�rounds� � N� � �� �linearc �� � [ R " XR U S9u p#n[ UR S5 5 nU( a [ UR S5 5 nU " X#US9$ )N)�handler�ascii�r r �checksum)�uh� parse_mc3�identr �encode��cls�hashr r �chks �9/usr/lib/python3/dist-packages/passlib/handlers/pbkdf2.py� from_string� Pbkdf2DigestHandler.from_string? sQ � � �L�L��y�y�#� F���c��4�;�;�w�/�0�� � �c�j�j�� 1�2�C��&�c�:�:� c �� � [ U R 5 R S5 n[ U R 5 R S5 n[ R
" U R U R X5 $ �Nr# )r r �decoder% r& �
render_mc3r( r ��selfr r- s r. � to_string� Pbkdf2DigestHandler.to_stringG sO � ��4�9�9�%�,�,�W�5���$�-�-�(�/�/��8���}�}�T�Z�Z����d�@�@r1 c �n � [ U R XR U R U R 5 $ )N)r �_digestr r �
checksum_size�r7 �secrets r. �_calc_checksum�"Pbkdf2DigestHandler._calc_checksumL s% � ��4�<�<����D�K�K��I[�I[�\�\r1 � )�__name__�
__module__� __qualname__�__firstlineno__�__doc__� setting_kwdsr& � HASH64_CHARS�checksum_chars�default_salt_size�
max_salt_size�default_rounds�
min_rounds�
max_rounds� rounds_costr; � classmethodr/ r8 r? �__static_attributes__rA r1 r. r r s_ � �;� 3�L��_�_�N� ���M� �N��J��J��K� �G� �;� �;�A�
]r1 r i�. c �� � SU - nUc [ S5 U 4- n[ n[ XV4[ UUUU UUUS- S- S- S[ U R 5 UR
US9- S95 $ ) z;create new Pbkdf2DigestHandler subclass for a specific hash�pbkdf2_z $pbkdf2-%s$� � � a$ This class implements a generic ``PBKDF2-HMAC-%(digest)s``-based password hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt bytes.
If specified, the length must be between 0-1024 bytes.
If not specified, a %(dsc)d byte salt will be autogenerated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to %(dsc)d bytes, but can be any value between 0 and 1024.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to %(dr)d, but must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
)�digest�dsc�dr)rC �namer( r; rL r< �encoded_checksum_sizerF )r r �type�dict�upperrJ )� hash_name� digest_sizer r( �modulerZ �bases r. �create_pbkdf2_hashrc P s� � � �y� �D� �}��-� �I�<�/�� �D� ��g�t��
��� �!� *�1�}�Q��� 2� �> �i�o�o�'�T�-C�-C��
O�? P�( � ( � (r1 �sha1� i�� z$pbkdf2$)r( �sha256� iHq �sha512�@ i�a �ldap_pbkdf2_sha1z{PBKDF2}T�ldap_pbkdf2_sha256z{PBKDF2-SHA256}z$pbkdf2-sha256$�ldap_pbkdf2_sha512z{PBKDF2-SHA512}z$pbkdf2-sha512$s -_c �| � \ rS rSrSrS rSr\" S5 rSr Sr
Sr \ R r
SrS rS
r\S 5 rS rS
rSrg)r � a� This class implements Cryptacular's PBKDF2-based crypt algorithm, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt bytes.
If specified, it may be any length.
If not specified, a one will be autogenerated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to 16 bytes, but can be any value between 0 and 1024.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 60000, must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
r �$p5k2$re r r r r r c �� � [ R " XR SU S9u p#n[ UR S5 [
5 nU( a [ UR S5 [
5 nU " X#US9$ )Nr )� rounds_baser" r# r$ )r& r' r( r r) � CTA_ALTCHARSr* s r. r/ �cta_pbkdf2_sha1.from_string� sZ � � �L�L��y�y�b�RU� V���c�����W�-�|�<�� ��C�J�J�w� /� �>�C��&�c�:�:r1 c � � [ U R [ 5 R S5 n[ U R [ 5 R S5 n[
R " U R U R XSS9$ )Nr# r �rq ) r r rr r4 r% r& r5 r( r r6 s r. r8 �cta_pbkdf2_sha1.to_string� sU � �����L�1�8�8��A����
�
�|�4�;�;�G�D���}�}�T�Z�Z����d�R�P�Pr1 c �F � [ SXR U R S5 $ )Nrd re �r r r r= s r. r? � cta_pbkdf2_sha1._calc_checksum� s � ��6�6�9�9�d�k�k�2�F�Fr1 rA N)rB rC rD rE rF rZ rG r r( r< rJ rK r rL rM rN rO rP r/ r8 r? rQ rA r1 r. r r � sk � � �J �D�2�L�
�h�K�E��M� ���M� !�/�/�N��J��J��K� �;� �;�Q�Gr1 r c � � \ rS rSrSrS rSr\" S5 r\" S5 r Sr
Sr \ R r\R rSrS rS
r\S 5 rS rS
rS rSrg)r �� a� This class implements Dwayne Litzenberger's PBKDF2-based crypt algorithm, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If specified, it may be any length, but must use the characters in the regexp range ``[./0-9A-Za-z]``.
If not specified, a 16 character salt will be autogenerated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to 16 bytes, but can be any value between 0 and 1024.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 60000, must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
r ro z1000000000000000000000000000000000000000000000000=r r r r r c �X � [ R " XR SSU S9u p#nU " X#US9$ )Nr � )rq rL r" r$ )r& r' r( r* s r. r/ � dlitz_pbkdf2_sha1.from_string9 s0 � � �L�L��y�y�b�8;�S� J���c��&�c�:�:r1 c � � U R nUS:X a S n[ R " U R XR U R
SS9$ �Nr} r ru )r r& r5 r( r r% �r7 r s r. r8 �dlitz_pbkdf2_sha1.to_string? s9 � ����� �S�=��F��}�}�T�Z�Z����D�M�M�WY�Z�Zr1 c � � U R nUS:X a S n[ R " U R XR S SS9$ r� )r r& r5 r( r r� s r. � _get_config� dlitz_pbkdf2_sha1._get_configE s4 � ����� �S�=��F��}�}�T�Z�Z����D�b�Q�Qr1 c � � U R 5 n[ SXU R S5 n[ U5 R S5 $ )Nrd � r# )r� r r r r4 )r7 r> r �results r. r? � dlitz_pbkdf2_sha1._calc_checksumN s: � �� � �!�� �V�V�4�;�;��C���6�"�)�)�'�2�2r1 rA N)rB rC rD rE rF rZ rG r r( �_stub_checksumrJ rK r& rH �
salt_charsr rL rM rN rO rP r/ r8 r� r? rQ rA r1 r. r r � s~ � � �J �D�2�L�
�h�K�E��~�&�N� ���M�� � �J�
!�/�/�N��J��J��K� �;� �;�
[� R�3r1 r c �X � \ rS rSrSrS rSr\" S5 rSr S=r
r \ S 5 r
S rS rS
rg ) �atlassian_pbkdf2_sha1i[ a This class implements the PBKDF2 hash used by Atlassian.
It supports a fixed-length salt, and a fixed number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt bytes.
If specified, the length must be exactly 16 bytes.
If not specified, a salt will be autogenerated (this is recommended).
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
)r z {PKCS5S2}rg r c � � [ USS5 nU R nUR U5 ( d [ R R U 5 e[
U[ U5 S R S5 5 nUS S USS pTU " XES9$ )Nr# r, r )r r% ) r r( �
startswithr& �exc�InvalidHashErrorr �lenr) )r+ r, r( �datar r- s r. r/ �!atlassian_pbkdf2_sha1.from_string{ s{ � ��$���0��� � �����u�%�%��&�&�)�)�#�.� .���c�%�j�k�*�1�1�'�:�;����"�I�t�B�C�y�c���+�+r1 c � � U R U R - nU R [ U5 R S5 - n[ U5 $ r3 )r r% r( r r4 r )r7 r� r, s r. r8 � atlassian_pbkdf2_sha1.to_string� s< � ��y�y�4�=�=�(���z�z�I�d�O� 2� 2�7� ;�;�� �T�"�"r1 c �2 � [ SXR SS5 $ )Nrd i' rg )r r r= s r. r? �$atlassian_pbkdf2_sha1._calc_checksum� s � � �6�6�9�9�e�R�@�@r1 rA N)rB rC rD rE rF rZ rG r r( r< �
min_salt_sizerK rP r/ r8 r? rQ rA r1 r. r� r� [ sJ � ��. #�D��L�
�k�N�E��M� %'�&�M�M��,� �,�#�
Ar1 r� c �| � \ rS rSrSrS rSr\" S5 rSr Sr
Sr \ R r
SrSrS r\S
5 rS rS rS
rg)r i� a� This class implements Grub's pbkdf2-hmac-sha512 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt bytes.
If specified, the length must be between 0-1024 bytes.
If not specified, a 64 byte salt will be autogenerated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to 64 bytes, but can be any value between 0 and 1024.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 19000, but must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
r zgrub.pbkdf2.sha512.ri r r r r c �� � [ R " XR [ S5 U S9u p#n[ UR S5 5 nU( a [ UR S5 5 nU " X#US9$ )N�.)�sepr" r# r$ )r& r' r( r r r) r* s r. r/ � grub_pbkdf2_sha512.from_string� sZ � � �L�L��y�y�a��f�14� 6���c�����W�-�.�� ��C�J�J�w� /�0�C��&�c�:�:r1 c �2 � [ U R 5 R S5 R 5 n[ U R 5 R S5 R 5 n[
R " U R U R X[ S5 S9$ )Nr# r� )r� )
r r r4 r^ r% r& r5 r( r r r6 s r. r8 � grub_pbkdf2_sha512.to_string� sg � ��t�y�y�!�(�(��1�7�7�9���d�m�m�$�+�+�G�4�:�:�<���}�}�T�Z�Z����d�Q�s�V�L�Lr1 c �F � [ SXR U R S5 $ )Nrh ri rx r= s r. r? �!grub_pbkdf2_sha512._calc_checksum� s � � �8�V�Y�Y�� � �R�H�Hr1 rA N)rB rC rD rE rF rZ rG r r( r< rJ rK r rL rM rN rO rP r/ r8 r? rQ rA r1 r. r r � si � � �@ �D�2�L�
�#� $�E��M� ���M�"�1�1�N��J��J��K��;� �;�M�
Ir1 r )/rF �binasciir r �base64r r �logging� getLoggerrB �log�
passlib.utilsr �passlib.utils.binaryr r �passlib.utils.compatr
r r r
�passlib.crypto.digestr �passlib.utils.handlers�utils�handlersr& �__all__� HasRounds�
HasRawSalt�HasRawChecksum�GenericHandlerr rc r r r �
PrefixWrapperrj rk rl rr r �HasSaltr r� r rA r1 r. �<module>r� s� �� 2�
(� '� �g�'�'��1�� %� 9� I� I� -� #� #� ��1]�"�,�,��
�
�r�7H�7H�"�J[�J[� 1]�f 7<�4�PX� .�f !���V�1�Z�=�I� �"�8�R��7�
�"�8�R��7�
��#�#�$6� �Z�Q[�cg�h� ��%�%�&:�M�K\�^o�w{�|� ��%�%�&:�M�K\�^o�w{�|� � � �WG�b�l�l�B�M�M�2�3D�3D�b�FW�FW� WG�@`3�� � �b�j�j�"�2C�2C� `3�R3A�B�M�M�2�+<�+<�b�>O�>O� 3A�pDI�� � �r�}�}�b�6G�6G��IZ�IZ� DIr1