]j d Z ddlmZ ddlmZ ddlmZmZ ddlm Z dZ
n
# e $ r dZ
Y nw xY wdd l m
Z
dd
lZdZd Z e
ej d Zd
Zd Zdad Zd Zd Zd Zd Zd Zd Z d Z d Z d
S )z
Implements auth methods
)OperationalError )default_backend)
serializationhashes)paddingTF)partialN sha1c ` | sdS t | }t | }t }| |dt | | | }t || S )z'Scramble used for mysql_native_password N)sha1_newdigestupdateSCRAMBLE_LENGTH _my_crypt)passwordmessagestage1stage2sresults D/opt/imunify360/venv/lib64/python3.11/site-packages/pymysql/_auth.pyscramble_native_passwordr s s
h
&
&
(
(F
f
$
$
&
&F
AHHW%o%
&'''HHV
XXZZF VV $ $$r
c t | }t t | D ]}||xx || z cc< t | S N) bytearrayrangelenbytes)message1message2r is r r r , sT
x
F
3v;;
! !q Xa[ ==r
c R ddl m} | ad S # t $ r t d w xY w)Nr bindingsz='pynacl' package is required for ed25519_password auth method)naclr& _nacl_bindings ImportError RuntimeErrorr% s r
_init_naclr+ ; sR
!!!!!!!
K
s &c t | }t t |d dz g }t t |d dz dz g }|t | dd z |z S )Nr @ r )r r )s32baba0ba31s r
_scalar_clampr5 G sq 3 B
2a53;-((
)
)C RVc\R /011 2 2D s1R4y!! !D ((r
c t st t j | }t |dd }t j |dd |z }t | }t | }t | }t j ||z |z }t | }t || }t || } || z S )znSign a random scramble with elliptic curve Ed25519.
Secret and public key are derived from password.
N )
r( r+ hashlibsha512r r5 !crypto_core_ed25519_scalar_reduce&crypto_scalarmult_ed25519_base_noclamp crypto_core_ed25519_scalar_mul crypto_core_ed25519_scalar_add)
r scramblehr rRAkksSs
r ed25519_passwordrF N s x ''))A af A qv())0022A 88;;A==a@@A ==a@@A q1ux'((//11A 88;;A 6 6q! < <B55b!<<A
q5Lr
c | | | }| |S r ) write_packet _read_packet check_error)conn send_datapkts r
_roundtriprN w s< i
COO Jr
c |d t }t | }t | }t t | D ]}||xx |||z z cc< t | S r )r r r r r )r saltpassword_bytessalt_lenr# s r
_xor_passwordrS ~ s !D x((N4yyH
3~&&
'
' 0 0qT!h, // r
c V t st d t | dz | }t j |t }| |t j t j t j t j d S )zhEncrypt password with salt and public_key.
Used for sha256_password and caching_sha2_password.
z\'cryptography' package is required for sha256_password or caching_sha2_password auth methods ) algorithmN)mgfrV label) _have_cryptographyr* rS r load_pem_public_keyr encryptr OAEPMGF1r SHA1)r rP
public_keyr rsa_keys r sha2_rsa_encryptra s
4
Hu ,d33G/
O<M<MNNG ?? v{}}555 kmm
r
c | j r0t rt d | j dz }t | | S | rM| | _ | j s-| j r&t rt d t | d }| rC|j
dd | _ t r(t d| j d | j r7| j st d t | j | j | j }nd }t | | S )
Nz sha256: Sending plain passwordrU z$sha256: Requesting server public key r zReceived public key:
asciiz$Couldn't receive server's public keyr
)_secureDEBUGprintr rN is_auth_switch_requestread_allrP server_public_keyis_extra_auth_data_datadecoder ra )rK rM datas r sha256_password_authro sB | & 4 2 3 3 3}u$$%%%
!!## *LLNN % *$- *
><=== T5))C
T!$122 T *D,B,I,I',R,R S S S } % K"#IJJ J
ty$:PQQ dD ! !!r
c | sdS t j | }t j | }t j ||z }t | }t t | D ]}||xx || z cc< t
| S )zScramble algorithm used in cached_sha2_password fast path.
XOR(SHA256(password), SHA256(SHA256(SHA256(password)), nonce))
r
)r8 sha256r r r r r )r noncep1p2p3resr# s r scramble_caching_sha2rw s s ! ! ( ( * *B " " $ $B U
# # * * , ,B
B--C
3r77^^ A"Q% ::r
c | j st | d S | rYt rt d | | _ t | j | j }t | | }| s t d|j
d d z | d | }|dk r@t rt d |
}| |S |dk rt d|z t rt d | j r.t rt d
t | | j d z S | j st | d }| s t d
|j
d d z |j
dd | _ t r't | j d t% | j | j | j }t | | }d S )Nr
z caching sha2: Trying fast pathz.caching sha2: Unknown packet for fast auth: %sr z%caching sha2: succeeded by fast path. z.caching sha2: Unknown result for fast auth: %sz!caching sha2: Trying full auth...z:caching sha2: Sending plain password via secure connectionrU z/caching sha2: Unknown packet for public key: %srd )r rN rh rf rg ri rP rw rk r rl advance
read_uint8rI rJ re rj rm ra )rK rM scramblednrn s r caching_sha2_password_authr s> = %$$$$
!!## * 4 2 3 3 3LLNN )$-CC y)) ! ! # #
<sy!} L
KKNNN AAvv ; 9 : : : !!
Avv ORS STTT 3
1222 | 7 P N O O O$
5666 ! :w''%%'' "ACIbqbMQ
"%122 : $(//88 9 9 9 DM49d6L M MD
T4
CCCr
) __doc__errr cryptography.hazmat.backendsr cryptography.hazmat.primitivesr r )cryptography.hazmat.primitives.asymmetricr rY r) functoolsr r8 rf r newr r r r( r+ r5 rF rN rS ra ro rw r r
r <module>r s " ! ! ! ! ! <<<<<<DDDDDDDDAAAAAA 77; ' ' % % %
) ) )# # #R ! ! ! , " " "> (9! 9! 9! 9! 9!s ! ++