ó
¶õ„Xc @ sè d Z d d l m Z d d l Z d d l Z e j e ƒ Z y9 d d l m Z e j
d k ru e j d ƒ d Z n Wn e
k
r d Z n Xd d l Z d d l Z d d l m Z d d l m Z y d d l m Z Wn e
k
rõ d Z n Xd d l m Z d d
l m Z m Z m Z m Z m Z d d l m Z m Z m! Z! m" Z" d d l# m$ Z$ d
d d d d d g Z% dM Z& dO Z' dP dQ dR dS dT dU dV dW dX dY dZ g Z( i Z) d- „ Z* d. „ Z+ e, d/ „ Z- e) j. e- _/ d d0 „ Z0 d e f d1 „ ƒ YZ1 e d2 „ e d3 ƒ Dƒ ƒ Z2 e d4 „ e d3 ƒ Dƒ ƒ Z3 e, d5 „ Z4 d d6 „ Z5 e d7 ƒ j6 Z7 d d8 „ Z e j8 j9 d9 ƒ p}d: Z: e" r½e: d[ k r½d d< l; m< Z< d= „ Z= d> „ Z> d; Z? nš e: d\ k r
d d l m Z d d@ l m@ Z@ e@ d k ZA i ZB dA „ Z= d? Z? nJ e: d] k s tC ‚ d dC lD mE ZF d dD l mG ZG dE „ Z= dF „ Z> dB Z? e: e? k rpd Z Z n g e rdG n d e rŽdH n d dI e? g D] ZH eH rœeH ^ qœZI dG eI k rÉdJ ZJ n dH eI k rÞdK ZJ n d ZJ d S(^ sl passlib.crypto.digest -- crytographic helpers used by the password hashes in passlib
.. versionadded:: 1.7
iÿÿÿÿ( t divisionN( t pbkdf2_hmact hashlibs* ignoring pure-python hashlib.pbkdf2_hmac()( t Struct( t warn( t exc( t
join_bytest
to_native_strt join_byte_valuest to_bytest
SequenceMixin( t iranget int_typest unicode_or_bytes_typest PY3( t memoized_propertyt lookup_hasht HashInfot norm_hash_namet compile_hmact pbkdf1R i i i@ t md2t md5t sha1s sha-1t sha224s sha-224s sha2-224t sha256s sha-256s sha2-256t sha384s sha-384s sha2-384t sha512s sha-512s sha2-512t md4t shas sha-0t sha0t ripemdt ripemd160s
ripemd-160c C sŒ | } t | t ƒ s* t | d d ƒ } n t j d d | j ƒ j ƒ ƒ } | j d ƒ rƒ | d } | j d ƒ rƒ | d } qƒ n d „ } | | ƒ } | r¢ | St j d
| ƒ } | rT| j
d d d
ƒ \ } } } | rë | | 7} n | } | r%| d | 7} | r| d 7} n | | 7} n | | ƒ } | r;| St j d | | | ƒ n. | } | j
d d ƒ } t j d | | | ƒ | | f S( sA
internal helper used by :func:`lookup_hash` --
normalize arbitrary hash name to hashlib format.
if name not recognized, returns dummy record and issues a warning.
:arg name:
unnormalized name
:returns:
tuple with 2+ elements: ``(hashlib_name, iana_name|None, ... 0+ aliases)``.
s utf-8s hash names [_ /]t -s scram-i s -plusiûÿÿÿc S s% x t D] } | | k r | Sq Wd S( N( t _known_hash_names( t namet row( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt check_tablev s
s8 (?i)^(?P<name>[a-z]+)-?(?P<rev>\d)?-?(?P<size>\d{3,4})?$R# t revt sizet _s0 normalizing unrecognized hash name %r => %r / %rs; normalizing unrecognized hash name and format %r => %r / %r( t
isinstancet strR t ret subt stript lowert
startswitht endswitht matcht groupt logt infot replacet warning( R# t origR% t resultt mt iana_nameR& R' t hashlib_name( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt _get_hash_aliases^ sB !
c sÎ ˆ j d ƒ rD ˆ d k rD y t t ˆ ƒ SWqD t k
r@ qD Xn t j ‰ y ˆ ˆ d ƒ Wn t k
rq n9 Xd ‡ ‡ f d † } ˆ | _ d | _ d ˆ | _ | Sˆ d k rÊ d d
l m
} | Sd S(
s
internal helper used by :func:`lookup_hash` --
lookup hash constructor by name
:arg name:
name (normalized to hashlib format, e.g. ``"sha256"``)
:returns:
hash constructor, e.g. ``hashlib.sha256()``;
or None if hash can't be located.
R( t newt
algorithmst c s
ˆ ˆ | ƒ S( N( ( t msg( R# t new_ssl_hash( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt const» s R sM wrapper for hashlib.new(%r),
generated by passlib.crypto.digest.lookup_hash()R iÿÿÿÿ( R ( s newR> N( R/ t getattrR t AttributeErrorR= t
ValueErrort __name__t
__module__t __doc__t passlib.crypto._md4R t None( R# RB R ( ( R# RA s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt _get_hash_constž s(
c C sì t } y | | SWn t t f k
r+ n Xt } t | t ƒ rî t | ƒ } | d } | sc t ‚ | | k r® t | d | ƒ} | j d k r | sœ t ‚ | S| | | <| St | ƒ } | d k rw| rÙ t d | ƒ St
j | ƒ ‚ qwn‰ t | t ƒ r| St | ƒ rb| } t | ƒ j ƒ } | d } t | ƒ } | d k rJqw| | k rYqwt } n t
j | d d ƒ ‚ t | | ƒ } | | | <| rèxO | D]D } | r| j | ƒ d | g k sÔt d | ƒ ‚ | | | <qqWn | S( sG
Returns a :class:`HashInfo` record containing information about a given hash function.
Can be used to look up a hash constructor by name, normalize hash name representation, etc.
:arg digest:
This can be any of:
* A string containing a :mod:`!hashlib` digest name (e.g. ``"sha256"``),
* A string containing an IANA-assigned hash name,
* A digest constructor function (e.g. ``hashlib.sha256``).
Case is ignored, underscores are converted to hyphens,
and various other cleanups are made.
:param return_unknown:
By default, this function will throw an :exc:`~passlib.exc.UnknownHashError` if no hash constructor
can be found. However, if this flag is False, it will instead return a dummy record
without a constructor function. This is mainly used by :func:`norm_hash_name`.
:returns HashInfo:
:class:`HashInfo` instance containing information about specified digest.
Multiple calls resolving to the same hash should always
return the same :class:`!HashInfo` instance.
i t return_unknowns digest name or constructort digests %r already in cacheN( t _hash_info_cachet KeyErrort TypeErrort TrueR) R
R< t AssertionErrorR RB RJ RK R R t UnknownHashErrort callableR# t Falset ExpectedTypeErrort get( RM RL t cachet
cache_by_namet name_listR# R4 RB t other_const( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR Í sV
+c C sr t | d t ƒ} | j s5 t d | f t j ƒ n | d k rH | j S| d k r[ | j St d | f ƒ ‚ d S( s< Normalize hash function name (convenience wrapper for :func:`lookup_hash`).
:arg name:
Original hash function name.
This name can be a Python :mod:`~hashlib` digest name,
a SCRAM mechanism name, IANA assigned hash name, etc.
Case is ignored, and underscores are converted to hyphens.
:param format:
Naming convention to normalize to.
Possible values are:
* ``"hashlib"`` (the default) - normalizes name to be compatible
with Python's :mod:`!hashlib`.
* ``"iana"`` - normalizes name to IANA-assigned hash function name.
For hashes which IANA hasn't assigned a name for, this issues a warning,
and then uses a heuristic to return a "best guess" name.
:returns:
Hash name, returned as native :class:`!str`.
RL s" norm_hash_name(): unknown hash: %rR t ianas unknown format: %rN( R RQ RB R R t PasslibRuntimeWarningR# R: RE ( R# t formatR4 ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR 9 s c B sk e Z d Z d Z d Z d Z d Z d Z d Z d „ Z
d „ Z d „ Z e
d „ ƒ Z e
d „ ƒ Z RS( sÆ
Record containing information about a given hash algorithm, as returned :func:`lookup_hash`.
This class exposes the following attributes:
.. autoattribute:: const
.. autoattribute:: digest_size
.. autoattribute:: block_size
.. autoattribute:: name
.. autoattribute:: iana_name
.. autoattribute:: aliases
This object can also be treated a 3-element sequence
containing ``(const, digest_size, block_size)``.
c C sÎ | d | _ | d | _ | d | _ | | _ | d k r@ d S| ƒ } | j | _ | j | _ t | j ƒ ƒ | j k r’ t d | j ƒ ‚ n | j | j k rÊ t
d | j | | j f t j ƒ n d S( s
initialize new instance.
:arg const:
hash constructor
:arg names:
list of 2+ names. should be list of ``(name, iana_name, ... 0+ aliases)``.
names must be lower-case. only iana name may be None.
i i i Ns" %r constructor failed sanity checksE inconsistent digest name: %r resolved to %r, which reports name as %r(
R# R: t aliasesRB RJ t digest_sizet
block_sizet lenRM t RuntimeErrorR R R] ( t selfRB t namest hash( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt __init__‚ s
c C s d | j | j | j f S( Ns/ <lookup_hash(%r): digest_size=%r block_size=%r)( R# R` Ra ( Rd ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt __repr__£ s c C s | j | j | j f S( N( RB R` Ra ( Rd ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt _as_tuple§ s c C sA t s
d Sy t | j d d d ƒ t SWn t k
r< t SXd S( s5 helper to detect if hash is supported by fastpbkdf2()t pt si N( t _fast_pbkdf2_hmacRJ R# RQ RE RU ( Rd ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt supported_by_fastpbkdf2ª s
c C sA t s
d Sy t | j d d d ƒ t SWn t k
r< t SXd S( s> helper to detect if hash is supported by hashlib.pbkdf2_hmac()Rj Rk i N( t _stdlib_pbkdf2_hmacRJ R# RQ RE RU ( Rd ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt supported_by_hashlib_pbkdf2¶ s
N( ( RF RG RH RJ R# R: R_ RB R` Ra Rg Rh Ri R Rm Ro ( ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR \ s ! c c s | ] } | d AVq d S( i\ N( ( t .0t x( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pys <genexpr>Ë s i c c s | ] } | d AVq d S( i6 N( ( Rp Rq ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pys <genexpr>Ì s c s t | ƒ } | \ } } } | d k s3 t d ƒ ‚ t | t ƒ sW t | d d ƒ} n t | ƒ } | | k rŠ | | ƒ j ƒ } | } n | | k r« | d | | 7} n | | j t ƒ ƒ j ‰ | | j t
ƒ ƒ j ‰ | rö ‡ ‡ f d † } n ‡ ‡ f d † } | | _ | S( s®
This function returns an efficient HMAC function, hardcoded with a specific digest & key.
It can be used via ``hmac = compile_hmac(digest, key)``.
:arg digest:
digest name or constructor.
:arg key:
secret key as :class:`!bytes` or :class:`!unicode` (unicode will be encoded using utf-8).
:param multipart:
request a multipart constructor instead (see return description).
:returns:
By default, the returned function has the signature ``hmac(msg) -> digest output``.
However, if ``multipart=True``, the returned function has the signature
``hmac() -> update, finalize``, where ``update(msg)`` may be called multiple times,
and ``finalize() -> digest_output`` may be repeatedly called at any point to
calculate the HMAC digest so far.
The returned object will also have a ``digest_info`` attribute, containing
a :class:`lookup_hash` instance for the specified digest.
This function exists, and has the weird signature it does, in order to squeeze as
provide as much efficiency as possible, by omitting much of the setup cost
and features of the stdlib :mod:`hmac` module.
i s block size too smallt paramt keyt c s( ˆ ƒ ‰ ‡ ‡ f d † } ˆ j | f S( s) generated by compile_hmac(multipart=True)c s& ˆ ƒ } | j ˆ j ƒ ƒ | j ƒ S( N( t updateRM ( t outer( t _outer_copyt inner( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt finalize s ( Ru ( Ry ( t _inner_copyRw ( Rx s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt hmac s c s< ˆ ƒ } | j | ƒ ˆ ƒ } | j | j ƒ ƒ | j ƒ S( s generated by compile_hmac()( Ru RM ( R@ Rx Rv ( Rz Rw ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR{ s
( R RR R) t bytesR Rb RM t translatet _TRANS_36t copyt _TRANS_5Ct digest_info( RM Rs t multipartR RB R` Ra t klenR{ ( ( Rz Rw s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR Î s$ c
C s2 t | ƒ \ } } } t | d d ƒ} t | d d ƒ} t | t ƒ s` t j | d d ƒ ‚ n | d k r{ t d ƒ ‚ n | d
k r | } ng t | t ƒ s· t j | d d ƒ ‚ n@ | d
k rÒ t d ƒ ‚ n% | | k r÷ t d | | f ƒ ‚ n | | } x& t | ƒ D] } | | ƒ j ƒ } qW| | S( s; pkcs#5 password-based key derivation v1.5
:arg digest:
digest name or constructor.
:arg secret:
secret to use when generating the key.
may be :class:`!bytes` or :class:`unicode` (encoded using UTF-8).
:arg salt:
salt string to use when generating key.
may be :class:`!bytes` or :class:`unicode` (encoded using UTF-8).
:param rounds:
number of rounds to use to generate key.
:arg keylen:
number of bytes to generate (if omitted / ``None``, uses digest's native size)
:returns:
raw :class:`bytes` of generated key
.. note::
This algorithm has been deprecated, new code should use PBKDF2.
Among other limitations, ``keylen`` cannot be larger
than the digest size of the specified hash.
Rr t secrett saltt intt roundsi s rounds must be at least 1s int or Nonet keyleni s keylen must be at least 0s' keylength too large for digest: %r > %rN(
R R R) R R RV RE RJ R RM (
RM R„ R… R‡ Rˆ RB R` Ra t blockR( ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR s(
s >Lc s’ t | d d ƒ} t ˆ d d ƒ‰ t | ƒ } | j } t ˆ t ƒ s` t j ˆ d d ƒ ‚ n ˆ d k r{ t d ƒ ‚ n | d
k r | } nB t | t ƒ s· t j | d d ƒ ‚ n | d k rÒ t d
ƒ ‚ n | | d | } | t k rÿ t
d ƒ ‚ n | j r!t | j
| ˆ ˆ | ƒ S| j rCt | j
| ˆ ˆ | ƒ St | | ƒ ‰ t | ƒ ‰ t ‡ ‡ ‡ ‡ f d † t d | d ƒ Dƒ ƒ | S( s pkcs#5 password-based key derivation v2.0 using HMAC + arbitrary digest.
:arg digest:
digest name or constructor.
:arg secret:
passphrase to use to generate key.
may be :class:`!bytes` or :class:`unicode` (encoded using UTF-8).
:arg salt:
salt string to use when generating key.
may be :class:`!bytes` or :class:`unicode` (encoded using UTF-8).
:param rounds:
number of rounds to use to generate key.
:arg keylen:
number of bytes to generate.
if omitted / ``None``, will use digest's native output size.
:returns:
raw bytes of generated key
.. versionchanged:: 1.7
This function will use the first available of the following backends:
* `fastpbk2 <https://pypi.python.org/pypi/fastpbkdf2>`_
* :func:`hashlib.pbkdf2_hmac` (only available in py2 >= 2.7.8, and py3 >= 3.4)
* builtin pure-python backend
See :data:`passlib.crypto.digest.PBKDF2_BACKENDS` to determine
which backend(s) are in use.
Rr R„ R… R† R‡ i s rounds must be at least 1s int or NoneRˆ s keylen must be at least 1s keylen too long for digestc 3 s1 | ]' } ˆ ˆ ˆ ˆ t | ƒ ƒ ˆ ƒ Vq d S( N( t _pack_uint32( Rp t i( t
calc_blockt
keyed_hmacR‡ R… ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pys <genexpr>¾ s N( R R R` R) R R RV RE RJ t
MAX_UINT32t
OverflowErrorRm Rl R# Ro Rn R t _get_pbkdf2_looperR R ( RM R„ R… R‡ Rˆ R R` t block_count( ( RŒ R R‡ R… s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR _ s6 $ t PASSLIB_PBKDF2_BACKENDt anys
from-bytes( t partialc C s
t t | ƒ S( N( R” t _pbkdf2_looper( R` ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR Ì s c C sh t j } d } | | | ƒ } x7 t | d ƒ D]% } | | ƒ } | | | | ƒ N} q/ W| j | | ƒ S( sk
py3-only implementation of pbkdf2 inner loop;
uses 'int.from_bytes' + integer XOR
t bigi ( R† t
from_bytesR R ( R` R RM R‡ R— t BIGt accumR( ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR• Ï s t unpack( t sys_bitsc C s§ y t | SWn t k
r n Xt rH | d @ rH | d ?} d | } nX | d @s t ry | d ?} d | } | d 7} q | d ?} d | } n t d | ƒ ‚ t | ƒ } t d | d
d j d „ t | ƒ Dƒ ƒ d
d j d „ t | ƒ Dƒ ƒ ƒ } d j | } x( t | ƒ D] } | d | | f 7} qW| d j | 7} t | d d ƒ } t d t d | ƒ } t ƒ } t
| | | ƒ | d }
| |
_ |
t | <|
S( s)
We want a helper function which performs equivalent of the following::
def helper(keyed_hmac, digest, rounds):
accum = digest
for _ in irange(rounds - 1):
digest = keyed_hmac(digest)
accum ^= digest
return accum
However, no efficient way to implement "bytes ^ bytes" in python.
Instead, using approach where we dynamically compile a helper function based
on digest size. Instead of a single `accum` var, this helper breaks the digest
into a series of integers.
It stores these in a series of`accum_<i>` vars, and performs `accum ^= digest`
by unpacking digest and perform xor for each "accum_<i> ^= digest_<i>".
this keeps everything in locals, avoiding excessive list creation, encoding or decoding,
etc.
:param digest_size:
digest size to compile for, in bytes. (must be multiple of 4).
:return:
helper function with call signature outlined above.
i i s =%dQs =%dQIi i s =%dIs unsupported digest size: %dR` t
accum_varss , c s s | ] } d | Vq d S( s acc_%dN( ( Rp R‹ ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pys <genexpr>& s t digest_varsc s s | ] } d | Vq d S( s dig_%dN( ( Rp R‹ ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pys <genexpr>' s s def helper(keyed_hmac, digest, rounds):
'''pbkdf2 loop helper for digest_size={digest_size}'''
unpack_digest = struct.unpack
{accum_vars} = unpack_digest(digest)
for _ in irange(1, rounds):
digest = keyed_hmac(digest)
{digest_vars} = unpack_digest(digest)
s acc_%d ^= dig_%d
s% return struct.pack({accum_vars})
s9 <generated by passlib.crypto.digest._get_pbkdf2_looper()>t execR t structt helper( t
_looper_cacheRO t _have_64_bitt NotImplementedErrorR t dictt joinR R^ t compilet evalt
__source__( R` t countt fmtRŸ t tdictt sourceR‹ t codet gdictt ldictR ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR ç sB
"
t hexlify( R° ( t int_to_bytesc C s t S( N( R• ( R` ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR X s c C sn t } t | | ƒ d ƒ } x= t | d ƒ D]+ } | | ƒ } | t | | ƒ d ƒ N} q, Wt | t | ƒ ƒ S( Ni i ( t _hexlifyR† R R± Rb ( R RM R‡ R° R™ R( ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyR• [ s t
fastpbkdf2s hashlib-ssls builtin-i gffffffö?I Iÿÿÿÿ l l ÿÿÿÿ ( R R ( R R ( R s sha-1( R s sha-224s sha2-224( R s sha-256s sha2-256( R s sha-384s sha2-384( R s sha-512s sha2-512( s md4s md4( R s sha-0R ( R R ( R s
ripemd-160( s anys
from-bytes( s anys unpacks
from-bytes( s anys hexlify(K RH t
__future__R R t loggingt getLoggerRF R3 R Rn RG t debugRJ t ImportErrorR+ t osRŸ R t warningsR R³ Rl t passlibR t
passlib.utilsR R R R R
t passlib.utils.compatR R R
R t passlib.utils.decorR t __all__RŽ t
MAX_UINT64R" RN R< RK RU R t cleart clear_cacheR R R€ R~ R R t packRŠ t environRW t _force_backendt functoolsR” R R• t _builtin_backendR› R¢ R¡ RR t binasciiR° R² R± t bt PBKDF2_BACKENDSt PBKDF2_SPEED_FACTOR( ( ( s9 /usr/lib/python2.7/site-packages/passlib/crypto/digest.pyt <module> s¬
(" @ / i #o P ? h
f