ó
ö
5Xc @ s“ d Z d d l Z d d l Z e j e ƒ Z d d l m Z d d l m Z m
Z
m Z d d l m
Z
m Z d d l m Z m Z m Z m Z m Z d d l m Z d d l j j Z d d d
d g Z d Z d
„ Z d „ Z d „ Z d „ Z d e j! e j" e j# e j$ f d „ ƒ YZ% d e j" e j& e j# e j$ f d „ ƒ YZ' d
e j# e j$ f d „ ƒ YZ( d e j! e j# e j$ f d „ ƒ YZ) d S( sF passlib.handlers.des_crypt - traditional unix (DES) crypt and variantsiÿÿÿÿN( t warn( t
safe_cryptt
test_cryptt
to_unicode( t h64t h64big( t byte_elem_valuet ut
uascii_to_strt unicodet suppress_cause( t des_encrypt_int_blockt des_cryptt
bsdi_cryptt bigcryptt crypt16t c C s t d „ t | d ƒ Dƒ ƒ S( sØ convert secret to 64-bit DES key.
this only uses the first 8 bytes of the secret,
and discards the high 8th bit of each byte at that.
a null parity bit is inserted after every 7th bit of the output.
c s s1 | ]' \ } } t | ƒ d @d | d >Vq d S( i i9 i N( R ( t .0t it c( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pys <genexpr>( s i ( t sumt enumerate( t secret( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _crypt_secret_to_key s c C s t j | ƒ } t | t ƒ r0 | j d ƒ } n t | k rQ t j j t ƒ ‚ n t
| ƒ } t | d | d ƒ } t j
| ƒ S( s pure-python backed for des_crypts utf-8i i ( R t decode_int12t
isinstanceR t encodet _BNULLt uht exct NullPasswordErrorR R R R t encode_int64( R t saltt
salt_valuet key_valuet result( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _raw_des_crypt+ s
c C sk t | ƒ } d } t | ƒ } xF | | k rf | d } t | | | !ƒ } t | | ƒ | A} | } q! W| S( s, convert secret to DES key used by bsdi_crypti ( R t lenR ( R R" t idxt endt nextt tmp_value( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _bsdi_secret_to_keyI s
c C s t j | ƒ } t | t ƒ r0 | j d ƒ } n t | k rQ t j j t ƒ ‚ n t
| ƒ } t | d | | ƒ } t j
| ƒ S( s" pure-python backend for bsdi_crypts utf-8i ( R t decode_int24R R R R R R R R
R* R R R ( R t roundsR R! R" R# ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _raw_bsdi_cryptU s c B s» e Z d Z d Z d Z e j Z d Z d Z Z
e j Z d Z e
j e d ƒ e
j e
j Bƒ Z e d „ ƒ Z d „ Z d
„ Z d Z e d
„ ƒ Z d „ Z e d „ ƒ Z d „ Z RS( s› This class implements the des-crypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, des_crypt will silently truncate passwords larger than 8 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
R R t truncate_errori i i sU
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>[./a-z0-9]{11})?
$c C s@ t | d d ƒ } | d | d } } | d | d | p< d ƒ S( Nt asciit hashi R t checksum( R t None( t clsR0 R t chk( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt from_string´ s c C s& t d ƒ | j | j f } t | ƒ S( Ns %s%s( R R R1 R ( t selfR0 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt to_stringº s c C s& | j r | j | ƒ n | j | ƒ S( N( t use_defaultst _check_truncate_policyt _calc_checksum_backend( R6 R ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _calc_checksumÁ s t os_cryptt builtinc C s+ t d d ƒ r# | j | j ƒ t St Sd S( Nt testt
abgOeLfPimXQo( R t _set_calc_checksum_backendt _calc_checksum_os_cryptt Truet False( R3 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _load_backend_os_cryptÐ s c C s1 t | | j ƒ } | r | d S| j | ƒ Sd S( Ni ( R R t _calc_checksum_builtin( R6 R R0 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRA Ø s c C s | j | j ƒ t S( N( R@ RE RB ( R3 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _load_backend_builtinç s c C s" t | | j j d ƒ ƒ j d ƒ S( NR/ ( R$ R R t decode( R6 R ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRE ì s ( s saltR. ( R< R= ( t __name__t
__module__t __doc__t namet setting_kwdsR t HASH64_CHARSt checksum_charst
checksum_sizet
min_salt_sizet
max_salt_sizet
salt_charst
truncate_sizet ret compileR t Xt It _hash_regext classmethodR5 R7 R; t backendsRD RA RF RE ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR p s$
c B sñ e Z d Z d Z d Z d Z e j Z d Z Z
e j Z d Z d Z
d Z d Z e j e d
ƒ e j e j Bƒ Z e d „ ƒ Z d „ Z e Z e d
„ ƒ Z e d „ ƒ Z d „ Z d Z e d „ ƒ Z d „ Z e d „ ƒ Z! d „ Z" RS( s
This class implements the BSDi-Crypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 4 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 5001, must be between 1 and 16777215, inclusive.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
.. versionchanged:: 1.6
:meth:`hash` will now issue a warning if an even number of rounds is used
(see :ref:`bsdi-crypt-security-issues` regarding weak DES keys).
R
R R, i i i‰ i iÿÿÿ t linears
^
_
(?P<rounds>[./a-z0-9]{4})
(?P<salt>[./a-z0-9]{4})
(?P<chk>[./a-z0-9]{11})?
$c C sˆ t | d d ƒ } | j j | ƒ } | s? t j j | ƒ ‚ n | j d d d ƒ \ } } } | d t j | j d ƒ ƒ d | d | ƒ S( NR/ R0 R, R R4 R1 (
R RX t matchR R t InvalidHashErrort groupR R+ R ( R3 R0 t mR, R R4 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR5 4 s c C s> t d ƒ t j | j ƒ j d ƒ | j | j f } t | ƒ S( Ns _%s%s%sR/ ( R R t encode_int24R, RG R R1 R ( R6 R0 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR7 A s !c K s? t t | ƒ j | } | j d @s; t d t j j ƒ n | S( Ni sH bsdi_crypt rounds should be odd, as even rounds may reveal weak DES keys( t superR
t usingt default_roundsR R R t PasslibSecurityWarning( R3 t kwdst subcls( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRb N s
c C s t t | ƒ j ƒ } | d BS( Ni ( Ra R
t _generate_rounds( R3 R, ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRg W s c K s' | j d @s t St t | ƒ j | S( Ni ( R, RB Ra R
t _calc_needs_update( R6 Re ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRh e s
R< R= c C s+ t d d ƒ r# | j | j ƒ t St Sd S( NR> s _/...lLDAxARksGCHin.( R R@ RA RB RC ( R3 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRD t s c C s: | j ƒ } t | | ƒ } | r) | d S| j | ƒ Sd S( Niõÿÿÿ( R7 R RE ( R6 R t configR0 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRA | s
c C s | j | j ƒ t S( N( R@ RE RB ( R3 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRF Š s c C s( t | | j | j j d ƒ ƒ j d ƒ S( NR/ ( R- R, R R RG ( R6 R ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRE s ( s salts rounds( s os_crypts builtin(# RH RI RJ RK RL RO R RM RN RP RQ RR Rc t
min_roundst
max_roundst rounds_costRT RU R RV RW RX RY R5 R7 RB t _avoid_even_roundsRb Rg Rh RZ RD RA RF RE ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR
ó s0
c B s… e Z d Z d Z d Z e j Z d Z Z e j Z
e j e
d ƒ e j e j Bƒ Z e d „ ƒ Z d „ Z e d „ Z d „ Z RS(
sg This class implements the BigCrypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 22 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
R R i sX
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>([./a-z0-9]{11})+)?
$c C sj t | d d ƒ } | j j | ƒ } | s? t j j | ƒ ‚ n | j d d ƒ \ } } | d | d | ƒ S( NR/ R0 R R4 R1 ( R RX R\ R R R] R^ ( R3 R0 R_ R R4 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR5 Ã s c C s& t d ƒ | j | j f } t | ƒ S( Ns %s%s( R R R1 R ( R6 R0 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR7 Ì s c C sG t t | ƒ j | d | ƒ} t | ƒ d rC t j j | ƒ ‚ n | S( Nt relaxedi ( Ra R t _norm_checksumR% R R R] ( R6 R1 Rn ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRo Ð s c C sŸ t | t ƒ r! | j d ƒ } n t | | j j d ƒ ƒ } d } t | ƒ } xA | | k r‘ | d } | t | | | !| d d !ƒ 7} | } qQ W| j d ƒ S( Ns utf-8R/ i iõÿÿÿi÷ÿÿÿ( R R R R$ R R% RG ( R6 R R4 R& R' R( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR; Ù s
!
( s salt( RH RI RJ RK RL R RM RN RP RQ RR RT RU R RV RW RX RY R5 R7 RC Ro R; ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR – s
c B s… e Z d Z d Z d Z d Z e j Z d Z Z
e j Z d Z e
j e d ƒ e
j e
j Bƒ Z e d „ ƒ Z d „ Z d
„ Z RS( s˜ This class implements the crypt16 password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, crypt16 will silently truncate passwords larger than 16 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
R R R. i i i sU
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>[./a-z0-9]{22})?
$c C sj t | d d ƒ } | j j | ƒ } | s? t j j | ƒ ‚ n | j d d ƒ \ } } | d | d | ƒ S( NR/ R0 R R4 R1 ( R RX R\ R R R] R^ ( R3 R0 R_ R R4 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR5 + s c C s& t d ƒ | j | j f } t | ƒ S( Ns %s%s( R R R1 R ( R6 R0 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR7 4 s c C sñ t | t ƒ r! | j d ƒ } n | j r: | j | ƒ n y t j | j j d ƒ ƒ } Wn# t k
r~ t t d ƒ ƒ ‚ n Xt
| ƒ } t | d | d ƒ } t
| d d !ƒ } t | d | d ƒ } t j
| ƒ t j
| ƒ } | j d ƒ S( Ns utf-8R/ s invalid chars in salti i i i i ( R R R R8 R9 R R R t
ValueErrorR
R R R R RG ( R6 R R! t key1t result1t key2t result2R4 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR; ; s
( s salts truncate_error( RH RI RJ RK RL RO R RM RN RP RQ RR RS RT RU R RV RW RX RY R5 R7 R; ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR é s
(* RJ RT t loggingt getLoggerRH t logt warningsR t
passlib.utilsR R R t passlib.utils.binaryR R t passlib.utils.compatR R R R R
t passlib.crypto.desR t passlib.utils.handlerst utilst handlersR t __all__R R R$ R* R- t
TruncateMixint HasManyBackendst HasSaltt GenericHandlerR t HasRoundsR
R R ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt <module> s, ( +ƒ+£ S