ó
\ùXc @ sR d Z d d l m Z m Z d d l m Z m Z d d l Z e j e ƒ Z
d d l m Z d d l
m Z m Z d d l m Z m Z m Z m Z d d l m Z d d l j j Z d d
d d d
d g Z d e j e j e j e j f d „ ƒ YZ d d e d „ Z" e" d d d d e d ƒ ƒZ# e" d d d ƒ Z$ e" d d d ƒ Z% e j& d e# d d d e' ƒZ( e j& d e$ d! d" d e' ƒZ) e j& d# e% d$ d% d e' ƒZ* d& Z+ d e j e j e j e j f d' „ ƒ YZ, d
e j e j- e j f d( „ ƒ YZ. d) e j e j e j f d* „ ƒ YZ/ d e j e j e j e j f d+ „ ƒ YZ0 d S(, s, passlib.handlers.pbkdf - PBKDF2 based hashesiÿÿÿÿ( t hexlifyt unhexlify( t b64encodet b64decodeN( t
to_unicode( t ab64_decodet ab64_encode( t
str_to_basciit ut
uascii_to_strt unicode( t pbkdf2_hmact pbkdf2_sha1t
pbkdf2_sha256t
pbkdf2_sha512t cta_pbkdf2_sha1t dlitz_pbkdf2_sha1t grub_pbkdf2_sha512t Pbkdf2DigestHandlerc B sh e Z d Z d Z e j Z d Z d Z d
Z
d Z d Z d Z
d
Z e d „ ƒ Z d
„ Z d „ Z RS( s1 base class for various pbkdf2_{digest} algorithmst saltt salt_sizet roundsi i i Iÿÿÿÿ t linearc C sp t j | | j d | ƒ\ } } } t | j d ƒ ƒ } | rW t | j d ƒ ƒ } n | d | d | d | ƒ S( Nt handlert asciiR R t checksum( t uht parse_mc3t identR t encode( t clst hashR R t chk( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyt from_string? s
$c C sL t | j ƒ j d ƒ } t | j ƒ j d ƒ } t j | j | j | | ƒ S( NR ( R R t decodeR R t
render_mc3R R ( t selfR R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyt to_stringG s c C s" t | j | | j | j | j ƒ S( N( R t _digestR R t
checksum_size( R$ t secret( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyt _calc_checksumL s ( s saltR s roundsN( t __name__t
__module__t __doc__t setting_kwdsR t HASH64_CHARSt checksum_charst default_salt_sizet
max_salt_sizet Nonet default_roundst
min_roundst
max_roundst rounds_costR& t classmethodR! R% R) ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR s
ià. c C s¦ d | } | d k r, t d ƒ | f } n t } t | | f t d | d | d | d | d | d | d | d
d d d
d t d | j ƒ d | j d | ƒ ƒ ƒ S( s; create new Pbkdf2DigestHandler subclass for a specific hasht pbkdf2_s $pbkdf2-%s$R+ t nameR R& R3 R' t encoded_checksum_sizei i i R, s$ This class implements a generic ``PBKDF2-HMAC-%(digest)s``-based password hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt bytes.
If specified, the length must be between 0-1024 bytes.
If not specified, a %(dsc)d byte salt will be autogenerated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to %(dsc)d bytes, but can be any value between 0 and 1024.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to %(dr)d, but must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
t digestt dsct drN( R2 R R t typet dictt upperR0 ( t hash_namet digest_sizeR R t moduleR9 t base( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyt create_pbkdf2_hashP s
t sha1i i¸ÿ R s $pbkdf2$t sha256i iHq t sha512i@ i¨a t ldap_pbkdf2_sha1s {PBKDF2}t ldap_pbkdf2_sha256s {PBKDF2-SHA256}s $pbkdf2-sha256$t ldap_pbkdf2_sha512s {PBKDF2-SHA512}s $pbkdf2-sha512$s -_c B st e Z d Z d Z d Z e d ƒ Z d Z d Z d Z e
j Z d Z d
Z
d Z e d „ ƒ Z d
„ Z d „ Z RS( së This class implements Cryptacular's PBKDF2-based crypt algorithm, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt bytes.
If specified, it may be any length.
If not specified, a one will be autogenerated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to 16 bytes, but can be any value between 0 and 1024.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 60000, must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
R R R R s $p5k2$i i i i Iÿÿÿÿ R c C s| t j | | j d d d | ƒ\ } } } t | j d ƒ t ƒ } | rc t | j d ƒ t ƒ } n | d | d | d | ƒ S( Nt rounds_basei R R R R R ( R R R R R t CTA_ALTCHARS( R R R R R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR! Ö s
*c C sX t | j t ƒ j d ƒ } t | j t ƒ j d ƒ } t j | j | j | | d d ƒS( NR RL i ( R R RM R" R R R# R R ( R$ R R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR% ß s c C s t d | | j | j d ƒ S( NRF i ( R R R ( R$ R( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR) ç s ( s salts salt_sizes rounds( R* R+ R, R9 R- R R R' R0 R1 R R3 R4 R5 R6 R7 R! R% R) ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR ’ s
c B s” e Z d Z d Z d Z e d ƒ Z e d d d ƒ Z d Z d
Z e
j Z e
j Z d Z d Z d
Z e d „ ƒ Z d „ Z d „ Z d „ Z RS( sC This class implements Dwayne Litzenberger's PBKDF2-based crypt algorithm, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If specified, it may be any length, but must use the characters in the regexp range ``[./0-9A-Za-z]``.
If not specified, a 16 character salt will be autogenerated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to 16 bytes, but can be any value between 0 and 1024.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 60000, must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
R R R R s $p5k2$t 0i0 t =i i i Iÿÿÿÿ R c C sI t j | | j d d d d d | ƒ\ } } } | d | d | d | ƒ S( NRL i R3 i R R R R ( R R R ( R R R R R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR! 9 s c C sC | j } | d k r d } n t j | j | | j | j d d ƒS( Ni RL i ( R R2 R R# R R R ( R$ R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR% ? s c C s@ | j } | d k r d } n t j | j | | j d d d ƒS( Ni RL i ( R R2 R R# R R ( R$ R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyt _get_configE s c C s: | j ƒ } t d | | | j d ƒ } t | ƒ j d ƒ S( NRF i R ( RP R R R R" ( R$ R( R t result( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR) N s ( s salts salt_sizes rounds( R* R+ R, R9 R- R R t _stub_checksumR0 R1 R R. t
salt_charsR R3 R4 R5 R6 R7 R! R% RP R) ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR ò s
t atlassian_pbkdf2_sha1c B sW e Z d Z d Z d Z e d ƒ Z d Z d Z Z e
d „ ƒ Z d „ Z d „ Z
RS(
sB This class implements the PBKDF2 hash used by Atlassian.
It supports a fixed-length salt, and a fixed number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt bytes.
If specified, the length must be exactly 16 bytes.
If not specified, a salt will be autogenerated (this is recommended).
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
RT R s {PKCS5S2}i i c C s† t | d d ƒ } | j } | j | ƒ s? t j j | ƒ ‚ n t | t | ƒ j d ƒ ƒ } | d | d } } | d | d | ƒ S( NR R i R R ( R R t
startswithR t exct InvalidHashErrorR t lenR ( R R R t dataR R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR! { s c C s6 | j | j } | j t | ƒ j d ƒ } t | ƒ S( NR ( R R R R R" R ( R$ RY R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR% … s c C s t d | | j d d ƒ S( NRF i' i ( R R ( R$ R( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR) Š s ( s salt( R* R+ R, R9 R- R R R' t
min_salt_sizeR1 R7 R! R% R) ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyRT [ s
c B st e Z d Z d Z d Z e d ƒ Z d Z d Z d Z e
j Z d Z d Z
d
Z e d „ ƒ Z d „ Z d
„ Z RS( sÿ This class implements Grub's pbkdf2-hmac-sha512 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: bytes
:param salt:
Optional salt bytes.
If specified, the length must be between 0-1024 bytes.
If not specified, a 64 byte salt will be autogenerated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to 64 bytes, but can be any value between 0 and 1024.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 19000, but must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
R R R R s grub.pbkdf2.sha512.i@ i i Iÿÿÿÿ R c C s| t j | | j d t d ƒ d | ƒ\ } } } t | j d ƒ ƒ } | rc t | j d ƒ ƒ } n | d | d | d | ƒ S( Nt sept .R R R R R ( R R R R R R ( R R R R R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR! Æ s c C sd t | j ƒ j d ƒ j ƒ } t | j ƒ j d ƒ j ƒ } t j | j | j | | d t d ƒ ƒS( NR R[ R\ (
R R R" R@ R R R# R R R ( R$ R R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR% Ï s c C s t d | | j | j d ƒ S( NRH i@ ( R R R ( R$ R( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR) Ô s ( s salts salt_sizes rounds( R* R+ R, R9 R- R R R' R0 R1 R R3 R4 R5 R6 R7 R! R% R) ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyR “ s (1 R, t binasciiR R t base64R R t loggingt getLoggerR* t logt
passlib.utilsR t passlib.utils.binaryR R t passlib.utils.compatR R R R
t passlib.crypto.digestR t passlib.utils.handlerst utilst handlersR t __all__t HasRoundst
HasRawSaltt HasRawChecksumt GenericHandlerR R2 RE R R
R t
PrefixWrappert TrueRI RJ RK RM R t HasSaltR RT R ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/pbkdf2.pyt <module> s8 " +33 +`%i%8