ó
Ÿ;Xc @ @ s d Z d d l Z d d l Z e j e ƒ Z d d l m Z m Z m Z m
Z
d d l m Z d d l
m Z m Z m Z m Z d d l j j Z d d g Z d Z dQ dR dS dT dU dV dW dX dY dZ d[ d\ d] d^ d_ d` da db dc dd de f Z df Z dg Z e dI „ Z e dJ ƒ Z e dK ƒ Z e dL ƒ Z dM e j e j! e j" e j# f dN „ ƒ YZ$ d e$ f dO „ ƒ YZ% d e$ f dP „ ƒ YZ& d S(h s9 passlib.handlers.sha2_crypt - SHA256-Crypt / SHA512-CryptiÿÿÿÿN( t
safe_cryptt
test_cryptt
repeat_stringt
to_unicode( t h64( t byte_elem_valuet ut
uascii_to_strt unicodet sha512_cryptt sha256_cryptt i i i i i i i i
i i i i i i
i i i i i i i i i i i i i i i i i i i* i+ i, i- i. i/ i0 i1 i2 i3 i4 i i5 i6 i! i7 i" i# i8 i9 i$ i: i% i& i; i< i' i= i( i) i> i? c C s< t | t ƒ r! | j d ƒ } n t | k rN t j j | rB t n t ƒ ‚ n t | ƒ } | j d ƒ } t | ƒ } | r t
j } t } n t
j
} t } | | | | ƒ j ƒ } | | | ƒ } | j }
|
t | | ƒ ƒ | } x. | r|
| d @r| n | ƒ | d L} që W| j ƒ } | d k rSt | | | ƒ j ƒ | ƒ }
nU | | ƒ } | j } | d } x | r’| | ƒ | d 8} quWt | j ƒ | ƒ }
| | d t | d ƒ ƒ j ƒ | } |
|
} |
| } |
| | | |
| |
| | g } g t D] \ } } | | | | f ^ q} | } t | d ƒ \ } } xQ | r£x: | D]2 \ } } | | | | | ƒ j ƒ ƒ j ƒ } q`W| d 8} qSW| r#| d ?} x> | | D]2 \ } } | | | | | ƒ j ƒ ƒ j ƒ } q¿W| d @r#| | | | d ƒ j ƒ } q#n t j | | ƒ j d ƒ S( sß perform raw sha256-crypt / sha512-crypt
this function provides a pure-python implementation of the internals
for the SHA256-Crypt and SHA512-Crypt algorithms; it doesn't
handle any of the parsing/validation of the hash strings themselves.
:arg pwd: password chars/bytes to hash
:arg salt: salt chars to use
:arg rounds: linear rounds cost
:arg use_512: use sha512-crypt instead of sha256-crypt mode
:returns:
encoded checksum chars
s utf-8t asciii i` i i i* ( t
isinstanceR t encodet _BNULLt uht exct NullPasswordErrorR R
t lent hashlibt sha512t _512_transpose_mapt sha256t _256_transpose_mapt digestt updateR R t _c_digest_offsetst divmodR t encode_transposed_bytest decode( t pwdt saltt roundst use_512t pwd_lent salt_lent
hash_constt
transpose_mapt dbt a_ctxt a_ctx_updatet it dat dpt tmp_ctxt tmp_ctx_updatet dst dp_dpt dp_dst permst event oddt datat dct blockst tailt pairs( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyt _raw_sha2_crypt8 s` ! !
"
(/
$- *
*
$s rounds=t $t 0t _SHA2_Commonc B s e Z d Z d Z e j Z d Z e j Z d Z d Z
d Z e Z
d Z e Z d d „ Z d
„ Z d „ Z e d „ ƒ Z d
„ Z d Z d Z e d „ ƒ Z d „ Z e d „ ƒ Z d „ Z RS( sB class containing common code shared by sha256_crypt & sha512_cryptR R! t implicit_roundst salt_sizei iè iÿÉš;t linearc K sJ t t | ƒ j | | d k r= | j o7 | j d k } n | | _ d S( Niˆ ( t superR= t __init__t Nonet use_defaultsR! R> ( t selfR> t kwds( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyRB s c C s | j | d | j d k ƒS( Nt relaxed( t
_norm_saltt checksumRC ( RE R ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyt _parse_salt s c C s | j | d | j d k ƒS( NRG ( t _norm_roundsRI RC ( RE R! ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyt
_parse_rounds# s c C sF t | d d ƒ } | j } | j | ƒ s? t j j | ƒ ‚ n | d j t ƒ } | d j t ƒ r½ | j d ƒ d } | j t
ƒ r¨ | t
k r¨ t j j | ƒ ‚ n t | ƒ } t
} n d } t } t | ƒ d k rê | \ } } n7 t | ƒ d k r| d } d } n t j j | ƒ ‚ | d | d
| d | p<d d | ƒ S(
NR t hashi i i iˆ i i R! R RI R> ( R t identt
startswithR R t InvalidHashErrort splitt _UDOLLARt _UROUNDSt popt _UZEROt ZeroPaddedRoundsErrort intt Falset TrueR RC t MalformedHashError( t clsRM RN t partsR! R> R t chk( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyt from_string' s0
c C s‡ | j d k rI | j rI t d ƒ | j | j | j p? t d ƒ f } n4 t d ƒ | j | j | j | j pv t d ƒ f } t | ƒ S( Niˆ s %s%s$%st s %srounds=%d$%s$%s( R! R> R RN R RI R ( RE RM ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyt to_stringT s t os_cryptt builtinc C s+ t | j Œ r# | j | j ƒ t St Sd S( N( R t
_test_hasht _set_calc_checksum_backendt _calc_checksum_os_cryptRY RX ( R[ ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyt _load_backend_os_crypti s c C s> t | | j ƒ ƒ } | r- | j } | | S| j | ƒ Sd S( N( R R` t
checksum_sizet _calc_checksum_builtin( RE t secretRM t cs( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyRe q s
c C s | j | j ƒ t S( N( Rd Rh RY ( R[ ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyt _load_backend_builtin s c C s t | | j | j | j ƒ S( N( R: R R! t _cdb_use_512( RE Ri ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyRh † s ( s salts roundss implicit_roundsR? N( Ra Rb ( t __name__t
__module__t __doc__t setting_kwdsR t HASH64_CHARSt checksum_charst
max_salt_sizet
salt_charst
min_roundst
max_roundst rounds_costRX Rl RC t _rounds_prefixR> RB RJ RL t classmethodR^ R` t backendsRc Rf Re Rk Rh ( ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyR= ý s, - c B s2 e Z d Z d Z e d ƒ Z d Z d Z d Z RS( s. This class implements the SHA256-Crypt password hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 0-16 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 535000, must be between 1000 and 999999999, inclusive.
:type implicit_rounds: bool
:param implicit_rounds:
this is an internal option which generally doesn't need to be touched.
this flag determines whether the hash should omit the rounds parameter
when encoding it to a string; this is only permitted by the spec for rounds=5000,
and the flag is ignored otherwise. the spec requires the two different
encodings be preserved as they are, instead of normalizing them.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
R
s $5$i+ iØ) t tests? $5$rounds=1000$test$QmQADEXMG8POI5WDsaeho0P36yK3Tcrgboabng6bkb/( R{ s? $5$rounds=1000$test$QmQADEXMG8POI5WDsaeho0P36yK3Tcrgboabng6bkb/( Rm Rn Ro t nameR RN Rg t default_roundsRc ( ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyR
Ž s $ c B s8 e Z d Z d Z e d ƒ Z d Z e Z d Z d Z
RS( s. This class implements the SHA512-Crypt password hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 0-16 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 656000, must be between 1000 and 999999999, inclusive.
:type implicit_rounds: bool
:param implicit_rounds:
this is an internal option which generally doesn't need to be touched.
this flag determines whether the hash should omit the rounds parameter
when encoding it to a string; this is only permitted by the spec for rounds=5000,
and the flag is ignored otherwise. the spec requires the two different
encodings be preserved as they are, instead of normalizing them.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
R s $6$iV i€
R{ sj $6$rounds=1000$test$2M/Lx6MtobqjLjobw0Wmo4Q5OFx5nVLJvmgseatA6oMnyWeBdRDx4DU.1H3eGmse6pgsOgDisWBGI5c7TZauS0( s testsj $6$rounds=1000$test$2M/Lx6MtobqjLjobw0Wmo4Q5OFx5nVLJvmgseatA6oMnyWeBdRDx4DU.1H3eGmse6pgsOgDisWBGI5c7TZauS0( Rm Rn Ro R| R RN Rg RY Rl R} Rc ( ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyR É s $ ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i ( i i
i i i i i i i i i
i i i i i i i i i i i i i i i i i i i i i (@ i* i i i i+ i i i i, i- i i i i. i i i i/ i0 i i i i1 i i i i2 i3 i i i
i4 i i i i5 i6 i! i i
i7 i" i# i i8 i9 i$ i i i: i% i& i i; i< i' i i i= i( i) i i> i? (' Ro R t loggingt getLoggerRm t logt
passlib.utilsR R R R t passlib.utils.binaryR t passlib.utils.compatR R R R t passlib.utils.handlerst utilst handlersR t __all__R R R R RX R: RS RR RU t HasManyBackendst HasRoundst HasSaltt GenericHandlerR= R
R ( ( ( s? /usr/lib/python2.7/site-packages/passlib/handlers/sha2_crypt.pyt <module> s6 "" Á ;