Current File : //lib/python3.9/site-packages/passlib/handlers/__pycache__/argon2.cpython-39.opt-1.pyc
a
f�Wc� � @ s� d Z ddlmZmZ ddlZe�e�ZddlZddl Z ddl
m Z dZ da
ddlmZ ddlmZ ddlmZmZmZ ddlmZmZ dd lmZmZm Z m Z m Z ddl m m!Z" d
gZ#ed �Z$ed �Z%ed
�Z&e&e$e%fZ'e(e'�Z)dZ*z ddl+Z W n e,�y dZ Y n,0 e-e d��s$dZ*dZ ne-e d��s8dZ*dZ e-e d��rVe �.� Z/e j0j1Z2nG dd� d�Z3e3� Z/dZ2G dd� de"j4e"j5e"j6e"j7e"j8e"j9�Z:G dd� de:�Z;G dd� de:�Z<G d d � d e:�Z=G d d
� d
e;e:�Z+dS ) a� passlib.handlers.argon2 -- argon2 password hash wrapper
References
==========
* argon2
- home: https://github.com/P-H-C/phc-winner-argon2
- whitepaper: https://github.com/P-H-C/phc-winner-argon2/blob/master/argon2-specs.pdf
* argon2 cffi wrapper
- pypi: https://pypi.python.org/pypi/argon2_cffi
- home: https://github.com/hynek/argon2_cffi
* argon2 pure python
- pypi: https://pypi.python.org/pypi/argon2pure
- home: https://github.com/bwesterb/argon2pure
� )�with_statement�absolute_importN)�warn)�exc)�
MAX_UINT32)�
classproperty�to_bytes� render_bytes)� b64s_encode� b64s_decode)�u�unicode�
bascii_to_str�
uascii_to_str�PY2�argon2�i�d�id�Typezb'argon2' module points to unsupported 'argon2' pypi package; please install 'argon2-cffi' instead.� low_levelz@'argon2-cffi' is too old, please update to argon2_cffi >= 18.2.0�PasswordHasherc @ s$ e Zd ZdZdZdZdZdZdZdS )�_DummyCffiHashera
dummy object to use as source of defaults when argon2_cffi isn't present.
this tries to mimic the attributes of ``argon2.PasswordHasher()`` which the rest of
this module reads.
.. note:: values last synced w/ argon2 19.2 as of 2019-11-09
� i � N) �__name__�
__module__� __qualname__�__doc__� time_cost� memory_cost� parallelism�salt_len�hash_len� r$ r$ �;/usr/lib/python3.9/site-packages/passlib/handlers/argon2.pyr ] s r � c sf e Zd ZdZdZdZejZe j
j d Z e j
j d Z ej
ZdZeZejZdZeZdZd ZeZd
ZdZd Z d Z i Z e d
d� �Z e!Z"ej#Z#eZ$ej%Z%e&dd� �Z'd
Z(e)d.� fdd� �Z*e)dd� �Z+e,�-d�Z.e)dd� �Z/e,�-de,j0�Z1e)dd� �Z2dd � Z3d/� fd d � Z4e)d d � �Z5e)d!d"� �Z6e)d0d#d$��Z7e)d%d&� �Z8� fd'd(�Z9d)Z:e)d*d+� �Z;e)d1d,d-��Z<� Z=S )2�
_Argon2Commona&
Base class which implements brunt of Argon2 code.
This is then subclassed by the various backends,
to override w/ backend-specific methods.
When a backend is loaded, the bases of the 'argon2' class proper
are modified to prepend the correct backend-specific subclass.
r )
�salt� salt_sizer" �roundsr r r! � digest_sizer# �type)r, )r" r r# r+ � � Zlineari��� N���Fc C s | � � t| j�S )zj
return tuple of types supported by this backend
.. versionadded:: 1.7.2
)� get_backend�tuple�_backend_type_map)�clsr$ r$ r% � type_values� s z_Argon2Common.type_valuesc C s
| j tkS )zn
flag indicating a Type D hash
.. deprecated:: 1.7.2; will be removed in passlib 2.0
)r, �TYPE_D��selfr$ r$ r% �type_d� s z_Argon2Common.type_dc sj |d ur d| v rt d��|| d< |d ur@d| v r8t d��|| d< |d ur\|d urXt d��|}|d urx|d urtt d��|}tt| �jf i | ��}
|d ur�|
�|�|
_| �d�} |d ur�t|tj �r�t
|�}tj |
|dt d | d
�|
_
|d u�rt|tj �r�t
|�}|
j|| d �|
_|
�|
j|
j� |d u�rft|tj ��r>t
|�}|d k �r`|d
k�r`td|f ��||
_|
S )Nr* z/'time_cost' and 'rounds' are mutually exclusiver) z1'salt_len' and 'salt_size' are mutually exclusivez3'hash_len' and 'digest_size' are mutually exclusivez8'checksum_size' and 'digest_size' are mutually exclusive�relaxedr r+ )�min�max�paramr9 )r9 r. r/ z7max_threads (%d) must be -1 (unlimited), or at least 1.)� TypeError�superr' �using�
_norm_typer, �get�
isinstance�uhZnative_string_types�int� norm_integerr �
checksum_size�_norm_memory_costr �_validate_constraintsr! �
ValueError� max_threads) r3 r, r r" r r+ rF r# rJ �kwds�subclsr9 �� __class__r$ r% r? sP
�
�z_Argon2Common.usingc C s* d| }||k r&t d| j|||f ��d S )Nr- zO%s: memory_cost (%d) is too low, must be at least 8 * parallelism (8 * %d = %d))rI �name)r3 r r! �min_memory_costr$ r$ r% rH B s ��z#_Argon2Common._validate_constraintsz^\$argon2[a-z]+\$c C s t �|�}| j�|�d uS �N)rC Zto_unicode_for_identify� _ident_regex�match)r3 �hashr$ r$ r% �identifyT s
z_Argon2Common.identifys�
^
\$argon2(?P<type>[a-z]+)\$
(?:
v=(?P<version>\d+)
\$
)?
m=(?P<memory_cost>\d+)
,
t=(?P<time_cost>\d+)
,
p=(?P<parallelism>\d+)
(?:
,keyid=(?P<keyid>[^,$]+)
)?
(?:
,data=(?P<data>[^,$]+)
)?
(?:
\$
(?P<salt>[^$]+)
(?:
\$
(?P<digest>.+)
)?
)?
$
c C s� t |t�r|�d�}t |t�s*t�|d��| j�|�}|sDt�| ��|� ddddddd d
d � \ }}}}}}} }
} |r|t
d ��| |� d
�|r�t |�ndt |�t |�t |�|
r�t
|
�nd | r�t
| �nd | r�t
| �nd d�S )N�utf-8rT r, �versionr r r! �keyid�datar( �digestz&argon2 'keyid' parameter not supported�asciir )r, rW r r* r! r( rY �checksum)rB r
�encode�bytesr ZExpectedStringError� _hash_regexrS �MalformedHashError�group�NotImplementedError�decoderD r ) r3 rT �mr, rW r r r! rX rY r( rZ r$ r$ r% � from_string� s.
���z_Argon2Common.from_stringc C sv | j }|dkrd}nd| }| j}|r:dtt| j�� }nd}dt| j�|| j| j| j|tt| j ��tt| j
��f S )Nr � zv=%d$z,data=z"$argon2%s$%sm=%d,t=%d,p=%d%s$%s$%s) rW rY r r
r r, r r* r! r( r\ )r7 rW ZvstrrY Zkdstrr$ r$ r% � to_string� s$ �z_Argon2Common.to_stringc s� |rt d� t}|�d�}|d ur,t|�| _tt| �jf i |�� |d u rLn | �|�| _ |d u rbn | �
|�| _ |d u rxn | � |�| _
|d u r�n t|t�s�tj�|dd��|| _d S )Nzoargon2 `type_d=True` keyword is deprecated, and will be removed in passlib 2.0; please use ``type="d"`` insteadr\ r^ rY )r r5 rA �lenrF r> r' �__init__r@ r, �
_norm_versionrW rG r rB r^ rC r �ExpectedTypeErrorrY )r7 r, r8 rW r rY rK r\ rM r$ r% ri � s*
z_Argon2Common.__init__c C sf t |t�s4tr$t |t�r$|�d�}ntj�|dd��|tv r@|S |� � }|tv rT|S t
d|f ��d S )Nr[ �strr, z unknown argon2 hash type: %r) rB r
r r^ rc rC r rk �
ALL_TYPES_SET�lowerrI )r3 �valueZtempr$ r$ r% r@ � s
z_Argon2Common._norm_typec C sh t |tj�s tj�|dd��|dk r:|dkr:td|f ��| �� }|| jkrdtd| j||| jf ��|S )NZintegerrW r& r z invalid argon2 hash version: %dzk%s: hash version 0x%X not supported by %r backend (max version is 0x%X); try updating or switching backends) rB rC Z int_typesr rk rI r0 � max_versionrO )r3 rW �backendr$ r$ r% rj s
�z_Argon2Common._norm_versionc C s t j| || jd|d�S )Nr )r: r< r9 )rC rE rP )r3 r r9 r$ r$ r% rG s �z _Argon2Common._norm_memory_costc C s< z | j | W S ty Y n0 d|| �� f }t|��dS )z>
helper to resolve backend constant from type
z=unsupported argon2 hash (type %r not supported by %s backend)N)r2 �KeyErrorr0 rI )r3 ro �msgr$ r$ r% �_get_backend_type% s
�z _Argon2Common._get_backend_typec sz t | �}| j |j krdS |j}|d u s0||jkr6|j}| j|k rDdS | j|jkrTdS | j|jkrddS tt| �jf i |��S )NT) r, �min_desired_versionrp rW r rF r> r' �_calc_needs_update)r7 rK r3 ZminverrM r$ r% rv 7 s
z _Argon2Common._calc_needs_updatez> -- recommend you install one (e.g. 'pip install argon2_cffi')c C sZ | j }|dk r td| tjj� tD ]}|| jv r$|| _ qVq$td| tjj� t | _dS )z�
helper called by from backend mixin classes' _load_backend_mixin() --
invoked after backend imports have been loaded, and performs
feature detection & testing common to all backends.
r& z6%r doesn't support argon2 v1.3, and should be upgradedz)%r lacks support for all known hash typesT)
rp r rC r �PasslibSecurityWarning� ALL_TYPESr2 r, ZPasslibRuntimeWarning�TYPE_ID)� mixin_clsrO �dryrunrp r, r$ r$ r% �_finalize_backend_mixinM s �
z%_Argon2Common._finalize_backend_mixinc C s� | � � }|du r"|dur"| �|�}|durT|�|j|j� |dkrT|jdurTtd��t|�}|dvrtd|||f }nt|�}t j
| |d��dS )z}
internal helper invoked when backend has hash/verification error;
used to adapt to passlib message.
N� argon2_cffiz8argon2_cffi backend doesn't support the 'data' parameter)zDecoding failedz%s reported: %s: hash=%r)�reason) r0 re rH r r! rY rb rl �reprr r` )r3 �errrT r7 rq �textr~ r$ r$ r% �_adapt_backend_errorg s
z"_Argon2Common._adapt_backend_error)NNNNNNNN)NFNNN)F)NN)>r r r r rO Z setting_kwds�_default_settingsr# rF rC �GenericHandlerZ_always_parse_settingsZ_unparsed_settingsr" Zdefault_salt_sizeZ
min_salt_sizer Z
max_salt_sizer �default_roundsZ
min_roundsZ
max_roundsZ rounds_costZmax_parallelism�_default_versionrp ru rP rJ �pure_use_threadsr2 r r4 ry r, r! rW r �propertyr8 rY � classmethodr? rH �re�compilerR rU �Xr_ re rg ri r@ rj rG rt rv Z_no_backend_suggestionr| r� �
__classcell__r$ r$ rM r% r' s s~ ��
�;
�
2
r' c sR e Zd ZdZedd� �Zedd� �Zejddd�ed d
� ��Z � fd d �Z
� Z S )
�
_NoBackendz�
mixin used before any backend has been loaded.
contains stubs that force loading of one of the available backends.
c C s | � � | �|�S rQ )�_stub_requires_backendrT )r3 �secretr$ r$ r% rT � s z_NoBackend.hashc C s | � � | �||�S rQ )r� �verify)r3 r� rT r$ r$ r% r� � s z_NoBackend.verifyz1.7z2.0)Z
deprecatedZremovedc C s | � � | �||�S rQ )r� �genhash)r3 r� �configr$ r$ r% r� � s z_NoBackend.genhashc s | � � tt| ��|�S rQ )r� r> r �_calc_checksum�r7 r� rM r$ r% r� � s z_NoBackend._calc_checksum) r r r r r� rT r� rC Zdeprecated_methodr� r� r� r$ r$ rM r% r� � s
r� c @ sZ e Zd ZdZedd� �Zedd� �Zedd� eD ��Z edd � �Z
ed
d � �Z d d
� Z dS )� _CffiBackendz
argon2_cffi backend
c C s� t d u rtrt�t��dS t jj}t�dt j|� t j }i }t
D ].}zt ||� � �||< W q@ t
yl Y q@0 q@|| _| | _| _| �||�S )NFzOdetected 'argon2_cffi' backend, version %r, with support for 0x%x argon2 hashes)� _argon2_cffi�_argon2_cffi_errorr ZPasslibSecurityErrorr �ARGON2_VERSION�log�debug� __version__r rx �getattr�upper�AttributeErrorr2 rW rp r| )rz rO r{ rp ZTypeEnum�type_mapr, r$ r$ r% �_load_backend_mixin� s$
� z _CffiBackend._load_backend_mixinc
C s� t �|� t|d�}z8ttjj| �| j�| j | j
| j t| � � �| j
|d��W S tjjy~ } z| �|��W Y d }~n
d }~0 0 d S )NrV )r, r r r! r( r# r� )rC �validate_secretr r r� r � hash_secretrt r, r r� r! Z_generate_saltrF �
exceptions� HashingErrorr� )r3 r� r� r$ r$ r% rT � s
�
z_CffiBackend.hashc c s" | ]}t d |�d��|fV qdS )s
$argon2%s$r[ N)r r] )�.0r, r$ r$ r% � <genexpr>� s �z_CffiBackend.<genexpr>c
C s� t �|� t|d�}t|d�}| j�|d d|�dd� � t�}| �|�}ztj �
|||�}W dS tj j yx Y dS tj j
y� } z| j||d��W Y d }~n
d }~0 0 d S )NrV r[ r. � $TF�rT )rC r� r �_byte_ident_maprA �find�TYPE_Irt r� r Z
verify_secretr� ZVerifyMismatchErrorZVerificationErrorr� )r3 r� rT r, � type_code�resultr� r$ r$ r% r� � s
"
z_CffiBackend.verifyc C s� t �|� t|d�}| �|�}z<ttjj| �|j �|j
|j |j t|j
�|j||jd��}W n6 tjjy� } z| j||d��W Y d }~n
d }~0 0 |jdkr�|�dd�}|S )NrV )r, r r r! r( r# r� rW r� r z$v=16$�$)rC r� r re r r� r r� rt r, r r* r! r( rF rW r� r� r� �replace)r3 r� r� r7 r� r� r$ r$ r% r� s&
�
$
z_CffiBackend.genhashc C s t d��d S )Nz-shouldn't be called under argon2_cffi backend)�AssertionErrorr� r$ r$ r% r� * s z_CffiBackend._calc_checksumN)
r r r r r� r� rT �dictrx r� r� r� r� r$ r$ r$ r% r� � s
�
r� c @ s$ e Zd ZdZedd� �Zdd� ZdS )� _PureBackendz
argon2pure backend
c C s� z dd l aW n ty Y dS 0 zddl m} W n tyP t�d� Y dS 0 t�d|� |sntdtj � i }t
D ]2}zt td|� � �||< W qv t
y� Y qv0 qv|| _| | _| _| �||�S )Nr F)�ARGON2_DEFAULT_VERSIONz\detected 'argon2pure' backend, but package is too old (passlib requires argon2pure >= 1.2.3)zBdetected 'argon2pure' backend, with support for 0x%x argon2 hashesz�Using argon2pure backend, which is 100x+ slower than is required for adequate security. Installing argon2_cffi (via 'pip install argon2_cffi') is strongly recommendedZARGON2)�
argon2pure� _argon2pure� ImportErrorr� r� Zwarningr� r r rw rx r� r� r� r2 rW rp r| )rz rO r{ rp r� r, r$ r$ r% r� < s2
�� z _PureBackend._load_backend_mixinc
C s� t �|� t|d�}t|| j| j| j| j| j| � | j
�| j d�}| j dkrT| j |d< | j
rbd|d< | jrr| j|d< ztjf i |��W S tjy� } z| j|| d��W Y d }~n
d }~0 0 d S ) NrV )�passwordr( r r r! Z
tag_lengthr� rW r �threadsTZ use_threadsZassociated_datar6 )rC r� r r� r( r* r r! rF rt r, rW rJ r� rY r� r Z Argon2Errorr� )r7 r� rK r� r$ r$ r% r� n s,
�
z_PureBackend._calc_checksumN)r r r r r� r� r� r$ r$ r$ r% r� 4 s
1r� c @ s$ e Zd ZdZdZdZeeed�Z dS )r a�
This class implements the Argon2 password hash [#argon2-home]_, and follows the :ref:`password-hash-api`.
Argon2 supports a variable-length salt, and variable time & memory cost,
and a number of other configurable parameters.
The :meth:`~passlib.ifc.PasswordHash.replace` method accepts the following optional keywords:
:type type: str
:param type:
Specify the type of argon2 hash to generate.
Can be one of "ID", "I", "D".
This defaults to "ID" if supported by the backend, otherwise "I".
:type salt: str
:param salt:
Optional salt string.
If specified, the length must be between 0-1024 bytes.
If not specified, one will be auto-generated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
:type rounds: int
:param rounds:
Optional number of rounds to use.
This corresponds linearly to the amount of time hashing will take.
:type time_cost: int
:param time_cost:
An alias for **rounds**, for compatibility with underlying argon2 library.
:param int memory_cost:
Defines the memory usage in kibibytes.
This corresponds linearly to the amount of memory hashing will take.
:param int parallelism:
Defines the parallelization factor.
*NOTE: this will affect the resulting hash value.*
:param int digest_size:
Length of the digest in bytes.
:param int max_threads:
Maximum number of threads that will be used.
-1 means unlimited; otherwise hashing will use ``min(parallelism, max_threads)`` threads.
.. note::
This option is currently only honored by the argon2pure backend.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionchanged:: 1.7.2
Added the "type" keyword, and support for type "D" and "ID" hashes.
(Prior versions could verify type "D" hashes, but not generate them).
.. todo::
* Support configurable threading limits.
)r} r� T)Nr} r� N)
r r r r ZbackendsZ_backend_mixin_targetr� r� r� Z_backend_mixin_mapr$ r$ r$ r% r � s P�)>r Z
__future__r r ZloggingZ getLoggerr r� r� �types�warningsr r� r� Zpasslibr Zpasslib.crypto.digestr Z
passlib.utilsr r r Zpasslib.utils.binaryr
r Zpasslib.utils.compatr r
r r r Zpasslib.utils.handlersZutils�handlersrC �__all__r� r5 ry rx �setrm r� r r� �hasattrr r� r r� r� r ZSubclassBackendMixinZParallelismMixinZ HasRoundsZ
HasRawSaltZHasRawChecksumr� r' r� r� r� r$ r$ r$ r% �<module> sf
�
�
� *|Z
Mini Shell