Current File : //lib/python3.9/site-packages/passlib/handlers/__pycache__/des_crypt.cpython-39.opt-1.pyc
a
f�Wc_W � @ s$ d Z ddlZddlZe�e�ZddlmZ ddlm Z m
Z
m Z ddl m
Z
mZ ddlmZmZmZmZmZ ddlmZ ddlm mZ g d�Zd Z d
d � Z d d
� Z dd� Z dd� Z G dd� dej!ej"ej#ej$�Z%G dd� dej"ej&ej#ej$�Z'G dd� dej#ej$�Z(G dd� dej!ej#ej$�Z)dS )zFpasslib.handlers.des_crypt - traditional unix (DES) crypt and variants� N)�warn)�
safe_crypt�
test_crypt�
to_unicode)�h64�h64big)�byte_elem_value�u�
uascii_to_str�unicode�suppress_cause)�des_encrypt_int_block)� des_crypt�
bsdi_crypt�bigcrypt�crypt16� c C s t dd� t| dd� �D ��S )z�convert secret to 64-bit DES key.
this only uses the first 8 bytes of the secret,
and discards the high 8th bit of each byte at that.
a null parity bit is inserted after every 7th bit of the output.
c s s* | ]"\}}t |�d @ d|d > V qdS )� �9 � N)r )�.0�i�c� r �>/usr/lib/python3.9/site-packages/passlib/handlers/des_crypt.py� <genexpr>( s �z'_crypt_secret_to_key.<locals>.<genexpr>Nr )�sum� enumerate)�secretr r r �_crypt_secret_to_key s �r c C sR t �|�}t| t�r | �d�} t| v r2tj�t ��t
| �}t |d|d�}t �
|�S )z pure-python backed for des_crypt�utf-8r � )r � decode_int12�
isinstancer �encode�_BNULL�uh�exc�NullPasswordErrorr r r
r � encode_int64)r �salt�
salt_value� key_value�resultr r r �_raw_des_crypt+ s
r. c C sL t | �}d}t| �}||k rH|d }t | ||� �}t||�|A }|}q|S )z,convert secret to DES key used by bsdi_cryptr )r �lenr
)r r, �idx�end�nextZ tmp_valuer r r �_bsdi_secret_to_keyI s r3 c C sR t �|�}t| t�r | �d�} t| v r2tj�t ��t
| �}t |d||�}t �
|�S )z"pure-python backend for bsdi_cryptr r )r � decode_int24r# r r$ r% r& r' r( r r3 r
r r) )r �roundsr* r+ r, r- r r r �_raw_bsdi_cryptU s
r6 c @ s� e Zd ZdZd ZdZejZdZ d Z
Z ejZ dZ
e�ed�ejejB �Zedd� �Zd d
� Zd d � Zd
Zedd� �Zdd� Zedd� �Zdd� Z dS )r a� This class implements the des-crypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, des_crypt will silently truncate passwords larger than 8 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
�r* Ztruncate_error� � r zU
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>[./a-z0-9]{11})?
$c C s6 t |dd�}|d d� |dd � }}| ||p0d d�S )N�ascii�hashr9 �r* �checksum)r )�clsr; r* �chkr r r � from_string� s zdes_crypt.from_stringc C s t d�| j| jf }t|�S �Nz%s%s�r r* r= r
��selfr; r r r � to_string� s zdes_crypt.to_stringc C s | j r| �|� | �|�S )N)� use_defaults�_check_truncate_policyZ_calc_checksum_backend�rD r r r r �_calc_checksum� s
zdes_crypt._calc_checksum�Zos_cryptZbuiltinc C s" t dd�r| �| j� dS dS d S )N�testZ
abgOeLfPimXQoTF�r �_set_calc_checksum_backend�_calc_checksum_os_crypt�r> r r r �_load_backend_os_crypt� s
z des_crypt._load_backend_os_cryptc C sT t || j�}|d u r | �|�S |�| j�r6t|�dkrHtj�| | j|��|dd � S )N�
r9 )r r* �_calc_checksum_builtin�
startswithr/ r& r' �CryptBackendError)rD r r; r r r rN � s
z!des_crypt._calc_checksum_os_cryptc C s | � | j� dS �NT�rM rR rO r r r �_load_backend_builtin� s z des_crypt._load_backend_builtinc C s t || j�d���d�S �Nr: )r. r* r$ �decoderH r r r rR � s z des_crypt._calc_checksum_builtinN) �__name__�
__module__� __qualname__�__doc__�name� setting_kwdsr& � HASH64_CHARS�checksum_chars�
checksum_size�
min_salt_size�
max_salt_size�
salt_chars�
truncate_size�re�compiler �X�I� _hash_regex� classmethodr@ rE rI �backendsrP rN rW rR r r r r r p s, $
�
r c s� e Zd ZdZd ZdZdZejZ d Z
Z ejZ dZ
dZdZdZe�ed �ejejB �Zed
d � �Zd d
� ZdZe� fdd��Ze� fdd��Z � fdd�Z dZ edd� �Z dd� Z edd� �Z!d d � Z"� Z#S ) r a
This class implements the BSDi-Crypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 4 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 5001, must be between 1 and 16777215, inclusive.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
.. versionchanged:: 1.6
:meth:`hash` will now issue a warning if an even number of rounds is used
(see :ref:`bsdi-crypt-security-issues` regarding weak DES keys).
)r* r5 r8 � i� � i��� Zlinearz�
^
_
(?P<rounds>[./a-z0-9]{4})
(?P<salt>[./a-z0-9]{4})
(?P<chk>[./a-z0-9]{11})?
$c C sV t |dd�}| j�|�}|s(tj�| ��|�ddd�\}}}| t�|� d��||d�S )Nr: r; r5 r* r? )r5 r* r= )
r rk �matchr& r' �InvalidHashError�groupr r4 r$ )r> r; �mr5 r* r? r r r r@ 4 s �zbsdi_crypt.from_stringc C s, t d�t�| j��d�| j| jf }t|�S )Nz_%s%s%sr: )r r Z encode_int24r5 rY r* r= r
rC r r r rE A s �zbsdi_crypt.to_stringTc s2 t t| �jf i |��}|jd@ s.tdtjj� |S )Nro zHbsdi_crypt rounds should be odd, as even rounds may reveal weak DES keys)�superr �using�default_roundsr r& r' ZPasslibSecurityWarning)r> �kwds�subcls�� __class__r r ru N s
�zbsdi_crypt.usingc s t t| ��� }|dB S )Nro )rt r �_generate_rounds)r> r5 ry r r r{ W s zbsdi_crypt._generate_roundsc s$ | j d@ sdS tt| �jf i |��S )Nro T)r5 rt r �_calc_needs_update)rD rw ry r r r| e s
z bsdi_crypt._calc_needs_updaterJ c C s" t dd�r| �| j� dS dS d S )NrK z_/...lLDAxARksGCHin.TFrL rO r r r rP t s
z!bsdi_crypt._load_backend_os_cryptc C s^ | � � }t||�}|d u r$| �|�S |�|d d� �rBt|�dkrRtj�| ||��|dd � S )N� � ���)rE r rR rS r/ r& r' rT )rD r Zconfigr; r r r rN | s
z"bsdi_crypt._calc_checksum_os_cryptc C s | � | j� dS rU rV rO r r r rW � s z bsdi_crypt._load_backend_builtinc C s t || j| j�d���d�S rX )r6 r5 r* r$ rY rH r r r rR � s z!bsdi_crypt._calc_checksum_builtin)$rZ r[ r\ r] r^ r_ rb r& r` ra rc rd re rv Z
min_roundsZ
max_roundsZ rounds_costrg rh r ri rj rk rl r@ rE Z_avoid_even_roundsru r{ r| rm rP rN rW rR �
__classcell__r r ry r r � s< #
�
r c sr e Zd ZdZd ZdZejZd Z Z
ejZ e �
ed�e je jB �Zedd� �Zdd� Zd� fd
d � Zd d
� Z� ZS )r ag This class implements the BigCrypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 22 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
)r* r9 zX
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>([./a-z0-9]{11})+)?
$c C sD t |dd�}| j�|�}|s(tj�| ��|�dd�\}}| ||d�S �Nr: r; r* r? r< �r rk rp r& r' rq rr �r> r; rs r* r? r r r r@ � s zbigcrypt.from_stringc C s t d�| j| jf }t|�S rA rB rC r r r rE � s zbigcrypt.to_stringFc s0 t t| �j||d�}t|�d r,tj�| ��|S )N)�relaxedr8 )rt r �_norm_checksumr/ r& r' rq )rD r= r� ry r r r� � s zbigcrypt._norm_checksumc C sp t |t�r|�d�}t|| j�d��}d}t|�}||k rf|d }|t|||� |dd� �7 }|}q2|�d�S )Nr r: r r i����)r# r r$ r. r* r/ rY )rD r r? r0 r1 r2 r r r rI � s
zbigcrypt._calc_checksum)F)rZ r[ r\ r] r^ r_ r& r` ra rc rd re rg rh r ri rj rk rl r@ rE r� rI r� r r ry r r � s
�
r c @ sh e Zd ZdZd ZdZdZejZ d Z
Z ejZ dZ
e�ed�ejejB �Zedd� �Zd d
� Zd d � Zd
S )r a� This class implements the crypt16 password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, crypt16 will silently truncate passwords larger than 16 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
r7 � r9 � zU
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>[./a-z0-9]{22})?
$c C sD t |dd�}| j�|�}|s(tj�| ��|�dd�\}}| ||d�S r� r� r� r r r r@ + s zcrypt16.from_stringc C s t d�| j| jf }t|�S rA rB rC r r r rE 4 s zcrypt16.to_stringc C s� t |t�r|�d�}| jr$| �|� zt�| j�d��}W n tyX t td���Y n0 t
|�}t |d|d�}t
|dd� �}t |d|d�}t �
|�t �
|� }|�d�S ) Nr r: zinvalid chars in saltr r~ r r� � )r# r r$ rF rG r r" r* �
ValueErrorr r r
r r) rY )rD r r+ Zkey1Zresult1Zkey2Zresult2r? r r r rI ; s
zcrypt16._calc_checksumN)rZ r[ r\ r] r^ r_ rb r& r` ra rc rd re rf rg rh r ri rj rk rl r@ rE rI r r r r r � s $
�
r )*r] rg ZloggingZ getLoggerrZ �log�warningsr Z
passlib.utilsr r r Zpasslib.utils.binaryr r Zpasslib.utils.compatr r r
r r Zpasslib.crypto.desr
Zpasslib.utils.handlersZutils�handlersr& �__all__r% r r. r3 r6 Z
TruncateMixinZHasManyBackendsZHasSaltZGenericHandlerr Z HasRoundsr r r r r r r �<module> s(
$S
Mini Shell