Current File : //lib/python3.9/site-packages/passlib/handlers/__pycache__/des_crypt.cpython-39.pyc
a
f�Wc_W � @ s$ d Z ddlZddlZe�e�ZddlmZ ddlm Z m
Z
m Z ddl m
Z
mZ ddlmZmZmZmZmZ ddlmZ ddlm mZ g d�Zd Z d
d � Z d d
� Z dd� Z dd� Z G dd� dej!ej"ej#ej$�Z%G dd� dej"ej&ej#ej$�Z'G dd� dej#ej$�Z(G dd� dej!ej#ej$�Z)dS )zFpasslib.handlers.des_crypt - traditional unix (DES) crypt and variants� N)�warn)�
safe_crypt�
test_crypt�
to_unicode)�h64�h64big)�byte_elem_value�u�
uascii_to_str�unicode�suppress_cause)�des_encrypt_int_block)� des_crypt�
bsdi_crypt�bigcrypt�crypt16� c C s t dd� t| dd� �D ��S )z�convert secret to 64-bit DES key.
this only uses the first 8 bytes of the secret,
and discards the high 8th bit of each byte at that.
a null parity bit is inserted after every 7th bit of the output.
c s s* | ]"\}}t |�d @ d|d > V qdS )� �9 � N)r )�.0�i�c� r �>/usr/lib/python3.9/site-packages/passlib/handlers/des_crypt.py� <genexpr>( s �z'_crypt_secret_to_key.<locals>.<genexpr>Nr )�sum� enumerate)�secretr r r �_crypt_secret_to_key s �r c C sp t |�dksJ �t�|�}t| t�r.| �d�} t| t�s<J �t| v rPtj �
t ��t | �}t
|d|d�}t�|�S )z pure-python backed for des_crypt� �utf-8r � )�lenr � decode_int12�
isinstancer �encode�bytes�_BNULL�uh�exc�NullPasswordErrorr r r
r � encode_int64)r �salt�
salt_value� key_value�resultr r r �_raw_des_crypt+ s
r1 c C sL t | �}d}t| �}||k rH|d }t | ||� �}t||�|A }|}q|S )z,convert secret to DES key used by bsdi_cryptr )r r# r
)r r/ �idx�end�nextZ tmp_valuer r r �_bsdi_secret_to_keyI s r5 c C s` t �|�}t| t�r | �d�} t| t�s,J �t| v r@tj� t
��t | �}t |d||�}t
�|�S )z"pure-python backend for bsdi_cryptr! r )r � decode_int24r% r r& r' r( r) r* r+ r r5 r
r r, )r �roundsr- r. r/ r0 r r r �_raw_bsdi_cryptU s
r8 c @ s� e Zd ZdZd ZdZejZdZ d Z
Z ejZ dZ
e�ed�ejejB �Zedd� �Zd d
� Zd d � Zd
Zedd� �Zdd� Zedd� �Zdd� Z dS )r a� This class implements the des-crypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, des_crypt will silently truncate passwords larger than 8 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
�r- Ztruncate_error� r r zU
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>[./a-z0-9]{11})?
$c C s6 t |dd�}|d d� |dd � }}| ||p0d d�S )N�ascii�hashr �r- �checksum)r )�clsr< r- �chkr r r � from_string� s zdes_crypt.from_stringc C s t d�| j| jf }t|�S �Nz%s%s�r r- r> r
��selfr< r r r � to_string� s zdes_crypt.to_stringc C s | j r| �|� | �|�S )N)� use_defaults�_check_truncate_policyZ_calc_checksum_backend�rE r r r r �_calc_checksum� s
zdes_crypt._calc_checksum�Zos_cryptZbuiltinc C s" t dd�r| �| j� dS dS d S )N�testZ
abgOeLfPimXQoTF�r �_set_calc_checksum_backend�_calc_checksum_os_crypt�r? r r r �_load_backend_os_crypt� s
z des_crypt._load_backend_os_cryptc C sT t || j�}|d u r | �|�S |�| j�r6t|�dkrHtj�| | j|��|dd � S )N�
r )r r- �_calc_checksum_builtin�
startswithr# r) r* �CryptBackendError)rE r r< r r r rO � s
z!des_crypt._calc_checksum_os_cryptc C s | � | j� dS �NT�rN rS rP r r r �_load_backend_builtin� s z des_crypt._load_backend_builtinc C s t || j�d���d�S �Nr; )r1 r- r& �decoderI r r r rS � s z des_crypt._calc_checksum_builtinN) �__name__�
__module__� __qualname__�__doc__�name� setting_kwdsr) � HASH64_CHARS�checksum_chars�
checksum_size�
min_salt_size�
max_salt_size�
salt_chars�
truncate_size�re�compiler �X�I� _hash_regex� classmethodrA rF rJ �backendsrQ rO rX rS r r r r r p s, $
�
r c s� e Zd ZdZd ZdZdZejZ d Z
Z ejZ dZ
dZdZdZe�ed �ejejB �Zed
d � �Zd d
� ZdZe� fdd��Ze� fdd��Z � fdd�Z dZ edd� �Z dd� Z edd� �Z!d d � Z"� Z#S ) r a
This class implements the BSDi-Crypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 4 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 5001, must be between 1 and 16777215, inclusive.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
.. versionchanged:: 1.6
:meth:`hash` will now issue a warning if an even number of rounds is used
(see :ref:`bsdi-crypt-security-issues` regarding weak DES keys).
)r- r7 r: � i� � i��� Zlinearz�
^
_
(?P<rounds>[./a-z0-9]{4})
(?P<salt>[./a-z0-9]{4})
(?P<chk>[./a-z0-9]{11})?
$c C sV t |dd�}| j�|�}|s(tj�| ��|�ddd�\}}}| t�|� d��||d�S )Nr; r< r7 r- r@ )r7 r- r> )
r rl �matchr) r* �InvalidHashError�groupr r6 r& )r? r< �mr7 r- r@ r r r rA 4 s �zbsdi_crypt.from_stringc C s, t d�t�| j��d�| j| jf }t|�S )Nz_%s%s%sr; )r r Z encode_int24r7 rZ r- r> r
rD r r r rF A s �zbsdi_crypt.to_stringTc s2 t t| �jf i |��}|jd@ s.tdtjj� |S )Nrp zHbsdi_crypt rounds should be odd, as even rounds may reveal weak DES keys)�superr �using�default_roundsr r) r* ZPasslibSecurityWarning)r? �kwds�subcls�� __class__r r rv N s
�zbsdi_crypt.usingc s t t| ��� }|dB S )Nrp )ru r �_generate_rounds)r? r7 rz r r r| W s zbsdi_crypt._generate_roundsc s$ | j d@ sdS tt| �jf i |��S )Nrp T)r7 ru r �_calc_needs_update)rE rx rz r r r} e s
z bsdi_crypt._calc_needs_updaterK c C s" t dd�r| �| j� dS dS d S )NrL z_/...lLDAxARksGCHin.TFrM rP r r r rQ t s
z!bsdi_crypt._load_backend_os_cryptc C s^ | � � }t||�}|d u r$| �|�S |�|d d� �rBt|�dkrRtj�| ||��|dd � S )N� � ���)rF r rS rT r# r) r* rU )rE r Zconfigr< r r r rO | s
z"bsdi_crypt._calc_checksum_os_cryptc C s | � | j� dS rV rW rP r r r rX � s z bsdi_crypt._load_backend_builtinc C s t || j| j�d���d�S rY )r8 r7 r- r& rZ rI r r r rS � s z!bsdi_crypt._calc_checksum_builtin)$r[ r\ r] r^ r_ r` rc r) ra rb rd re rf rw Z
min_roundsZ
max_roundsZ rounds_costrh ri r rj rk rl rm rA rF Z_avoid_even_roundsrv r| r} rn rQ rO rX rS �
__classcell__r r rz r r � s< #
�
r c sr e Zd ZdZd ZdZejZd Z Z
ejZ e �
ed�e je jB �Zedd� �Zdd� Zd� fd
d � Zd d
� Z� ZS )r ag This class implements the BigCrypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 22 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
)r- r zX
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>([./a-z0-9]{11})+)?
$c C sD t |dd�}| j�|�}|s(tj�| ��|�dd�\}}| ||d�S �Nr; r< r- r@ r= �r rl rq r) r* rr rs �r? r< rt r- r@ r r r rA � s zbigcrypt.from_stringc C s t d�| j| jf }t|�S rB rC rD r r r rF � s zbigcrypt.to_stringFc s0 t t| �j||d�}t|�d r,tj�| ��|S )N)�relaxedr: )ru r �_norm_checksumr# r) r* rr )rE r> r� rz r r r� � s zbigcrypt._norm_checksumc C sp t |t�r|�d�}t|| j�d��}d}t|�}||k rf|d }|t|||� |dd� �7 }|}q2|�d�S )Nr! r; r r� i����)r% r r& r1 r- r# rZ )rE r r@ r2 r3 r4 r r r rJ � s
zbigcrypt._calc_checksum)F)r[ r\ r] r^ r_ r` r) ra rb rd re rf rh ri r rj rk rl rm rA rF r� rJ r� r r rz r r � s
�
r c @ sh e Zd ZdZd ZdZdZejZ d Z
Z ejZ dZ
e�ed�ejejB �Zedd� �Zd d
� Zd d � Zd
S )r a� This class implements the crypt16 password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, crypt16 will silently truncate passwords larger than 16 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
r9 � r � zU
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>[./a-z0-9]{22})?
$c C sD t |dd�}| j�|�}|s(tj�| ��|�dd�\}}| ||d�S r� r� r� r r r rA + s zcrypt16.from_stringc C s t d�| j| jf }t|�S rB rC rD r r r rF 4 s zcrypt16.to_stringc C s� t |t�r|�d�}| jr$| �|� zt�| j�d��}W n tyX t td���Y n0 t
|�}t |d|d�}t
|dd� �}t |d|d�}t �
|�t �
|� }|�d�S ) Nr! r; zinvalid chars in saltr r r r� � )r% r r& rG rH r r$ r- �
ValueErrorr r r
r r, rZ )rE r r. Zkey1Zresult1Zkey2Zresult2r@ r r r rJ ; s
zcrypt16._calc_checksumN)r[ r\ r] r^ r_ r` rc r) ra rb rd re rf rg rh ri r rj rk rl rm rA rF rJ r r r r r � s $
�
r )*r^ rh ZloggingZ getLoggerr[ �log�warningsr Z
passlib.utilsr r r Zpasslib.utils.binaryr r Zpasslib.utils.compatr r r
r r Zpasslib.crypto.desr
Zpasslib.utils.handlersZutils�handlersr) �__all__r( r r1 r5 r8 Z
TruncateMixinZHasManyBackendsZHasSaltZGenericHandlerr Z HasRoundsr r r r r r r �<module> s(
$S
Mini Shell