OwlCyberSecurity - MANAGER
Edit File: crypto_pwhash.cpython-38.pyc
U �֫[B � @ s� d dl mZmZmZ d dlZd dlmZ d dlmZ d dl m Z m Z d dlm Z e �e �de �� ��dd� Ze �� Ze �� Ze �� Ze �� Ze �� Ze � � Z e � � Z e � � Z!e �"� Z#e �$� Z%e �&� Z'e �(� Z)e �*� Z+e �,� Z-e �.� Z/e �0� Z1e �2� Z3e �4� Z5e �6� Z7e �8� Z9e �:� Z;e �<� Z=e �>� Z?e �e �de �@� ��dd� ZAe �B� ZCe �D� ZEe �F� ZGe �H� ZIe �J� ZKe �L� ZMe �N� ZOe �P� ZQe �R� ZSe �T� ZUe �e �de �V� ��dd� ZWe �X� ZYe �Z� Z[e �\� Z]e �^� Z_e �`� Zae �b� Zce �d� Zee �f� Zge �h� Zie �j� Zke'Zle)Zme+Zne-ZoeZpeZqdZrdZsd Ztd Zueufd d �Zvd d� Zwdeufdd�Zxelemfdd�Zydd� Zzdd� Z{dd� Z|dd� Z}d d � Z~e~ZdS ) � )�absolute_import�division�print_functionN)� integer_types)�ffi�lib)�ensure�char *��?�? l ���� i c C s t |dkdtjd� t |dkdtjd� t | | d @ dkdtjd� t | dkdtjd� t |t| kd�t�tjd� t | dd | > k tjd� |d | }td }t | d || ktjd� d | | d d }t |t| ktjd� t |tj| ktjd� t || |kdtjd� d S )Nr zInvalid block size�Zraisingz Invalid parallelization factor� z Cost factor must be a power of 2z Cost factor must be at least 2zp*r is greater than {0}� � � � � z7Memory limit would be exceeded with the choosen n, r, p)r �exc� ValueError� SCRYPT_PR_MAX�format� UINT64_MAX�sys�maxsize)�n�r�p�maxmemZBlen�iZVlen� r �=/usr/lib/python3/dist-packages/nacl/bindings/crypto_pwhash.py�_check_memory_occupation� sF � �� � �� � �� �r! c C s� | dk r d} d}| |d k rRd}| d| }t dd�D ]}d| |d kr6 q�q6nT||d }t dd�D ]}d| |d krh q�qh| d d| }|d kr�d }|| }|||fS ) z/Python implementation of libsodium's pickparamsi � � r r r r r r r )�range)�opslimit�memlimitr r ZmaxnZn_log2Zmaxrpr r r � nacl_bindings_pick_scrypt_params� s$ r& �@ c C s� t t|t�td� t t|t�td� t t|t�td� t t| t�td� t t|t�td� t||||� t�d|�}t� | t | �|t |�|||||� }t |dkdt j d� t� t�d|�|�dd� S )a1 Derive a cryptographic key using the ``passwd`` and ``salt`` given as input. The work factor can be tuned by by picking different values for the parameters :param bytes passwd: :param bytes salt: :param bytes salt: *must* be *exactly* :py:const:`.SALTBYTES` long :param int dklen: :param int opslimit: :param int n: :param int r: block size, :param int p: the parallelism factor :param int maxmem: the maximum available memory available for scrypt's operations :rtype: bytes r z uint8_t[]r �$Unexpected failure in key derivationr N)r � isinstancer � TypeError�bytesr! r �newr �%crypto_pwhash_scryptsalsa208sha256_ll�lenr � RuntimeError�buffer�cast) �passwd�saltr r r Zdklenr �buf�retr r r r- � s< � � � � � � �r- c C s@ t �dt�}t�|| t| �||�}t|dkdtjd� t � |�S )a Derive a cryptographic key using the ``passwd`` and ``salt`` given as input, returning a string representation which includes the salt and the tuning parameters. The returned string can be directly stored as a password hash. See :py:func:`.crypto_pwhash_scryptsalsa208sha256` for a short discussion about ``opslimit`` and ``memlimit`` values. :param bytes passwd: :param int opslimit: :param int memlimit: :return: serialized key hash, including salt and tuning parameters :rtype: bytes �char[]r z&Unexpected failure in password hashingr ) r r, �SCRYPT_STRBYTESr �&crypto_pwhash_scryptsalsa208sha256_strr. r r r/ �string)r2 r$ r% r4 r5 r r r r8 s � �r8 c C sF t t| �td kdtjd� t�| |t|��}t |dkdtjd� dS )z� Verifies the ``passwd`` against the ``passwd_hash`` that was generated. Returns True or False depending on the success :param passwd_hash: bytes :param passwd: bytes :rtype: boolean r zInvalid password hashr r �Wrong passwordT)r r. r7 r r r �-crypto_pwhash_scryptsalsa208sha256_str_verify�InvalidkeyError�Z passwd_hashr2 r5 r r r r; $ s ���r; c C s� |t krn|tk r"t�d�t���n|tkr:t�d�t���| tk rTt�d�t���q�| tkr�t�d�t���nx|tkr�|t k r�t�d�t ���n|t kr�t�d�t ���| t k r�t�d�t ���q�| t kr�t�d�t ���n t� d��d S )Nz#memlimit must be at least {0} bytesz"memlimit must be at most {0} bytesz opslimit must be at least {0}z opslimit must be at most {0}zUnsupported algorithm)�crypto_pwhash_ALG_ARGON2I13�"crypto_pwhash_argon2i_MEMLIMIT_MINr r r �"crypto_pwhash_argon2i_MEMLIMIT_MAX�"crypto_pwhash_argon2i_OPSLIMIT_MIN�"crypto_pwhash_argon2i_OPSLIMIT_MAX� crypto_pwhash_ALG_ARGON2ID13�#crypto_pwhash_argon2id_MEMLIMIT_MIN�#crypto_pwhash_argon2id_MEMLIMIT_MAX�#crypto_pwhash_argon2id_OPSLIMIT_MIN�#crypto_pwhash_argon2id_OPSLIMIT_MAXr* )r$ r% �algr r r �_check_argon2_limits_alg; sF ��������rI c C s t t| t�tjd� t t|t�tjd� t t|t�tjd� t t|t�tjd� t t|t�tjd� t|�tkr�t�d� t���| t k r�t�d� t ���n| t kr�t�d� t ���t |||� t �d| �}t�|| |t|�||||�}t |dkdtjd� t �|| �dd� S ) a� Derive a raw cryptographic key using the ``passwd`` and the ``salt`` given as input to the ``alg`` algorithm. :param outlen: the length of the derived key :type outlen: int :param passwd: The input password :type passwd: bytes :param opslimit: computational cost :type opslimit: int :param memlimit: memory cost :type memlimit: int :param alg: algorithm identifier :type alg: int :return: derived key :rtype: bytes r z#salt must be exactly {0} bytes longz+derived key must be at least {0} bytes longz*derived key must be at most {0} bytes longzunsigned char[]r r( N)r r) r r r* r+ r. �crypto_pwhash_SALTBYTESr r �crypto_pwhash_BYTES_MIN�crypto_pwhash_BYTES_MAXrI r r, r Z crypto_pwhashr/ r0 )Zoutlenr2 r3 r$ r% rH �outbufr5 r r r �crypto_pwhash_alg\ sV � � � � � ����� � �rN c C s� t t|t�td� t t|t�td� t t| t�td� t|||� t�dd�}t� || t | �|||�}t |dkdt j d� t� |�S )a Derive a cryptographic key using the ``passwd`` given as input and a random ``salt``, returning a string representation which includes the salt, the tuning parameters and the used algorithm. :param passwd: The input password :type passwd: bytes :param opslimit: computational cost :type opslimit: int :param memlimit: memory cost :type memlimit: int :param alg: The algorithm to use :type alg: int :return: serialized derived key and parameters :rtype: bytes r r6 r r r( )r r) r r* r+ rI r r, r �crypto_pwhash_str_algr. r r/ r9 )r2 r$ r% rH rM r5 r r r rO � s( � � � � �rO c C sf t t| t�td� t t|t�td� t t| �dkdtjd� t�| |t|��}t |dkdtj d� dS )a4 Verifies the ``passwd`` against a given password hash. Returns True on success, raises InvalidkeyError on failure :param passwd_hash: saved password hash :type passwd_hash: bytes :param passwd: password to be checked :type passwd: bytes :return: success :rtype: boolean r � z#Hash must be at most 127 bytes longr r: T) r r) r+ r* r. r r r �crypto_pwhash_str_verifyr< r= r r r rQ � s � � ��rQ )�Z __future__r r r r Zsixr Znacl.exceptions� exceptionsr Z nacl._sodiumr r r r9 r1 Z,crypto_pwhash_scryptsalsa208sha256_strprefixZ,crypto_pwhash_scryptsalsa208sha256_STRPREFIXZ,crypto_pwhash_scryptsalsa208sha256_saltbytesZ,crypto_pwhash_scryptsalsa208sha256_SALTBYTESZ+crypto_pwhash_scryptsalsa208sha256_strbytesZ+crypto_pwhash_scryptsalsa208sha256_STRBYTESZ-crypto_pwhash_scryptsalsa208sha256_passwd_minZ-crypto_pwhash_scryptsalsa208sha256_PASSWD_MINZ-crypto_pwhash_scryptsalsa208sha256_passwd_maxZ-crypto_pwhash_scryptsalsa208sha256_PASSWD_MAXZ,crypto_pwhash_scryptsalsa208sha256_bytes_minZ,crypto_pwhash_scryptsalsa208sha256_BYTES_MINZ,crypto_pwhash_scryptsalsa208sha256_bytes_maxZ,crypto_pwhash_scryptsalsa208sha256_BYTES_MAXZ/crypto_pwhash_scryptsalsa208sha256_memlimit_minZ/crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_MINZ/crypto_pwhash_scryptsalsa208sha256_memlimit_maxZ/crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_MAXZ/crypto_pwhash_scryptsalsa208sha256_opslimit_minZ/crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_MINZ/crypto_pwhash_scryptsalsa208sha256_opslimit_maxZ/crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_MAXZ7crypto_pwhash_scryptsalsa208sha256_opslimit_interactiveZ7crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_INTERACTIVEZ7crypto_pwhash_scryptsalsa208sha256_memlimit_interactiveZ7crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_INTERACTIVEZ5crypto_pwhash_scryptsalsa208sha256_opslimit_sensitiveZ5crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_SENSITIVEZ5crypto_pwhash_scryptsalsa208sha256_memlimit_sensitiveZ5crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_SENSITIVEZcrypto_pwhash_alg_argon2i13r> Z crypto_pwhash_alg_argon2id13rC Zcrypto_pwhash_alg_defaultZcrypto_pwhash_ALG_DEFAULTZcrypto_pwhash_saltbytesrJ Zcrypto_pwhash_strbytesZcrypto_pwhash_STRBYTESZcrypto_pwhash_passwd_minZcrypto_pwhash_PASSWD_MINZcrypto_pwhash_passwd_maxZcrypto_pwhash_PASSWD_MAXZcrypto_pwhash_bytes_minrK Zcrypto_pwhash_bytes_maxrL Z crypto_pwhash_argon2i_strprefixZ crypto_pwhash_argon2i_STRPREFIXZ"crypto_pwhash_argon2i_memlimit_minr? Z"crypto_pwhash_argon2i_memlimit_maxr@ Z"crypto_pwhash_argon2i_opslimit_minrA Z"crypto_pwhash_argon2i_opslimit_maxrB Z*crypto_pwhash_argon2i_opslimit_interactiveZ*crypto_pwhash_argon2i_OPSLIMIT_INTERACTIVEZ*crypto_pwhash_argon2i_memlimit_interactiveZ*crypto_pwhash_argon2i_MEMLIMIT_INTERACTIVEZ'crypto_pwhash_argon2i_opslimit_moderateZ'crypto_pwhash_argon2i_OPSLIMIT_MODERATEZ'crypto_pwhash_argon2i_memlimit_moderateZ'crypto_pwhash_argon2i_MEMLIMIT_MODERATEZ(crypto_pwhash_argon2i_opslimit_sensitiveZ(crypto_pwhash_argon2i_OPSLIMIT_SENSITIVEZ(crypto_pwhash_argon2i_memlimit_sensitiveZ(crypto_pwhash_argon2i_MEMLIMIT_SENSITIVEZ crypto_pwhash_argon2id_strprefixZ crypto_pwhash_argon2id_STRPREFIXZ#crypto_pwhash_argon2id_memlimit_minrD Z#crypto_pwhash_argon2id_memlimit_maxrE Z#crypto_pwhash_argon2id_opslimit_minrF Z#crypto_pwhash_argon2id_opslimit_maxrG Z+crypto_pwhash_argon2id_opslimit_interactiveZ+crypto_pwhash_argon2id_OPSLIMIT_INTERACTIVEZ+crypto_pwhash_argon2id_memlimit_interactiveZ+crypto_pwhash_argon2id_MEMLIMIT_INTERACTIVEZ(crypto_pwhash_argon2id_opslimit_moderateZ(crypto_pwhash_argon2id_OPSLIMIT_MODERATEZ(crypto_pwhash_argon2id_memlimit_moderateZ(crypto_pwhash_argon2id_MEMLIMIT_MODERATEZ)crypto_pwhash_argon2id_opslimit_sensitiveZ)crypto_pwhash_argon2id_OPSLIMIT_SENSITIVEZ)crypto_pwhash_argon2id_memlimit_sensitiveZ)crypto_pwhash_argon2id_MEMLIMIT_SENSITIVEZSCRYPT_OPSLIMIT_INTERACTIVEZSCRYPT_MEMLIMIT_INTERACTIVEZSCRYPT_OPSLIMIT_SENSITIVEZSCRYPT_MEMLIMIT_SENSITIVEZSCRYPT_SALTBYTESr7 r ZLOG2_UINT64_MAXr ZSCRYPT_MAX_MEMr! r& r- r8 r; rI rN rO rQ Z crypto_pwhash_argon2i_str_verifyr r r r �<module> s� � ��������������� � ����������� � ����������������� ( � 1� !8%