| Current File : //usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyc |
�
�
5Xc @ s� d Z d d l Z d d l Z e j e � Z d d l m Z d d l m Z m
Z
m Z d d l m
Z
m Z d d l m Z m Z m Z m Z m Z d d l m Z d d l j j Z d d d
d g Z d Z d
� Z d � Z d � Z d � Z d e j! e j" e j# e j$ f d � � YZ% d e j" e j& e j# e j$ f d � � YZ' d
e j# e j$ f d � � YZ( d e j! e j# e j$ f d � � YZ) d S( sF passlib.handlers.des_crypt - traditional unix (DES) crypt and variantsi����N( t warn( t
safe_cryptt
test_cryptt
to_unicode( t h64t h64big( t byte_elem_valuet ut
uascii_to_strt unicodet suppress_cause( t des_encrypt_int_blockt des_cryptt
bsdi_cryptt bigcryptt crypt16t c C s t d � t | d � D� � S( s� convert secret to 64-bit DES key.
this only uses the first 8 bytes of the secret,
and discards the high 8th bit of each byte at that.
a null parity bit is inserted after every 7th bit of the output.
c s s1 | ]' \ } } t | � d @d | d >Vq d S( i i9 i N( R ( t .0t it c( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pys <genexpr>( s i ( t sumt enumerate( t secret( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _crypt_secret_to_key s c C s� t | � d k s t � t j | � } t | t � rH | j d � } n t | t � s] t � t | k r~ t j
j t � � n t
| � } t | d | d � } t j | � S( s pure-python backed for des_crypti s utf-8i i ( t lent AssertionErrorR t decode_int12t
isinstanceR t encodet bytest _BNULLt uht exct NullPasswordErrorR R R R t encode_int64( R t saltt
salt_valuet key_valuet result( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _raw_des_crypt+ s c C sk t | � } d } t | � } xF | | k rf | d } t | | | !� } t | | � | A} | } q! W| S( s, convert secret to DES key used by bsdi_crypti ( R R R ( R R% t idxt endt nextt tmp_value( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _bsdi_secret_to_keyI s
c C s� t j | � } t | t � r0 | j d � } n t | t � sE t � t | k rf t j j
t � � n t | � } t
| d | | � } t j | � S( s" pure-python backend for bsdi_crypts utf-8i ( R t decode_int24R R R R R R R R R! R
R, R R R" ( R t roundsR# R$ R% R& ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _raw_bsdi_cryptU s c B s� e Z d Z d Z d Z e j Z d Z d Z Z
e j Z d Z e
j e d � e
j e
j B� Z e d � � Z d � Z d
� Z d Z e d
� � Z d � Z e d � � Z d � Z RS( s� This class implements the des-crypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, des_crypt will silently truncate passwords larger than 8 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
R R# t truncate_errori i i sU
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>[./a-z0-9]{11})?
$c C s@ t | d d � } | d | d } } | d | d | p< d � S( Nt asciit hashi R# t checksum( R t None( t clsR2 R# t chk( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt from_string� s c C s& t d � | j | j f } t | � S( Ns %s%s( R R# R3 R ( t selfR2 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt to_string� s c C s& | j r | j | � n | j | � S( N( t use_defaultst _check_truncate_policyt _calc_checksum_backend( R8 R ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _calc_checksum� s t os_cryptt builtinc C s+ t d d � r# | j | j � t St Sd S( Nt testt
abgOeLfPimXQo( R t _set_calc_checksum_backendt _calc_checksum_os_cryptt Truet False( R5 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _load_backend_os_crypt� s c C s[ t | | j � } | rJ | j | j � r< t | � d k sB t � | d S| j | � Sd S( Ni
i ( R R# t
startswithR R t _calc_checksum_builtin( R8 R R2 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRC � s
*c C s | j | j � t S( N( RB RH RD ( R5 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt _load_backend_builtin� s c C s" t | | j j d � � j d � S( NR1 ( R' R# R t decode( R8 R ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRH � s ( s saltR0 ( R> R? ( t __name__t
__module__t __doc__t namet setting_kwdsR t HASH64_CHARSt checksum_charst
checksum_sizet
min_salt_sizet
max_salt_sizet
salt_charst
truncate_sizet ret compileR t Xt It _hash_regext classmethodR7 R9 R= t backendsRF RC RI RH ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR p s$
c B s� e Z d Z d Z d Z d Z e j Z d Z Z
e j Z d Z d Z
d Z d Z e j e d
� e j e j B� Z e d � � Z d � Z e Z e d
� � Z e d � � Z d � Z d Z e d � � Z d � Z e d � � Z! d � Z" RS( s
This class implements the BSDi-Crypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 4 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 5001, must be between 1 and 16777215, inclusive.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
.. versionchanged:: 1.6
:meth:`hash` will now issue a warning if an even number of rounds is used
(see :ref:`bsdi-crypt-security-issues` regarding weak DES keys).
R
R# R. i i i� i i��� t linears�
^
_
(?P<rounds>[./a-z0-9]{4})
(?P<salt>[./a-z0-9]{4})
(?P<chk>[./a-z0-9]{11})?
$c C s� t | d d � } | j j | � } | s? t j j | � � n | j d d d � \ } } } | d t j | j d � � d | d | � S( NR1 R2 R. R# R6 R3 (
R R[ t matchR R t InvalidHashErrort groupR R- R ( R5 R2 t mR. R# R6 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR7 4 s c C s> t d � t j | j � j d � | j | j f } t | � S( Ns _%s%s%sR1 ( R R t encode_int24R. RJ R# R3 R ( R8 R2 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR9 A s !c K s? t t | � j | � } | j d @s; t d t j j � n | S( Ni sH bsdi_crypt rounds should be odd, as even rounds may reveal weak DES keys( t superR
t usingt default_roundsR R R t PasslibSecurityWarning( R5 t kwdst subcls( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRe N s
c C s t t | � j � } | d BS( Ni ( Rd R
t _generate_rounds( R5 R. ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRj W s c K s' | j d @s t St t | � j | � S( Ni ( R. RD Rd R
t _calc_needs_update( R8 Rh ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRk e s
R> R? c C s+ t d d � r# | j | j � t St Sd S( NR@ s _/...lLDAxARksGCHin.( R RB RC RD RE ( R5 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRF t s c C se | j � } t | | � } | rT | j | d � rF t | � d k sL t � | d S| j | � Sd S( Ni i i����( R9 R RG R R RH ( R8 R t configR2 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRC | s +c C s | j | j � t S( N( RB RH RD ( R5 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRI � s c C s( t | | j | j j d � � j d � S( NR1 ( R/ R. R# R RJ ( R8 R ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRH � s ( s salts rounds( s os_crypts builtin(# RK RL RM RN RO RR R RP RQ RS RT RU Rf t
min_roundst
max_roundst rounds_costRW RX R RY RZ R[ R\ R7 R9 RD t _avoid_even_roundsRe Rj Rk R] RF RC RI RH ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR
� s0
c B s� e Z d Z d Z d Z e j Z d Z Z e j Z
e j e
d � e j e j B� Z e d � � Z d � Z e d � Z d � Z RS(
sg This class implements the BigCrypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 22 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
R R# i sX
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>([./a-z0-9]{11})+)?
$c C sj t | d d � } | j j | � } | s? t j j | � � n | j d d � \ } } | d | d | � S( NR1 R2 R# R6 R3 ( R R[ R_ R R R` Ra ( R5 R2 Rb R# R6 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR7 � s c C s& t d � | j | j f } t | � S( Ns %s%s( R R# R3 R ( R8 R2 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR9 � s c C sG t t | � j | d | �} t | � d rC t j j | � � n | S( Nt relaxedi ( Rd R t _norm_checksumR R R R` ( R8 R3 Rq ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRr � s c C s� t | t � r! | j d � } n t | | j j d � � } d } t | � } xA | | k r� | d } | t | | | !| d d !� 7} | } qQ W| j d � S( Ns utf-8R1 i i����i����( R R R R' R# R RJ ( R8 R R6 R( R) R* ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR= � s
!
( s salt( RK RL RM RN RO R RP RQ RS RT RU RW RX R RY RZ R[ R\ R7 R9 RE Rr R= ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR � s
c B s� e Z d Z d Z d Z d Z e j Z d Z Z
e j Z d Z e
j e d � e
j e
j B� Z e d � � Z d � Z d
� Z RS( s� This class implements the crypt16 password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, crypt16 will silently truncate passwords larger than 16 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include
``salt`` strings that are too long.
.. versionadded:: 1.6
R R# R0 i i i sU
^
(?P<salt>[./a-z0-9]{2})
(?P<chk>[./a-z0-9]{22})?
$c C sj t | d d � } | j j | � } | s? t j j | � � n | j d d � \ } } | d | d | � S( NR1 R2 R# R6 R3 ( R R[ R_ R R R` Ra ( R5 R2 Rb R# R6 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR7 + s c C s& t d � | j | j f } t | � S( Ns %s%s( R R# R3 R ( R8 R2 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR9 4 s c C s� t | t � r! | j d � } n | j r: | j | � n y t j | j j d � � } Wn# t k
r~ t t d � � � n Xt
| � } t | d | d � } t
| d d !� } t | d | d � } t j
| � t j
| � } | j d � S( Ns utf-8R1 s invalid chars in salti i i i i ( R R R R: R; R R R# t
ValueErrorR
R R R R" RJ ( R8 R R$ t key1t result1t key2t result2R6 ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR= ; s
( s salts truncate_error( RK RL RM RN RO RR R RP RQ RS RT RU RV RW RX R RY RZ R[ R\ R7 R9 R= ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR � s
(* RM RW t loggingt getLoggerRK t logt warningsR t
passlib.utilsR R R t passlib.utils.binaryR R t passlib.utils.compatR R R R R
t passlib.crypto.desR t passlib.utils.handlerst utilst handlersR t __all__R R R' R, R/ t
TruncateMixint HasManyBackendst HasSaltt GenericHandlerR t HasRoundsR
R R ( ( ( s> /usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt <module> s, ( +�+� S