| Current File : //usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyc |
�
�
5Xc @� s d Z d d l m Z m Z d d l Z e j e � Z d d l m Z
d d l m Z m
Z
d d l m Z m Z m Z d d l m Z m Z m Z d d l m Z d d l j j Z d g Z e d
� Z e d � Z e d � Z d e j e j e j! e j" e j# e j$ f d
� � YZ d S( s/ passlib.handlers.scrypt -- scrypt password hashi ( t with_statementt absolute_importN( t scrypt( t h64t to_bytes( R t b64s_decodet b64s_encode( t ut
bascii_to_strt suppress_cause( t
classpropertyR s $scrypt$s $7$t $c B� s7 e Z d Z d Z d Z d Z e Z e e f Z d Z
d
Z d Z d Z
d Z d
Z d Z d Z e d d � � Z e d � � Z e d � � Z e d � � Z e d � � Z d � Z d d � Z e e d � � Z d � Z e d � � Z e d � � Z e d d � � Z! e d e d � � Z" d � Z# d � Z$ RS(! s� This class implements an SCrypt-based password [#scrypt-home]_ hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, a variable number of rounds,
as well as some custom tuning parameters unique to scrypt (see below).
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If specified, the length must be between 0-1024 bytes.
If not specified, one will be auto-generated (this is recommended).
:type salt_size: int
:param salt_size:
Optional number of bytes to use when autogenerating new salts.
Defaults to 16 bytes, but can be any value between 0 and 1024.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 16, but must be within ``range(1,32)``.
.. warning::
Unlike many hash algorithms, increasing the rounds value
will increase both the time *and memory* required to hash a password.
:type block_size: int
:param block_size:
Optional block size to pass to scrypt hash function (the ``r`` parameter).
Useful for tuning scrypt to optimal performance for your CPU architecture.
Defaults to 8.
:type parallelism: int
:param parallelism:
Optional parallelism to pass to scrypt hash function (the ``p`` parameter).
Defaults to 1.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. note::
The underlying scrypt hash function has a number of limitations
on it's parameter values, which forbids certain combinations of settings.
The requirements are:
* ``linear_rounds = 2**<some positive integer>``
* ``linear_rounds < 2**(16 * block_size)``
* ``block_size * parallelism <= 2**30-1``
.. todo::
This class currently does not support configuring default values
for ``block_size`` or ``parallelism`` via a :class:`~passlib.context.CryptContext`
configuration.
R t identt saltt salt_sizet roundst
block_sizet parallelismi i i i i t log2i c K� s� t t | � j | � } | d k ri t | t j � rE t | � } n | j | d | j d � �| _
n y$ t j d | j
>| j
| j � Wn/ t k
r� } t t d t | � � � � n X| S( Nt relaxedi s& scrypt: invalid settings combination: ( t superR t usingt Nonet
isinstancet uht native_string_typest intt _norm_block_sizet getR t _scryptt validatet default_roundsR t
ValueErrorR t str( t clsR t kwdst subclst err( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyR � s $$ c C� s | | j | � � S( N( t parse( R" t hash( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyt from_string� s c C� sZ | j | � \ } } t | d | j t � d � } | rD | | � St j j | � � d S( Ns _parse_%s_string( t _parse_identt getattrt stript _UDOLLARR R t exct InvalidHashError( R" R' R t suffixt func( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyR& � s
c C� si | j d � } t | � d k r3 | \ } } } n< t | � d k rZ | \ } } d } n t j j | d � � | j d � } t | � d k r� | \ } } } | j d � s� t � | j d � s� t � | j d � s� t � n t j j | d � � t d
t d t
| d � d t
| d � d
t
| d � d t | j d � � d | rbt | j d � � n d � S( NR i i s malformed hasht ,s ln=s r=s p=s malformed settings fieldR R R R R
t asciit checksum(
t splitt lenR R R- t MalformedHashErrort
startswitht AssertionErrort dictt IDENT_SCRYPTR R t encode( R" R/ t partst paramsR
t digestt nstrt bstrt pstr( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyt _parse_scrypt_string� s* c C� s | j d � j d � } t | � d k r9 | \ } } n3 t | � d k r] | \ } d } n t j j � � t | � d k r� t j j | d � � n t d t d t j
| d � d t j | d d
!� d t j | d
d !� d | d d
| r t j | � n d � S( NR2 R i i i s params field too shortR R R i R R
R3 (
R; R4 R5 R R R- R6 R9 t IDENT_7R t decode_int6t decode_int30t decode_bytes( R" R/ R< R= R> ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyt _parse_7_string� s
c
C� s | j } | t k rS d | j | j | j t t | j � � t t | j � � f S| t k se t
� | j } y | j d � Wn# t k
r� t
t d � � � n Xt d j d t j | j � t j | j � t j | j � | j d t j | j � g � � Sd S( Ns $scrypt$ln=%d,r=%d,p=%d$%s$%sR2 s. scrypt $7$ hashes dont support non-ascii saltst s $7$R ( R R: R R R R R R
R3 RC R8 t decodet UnicodeDecodeErrorR t NotImplementedErrort joinR t encode_int6t encode_int30t encode_bytes( t selfR R
( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyt to_string s,
c K� sb t t | � j | � | d k rL t j | | j | j d d �s^ t � n | j | � | _ d S( Nt paramR ( R R t __init__R R t validate_default_valueR R R8 ( RP R R# ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyRS 1 s
c C� s" t j | | d d d d d | �S( Nt mini RR R R ( R t norm_integer( R" R R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyR > s c C� s7 t t | � j � } | j t k r3 t | � } n | S( N( R R t _generate_saltR RC R ( RP R
( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyRW B s c C� s t j S( N( R t backend_values( R" ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyt backendsP s c C� s t j S( N( R t backend( R" ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyt get_backendT s t anyc C� s: y | j | d t �t SWn t j j k
r5 t SXd S( Nt dryrun( t set_backendt TrueR R- t MissingBackendErrort False( R" t name( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyt has_backendX s
c C� s t j | d | �d S( NR] ( R t _set_backend( R" Rb R] ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyR^ ` s c C� sM t | d d �} t j | | j d d | j >d | j d | j d | j �S( NRR t secrett ni t rt pt keylen( R R R R
R R R t
checksum_size( RP Re ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyt _calc_checksumg s (c K� s2 | j t | � j k r t St t | � j | � S( sR
mark hash as needing update if rounds is outside desired bounds.
( R t typeR_ R R t _calc_needs_update( RP R# ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyRm p s ( s idents saltR s roundss
block_sizes parallelismN(% t __name__t
__module__t __doc__Rb t setting_kwdsRj R: t
default_identRC t ident_valuest default_salt_sizet
max_salt_sizeR t
min_roundst
max_roundst rounds_costR R t classmethodR R R( R& RB RG RQ RS Ra R RW R
RY R[ Rc R^ Rk Rm ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyR ! sB @ .
(% Rp t
__future__R R t loggingt getLoggerRn t logt passlib.cryptoR R t
passlib.utilsR R t passlib.utils.binaryR R t passlib.utils.compatR R R t passlib.utils.decorR
t passlib.utils.handlerst utilst handlersR t __all__R: RC R, t ParallelismMixint HasRoundst
HasRawSaltt HasRawChecksumt
HasManyIdentst GenericHandler( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/scrypt.pyt <module> s !