U
vf( @ s d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m
Z
d dl m Z m
Z
d dlmZmZmZ d dlmZ G dd d eZd
ZG d d d ZG d
d dZdS ) ) annotationsN)utils)InvalidSignature)hashespadding)Cipher
algorithmsmodes)HMACc @ s e Zd ZdS ) InvalidTokenN)__name__
__module__ __qualname__ r r F/opt/alt/python38/lib64/python3.8/site-packages/cryptography/fernet.pyr s r < c @ s e Zd Zd)ddddddZedd d
d Zddd d
dZddddddZdddddddZd*ddddddZ ddddddd Z
ddd d d Z e dd d d!d"Z
ddd d#d$Zddd%dd&d'd(ZdS )+FernetN bytes | strz
typing.AnyNone)keybackendreturnc
C sr zt |}W n. tjk
r< } ztd|W 5 d }~X Y nX t|dkrRtd|d d | _|dd | _d S )Nz4Fernet key must be 32 url-safe base64-encoded bytes. )base64urlsafe_b64decodebinasciiError
ValueErrorlen _signing_key_encryption_key)selfr r excr r r __init__ s zFernet.__init__bytes)r c C s t tdS )Nr )r urlsafe_b64encodeosurandom)clsr r r generate_key/ s zFernet.generate_key)datar c C s | |tt S Nencrypt_at_timeinttime)r" r+ r r r encrypt3 s zFernet.encryptr/ )r+ current_timer c C s t d}| |||S )Nr )r' r( _encrypt_from_parts)r" r+ r2 ivr r r r. 6 s
zFernet.encrypt_at_time)r+ r2 r4 r c C s t d| ttjj }||| }t
t| j t
| }||| }d|jddd | | }t| jt } | | | }
t||
S )Nr+ big)length byteorder)r _check_bytesr PKCS7r AES
block_sizepadderupdatefinalizer r! r CBC encryptorto_bytesr
r r SHA256r r& ) r" r+ r2 r4 r> Z padded_datarB
ciphertextZ basic_partshhmacr r r r3 : s(
zFernet._encrypt_from_parts
int | None)tokenttlr c C s: t |\}}|d kr d }n|tt f}| |||S r, )r _get_unverified_token_datar/ r0
_decrypt_data)r" rI rJ timestampr+ time_infor r r decryptS s
zFernet.decrypt)rI rJ r2 r c C s0 |d krt dt|\}}| ||||fS )Nz6decrypt_at_time() can only be used with a non-None ttl)r r rK rL )r" rI rJ r2 rM r+ r r r decrypt_at_time[ s zFernet.decrypt_at_time)rI r c C s t |\}}| | |S r, )r rK _verify_signature)r" rI rM r+ r r r extract_timestampe s
zFernet.extract_timestampztuple[int, bytes]c C s t | ttfstdzt| }W n ttjfk
rB tY nX |rT|d dkrXtt |dk rhtt
j |dd dd}||fS )Nztoken must be bytes or strr r7 )r9 )
isinstancestrr% TypeErrorr r r r r r r/
from_bytes)rI r+ rM r r r rK k s
z!Fernet._get_unverified_token_datac C sV t | jt }||d d z||dd W n tk
rP tY nX d S )N)r
r r rD r? verifyr r )r" r+ rF r r r rQ ~ s zFernet._verify_signatureztuple[int, int] | None)r+ rM rN r c C s |d k r0|\}}|| |k r t |t |k r0t | | |dd }|dd }tt| jt| }|
|} z| | 7 } W n t k
r t Y nX t
tjj }
|
| } z| |
7 } W n t k
r t Y nX | S )NrT rZ )r _MAX_CLOCK_SKEWrQ r r r< r! r rA decryptorr? r@ r r r; r= unpadder) r" r+ rM rN rJ r2 r4 rE r^ Zplaintext_paddedr_ Zunpaddedr r r rL s2
zFernet._decrypt_data)N)N)r r
r r$ classmethodr* r1 r. r3 rO rP rR staticmethodrK rQ rL r r r r r s
r c @ st e Zd ZddddZdddddZdd dd
d d Zd
ddddZdd
dddddZd
d d ddddZdS ) MultiFernetztyping.Iterable[Fernet])fernetsc C s t |}|std|| _d S )Nz1MultiFernet requires at least one Fernet instance)listr _fernets)r" rc r r r r$ s zMultiFernet.__init__r% )msgr c C s | |tt S r, r- )r" rf r r r r1 s zMultiFernet.encryptr/ )rf r2 r c C s | j d ||S )Nr )re r. )r" rf r2 r r r r. s zMultiFernet.encrypt_at_timer c C sj t |\}}| jD ]2}z|||d }W qLW q tk
rD Y qX qttd}| jd |||S )Nr r )r rK re rL r r' r( r3 )r" rf rM r+ fpr4 r r r rotate s
zMultiFernet.rotateNrH )rf rJ r c C s< | j D ],}z|||W S tk
r0 Y qX qtd S r, )re rO r )r" rf rJ rg r r r rO s
zMultiFernet.decrypt)rf rJ r2 r c C s> | j D ].}z||||W S tk
r2 Y qX qtd S r, )re rP r )r" rf rJ r2 rg r r r rP s
zMultiFernet.decrypt_at_time)N) r r
r r$ r1 r. ri rO rP r r r r rb s rb )
__future__r r r r' r0 typingZ cryptographyr Zcryptography.exceptionsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr r r Z#cryptography.hazmat.primitives.hmacr
Exceptionr r] r rb r r r r s