U
vł¾f I ć
@ s> U d dl Z d dlmZ d dlmZ d dlmZmZ d dlm Z e
ej Z dZ
d Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Ze re e de ” ””dd
Z
e ” Ze ” Ze !” Ze "” Ze #” Ze $” Ze %” Ze &” Ze '” Ze (” Ze )” Ze *” Ze +” Ze ,” Ze -” Z.e/e0d< e 1” Z2e/e0d< e 3” Z4e/e0d < e 5” Z6e/e0d
< e 7” Z8e/e0d < e 9” Z:e/e0d < e ;” Ze/e0d< e ?” Z@e/e0d< e e de A” ””dd
ZBeCe0d< e D” ZEe/e0d< e F” ZGe/e0d< e H” ZIe/e0d< e J” ZKe/e0d< e L” ZMe/e0d< e N” ZOe/e0d< e P” ZQe/e0d< e R” ZSe/e0d< e T” ZUe/e0d< e V” ZWe/e0d< e e de X” ””dd
ZYeCe0d< e Z” Z[e/e0d < e \” Z]e/e0d < e ^” Z_e/e0d < e `” Zae/e0d < e b” Zce/e0d < e d” Zee/e0d!< e f” Zge/e0d"< e h” Zie/e0d#< e j” Zke/e0d$< e l” Zme/e0d%< eZneZoeZpeZqeZreZsd&Ztd'Zud(Zvd)Zwewfe/e/e/e/dd*d+d,Zxe/e/ee/e/e/f d-d.d/Zyd0ewfeCeCe/e/e/e/e/eCd1d2d3ZzeneofeCe/e/eCd4d5d6Z{eCeCe
d7d8d9Z|e/e/e/dd:d;d<Z}e/eCeCe/e/e/eCd=d>d?Z~eCe/e/e/eCd@dAdBZeCeCe
d7dCdDZeZdS )Eé N)ŚTuple)ŚffiŚlib)Śensureó śchar *Ścrypto_pwhash_ALG_ARGON2I13Ś crypto_pwhash_ALG_ARGON2ID13Ścrypto_pwhash_ALG_DEFAULTŚcrypto_pwhash_SALTBYTESŚcrypto_pwhash_STRBYTESŚcrypto_pwhash_PASSWD_MINŚcrypto_pwhash_PASSWD_MAXŚcrypto_pwhash_BYTES_MINŚcrypto_pwhash_BYTES_MAXŚ crypto_pwhash_argon2i_STRPREFIXŚ"crypto_pwhash_argon2i_MEMLIMIT_MINŚ"crypto_pwhash_argon2i_MEMLIMIT_MAXŚ"crypto_pwhash_argon2i_OPSLIMIT_MINŚ"crypto_pwhash_argon2i_OPSLIMIT_MAXŚ*crypto_pwhash_argon2i_OPSLIMIT_INTERACTIVEŚ*crypto_pwhash_argon2i_MEMLIMIT_INTERACTIVEŚ'crypto_pwhash_argon2i_OPSLIMIT_MODERATEŚ'crypto_pwhash_argon2i_MEMLIMIT_MODERATEŚ(crypto_pwhash_argon2i_OPSLIMIT_SENSITIVEŚ(crypto_pwhash_argon2i_MEMLIMIT_SENSITIVEŚ crypto_pwhash_argon2id_STRPREFIXŚ#crypto_pwhash_argon2id_MEMLIMIT_MINŚ#crypto_pwhash_argon2id_MEMLIMIT_MAXŚ#crypto_pwhash_argon2id_OPSLIMIT_MINŚ#crypto_pwhash_argon2id_OPSLIMIT_MAXŚ+crypto_pwhash_argon2id_OPSLIMIT_INTERACTIVEŚ+crypto_pwhash_argon2id_MEMLIMIT_INTERACTIVEŚ(crypto_pwhash_argon2id_OPSLIMIT_MODERATEŚ(crypto_pwhash_argon2id_MEMLIMIT_MODERATEŚ)crypto_pwhash_argon2id_OPSLIMIT_SENSITIVEŚ)crypto_pwhash_argon2id_MEMLIMIT_SENSITIVEé’’’?é? l ’’’’ i )ŚnŚrŚpŚmaxmemŚreturnc C s t |dkdtjd t |dkdtjd t | | d @ dkdtjd t | dkdtjd t |t| kd t”tjd t | dd | > k tjd |d
| }td
}t | d || ktjd d | | d d
}t |t| ktjd t |tj| ktjd t || |kdtjd d S )Nr zInvalid block size©Zraisingz Invalid parallelization factoré z Cost factor must be a power of 2z Cost factor must be at least 2zp*r is greater than {}é é é é é z7Memory limit would be exceeded with the choosen n, r, p)r ŚexcŚ
ValueErrorŚ
SCRYPT_PR_MAXŚformatŚ
UINT64_MAXŚsysŚmaxsize)r) r* r+ r, ZBlenŚiZVlen© r= śN/opt/alt/python38/lib64/python3.8/site-packages/nacl/bindings/crypto_pwhash.pyŚ_check_memory_occupationæ s2 ż
ż
żr? )ŚopslimitŚmemlimitr- c C s° | dk r d} d}| |d k rRd}| d| }t ddD ]}d| |d kr6 q¦q6nT||d }t ddD ]}d| |d krh qqh| d d| }|d krd }|| }|||fS )
z/Python implementation of libsodium's pickparamsi é r3 r/ r4 r( r2 r1 r' )Śrange)r@ rA r* r+ ZmaxnZn_log2Zmaxrpr= r= r> Ś nacl_bindings_pick_scrypt_paramsé s$ rD é@ )ŚpasswdŚsaltr) r* r+ Śdklenr, r- c C sÖ t tdtjd t t|ttd t t|ttd t t|ttd t t| ttd t t|ttd t|||| t
d|”}t | t
| |t
||||||” }t |dkdtjd t t d|”|”dd
S )a
Derive a cryptographic key using the ``passwd`` and ``salt``
given as input.
The work factor can be tuned by by picking different
values for the parameters
:param bytes passwd:
:param bytes salt:
:param bytes salt: *must* be *exactly* :py:const:`.SALTBYTES` long
:param int dklen:
:param int opslimit:
:param int n:
:param int r: block size,
:param int p: the parallelism factor
:param int maxmem: the maximum available memory available for scrypt's
operations
:rtype: bytes
:raises nacl.exceptions.UnavailableError: If called when using a
minimal build of libsodium.
ś Not available in minimal buildr. z uint8_t[]r ś$Unexpected failure in key derivationr N)r Ś&has_crypto_pwhash_scryptsalsa208sha256r5 ŚUnavailableErrorŚ
isinstanceŚintŚ TypeErrorŚbytesr? r Śnewr Ś%crypto_pwhash_scryptsalsa208sha256_llŚlenŚ RuntimeErrorŚbufferŚcast) rF rG r) r* r+ rH r, ŚbufŚretr= r= r> rR s: ż ’żrR )rF r@ rA r- c C sP t tdtjd t dt”}t || t | ||”}t |dkdtj
d t |”S )a
Derive a cryptographic key using the ``passwd`` and ``salt``
given as input, returning a string representation which includes
the salt and the tuning parameters.
The returned string can be directly stored as a password hash.
See :py:func:`.crypto_pwhash_scryptsalsa208sha256` for a short
discussion about ``opslimit`` and ``memlimit`` values.
:param bytes passwd:
:param int opslimit:
:param int memlimit:
:return: serialized key hash, including salt and tuning parameters
:rtype: bytes
:raises nacl.exceptions.UnavailableError: If called when using a
minimal build of libsodium.
rI r. śchar[]r z&Unexpected failure in password hashing) r rK r5 rL r rQ ŚSCRYPT_STRBYTESr Ś&crypto_pwhash_scryptsalsa208sha256_strrS rT Śstring)rF r@ rA rW rX r= r= r> r[ E s& ż ’żr[ )Ś passwd_hashrF r- c C sV t tdtjd t t| td kdtjd t | |t|”}t |dkdtj d dS )a9
Verifies the ``passwd`` against the ``passwd_hash`` that was generated.
Returns True or False depending on the success
:param passwd_hash: bytes
:param passwd: bytes
:rtype: boolean
:raises nacl.exceptions.UnavailableError: If called when using a
minimal build of libsodium.
rI r. r/ zInvalid password hashr śWrong passwordT)
r rK r5 rL rS rZ r6 r Ś-crypto_pwhash_scryptsalsa208sha256_str_verifyŚInvalidkeyError©r] rF rX r= r= r> r_ q s"
żż ’r_ )r@ rA Śalgr- c C sź |t krn|tk r"t d t””n|tkr:t d t””| tk rTt d t””qę| tkręt d t””nx|tkrÜ|t k rt d t ””n|t
krØt d t
””| t k rĀt d t ””qę| t kręt d t ””n
t
d”d S )Nz"memlimit must be at least {} bytesz!memlimit must be at most {} bytesz opslimit must be at least {}zopslimit must be at most {}zUnsupported algorithm)r r r5 r6 r8 r r r r r r r r rO )r@ rA rb r= r= r> Ś_check_argon2_limits_alg sf ’’’’’’’’’’’’’’’’rc )ŚoutlenrF rG r@ rA rb r- c
C s t t| ttjd t t|ttjd t t|ttjd t t|ttjd t t|ttjd t|tkrt d t””| t
k rt d t
””n| t kr²t d t ””t ||| t
d| ”}t || |t|||||”}t |dkdtjd t
|| ”dd
S ) a
Derive a raw cryptographic key using the ``passwd`` and the ``salt``
given as input to the ``alg`` algorithm.
:param outlen: the length of the derived key
:type outlen: int
:param passwd: The input password
:type passwd: bytes
:param salt:
:type salt: bytes
:param opslimit: computational cost
:type opslimit: int
:param memlimit: memory cost
:type memlimit: int
:param alg: algorithm identifier
:type alg: int
:return: derived key
:rtype: bytes
r. z"salt must be exactly {} bytes longz*derived key must be at least {} bytes longz)derived key must be at most {} bytes longzunsigned char[]r rJ N)r rM rN r5 rO rP rS r r6 r8 r r rc r rQ r Z
crypto_pwhashrT rU )rd rF rG r@ rA rb ŚoutbufrX r= r= r> Ścrypto_pwhash_algĖ sR ’’’’’’ ’żrf )rF r@ rA rb r- c C s t t|ttd t t|ttd t t| ttd t||| t dd”}t || t
| |||”}t |dkdt j d t
|”S )a
Derive a cryptographic key using the ``passwd`` given as input
and a random salt, returning a string representation which
includes the salt, the tuning parameters and the used algorithm.
:param passwd: The input password
:type passwd: bytes
:param opslimit: computational cost
:type opslimit: int
:param memlimit: memory cost
:type memlimit: int
:param alg: The algorithm to use
:type alg: int
:return: serialized derived key and parameters
:rtype: bytes
r. rY r1 r rJ )r rM rN rO rP rc r rQ r Ścrypto_pwhash_str_algrS r5 rT r\ )rF r@ rA rb re rX r= r= r> rg s& ’żrg c C sf t t| ttd t t|ttd t t| dkdtjd t | |t|”}t |dkdtj d dS )a4
Verifies the ``passwd`` against a given password hash.
Returns True on success, raises InvalidkeyError on failure
:param passwd_hash: saved password hash
:type passwd_hash: bytes
:param passwd: password to be checked
:type passwd: bytes
:return: success
:rtype: boolean
r. é z#Hash must be at most 127 bytes longr r^ T)
r rM rP rO rS r5 r6 r Ścrypto_pwhash_str_verifyr` ra r= r= r> ri = s
żri )r: Śtypingr Znacl.exceptionsŚ
exceptionsr5 Z nacl._sodiumr r r ŚboolZ-PYNACL_HAS_CRYPTO_PWHASH_SCRYPTSALSA208SHA256rK Z,crypto_pwhash_scryptsalsa208sha256_STRPREFIXZ,crypto_pwhash_scryptsalsa208sha256_SALTBYTESZ+crypto_pwhash_scryptsalsa208sha256_STRBYTESZ-crypto_pwhash_scryptsalsa208sha256_PASSWD_MINZ-crypto_pwhash_scryptsalsa208sha256_PASSWD_MAXZ,crypto_pwhash_scryptsalsa208sha256_BYTES_MINZ,crypto_pwhash_scryptsalsa208sha256_BYTES_MAXZ/crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_MINZ/crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_MAXZ/crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_MINZ/crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_MAXZ7crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_INTERACTIVEZ7crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_INTERACTIVEZ5crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_SENSITIVEZ5crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_SENSITIVEr\ rV Z,crypto_pwhash_scryptsalsa208sha256_strprefixZ,crypto_pwhash_scryptsalsa208sha256_saltbytesZ+crypto_pwhash_scryptsalsa208sha256_strbytesZ-crypto_pwhash_scryptsalsa208sha256_passwd_minZ-crypto_pwhash_scryptsalsa208sha256_passwd_maxZ,crypto_pwhash_scryptsalsa208sha256_bytes_minZ,crypto_pwhash_scryptsalsa208sha256_bytes_maxZ/crypto_pwhash_scryptsalsa208sha256_memlimit_minZ/crypto_pwhash_scryptsalsa208sha256_memlimit_maxZ/crypto_pwhash_scryptsalsa208sha256_opslimit_minZ/crypto_pwhash_scryptsalsa208sha256_opslimit_maxZ7crypto_pwhash_scryptsalsa208sha256_opslimit_interactiveZ7crypto_pwhash_scryptsalsa208sha256_memlimit_interactiveZ5crypto_pwhash_scryptsalsa208sha256_opslimit_sensitiveZ5crypto_pwhash_scryptsalsa208sha256_memlimit_sensitiveZcrypto_pwhash_alg_argon2i13r rN Ś__annotations__Z crypto_pwhash_alg_argon2id13r Zcrypto_pwhash_alg_defaultr
Zcrypto_pwhash_saltbytesr Zcrypto_pwhash_strbytesr Zcrypto_pwhash_passwd_minr
Zcrypto_pwhash_passwd_maxr Zcrypto_pwhash_bytes_minr Zcrypto_pwhash_bytes_maxr Z crypto_pwhash_argon2i_strprefixr rP Z"crypto_pwhash_argon2i_memlimit_minr Z"crypto_pwhash_argon2i_memlimit_maxr Z"crypto_pwhash_argon2i_opslimit_minr Z"crypto_pwhash_argon2i_opslimit_maxr Z*crypto_pwhash_argon2i_opslimit_interactiver Z*crypto_pwhash_argon2i_memlimit_interactiver Z'crypto_pwhash_argon2i_opslimit_moderater Z'crypto_pwhash_argon2i_memlimit_moderater Z(crypto_pwhash_argon2i_opslimit_sensitiver Z(crypto_pwhash_argon2i_memlimit_sensitiver Z crypto_pwhash_argon2id_strprefixr Z#crypto_pwhash_argon2id_memlimit_minr Z#crypto_pwhash_argon2id_memlimit_maxr Z#crypto_pwhash_argon2id_opslimit_minr Z#crypto_pwhash_argon2id_opslimit_maxr Z+crypto_pwhash_argon2id_opslimit_interactiver! Z+crypto_pwhash_argon2id_memlimit_interactiver" Z(crypto_pwhash_argon2id_opslimit_moderater# Z(crypto_pwhash_argon2id_memlimit_moderater$ Z)crypto_pwhash_argon2id_opslimit_sensitiver% Z)crypto_pwhash_argon2id_memlimit_sensitiver& ZSCRYPT_OPSLIMIT_INTERACTIVEZSCRYPT_MEMLIMIT_INTERACTIVEZSCRYPT_OPSLIMIT_SENSITIVEZSCRYPT_MEMLIMIT_SENSITIVEZSCRYPT_SALTBYTESrZ r7 ZLOG2_UINT64_MAXr9 ZSCRYPT_MAX_MEMr? rD rR r[ r_ rc rf rg ri Z crypto_pwhash_argon2i_str_verifyr= r= r= r> Ś sb ’’ ’’’’’’’’’’’’’’’’
’
’
’
’
’
’
’
’
’
’’
’
’
’
’
’
’
’
’
’
’’’’’ ž + ž &łų >żü - ž !:ł Hū +