+ THi|@Rt^RIt^RIHt^RIHuHt^RIH t ^RI H t ^RI H t Ht.ROtR tR tR tR tRt!RR]P*]P,]P.]P04t!RR]P,]P4]P.]P04t!RR]P.]P04t!RR ]P*]P.]P04tR#)z)traditional unix (DES) crypt and variantsN)warn)des_encrypt_int_block to_unicode)h64h64big des_crypt bsdi_cryptbigcryptcrypt16cF\R\VR,444#)zconvert secret to 64-bit DES key. this only uses the first 8 bytes of the secret, and discards the high 8th bit of each byte at that. a null parity bit is inserted after every 7th bit of the output. c3b"TF%wrV^,^9V^,, ,xK' R#5i)N).0ics& '_crypt_secret_to_key..!s(L6KdaDb1q5j))6Ks-/:NN)sum enumerate)secrets&r_crypt_secret_to_keyrs Lir 6KL LLc\V4^8XgQh\P!V4p\V\4'dVP R4p\V\ 4'gQh\V9d$\PP\4h\V4p\V^V^4p\P!V4#)z pure-python backed for des_cryptutf-8)lenr decode_int12 isinstancestrencodebytes_BNULLuhexcNullPasswordErrorrrrr encode_int64)rsalt salt_value key_valueresults&& r_raw_des_cryptr.$s t9>>!!$'J&#w' fe $ $$ $ff&&y11%V,I#9aR @F   v &&rc\V4p^p\V4pW#8d-V^,p\WV4p\W4V, pTpK2V#)z,convert secret to DES key used by bsdi_crypt)rrr)rr,idxendnext tmp_values& r_bsdi_secret_to_keyr4CsQ$V,I C f+C )Qw(D)9: ))?)K  rcd\P!V4p\V\4'dVP R4p\V\ 4'gQh\ V9d$\PP\4h\V4p\V^W14p\P!V4#)z"pure-python backend for bsdi_cryptr)r decode_int24r!r"r#r$r%r&r'r(r r4rrr))rroundsr*r+r,r-s&&& r_raw_bsdi_cryptr8Ps!!$'J&#w' fe $ $$ $ff&&z22$F+I#9a DF   v &&rca]tRt^itoRtRtR t]Pt ^ t ^;t t ]Pt ^t]P !R]P"]P$,4t]R4tRtRtR t]R4tRtRtVtR #) raGThis class implements the des-crypt password hash, and follows the :ref:`password-hash-api`. It supports a fixed-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :param bool truncate_error: By default, des_crypt will silently truncate passwords larger than 8 bytes. Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash` to raise a :exc:`~passlib.exc.PasswordTruncateError` instead. .. versionadded:: 1.7 :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 zU ^ (?P[./a-z0-9]{2}) (?P[./a-z0-9]{11})? $cd\VRR4pVR,VR,r2T!Y#;'gRR7#)asciihash:NN:r=NNNr*checksumr)clsr<r*chks&& r from_stringdes_crypt.from_strings0$0Hd2hc{{d33rc6VP VP 2#Nr>selfs&r to_stringdes_crypt.to_string))T]]O,,rcjVP'dVPV4VPV4#rE) use_defaults_check_truncate_policy_calc_checksum_backendrGrs&&r_calc_checksumdes_crypt._calc_checksums-      ' ' /**622rc<VPVP4R#T_set_calc_checksum_backend_calc_checksum_builtinr@s&r_load_backend_builtindes_crypt._load_backend_builtin &&s'A'ABrch\WPPR44PR4#r;)r.r*r#decoderOs&&rrV des_crypt._calc_checksum_builtins'fii&6&6w&?@GGPPrrNr*truncate_errorbuiltin)__name__ __module__ __qualname____firstlineno____doc__name setting_kwdsr& HASH64_CHARSchecksum_chars checksum_size min_salt_size max_salt_size salt_chars truncate_sizerecompileVERBOSE IGNORECASE _hash_regex classmethodrBrHrPbackendsrXrV__static_attributes____classdictcell__ __classdict__s@rrrisB D-L __NM %&%MMJ M** R]]" K44 -3H QQrcFaa]tRt^toRtRtRt^ t]Pt ^;t t ]Pt Rt^tRtRt]P&!R]P(]P*,4t]R4tRtRt]V3R l4t]V3R l4tV3R ltRt]R 4tR t Rt!Vt"V;t##)r aThis class implements the BSDi-Crypt password hash, and follows the :ref:`password-hash-api`. It supports a fixed-length salt, and a variable number of rounds. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 4 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :type rounds: int :param rounds: Optional number of rounds to use. Defaults to 5001, must be between 1 and 16777215, inclusive. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``rounds`` that are too small or too large, and ``salt`` strings that are too long. .. versionadded:: 1.6 .. versionchanged:: 1.6 :meth:`hash` will now issue a warning if an even number of rounds is used (see :ref:`bsdi-crypt-security-issues` regarding weak DES keys). iilinearz ^ _ (?P[./a-z0-9]{4}) (?P[./a-z0-9]{4}) (?P[./a-z0-9]{11})? $c(\VRR4pVPPV4pV'g \PP V4hVP RRR4wr4pV!\P!VPR44VVR7#)r;r<r7r*rA)r7r*r?) rrumatchr&r'InvalidHashErrorgrouprr6r#)r@r<mr7r*rAs&& rrBbsdi_crypt.from_strings}$0 OO ! !$ '&&))#. .GGHfe<c##FMM'$:;  rcRP\P!VP4P R4VP VP 4#)z_{}{}{}r;)formatr encode_int24r7r]r*r?rFs&rrHbsdi_crypt.to_strings@   T[[ ) 0 0 9 II MM  rTc <\SV`!R/VBpVP^,'g%\R\P P 4V#)zHbsdi_crypt rounds should be odd, as even rounds may reveal weak DES keysr)superusingdefault_roundsrr&r'PasslibSecurityWarning)r@kwdssubcls __class__s&, rrbsdi_crypt.usingsD&&$$q(( Z--  rc2<\SV`4pV^,#)r)r_generate_rounds)r@r7rs& rrbsdi_crypt._generate_rounds(s)+ zrc Z<VP^,'gR#\SV`!R/VB#)rTr)r7r_calc_needs_update)rGrrs&,rrbsdi_crypt._calc_needs_update2s&{{Qw)1D11rc<VPVP4R#rSrTrWs&rrX bsdi_crypt._load_backend_builtin>rZrc~\WPVPPR44P R4#r\)r8r7r*r#r]rOs&&rrV!bsdi_crypt._calc_checksum_builtinCs2v{{DII4D4DW4MNUU   rr)r*r7ra)$rcrdrerfrgrhrirlr&rjrkrmrnror min_rounds max_rounds rounds_costrqrrrsrtrurvrBrH_avoid_even_roundsrrrrwrXrVrxry __classcell__rr{s@@rr r sB D%LM__N%&%MMJNJJK**  R]]" K     2H   rcaa]tRtRtoRtRtR t]Pt ^;t t ]Pt ] P!R] P] P ,4t]R4tRtR V3RlltRtRtVtV;t#) r iIa'This class implements the BigCrypt password hash, and follows the :ref:`password-hash-api`. It supports a fixed-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 22 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 zX ^ (?P[./a-z0-9]{2}) (?P([./a-z0-9]{11})+)? $c\VRR4pVPPV4pV'g \PP V4hVP RR4wr4V!W4R7#r;r<r*rAr>rrurr&r'rrr@r<rr*rAs&& rrBbigcrypt.from_stringsY$0 OO ! !$ '&&))#. .GGFE* ++rc6VP VP 2#rEr>rFs&rrHbigcrypt.to_string|rJrc<\SV`WR7p\V4^ ,'d \PP V4hV#))relaxed)r_norm_checksumrr&r'r)rGr?rrs&&&rrbigcrypt._norm_checksums>7)()D x=2  &&))$/ /rc*\V\4'dVPR4p\WPPR44p^p\ V4pW48d&V^,pV\WVVRR4, pTpK+VP R4#)rr;ii)r!r"r#r.r*rr])rGrrAr0r1r2s&& rrPbigcrypt._calc_checksums fc " "]]7+FVYY%5%5g%>?&ki7D >&T"2CBK@ @CCzz'""rr)r*)F)rcrdrerfrgrhrir&rjrkrmrnrorqrrrsrtrurvrBrHrrPrxryrrs@@rr r Is0 DL__N%&%MMJ** R]]" K,,- # #rca]tRtRtoRtRtR t^t]Pt ^;t t ]Pt ^t]P !R]P"]P$,4t]R4tRtRtRtVtR#) r iaDThis class implements the crypt16 password hash, and follows the :ref:`password-hash-api`. It supports a fixed-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :param bool truncate_error: By default, crypt16 will silently truncate passwords larger than 16 bytes. Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash` to raise a :exc:`~passlib.exc.PasswordTruncateError` instead. .. versionadded:: 1.7 :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 zU ^ (?P[./a-z0-9]{2}) (?P[./a-z0-9]{22})? $c\VRR4pVPPV4pV'g \PP V4hVP RR4wr4V!W4R7#rrrs&& rrBcrypt16.from_stringrrc6VP VP 2#rEr>rFs&rrHcrypt16.to_stringrJrc"\V\4'dVPR4pVP'dVP V4\ P !VPPR44p\T4p\T^T^4p\TR,4p\T^T^4p\P!T4\P!T4,pTPR4# \d\R4Rhi;i)rr;zinvalid chars in saltN:rN)r!r"r#rLrMrr r* ValueErrorrrrr)r])rGrr+key1result1key2result2rAs&& rrPcrypt16._calc_checksums fc " "]]7+F      ' ' / @))$))*:*:7*CDJ $F+(aR@$F4L1(aQ?!!'*V-@-@-IIzz'""# @454 ? @s /C66DrNr_)rcrdrerfrgrhrirlr&rjrkrmrnrorprqrrrsrtrurvrBrHrPrxryrzs@rr r sB D-L M__N %&%MMJ M** R]]" K,,-##r)rr r r )rgrqwarningsrpasslib.utils.handlersutilshandlersr&passlib.crypto.desr passlib.utilsrpasslib.utils.binaryrr__all__r%rr.r4r8 TruncateMixinHasManyBackendsHasSaltGenericHandlerr HasRoundsr r r rrrrs/ ##4$,   M'> '2[Q  ""4"4bjj"BSBS[Q| ##R\\2::r?P?P DF#rzz2,,F#Rf#b B,=,=f#r