+ THi/Rt^RIHt^RIt^RIHtHt^RIHtH t H t H t ^RI H t ^RIHuHt^RIHt^RIHtHt^RIHt] 'd^R IHt.ROt!RR]P84t!RR]P<]P>]P@4t!!RR ]4t"!RR ]4t#!RR ]!4t$!RR]!4t%!RR]!4t&!RR]!4t'!RR ]4t(]Uu.uF pRV,NK upt)Rt*]*!4R#uupi)zplain hash digests) annotationsN) b64decode b64encode)md5sha1sha256sha512) TYPE_CHECKING) plaintext) to_unicodeunix_crypt_schemes) classproperty)SHAFuncldap_plaintextldap_md5 ldap_sha1ldap_salted_md5ldap_salted_sha1ldap_salted_sha256ldap_salted_sha512ct]tRt^t$RtRtR]R&RtR]R&RtR]R&] Pt ] R 4t R tR tR#) _Base64DigestHelperzhelper for ldap_md5 / ldap_sha1N str | NoneidentSHAFunc | None _hash_funcre.Pattern[str] | None _hash_regexc VP#)z/tell StaticHandler to strip ident from checksum)rclss&?/usr/lib/python3/dist-packages/passlib/handlers/ldap_digests.py _hash_prefix _Base64DigestHelper._hash_prefix'syyc \V\4'dVPR4pVPV4P 4p\ V4P R4#)utf-8ascii) isinstancestrencoderdigestrdecode)selfsecretchks&& r!_calc_checksum"_Base64DigestHelper._calc_checksum,sI fc " "]]7+Foof%,,.~$$W--r$)__name__ __module__ __qualname____firstlineno____doc__r__annotations__rruhPADDED_BASE64_CHARSchecksum_charsr r"r0__static_attributes__r2r$r!rrsH)E:!%J%*.K'.++N.r$rc]tRt^3t$RtR t]PtRt R] R&Rt R] R&Rt R] R&^;t t^t ^t^t]R 4tR tR tR tR#)_SaltedBase64DigestHelperz-helper for ldap_salted_md5 / ldap_salted_sha1Nrrrrrrc \VRR4pVPPV4pV'g \PP V4h\ VPR4PR44pTPpT'gQhT!TRTY4RR7# \d!\PPT4hi;i)r'hashtmpN)checksumsalt) r rmatchr9excInvalidHashErrorrgroupr* TypeErrorMalformedHashError checksum_size)r r@mdatacss&& r! from_string%_SaltedBase64DigestHelper.from_stringEs$0 OO ! !$ '&&))#. . 1QWWU^227;r>3sl7(L++NE:!%J%*.K'.$%%MM MM 7 7<cJ]tRt^]tRtRtRt]t] P!R4t Rt R#)rzThis class stores passwords using LDAP's plain MD5 format, and follows the :ref:`password-hash-api`. The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods have no optional keywords. z{MD5}z%^\{MD5\}(?P[+/a-zA-Z0-9]{22}==)$r2N) r3r4r5r6r7namerrrrecompilerr<r2r$r!rr]s' D EJ**EFKr$cJ]tRt^itRtRtRt]t] P!R4t Rt R#)rzThis class stores passwords using LDAP's plain SHA1 format, and follows the :ref:`password-hash-api`. The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods have no optional keywords. z{SHA}z$^\{SHA\}(?P[+/a-zA-Z0-9]{27}=)$r2N) r3r4r5r6r7r\rrrr]r^rr<r2r$r!rris' D EJ**DEKr$cN]tRt^utRtRtRt^t]t ] P!R4t Rt R#)raoThis class stores passwords using LDAP's salted MD5 format, and follows the :ref:`password-hash-api`. It supports a 4-16 byte salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it may be any 4-16 byte string. :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. Defaults to 4 bytes for compatibility with the LDAP spec, but some systems use larger salts, and Passlib supports any value between 4-16. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 .. versionchanged:: 1.6 This format now supports variable length salts, instead of a fix 4 bytes. z{SMD5}z+^\{SMD5\}(?P[+/a-zA-Z0-9]{27,}={0,2})$r2N)r3r4r5r6r7r\rrJrrr]r^rr<r2r$r!rrus-B D EMJ**KLKr$cN]tRt^tRtRtRt^t]t ] P!R4t Rt R#)ras This class stores passwords using LDAP's "Salted SHA1" format, and follows the :ref:`password-hash-api`. It supports a 4-16 byte salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it may be any 4-16 byte string. :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. Defaults to 4 bytes for compatibility with the LDAP spec, but some systems use larger salts, and Passlib supports any value between 4-16. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 .. versionchanged:: 1.6 This format now supports variable length salts, instead of a fix 4 bytes. z{SSHA}z+^\{SSHA\}(?P[+/a-zA-Z0-9]{32,}={0,2})$r2N)r3r4r5r6r7r\rrJrrr]r^rr<r2r$r!rrs-!F D EMJ**KLKr$cR]tRt^tRtRtRt^ t^t] t ] P!R4t RtR#)ra This class stores passwords using LDAP's "Salted SHA2-256" format, and follows the :ref:`password-hash-api`. It supports a 4-16 byte salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it may be any 4-16 byte string. :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. Defaults to 8 bytes for compatibility with the LDAP spec, but Passlib supports any value between 4-16. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.7.3 z {SSHA256}z.^\{SSHA256\}(?P[+/a-zA-Z0-9]{48,}={0,2})$r2N)r3r4r5r6r7r\rrJrYrrr]r^rr<r2r$r!rr2> D EMJ**NOKr$cR]tRt^tRtRtRt^@t^t] t ] P!R4t RtR#)ra This class stores passwords using LDAP's "Salted SHA2-512" format, and follows the :ref:`password-hash-api`. It supports a 4-16 byte salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: bytes :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it may be any 4-16 byte string. :type salt_size: int :param salt_size: Optional number of bytes to use when autogenerating new salts. Defaults to 8 bytes for compatibility with the LDAP spec, but Passlib supports any value between 4-16. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.7.3 z {SSHA512}z.^\{SSHA512\}(?P[+/a-zA-Z0-9]{91,}={0,2})$r2N)r3r4r5r6r7r\rrJrYrrr]r^rr<r2r$r!rrrcr$c]tRtRtRtRt]P!R4t] P!RRR7] R44t ] R4t R tR #) ria!This class stores passwords in plaintext, and follows the :ref:`password-hash-api`. This class acts much like the generic :class:`!passlib.hash.plaintext` handler, except that it will identify a hash only if it does NOT begin with the ``{XXX}`` identifier prefix used by RFC2307 passwords. The :meth:`~passlib.ifc.PasswordHash.hash`, :meth:`~passlib.ifc.PasswordHash.genhash`, and :meth:`~passlib.ifc.PasswordHash.verify` methods all require the following additional contextual keyword: :type encoding: str :param encoding: This controls the character encoding to use (defaults to ``utf-8``). This encoding will be used to encode :class:`!str` passwords under Python 2, and decode :class:`!bytes` hashes under Python 3. .. versionchanged:: 1.6 The ``encoding`` keyword was added. z ^\{\w+\}.*$z1.7z2.0) deprecatedremovedc R#)!r2rs&r! genconfigldap_plaintext.genconfig7s r$c \P!V4p\V4;'dVPP V4RJ#)N)r9to_unicode_for_identifybool _2307_patrD)r r@s&&r!identifyldap_plaintext.identify>s:))$/Dz??cmm11$74??r$r2N)r3r4r5r6r7r\r]r^ror9deprecated_methodrZrjrpr<r2r$r!rrsY. D >*IUE:; @@r$ldap_c~\4p\F'pRV,p\P!W!RRR7W&K) ?R#)rsz{CRYPT}T)prefixlazyN)globalsr r9 PrefixWrapper)gwnamer\s r!_init_ldap_crypt_handlersr{Ms9  A#""4ytL$ r$)rrrrrrr)+r7 __future__rr]base64rrhashlibrrrrtypingr passlib.utils.handlersutilshandlersr9passlib.handlers.miscr passlib.utilsr r passlib.utils.decorr passlib._protocolsr__all__ StaticHandlerr HasRawSaltHasRawChecksumGenericHandlerr>rrrrrrrldap_crypt_schemesr{)r\s0r!rs " '-- ##+8-* ."**.,'< r/@/@"BSBS'