+ THi.]<a0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIH t ^RI H t ^RI H t ^RIHtHtHtHt^RIHt^RIHt.R0OtR1tR2t.R3OtRR4RR5RR6R R6R R7R R8R R5RR9RR:RR;RRRR;/tRt/tR]R&RtRt R?Rlt!R R!lt"R@R"lt#!R#R ]4t$Rs%0RAmt&RBR$R%llt']!]PPPSR&44'd]'!4]*!R']+!R(444t,]*!R)]+!R(444t-RCR*R+llt.RDR,lt/RDR-R.llt0R/.t1R#)Ezlpasslib.crypto.digest -- crytographic helpers used by the password hashes in passlib .. versionadded:: 1.7 ) annotationsN)warn)exc)logger) SequenceMixinas_boolto_bytes to_native_str)unicode_or_bytes)memoized_propertyHashInfomd5sha1sha224sha256sha384sha512blake2bblake2smd4sha3_224sha3_256sha3_384sha3_512shake128shake256c/p\\PR0,4F2p\V4pVPVP 3WP &K4 V#)z internal helper used to generate ``_fallback_info`` dict. currently only run manually to update the above list; not invoked at runtime. r)sortedhashlibalgorithms_available lookup_hash digest_size block_sizename)outalginfos 7/usr/lib/python3/dist-packages/passlib/crypto/digest.py_gen_fallback_infor(ZsP Cg22eW<=3**DOO<II> Jzdict[str, str]_hash_info_cachecTp\V\4'g\VRR4p\P!RRVP 4P 44pVPR4'dVR,pVPR4pRpV!V4pV'dV#\P!R V4pV'dVPR R R 4wrVpV'd WV, pTpV'd*VRV,, pV'd VR , pW, pV!V4pV'dV#\P!RVVV4W3#TpVPRR 4p\P!RVVV4W3#)a! internal helper used by :func:`lookup_hash` -- normalize arbitrary hash name to hashlib format. if name not recognized, returns dummy record and issues a warning. :arg name: unnormalized name :returns: tuple with 2+ elements: ``(hashlib_name, iana_name|None, ... 0+ aliases)``. zutf-8z hash namez[_ /]-zscram-:NNz-plusc4\F pW9gK Vu# R#N)_known_hash_names)r#rows& r' check_table&_get_hash_aliases..check_tables$C{ %r)z8(?i)^(?P[a-z]+)-?(?P\d)?-?(?P\d{3,4})?$r#revsize_z0normalizing unrecognized hash name %r => %r / %rz;normalizing unrecognized hash name and format %r => %r / %r) isinstancestrr resubstriplower startswith removesuffixmatchgrouprr&replacewarning) r#origr2resultm iana_namer4r5 hashlib_names & r'_get_hash_aliasesrHksc D dC T7K8 66'3 2 2 4 5D Bx  )  F   LdSA !wwvuf=    I  t #I#  LY' M  >     $  "" ||C-  I       ""r)cHaaSPR4'gSR 9d\\S4#\PoS!SR4R VV3RllpSVnRVnRS: R2VnV# \dLLi;i \dMi;iSR8Xd ^RI H pT#R #) z internal helper used by :func:`lookup_hash` -- lookup hash constructor by name :arg name: name (normalized to hashlib format, e.g. ``"sha256"``) :returns: hash constructor, e.g. ``hashlib.sha256()``; or None if hash can't be located. r6r)c<S!SV4#r/)msgr# new_ssl_hashs&r'const_get_hash_const..constsc* *r)rzwrapper for hashlib.new(z3), generated by passlib.crypto.digest.lookup_hash()r)rN)new algorithmsr)) r=getattrrAttributeErrorrP__name__ __module____doc__ ValueErrorpasslib.crypto._md4r)r#rNrrMsf @r'_get_hash_constrZs ??3  D0E$E 7D) ) ;;LT3  + +$&th/? ?   -       " u}+ s#A1 B1 A?>A? BBFca \pW0,# \\3dMi;iT'dRpRp\T\4'dl\ T4pT^,o S 'gQhS T8wd\ S TR7pYcT&T#\S 4pT'd \'dS \9d R T 3RllpM\T\4'dT#\T4'd?Tp\ T!4P4pT^,o \S 4pTfM!YJdMRpM\P!TRR4h\YuTR7pTeYcT&T'd;TF4o S 'gK TPS 4RT39g QS : R 24hYcS &K6 T#) a Returns a :class:`HashInfo` record containing information about a given hash function. Can be used to look up a hash constructor by name, normalize hash name representation, etc. :arg digest: This can be any of: * A string containing a :mod:`!hashlib` digest name (e.g. ``"sha256"``), * A string containing an IANA-assigned hash name, * A digest constructor function (e.g. ``hashlib.sha256``). Case is ignored, underscores are converted to hyphens, and various other cleanups are made. :param required: By default (True), this function will throw an :exc:`~passlib.exc.UnknownHashError` if no hash constructor can be found, or if the hash is not actually available. If this flag is False, it will instead return a dummy :class:`!HashInfo` record which will defer throwing the error until it's constructor function is called. This is mainly used by :func:`norm_hash_name`. :param return_unknown: .. deprecated:: 1.7.3 deprecated, and will be removed in passlib 2.0. this acts like inverse of **required**. :returns HashInfo: :class:`HashInfo` instance containing information about specified digest. Multiple calls resolving to the same hash should always return the same :class:`!HashInfo` instance. FTrequiredc"<\S: R24h)z2 disabled for fips by passlib set_mock_fips_mode())rX)sourcer#s&r'rNlookup_hash..const5s hPQr)Nzdigest name or constructordigest)rNnamesr]z already in cacherR)r*KeyError TypeErrorr7r rHr rZmock_fips_mode_fips_algorithmsr callabler#rExpectedTypeErrorget) rareturn_unknownr]cache cache_by_name name_listr&rN other_constr#s &&& @r'r r sR E } i    M&*++%f- | t 6>th7D &MK % ^^4D(D  FH % % &  %egll3 |%d+     !  "M##F,H(SS %8 DD e Dtyy4,6T4(BS8TT6"d  Ks %%cV^8dQhRR/#)returnNonerK)formats"r' __annotate__rtfsr)c.\P4R#r/)r*clearrKr)r'clear_lookup_hash_cacherwfsr)c\VRR7pVP'd,\RVP,\P 4VR8Xd VP #VR8Xd VP#\RV: 24h)aNormalize hash function name (convenience wrapper for :func:`lookup_hash`). :arg name: Original hash function name. This name can be a Python :mod:`~hashlib` digest name, a SCRAM mechanism name, IANA assigned hash name, etc. Case is ignored, and underscores are converted to hyphens. :param format: Naming convention to normalize to. Possible values are: * ``"hashlib"`` (the default) - normalizes name to be compatible with Python's :mod:`!hashlib`. * ``"iana"`` - normalizes name to IANA-assigned hash function name. For hashes which IANA hasn't assigned a name for, this issues a warning, and then uses a heuristic to return a "best guess" name. :returns: Hash name, returned as native :class:`!str`. Fr\znorm_hash_name(): rianazunknown format: ) r unknownr error_textrPasslibRuntimeWarningr#rFrX)r#rsr&s&& r'norm_hash_namer}jsj0 te ,D ||| !DOO 3S5N5NO yy ~~ 'z2 33r)c`]tRtRtRtRtRtR tRtRt Rt Rt Rt R Rlt RtRt]R4tR tR#) r ia Record containing information about a given hash algorithm, as returned :func:`lookup_hash`. This class exposes the following attributes: .. autoattribute:: const .. autoattribute:: digest_size .. autoattribute:: block_size .. autoattribute:: name .. autoattribute:: iana_name .. autoattribute:: aliases .. autoattribute:: supported This object can also be treated a 3-element sequence containing ``(const, digest_size, block_size)``. NFc 2aaaV^,;oSnV^,SnVR,SnRVVV3RllpVf*V\9dRS: 2pM RS: 2pRSnV!V4R#V!4pTSn TPSn TPSn \TP44TP8wd\SP: R24hTPSP8wd=\!RSP: RT: RTP: 2\"P$4R#R# \ dYpR\ T4P49dS: R 2pM R S: R \T4P R T R 2pT!T4Rp?R#Rp?ii;i)z initialize new instance. :arg const: hash constructor :arg names: list of 2+ names. should be list of ``(name, iana_name, ... 0+ aliases)``. names must be lower-case. only iana name may be None. :rpNNc V^8dQhRRRR/#)rprLr8rqrrrK)rss"r'rt'HashInfo.__init__..__annotate__s I I I Ir)c<aRVV3RllpS'dV!4SSnVSn\P!\4;_uu_4\ S,wSnSnRRR4R# +'giR#;i)zK helper that installs stub constructor which throws specified error . c2<\P!SS4hr/)rUnknownHashError)r_rLr#s&r'rN8HashInfo.__init__..use_stub_const..consts**355r)NrR)r{rN contextlibsuppressrc_fallback_infor!r")rLrNr#r]selfsf r'use_stub_const)HashInfo.__init__..use_stub_consts[  6 6!DODJ$$X..4B44H1 $//...s A00 B Nzunsupported hash: zunknown hash: Tzdisabled for fipsz hash disabled for fipszinternal error in z constructor (z: )z constructor failed sanity checkzinconsistent digest name: z resolved to z, which reports name as )r#rFaliasesr0rzrXr8r<typerUrNr!r"lenra RuntimeErrorrrr|) rrNrbr]rrLhasherrr#s f&&f @r'__init__HashInfo.__init__s!8#tyqRy  I I& =))*4(3&th/# 3   7D ++// t{{} !1!1 1$)).NOP P 99 ! ,TYYMuiOghlhqhqgtu))  "-  #c#hnn&66 78*4(/$s)BTBTAUUWX[W\\]^ 3   s)D33 F>A FFc \RVP: RVP: RVP: R2#)z r<1jt88jc#2"TF q^6, xK R#5i)6NrKrs& r'rr=rrc$V^8dQhRRRRRR/#)rprar8keyz str | bytes multipartrrK)rss"r'rtrt@s&LLL;L4Lr)ca a \V4pVwrEpV^8gQR4h\V\4'g\VRR7p\ V4pWv8dV!V4P 4pTpWv8dVRWg, ,, pV!VP \44Po V!VP \44Po V'd V V 3RlpMV V 3RlpW8n V#)aV This function returns an efficient HMAC function, hardcoded with a specific digest & key. It can be used via ``hmac = compile_hmac(digest, key)``. :arg digest: digest name or constructor. :arg key: secret key as :class:`!bytes` or :class:`!str` (str will be encoded using utf-8). :param multipart: request a multipart constructor instead (see return description). :returns: By default, the returned function has the signature ``hmac(msg) -> digest output``. However, if ``multipart=True``, the returned function has the signature ``hmac() -> update, finalize``, where ``update(msg)`` may be called multiple times, and ``finalize() -> digest_output`` may be repeatedly called at any point to calculate the HMAC digest so far. The returned object will also have a ``digest_info`` attribute, containing a :class:`lookup_hash` instance for the specified digest. This function exists, and has the weird signature it does, in order to squeeze as provide as much efficiency as possible, by omitting much of the setup cost and features of the stdlib :mod:`hmac` module. zblock size too smallrparamc><aS!4oVV3RlpSPV3#)z)generated by compile_hmac(multipart=True)cp<S!4pVPSP44VP4#r/updatera)outer _outer_copyinners r'finalize,compile_hmac..hmac..finalizezs(#  U\\^,||~%r))r)rr _inner_copyrs @r'hmaccompile_hmac..hmacvs ME & <<) )r)c<S!4pVPV4S!4pVPVP44VP4#)zgenerated by compile_hmac()r)rLrrrrs& r'rrs;ME LL ME LL (<<> !r)) r r7bytesrrra translate _TRANS_36copy _TRANS_5C digest_info) rarrrrNr!r"klenrrrs &&& @@r' compile_hmacr@s@f%K%0"E  333  c5 ! !s%( s8D Cj!  w*+,, i0166K i0166K * "# Kr)c\V4wrVp\VRR7p\VRR7p\V\4'g\P !VRR4hV^8d \ R4hVfTpMY\V\4'g\P !VRR 4hV^8d \ R 4hWF8d\ R V: R V: 24hW,p\V4Fp V!V4P4pK VRV#) apkcs#5 password-based key derivation v1.5 :arg digest: digest name or constructor. :arg secret: secret to use when generating the key. may be :class:`!bytes` or :class:`str` (encoded using UTF-8). :arg salt: salt string to use when generating key. may be :class:`!bytes` or :class:`str` (encoded using UTF-8). :param rounds: number of rounds to use to generate key. :arg keylen: number of bytes to generate (if omitted / ``None``, uses digest's native size) :returns: raw :class:`bytes` of generated key .. note:: This algorithm has been deprecated, new code should use PBKDF2. Among other limitations, ``keylen`` cannot be larger than the digest size of the specified hash. secretrsaltintroundszrounds must be at least 1Nz int or Nonekeylenzkeylen must be at least 0z keylength too large for digest: z > ) r rr7rrrhrXrangera) rarrrrrNr!r"blockr6s &&&&& r'pbkdf1rs<&1%8"E fH -F D 'D fc " "##FE8<< z455~  $ $##FM8DD !455  .vjK? K  ME 6]e ##% &>r)c(V^8dQhRRRRRRRR/#)rprarrrrrrK)rss"r'rtrts.'O'O'Ou'OE'O3'Or)c\VRR7p\VRR7p\V4p\P!VPWW44#)a\pkcs#5 password-based key derivation v2.0 using HMAC + arbitrary digest. :arg digest: digest name or constructor. :arg secret: passphrase to use to generate key. may be :class:`!bytes` or :class:`str` (encoded using UTF-8). :arg salt: salt string to use when generating key. may be :class:`!bytes` or :class:`str` (encoded using UTF-8). :param rounds: number of rounds to use to generate key. :arg keylen: number of bytes to generate. if omitted / ``None``, will use digest's native output size. :returns: raw bytes of generated key .. versionchanged:: 1.7 This function will use the first available of the following backends: * :func:`hashlib.pbkdf2_hmac` (only available in py2 >= 2.7.8, and py3 >= 3.4) See :data:`passlib.crypto.digest.PBKDF2_BACKENDS` to determine which backend(s) are in use. rrr)rr r pbkdf2_hmacr#)rarrrrrs&&&&& r'rrsDBfH -F D 'Df%K   {//v NNr)z hashlib-ssl)r rwr r}rrrll) )md2r)r r )rzsha-1)rzsha-224zsha2-224)rzsha-256zsha2-256)rzsha-384zsha2-384)rzsha-512zsha2-512)rzblake-2b)rzblake-2s)rr) ripemd160z ripemd-160ripemd)@) r)r)r)r)0r)r)r)rh)rH)r)FT)r> rrrrrrrrr shake_128 shake_256r)Fr/)2__conditional_annotations__rW __future__rrrosr9warningsrpasslibrpasslib._loggingr passlib.utilsrrrr passlib.utils.compatr passlib.utils.decorr __all__ MAX_UINT32 MAX_UINT64r0rr(r*__annotations__rHrZr rwr}r rerfrenvironrirrrrrrrPBKDF2_BACKENDS)rs@r'rsa # #II11   >y x 8 8 H h h i    i  !( $&.%H#V1hyx4DG'}G'V& 2::>>2 344 1eCj1 1 1eCj1 1 L^:z'OVr)