File: //lib/python3/dist-packages/nacl/bindings/__pycache__/crypto_pwhash.cpython-38.pyc
U
�֫[B � @ s� d dl mZmZmZ d dlZd dlmZ d dlmZ d dl
m Z m Z d dlm
Z
e �e �de �� ��dd� Ze �� Ze �� Ze �� Ze �� Ze �� Ze � � Z e � � Z e � � Z!e �"� Z#e �$� Z%e �&� Z'e �(� Z)e �*� Z+e �,� Z-e �.� Z/e �0� Z1e �2� Z3e �4� Z5e �6� Z7e �8� Z9e �:� Z;e �<� Z=e �>� Z?e �e �de �@� ��dd� ZAe �B� ZCe �D� ZEe �F� ZGe �H� ZIe �J� ZKe �L� ZMe �N� ZOe �P� ZQe �R� ZSe �T� ZUe �e �de �V� ��dd� ZWe �X� ZYe �Z� Z[e �\� Z]e �^� Z_e �`� Zae �b� Zce �d� Zee �f� Zge �h� Zie �j� Zke'Zle)Zme+Zne-ZoeZpeZqdZrdZsd Ztd
Zueufd d �Zvd
d� Zwdeufdd�Zxelemfdd�Zydd� Zzdd� Z{dd� Z|dd� Z}d d � Z~e~ZdS ) � )�absolute_import�division�print_functionN)�
integer_types)�ffi�lib)�ensure�char *��?�? l ���� i c C s t |dkdtjd� t |dkdtjd� t | | d @ dkdtjd� t | dkdtjd� t |t| kd�t�tjd� t | dd | > k tjd� |d
| }td
}t | d || ktjd� d | | d d
}t |t| ktjd� t |tj| ktjd� t || |kdtjd� d S )Nr zInvalid block size�Zraisingz Invalid parallelization factor� z Cost factor must be a power of 2z Cost factor must be at least 2zp*r is greater than {0}� � � � � z7Memory limit would be exceeded with the choosen n, r, p)r �exc�
ValueError�
SCRYPT_PR_MAX�format�
UINT64_MAX�sys�maxsize)�n�r�p�maxmemZBlen�iZVlen� r �=/usr/lib/python3/dist-packages/nacl/bindings/crypto_pwhash.py�_check_memory_occupation� sF
�
��
� �� � �� �r! c C s� | dk r d} d}| |d k rRd}| d| }t dd�D ]}d| |d kr6 q�q6nT||d }t dd�D ]}d| |d krh q�qh| d d| }|d kr�d }|| }|||fS )
z/Python implementation of libsodium's pickparamsi � � r r
r r r r r
)�range)�opslimit�memlimitr r ZmaxnZn_log2Zmaxrpr r r � nacl_bindings_pick_scrypt_params� s$ r& �@ c C s� t t|t�td� t t|t�td� t t|t�td� t t| t�td� t t|t�td� t||||� t�d|�}t� | t
| �|t
|�|||||� }t |dkdt j d� t�
t�d|�|�dd� S )a1
Derive a cryptographic key using the ``passwd`` and ``salt``
given as input.
The work factor can be tuned by by picking different
values for the parameters
:param bytes passwd:
:param bytes salt:
:param bytes salt: *must* be *exactly* :py:const:`.SALTBYTES` long
:param int dklen:
:param int opslimit:
:param int n:
:param int r: block size,
:param int p: the parallelism factor
:param int maxmem: the maximum available memory available for scrypt's
operations
:rtype: bytes
r z uint8_t[]r �$Unexpected failure in key derivationr N)r �
isinstancer � TypeError�bytesr! r �newr �%crypto_pwhash_scryptsalsa208sha256_ll�lenr � RuntimeError�buffer�cast) �passwd�saltr r r Zdklenr �buf�retr r r r- � s<
�
�
�
�
� �
�r- c C s@ t �dt�}t�|| t| �||�}t|dkdtjd� t � |�S )a
Derive a cryptographic key using the ``passwd`` and ``salt``
given as input, returning a string representation which includes
the salt and the tuning parameters.
The returned string can be directly stored as a password hash.
See :py:func:`.crypto_pwhash_scryptsalsa208sha256` for a short
discussion about ``opslimit`` and ``memlimit`` values.
:param bytes passwd:
:param int opslimit:
:param int memlimit:
:return: serialized key hash, including salt and tuning parameters
:rtype: bytes
�char[]r z&Unexpected failure in password hashingr )
r r, �SCRYPT_STRBYTESr �&crypto_pwhash_scryptsalsa208sha256_strr. r r r/ �string)r2 r$ r% r4 r5 r r r r8 s �
�r8 c C sF t t| �td kdtjd� t�| |t|��}t |dkdtjd� dS )z�
Verifies the ``passwd`` against the ``passwd_hash`` that was generated.
Returns True or False depending on the success
:param passwd_hash: bytes
:param passwd: bytes
:rtype: boolean
r
zInvalid password hashr r �Wrong passwordT)r r. r7 r r r �-crypto_pwhash_scryptsalsa208sha256_str_verify�InvalidkeyError�Z passwd_hashr2 r5 r r r r; $ s
���r; c C s� |t krn|tk r"t�d�t���n|tkr:t�d�t���| tk rTt�d�t���q�| tkr�t�d�t���nx|tkr�|t k r�t�d�t ���n|t
kr�t�d�t
���| t k r�t�d�t ���q�| t kr�t�d�t ���n
t�
d��d S )Nz#memlimit must be at least {0} bytesz"memlimit must be at most {0} bytesz opslimit must be at least {0}z opslimit must be at most {0}zUnsupported algorithm)�crypto_pwhash_ALG_ARGON2I13�"crypto_pwhash_argon2i_MEMLIMIT_MINr r r �"crypto_pwhash_argon2i_MEMLIMIT_MAX�"crypto_pwhash_argon2i_OPSLIMIT_MIN�"crypto_pwhash_argon2i_OPSLIMIT_MAX� crypto_pwhash_ALG_ARGON2ID13�#crypto_pwhash_argon2id_MEMLIMIT_MIN�#crypto_pwhash_argon2id_MEMLIMIT_MAX�#crypto_pwhash_argon2id_OPSLIMIT_MIN�#crypto_pwhash_argon2id_OPSLIMIT_MAXr* )r$ r% �algr r r �_check_argon2_limits_alg; sF ��������rI c
C s t t| t�tjd� t t|t�tjd� t t|t�tjd� t t|t�tjd� t t|t�tjd� t|�tkr�t�d� t���| t
k r�t�d� t
���n| t kr�t�d� t ���t |||� t
�d| �}t�|| |t|�||||�}t |dkdtjd� t
�|| �dd� S ) a�
Derive a raw cryptographic key using the ``passwd`` and the ``salt``
given as input to the ``alg`` algorithm.
:param outlen: the length of the derived key
:type outlen: int
:param passwd: The input password
:type passwd: bytes
:param opslimit: computational cost
:type opslimit: int
:param memlimit: memory cost
:type memlimit: int
:param alg: algorithm identifier
:type alg: int
:return: derived key
:rtype: bytes
r z#salt must be exactly {0} bytes longz+derived key must be at least {0} bytes longz*derived key must be at most {0} bytes longzunsigned char[]r r( N)r r) r r r* r+ r. �crypto_pwhash_SALTBYTESr r �crypto_pwhash_BYTES_MIN�crypto_pwhash_BYTES_MAXrI r r, r Z
crypto_pwhashr/ r0 )Zoutlenr2 r3 r$ r% rH �outbufr5 r r r �crypto_pwhash_alg\ sV
�
�
�
�
� ����� �
�rN c C s� t t|t�td� t t|t�td� t t| t�td� t|||� t�dd�}t� || t
| �|||�}t |dkdt j d� t�
|�S )a
Derive a cryptographic key using the ``passwd`` given as input
and a random ``salt``, returning a string representation which
includes the salt, the tuning parameters and the used algorithm.
:param passwd: The input password
:type passwd: bytes
:param opslimit: computational cost
:type opslimit: int
:param memlimit: memory cost
:type memlimit: int
:param alg: The algorithm to use
:type alg: int
:return: serialized derived key and parameters
:rtype: bytes
r r6 r r r( )r r) r r* r+ rI r r, r �crypto_pwhash_str_algr. r r/ r9 )r2 r$ r% rH rM r5 r r r rO � s(
�
�
� �
�rO c C sf t t| t�td� t t|t�td� t t| �dkdtjd� t�| |t|��}t |dkdtj d� dS )a4
Verifies the ``passwd`` against a given password hash.
Returns True on success, raises InvalidkeyError on failure
:param passwd_hash: saved password hash
:type passwd_hash: bytes
:param passwd: password to be checked
:type passwd: bytes
:return: success
:rtype: boolean
r � z#Hash must be at most 127 bytes longr r: T)
r r) r+ r* r. r r r �crypto_pwhash_str_verifyr< r= r r r rQ � s
�
� ��rQ )�Z
__future__r r r r Zsixr Znacl.exceptions�
exceptionsr Z nacl._sodiumr r r r9 r1 Z,crypto_pwhash_scryptsalsa208sha256_strprefixZ,crypto_pwhash_scryptsalsa208sha256_STRPREFIXZ,crypto_pwhash_scryptsalsa208sha256_saltbytesZ,crypto_pwhash_scryptsalsa208sha256_SALTBYTESZ+crypto_pwhash_scryptsalsa208sha256_strbytesZ+crypto_pwhash_scryptsalsa208sha256_STRBYTESZ-crypto_pwhash_scryptsalsa208sha256_passwd_minZ-crypto_pwhash_scryptsalsa208sha256_PASSWD_MINZ-crypto_pwhash_scryptsalsa208sha256_passwd_maxZ-crypto_pwhash_scryptsalsa208sha256_PASSWD_MAXZ,crypto_pwhash_scryptsalsa208sha256_bytes_minZ,crypto_pwhash_scryptsalsa208sha256_BYTES_MINZ,crypto_pwhash_scryptsalsa208sha256_bytes_maxZ,crypto_pwhash_scryptsalsa208sha256_BYTES_MAXZ/crypto_pwhash_scryptsalsa208sha256_memlimit_minZ/crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_MINZ/crypto_pwhash_scryptsalsa208sha256_memlimit_maxZ/crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_MAXZ/crypto_pwhash_scryptsalsa208sha256_opslimit_minZ/crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_MINZ/crypto_pwhash_scryptsalsa208sha256_opslimit_maxZ/crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_MAXZ7crypto_pwhash_scryptsalsa208sha256_opslimit_interactiveZ7crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_INTERACTIVEZ7crypto_pwhash_scryptsalsa208sha256_memlimit_interactiveZ7crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_INTERACTIVEZ5crypto_pwhash_scryptsalsa208sha256_opslimit_sensitiveZ5crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_SENSITIVEZ5crypto_pwhash_scryptsalsa208sha256_memlimit_sensitiveZ5crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_SENSITIVEZcrypto_pwhash_alg_argon2i13r> Z crypto_pwhash_alg_argon2id13rC Zcrypto_pwhash_alg_defaultZcrypto_pwhash_ALG_DEFAULTZcrypto_pwhash_saltbytesrJ Zcrypto_pwhash_strbytesZcrypto_pwhash_STRBYTESZcrypto_pwhash_passwd_minZcrypto_pwhash_PASSWD_MINZcrypto_pwhash_passwd_maxZcrypto_pwhash_PASSWD_MAXZcrypto_pwhash_bytes_minrK Zcrypto_pwhash_bytes_maxrL Z crypto_pwhash_argon2i_strprefixZ crypto_pwhash_argon2i_STRPREFIXZ"crypto_pwhash_argon2i_memlimit_minr? Z"crypto_pwhash_argon2i_memlimit_maxr@ Z"crypto_pwhash_argon2i_opslimit_minrA Z"crypto_pwhash_argon2i_opslimit_maxrB Z*crypto_pwhash_argon2i_opslimit_interactiveZ*crypto_pwhash_argon2i_OPSLIMIT_INTERACTIVEZ*crypto_pwhash_argon2i_memlimit_interactiveZ*crypto_pwhash_argon2i_MEMLIMIT_INTERACTIVEZ'crypto_pwhash_argon2i_opslimit_moderateZ'crypto_pwhash_argon2i_OPSLIMIT_MODERATEZ'crypto_pwhash_argon2i_memlimit_moderateZ'crypto_pwhash_argon2i_MEMLIMIT_MODERATEZ(crypto_pwhash_argon2i_opslimit_sensitiveZ(crypto_pwhash_argon2i_OPSLIMIT_SENSITIVEZ(crypto_pwhash_argon2i_memlimit_sensitiveZ(crypto_pwhash_argon2i_MEMLIMIT_SENSITIVEZ crypto_pwhash_argon2id_strprefixZ crypto_pwhash_argon2id_STRPREFIXZ#crypto_pwhash_argon2id_memlimit_minrD Z#crypto_pwhash_argon2id_memlimit_maxrE Z#crypto_pwhash_argon2id_opslimit_minrF Z#crypto_pwhash_argon2id_opslimit_maxrG Z+crypto_pwhash_argon2id_opslimit_interactiveZ+crypto_pwhash_argon2id_OPSLIMIT_INTERACTIVEZ+crypto_pwhash_argon2id_memlimit_interactiveZ+crypto_pwhash_argon2id_MEMLIMIT_INTERACTIVEZ(crypto_pwhash_argon2id_opslimit_moderateZ(crypto_pwhash_argon2id_OPSLIMIT_MODERATEZ(crypto_pwhash_argon2id_memlimit_moderateZ(crypto_pwhash_argon2id_MEMLIMIT_MODERATEZ)crypto_pwhash_argon2id_opslimit_sensitiveZ)crypto_pwhash_argon2id_OPSLIMIT_SENSITIVEZ)crypto_pwhash_argon2id_memlimit_sensitiveZ)crypto_pwhash_argon2id_MEMLIMIT_SENSITIVEZSCRYPT_OPSLIMIT_INTERACTIVEZSCRYPT_MEMLIMIT_INTERACTIVEZSCRYPT_OPSLIMIT_SENSITIVEZSCRYPT_MEMLIMIT_SENSITIVEZSCRYPT_SALTBYTESr7 r ZLOG2_UINT64_MAXr ZSCRYPT_MAX_MEMr! r& r- r8 r; rI rN rO rQ Z crypto_pwhash_argon2i_str_verifyr r r r �<module> s�
� ���������������
� �����������
� ����������������� ( �
1�
!8%