h>JdZddlmZddlZddlZej eZ ddlmZ e jdk(rejddZ ddl Z ddlZddlmZddlmZ ddlmZdd lmZdd lmZmZmZmZmZmZdd lmZm Z m!Z!m"Z"m#Z#dd l$m%Z%gd Z&dZ'dZ(gdZ)ddddddddddddddddZ*dZ+iZ,dZ-dZ. dGd!Z/e,j`e/_1dHd"Z2Gd#d$eZ3d a4e5gd%Z6dId&Z7eejpjsd're7ed(ed)DZ:ed*ed)DZ;dJd+ZZCd?ZDd@ZEe@eEk(rdxZZ erdAnde rdBnddCeEzfDcgc]}|r|c}ZMdAeMvrdDZNydBeMvrdEZNydFZNy#e $rdZ YwxYw#e $rdZYwxYwcc}w)Lzlpasslib.crypto.digest -- crytographic helpers used by the password hashes in passlib .. versionadded:: 1.7 )divisionN) pbkdf2_hmachashlibz*ignoring pure-python hashlib.pbkdf2_hmac())Struct)warn)exc) join_bytes to_native_strjoin_byte_valuesto_bytes SequenceMixinas_bool)irange int_typesunicode_or_bytes_typesPY3 error_from)memoized_property) lookup_hashHashInfonorm_hash_name compile_hmacpbkdf1rll) )md2r)md5r)sha1zsha-1)sha224zsha-224zsha2-224)sha256zsha-256zsha2-256)sha384zsha-384zsha2-384)sha512zsha-512zsha2-512)blake2bzblake-2b)blake2szblake-2s)md4r#) ripemd160z ripemd-160ripemd)@) r&)r&)r&)r&)0r')r+)r()r,h)r&H)r))r!r"r#rrrrrsha3_224sha3_256sha3_384sha3_512r shake128shake256ci}ttjtdgzD]2}t |}|j |j f||j<4|S)z internal helper used to generate ``_fallback_info`` dict. currently only run manually to update the above list; not invoked at runtime. r#)sortedralgorithms_availablesetr digest_size block_sizename)outalginfos W/var/www/html/Resume-Scraper/venv/lib/python3.12/site-packages/passlib/crypto/digest.py_gen_fallback_inforCzs[ Cg22S%\AB=3**DOO<DII= Jch|}t|ts t|dd}tjdd|j j }|jdr|dd}|jdr|dd }d }||}|r|Stjd |}|r^|jd d d\}}}|r||z }|}|r|d|zz }|r|dz }||z }||}|r|Stjd|||||fS|}|jdd}tjd|||||fS)aA internal helper used by :func:`lookup_hash` -- normalize arbitrary hash name to hashlib format. if name not recognized, returns dummy record and issues a warning. :arg name: unnormalized name :returns: tuple with 2+ elements: ``(hashlib_name, iana_name|None, ... 0+ aliases)``. zutf-8z hash namez[_ /]-zscram-Nz-plusc*tD] }||vs|cSyN)_known_hash_names)r>rows rB check_tablez&_get_hash_aliases..check_tables$ Cs{  rDz8(?i)^(?P[a-z]+)-?(?P\d)?-?(?P\d{3,4})?$r>revsize_z0normalizing unrecognized hash name %r => %r / %rz;normalizing unrecognized hash name and format %r => %r / %r) isinstancestrr resubstriplower startswithendswithmatchgrouplogrAreplacewarning) r>origrMresultm iana_namerNrO hashlib_names rB_get_hash_aliasesrcse D dC T7K8 66'3 2 2 4 5D x ABx == !9D F   LdSA !wwvuf= 3   I  t #I# D LY' M C|Y 0  ""  ||C-  Q,  3  ""rDc jdsdvr ttStj dd fd }|_d|_dz|_|S#t$rYFwxYw#t$rYnwxYwdk(rdd l m }|Sy ) a internal helper used by :func:`lookup_hash` -- lookup hash constructor by name :arg name: name (normalized to hashlib format, e.g. ``"sha256"``) :returns: hash constructor, e.g. ``hashlib.sha256()``; or None if hash can't be located. rP)new algorithmsrDc|SrJ)msgr> new_ssl_hashs rBconstz_get_hash_const..constsc* *rDrzMwrapper for hashlib.new(%r), generated by passlib.crypto.digest.lookup_hash()r#r)r#NrD) rWgetattrrAttributeErrorre__name__ __module____doc__ ValueErrorpasslib.crypto._md4r#)r>rkr#rjs` @rB_get_hash_constrts ??3 D0E$E 7D) ) ;;LT3  +$LOST  '        u}+ s"A$ A3$ A0/A03 A?>A?Fct t} ||S#ttf$rYnwxYw|rd}d}t|trOt |}|d sJ |k7rt |}|||<|St }|rtrz tvrrd fd }nkt|tr|St|r7|}t |j}|d t }|n||urnd}ntj|ddt||| }||||<|r.|D]) s|j d|fvs Jd z|| <+|S) af Returns a :class:`HashInfo` record containing information about a given hash function. Can be used to look up a hash constructor by name, normalize hash name representation, etc. :arg digest: This can be any of: * A string containing a :mod:`!hashlib` digest name (e.g. ``"sha256"``), * A string containing an IANA-assigned hash name, * A digest constructor function (e.g. ``hashlib.sha256``). Case is ignored, underscores are converted to hyphens, and various other cleanups are made. :param required: By default (True), this function will throw an :exc:`~passlib.exc.UnknownHashError` if no hash constructor can be found, or if the hash is not actually available. If this flag is False, it will instead return a dummy :class:`!HashInfo` record which will defer throwing the error until it's constructor function is called. This is mainly used by :func:`norm_hash_name`. :param return_unknown: .. deprecated:: 1.7.3 deprecated, and will be removed in passlib 2.0. this acts like inverse of **required**. :returns HashInfo: :class:`HashInfo` instance containing information about specified digest. Multiple calls resolving to the same hash should always return the same :class:`!HashInfo` instance. FTrrequiredc tdz)Nz4%r disabled for fips by passlib set_mock_fips_mode())rr)sourcer>s rBrkzlookup_hash..constAs !WZ^!^__rDNzdigest name or constructordigest)rknamesrwz%r already in cacherl)_hash_info_cacheKeyError TypeErrorrQrrcrrtmock_fips_mode_fips_algorithmsrcallabler>rExpectedTypeErrorget) rzreturn_unknownrwcache cache_by_name name_listrArk other_constr>s @rBrrsL E V} i    M&01%f- |  6>th7D E&MK % ^4D(D ` FH % & %egll3 |%d+    E !  "M##F,H(SS %y8 DD e  #Dyy4,6T8MPT8TT"d  # Ks   ct|d}|jr'td|jztj |dk(r |j S|dk(r |jStd|)a<Normalize hash function name (convenience wrapper for :func:`lookup_hash`). :arg name: Original hash function name. This name can be a Python :mod:`~hashlib` digest name, a SCRAM mechanism name, IANA assigned hash name, etc. Case is ignored, and underscores are converted to hyphens. :param format: Naming convention to normalize to. Possible values are: * ``"hashlib"`` (the default) - normalizes name to be compatible with Python's :mod:`!hashlib`. * ``"iana"`` - normalizes name to IANA-assigned hash function name. For hashes which IANA hasn't assigned a name for, this issues a warning, and then uses a heuristic to return a "best guess" name. :returns: Hash name, returned as native :class:`!str`. Frvznorm_hash_name(): rianazunknown format: ) runknownr error_textrPasslibRuntimeWarningr>rarr)r>formatrAs rBrrssc0 te ,D || !DOO 3S5N5NO yy 6 ~~9::rDcveZdZdZdZdZdZdZdZdZ dZ dZ d dZ dZ dZedZed Zed Zy) ra Record containing information about a given hash algorithm, as returned :func:`lookup_hash`. This class exposes the following attributes: .. autoattribute:: const .. autoattribute:: digest_size .. autoattribute:: block_size .. autoattribute:: name .. autoattribute:: iana_name .. autoattribute:: aliases .. autoattribute:: supported This object can also be treated a 3-element sequence containing ``(const, digest_size, block_size)``. NrhFc|dx_|d_|dd_fd}|#|tvrdz}n dz}d_||y |}|_ |j_ |j_ t|j|jk7rtdjz|jjk7r8t!djd|d|jt"j$yy#t $rR}d t |jvrd z}nd d t|jd |d}||Yd}~yd}~wwxYw)a initialize new instance. :arg const: hash constructor :arg names: list of 2+ names. should be list of ``(name, iana_name, ... 0+ aliases)``. names must be lower-case. only iana name may be None. rNcdfd }r| _|_ t\__y#t $rYywxYw)zc helper that installs stub constructor which throws specified error . c0tjrJ)rUnknownHashError)ryrir>s rBrkz8HashInfo.__init__..use_stub_const..consts**355rDNrl)rrk_fallback_infor<r=r})rirkr>rwselfs` rBuse_stub_constz)HashInfo.__init__..use_stub_constsN 6+!DODJ 4B44H1 $/  s: AAzunsupported hash: %rzunknown hash: %rTzdisabled for fipsz%r hash disabled for fipszinternal error in z constructor (z: )z"%r constructor failed sanity checkzinconsistent digest name: z resolved to z, which reports name as )r>raaliasesrKrrrrRrVtyperorkr<r=lenrz RuntimeErrorrrr) rrkr{rwrrihasherrr>s ` ` @rB__init__zHashInfo.__init__s`!8#tyqQRy  & =)),t3(4/# 3   7D ++// t{{} !1!1 1CdiiOP P 99 ! ))UDII/030I0I K "-  #c#hnn&661D87GKDQTIL^L^`cd 3   sD E,AE''E,cVd|jd|jd|jdS)Nz r<r=rs rB__repr__zHashInfo.__repr__s! 4++T__> >rDcH|j|j|jfSrJ)rkr<r=rs rB _as_tuplezHashInfo._as_tupleszz4++T__<rrrs rBsupported_by_fastpbkdf2z HashInfo.supported_by_fastpbkdf2$s6!  diitQ 7   " ..cbtsy t|jdddy#t$rYywxYw)z>helper to detect if hash is supported by hashlib.pbkdf2_hmac()NrrrTF)_stdlib_pbkdf2_hmacr>rrrs rBsupported_by_hashlib_pbkdf2z$HashInfo.supported_by_hashlib_pbkdf20s6#   4q 9  rT)rorp __qualname__rqr>rarrkr<r=rrrrrrrrrrhrDrBrrs* DIG EKJJG)-GKX>=''    rDr) rrrrr r2r3r4r5 shake_128 shake_256c0|atjy)zW UT helper which monkeypatches lookup_hash() internals to replicate FIPS mode. N)rr clear_cache)enables rB_set_mock_fips_moder_s NrDPASSLIB_MOCK_FIPS_MODEc#&K|] }|dz  yw)\Nrh.0xs rB rq=Aa$h=c#&K|] }|dz  yw)6Nrhrs rBrrrrrc t|}|\}}}|dk\sJdt|ts t|d}t |}||kDr||j }|}||kr |d||z zz }||j tj ||j tj |r fd}n fd}||_ |S)a This function returns an efficient HMAC function, hardcoded with a specific digest & key. It can be used via ``hmac = compile_hmac(digest, key)``. :arg digest: digest name or constructor. :arg key: secret key as :class:`!bytes` or :class:`!unicode` (unicode will be encoded using utf-8). :param multipart: request a multipart constructor instead (see return description). :returns: By default, the returned function has the signature ``hmac(msg) -> digest output``. However, if ``multipart=True``, the returned function has the signature ``hmac() -> update, finalize``, where ``update(msg)`` may be called multiple times, and ``finalize() -> digest_output`` may be repeatedly called at any point to calculate the HMAC digest so far. The returned object will also have a ``digest_info`` attribute, containing a :class:`lookup_hash` instance for the specified digest. This function exists, and has the weird signature it does, in order to squeeze as provide as much efficiency as possible, by omitting much of the setup cost and features of the stdlib :mod:`hmac` module. r)zblock size too smallkeyparamc<fd}j|fS)z)generated by compile_hmac(multipart=True)cp}|jj|jSrJupdaterz)outer _outer_copyinners rBfinalizez,compile_hmac..hmac..finalizes(#  U\\^,||~%rD)r)rr _inner_copyrs @rBhmaczcompile_hmac..hmacs ME &<<) )rDc}|j|}|j|j|jS)zgenerated by compile_hmac()r)rirrrrs rBrzcompile_hmac..hmacs;ME LL ME LL (<<> !rD) rrQbytesr rrz translate _TRANS_36copy _TRANS_5C digest_info) rzr multipartrrkr<r=klenrrrs @@rBrrts@f%K%0"E;  333 c5 !s%( s8D jCj! j w*t+,, i0166K i0166K * "#D KrDct|\}}}t|d}t|d}t|tst j |dd|dkr t d||}nMt|tst j |d d |d kr t d ||kDrt d |d|||z}t|D]} ||j}|d|S)a;pkcs#5 password-based key derivation v1.5 :arg digest: digest name or constructor. :arg secret: secret to use when generating the key. may be :class:`!bytes` or :class:`unicode` (encoded using UTF-8). :arg salt: salt string to use when generating key. may be :class:`!bytes` or :class:`unicode` (encoded using UTF-8). :param rounds: number of rounds to use to generate key. :arg keylen: number of bytes to generate (if omitted / ``None``, uses digest's native size) :returns: raw :class:`bytes` of generated key .. note:: This algorithm has been deprecated, new code should use PBKDF2. Among other limitations, ``keylen`` cannot be larger than the digest size of the specified hash. secretrsaltintroundsrrounds must be at least 1N int or Nonekeylenrzkeylen must be at least 0z keylength too large for digest: z > ) rr rQrrrrrrrz) rzrrrrrkr<r=blockrPs rBrrs<&1%8"E; fH -F D 'D fi (##FE8<< z455~  *##FM8DD !455 +  +/0 0 TME F^&e ##%& &>rDz>Lc t|d}tdt|}|j}ttst j dddkr td||}n7t|tst j |d d |dkr td ||zdz |z}|tkDr td |jrt|j||S|jrt|j||St|| t!|t# fd t%d|dzDd|S)apkcs#5 password-based key derivation v2.0 using HMAC + arbitrary digest. :arg digest: digest name or constructor. :arg secret: passphrase to use to generate key. may be :class:`!bytes` or :class:`unicode` (encoded using UTF-8). :arg salt: salt string to use when generating key. may be :class:`!bytes` or :class:`unicode` (encoded using UTF-8). :param rounds: number of rounds to use to generate key. :arg keylen: number of bytes to generate. if omitted / ``None``, will use digest's native output size. :returns: raw bytes of generated key .. versionchanged:: 1.7 This function will use the first available of the following backends: * `fastpbk2 `_ * :func:`hashlib.pbkdf2_hmac` (only available in py2 >= 2.7.8, and py3 >= 3.4) * builtin pure-python backend See :data:`passlib.crypto.digest.PBKDF2_BACKENDS` to determine which backend(s) are in use. rrrrrrrNrrzkeylen must be at least 1zkeylen too long for digestc 3VK|] }t|z"ywrJ) _pack_uint32)ri calc_block keyed_hmacrrs rBrzpbkdf2_hmac..cs0  :z$a*@A6Js&))r rr<rQrrrrr MAX_UINT32 OverflowErrorrrr>rrr_get_pbkdf2_looperr r) rzrrrrrr< block_countrrs `` @@rBrrsfHfH -F D 'Df%K))K fi (##FE8<< z455~  *##FM8DD !455K'!+ ;KZ899** !1!164PP ..";#3#3VT66RRff-J$K0J ;?+ v rDPASSLIB_PBKDF2_BACKENDany)r from-bytes)partialc"tt|SrJ)r_pbkdf2_looperr<s rBrrrs~{33rDctj}d}|||}t|dz D]}||}||||z}|j||S)zk py3-only implementation of pbkdf2 inner loop; uses 'int.from_bytes' + integer XOR bigr)r from_bytesrr )r<rrzrrBIGaccumrPs rBrrusd ^^ 63' # -A'F Z, ,E -~~k3//rDr)runpackr)sys_bitsr&c  t|S#t$rYnwxYwtr|dzs |dz }d|z}n4|dzs!tr|dz }d|z}|dz }n|dz }d|z}ntd|zt |}t |d j d t|Dd j d t|D }d jdi|}t|D] }|d||fzz }|djdi|z }t|dd}t t|}t } t||| | d} || _ | t|<| S)a) We want a helper function which performs equivalent of the following:: def helper(keyed_hmac, digest, rounds): accum = digest for _ in irange(rounds - 1): digest = keyed_hmac(digest) accum ^= digest return accum However, no efficient way to implement "bytes ^ bytes" in python. Instead, using approach where we dynamically compile a helper function based on digest size. Instead of a single `accum` var, this helper breaks the digest into a series of integers. It stores these in a series of`accum_` vars, and performs `accum ^= digest` by unpacking digest and perform xor for each "accum_ ^= digest_". this keeps everything in locals, avoiding excessive list creation, encoding or decoding, etc. :param digest_size: digest size to compile for, in bytes. (must be multiple of 4). :return: helper function with call signature outlined above. z=%dQz=%dQIrrz=%dIzunsupported digest size: %dz, c3&K|] }d|z yw)zacc_%dNrhrrs rBrz%_get_pbkdf2_looper..s E!A Erc3&K|] }d|z yw)zdig_%dNrhrs rBrz%_get_pbkdf2_looper..s!F1(Q,!Fr)r< accum_vars digest_varsa def helper(keyed_hmac, digest, rounds): '''pbkdf2 loop helper for digest_size={digest_size}''' unpack_digest = struct.unpack {accum_vars} = unpack_digest(digest) for _ in irange(1, rounds): digest = keyed_hmac(digest) {digest_vars} = unpack_digest(digest) z acc_%d ^= dig_%d z% return struct.pack({accum_vars}) z9exec)rstructhelperrh) _looper_cacher} _have_64_bitNotImplementedErrorrdictjoinrrcompileeval __source__) r<countfmtrtdictryrcodegdictldictrs rBrrs<  - -     c 1 A%E5.Cs"$)o %)un&&Ck&QR R #yy Eve} EE !Fu !FF J & >A 41v= =F > G@GGP%PP vZ\bcF62 T5% x  &F  &, k" s  r)rhexlify)r) int_to_bytesctSrJ)rrs rBrrsrDct}t||d}t|dz D]}||}|t||dz}!t|t |S)Nr)r)_hexlifyrrrr)rrzrrrrPs rBrrsaGFOR( # .A'F S"- -E .E3v;//rDr fastpbkdf2z hashlib-sslzbuiltin-rgffffff?r)FT)rr)FrJ)Orq __future__rrlogging getLoggerror[rrrpdebug ImportErrorrSosrrwarningsrrrpasslibr passlib.utilsr r r r r rpasslib.utils.compatrrrrrpasslib.utils.decorr__all__r MAX_UINT64rKrrCr|rcrtrclearrrrrr;rrenvironrrrrrpackr_force_backend functoolsrrr_builtin_backendrr r binasciirrrPBKDF2_BACKENDSPBKDF2_SPEED_FACTOR)bs0rBr4s 'g''1 :%%2 >?" ;11[[1 &  H   !( =#@-b04sl+00  ;Fd}d` ( 2::>>2 34 == = == = K`9~d|  aP 89BU>2 2!4 0$66&NLMdL  / // -*0!%%.22+&L4(Md!! ?"o%S ds)(H!H% H HHHH