HOME

�
�
5Xc@s�
dZd
dl
Z
d
dlZeje�
Zd
dlmZ
d
dlm	Z	m
Z
mZ
d
dlm
Z
mZ
d
dlmZmZmZmZmZ
d
dlmZ
d
dljjZdd	d
dgZdZd
�Zd�Zd�Zd�Z dej!ej"ej#ej$fd��YZ%d	ej"ej&ej#ej$fd��YZ'd
ej#ej$fd��YZ(dej!ej#ej$fd��YZ)dS(sFpasslib.handlers.des_crypt - traditional unix (DES) crypt and variantsi����N(
twarn(t
safe_cryptt
test_cryptt
to_unicode(th64th64big(tbyte_elem_valuet
ut
uascii_to_strtunicodetsuppress_cause(
tdes_encrypt_int_blockt	des_cryptt
bsdi_crypttbigcrypttcrypt16t
c

Cstd
�t
|d �
D�
�
S(s�convert secret to 64-bit DES key.

    this only uses the first 8 bytes of the secret,
    and discards the high 8th bit of each byte at that.
    a null parity bit is inserted after every 7th bit of the output.
    c
ss1|]'\}
}t|�
d@d
|
d>V
qdS(ii9iN(
R(t.0t
it
c((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pys	<genexpr>(s
i(tsumt	enumerate(
tsecret((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt_crypt_secret_to_keys	
cCstj
|
�
}t|t�r0|jd
�
}nt|krQtjjt	�
�
nt
|�
}t|d|d�}tj
|�
S(s pure-python backed for des_cryptsutf-8ii(Rtdecode_int12t
isinstanceR	tencodet_BNULLtuhtexctNullPasswordErrorRRRRtencode_int64(Rtsaltt
salt_valuet	key_valuetresult((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt_raw_des_crypt+s


c
Cskt|�
}
d
}t
|�
}xF||krf|d
}t|||!�
}t|
|
�|A}
|}q!W|
S(s,convert secret to DES key used by bsdi_crypti(RtlenR(RR"tidxtendtnextt	tmp_value((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt_bsdi_secret_to_keyIs









cCstj
|�
}t|t�r0|jd
�
}nt|krQtjjt	�
�
nt
|�
}t|d||
�}tj
|�
S(s"pure-python backend for bsdi_cryptsutf-8i(Rtdecode_int24RR	RRRRRR
R*RRR(RtroundsR R!R"R#((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt_raw_bsdi_cryptUs

cBs�eZ
dZd
ZdZejZdZdZ	Z
ejZdZe
jed�
e
je
jB�Zed��
Zd	�Zd
�ZdZed
��
Zd�Zed��
Zd�ZRS(s�This class implements the des-crypt password hash, and follows the :ref:`password-hash-api`.

    It supports a fixed-length salt.

    The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:

    :type salt: str
    :param salt:
        Optional salt string.
        If not specified, one will be autogenerated (this is recommended).
        If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.

    :param bool truncate_error:
        By default, des_crypt will silently truncate passwords larger than 8 bytes.
        Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
        to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.

        .. versionadded:: 1.7

    :type relaxed: bool
    :param relaxed:
        By default, providing an invalid value for one of the other
        keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
        and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
        will be issued instead. Correctable errors include
        ``salt`` strings that are too long.

        .. versionadded:: 1.6
    RR ttruncate_erroriiisU
        ^
        (?P<salt>[./a-z0-9]{2})
        (?P<chk>[./a-z0-9]{11})?
        $cCs@t|
d
d�}
|
d |
d}}|d|d|p<d�S(NtasciithashiR tchecksum(RtNone(tclsR0R tchk((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pytfrom_string�s

c
Cs&td
�
|j
|jf}
t|
�
S(Ns%s%s(RR R1R(tselfR0((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt	to_string�s

cCs&|jr|j
|
�

n|j|
�
S(
N(tuse_defaultst_check_truncate_policyt_calc_checksum_backend(R6R((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt_calc_checksum�s	
tos_crypttbuiltinc

Cs+td
d�r#|j
|j�

tStSdS(Nttestt
abgOeLfPimXQo(Rt_set_calc_checksum_backendt_calc_checksum_os_crypttTruetFalse(
R3((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt_load_backend_os_crypt�s

cCs1t|
|j
�}|r |d
S|j|
�
SdS(Ni(R
R t_calc_checksum_builtin(R6RR0((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRA�s
c

Cs|j|j
�

tS(
N(R@RERB(
R3((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt_load_backend_builtin�s
cCs"t|
|j
jd
�
�jd
�
S(NR/(R$R Rtdecode(R6R((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRE�s
(ssaltR.(R<R=(t__name__t
__module__t__doc__tnametsetting_kwdsRtHASH64_CHARStchecksum_charst
checksum_sizet
min_salt_sizet
max_salt_sizet
salt_charst
truncate_sizetretcompileRt
Xt
It_hash_regextclassmethodR5R7R;tbackendsRDRARFRE(((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRps$
	


				
	cBs�eZ
dZd
ZdZdZejZdZ	Z
ejZdZdZ
dZd	Zejed
�
ejejB�Zed��
Zd�ZeZed
��
Zed��
Zd�ZdZed��
Zd�Z ed��
Z!d�Z"RS(s
This class implements the BSDi-Crypt password hash, and follows the :ref:`password-hash-api`.

    It supports a fixed-length salt, and a variable number of rounds.

    The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:

    :type salt: str
    :param salt:
        Optional salt string.
        If not specified, one will be autogenerated (this is recommended).
        If specified, it must be 4 characters, drawn from the regexp range ``[./0-9A-Za-z]``.

    :type rounds: int
    :param rounds:
        Optional number of rounds to use.
        Defaults to 5001, must be between 1 and 16777215, inclusive.

    :type relaxed: bool
    :param relaxed:
        By default, providing an invalid value for one of the other
        keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
        and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
        will be issued instead. Correctable errors include ``rounds``
        that are too small or too large, and ``salt`` strings that are too long.

        .. versionadded:: 1.6

    .. versionchanged:: 1.6
        :meth:`hash` will now issue a warning if an even number of rounds is used
        (see :ref:`bsdi-crypt-security-issues` regarding weak DES keys).
    R
R R,iii�i
i���tlinears�
        ^
        _
        (?P<rounds>[./a-z0-9]{4})
        (?P<salt>[./a-z0-9]{4})
        (?P<chk>[./a-z0-9]{11})?
        $cCs�t|
d
d�}
|j
j|
�
}|s?tjj|�
�
n|jddd�\}}}|dtj|j	d
�
�
d|d|�S(NR/R0R,R R4R1(
RRXtmatchRRtInvalidHashErrortgroupRR+R(R3R0t
mR,R R4((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR54
s







c
Cs>td
�
t
j|j�
jd�
|j|jf}
t|
�
S(Ns_%s%s%sR/(RRtencode_int24R,RGR R1R(R6R0((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR7A
s
!

c
Ks?tt
|�j|
�}|jd
@s;tdtjj�
n|S(Ni
sHbsdi_crypt rounds should be odd, as even rounds may reveal weak DES keys(tsuperR
tusingtdefault_roundsRRRtPasslibSecurityWarning(R3tkwdstsubcls((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRbN
s




c
Cstt
|�j�}
|
d
BS(Ni
(RaR
t_generate_rounds(R3R,((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRgW
sc
Ks'|jd
@st
Stt|�j|
�S(Ni
(R,RBRaR
t_calc_needs_update(R6Re((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRhe
s

R<R=c

Cs+td
d�r#|j
|j�

tStSdS(NR>s_/...lLDAxARksGCHin.(RR@RARBRC(
R3((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRDt
s

cCs:|j�}t
|
|�}|r)|d
S|j|
�
SdS(Ni����(R7R
RE(R6RtconfigR0((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRA|
s



c

Cs|j|j
�

tS(
N(R@RERB(
R3((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRF�
s
cCs(t|
|j
|jjd
�
�jd
�
S(NR/(R-R,R RRG(R6R((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRE�
s
(ssaltsrounds(sos_cryptsbuiltin(#RHRIRJRKRLRORRMRNRPRQRRRct
min_roundst
max_roundstrounds_costRTRURRVRWRXRYR5R7RBt_avoid_even_roundsRbRgRhRZRDRARFRE(((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR
�s0


	

	


	
			
	cBs�eZ
dZd
Zd	ZejZdZZ	ejZ
eje
d�
ejejB�Zed��
Zd�Zed�
Zd�ZRS(
sgThis class implements the BigCrypt password hash, and follows the :ref:`password-hash-api`.

    It supports a fixed-length salt.

    The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:

    :type salt: str
    :param salt:
        Optional salt string.
        If not specified, one will be autogenerated (this is recommended).
        If specified, it must be 22 characters, drawn from the regexp range ``[./0-9A-Za-z]``.

    :type relaxed: bool
    :param relaxed:
        By default, providing an invalid value for one of the other
        keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
        and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
        will be issued instead. Correctable errors include
        ``salt`` strings that are too long.

        .. versionadded:: 1.6
    RR isX
        ^
        (?P<salt>[./a-z0-9]{2})
        (?P<chk>([./a-z0-9]{11})+)?
        $cCsjt|
d
d�}
|j
j|
�
}|s?tjj|�
�
n|jdd�\}}|d|d|�S(NR/R0R R4R1(RRXR\RRR]R^(R3R0R_R R4((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR5�
s




c
Cs&td
�
|j
|jf}
t|
�
S(Ns%s%s(RR R1R(R6R0((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR7�
s

cCsGtt
|�j|
d
|�

}
t|
�
drCtjj|�
�
n|
S(Ntrelaxedi(RaRt_norm_checksumR%RRR](R6R1Rn((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyRo�
s



cCs�t|
t
�r!|
jd
�
}
nt|
|jjd�
�}d}t|
�
}xA||kr�|d}|t|
||!|dd!�7}|}qQW|jd�
S(Nsutf-8R/ii����i����(RR	RR$R R%RG(R6RR4R&R'R(((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR;�
s








!


(
ssalt(RHRIRJRKRLRRMRNRPRQRRRTRURRVRWRXRYR5R7RCRoR;(((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR�
s

	

					cBs�eZ
dZd
ZdZdZejZdZ	Z
ejZdZe
jed�
e
je
jB�Zed��
Zd	�Zd
�ZRS(s�This class implements the crypt16 password hash, and follows the :ref:`password-hash-api`.

    It supports a fixed-length salt.

    The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:

    :type salt: str
    :param salt:
        Optional salt string.
        If not specified, one will be autogenerated (this is recommended).
        If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.

    :param bool truncate_error:
        By default, crypt16 will silently truncate passwords larger than 16 bytes.
        Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
        to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.

        .. versionadded:: 1.7

    :type relaxed: bool
    :param relaxed:
        By default, providing an invalid value for one of the other
        keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
        and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
        will be issued instead. Correctable errors include
        ``salt`` strings that are too long.

        .. versionadded:: 1.6
    RR R.iiisU
        ^
        (?P<salt>[./a-z0-9]{2})
        (?P<chk>[./a-z0-9]{22})?
        $cCsjt|
d
d�}
|j
j|
�
}|s?tjj|�
�
n|jdd�\}}|d|d|�S(NR/R0R R4R1(RRXR\RRR]R^(R3R0R_R R4((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR5+s




c
Cs&td
�
|j
|jf}
t|
�
S(Ns%s%s(RR R1R(R6R0((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR74s

cCs�t|
t
�r!|
jd
�
}
n|jr:|j|
�

nytj|jjd�
�
}Wn#tk
r~


t	td�
�
�
n
Xt
|
�
}t|d|d�}t
|
dd!�
}t|d|d�}tj
|�
tj
|�
}|jd�
S(	Nsutf-8R/sinvalid chars in saltiiiii(RR	RR8R9RRR t
ValueErrorR
RRRRRG(R6RR!tkey1tresult1tkey2tresult2R4((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR;;s

	





(ssaltstruncate_error(RHRIRJRKRLRORRMRNRPRQRRRSRTRURRVRWRXRYR5R7R;(((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyR�
s

	

				(*RJRTtloggingt	getLoggerRHtlogtwarningsRt
passlib.utilsR
RRtpasslib.utils.binaryRRtpasslib.utils.compatRRRR	R
tpasslib.crypto.desRtpasslib.utils.handlerstutilsthandlersRt__all__RRR$R*R-t
TruncateMixintHasManyBackendstHasSalttGenericHandlerRt	HasRoundsR
RR(((s>/usr/lib/python2.7/site-packages/passlib/handlers/des_crypt.pyt<module>
s,



(




					+�+�S