XR_5dZddlmZddlZejeZddlmZm Z m Z ddl m Z ddl mZmZddlmcmZddgZd Zd Zd Zd Zd ZddZGddejejZGddejeZGddeZ dS)z0passlib.handlers.md5_crypt - md5-crypt algorithm)md5N) safe_crypt test_crypt repeat_string)h64)unicodeu md5_crypt apr_md5_crypts$1$s$apr1$))rrr )rrrrr )rrr)rrrrr)rr rr)rrrrr) r rr r r r Fc"t|tr|d}t|ts Jdt|vr$t jtt|}t|ts Jd|d}t|dks Jd|rt}nt}t||z|z }t||z|z}|j}|t|||}|dd} |r||dzrtn| |dz}|| } ||z} ||z} || | | |z||z|| zgfd t D} | }d }|rU| D]K\}}t|t||z z }L|dz}|U| dd D]K\}}t|t||z z }Lt#j|t&dS) aperform raw md5-crypt calculation this function provides a pure-python implementation of the internals for the MD5-Crypt algorithms; it doesn't handle any of the parsing/validation of the hash strings themselves. :arg pwd: password chars/bytes to hash :arg salt: salt chars to use :arg use_apr: use apache variant :returns: encoded checksum chars zutf-8zpwd not unicode or byteszsalt not unicodeasciirzsalt too largeNrc6g|]\}}||fSr").0evenoddpermss z"_raw_md5_crypt..s* J J J94eDk5: & J J J) isinstancerencodebytes_BNULLuhexcNullPasswordErrorr len _APR_MAGIC _MD5_MAGICrdigestupdater_c_digest_offsetsrencode_transposed_bytes_transpose_mapdecode)pwdsaltuse_aprpwd_lenmagicdba_ctx a_ctx_updateievenchardapwd_pwdpwd_saltdatadcblocksr$r%r&s @r'_raw_md5_cryptrL,s4#w"jj!! c5 ! !==#==== }}f&&y111#hhG dG $ $88&8888 ;;w  D t99q===*===  S4Z#    % % ' 'B e d" # #E>0022233::< : : A A' J JJr)cVeZdZdZdZdZejZdZ ejZ e dZ dZ dS) _MD5_Commonz+common code for md5_crypt and apr_md5_crypt)r= salt_sizercZtj||j|\}}|||S)N)handler)r=checksum)r0 parse_mc2ident)clshashr=chks r' from_stringz_MD5_Common.from_strings3Lsy#>>> css++++r)cLtj|j|j|jSN)r0 render_mc2rUr=rS)selfs r' to_stringz_MD5_Common.to_strings}TZDMBBBr)N)__name__ __module__ __qualname____doc__ setting_kwds checksum_sizer0 HASH64_CHARSchecksum_chars max_salt_size salt_chars classmethodrYr^r"r)r'rNrNsh55 )LM_NMJ ,,[,CCCCCr)rNcheZdZdZdZedZdZedZ dZ edZ dZ dS) r aThis class implements the MD5-Crypt password hash, and follows the :ref:`password-hash-api`. It supports a variable-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 0-8 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :type salt_size: int :param salt_size: Optional number of characters to use when autogenerating new salts. Defaults to 8, but can be any value between 0 and 8. (This is mainly needed when generating Cisco-compatible hashes, which require ``salt_size=4``). :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 z$1$)os_cryptbuiltinc^tddr||jdSdS)Ntestz$1$test$pi/xDtU5WFVRqYS6BMU8X/TF)r_set_calc_checksum_backend_calc_checksum_os_cryptrVs r'_load_backend_os_cryptz md5_crypt._load_backend_os_crypts6 f> ? ?   * *3+F G G G45r)c4|j|jz}t||}|||S||r#t |t |dzkr!t j||||ddS)Nr*i) rUr=r_calc_checksum_builtin startswithr3r0r1CryptBackendError)r]secretconfigrWs r'rpz!md5_crypt._calc_checksum_os_cryptsdi'&&)) <..v66 6v&& ?#d))s6{{R7G*G*G&**4>> >CDDzr)c:||jdS)NT)rortrqs r'_load_backend_builtinzmd5_crypt._load_backend_builtin%s &&s'ABBBtr)c,t||jSr[rLr=r]rws r'rtz md5_crypt._calc_checksum_builtin*sfdi000r)N) r_r`rarbnamer rUbackendsrirrrprzrtr"r)r'r r s@ D AeHHE'H [   [11111r)c2eZdZdZdZedZdZdS)r apThis class implements the Apr-MD5-Crypt password hash, and follows the :ref:`password-hash-api`. It supports a variable-length salt. The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords: :type salt: str :param salt: Optional salt string. If not specified, one will be autogenerated (this is recommended). If specified, it must be 0-8 characters, drawn from the regexp range ``[./0-9A-Za-z]``. :type relaxed: bool :param relaxed: By default, providing an invalid value for one of the other keywords will result in a :exc:`ValueError`. If ``relaxed=True``, and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning` will be issued instead. Correctable errors include ``salt`` strings that are too long. .. versionadded:: 1.6 z$apr1$c0t||jdS)NT)r>r|r}s r'_calc_checksumzapr_md5_crypt._calc_checksumQsfdi>>>>r)N)r_r`rarbr~r rUrr"r)r'r r 1sA2 D AhKKE ?????r))F)!rbhashlibrlogging getLoggerr_log passlib.utilsrrrpasslib.utils.binaryrpasslib.utils.compatrr passlib.utils.handlersutilshandlersr0__all__r/r5r4r8r:rLHasSaltGenericHandlerrNHasManyBackendsr r r"r)r'rs66 'g'11@?????????$$$$$$++++++++#########     HOKOKOKOKhCCCCC"*b/CCC@K1K1K1K1K1"KK1K1K1b!?!?!?!?!?K!?!?!?!?!?r)