File: //opt/alt/python37/lib64/python3.7/site-packages/cryptography/__pycache__/fernet.cpython-37.pyc
B
\��`� � @ s� d dl mZmZmZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z d dl m
Z
d dlmZmZ d dlmZmZmZ d dlmZ G dd � d e�Zd
ZG d d � d e�ZG d
d� de�Z dS )� )�absolute_import�division�print_functionN)�InvalidSignature)�default_backend)�hashes�padding)�Cipher�
algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__�
__module__� __qualname__� r r �F/opt/alt/python37/lib64/python3.7/site-packages/cryptography/fernet.pyr
s r
�< c @ s` e Zd Zddd�Zedd� �Zdd� Zdd � Zdd
d �Zd d
� Z e
dd� �Z dd� Z dd� Z
dS )�FernetNc C sR |d krt � }t�|�}t|�dkr,td��|d d� | _|dd � | _|| _d S )N� z4Fernet key must be 32 url-safe base64-encoded bytes.� )r �base64�urlsafe_b64decode�len�
ValueError� _signing_key�_encryption_key�_backend)�self�key�backendr r r �__init__ s
zFernet.__init__c C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key, s zFernet.generate_keyc C s$ t t�� �}t�d�}| �|||�S )Nr )�int�timer# r$ �_encrypt_from_parts)r �data� current_time�ivr r r �encrypt0 s
zFernet.encryptc C s� t |t�std��t�tjj��� }|� |�|�
� }t t�| j �t
�|�| j��� }|� |�|�
� }dt�d|� | | }t| jt�� | jd�} | � |� | �
� }
t�||
�S )Nzdata must be bytes.� �z>Q)r )�
isinstance�bytes� TypeErrorr �PKCS7r
�AES�
block_size�padder�update�finalizer r r �CBCr � encryptor�struct�packr r r �SHA256r r" ) r r* r+ r, r5 Z padded_datar9 �
ciphertextZ basic_parts�hZhmacr r r r) 5 s
zFernet._encrypt_from_partsc C s t �|�\}}| �|||�S )N)r �_get_unverified_token_data�
_decrypt_data)r �token�ttl� timestampr* r r r �decryptI s zFernet.decryptc C s t �|�\}}| �|� |S )N)r r? �_verify_signature)r rA rC r* r r r �extract_timestampM s
zFernet.extract_timestampc C s� t | t�std��yt�| �}W n ttjfk
r> t�Y nX |rTt� |d�dkrXt�yt
� d|dd� �\}W n t
j k
r� t�Y nX ||fS )Nztoken must be bytes.r � z>Q� � )
r/ r0 r1 r r �binascii�Errorr
�sixZ
indexbytesr: �unpack�error)rA r* rC r r r r? S s
z!Fernet._get_unverified_token_datac C s\ t | jt�� | jd�}|�|d d� � y|�|dd � � W n tk
rV t�Y nX d S )N)r i��) r r r r< r r6 Zverifyr r
)r r* r> r r r rE f s zFernet._verify_signaturec C s� t t�� �}|d k r4|| |k r$t�|t |k r4t�| �|� |dd� }|dd� }tt�| j�t �
|�| j �� � }|�
|�}y||�� 7 }W n tk
r� t�Y nX t�tjj��� } | �
|�}
y|
| �� 7 }
W n tk
r� t�Y nX |
S )NrI � i��)r' r( r
�_MAX_CLOCK_SKEWrE r r
r3 r r r8 r � decryptorr6 r7 r r r2 r4 �unpadder) r r* rC rB r+ r, r= rQ Zplaintext_paddedrR Zunpaddedr r r r@ n s.
zFernet._decrypt_data)N)N)r r r r! � classmethodr& r- r) rD rF � staticmethodr? rE r@ r r r r r s
r c @ s. e Zd Zdd� Zdd� Zdd� Zd
dd �ZdS ) � MultiFernetc C s t |�}|std��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r Zfernetsr r r r! � s
zMultiFernet.__init__c C s | j d �|�S )Nr )rW r- )r �msgr r r r- � s zMultiFernet.encryptc C sj t �|�\}}x<| jD ].}y|�||d �}P W q tk
rB Y qX qW t�t�d�}| jd �|||�S )Nr r )r r? rW r@ r
r# r$ r) )r rX rC r* �f�pr, r r r �rotate� s
zMultiFernet.rotateNc C s: x0| j D ]&}y |�||�S tk
r, Y qX qW t�d S )N)rW rD r
)r rX rB rY r r r rD � s
zMultiFernet.decrypt)N)r r r r! r- r[ rD r r r r rU � s rU ) Z
__future__r r r r rJ r# r: r( rL Zcryptography.exceptionsr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr r
r Z#cryptography.hazmat.primitives.hmacr � Exceptionr
rP �objectr rU r r r r �<module> s p