File: //opt/cppython/lib/python3.8/site-packages/cryptography/__pycache__/fernet.cpython-38.pyc
U
KD�g � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m
Z
d dl m Z m
Z
d dlmZmZmZ d dlmZ G dd � d e�Zd
ZG d d � d �ZG d
d� d�ZdS )� )� annotationsN)�utils)�InvalidSignature)�hashes�padding)�Cipher�
algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__�
__module__� __qualname__� r r �@/opt/cppython/lib/python3.8/site-packages/cryptography/fernet.pyr s r �< c @ s� e Zd Zd)dddd�dd�Zedd �d
d ��Zddd �d
d�Zdddd�dd�Zddddd�dd�Zd*dddd�dd�Z ddddd�dd �Z
ddd �d d �Z e dd d �d!d"��Z
ddd �d#d$�Zddd%dd&�d'd(�ZdS )+�FernetN� bytes | strz
typing.Any�None)�key�backend�returnc
C sr zt �|�}W n. tjk
r< } ztd�|�W 5 d }~X Y nX t|�dkrRtd��|d d� | _|dd � | _d S )Nz4Fernet key must be 32 url-safe base64-encoded bytes.� � )�base64�urlsafe_b64decode�binascii�Error�
ValueError�len� _signing_key�_encryption_key)�selfr r �excr r r �__init__ s �� �zFernet.__init__�bytes)r c C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key/ s zFernet.generate_key)�datar c C s | � |tt�� ��S �N��encrypt_at_time�int�time)r" r+ r r r �encrypt3 s zFernet.encryptr/ )r+ � current_timer c C s t �d�}| �|||�S )Nr )r' r( �_encrypt_from_parts)r" r+ r2 �ivr r r r. 6 s
zFernet.encrypt_at_time)r+ r2 r4 r c C s� t �d|� t�tjj��� }|�|�|� � }t
t�| j �t �
|���� }|�|�|� � }d|jddd� | | }t| jt�� �} | �|� | � � }
t�||
�S )Nr+ � �� �big)�length� byteorder)r � _check_bytesr �PKCS7r �AES�
block_size�padder�update�finalizer r! r �CBC� encryptor�to_bytesr
r r �SHA256r r& ) r" r+ r2 r4 r> Z padded_datarB �
ciphertextZ basic_parts�h�hmacr r r r3 : s(
� ����
zFernet._encrypt_from_parts�
int | None)�token�ttlr c C s: t �|�\}}|d kr d }n|tt�� �f}| �|||�S r, )r �_get_unverified_token_datar/ r0 �
_decrypt_data)r" rI rJ � timestampr+ � time_infor r r �decryptS s
zFernet.decrypt)rI rJ r2 r c C s0 |d krt d��t�|�\}}| �||||f�S )Nz6decrypt_at_time() can only be used with a non-None ttl)r r rK rL )r" rI rJ r2 rM r+ r r r �decrypt_at_time[ s �zFernet.decrypt_at_time)rI r c C s t �|�\}}| �|� |S r, )r rK �_verify_signature)r" rI rM r+ r r r �extract_timestampe s
zFernet.extract_timestampztuple[int, bytes]c C s� t | ttf�std��zt�| �}W n ttjfk
rB t�Y nX |rT|d dkrXt�t |�dk rht�t
j |dd� dd�}||fS )Nztoken must be bytes or strr � � � r7 )r9 ) �
isinstance�strr% � TypeErrorr r r r r r r/ �
from_bytes)rI r+ rM r r r rK k s
z!Fernet._get_unverified_token_datac C sV t | jt�� �}|�|d d� � z|�|dd � � W n tk
rP t�Y nX d S )N���)r
r r rD r? �verifyr r )r" r+ rF r r r rQ ~ s zFernet._verify_signatureztuple[int, int] | None)r+ rM rN r c C s� |d k r0|\}}|| |k r t �|t |k r0t �| �|� |dd� }|dd� }tt�| j�t�|��� � }|�
|�} z| |� � 7 } W n t k
r� t �Y nX t
�tjj��� }
|
�
| �} z| |
� � 7 } W n t k
r� t �Y nX | S )NrT � rZ )r �_MAX_CLOCK_SKEWrQ r r r< r! r rA � decryptorr? r@ r r r; r= �unpadder) r" r+ rM rN rJ r2 r4 rE r^ Zplaintext_paddedr_ Zunpaddedr r r rL � s2
�
zFernet._decrypt_data)N)N)r r
r r$ � classmethodr* r1 r. r3 rO rP rR � staticmethodrK rQ rL r r r r r s �
r c @ s� e Zd Zdd�dd�Zddd�dd�Zdd dd
�d d �Zd
dd�dd�Zdd
ddd�dd�Zd
d d dd�dd�Zd
d d�dd�Z dS )� MultiFernetztyping.Iterable[Fernet])�fernetsc C s t |�}|std��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r" rc r r r r$ � s �zMultiFernet.__init__r% )�msgr c C s | � |tt�� ��S r, r- )r" rf r r r r1 � s zMultiFernet.encryptr/ )rf r2 r c C s | j d �||�S )Nr )re r. )r" rf r2 r r r r. � s zMultiFernet.encrypt_at_timer c C sj t �|�\}}| jD ]2}z|�||d �}W qLW q tk
rD Y qX qt�t�d�}| jd �|||�S )Nr r )r rK re rL r r' r( r3 )r" rf rM r+ �f�pr4 r r r �rotate� s
zMultiFernet.rotateNrH )rf rJ r c C s< | j D ],}z|�||�W S tk
r0 Y qX qt�d S r, )re rO r )r" rf rJ rg r r r rO � s
zMultiFernet.decrypt)rf rJ r2 r c C s> | j D ].}z|�|||�W S tk
r2 Y qX qt�d S r, )re rP r )r" rf rJ r2 rg r r r rP � s
zMultiFernet.decrypt_at_timec C s: | j D ]*}z|�|�W S tk
r. Y qX qt�d S r, )re rR r )r" rf rg r r r rR � s
z MultiFernet.extract_timestamp)N)
r r
r r$ r1 r. ri rO rP rR r r r r rb � s
rb )�
__future__r r r r' r0 �typingZ cryptographyr Zcryptography.exceptionsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr r r Z#cryptography.hazmat.primitives.hmacr
� Exceptionr r] r rb r r r r �<module> s