File: //opt/alt/python38/lib64/python3.8/site-packages/cryptography/__pycache__/fernet.cpython-38.pyc
U
e�_� � @ s� d dl mZmZmZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z d dl m
Z
d dlmZmZ d dlmZmZmZ d dlmZ G dd � d e�Zd
ZG d d � d e�ZG d
d� de�Z dS )� )�absolute_import�division�print_functionN)�InvalidSignature)�default_backend)�hashes�padding)�Cipher�
algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__�
__module__� __qualname__� r r �
/fernet.pyr
s r
�< c @ s` e Zd Zddd�Zedd� �Zdd� Zdd � Zdd
d �Zd d
� Z e
dd� �Z dd� Z dd� Z
dS )�FernetNc C sR |d krt � }t�|�}t|�dkr,td��|d d� | _|dd � | _|| _d S )N� z4Fernet key must be 32 url-safe base64-encoded bytes.� )r �base64�urlsafe_b64decode�len�
ValueError� _signing_key�_encryption_key�_backend)�self�key�backendr r r �__init__ s
�zFernet.__init__c C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key, s zFernet.generate_keyc C s$ t t�� �}t�d�}| �|||�S )Nr )�int�timer# r$ �_encrypt_from_parts)r �data� current_time�ivr r r �encrypt0 s
zFernet.encryptc C s� t |t�std��t�tjj��� }|� |�|�
� }t t�| j �t
�|�| j��� }|� |�|�
� }dt�d|� | | }t| jt�� | jd�} | � |� | �
� }
t�||
�S )Nzdata must be bytes.� ��>Q�r )�
isinstance�bytes� TypeErrorr �PKCS7r
�AES�
block_size�padder�update�finalizer r r �CBCr � encryptor�struct�packr r r �SHA256r r" ) r r* r+ r, r7 Z padded_datar; �
ciphertextZ basic_parts�hZhmacr r r r) 5 s
��
zFernet._encrypt_from_partsc C s t �|�\}}| �|||�S �N)r �_get_unverified_token_data�
_decrypt_data)r �token�ttl� timestampr* r r r �decryptI s zFernet.decryptc C s t �|�\}}| �|� |S rA )r rB �_verify_signature)r rD rF r* r r r �extract_timestampM s
zFernet.extract_timestampc C s� t | t�std��zt�| �}W n ttjfk
r> t�Y nX |rTt� |d�dkrXt�zt
� d|dd� �\}W n t
j k
r� t�Y nX ||fS )Nztoken must be bytes.r � r/ � � )
r1 r2 r3 r r �binascii�Errorr
�sixZ
indexbytesr< �unpack�error)rD r* rF r r r rB S s
z!Fernet._get_unverified_token_datac C s\ t | jt�� | jd�}|�|d d� � z|�|dd � � W n tk
rV t�Y nX d S )Nr0 ���) r r r r> r r8 Zverifyr r
)r r* r@ r r r rH f s zFernet._verify_signaturec C s� t t�� �}|d k r4|| |k r$t�|t |k r4t�| �|� |dd� }|dd� }tt�| j�t �
|�| j �� � }|�
|�}z||�� 7 }W n tk
r� t�Y nX t�tjj��� } | �
|�}
z|
| �� 7 }
W n tk
r� t�Y nX |
S )NrL � rR )r' r( r
�_MAX_CLOCK_SKEWrH r r
r5 r r r: r � decryptorr8 r9 r r r4 r6 �unpadder) r r* rF rE r+ r, r? rU Zplaintext_paddedrV Zunpaddedr r r rC n s4
�
zFernet._decrypt_data)N)N)r r r r! � classmethodr& r- r) rG rI � staticmethodrB rH rC r r r r r s
r c @ s. e Zd Zdd� Zdd� Zdd� Zd
dd �ZdS ) � MultiFernetc C s t |�}|std��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r Zfernetsr r r r! � s �zMultiFernet.__init__c C s | j d �|�S )Nr )r[ r- )r �msgr r r r- � s zMultiFernet.encryptc C sj t �|�\}}| jD ]2}z|�||d �}W qLW q tk
rD Y qX qt�t�d�}| jd �|||�S )Nr r )r rB r[ rC r
r# r$ r) )r r\ rF r* �f�pr, r r r �rotate� s
zMultiFernet.rotateNc C s< | j D ],}z|�||�W S tk
r0 Y qX qt�d S rA )r[ rG r
)r r\ rE r] r r r rG � s
zMultiFernet.decrypt)N)r r r r! r- r_ rG r r r r rY � s rY ) Z
__future__r r r r rM r# r< r( rO Zcryptography.exceptionsr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr r
r Z#cryptography.hazmat.primitives.hmacr � Exceptionr
rT �objectr rY r r r r �<module> s p