File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/IO/__pycache__/_PBES.cpython-310.pyc
Back
o ;j N � @ s� d dl Z d dlmZ d dlmZ d dlmZmZmZmZ d dl m Z d dl m Z m Z d dlmZmZmZ dZd Zd Zd Zd Zd ZdZdZdZdZdZ dZ dZ dZ dZ G dd� de!�Z"G dd� de#�Z$G dd � d e#�Z%dS ) � N)�Hash)�Random)� DerSequence�DerOctetString� DerObjectId� DerInteger)�AES)�pad�unpad)�PBKDF1�PBKDF2�scryptz1.2.840.113549.1.5.3z1.2.840.113549.1.5.6z1.2.840.113549.1.5.10z1.2.840.113549.1.5.11z1.2.840.113549.1.5.13z1.2.840.113549.1.5.12z1.3.6.1.4.1.11591.4.11z1.2.840.113549.2.7z1.2.840.113549.3.7z2.16.840.1.101.3.4.1.2z2.16.840.1.101.3.4.1.22z2.16.840.1.101.3.4.1.42z2.16.840.1.101.3.4.1.6z2.16.840.1.101.3.4.1.26z2.16.840.1.101.3.4.1.46c @ s e Zd ZdS )� PbesErrorN)�__name__� __module__� __qualname__� r r �G/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/IO/_PBES.pyr C s r c @ s e Zd ZdZedd� �ZdS )�PBES1z�Deprecated encryption scheme with password-based key derivation (originally defined in PKCS#5 v1.5, but still present in `v2.0`__). .. __: http://www.ietf.org/rfc/rfc2898.txt c C s� t � �| �}t � �|d �}t� �|d �j}t� �|d �j}i }|tkr7ddlm} ddl m } |} |} nK|t krPddlm} ddl m } |} | } d|d< n2|t kreddlm} ddl m } | } |} n |tkr~ddlm} ddl m } | } | } d|d< ntd ��t � j|d d d �} t� �| d �j}| d }t||d || �}|d d� |dd � }}| j|| j|fi |��}|�|�}t||j�S )ax Decrypt a piece of data using a passphrase and *PBES1*. The algorithm to use is automatically detected. :Parameters: data : byte string The piece of data to decrypt. passphrase : byte string The passphrase to use for decrypting the data. :Returns: The decrypted data, as a binary string. r � )�MD5)�DES)�ARC2�@ Zeffective_keylen)�SHA1zUnknown OID for PBES1� �Z nr_elements� N� )r �decoder �payloadr �value� _OID_PBE_WITH_MD5_AND_DES_CBCZCryptodome.Hashr �Cryptodome.Cipherr � _OID_PBE_WITH_MD5_AND_RC2_CBCr � _OID_PBE_WITH_SHA1_AND_DES_CBCr � _OID_PBE_WITH_SHA1_AND_RC2_CBCr r �new�MODE_CBC�decryptr � block_size)�data� passphrase�enc_private_key_infoZencrypted_algorithm�encrypted_data�pbe_oidZ cipher_paramsr r Zhashmod�moduler r Z pbe_params�saltZ iterationsZkey_iv�key�iv�cipher�ptr r r r) � sH z PBES1.decryptN)r r r �__doc__� staticmethodr) r r r r r } s r c @ s* e Zd ZdZeddd��Zedd� �ZdS )�PBES2z�Encryption scheme with password-based key derivation (defined in `PKCS#5 v2.0`__). .. __: http://www.ietf.org/rfc/rfc2898.txt.Nc ! C s� |du ri }|du rt �� j}t�d�}|�|�}|du r#td| ��|�d�r5d}|�d�}|�d�} nd}|�d�} d } | d krXd d l m } d } | } | j }t }d|d�i}n�| dkrld} t } t j }t}d|d�i}np| dkr�d } t } t j }t}d|d�i}n\| dkr�d} t } t j }t}d|d�i}nH| dkr�d} t } t j}t}d|d�i}d} n2| dkr�d } t } t j}t}d|d�i}d} n | dkr�d} t } t j}t}d|d�i}d} ntd| ��t|�� �d }||�d d��}|dk�r?|�d d �}t�|�}t||| ||d �}tt|�t |�g�}|d k�r6z tj jd!|d"�j }W n t �y+ td#��w |� tt!|�g�� tt!t"�|g�}n@|dk�rv|�d d$�}|�d%d�}|�d&d'�}t#||| |||�}tt!t$�tt|�t |�t |�t |�g�g�}n td(|�d'� ��| j||fi |��}| �r�|�%| �\} } | | } n |�&t'| |j(��} tt!|�t|�g�} ttt!t)�t|| g�g�t| �g�} | �*� S ))a� Encrypt a piece of data using a passphrase and *PBES2*. :Parameters: data : byte string The piece of data to encrypt. passphrase : byte string The passphrase to use for encrypting the data. protection : string The identifier of the encryption algorithm to use. The default value is '``PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC``'. prot_params : dictionary Parameters of the protection algorithm. +------------------+-----------------------------------------------+ | Key | Description | +==================+===============================================+ | iteration_count | The KDF algorithm is repeated several times to| | | slow down brute force attacks on passwords | | | (called *N* or CPU/memory cost in scrypt). | | | | | | The default value for PBKDF2 is 1 000. | | | The default value for scrypt is 16 384. | +------------------+-----------------------------------------------+ | salt_size | Salt is used to thwart dictionary and rainbow | | | attacks on passwords. The default value is 8 | | | bytes. | +------------------+-----------------------------------------------+ | block_size | *(scrypt only)* Memory-cost (r). The default | | | value is 8. | +------------------+-----------------------------------------------+ | parallelization | *(scrypt only)* CPU-cost (p). The default | | | value is 1. | +------------------+-----------------------------------------------+ randfunc : callable Random number generation function; it should accept a single integer N and return a string of random data, N bytes long. If not specified, a new RNG will be instantiated from ``Cryptodome.Random``. :Returns: The encrypted data, as a binary string. Nz5^(PBKDF2WithHMAC-([0-9A-Z-]+)|scrypt)And([0-9A-Z-]+)$zUnknown protection %sZPBKDFZpbkdf2r � r Fz DES-EDE3-CBCr ��DES3� r3 r z AES128-CBCr z AES192-CBCz AES256-CBC� z AES128-GCM�nonce� Tz AES192-GCMz AES256-GCMz Unknown encryption mode '%s'Z salt_size�iteration_counti� ��hmac_hash_moduler � )� digestmodz No OID for HMAC hash algorithmi @ r* Zparallelizationr z Unknown KDF )+r r' �read�re�compile�match� ValueError� startswith�groupr# r; r( �_OID_DES_EDE3_CBCr �_OID_AES128_CBC�_OID_AES192_CBC�_OID_AES256_CBC�MODE_GCM�_OID_AES128_GCM�_OID_AES192_GCM�_OID_AES256_GCM�list�values�getr r r r r �HMAC�oid�KeyError�appendr � _OID_PBKDF2r � _OID_SCRYPTZencrypt_and_digest�encryptr r* � _OID_PBES2�encode)!r+ r, Z protectionZ prot_paramsZrandfunc�pattern�resZpbkdfZpbkdf2_hmac_algo�enc_algo�aeadr; �key_sizer0 � cipher_mode�enc_oidZ enc_param�iv_noncer1 �countrD r2 � pbkdf2_paramsZhmac_oid�kdf_info�scrypt_r�scrypt_pr4 �ct�tagr. �enc_infor- r r r r] � s� / �� �� ��� ���� z PBES2.encryptc # s� t � j| dd�}t � �|d �}t� �|d �j}t� �|d �j}|tkr*td��t � j|d dd�}t � j|d dd�}t� �|d �j}d} |tkr�t � j|d dd�} t� �| d �j} | d } t | �d } d}| dkr�z| | d } | d8 } |d7 }W n t y� Y nw t }| dkr�t � �| | �}t� �|d �j}n5|t kr�t � j|d dd�� t� �� d �j} � fd d �d D �\} }}t � �d krЈ d } nd} ntd ��t � �|d �}t� �|d �j}d}|t kr�ddlm} |}|j}d}d}nf|tk�r t}tj}d}d}nW|tk�r t}tj}d}d}nH|tk�r+t}tj}d}d}n9|tk�r<t}tj}d}d}d}n(|tk�rMt}tj}d}d}d}n|tk�r^t}tj}d}d}d}ntd| ��| �rp| |k�rptd��t� �|d �j}|tk�r�ztjj| } W n t �y� td| ��w t� | �} t || || | d�} n t || || ||�} |j | |fi ||i��} t |�| j k �r�t!d��|�r�| j } | �"|d| � || d� �}!|!S | �#|�}"t$|"| j �}!|!S )ax Decrypt a piece of data using a passphrase and *PBES2*. The algorithm to use is automatically detected. :Parameters: data : byte string The piece of data to decrypt. passphrase : byte string The passphrase to use for decrypting the data. :Returns: The decrypted data, as a binary string. r r r r zNot a PBES2 objectN)r r9 � )rp � c s g | ]}� | �qS r r )�.0�x�Z scrypt_paramsr r � <listcomp>� s �z!PBES2.decrypt.<locals>.<listcomp>)r r r9 rp zUnsupported PBES2 KDFFr: r< r3 r r= r> TzUnsupported PBES2 cipher z9Mismatch between PBES2 KDF parameters and selected cipherzUnsupported HMAC %srA zToo little data to decrypt)%r r r r r r! r^ r r[ �len� TypeError�_OID_HMAC_SHA1r\ rL r# r; r( rM r rN rO rQ rP rR rS r rW Z_hmac2hash_oidrY r' r r r* rI Zdecrypt_and_verifyr) r )#r+ r, r- rb r. r/ Z pbes2_paramsrj Zkdf_oidZkdf_key_lengthri r1 r@ �left�idxZpbkdf2_prf_oidZpbkdf2_prf_algo_idrk rl ro rf rc r; r0 re rd Z cipher_paramrg Zhmac_hash_module_oidrB r2 r4 Ztag_lenr5 Z pt_paddedr rt r r) � s� �� � � � � � � z PBES2.decrypt)NN)r r r r6 r7 r] r) r r r r r8 � s Br8 )&rF Z Cryptodomer r ZCryptodome.Util.asn1r r r r r# r ZCryptodome.Util.Paddingr r ZCryptodome.Protocol.KDFr r r r" r$ r% r& r^ r[ r\ rx rL rM rN rO rQ rR rS rI r �objectr r8 r r r r �<module> s2 ! :E
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings