File: //snap/core20/2599/usr/lib/python3/dist-packages/cryptography/__pycache__/fernet.cpython-38.pyc
U
�e�]d � @ s� d dl mZmZmZ d dlZd dlZd dlZd dlZd dlZd dl Z d dl
m Z d dl m
Z
d dlmZ d dlmZmZ d dlmZmZmZ d dlmZ G d d
� d
e�Zd ZG d d
� d
e �Z G dd� de �Z dS )� )�absolute_import�division�print_functionN)�utils)�InvalidSignature)�default_backend)�hashes�padding)�Cipher�
algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__�
__module__� __qualname__� r r �5/usr/lib/python3/dist-packages/cryptography/fernet.pyr s r �< c @ s` e Zd Zddd�Zedd� �Zdd� Zdd � Zdd
d �Zd d
� Z e
dd� �Z dd� Z dd� Z
dS )�FernetNc C sR |d krt � }t�|�}t|�dkr,td��|d d� | _|dd � | _|| _d S )N� z4Fernet key must be 32 url-safe base64-encoded bytes.� )r �base64�urlsafe_b64decode�len�
ValueError� _signing_key�_encryption_key�_backend)�self�key�backendr r r �__init__ s
�zFernet.__init__c C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key- s zFernet.generate_keyc C s$ t t�� �}t�d�}| �|||�S )Nr )�int�timer$ r% �_encrypt_from_parts)r �data� current_time�ivr r r �encrypt1 s
zFernet.encryptc C s� t �d|� t�tjj��� }|�|�|� � }t
t�| j �t �
|�| j��� }|�|�|� � }dt�d|� | | }t| jt�� | jd�} | �|� | � � }
t�||
�S )Nr+ � ��>Q�r! )r � _check_bytesr �PKCS7r �AES�
block_size�padder�update�finalizer
r r �CBCr � encryptor�structZpackr
r r �SHA256r r# ) r r+ r, r- r6 Z padded_datar: �
ciphertextZ basic_parts�hZhmacr r r r* 6 s
��
zFernet._encrypt_from_partsc C s t �|�\}}| �|||�S �N)r �_get_unverified_token_data�
_decrypt_data)r �token�ttl� timestampr+ r r r �decryptI s zFernet.decryptc C s t �|�\}}| �|� |S r? )r r@ �_verify_signature)r rB rD r+ r r r �extract_timestampM s
zFernet.extract_timestampc C s� t �d| � zt�| �}W n ttjfk
r8 t�Y nX |rNt� |d�dkrRt�zt
� d|dd� �\}W n t
j k
r� t�Y nX ||fS )NrB r � r0 � � )
r r2 r r � TypeError�binascii�Errorr �sixZ
indexbytesr; Zunpack�error)rB r+ rD r r r r@ S s
z!Fernet._get_unverified_token_datac C s\ t | jt�� | jd�}|�|d d� � z|�|dd � � W n tk
rV t�Y nX d S )Nr1 ���) r
r r r< r r7 Zverifyr r )r r+ r> r r r rF d s zFernet._verify_signaturec C s� t t�� �}|d k r4|| |k r$t�|t |k r4t�| �|� |dd� }|dd� }tt�| j�t �
|�| j �� � }|�
|�}z||�� 7 }W n tk
r� t�Y nX t�tjj��� } | �
|�}
z|
| �� 7 }
W n tk
r� t�Y nX |
S )NrJ � rP )r( r) r �_MAX_CLOCK_SKEWrF r
r r4 r r r9 r � decryptorr7 r8 r r r3 r5 �unpadder) r r+ rD rC r, r- r= rS Zplaintext_paddedrT Zunpaddedr r r rA l s4
�
zFernet._decrypt_data)N)N)r r r r" � classmethodr' r. r* rE rG � staticmethodr@ rF rA r r r r r s
r c @ s. e Zd Zdd� Zdd� Zdd� Zd
dd �ZdS ) � MultiFernetc C s t |�}|std��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r Zfernetsr r r r" � s �zMultiFernet.__init__c C s | j d �|�S )Nr )rY r. )r �msgr r r r. � s zMultiFernet.encryptc C sj t �|�\}}| jD ]2}z|�||d �}W qLW q tk
rD Y qX qt�t�d�}| jd �|||�S )Nr r )r r@ rY rA r r$ r% r* )r rZ rD r+ �f�pr- r r r �rotate� s
zMultiFernet.rotateNc C s< | j D ],}z|�||�W S tk
r0 Y qX qt�d S r? )rY rE r )r rZ rC r[ r r r rE � s
zMultiFernet.decrypt)N)r r r r" r. r] rE r r r r rW � s rW ) Z
__future__r r r r rL r$ r; r) rN Z cryptographyr Zcryptography.exceptionsr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr
r r Z#cryptography.hazmat.primitives.hmacr
� Exceptionr rR �objectr rW r r r r �<module> s m