File: //var/opt/nydus/ops/cryptography/__pycache__/fernet.cpython-39.pyc
a
�,�h� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlmZ d dlmZ d dl m
Z
m Z d dl m
Z
mZmZ d dlmZ G dd� de�Zd ZG d
d � d �ZG d d
� d
�ZdS )� N)�utils)�InvalidSignature)�hashes�padding)�Cipher�
algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__�
__module__� __qualname__� r r �F/opt/nydus/tmp/pip-target-wkfpz8uv/lib64/python/cryptography/fernet.pyr
s r
�< c @ s e Zd Zd!ejeef ejd�dd�Ze ed�dd��Z
eed�d d
�Z ee ed �d d
�Z
ee eed�dd�Zd"eeje ed�dd�Zee e ed�dd�Zee d�dd�Zeeeje ef d�dd��Zedd�d d �Zee ejeje e f ed �d d �ZdS )#�FernetN)�key�backendc
C st zt �|�}W n0 tjy> } ztd�|�W Y d }~n
d }~0 0 t|�dkrTtd��|d d� | _|dd � | _d S )Nz4Fernet key must be 32 url-safe base64-encoded bytes.� � )�base64�urlsafe_b64decode�binascii�Error�
ValueError�len� _signing_key�_encryption_key)�selfr r �excr r r �__init__ s �� �zFernet.__init__)�returnc C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key. s zFernet.generate_key)�datar! c C s | � |tt�� ��S �N��encrypt_at_time�int�time)r r' r r r �encrypt2 s zFernet.encrypt)r' � current_timer! c C s t �d�}| �|||�S )Nr )r# r$ �_encrypt_from_parts)r r' r. �ivr r r r* 5 s
zFernet.encrypt_at_time)r' r. r0 r! c C s� t �d|� t�tjj��� }|�|�|� � }t
t�| j �t �
|���� }|�|�|� � }d|jddd� | | }t| jt�� �} | �|� | � � }
t�||
�S )Nr' � �� �big)�length� byteorder)r � _check_bytesr �PKCS7r �AES�
block_size�padder�update�finalizer r r �CBC� encryptor�to_bytesr r r �SHA256r r" ) r r' r. r0 r: Z padded_datar> �
ciphertextZ basic_parts�h�hmacr r r r/ 9 s(
� ����
zFernet._encrypt_from_parts)�token�ttlr! c C s: t �|�\}}|d u r d }n|tt�� �f}| �|||�S r( )r �_get_unverified_token_datar+ r, �
_decrypt_data)r rD rE � timestampr' � time_infor r r �decryptR s
zFernet.decrypt)rD rE r. r! c C s0 |d u rt d��t�|�\}}| �||||f�S )Nz6decrypt_at_time() can only be used with a non-None ttl)r r rF rG )r rD rE r. rH r' r r r �decrypt_at_timeZ s �zFernet.decrypt_at_time)rD r! c C s t �|�\}}| �|� |S r( )r rF �_verify_signature)r rD rH r' r r r �extract_timestampd s
zFernet.extract_timestampc C sz t �d| � zt�| �}W n ttjfy6 t�Y n0 |rH|d dkrLt�t|�dk r\t�t j
|dd� dd�}||fS )NrD r � � � r3 )r5 ) r r6 r r � TypeErrorr r r
r r+ �
from_bytes)rD r' rH r r r rF j s
z!Fernet._get_unverified_token_datac C sT t | jt�� �}|�|d d� � z|�|dd � � W n tyN t�Y n0 d S )N���)r r r r@ r; �verifyr r
)r r' rB r r r rL { s zFernet._verify_signature)r' rH rI r! c C s� |d ur0|\}}|| |k r t �|t |k r0t �| �|� |dd� }|dd� }tt�| j�t�|��� � }|�
|�} z| |� � 7 } W n t y� t �Y n0 t
�tjj��� }
|
�
| �} z| |
� � 7 } W n t y� t �Y n0 | S )NrO � rS )r
�_MAX_CLOCK_SKEWrL r r r8 r r r= � decryptorr; r< r r r7 r9 �unpadder) r r' rH rI rE r. r0 rA rW Zplaintext_paddedrX Zunpaddedr r r rG � s0
�
zFernet._decrypt_data)N)N)r r r
�typing�Union�bytes�str�Anyr � classmethodr& r- r+ r* r/ �OptionalrJ rK rM � staticmethod�TuplerF rL rG r r r r r s2 � � � �
�r c @ s� e Zd Zeje d�dd�Zeed�dd�Zee ed�dd �Z
eed�d
d �Z deej e ed
�dd�Z
ee e ed�dd�Zd S )� MultiFernet)�fernetsc C s t |�}|std��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r rc r r r r � s �zMultiFernet.__init__)�msgr! c C s | � |tt�� ��S r( r) )r rf r r r r- � s zMultiFernet.encrypt)rf r. r! c C s | j d �||�S )Nr )re r* )r rf r. r r r r* � s zMultiFernet.encrypt_at_timec C sh t �|�\}}| jD ]0}z|�||d �}W qJW q tyB Y q0 qt�t�d�}| jd �|||�S )Nr r )r rF re rG r
r# r$ r/ )r rf rH r' �f�pr0 r r r �rotate� s
zMultiFernet.rotateN)rf rE r! c C s: | j D ]*}z|�||�W S ty. Y q0 qt�d S r( )re rJ r
)r rf rE rg r r r rJ � s
zMultiFernet.decrypt)rf rE r. r! c C s< | j D ],}z|�|||�W S ty0 Y q0 qt�d S r( )re rK r
)r rf rE r. rg r r r rK � s
zMultiFernet.decrypt_at_time)N)r r r
rY �Iterabler r r[ r- r+ r* ri r_ rJ rK r r r r rb � s �rb )r r r# r, rY Z cryptographyr Zcryptography.exceptionsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr r r Z#cryptography.hazmat.primitives.hmacr � Exceptionr
rV r rb r r r r �<module> s