CasperSecurity
o
�)%a� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ d dlm Z d dl
m Z d dl m
Z
mZ d dlmZmZmZ d dlmZ G dd � d e�Zd
ZG d d � d e�ZG d
d� de�ZdS )� N)�utils)�InvalidSignature)� _get_backend)�hashes�padding)�Cipher�
algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__�
__module__� __qualname__� r r �5/usr/lib/python3/dist-packages/cryptography/fernet.pyr s r �< c @ s e Zd Zd!defdd�Zedefdd��Zdedefd d
�Zded edefd d
�Z ded ededefdd�Z
d!dede j e defdd�Z
deded edefdd�Zdedefdd�Zedede jeef fdd��Zdeddfdd �Zded ed e j e jeef defd d �ZdS )"�FernetN�keyc C sL t |�}t�|�}t|�dkrtd��|d d� | _|dd � | _|| _d S )N� z4Fernet key must be 32 url-safe base64-encoded bytes.� )r �base64�urlsafe_b64decode�len�
ValueError� _signing_key�_encryption_key�_backend)�selfr �backendr r r �__init__ s
�
zFernet.__init__�returnc C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key* s zFernet.generate_key�datac C � | � |tt�� ��S �N��encrypt_at_time�int�time)r r& r r r �encrypt. � zFernet.encrypt� current_timec C s t �d�}| �|||�S )Nr )r" r# �_encrypt_from_parts)r r& r/ �ivr r r r* 1 s
zFernet.encrypt_at_timer1 c C s� t �d|� t�tjj��� }|�|�|� � }t
t�| j �t �
|�| j��� }|�|�|� � }dt�d|� | | }t| jt�� | jd�} | �|� | � � }
t�||
�S )Nr& � ��>Q�r )r � _check_bytesr �PKCS7r �AES�
block_size�padder�update�finalizer r r �CBCr � encryptor�struct�packr
r r �SHA256r r! ) r r& r/ r1 r9 � padded_datar= �
ciphertext� basic_parts�h�hmacr r r r0 5 s ���
zFernet._encrypt_from_parts�token�ttlc C s: t �|�\}}|d u rd }n|tt�� �f}| �|||�S r( )r �_get_unverified_token_datar+ r, �
_decrypt_data)r rF rG � timestampr& � time_infor r r �decryptJ s
zFernet.decryptc C s0 |d u rt d��t�|�\}}| �||||f�S )Nz6decrypt_at_time() can only be used with a non-None ttl)r r rH rI )r rF rG r/ rJ r& r r r �decrypt_at_timeR s �zFernet.decrypt_at_timec C s t �|�\}}| �|� |S r( )r rH �_verify_signature)r rF rJ r& r r r �extract_timestamp\ s
zFernet.extract_timestampc C s~ t �d| � zt�| �}W n ttjfy t�w |r"|d dkr$t�zt� d|dd� �\}W ||fS tj
y> t�w )NrF r � r3 � � ) r r5 r r � TypeError�binascii�Errorr r> �unpack�error)rF r& rJ r r r rH b s ���z!Fernet._get_unverified_token_datac C sT t | jt�� | jd�}|�|d d� � z |�|dd � � W d S ty) t�w )Nr4 ���) r
r r r@ r r: �verifyr r )r r& rD r r r rN s s �zFernet._verify_signaturerJ rK c C s� |d ur|\}}|| |k rt �|t |k rt �| �|� |dd� }|dd� }tt�| j�t�|�| j ��
� }|� |�} z| |� � 7 } W n t
yO t �w t�tjj��� }
|
� | �} z | |
� � 7 } W | S t
yp t �w )NrR � rX )r �_MAX_CLOCK_SKEWrN r r r7 r r r< r � decryptorr: r; r r r6 r8 �unpadder) r r& rJ rK rG r/ r1 rB r\ �plaintext_paddedr] �unpaddedr r r rI { s8
��
�
��zFernet._decrypt_datar( )r r
r �bytesr � classmethodr% r- r+ r* r0 �typing�OptionalrL rM rO � staticmethod�TuplerH rN rI r r r r r sL
���
� ���
�
����r c @ s� e Zd Zdeje fdd�Zdedefdd�Zdede defd d
�Z
dedefd d �Z ddedej e defdd�Z
dede de defdd�Zd
S )� MultiFernet�fernetsc C s t |�}|s
td��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r rg r r r r � s �
zMultiFernet.__init__�msgr c C r' r( r) )r rj r r r r- � r. zMultiFernet.encryptr/ c C s | j d �||�S )Nr )ri r* )r rj r/ r r r r* � s zMultiFernet.encrypt_at_timec C sb t �|�\}}| jD ]}z
|�||d �}W n ty Y q
w t�t�d�}| jd �|||�S )Nr r )r rH ri rI r r" r# r0 )r rj rJ r& �f�pr1 r r r �rotate� s
�
zMultiFernet.rotateNrG c C s4 | j D ]}z |�||�W S ty Y qw t�r( )ri rL r )r rj rG rk r r r rL � s
�zMultiFernet.decryptc C s6 | j D ]}z
|�|||�W S ty Y qw t�r( )ri rM r )r rj rG r/ rk r r r rM � s
�zMultiFernet.decrypt_at_timer( )r r
r rb �Iterabler r r` r- r+ r* rm rc rL rM r r r r rf � s ����rf )r rT r" r> r, rb � cryptographyr �cryptography.exceptionsr � cryptography.hazmat.backendsr � cryptography.hazmat.primitivesr r �&cryptography.hazmat.primitives.ciphersr r r �#cryptography.hazmat.primitives.hmacr
� Exceptionr r[ �objectr rf r r r r �<module> s"