&xjK\ UddlZddlmZddlmZddlmZmZddlm Z e ej Z dZ dZdZdZdZdZdZdZdZdZdZdZdZdZdZe rejejdejddZ ejZej Zej!Zej"Zej#Zej$Zej%Zej&Zej'Zej(Zej)Zej*Zej+Zej,Zej-Z.e/e0d<ej1Z2e/e0d<ej3Z4e/e0d <ej5Z6e/e0d <ej7Z8e/e0d <ej9Z:e/e0d <ej;Ze/e0d<ej?Z@e/e0d<ejejdejAddZBeCe0d<ejDZEe/e0d<ejFZGe/e0d<ejHZIe/e0d<ejJZKe/e0d<ejLZMe/e0d<ejNZOe/e0d<ejPZQe/e0d<ejRZSe/e0d<ejTZUe/e0d<ejVZWe/e0d<ejejdejXddZYeCe0d<ejZZ[e/e0d<ej\Z]e/e0d<ej^Z_e/e0d<ej`Zae/e0d<ejbZce/e0d <ejdZee/e0d!<ejfZge/e0d"<ejhZie/e0d#<ejjZke/e0d$<ejlZme/e0d%<eZneZoeZpeZqeZreZsd&Ztd'Zud(Zvd)Zwewfd*e/d+e/d,e/d-e/d.df d/Zxd0e/d1e/d.ee/e/e/ffd2Zyd3ewfd4eCd5eCd*e/d+e/d,e/d6e/d-e/d.eCfd7Zzeneofd4eCd0e/d1e/d.eCfd8Z{d9eCd4eCd.e fd:Z|d0e/d1e/d;e/d.dfd<Z}d=e/d4eCd5eCd0e/d1e/d;e/d.eCfd>Z~d4eCd0e/d1e/d;e/d.eCf d?Zd9eCd4eCd.e fd@ZeZdS)AN)Tuple)ffilib)ensurechar *crypto_pwhash_ALG_ARGON2I13crypto_pwhash_ALG_ARGON2ID13crypto_pwhash_ALG_DEFAULTcrypto_pwhash_SALTBYTEScrypto_pwhash_STRBYTEScrypto_pwhash_PASSWD_MINcrypto_pwhash_PASSWD_MAXcrypto_pwhash_BYTES_MINcrypto_pwhash_BYTES_MAXcrypto_pwhash_argon2i_STRPREFIX"crypto_pwhash_argon2i_MEMLIMIT_MIN"crypto_pwhash_argon2i_MEMLIMIT_MAX"crypto_pwhash_argon2i_OPSLIMIT_MIN"crypto_pwhash_argon2i_OPSLIMIT_MAX*crypto_pwhash_argon2i_OPSLIMIT_INTERACTIVE*crypto_pwhash_argon2i_MEMLIMIT_INTERACTIVE'crypto_pwhash_argon2i_OPSLIMIT_MODERATE'crypto_pwhash_argon2i_MEMLIMIT_MODERATE(crypto_pwhash_argon2i_OPSLIMIT_SENSITIVE(crypto_pwhash_argon2i_MEMLIMIT_SENSITIVE crypto_pwhash_argon2id_STRPREFIX#crypto_pwhash_argon2id_MEMLIMIT_MIN#crypto_pwhash_argon2id_MEMLIMIT_MAX#crypto_pwhash_argon2id_OPSLIMIT_MIN#crypto_pwhash_argon2id_OPSLIMIT_MAX+crypto_pwhash_argon2id_OPSLIMIT_INTERACTIVE+crypto_pwhash_argon2id_MEMLIMIT_INTERACTIVE(crypto_pwhash_argon2id_OPSLIMIT_MODERATE(crypto_pwhash_argon2id_MEMLIMIT_MODERATE)crypto_pwhash_argon2id_OPSLIMIT_SENSITIVE)crypto_pwhash_argon2id_MEMLIMIT_SENSITIVE??linrpmaxmemreturncRt|dkdtjt|dkdtjt||dz zdkdtjt|dkdtjt|t|z kdttjt|dd |zzktj|d z|z}t d z }t|d z||z ktjd |z|d zzd z}t|t |z ktjt|t j|z ktjt||z|kdtjdS)NrzInvalid block sizeraisingzInvalid parallelization factorz Cost factor must be a power of 2zCost factor must be at least 2zp*r is greater than {} z6Memory limit would be exceeded with the chosen n, r, p)rexc ValueError SCRYPT_PR_MAXformat UINT64_MAXsysmaxsize)r*r+r,r-BleniVlens LC:\Projects\Historical\venv\Lib\site-packages\nacl/bindings/crypto_pwhash.py_check_memory_occupationrCs 16'@@@@ 163S^LLLL a!e*  1q52CNKKKK  ]Q  '' 66  1b1f 7777 s7Q;DSA 1q5AE>3>2222 6QU a D 4:$ $cn==== 43;% %s~>>>>  t v@ropslimitmemlimitc |dkrd}d}||dzkr,d}|d|zz}tddD]}d|z|dzkrnnA||dzz}tddD]}d|z|dzkrn|dzd|zz}|d krd }||z}|||fS) z/Python implementation of libsodium's pickparamsir6r2r7r)r5r4r()range)rDrEr+r,maxnn_log2maxrps rB nacl_bindings_pick_scrypt_paramsrLs % A8r>"" AE"Arll  F6 dai(()AG$Arll  F6 TQY&&'QAvI. :  E QJ 1a<r@passwdsaltdklenc 8ttdtjtt |t t tt |t t tt |t t tt |tt tt |tt t||||tj d|}tj |t||t|||||| }t|dkdtjtjtjd||ddS)a Derive a cryptographic key using the ``passwd`` and ``salt`` given as input. The work factor can be tuned by by picking different values for the parameters :param bytes passwd: :param bytes salt: :param bytes salt: *must* be *exactly* :py:const:`.SALTBYTES` long :param int dklen: :param int opslimit: :param int n: :param int r: block size, :param int p: the parallelism factor :param int maxmem: the maximum available memory available for scrypt's operations :rtype: bytes :raises nacl.exceptions.UnavailableError: If called when using a minimal build of libsodium. Not available in minimal buildr0z uint8_t[]r$Unexpected failure in key derivationrN)r&has_crypto_pwhash_scryptsalsa208sha256r8UnavailableError isinstanceint TypeErrorbytesrCrnewr%crypto_pwhash_scryptsalsa208sha256_lllen RuntimeErrorbuffercast) rNrOr*r+r,rPr-bufrets rBr[r[ sb< .($  :a  y1111 :a  y1111 :a  y1111 :fe $ $i8888 :dE " "I6666Q1f--- '+u % %C 3F T3t99aAsE  C  q.  :chx--u 5 5aaa 88rc*ttdtjt jdt }tj||t|||}t|dkdtj t j |S)a Derive a cryptographic key using the ``passwd`` and ``salt`` given as input, returning a string representation which includes the salt and the tuning parameters. The returned string can be directly stored as a password hash. See :py:func:`.crypto_pwhash_scryptsalsa208sha256` for a short discussion about ``opslimit`` and ``memlimit`` values. :param bytes passwd: :param int opslimit: :param int memlimit: :return: serialized key hash, including salt and tuning parameters :rtype: bytes :raises nacl.exceptions.UnavailableError: If called when using a minimal build of libsodium. rRr0char[]rz&Unexpected failure in password hashing) rrTr8rUrrZSCRYPT_STRBYTESr&crypto_pwhash_scryptsalsa208sha256_strr\r]string)rNrDrEr`ras rBrereEs. .($ '(O , ,C 4 VS[[(H  C  q0  :c??r passwd_hashc8ttdtjtt |t dz kdtjtj||t |}t|dkdtj dS)a9 Verifies the ``passwd`` against the ``passwd_hash`` that was generated. Returns True or False depending on the success :param passwd_hash: bytes :param passwd: bytes :rtype: boolean :raises nacl.exceptions.UnavailableError: If called when using a minimal build of libsodium. rRr0r2zInvalid password hashrWrong passwordT) rrTr8rUr\rdr9r-crypto_pwhash_scryptsalsa208sha256_str_verifyInvalidkeyErrorrgrNras rBrjrjqs .($   KOa//  ;VS[[  C 3!8%s/BCCCC 4ralgc|tkr|tkr,tjdt|t kr,tjdt |t kr,tjdt |tkr,tjdtdS|tkr|tkr,tjdt|tkr,tjdt|tkr,tjdt|tkr,tjdtdStj d)Nz"memlimit must be at least {} bytesz!memlimit must be at most {} byteszopslimit must be at least {}zopslimit must be at most {}zUnsupported algorithm)r rr8r9r;rrrr rrr r!rX)rDrErms rB_check_argon2_limits_algros ))) 8 8 8.4;;6  : : :.3::6  8 8 8..556  : : :.-446 ; : , , , 9 9 9.4;;7  ; ; ;.3::7  9 9 9..557  ; ; ;.-447 < ;m3444routlenc Htt|ttjtt|ttjtt|ttjtt|ttjtt|t tjt |tkr,tjd t|tkr,tjd t|tkr,tjd tt|||tjd|}tj|||t |||||}t|dkdtjtj||ddS) a Derive a raw cryptographic key using the ``passwd`` and the ``salt`` given as input to the ``alg`` algorithm. :param outlen: the length of the derived key :type outlen: int :param passwd: The input password :type passwd: bytes :param salt: :type salt: bytes :param opslimit: computational cost :type opslimit: int :param memlimit: memory cost :type memlimit: int :param alg: algorithm identifier :type alg: int :return: derived key :rtype: bytes r0z"salt must be exactly {} bytes longz*derived key must be at least {} bytes longz)derived key must be at most {} bytes longzunsigned char[]rrSN)rrVrWr8rXrYr\r r9r;rrrorrZr crypto_pwhashr]r^)rprNrOrDrErmoutbufras rBcrypto_pwhash_algrts6 :fc " "CM:::: :h $ $cm<<<< :h $ $cm<<<< :c3  7777 :fe $ $cm<<<< 4yy+++n 0 7 7'     '''n 8 ? ?'     ) ) )n 7 > >'     Xx555 W& / /F F T8Xs  C  q.  :ff % %aaa ((rctt|tttt|tttt|ttt |||t jdd}tj ||t||||}t|dkdtj t j |S)a Derive a cryptographic key using the ``passwd`` given as input and a random salt, returning a string representation which includes the salt, the tuning parameters and the used algorithm. :param passwd: The input password :type passwd: bytes :param opslimit: computational cost :type opslimit: int :param memlimit: memory cost :type memlimit: int :param alg: The algorithm to use :type alg: int :return: serialized derived key and parameters :rtype: bytes r0rcr4rrS)rrVrWrXrYrorrZrcrypto_pwhash_str_algr\r8r]rf)rNrDrErmrsras rBrvrvs, :h $ $i8888 :h $ $i8888 :fe $ $i8888Xx555 WXs # #F #F Xx  C  q.  :f  rctt|tttt|tttt |dkdt jtj||t |}t|dkdt j dS)a4 Verifies the ``passwd`` against a given password hash. Returns True on success, raises InvalidkeyError on failure :param passwd_hash: saved password hash :type passwd_hash: bytes :param passwd: password to be checked :type passwd: bytes :return: success :rtype: boolean r0z#Hash must be at most 127 bytes longrriT) rrVrYrXr\r8r9rcrypto_pwhash_str_verifyrkrls rBryry<s :k5 ) )9==== :fe $ $i8888  KC-  &{FCKK H HC 3!8%s/BCCCC 4r)r=typingrnacl.exceptions exceptionsr8 nacl._sodiumrrrbool-PYNACL_HAS_CRYPTO_PWHASH_SCRYPTSALSA208SHA256rT,crypto_pwhash_scryptsalsa208sha256_STRPREFIX,crypto_pwhash_scryptsalsa208sha256_SALTBYTES+crypto_pwhash_scryptsalsa208sha256_STRBYTES-crypto_pwhash_scryptsalsa208sha256_PASSWD_MIN-crypto_pwhash_scryptsalsa208sha256_PASSWD_MAX,crypto_pwhash_scryptsalsa208sha256_BYTES_MIN,crypto_pwhash_scryptsalsa208sha256_BYTES_MAX/crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_MIN/crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_MAX/crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_MIN/crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_MAX7crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_INTERACTIVE7crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_INTERACTIVE5crypto_pwhash_scryptsalsa208sha256_OPSLIMIT_SENSITIVE5crypto_pwhash_scryptsalsa208sha256_MEMLIMIT_SENSITIVErfr_,crypto_pwhash_scryptsalsa208sha256_strprefix,crypto_pwhash_scryptsalsa208sha256_saltbytes+crypto_pwhash_scryptsalsa208sha256_strbytes-crypto_pwhash_scryptsalsa208sha256_passwd_min-crypto_pwhash_scryptsalsa208sha256_passwd_max,crypto_pwhash_scryptsalsa208sha256_bytes_min,crypto_pwhash_scryptsalsa208sha256_bytes_max/crypto_pwhash_scryptsalsa208sha256_memlimit_min/crypto_pwhash_scryptsalsa208sha256_memlimit_max/crypto_pwhash_scryptsalsa208sha256_opslimit_min/crypto_pwhash_scryptsalsa208sha256_opslimit_max7crypto_pwhash_scryptsalsa208sha256_opslimit_interactive7crypto_pwhash_scryptsalsa208sha256_memlimit_interactive5crypto_pwhash_scryptsalsa208sha256_opslimit_sensitive5crypto_pwhash_scryptsalsa208sha256_memlimit_sensitivecrypto_pwhash_alg_argon2i13r rW__annotations__crypto_pwhash_alg_argon2id13r crypto_pwhash_alg_defaultr crypto_pwhash_saltbytesr crypto_pwhash_strbytesr crypto_pwhash_passwd_minrcrypto_pwhash_passwd_maxrcrypto_pwhash_bytes_minrcrypto_pwhash_bytes_maxrcrypto_pwhash_argon2i_strprefixrrY"crypto_pwhash_argon2i_memlimit_minr"crypto_pwhash_argon2i_memlimit_maxr"crypto_pwhash_argon2i_opslimit_minr"crypto_pwhash_argon2i_opslimit_maxr*crypto_pwhash_argon2i_opslimit_interactiver*crypto_pwhash_argon2i_memlimit_interactiver'crypto_pwhash_argon2i_opslimit_moderater'crypto_pwhash_argon2i_memlimit_moderater(crypto_pwhash_argon2i_opslimit_sensitiver(crypto_pwhash_argon2i_memlimit_sensitiver crypto_pwhash_argon2id_strprefixr#crypto_pwhash_argon2id_memlimit_minr#crypto_pwhash_argon2id_memlimit_maxr#crypto_pwhash_argon2id_opslimit_minr #crypto_pwhash_argon2id_opslimit_maxr!+crypto_pwhash_argon2id_opslimit_interactiver"+crypto_pwhash_argon2id_memlimit_interactiver#(crypto_pwhash_argon2id_opslimit_moderater$(crypto_pwhash_argon2id_memlimit_moderater%)crypto_pwhash_argon2id_opslimit_sensitiver&)crypto_pwhash_argon2id_memlimit_sensitiver'SCRYPT_OPSLIMIT_INTERACTIVESCRYPT_MEMLIMIT_INTERACTIVESCRYPT_OPSLIMIT_SENSITIVESCRYPT_MEMLIMIT_SENSITIVESCRYPT_SALTBYTESrdr:LOG2_UINT64_MAXr<SCRYPT_MAX_MEMrCrLr[rerjrortrvry crypto_pwhash_argon2i_str_verifyrrBrs  !!!!!!!!""""""*.5**&03,/0,./+01-01-/0,/0,23/23/23/23/:;7:;7895895)-3=3:K3KMMNN44aa4 0 98::1 87990 :9;;2 :9;;2 98::1 98::1 <;==4 <;==4 <;==4 <;==4 DCEE< DCEE< BACC: BACC:$C3#B#D#DSDDD$DC$D$F$FcFFF!>!>!@!@3@@@:s:<<<<<8c8::::: < < > >#>>> < < > >#>>>:s:<<<<<:s:<<<<<)3 CHX:s:<<==**!!*+C*,,#C+C*,,#C+C*,,#C+C*,,#C3C244+C3C244+C0C/11(0C/11(1C022)#1C022)#+5#* CHX;s;==>>++!!+ %,C+--$S,C+--$S,C+--$S,C+--$S4C355,S4C355,S1C022)#1C022)#2C133*32C133*3 <<::@=   #+9'' '''$'' ''''T  3S=L 9999 99 99 99 99  99  99 99 99999999|0/)) ))) ))))X % B55s55c555555555555pD) D) D) D) D)  D) D) D)D)D)D)N( ((( (  ((((V%46$< r