golden hour
/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/IO/__pycache__
⬆️ Go Up
Upload
File/Folder
Size
Actions
PEM.cpython-310.pyc
4.47 KB
Del
OK
PKCS8.cpython-310.pyc
5.19 KB
Del
OK
_PBES.cpython-310.pyc
9.3 KB
Del
OK
__init__.cpython-310.pyc
193 B
Del
OK
Edit: _PBES.cpython-310.pyc
o �xe�? � @ s� d dl mZ d dlmZmZmZmZ d dlmZm Z d dl m Z m Z m Z mZmZmZ d dlmZmZmZmZ d dlmZmZmZ dZdZd Z d Z d Z d Z d Z dZ!dZ"dZ#dZ$dZ%dZ&dZ'dZ(dZ)G dd� de*�Z+G dd� de,�Z-G dd � d e,�Z.d S ) � )�Random)� DerSequence�DerOctetString� DerObjectId� DerInteger)�pad�unpad)�MD5�SHA1�SHA224�SHA256�SHA384�SHA512)�DES�ARC2�DES3�AES)�PBKDF1�PBKDF2�scryptz1.2.840.113549.1.5.3z1.2.840.113549.1.5.6z1.2.840.113549.1.5.10z1.2.840.113549.1.5.11z1.2.840.113549.1.5.13z1.2.840.113549.1.5.12z1.3.6.1.4.1.11591.4.11�1.2.840.113549.2.7z1.2.840.113549.2.8z1.2.840.113549.2.9z1.2.840.113549.2.10z1.2.840.113549.2.11z1.2.840.113549.3.7z2.16.840.1.101.3.4.1.2z2.16.840.1.101.3.4.1.22z2.16.840.1.101.3.4.1.42c @ s e Zd ZdS )� PbesErrorN)�__name__� __module__� __qualname__� r r �G/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/IO/_PBES.pyr C s r c @ s e Zd ZdZedd� �ZdS )�PBES1z�Deprecated encryption scheme with password-based key derivation (originally defined in PKCS#5 v1.5, but still present in `v2.0`__). .. __: http://www.ietf.org/rfc/rfc2898.txt c C s* t � �| �}t � �|d �}t� �|d �j}t� �|d �j}i }|tkr+t}t}n'|t kr8t}t }d|d< n|t krAt }t}n|t krNt }t }d|d< ntd��t � j|d dd�} t� �| d �j} | d } t|| d| |�} | d d � | d d � } }|j| |j|fi |��}|�|�}t||j�S ) ax Decrypt a piece of data using a passphrase and *PBES1*. The algorithm to use is automatically detected. :Parameters: data : byte string The piece of data to decrypt. passphrase : byte string The passphrase to use for decrypting the data. :Returns: The decrypted data, as a binary string. r � �@ Zeffective_keylenzUnknown OID for PBES1� �Z nr_elements� N� )r �decoder �payloadr �value� _OID_PBE_WITH_MD5_AND_DES_CBCr r � _OID_PBE_WITH_MD5_AND_RC2_CBCr � _OID_PBE_WITH_SHA1_AND_DES_CBCr � _OID_PBE_WITH_SHA1_AND_RC2_CBCr r �new�MODE_CBC�decryptr � block_size)�data� passphrase�enc_private_key_infoZencrypted_algorithm�encrypted_data�pbe_oidZ cipher_paramsZhashmod� ciphermodZ pbe_params�saltZ iterationsZkey_iv�key�iv�cipher�ptr r r r- y s8 z PBES1.decryptN)r r r �__doc__� staticmethodr- r r r r r r s r c @ s* e Zd ZdZeddd��Zedd� �ZdS )�PBES2z�Encryption scheme with password-based key derivation (defined in `PKCS#5 v2.0`__). .. __: http://www.ietf.org/rfc/rfc2898.txt.Nc C s� |du ri }|du rt �� j}|dkr d}t}tj}t}n.|dv r+d}t}tj}t}n |dv r9d}t}tj}t}n|dv rGd}t}tj}t }nt d ��||j �} ||� d d ��} |� d �r{|� d d�} t|| || �} ttt�tt| �t| �g�g�} n1|� d d�} |� dd �}|� dd�}t|| || ||�} ttt�tt| �t| �t|�t|�g�g�} |�| || �}|�t| |j ��}tt|�t| �g�}tttt�t| |g�g�t|�g�}|�� S )a� Encrypt a piece of data using a passphrase and *PBES2*. :Parameters: data : byte string The piece of data to encrypt. passphrase : byte string The passphrase to use for encrypting the data. protection : string The identifier of the encryption algorithm to use. The default value is '``PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC``'. prot_params : dictionary Parameters of the protection algorithm. +------------------+-----------------------------------------------+ | Key | Description | +==================+===============================================+ | iteration_count | The KDF algorithm is repeated several times to| | | slow down brute force attacks on passwords | | | (called *N* or CPU/memory cost in scrypt). | | | | | | The default value for PBKDF2 is 1 000. | | | The default value for scrypt is 16 384. | +------------------+-----------------------------------------------+ | salt_size | Salt is used to thwart dictionary and rainbow | | | attacks on passwords. The default value is 8 | | | bytes. | +------------------+-----------------------------------------------+ | block_size | *(scrypt only)* Memory-cost (r). The default | | | value is 8. | +------------------+-----------------------------------------------+ | parallelization | *(scrypt only)* CPU-cost (p). The default | | | value is 1. | +------------------+-----------------------------------------------+ randfunc : callable Random number generation function; it should accept a single integer N and return a string of random data, N bytes long. If not specified, a new RNG will be instantiated from ``Cryptodome.Random``. :Returns: The encrypted data, as a binary string. Nz"PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC� )z PBKDF2WithHMAC-SHA1AndAES128-CBCzscryptAndAES128-CBCr" )z PBKDF2WithHMAC-SHA1AndAES192-CBCzscryptAndAES192-CBC)z PBKDF2WithHMAC-SHA1AndAES256-CBCzscryptAndAES256-CBC� zUnknown PBES2 modeZ salt_sizer# r �iteration_counti� i @ r. Zparallelizationr )r r+ �readr r, �_OID_DES_EDE3_CBCr �_OID_AES128_CBC�_OID_AES192_CBC�_OID_AES256_CBC� ValueErrorr. �get� startswithr r r � _OID_PBKDF2r r r � _OID_SCRYPT�encryptr � _OID_PBES2�encode)r/ r0 Z protectionZ prot_paramsZrandfunc�key_size�moduleZ cipher_mode�enc_oidr7 r5 �countr6 �kdf_info�scrypt_r�scrypt_pr8 r2 �enc_infor1 r r r rJ � s� / �� ��� ���� z PBES2.encryptc s t � j| dd�}t � �|d �}t� �|d �j}t� �|d �j}|tkr*td��t � j|d dd�}t � j|d dd�}t� �|d �j}d} |tkr�t � j|d dd�} t� �| d �j} | d } t | �d } d}| dkr�z| | d } | d8 } |d7 }W n t y� Y nw d}| dkr�t � �| | �}t� �|d �j}n5|t kr�t � j|d d d�� t� �� d �j} � fd d �d D �\} }}t � �d krЈ d } nd} ntd��t � �|d �}t� �|d �j}|t kr�t }d}n!|tkr�t}d}n|tk�rt}d}n|tk�rt}d}ntd��| �r | |k�r td��t� �|d �j}|tk�rd|tk�r4t}n&|tk�r<t}n |tk�rDt}n|tk�rLt}n|tk�rTt}ntd| ��t || || |d�}n t || || ||�}|� ||j |�}|� |�}t!||j"�S )ax Decrypt a piece of data using a passphrase and *PBES2*. The algorithm to use is automatically detected. :Parameters: data : byte string The piece of data to decrypt. passphrase : byte string The passphrase to use for decrypting the data. :Returns: The decrypted data, as a binary string. r r! r r zNot a PBES2 objectN)r � � r )rV � c s g | ]}� | �qS r r )�.0�x�Z scrypt_paramsr r � <listcomp>u s �z!PBES2.decrypt.<locals>.<listcomp>)r r rU rV zUnsupported PBES2 KDFr= r" r> zUnsupported PBES2 cipherz9Mismatch between PBES2 KDF parameters and selected cipherzUnsupported HMAC %s)�hmac_hash_module)#r r$ r r% r r& rK r rH �len� TypeErrorrI rA r rB r rC rD �_OID_HMAC_SHA1r �_OID_HMAC_SHA224r �_OID_HMAC_SHA256r �_OID_HMAC_SHA384r �_OID_HMAC_SHA512r r r r+ r, r- r r. ) r/ r0 r1 Zenc_algor2 r3 Z pbes2_paramsrQ Zkdf_oidZkdf_key_lengthZ pbkdf2_paramsr5 r? �left�idxZpbkdf2_prf_oidZpbkdf2_prf_algo_idrR rS rT rO r4 rM ZIVr\ r6 r8 r9 r rZ r r- : s� �� � � � z PBES2.decrypt)NN)r r r r: r; rJ r- r r r r r< � s r< N)/Z Cryptodomer ZCryptodome.Util.asn1r r r r ZCryptodome.Util.Paddingr r ZCryptodome.Hashr r r r r r ZCryptodome.Cipherr r r r ZCryptodome.Protocol.KDFr r r r' r( r) r* rK rH rI r_ r` ra rb rc rA rB rC rD rE r �objectr r< r r r r �<module> s2 ! /=
Save