File: //opt/saltstack/salt/lib/python3.10/site-packages/cryptography/__pycache__/fernet.cpython-310.pyc
o
;j3 � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m
Z
d dl m Z d dl
mZmZ d dlmZmZmZ d dlmZ G d d
� d
e�Zd ZG d d
� d
�ZG dd� d�ZdS )� )� annotationsN)�Iterable)�utils)�InvalidSignature)�hashes�padding)�Cipher�
algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__�
__module__� __qualname__� r r �G/opt/saltstack/salt/lib/python3.10/site-packages/cryptography/fernet.pyr s r �< c @ s� e Zd Z d*d+dd �Zed,d d ��Zd-dd�Zd.dd�Zd/dd�Zd*d0dd�Z d1d d �Z
d2d d �Z e d3d!d"��Z
d4d#d$�Zd5d(d)�ZdS )6�FernetN�key� bytes | str�backend�
typing.Any�return�Nonec
C sh zt �|�}W n tjy } ztd�|�d }~ww t|�dkr$td��|d d� | _|dd � | _d S )Nz4Fernet key must be 32 url-safe base64-encoded bytes.� � )�base64�urlsafe_b64decode�binascii�Error�
ValueError�len� _signing_key�_encryption_key)�selfr r �excr r r �__init__ s ���� �zFernet.__init__�bytesc C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key0 s zFernet.generate_key�datac C � | � |tt�� ��S �N��encrypt_at_time�int�time)r$ r- r r r �encrypt4 � zFernet.encrypt� current_timer2 c C s t �d�}| �|||�S )Nr )r) r* �_encrypt_from_parts)r$ r- r6 �ivr r r r1 7 s
zFernet.encrypt_at_timer8 c C s� t �d|� t�tjj��� }|�|�|� � }t
t�| j �t �
|���� }|�|�|� � }d|jddd� | | }t| jt�� �} | �|� | � � }
t�||
�S )Nr- � �� �big)�length� byteorder)r � _check_bytesr �PKCS7r �AES�
block_size�padder�update�finalizer r# r
�CBC� encryptor�to_bytesr r" r �SHA256r r( ) r$ r- r6 r8 rB Z padded_datarF �
ciphertextZ basic_parts�hZhmacr r r r7 ; s,
�� ����
zFernet._encrypt_from_parts�token�ttl�
int | Nonec C s: t �|�\}}|d u rd }n|tt�� �f}| �|||�S r/ )r �_get_unverified_token_datar2 r3 �
_decrypt_data)r$ rK rL � timestampr- � time_infor r r �decryptT s
zFernet.decryptc C s0 |d u rt d��t�|�\}}| �||||f�S )Nz6decrypt_at_time() can only be used with a non-None ttl)r r rN rO )r$ rK rL r6 rP r- r r r �decrypt_at_time\ s �zFernet.decrypt_at_timec C s t �|�\}}| �|� |S r/ )r rN �_verify_signature)r$ rK rP r- r r r �extract_timestampf s
zFernet.extract_timestamp�tuple[int, bytes]c C s� t | ttf�s td��zt�| �}W n ttjfy t�w |r'|d dkr)t�t |�dk r1t�t
j |dd� dd�}||fS )Nztoken must be bytes or strr � � � r; )r= ) �
isinstance�strr' � TypeErrorr r r r r r! r2 �
from_bytes)rK r- rP r r r rN l s � z!Fernet._get_unverified_token_datac C sN t | jt�� �}|�|d d� � z |�|dd � � W d S ty& t�w )N���)r r" r rH rC Zverifyr r )r$ r- rJ r r r rT s �zFernet._verify_signaturerP rQ �tuple[int, int] | Nonec C s� |d ur|\}}|| |k rt �|t |k rt �| �|� |dd� }|dd� }tt�| j�t�|��� � }|�
|�} z| |� � 7 } W n t yM t �w t
�tjj��� }
|
�
| �} z | |
� � 7 } W | S t yn t �w )NrX � r^ )r �_MAX_CLOCK_SKEWrT r r r@ r# r
rE � decryptorrC rD r r r? rA �unpadder) r$ r- rP rQ rL r6 r8 rI rb Zplaintext_paddedrc Zunpaddedr r r rO � s8
��
�
��zFernet._decrypt_datar/ )r r r r r r )r r' )r- r' r r' )r- r' r6 r2 r r' )r- r' r6 r2 r8 r' r r' )rK r rL rM r r' )rK r rL r2 r6 r2 r r' )rK r r r2 )rK r r rV )r- r' r r )r- r' rP r2 rQ r_ r r' )r
r r r& � classmethodr, r4 r1 r7 rR rS rU � staticmethodrN rT rO r r r r r s �
r c @ sT e Zd Zddd�Zddd �Zd d d
�Zd dd�Zd d dd�Zd dd�Zd!dd�Z dS )"� MultiFernet�fernets�Iterable[Fernet]c C s t |�}|s
td��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r$ rg r r r r& � s �
zMultiFernet.__init__�msgr' r c C r. r/ r0 )r$ rk r r r r4 � r5 zMultiFernet.encryptr6 r2 c C s | j d �||�S )Nr )rj r1 )r$ rk r6 r r r r1 � s zMultiFernet.encrypt_at_timer c C sb t �|�\}}| jD ]}z
|�||d �}W n ty Y q
w t�t�d�}| jd �|||�S )Nr r )r rN rj rO r r) r* r7 )r$ rk rP r- �f�pr8 r r r �rotate� s
�
zMultiFernet.rotateNrL rM c C s4 | j D ]}z |�||�W S ty Y qw t�r/ )rj rR r )r$ rk rL rl r r r rR � s
�zMultiFernet.decryptc C s6 | j D ]}z
|�|||�W S ty Y qw t�r/ )rj rS r )r$ rk rL r6 rl r r r rS � s
�zMultiFernet.decrypt_at_timec C s2 | j D ]}z|�|�W S ty Y qw t�r/ )rj rU r )r$ rk rl r r r rU � s
�z MultiFernet.extract_timestamp)rg rh )rk r' r r' )rk r' r6 r2 r r' )rk r r r' r/ )rk r rL rM r r' )rk r rL r2 r6 r2 r r' )rk r r r2 )
r
r r r& r4 r1 rn rR rS rU r r r r rf � s
rf )�
__future__r r r r) r3 �typing�collections.abcr Z cryptographyr Zcryptography.exceptionsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr r r
Z#cryptography.hazmat.primitives.hmacr � Exceptionr ra r rf r r r r �<module> s"