File: //opt/saltstack/salt/lib/python3.10/site-packages/cryptography/__pycache__/fernet.cpython-310.pyc
o
�N�g( � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m
Z
d dl m Z m
Z
d dlmZmZmZ d dlmZ G dd � d e�Zd
ZG d d � d �ZG d
d� d�ZdS )� )� annotationsN)�utils)�InvalidSignature)�hashes�padding)�Cipher�
algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__�
__module__� __qualname__� r r �G/opt/saltstack/salt/lib/python3.10/site-packages/cryptography/fernet.pyr s r �< c @ s� e Zd Z d*d+dd �Zed,d d ��Zd-dd�Zd.dd�Zd/dd�Zd*d0dd�Z d1d d �Z
d2d d �Z e d3d!d"��Z
d4d#d$�Zd5d(d)�ZdS )6�FernetN�key� bytes | str�backend�
typing.Any�return�Nonec
C sh zt �|�}W n tjy } ztd�|�d }~ww t|�dkr$td��|d d� | _|dd � | _d S )Nz4Fernet key must be 32 url-safe base64-encoded bytes.� � )�base64�urlsafe_b64decode�binascii�Error�
ValueError�len� _signing_key�_encryption_key)�selfr r �excr r r �__init__ s ���� �zFernet.__init__�bytesc C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key/ s zFernet.generate_key�datac C � | � |tt�� ��S �N��encrypt_at_time�int�time)r# r, r r r �encrypt3 � zFernet.encrypt� current_timer1 c C s t �d�}| �|||�S )Nr )r( r) �_encrypt_from_parts)r# r, r5 �ivr r r r0 6 s
zFernet.encrypt_at_timer7 c C s� t �d|� t�tjj��� }|�|�|� � }t
t�| j �t �
|���� }|�|�|� � }d|jddd� | | }t| jt�� �} | �|� | � � }
t�||
�S )Nr, � �� �big)�length� byteorder)r � _check_bytesr �PKCS7r �AES�
block_size�padder�update�finalizer r" r �CBC� encryptor�to_bytesr
r! r �SHA256r r' ) r# r, r5 r7 rA Z padded_datarE �
ciphertextZ basic_parts�hZhmacr r r r6 : s,
�� ����
zFernet._encrypt_from_parts�token�ttl�
int | Nonec C s: t �|�\}}|d u rd }n|tt�� �f}| �|||�S r. )r �_get_unverified_token_datar1 r2 �
_decrypt_data)r# rJ rK � timestampr, � time_infor r r �decryptS s
zFernet.decryptc C s0 |d u rt d��t�|�\}}| �||||f�S )Nz6decrypt_at_time() can only be used with a non-None ttl)r r rM rN )r# rJ rK r5 rO r, r r r �decrypt_at_time[ s �zFernet.decrypt_at_timec C s t �|�\}}| �|� |S r. )r rM �_verify_signature)r# rJ rO r, r r r �extract_timestampe s
zFernet.extract_timestamp�tuple[int, bytes]c C s� t | ttf�s td��zt�| �}W n ttjfy t�w |r'|d dkr)t�t |�dk r1t�t
j |dd� dd�}||fS )Nztoken must be bytes or strr � � � r: )r< ) �
isinstance�strr& � TypeErrorr r r r r r r1 �
from_bytes)rJ r, rO r r r rM k s � z!Fernet._get_unverified_token_datac C sN t | jt�� �}|�|d d� � z |�|dd � � W d S ty& t�w )N���)r
r! r rG rB Zverifyr r )r# r, rI r r r rS ~ s �zFernet._verify_signaturerO rP �tuple[int, int] | Nonec C s� |d ur|\}}|| |k rt �|t |k rt �| �|� |dd� }|dd� }tt�| j�t�|��� � }|�
|�} z| |� � 7 } W n t yM t �w t
�tjj��� }
|
�
| �} z | |
� � 7 } W | S t yn t �w )NrW � r] )r �_MAX_CLOCK_SKEWrS r r r? r" r rD � decryptorrB rC r r r> r@ �unpadder) r# r, rO rP rK r5 r7 rH ra Zplaintext_paddedrb Zunpaddedr r r rN � s8
��
�
��zFernet._decrypt_datar. )r r r r r r )r r& )r, r& r r& )r, r& r5 r1 r r& )r, r& r5 r1 r7 r& r r& )rJ r rK rL r r& )rJ r rK r1 r5 r1 r r& )rJ r r r1 )rJ r r rU )r, r& r r )r, r& rO r1 rP r^ r r& )r r
r r% � classmethodr+ r3 r0 r6 rQ rR rT � staticmethodrM rS rN r r r r r s �
r c @ sJ e Zd Zddd�Zddd �Zdd d
�Zddd�Zd d dd�Zd dd�ZdS ) � MultiFernet�fernets�typing.Iterable[Fernet]c C s t |�}|s
td��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r# rf r r r r% � s �
zMultiFernet.__init__�msgr& r c C r- r. r/ )r# rj r r r r3 � r4 zMultiFernet.encryptr5 r1 c C s | j d �||�S )Nr )ri r0 )r# rj r5 r r r r0 � s zMultiFernet.encrypt_at_timer c C sb t �|�\}}| jD ]}z
|�||d �}W n ty Y q
w t�t�d�}| jd �|||�S )Nr r )r rM ri rN r r( r) r6 )r# rj rO r, �f�pr7 r r r �rotate� s
�
zMultiFernet.rotateNrK rL c C s4 | j D ]}z |�||�W S ty Y qw t�r. )ri rQ r )r# rj rK rk r r r rQ � s
�zMultiFernet.decryptc C s6 | j D ]}z
|�|||�W S ty Y qw t�r. )ri rR r )r# rj rK r5 rk r r r rR � s
�zMultiFernet.decrypt_at_time)rf rg )rj r& r r& )rj r& r5 r1 r r& )rj r r r& r. )rj r rK rL r r& )rj r rK r1 r5 r1 r r& ) r r
r r% r3 r0 rm rQ rR r r r r re � s
re )Z
__future__r r r r( r2 �typingZ cryptographyr Zcryptography.exceptionsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr r r Z#cryptography.hazmat.primitives.hmacr
� Exceptionr r` r re r r r r �<module> s