ruạṛ
a �u:j � @ s� d dl mZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dl m Z d dl m Z m Z d dlmZmZmZ d dlmZ G dd � d e�Zd ZG d d � d �ZG d d� d�ZdS )� )� annotationsN)�utils)�InvalidSignature)�hashes�padding)�Cipher� algorithms�modes)�HMACc @ s e Zd ZdS )� InvalidTokenN)�__name__� __module__� __qualname__� r r �H/opt/bart/bart_venv/lib64/python3.9/site-packages/cryptography/fernet.pyr s r �< c @ s� e Zd Zd)dddd�dd�Zedd �d d ��Zddd �d d�Zdddd�dd�Zddddd�dd�Zd*dddd�dd�Z ddddd�dd �Z ddd �d d �Z e dd d �d!d"��Z ddd �d#d$�Zddd%dd&�d'd(�ZdS )+�FernetN� bytes | strz typing.Any�None)�key�backend�returnc C st zt �|�}W n0 tjy> } ztd�|�W Y d }~n d }~0 0 t|�dkrTtd��|d d� | _|dd � | _d S )Nz4Fernet key must be 32 url-safe base64-encoded bytes.� � )�base64�urlsafe_b64decode�binascii�Error� ValueError�len� _signing_key�_encryption_key)�selfr r �excr r r �__init__ s �� �zFernet.__init__�bytes)r c C s t �t�d��S )Nr )r �urlsafe_b64encode�os�urandom)�clsr r r � generate_key/ s zFernet.generate_key)�datar c C s | � |tt�� ��S �N��encrypt_at_time�int�time)r" r+ r r r �encrypt3 s zFernet.encryptr/ )r+ � current_timer c C s t �d�}| �|||�S )Nr )r' r( �_encrypt_from_parts)r" r+ r2 �ivr r r r. 6 s zFernet.encrypt_at_time)r+ r2 r4 r c C s� t �d|� t�tjj��� }|�|�|� � }t t�| j �t � |���� }|�|�|� � }d|jddd� | | }t| jt�� �} | �|� | � � } t�|| �S )Nr+ � �� �big)�length� byteorder)r � _check_bytesr �PKCS7r �AES� block_size�padder�update�finalizer r! r �CBC� encryptor�to_bytesr r r �SHA256r r& ) r" r+ r2 r4 r> Z padded_datarB � ciphertextZ basic_parts�h�hmacr r r r3 : s( � ���� zFernet._encrypt_from_parts� int | None)�token�ttlr c C s: t �|�\}}|d u r d }n|tt�� �f}| �|||�S r, )r �_get_unverified_token_datar/ r0 � _decrypt_data)r" rI rJ � timestampr+ � time_infor r r �decryptS s zFernet.decrypt)rI rJ r2 r c C s0 |d u rt d��t�|�\}}| �||||f�S )Nz6decrypt_at_time() can only be used with a non-None ttl)r r rK rL )r" rI rJ r2 rM r+ r r r �decrypt_at_time[ s �zFernet.decrypt_at_time)rI r c C s t �|�\}}| �|� |S r, )r rK �_verify_signature)r" rI rM r+ r r r �extract_timestampe s zFernet.extract_timestampztuple[int, bytes]c C s� t | ttf�std��zt�| �}W n ttjfy@ t�Y n0 |rR|d dkrVt�t |�dk rft�t j |dd� dd�}||fS )Nztoken must be bytes or strr � � � r7 )r9 ) � isinstance�strr% � TypeErrorr r r r r r r/ � from_bytes)rI r+ rM r r r rK k s z!Fernet._get_unverified_token_datac C sT t | jt�� �}|�|d d� � z|�|dd � � W n tyN t�Y n0 d S )N���)r r r rD r? �verifyr r )r" r+ rF r r r rQ ~ s zFernet._verify_signatureztuple[int, int] | None)r+ rM rN r c C s� |d ur0|\}}|| |k r t �|t |k r0t �| �|� |dd� }|dd� }tt�| j�t�|��� � }|� |�} z| |� � 7 } W n t y� t �Y n0 t �tjj��� } | � | �} z| | � � 7 } W n t y� t �Y n0 | S )NrT � rZ )r �_MAX_CLOCK_SKEWrQ r r r< r! r rA � decryptorr? r@ r r r; r= �unpadder) r" r+ rM rN rJ r2 r4 rE r^ Zplaintext_paddedr_ Zunpaddedr r r rL � s0 � zFernet._decrypt_data)N)N)r r r r$ � classmethodr* r1 r. r3 rO rP rR � staticmethodrK rQ rL r r r r r s � r c @ s� e Zd Zdd�dd�Zddd�dd�Zdd dd �d d �Zd dd�dd�Zdd ddd�dd�Zd d d dd�dd�Zd d d�dd�Z dS )� MultiFernetztyping.Iterable[Fernet])�fernetsc C s t |�}|std��|| _d S )Nz1MultiFernet requires at least one Fernet instance)�listr �_fernets)r" rc r r r r$ � s �zMultiFernet.__init__r% )�msgr c C s | � |tt�� ��S r, r- )r" rf r r r r1 � s zMultiFernet.encryptr/ )rf r2 r c C s | j d �||�S )Nr )re r. )r" rf r2 r r r r. � s zMultiFernet.encrypt_at_timer c C sh t �|�\}}| jD ]0}z|�||d �}W qJW q tyB Y q0 qt�t�d�}| jd �|||�S )Nr r )r rK re rL r r' r( r3 )r" rf rM r+ �f�pr4 r r r �rotate� s zMultiFernet.rotateNrH )rf rJ r c C s: | j D ]*}z|�||�W S ty. Y q0 qt�d S r, )re rO r )r" rf rJ rg r r r rO � s zMultiFernet.decrypt)rf rJ r2 r c C s< | j D ],}z|�|||�W S ty0 Y q0 qt�d S r, )re rP r )r" rf rJ r2 rg r r r rP � s zMultiFernet.decrypt_at_timec C s8 | j D ](}z|�|�W S ty, Y q0 qt�d S r, )re rR r )r" rf rg r r r rR � s z MultiFernet.extract_timestamp)N) r r r r$ r1 r. ri rO rP rR r r r r rb � s rb )� __future__r r r r' r0 �typingZ cryptographyr Zcryptography.exceptionsr Z cryptography.hazmat.primitivesr r Z&cryptography.hazmat.primitives.ciphersr r r Z#cryptography.hazmat.primitives.hmacr � Exceptionr r] r rb r r r r �<module> s
cải xoăn