|
Server : Apache System : Linux cvar2.toservers.com 3.10.0-962.3.2.lve1.5.73.el7.x86_64 #1 SMP Wed Aug 24 21:31:23 UTC 2022 x86_64 User : njnconst ( 1116) PHP Version : 8.4.18 Disable Function : NONE Directory : /usr/lib64/python2.7/site-packages/django/utils/ |
Upload File : |
�
r�\c @ sL d Z d d l m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m
Z
d d l Z y e j � Z e
Z Wn0 e k
r� d d l Z e j d � e Z n Xd d l m Z d d l m Z d d l m Z d d l m Z d d
� Z d d d
� Z d � Z d � Z d � Z d d d � Z! d S( u3
Django's standard crypto functions and utilities.
i����( t unicode_literalsN( t reduceuj A secure pseudo-random number generator is not available on your system. Falling back to Mersenne Twister.( t settings( t force_bytes( t six( t xrangec C s\ | d k r t j } n t j | | j d � � j � } t j | d t | � d t j �S( u�
Returns the HMAC-SHA1 of 'value', using a key generated from key_salt and a
secret (which defaults to settings.SECRET_KEY).
A different key_salt should be passed in for every application of HMAC.
u utf-8t msgt digestmodN(
t NoneR t
SECRET_KEYt hashlibt sha1t encodet digestt hmact newR ( t key_saltt valuet secrett key( ( s5 /tmp/pip-install-XxeQeY/django/django/utils/crypto.pyt salted_hmac s "i u> abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789c C sy t sJ t j t j d t j � t j � t j f j d � � j
� � n d j g t | � D] } t j
| � ^ q] � S( u�
Returns a securely generated random string.
The default length of 12 with the a-z, A-Z, 0-9 character set returns
a 71-bit value. log_2((26+26+10)^12) =~ 71 bits
u %s%s%su utf-8u ( t using_sysrandomt randomt seedR
t sha256t getstatet timeR R R R
t joint ranget choice( t lengtht
allowed_charst i( ( s5 /tmp/pip-install-XxeQeY/django/django/utils/crypto.pyt get_random_string5 s #c C s� t | � t | � k r t Sd } t j rz t | t � rz t | t � rz xh t | | � D] \ } } | | | AO} qY Wn: x7 t | | � D]& \ } } | t | � t | � AO} q� W| d k S( u�
Returns True if the two strings are equal, False otherwise.
The time taken is independent of the number of characters that match.
For the sake of simplicity, this function executes in constant time only
when the two strings have the same length. It short-circuits when they
have different lengths. Since Django only uses it to compare hashes of
known expected length, this is acceptable.
i ( t lent FalseR t PY3t
isinstancet bytest zipt ord( t val1t val2t resultt xt y( ( s5 /tmp/pip-install-XxeQeY/django/django/utils/crypto.pyt constant_time_compareO s ' c C s t t j | � d � S( uq
Convert a binary string into a long integer
This is a clever optimization for fast xor vector math
i ( t intt binasciit hexlify( R, ( ( s5 /tmp/pip-install-XxeQeY/django/django/utils/crypto.pyt _bin_to_longf s c C s t j | | j d � � S( uw
Convert a long integer into a binary string.
hex_format_string is like "%020x" for padding 10 characters.
u ascii( R0 t unhexlifyR ( R, t hex_format_string( ( s5 /tmp/pip-install-XxeQeY/django/django/utils/crypto.pyt _long_to_bino s i c s� � d k s t � | s$ t j } n t | � } t � � � | � j } | sW | } n | d | k rv t d � � n | | } | | d | } d | d � | � | � � � t | � � j k r� | | � j � } n | d � j t | � 7} � j | j
t j � � � j | j
t j
� � � � � � � f d � } g t d | d � D] } | | � ^ q[}
d j |
d
� |
d
| S(
u
Implements PBKDF2 as defined in RFC 2898, section 5.2
HMAC+SHA256 is used as the default pseudo random function.
As of 2011, 10,000 iterations was the recommended default which
took 100ms on a 2.2Ghz Core 2 Duo. This is probably the bare
minimum for security given 1000 iterations was recommended in
2001. This code is very well optimized for CPython and is only
four times slower than openssl's implementation. Look in
django.contrib.auth.hashers for the present default.
i i i i u
dklen too bigu %%0%ixt c s7 � � � � � f d � } t t t j | � � � � S( Nc 3 s� � t j d � � } xj t t � � � D]V } � j � � j � } } | j | � | j | j � � | j � } t | � Vq) Wd S( Ns >I( t structt packR R/ t copyt updateR
R2 ( t ut jt dig1t dig2( R t innert
iterationst outert salt( s5 /tmp/pip-install-XxeQeY/django/django/utils/crypto.pyt U� s
( R5 R t operatort xor( R RC ( R4 R? R@ RA RB ( R s5 /tmp/pip-install-XxeQeY/django/django/utils/crypto.pyt F� s t i����I I���� ( t AssertionErrorR
R R t digest_sizet
OverflowErrorR" t
block_sizeR
R: t translateR t trans_36t trans_5CR R ( t passwordRB R@ t dklenR
t hlent lt rRF R, t T( ( R4 R? R@ RA RB s5 /tmp/pip-install-XxeQeY/django/django/utils/crypto.pyt pbkdf2w s,
,(" t __doc__t
__future__R R R7 R
R0 RD R t functoolsR R t SystemRandomt TrueR t NotImplementedErrort warningst warnR# t django.confR t django.utils.encodingR t django.utilsR t django.utils.six.movesR R R R! R. R2 R5 RU ( ( ( s5 /tmp/pip-install-XxeQeY/django/django/utils/crypto.pyt <module> s6