AlkantarClanX12
Your IP : 216.73.216.114
�
��nXc @� s� d Z d d l m Z m Z d d l m Z d d l m Z d d l Z d d l Z d d l
Z
e
j e � Z
d d l m Z e a e a e a e a d d l m Z m Z m Z d d l m Z m Z m Z m Z m Z m Z m Z m! Z! d d l" m# Z# d d
l$ m% Z% m& Z& m' Z' m( Z( d d l) j* j+ Z, d g Z- e% d � Z. e% d
� Z/ e% d � Z0 e% d � Z1 e% d � Z2 d Z3 d Z4 d � Z5 d e, j6 e, j7 e, j8 e, j9 e, j: e, j; f d � � YZ< d e< f d � � YZ= d e< f d � � YZ> d e< f d � � YZ? d e< f d � � YZ@ d e< f d � � YZA d e< f d! � � YZB d e= e< f d" � � YZC e% d# � ZD d$ eC f d% � � YZE d& eE f d' � � YZF d S(( s� passlib.bcrypt -- implementation of OpenBSD's BCrypt algorithm.
TODO:
* support 2x and altered-2a hashes?
http://www.openwall.com/lists/oss-security/2011/06/27/9
* deal with lack of PY3-compatibile c-ext implementation
i ( t with_statementt absolute_import( t b64encode( t sha256N( t warn( t PasslibHashWarningt PasslibSecurityWarningt PasslibSecurityError( t
safe_cryptt
repeat_stringt to_bytest
parse_versiont rngt
getrandstrt
test_cryptt
to_unicode( t bcrypt64( t ut
uascii_to_strt unicodet
str_to_uasciit bcrypts $2$s $2a$s $2x$s $2y$s $2b$t s< $2a$04$5BJqKfqMQvV7nS.yUguNcueVirQqDBGaLXSqj.rs.pZPlNR0UX/HKc C� sR y d d l } Wn t k
r$ d SXy d d l m } Wn t k
rM t SXt S( s!
internal helper which tries to distinguish pybcrypt vs bcrypt.
:returns:
True if cext-based py-bcrypt,
False if ffi-based bcrypt,
None if 'bcrypt' module not found.
.. versionchanged:: 1.6.3
Now assuming bcrypt installed, unless py-bcrypt explicitly detected.
Previous releases assumed py-bcrypt by default.
Making this change since py-bcrypt is (apparently) unmaintained and static,
whereas bcrypt is being actively maintained, and it's internal structure may shift.
i N( t __version__( R t ImportErrort Nonet bcrypt._bcryptR t Falset True( R R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt _detect_pybcrypt4 s
t
_BcryptCommonc B� sl e Z d Z d Z d Z d Z e j Z e Z
e e e
e e f Z i e e d � 6e e d � 6e e d � 6e e d
� 6Z d Z Z e j Z d Z d
Z d Z d Z d Z e Z e Z e Z e Z e Z e Z e! d � � Z" d � Z# d � Z$ e! d � � Z% e! d � � Z& e! d � � Z' e! d � � Z( e d � Z) d Z* e! d � � Z+ d � Z, e! e d � � Z- RS( s&
Base class which implements brunt of BCrypt code.
This is then subclassed by the various backends,
to override w/ backend-specific methods.
When a backend is loaded, the bases of the 'bcrypt' class proper
are modified to prepend the correct backend-specific subclass.
R t saltt roundst identt truncate_errori t 2t 2at 2yt 2bi i i t log2iH c
C� s� | j | � \ } } | t k r0 t d � � n | j t d � � \ } } t | � } | t d � | f k r� t j j | d � � n | d | d } } | d | d | d | p� d d | � S(
Ns> crypt_blowfish's buggy '2x' hashes are not currently supportedt $s %02ds malformed cost fieldi R R t checksumR! (
t _parse_identt IDENT_2Xt
ValueErrort splitR t intt uht exct MalformedHashErrorR ( t clst hashR! t tailt
rounds_strt dataR R t chk( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt from_string� s c C� s2 t d � | j | j | j | j f } t | � S( Ns %s%02d$%s%s( R R! R R R) R ( t selfR3 ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt to_string� s (c C� s) t d � | | j | j f } t | � S( s5 internal helper to prepare config string for backendss %s%02d$%s( R R R R ( R9 R! t config( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt _get_config� s c K� sd t | t � r! | j d � } n | j t � rK | d t j d k rK t St t | � j
| | � S( Nt asciii i ( t
isinstancet bytest decodet
startswitht IDENT_2AR t _padinfo2R t superR t needs_update( R2 R3 t kwds( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyRE � s
&c C� s* | j | � r" | j | � j � S| Sd S( s< helper to normalize hash, correcting any bcrypt padding bitsN( t identifyR8 R: ( R2 R3 ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt normhash� s c C� s" t t | � j � } t j | � S( N( RD R t _generate_saltR t
repair_unused( R2 R ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyRI � s c K� sb t t | � j | | � } | d k s3 t d � � t j | � \ } } | r^ t d t � n | S( Ns! HasSalt didn't generate new salt!s� encountered a bcrypt salt with incorrectly set padding bits; you may want to use bcrypt.normhash() to fix this; this will be an error under Passlib 2.0( RD R t
_norm_saltR t AssertionErrorR t check_repair_unusedR R ( R2 R RF t changed( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyRK � s
c C� sM t t | � j | d | �} t j | � \ } } | rI t d t � n | S( Nt relaxeds� encountered a bcrypt hash with incorrectly set padding bits; you may want to use bcrypt.normhash() to fix this; this will be an error under Passlib 2.0( RD R t _norm_checksumR RM R R ( R9 R) RO RN ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyRP � s
s9 -- recommend you install one (e.g. 'pip install bcrypt')c
� s} | t j � k s t d � � | j r, t S| j � t f � t rZ � t j j f 7� n � � � f d � } � � f d � } � � f d � � � � f d � } d } | d | � } | s� t
d � � � n( | t k r� t | _ t
j d � � n | d t � } | s#t
d
� � � nX | t k rBt
d � � � n9 | t � � t � r{t d � t j j � t | _ n t j d
d � } | d | � } | s�t
d � � � n< | t k r�t | _ t
j d � � n | t � | t � t j d
d � } | d | � } | s+t
d � � � nE | t k rSt | _ t
j d � � n t | _ | t � | t � t | _ t S( s�
helper called by from backend mixin classes' _load_backend_mixin() --
invoked after backend imports have been loaded, and performs
feature detection & testing common to all backends.
s1 _configure_workarounds() invoked from wrong classc � sY y � | | � SWnA � k
r% t St k
rT } t j d � | | d t �t SXd S( s8 verify() wrapper which traps 'unknown identifier' errorss< trapped unexpected response from %r backend: verify(%r, %r):t exc_infoN( t NotImplementedRL t logt debugR ( t secretR3 t err( t backendt err_typest verify( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt safe_verify" s
c � sz d } | j d � d } � | | � r; t d � � � n | j d � d } � | | � sv t d � | f � � n d S( s
helper to check for cryptblowfish 8bit bug (fixed in 2y/2b);
even though it's not known to be present in any of passlib's backends.
this is treated as FATAL, because it can easily result in seriously malformed hashes,
and we can't correct for it ourselves.
test cases from <http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/glibc/crypt_blowfish/wrapper.c.diff?r1=1.9;r2=1.10>
reference hash is the incorrectly generated $2x$ hash taken from above url
s �R= s8 05$/OK.fbVrR/bpIqNJ5ianF.CE5elHaaO4EbggVDjb8P19RukzXSM3es� passlib.hash.bcrypt: Your installation of the %r backend is vulnerable to the crypt_blowfish 8-bit bug (CVE-2011-2483), and should be upgraded or replaced with another backend.s8 05$/OK.fbVrR/bpIqNJ5ianF.Sa7shbm4.OzKpvFnX1pQLmQW96oUlCqs( %s backend failed to verify %s 8bit hashN( t encodeR t RuntimeError( R! RU t bug_hasht correct_hash( RW RY ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt assert_lacks_8bit_bug4 s
c � ss d d d } | j d � d } � | | � r4 t S| j d � d } � | | � so t d � | f � � n t S( s>
check for bsd wraparound bug (fixed in 2b)
this is treated as a warning, because it's rare in the field,
and pybcrypt (as of 2015-7-21) is unpatched, but some people may be stuck with it.
test cases from <http://www.openwall.com/lists/oss-security/2012/01/02/4>
NOTE: reference hash is of password "0"*72
NOTE: if in future we need to deliberately create hashes which have this bug,
can use something like 'hashpw(repeat_string(secret[:((1+secret) % 256) or 1]), 72)'
t
0123456789i i� R= s8 04$R1lJ2gkNaoPGdafE.H.16.nVyh2niHsGJhayOHLMiXlI45o8/DU.6s8 04$R1lJ2gkNaoPGdafE.H.16.1MKHPvmKwryeulRe225LKProWYwt9Ois. %s backend failed to verify %s wraparound hash( R[ R R\ R ( R! RU R] R^ ( RW RY ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt detect_wrap_bugO s c � s* � | � s d St d � | f � � d S( Ns1 %s backend unexpectedly has wraparound bug for %s( R\ ( R! ( RW Ra ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt assert_lacks_wrap_bugj s s; $2$04$5BJqKfqMQvV7nS.yUguNcuRfMMOXK0xPWavM7pOzjEi5ze5T1k8/St tests %s incorrectly rejected $2$ hashs1 %r backend lacks $2$ support, enabling workarounds! %s incorrectly rejected $2a$ hashs %s lacks support for $2a$ hashess� passlib.hash.bcrypt: Your installation of the %r backend is vulnerable to the bsd wraparound bug, and should be upgraded or replaced with another backend (enabling workaround for now).R$ R% s! %s incorrectly rejected $2y$ hashs2 %r backend lacks $2y$ support, enabling workaroundR& s! %s incorrectly rejected $2b$ hashs2 %r backend lacks $2b$ support, enabling workaround( R t _backend_mixin_mapRL t _workrounds_initializedR RY R, t _bcryptort enginet SaltErrorR\ RR t _lacks_20_supportRS RT t TEST_HASH_2ARB R R/ R0 R t _has_2a_wraparound_bugt replacet _lacks_2y_supportt IDENT_2Yt _lacks_2b_supportt IDENT_2Bt _fallback_ident(
t mixin_clsRW t dryrunRZ R_ Rb t test_hash_20t resultt test_hash_2yt test_hash_2b( ( RW Ra RX RY s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt _finalize_backend_mixin sf
c C� s | j | | j d | j �S( s�
common helper for backends to implement _calc_checksum().
takes in secret, returns (secret, ident) pair,
t new( t _norm_digest_argsR! t use_defaults( R9 RU ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt _prepare_digest_args� s c C� sU t | t � r! | j d � } n t j | � | rD | j | � n t | k re t j j | � � n | j r� t
| � d k r� | d } n | t k r� n� | t k r� | j
rK| j } qKn� | t k r� | j rK| j } qKng | t k r | j rK| rt | d � } n | j } qKn+ | t k r;t d � � n t d | � � | | f S( Ns utf-8i� iH s. $2x$ hashes not currently supported by passlibs unexpected ident value: %r( R> R R[ R/ t validate_secrett _check_truncate_policyt _BNULLR0 t NullPasswordErrorRk t lenRB Rp Ro Rq Rn Rm t IDENT_2Ri R R+ R\ RL ( R2 RU R! Ry ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyRz � s4
( s salts roundss identR" (. t __name__t
__module__t __doc__t namet setting_kwdst
checksum_sizeR t charmapt checksum_charsRp t
default_identR� RB R+ Rn t ident_valuesR t
ident_aliasest
min_salt_sizet
max_salt_sizet
salt_charst default_roundst
min_roundst
max_roundst rounds_costt
truncate_sizeR Re Rk Ri Rm Ro Rq t classmethodR8 R: R< RE RH RI RK RP t _no_backend_suggestionRx R| Rz ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR Y sF *
� t
_NoBackendc B� s e Z d Z d � Z RS( s�
mixin used before any backend has been loaded.
contains stubs that force loading of one of the available backends.
c C� s | j � t t | � j | � S( N( t _stub_requires_backendRD R t _calc_checksum( R9 RU ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� s
( R� R� R� R� ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� s t _BcryptBackendc B� s& e Z d Z e d � � Z d � Z RS( s-
backend which uses 'bcrypt' package
c C� s� t � r
t Sy d d l a Wn t k
r1 t SXy t j j } Wn t j d d t �d } n Xt j
d | � | j | | � S( Ni s& (trapped) error reading bcrypt versionRQ s <unknown>s% detected 'bcrypt' backend, version %r( R R R t _bcryptR t __about__R RS t warningR RT Rx ( Rr R� Rs t version( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt _load_backend_mixin# s
c C� s� | j | � \ } } | j | � } t | t � rE | j d � } n t j | | � } | j | � r� t | � t | � d k s� t d | | f � � t | t
� s� t � | d j d � S( NR= i s config mismatch: %r => %ri��( R| R< R> R R[ R� t hashpwRA R� RL R? R@ ( R9 RU R! R; R3 ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� I s .( R� R� R� R� R� R� ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� s &t _BcryptorBackendc B� s& e Z d Z e d � � Z d � Z RS( s/
backend which uses 'bcryptor' package
c C� s5 y d d l a Wn t k
r$ t SX| j | | � S( Ni ( t bcryptorRf R R Rx ( Rr R� Rs ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� ` s
c C� s� | j | � \ } } | j | � } t j j t � j | | � } | j | � rm t | � t | � d k ss t � t
| d � S( Ni i��( R| R< Rf Rg t EngineR t hash_keyRA R� RL R ( R9 RU R! R; R3 ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� j s
1( R� R� R� R� R� R� ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� [ s
t _PyBcryptBackendc B� s; e Z d Z d Z e d � � Z d � Z d � Z e Z RS( s/
backend which uses 'pybcrypt' package
c C� s� t � s
t Sy d d l a Wn t k
r1 t SXy t j j } Wn t j d d t �d } n Xt j
d | � t | � p� d } | d k r� t d | t
j j � | j d k r� d d l } | j � | _ n | j j | _ n | j | | � S(
Ni s( (trapped) error reading pybcrypt versionRQ s <unknown>s' detected 'pybcrypt' backend, version %ri sa py-bcrypt %s has a major security vulnerability, you should upgrade to py-bcrypt 0.3 immediately.( i i ( i i ( R R R t _pybcryptR R� R RS R� R RT R R R/ R0 R t
_calc_lockR t threadingt Lockt _calc_checksum_threadsafet __func__R� Rx ( Rr R� Rs R� t vinfoR� ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s*
c C� s! | j � | j | � SWd QXd S( N( R� t _calc_checksum_raw( R9 RU ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s
c C� su | j | � \ } } | j | � } t j | | � } | j | � ra t | � t | � d k sg t � t | d � S( Ni i��( R| R< R� R� RA R� RL R ( R9 RU R! R; R3 ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s
1N(
R� R� R� R R� R� R� R� R� R� ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� x s ! t _OsCryptBackendc B� s& e Z d Z e d � � Z d � Z RS( s0
backend which uses :func:`crypt.crypt`
c C� s# t d t � s t S| j | | � S( NRc ( R Rj R Rx ( Rr R� Rs ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s c C� s� | j | � \ } } | j | � } t | | � } | rr | j | � rd t | � t | � d k sj t � | d St j j d � � d S( Ni i��ss non-utf8 encoded passwords can't be handled by crypt.crypt() under python3, recommend running `pip install bcrypt`.( R| R< R RA R� RL R/ R0 t MissingBackendError( R9 RU R! R; R3 ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s 1
( R� R� R� R� R� R� ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s t _BuiltinBackendc B� s& e Z d Z e d � � Z d � Z RS( sA
backend which uses passlib's pure-python implementation
c C� sY d d l m } | t j j d � � s9 t j d � t Sd d l m a
| j | | � S( Ni ( t as_boolt PASSLIB_BUILTIN_BCRYPTs@ bcrypt 'builtin' backend not enabled via $PASSLIB_BUILTIN_BCRYPT( t
raw_bcrypt( t
passlib.utilsR� t ost environt getRS RT R t passlib.crypto._blowfishR� t _builtin_bcryptRx ( Rr R� Rs R� ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s
c C� sM | j | � \ } } t | | d d !| j j d � | j � } | j d � S( Ni i����R= ( R| R� R R[ R R@ ( R9 RU R! R7 ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s ( R� R� R� R� R� R� ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s
c B� sJ e Z d Z d Z e Z i e d 6e d 6e d 6e
d 6e d 6e d 6Z
RS( s�
This class implements the BCrypt password hash, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 22 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 12, must be between 4 and 31, inclusive.
This value is logarithmic, the actual number of iterations used will be :samp:`2**{rounds}`
-- increasing the rounds by +1 will double the amount of time taken.
:type ident: str
:param ident:
Specifies which version of the BCrypt algorithm will be used when creating a new hash.
Typically this option is not needed, as the default (``"2b"``) is usually the correct choice.
If specified, it must be one of the following:
* ``"2"`` - the first revision of BCrypt, which suffers from a minor security flaw and is generally not used anymore.
* ``"2a"`` - some implementations suffered from rare security flaws, replaced by 2b.
* ``"2y"`` - format specific to the *crypt_blowfish* BCrypt implementation,
identical to ``"2b"`` in all but name.
* ``"2b"`` - latest revision of the official BCrypt algorithm, current default.
:param bool truncate_error:
By default, BCrypt will silently truncate passwords larger than 72 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
.. versionadded:: 1.6
.. versionchanged:: 1.6
This class now supports ``"2y"`` hashes, and recognizes
(but does not support) the broken ``"2x"`` hashes.
(see the :ref:`crypt_blowfish bug <crypt-blowfish-bug>`
for details).
.. versionchanged:: 1.6
Added a pure-python backend.
.. versionchanged:: 1.6.3
Added support for ``"2b"`` variant.
.. versionchanged:: 1.7
Now defaults to ``"2b"`` variant.
R t pybcryptR� t os_cryptt builtin( s bcryptR� s bcryptorR� R� N( R� R� R� t backendsR t _backend_mixin_targetR� R R� R� R� R� R� Rd ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR � s A R( t _wrapped_bcryptc B� s< e Z d Z e d � e j D� � Z d Z e d � � Z RS( s�
abstracts out some bits bcrypt_sha256 & django_bcrypt_sha256 share.
- bypass backend-loading wrappers for hash() etc
- disable truncation support, sha256 wrappers don't need it.
c c� s! | ] } | d k r | Vq d S( R" N( s truncate_error( ( t .0t elem( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pys <genexpr>_ s c C� s d S( N( ( R2 RU ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR~ s s N(
R� R� R� t tupleR R� R R� R� R~ ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� Y s t
bcrypt_sha256c B� s� e Z d Z d Z e e f Z d � e � Z e Z e d � Z
e j d e j
� Z e d � � Z e d � � Z e d � Z d � Z d � Z RS(
s� This class implements a composition of BCrypt+SHA256, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods accept
all the same optional keywords as the base :class:`bcrypt` hash.
.. versionadded:: 1.6.2
.. versionchanged:: 1.7
Now defaults to ``"2b"`` variant.
R� c � s# t � f d � t j j � D� � S( Nc 3� s% | ] } | d � k r | Vq d S( i N( ( R� t item( R� ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pys <genexpr>� s ( t dictR R� t items( R� ( ( R� s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt <lambda>� s s $bcrypt-sha256$s�
^
[$]bcrypt-sha256
[$](?P<variant>2[ab])
,(?P<rounds>\d{1,2})
[$](?P<salt>[^$]{22})
(?:[$](?P<digest>.{31}))?
$
c C� s) t j | � } | s t S| j | j � S( N( R/ t to_unicode_for_identifyR RA t prefix( R2 R3 ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyRG � s c C� s� t | d d � } | j | j � s9 t j j | � � n | j j | � } | sf t j j | � � n | j d � } | j t j
� r� | t j
k r� t j j | � � n | d | j d � d t | � d | j d � d | j d � � S( NR= R3 R R! t variantR R) t digest(
R RA R� R/ R0 t InvalidHashErrort _hash_ret matchR1 t groupt _UZEROt ZeroPaddedRoundsErrorR. ( R2 R3 t mR ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR8 � s ! s $bcrypt-sha256$%s,%d$%s$%sc C� s8 | j | j j t � | j | j | j f } t | � S( N( t _templateR! t stript _UDOLLARR R R) R ( R9 R3 ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR: � s c C� sO t | t � r! | j d � } n t t | � j � � } t t | � j | � S( Ns utf-8( R> R R[ R R R� RD R� R� ( R9 RU t key( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� � s ( R� R� R� R� RB Rp R� R� R� R R� t ret compilet XR� R� RG R8 R� R: R� ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyR� | s
(G R� t
__future__R R t base64R t hashlibR R� R� t loggingt getLoggerR� RS t warningsR R R� R� Rf R� t passlib.excR R R R� R R R
R R R
R R t passlib.utils.binaryR t passlib.utils.compatR R R R t passlib.utils.handlerst utilst handlersR/ t __all__R� RB R+ Rn Rp R Rj R t SubclassBackendMixint
TruncateMixint
HasManyIdentst HasRoundst HasSaltt GenericHandlerR R� R� R� R� R� R� R R� R� R� ( ( ( s; /usr/lib/python2.7/site-packages/passlib/handlers/bcrypt.pyt <module> sN :" %"� �= A#b #