File: //opt/alt/python37/lib/python3.7/site-packages/pymysql/__pycache__/_auth.cpython-37.pyc
B
�P�e� � @ s� d Z ddlmZ y0ddlmZ ddlmZmZ ddlm Z dZ
W n e k
rX dZ
Y nX dd l m
Z
dd
lZdZd Ze
ejd �Zd
d� Zdd� Zdadd� Zdd� Zdd� Zdd� Zdd� Zdd � Zd d � Z d d � Z d!d"� Z d
S )#z
Implements auth methods
� )�OperationalError� )�default_backend)�
serialization�hashes)�paddingTF)�partialN� �sha1c C sT | sdS t | ��� }t |��� }t � }|�|dt� � |�|� |�� }t||�S )z'Scramble used for mysql_native_password� N)�sha1_new�digest�update�SCRAMBLE_LENGTH� _my_crypt)�password�messageZstage1Zstage2�s�result� r �>/opt/alt/python37/lib/python3.7/site-packages/pymysql/_auth.py�scramble_native_password s
r c C s: t | �}x(tt|��D ]}|| || N < qW t|�S )N)� bytearray�range�len�bytes)Zmessage1Zmessage2r �ir r r r + s r c C s6 yddl m} | aW n tk
r0 td��Y nX d S )Nr )�bindingsz='pynacl' package is required for ed25519_password auth method)Znaclr �_nacl_bindings� ImportError� RuntimeError)r r r r �
_init_nacl: s r! c C sP t | �}tt |d d@ g��}tt |d d@ dB g��}|t| dd� � | S )Nr � � � �@ r )r r )Zs32�baZba0Zba31r r r �
_scalar_clampF s r' c
C s� t s
t� t�| ��� }t|dd� �}t�|dd� | ��� }t �|�}t �|�}t �|�}t�|| | ��� }t �|�}t �||�}t � ||�} || S )znSign a random scramble with elliptic curve Ed25519.
Secret and public key are derived from password.
N� )
r r! �hashlib�sha512r
r' Z!crypto_core_ed25519_scalar_reduceZ&crypto_scalarmult_ed25519_base_noclampZ crypto_core_ed25519_scalar_mulZ crypto_core_ed25519_scalar_add)
r Zscramble�hr �r�R�A�k�ks�Sr r r �ed25519_passwordM s
r2 c C s | � |� | �� }|�� |S )N)Z write_packet� _read_packet� check_error)�connZ send_data�pktr r r �
_roundtripv s
r7 c C sR |d t � }t| �}t|�}x,tt|��D ] }|| ||| N < q*W t|�S )N)r r r r r )r �saltZpassword_bytesZsalt_lenr r r r �
_xor_password} s r9 c C sP t s td��t| d |�}t�|t� �}|�|tjtj t
� � d�t
� � dd��S )zhEncrypt password with salt and public_key.
Used for sha256_password and caching_sha2_password.
z\'cryptography' package is required for sha256_password or caching_sha2_password auth methods� )� algorithmN)Zmgfr; �label) �_have_cryptographyr r9 r Zload_pem_public_keyr Zencryptr ZOAEPZMGF1r �SHA1)r r8 Z
public_keyr Zrsa_keyr r r �sha2_rsa_encrypt� s r? c C s� | j r&trtd� | jd }t| |�S |�� rZ|�� | _| jsZ| jrZtrPtd� t| d�}|� � r�|j
dd � | _tr�td| j� d�� | jr�| js�t d��t
| j| j| j�}nd }t| |�S )
Nz sha256: Sending plain passwordr: z$sha256: Requesting server public key� r zReceived public key:
�asciiz$Couldn't receive server's public keyr )�_secure�DEBUG�printr r7 �is_auth_switch_request�read_allr8 �server_public_key�is_extra_auth_data�_data�decoder r? )r5 r6 �datar r r �sha256_password_auth� s*
rL c C sp | sdS t �| ��� }t �|��� }t �|| ��� }t|�}x(tt|��D ]}|| || N < qLW t|�S )z�Scramble algorithm used in cached_sha2_password fast path.
XOR(SHA256(password), SHA256(SHA256(SHA256(password)), nonce))
r )r) �sha256r
r r r r )r �nonce�p1�p2Zp3�resr r r r �scramble_caching_sha2� s rR c C sX | j st| d�S |�� rFtr$td� |�� | _t| j | j�}t| |�}|�� sdt d|j
d d� ��|� d� |� � }|dkr�tr�td� | �
� }|�� |S |dkr�t d| ��tr�td � | jr�tr�td
� t| | j d �S | j�s8t| d �}|�� �st d
|j
d d� ��|j
dd � | _t�r8t| j�d�� t| j | j| j�}t| |�}d S )Nr z caching sha2: Trying fast pathz.caching sha2: Unknown packet for fast auth: %sr � z%caching sha2: succeeded by fast path.� z.caching sha2: Unknown result for fast auth: %sz!caching sha2: Trying full auth...z:caching sha2: Sending plain password via secure connectionr: � z/caching sha2: Unknown packet for public key: %srA )r r7 rE rC rD rF r8 rR rH r rI �advanceZ
read_uint8r3 r4 rB rG rJ r? )r5 r6 Z scrambled�nrK r r r �caching_sha2_password_auth� sJ
rX ) �__doc__�errr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r= r � functoolsr r) rC r �newr r r r r! r' r2 r7 r9 r? rL rR rX r r r r �<module> s2
)