File: //usr/lib/python3.6/site-packages/pymysql/__pycache__/_auth.cpython-36.pyc
3
2�Y_\% � @ s: d Z ddlmZ ddlmZ ddlmZmZ y0ddlm Z ddl
m Z m Z ddl
mZ d ZW n ek
rt d
ZY nX dd lmZ dd lZdd lZdd lZdd lZd
Zd
Zeejd�Zdd� Zdd� Z dZ G dd� de �Z dd� Z dd� Z!d
a"dd� Z#d d � Z$d d � Z%d d!� Z&d"d#� Z'd$d%� Z(d&d'� Z)d(d)� Z*d*d+� Z+d S ),z
Implements auth methods
� )�PY2)�OperationalError)�byte2int�int2byte� )�default_backend)�
serialization�hashes)�paddingTF)�partialN� Zsha1c C sT | sdS t | �j� }t |�j� }t � }|j|dt� � |j|� |j� }t||�S )z'Scramble used for mysql_native_password� N)�sha1_new�digest�update�SCRAMBLE_LENGTH� _my_crypt)�password�messageZstage1Zstage2�s�result� r �/usr/lib/python3.6/_auth.py�scramble_native_password! s
r c C sF t | �}trt |�}x(tt|��D ]}|| || N < q"W t|�S )N)� bytearrayr �range�len�bytes)Zmessage1Zmessage2r �ir r r r / s r � c @ s e Zd Zdd� Zdd� ZdS )�RandStruct_323c C s" d| _ || j | _|| j | _d S )Ni���?)� max_value�seed1�seed2)�selfr" r# r r r �__init__B s zRandStruct_323.__init__c C sD | j d | j | j | _ | j | j d | j | _t| j �t| j� S )N� �! )r" r# r! �float)r$ r r r �my_rndG s zRandStruct_323.my_rndN)�__name__�
__module__� __qualname__r% r) r r r r r @ s r c C s� t jd� t| �}t|dt� �}tjd|�}tjd|�}t|d |d A |d |d A �}tj� }x8t t
tt |���D ]"}|j t
t|j� d �d �� qxW t
t|j� d ��} |j� }
tj� }x&|
D ] } |j t
t| �t| �A �� q�W |j� S )zScramble for old_passwordz�old password (for MySQL <4.1) is used. Upgrade your password with newer auth method.
old password support will be removed in future PyMySQL versionNz>LLr r � �@ )�warnings�warn�_hash_password_323�SCRAMBLE_LENGTH_323�struct�unpackr �io�BytesIOr �minr �writer �intr) �getvaluer ) r r Z hash_passZ hash_messageZ hash_pass_nZhash_message_nZrand_stZoutbuf�_Zextra�out�cr r r �scramble_old_passwordM s
"
r> c C s� d}d}d}xVdd� | D �D ]D}||d@ | | |d> d@ N }||d> |A d@ }|| d@ }q W |d
@ }|d@ }t jd ||�S )Ni5W0P� iqV4c S s g | ]}|dkrt |��qS )� � � � )r@ rA rB rC )r )�.0�xr r r �
<listcomp>j s z&_hash_password_323.<locals>.<listcomp>�? r l �� r r- z>LLl i���l i���)r3 �pack)r Znr�addZnr2r= Zr1Zr2r r r r1 d s r1 c C s6 yddl m} | aW n tk
r0 td��Y nX d S )Nr )�bindingsz='pynacl' package is required for ed25519_password auth method)ZnaclrJ �_nacl_bindings� ImportError� RuntimeError)rJ r r r �
_init_naclz s
rN c C sP t | �}tt |d d@ g��}tt |d d@ dB g��}|t| dd� � | S )Nr � r- � r. r )r r )Zs32ZbaZba0Zba31r r r �
_scalar_clamp� s rQ c
C s� t s
t� tj| �j� }t|dd� �}tj|dd� | �j� }t j|�}t j|�}t j|�}tj|| | �j� }t j|�}t j||�}t j ||�} || S )znSign a random scramble with elliptic curve Ed25519.
Secret and public key are derived from password.
NrB )
rK rN �hashlibZsha512r rQ Z!crypto_core_ed25519_scalar_reduceZ&crypto_scalarmult_ed25519_base_noclampZ crypto_core_ed25519_scalar_mulZ crypto_core_ed25519_scalar_add)
r Zscramble�hr �r�R�A�kZks�Sr r r �ed25519_password� s
rY c C s | j |� | j� }|j� |S )N)Z write_packet� _read_packet� check_error)�connZ send_data�pktr r r �
_roundtrip� s
r^ c C sZ |d t � }t| �}t|�}t|�}x,tt|��D ] }|| ||| N < q2W t|�S )N)r r r r r )r �saltZpassword_bytesZsalt_lenr r r r �
_xor_password� s r` c C sP t s td��t| d |�}tj|t� �}|j|tjtj t
j � d�t
j � dd��S )zhEncrypt password with salt and public_key.
Used for sha256_password and caching_sha2_password.
z\'cryptography' package is required for sha256_password or caching_sha2_password auth methods� )� algorithmN)Zmgfrb Zlabel) �_have_cryptographyrM r` r Zload_pem_public_keyr Zencryptr
ZOAEPZMGF1r ZSHA1)r r_ Z
public_keyr Zrsa_keyr r r �sha2_rsa_encrypt� s rd c C s� | j r&trtd� | jd }t| |�S |j� r\|j� | _| j r\| jr\trRtd� t| d�}|j � r�|j
dd � | _tr�td| jj d�� | jr�| js�t d��t
| j| j| j�}nd }t| |�S )
Nz sha256: Sending plain passwordra z$sha256: Requesting server public key� r zReceived public key:
�asciiz$Couldn't receive server's public keyr
)�_secure�DEBUG�printr r^ �is_auth_switch_request�read_allr_ �server_public_key�is_extra_auth_data�_data�decoder rd )r\ r] �datar r r �sha256_password_auth� s*
rq c C s| | sdS t j| �j� }t j|�j� }t j|| �j� }t|�}trJt|�}x(tt|��D ]}|| || N < qXW t|�S )z�Scramble algorithm used in cached_sha2_password fast path.
XOR(SHA256(password), SHA256(SHA256(SHA256(password)), nonce))
r
)rR Zsha256r r r r r r )r ZnonceZp1Zp2Zp3�resr r r r �scramble_caching_sha2� s rs c C sX | j st| d�S |j� rFtr$td� |j� | _t| j | j�}t| |�}|j� sdt d|j
d d� ��|j d� |j � }|dkr�tr�td� | j
� }|j� |S |dkr�t d| ��tr�td � | jr�tr�td
� t| | j d �S | j�s8t| d �}|j� �st d
|j
d d� ��|j
dd � | _t�r8t| jjd�� t| j | j| j�}t| |�}d S )Nr
z caching sha2: Trying fast pathz.caching sha2: Unknown packet for fast auth: %sr r& z%caching sha2: succeeded by fast path.� z.caching sha2: Unknwon result for fast auth: %sz!caching sha2: Trying full auth...z:caching sha2: Sending plain password via secure connectionra � z/caching sha2: Unknown packet for public key: %srf )r r^ rj rh ri rk r_ rs rm r rn ZadvanceZ
read_uint8rZ r[ rg rl ro rd )r\ r] Z scrambled�nrp r r r �caching_sha2_password_auth sJ
rw ),�__doc__Z_compatr �errr �utilr r Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr
rc rL � functoolsr rR r5 r3 r/ rh r �newr r r r2 �objectr r> r1 rK rN rQ rY r^ r` rd rq rs rw r r r r �<module> sD
)