U g d @sdZddlZddlZddlZddlmZddlmZddlm Z Gddde Z ddd d d Z d Z e fd dZddZdddZe ejdrejZejZndddddZddddZdS)z3 Django's standard crypto functions and utilities. N)settings) force_bytes)func_supports_parameterc@seZdZdZdS)InvalidAlgorithmz&Algorithm is not supported by hashlib.N)__name__ __module__ __qualname____doc__r r 7/tmp/pip-unpacked-wheel-_p7c4jiu/django/utils/crypto.pyr srsha1) algorithmc Cs|dkrtj}t|}t|}ztt|}Wn0tk r\}ztd||W5d}~XYnX|||}tj |t||dS)a* Return the HMAC of 'value', using a key generated from key_salt and a secret (which defaults to settings.SECRET_KEY). Default algorithm is SHA1, but any algorithm name supported by hashlib can be passed. A different key_salt should be passed in for every application of HMAC. Nz6%r is not an algorithm accepted by the hashlib module.)msg digestmod) rZ SECRET_KEYrgetattrhashlibAttributeErrorrdigesthmacnew)Zkey_saltvaluesecretr Zhasherekeyr r r salted_hmacsrZ>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789csdfddt|DS)aG Return a securely generated random string. The bit length of the returned value can be calculated with the formula: log_2(len(allowed_chars)^length) For example, with default `allowed_chars` (26+26+10), this gives: * length: 12, bit length =~ 71 bits * length: 22, bit length =~ 131 bits c3s|]}tVqdSN)secretschoice).0i allowed_charsr r >sz$get_random_string..)joinrange)lengthr"r r!r get_random_string3s r'cCstt|t|S)z:Return True if the two strings are equal, False otherwise.)rcompare_digestr)Zval1Zval2r r r constant_time_compareAsr)cCs<|dkrtj}|pd}t|}t|}t|j||||S)z)Return the hash of password using pbkdf2.N)rsha256r pbkdf2_hmacname)passwordZsaltZ iterationsZdklenrr r r pbkdf2Fs r.usedforsecurityT)r/cCs t|Sr)rmd5)datar/r r r r1Ysr1cCs t|Sr)rr)Zhash_algorithmr/r r r new_hash\sr3)N)rN)r0)r rrrZ django.confrZdjango.utils.encodingrZdjango.utils.inspectr ValueErrorrrZRANDOM_STRING_CHARSr'r)r.r1rr3r r r r s"