U 5ip @szdZddlZddlZddlZddlmZddlmZGdddeZ dddd d Z d Z e fd d Z ddZ dddZdS)z3 Django's standard crypto functions and utilities. N)settings) force_bytesc@seZdZdZdS)InvalidAlgorithmz&Algorithm is not supported by hashlib.N)__name__ __module__ __qualname____doc__r r 7/tmp/pip-unpacked-wheel-gcyiijx6/django/utils/crypto.pyr srsha1) algorithmc Cs|dkrtj}t|}t|}ztt|}Wn0tk r\}ztd||W5d}~XYnX|||}tj |t||dS)a* Return the HMAC of 'value', using a key generated from key_salt and a secret (which defaults to settings.SECRET_KEY). Default algorithm is SHA1, but any algorithm name supported by hashlib can be passed. A different key_salt should be passed in for every application of HMAC. Nz6%r is not an algorithm accepted by the hashlib module.)msg digestmod) rZ SECRET_KEYrgetattrhashlibAttributeErrorrdigesthmacnew)Zkey_saltvaluesecretr Zhasherekeyr r r salted_hmacs rZ>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789csdfddt|DS)aG Return a securely generated random string. The bit length of the returned value can be calculated with the formula: log_2(len(allowed_chars)^length) For example, with default `allowed_chars` (26+26+10), this gives: * length: 12, bit length =~ 71 bits * length: 22, bit length =~ 131 bits c3s|]}tVqdS)N)secretschoice).0i allowed_charsr r =sz$get_random_string..)joinrange)lengthr r rr get_random_string2s r%cCstt|t|S)z:Return True if the two strings are equal, False otherwise.)rcompare_digestr)Zval1Zval2r r r constant_time_compare@sr'cCs<|dkrtj}|pd}t|}t|}t|j||||S)z)Return the hash of password using pbkdf2.N)rsha256r pbkdf2_hmacname)passwordZsaltZ iterationsZdklenrr r r pbkdf2Es r,)N)rN)rrrrZ django.confrZdjango.utils.encodingr ValueErrorrrZRANDOM_STRING_CHARSr%r'r,r r r r s