U
|
·ý°dç ã @ sâ d Z ddlmZ z0ddlmZ ddlmZmZ ddlm Z dZ
|
W n e k
|
rX dZ
|
Y nX dd l m Z dd
|
lZdZd Ze ejd Zd d Zdd Zdadd Zdd Zdd Zdd Zdd Zdd Zd d Z d d Z d!d" Z d
|
S )#z
|
Implements auth methods
|
é )ÚOperationalErroré )Údefault_backend)Ú serializationÚhashes)ÚpaddingTF)ÚpartialNé Úsha1c C sT | sdS t | ¡ }t | ¡ }t }| |dt
¡ | |¡ | ¡ }t||S )z'Scramble used for mysql_native_passwordó N)Úsha1_newÚdigestÚupdateÚSCRAMBLE_LENGTHÚ _my_crypt)ÚpasswordÚmessageZstage1Zstage2ÚsÚresult© r úDd:\z\workplace\vscode\pyvenv\venv\Lib\site-packages\pymysql/_auth.pyÚscramble_native_password s
|
r c C s6 t | }tt|D ]}|| || N < qt|S ©N)Ú bytearrayÚrangeÚlenÚbytes)Zmessage1Zmessage2r Úir r r r + s r c C s6 zddl m} | aW n tk
|
r0 tdY nX d S )Nr ©Úbindingsz='pynacl' package is required for ed25519_password auth method)Znaclr Ú_nacl_bindingsÚ ImportErrorÚ RuntimeErrorr r r r Ú
|
_init_nacl: s ÿr# c C sP t | }tt |d d@ g}tt |d d@ dB g}|t| dd
| S )Nr éø é é é@ r )r r )Zs32ÚbaZba0Zba31r r r Ú _scalar_clampF s r) c
|
C s t s
|
t t | ¡ ¡ }t|dd
}t |dd
| ¡ ¡ }t |¡}t |¡}t |¡}t || | ¡ ¡ }t |¡}t ||¡}t ||¡} || S )znSign a random scramble with elliptic curve Ed25519.
|
|
Secret and public key are derived from password.
|
Né )
|
r r# ÚhashlibÚsha512r r) Z!crypto_core_ed25519_scalar_reduceZ&crypto_scalarmult_ed25519_base_noclampZ crypto_core_ed25519_scalar_mulZ crypto_core_ed25519_scalar_add)
|
r ZscrambleÚhr ÚrÚRÚAÚkÚksÚSr r r Úed25519_passwordM s
|
|
|
|
r4 c C s | |¡ | ¡ }| ¡ |S r )Z write_packetÚ _read_packetÚ check_error)ÚconnZ send_dataÚpktr r r Ú
|
_roundtripv s
|
r9 c C sN |d t
}t| }t|}tt|D ] }|| ||| N < q(t|S r )r r r r r )r ÚsaltZpassword_bytesZsalt_lenr r r r Ú _xor_password} s r; c C sP t s tdt| d |}t |t ¡}| |tjtj t
|
¡ dt
|
¡ dd¡S )zhEncrypt password with salt and public_key.
|
|
Used for sha256_password and caching_sha2_password.
|
z\'cryptography' package is required for sha256_password or caching_sha2_password auth methodsó )Ú algorithmN)Zmgfr= Úlabel) Ú_have_cryptographyr" r; r Zload_pem_public_keyr Zencryptr ZOAEPZMGF1r ÚSHA1)r r: Z
|
public_keyr Zrsa_keyr r r Úsha2_rsa_encrypt s ÿýþrA c C s¾ | j r&trtd | jd }t| |S | ¡ rZ| ¡ | _| jsZ| jrZtrPtd t| d}| ¡ r|j
|
dd
| _trtd| j d¡ | jr°| jst dt | j| j| j}nd }t| |S )
|
Nz sha256: Sending plain passwordr< z$sha256: Requesting server public keyó r zReceived public key:
|
Úasciiz$Couldn't receive server's public keyr )Ú_secureÚDEBUGÚprintr r9 Úis_auth_switch_requestÚread_allr: Úserver_public_keyÚis_extra_auth_dataÚ_dataÚdecoder rA )r7 r8 Údatar r r Úsha256_password_auth s*
|
|
|
|
rN c C sl | sdS t | ¡ ¡ }t |¡ ¡ }t || ¡ ¡ }t|}tt|D ]}|| || N < qJt|S )zScramble algorithm used in cached_sha2_password fast path.
|
|
XOR(SHA256(password), SHA256(SHA256(SHA256(password)), nonce))
|
r )r+ Úsha256r r r r r )r ÚnonceÚp1Úp2Zp3Úresr r r r Úscramble_caching_sha2½ s rT c C sX | j st| dS | ¡ rFtr$td | ¡ | _t| j | j}t| |}| ¡ sdt d|j
|
d d
| d¡ | ¡ }|dkrtrtd | ¡ }| ¡ |S |dkr²t d| tr¾td | jràtrÐtd
|
t| | j d S | js8t| d }| ¡ st d |j
|
d d
|j
|
dd
| _tr8t| j d¡ t| j | j| j}t| |}d S )Nr z caching sha2: Trying fast pathz.caching sha2: Unknown packet for fast auth: %sr é z%caching sha2: succeeded by fast path.é z.caching sha2: Unknown result for fast auth: %sz!caching sha2: Trying full auth...z:caching sha2: Sending plain password via secure connectionr< ó z/caching sha2: Unknown packet for public key: %srC )r r9 rG rE rF rH r: rT rJ r rK ZadvanceZ
|
read_uint8r5 r6 rD rI rL rA )r7 r8 Z scrambledÚnrM r r r Úcaching_sha2_password_authÑ sN
|
|
|
ÿ
|
|
|
ÿrY ) Ú__doc__Úerrr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr r? r! Ú functoolsr r+ rE r Únewr r r r r# r) r4 r9 r; rA rN rT rY r r r r Ú<module> s2
|
)
|
