o 5 h"@sRdZddlZddlZddlmZddlmZddlmZdgZ Gddde Z dS)z|_|j||_|d>|_}|d>|_tddks)Jt dt |d|_ |dkr=|j |_ |dkrGtd}n|d ksMJtdtd fd d }||_dS) NI<llics||d>BS)N r)Xig1ig2rr integerifyUsz)ScryptEngine.__init__..integerify)r r r smix_bytesiv_bytesbmix_len bmix_half_lenstructcalcsizeStructstr bmix_struct_bmix_1bmixoperator itemgetterr)selfr r r r rrrr__init__:s$        zScryptEngine.__init__csn|j}td||d|d|j|jdkr}n|jdfddtd|D}td||d|dS)z run scrypt kdf for specified secret, salt, and keylen .. note:: * time cost is ``O(n * r * p)`` * mem cost is ``O(n * r)`` sha256r)roundsr c3s$|] }||VqdSNr).0offsetinputsmixrrr rs  z#ScryptEngine.run..r)rrr5r rjoinrange)r+rr r routputrr3rr\s    zScryptEngine.runc s|j|j}|j}|jt||fdd}t|}|j}d}d}|krN||@} tddt|| D} | |d7}|ks-|j S)asrun SCrypt smix function on a single input block :arg input: byte string containing input data. interpreted as 32*r little endian 4 byte integers. :returns: byte string containing output data derived by mixing input using n & r parameters. .. note:: time & mem cost are both ``O(n * r)`` c3s>d}|krt}|V||d7}|ksdSdS)Nrr)tuple)ilastr(bufferr rrvgens zScryptEngine.smix..vgenrrcs|] \}}||AVqdSr0rr1abrrrr6z$ScryptEngine.smix..) r(r&rr listunpack __getitem__r:rpack) r+r4r&rr?V get_v_elemn_maskr;jresultrr=rr5}s"    zScryptEngine.smixcCs|j}|dd}t|}d}||krG|d}tddt||D|||<}tddt||D|||||<}|}||ksdSdS)a block mixing function used by smix() uses salsa20/8 core to mix block contents. :arg source: source to read from. should be list of 32*r 4-byte integers (2*r salsa20 blocks). :arg target: target to write to. should be list with same size as source. the existing value of this buffer is ignored. .. warning:: this operates *in place* on target, so source & target should NOT be same list. .. note:: * time cost is ``O(r)`` -- loops 16*r times, salsa20() has ``O(1)`` cost. * memory cost is ``O(1)`` -- salsa20() uses 16 x uint4, all other operations done in-place. rNrcsr@r0rrArrrr6rDz$ScryptEngine.bmix..csr@r0rrArrrr6rD)r!iterrr)r+sourcetargethalftmpsiterrLjnrrrr(s $,zScryptEngine.bmixcCsX|dd}tddt|t|D|dd<}tddt||D|dd<dS)z0special bmix() method optimized for ``r=1`` caserNNcsr@r0rrArrrr6rDz'ScryptEngine._bmix_1..csr@r0rrArrrr6rD)rrrO)r+rPrQBrSrrrr's ($zScryptEngine._bmix_1)__name__ __module__ __qualname____doc__r r r rrr r!r&r classmethodrr,rr5r(r'rrrrrs$ "!C () rZr)r"passlib.utils.compatrpasslib.crypto.digestrpasslib.crypto.scrypt._salsar__all__objectrrrrrs