home *** CD-ROM | disk | FTP | other *** search
- """HMAC (Keyed-Hashing for Message Authentication) Python module.
-
- Implements the HMAC algorithm as described by RFC 2104.
- """
-
- import warnings as _warnings
-
- trans_5C = "".join ([chr (x ^ 0x5C) for x in xrange(256)])
- trans_36 = "".join ([chr (x ^ 0x36) for x in xrange(256)])
-
- # The size of the digests returned by HMAC depends on the underlying
- # hashing module used. Use digest_size from the instance of HMAC instead.
- digest_size = None
-
- # A unique object passed by HMAC.copy() to the HMAC constructor, in order
- # that the latter return very quickly. HMAC("") in contrast is quite
- # expensive.
- _secret_backdoor_key = []
-
- class HMAC:
- """RFC 2104 HMAC class. Also complies with RFC 4231.
-
- This supports the API for Cryptographic Hash Functions (PEP 247).
- """
- blocksize = 64 # 512-bit HMAC; can be changed in subclasses.
-
- def __init__(self, key, msg = None, digestmod = None):
- """Create a new HMAC object.
-
- key: key for the keyed hash object.
- msg: Initial input for the hash, if provided.
- digestmod: A module supporting PEP 247. *OR*
- A hashlib constructor returning a new hash object.
- Defaults to hashlib.md5.
- """
-
- if key is _secret_backdoor_key: # cheap
- return
-
- if digestmod is None:
- import hashlib
- digestmod = hashlib.md5
-
- if hasattr(digestmod, '__call__'):
- self.digest_cons = digestmod
- else:
- self.digest_cons = lambda d='': digestmod.new(d)
-
- self.outer = self.digest_cons()
- self.inner = self.digest_cons()
- self.digest_size = self.inner.digest_size
-
- if hasattr(self.inner, 'block_size'):
- blocksize = self.inner.block_size
- if blocksize < 16:
- # Very low blocksize, most likely a legacy value like
- # Lib/sha.py and Lib/md5.py have.
- _warnings.warn('block_size of %d seems too small; using our '
- 'default of %d.' % (blocksize, self.blocksize),
- RuntimeWarning, 2)
- blocksize = self.blocksize
- else:
- _warnings.warn('No block_size attribute on given digest object; '
- 'Assuming %d.' % (self.blocksize),
- RuntimeWarning, 2)
- blocksize = self.blocksize
-
- if len(key) > blocksize:
- key = self.digest_cons(key).digest()
-
- key = key + chr(0) * (blocksize - len(key))
- self.outer.update(key.translate(trans_5C))
- self.inner.update(key.translate(trans_36))
- if msg is not None:
- self.update(msg)
-
- ## def clear(self):
- ## raise NotImplementedError, "clear() method not available in HMAC."
-
- def update(self, msg):
- """Update this hashing object with the string msg.
- """
- self.inner.update(msg)
-
- def copy(self):
- """Return a separate copy of this hashing object.
-
- An update to this copy won't affect the original object.
- """
- other = self.__class__(_secret_backdoor_key)
- other.digest_cons = self.digest_cons
- other.digest_size = self.digest_size
- other.inner = self.inner.copy()
- other.outer = self.outer.copy()
- return other
-
- def _current(self):
- """Return a hash object for the current state.
-
- To be used only internally with digest() and hexdigest().
- """
- h = self.outer.copy()
- h.update(self.inner.digest())
- return h
-
- def digest(self):
- """Return the hash value of this hashing object.
-
- This returns a string containing 8-bit data. The object is
- not altered in any way by this function; you can continue
- updating the object after calling this function.
- """
- h = self._current()
- return h.digest()
-
- def hexdigest(self):
- """Like digest(), but returns a string of hexadecimal digits instead.
- """
- h = self._current()
- return h.hexdigest()
-
- def new(key, msg = None, digestmod = None):
- """Create a new hashing object and return it.
-
- key: The starting key for the hash.
- msg: if available, will immediately be hashed into the object's starting
- state.
-
- You can now feed arbitrary strings into the object using its update()
- method, and can ask for the hash value at any time by calling its digest()
- method.
- """
- return HMAC(key, msg, digestmod)
-