123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107 |
- """HMAC (Keyed-Hashing for Message Authentication) Python module.
- Implements the HMAC algorithm as described by RFC 2104.
- """
- def _strxor(s1, s2):
- """Utility method. XOR the two strings s1 and s2 (must have same length).
- """
- return "".join(map(lambda x, y: chr(ord(x) ^ ord(y)), s1, s2))
- # The size of the digests returned by HMAC depends on the underlying
- # hashing module used.
- digest_size = None
- # A unique object passed by HMAC.copy() to the HMAC constructor, in order
- # that the latter return very quickly. HMAC("") in contrast is quite
- # expensive.
- _secret_backdoor_key = []
- class HMAC:
- """RFC2104 HMAC class.
- This supports the API for Cryptographic Hash Functions (PEP 247).
- """
- def __init__(self, key, msg = None, digestmod = None):
- """Create a new HMAC object.
- key: key for the keyed hash object.
- msg: Initial input for the hash, if provided.
- digestmod: A module supporting PEP 247. Defaults to the md5 module.
- """
- if key is _secret_backdoor_key: # cheap
- return
- if digestmod is None:
- import md5
- digestmod = md5
- self.digestmod = digestmod
- self.outer = digestmod.new()
- self.inner = digestmod.new()
- self.digest_size = digestmod.digest_size
- blocksize = 64
- ipad = "\x36" * blocksize
- opad = "\x5C" * blocksize
- if len(key) > blocksize:
- key = digestmod.new(key).digest()
- key = key + chr(0) * (blocksize - len(key))
- self.outer.update(_strxor(key, opad))
- self.inner.update(_strxor(key, ipad))
- if msg is not None:
- self.update(msg)
- ## def clear(self):
- ## raise NotImplementedError, "clear() method not available in HMAC."
- def update(self, msg):
- """Update this hashing object with the string msg.
- """
- self.inner.update(msg)
- def copy(self):
- """Return a separate copy of this hashing object.
- An update to this copy won't affect the original object.
- """
- other = HMAC(_secret_backdoor_key)
- other.digestmod = self.digestmod
- other.digest_size = self.digest_size
- other.inner = self.inner.copy()
- other.outer = self.outer.copy()
- return other
- def digest(self):
- """Return the hash value of this hashing object.
- This returns a string containing 8-bit data. The object is
- not altered in any way by this function; you can continue
- updating the object after calling this function.
- """
- h = self.outer.copy()
- h.update(self.inner.digest())
- return h.digest()
- def hexdigest(self):
- """Like digest(), but returns a string of hexadecimal digits instead.
- """
- return "".join([hex(ord(x))[2:].zfill(2)
- for x in tuple(self.digest())])
- def new(key, msg = None, digestmod = None):
- """Create a new hashing object and return it.
- key: The starting key for the hash.
- msg: if available, will immediately be hashed into the object's starting
- state.
- You can now feed arbitrary strings into the object using its update()
- method, and can ask for the hash value at any time by calling its digest()
- method.
- """
- return HMAC(key, msg, digestmod)
|