o

;j��@s�dd
lm
Z
mZ
ddlmZ
ddlmZ
ddlmZ
ddl	m
Z

ddgZdd	d
ddd
dddddd�Zdd�e�
�D�
ZGdd�de�Zddd�
ZdS)�)�bord�tobytes)
�	unhexlify)
�BLAKE2s)
�strxor)
�get_random_bytes�new�HMACz1.2.840.113549.2.7z1.2.840.113549.2.8z1.2.840.113549.2.9z1.2.840.113549.2.10z1.2.840.113549.2.11z1.2.840.113549.2.12z1.2.840.113549.2.13z2.16.840.1.101.3.4.2.13z2.16.840.1.101.3.4.2.14z2.16.840.1.101.3.4.2.15z2.16.840.1.101.3.4.2.16)z
1.3.14.3.2.26z2.16.840.1.101.3.4.2.4z2.16.840.1.101.3.4.2.1z2.16.840.1.101.3.4.2.2z2.16.840.1.101.3.4.2.3z2.16.840.1.101.3.4.2.5z2.16.840.1.101.3.4.2.6z2.16.840.1.101.3.4.2.7z2.16.840.1.101.3.4.2.8z2.16.840.1.101.3.4.2.9z2.16.840.1.101.3.4.2.10c
Csi|]\}
}||
�qS�r
)�.0�
k�
vr
r
�H/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/Hash/HMAC.py�
<dictcomp>:src@sReZ
dZd
Zddd�
Zdd�Zdd	�Zd
d�Zdd
�Zdd�Z	dd�Z
dd�ZdS)r	aB
An HMAC hash object.
    Do not instantiate directly. Use the :func:`new` function.

    :ivar digest_size: the size in bytes of the resulting MAC tag
    :vartype digest_size: integer

    :ivar oid: the ASN.1 object ID of the HMAC algorithm.
               Only present if the algorithm was officially assigned one.
    �Nc		Cs
|durd
dlm
}
|}|durd}|j|_||_zt|j|_Wnttfy,


Yn
wt|
t	�r6|
�
�}
z't|
�
|jk
rJ|
d|jt|
�
}n|�
|
�
��}|d|jt|�
}Wntyh


td�
�
wt|dt|�
�}|�
|�
|_|j�|�

t|dt|�
�}|�
|�
|_dS)Nr
)
�MD5r�
zHash type incompatible to HMAC�
6�
\)�Cryptodome.Hashr�digest_size�
_digestmod�_hash2hmac_oid�oid�KeyError�AttributeError�
isinstance�
memoryviewr�len�
block_sizer�digest�
ValueErrorr�_inner�update�_outer)	�self�key�msg�	digestmodrZkey_0Zhash_kZ
key_0_ipadZ
key_0_opadr
r
r�__init__Hs8





�



�
�
z
HMAC.__init__cCs|j�
|
�

|S)
z�Authenticate the next chunk of message.

        Args:
            data (byte string/byte array/memoryview): The next chunk of data
        )r"r#)r%r'r
r
rr#xs
zHMAC.updatecCs|j�
|j|j|
|�}|S)
z2Carry out the expensive inner loop for PBKDF2-HMAC)r�_pbkdf2_hmac_assistr"r$)r%Zfirst_digestZ
iterations�resultr
r
rr*�s



�zHMAC._pbkdf2_hmac_assistc
Cs*td
|j
d�}
|j��|
_|j��|
_|
S)a+
Return a copy ("clone") of the HMAC object.

        The copy will have the same internal state as the original HMAC
        object.
        This can be used to efficiently compute the MAC tag of byte
        strings that share a common initial substring.

        :return: An :class:`HMAC`
        sfake key)
r()r	rr"�copyr$)r%Znew_hmacr
r
rr,�s
z	HMAC.copyc
Cs"|j�
�}
|
�|j���

|
��S)
z�Return the **binary** (non-printable) MAC tag of the message
        authenticated so far.

        :return: The MAC tag digest, computed over the data processed so far.
                 Binary form.
        :rtype: byte string
        )r$r,r#r"r )r%Zfrozen_outer_hashr
r
rr �s
	

zHMAC.digestcCsHtd
�
}t
jd||
d�}t
jd||��d�}|��|��kr"td�
�
dS)ah
Verify that a given **binary** MAC (computed by another party)
        is valid.

        Args:
          mac_tag (byte string/byte string/memoryview): the expected MAC of the message.

        Raises:
            ValueError: if the MAC does not match. It means that the message
                has been tampered with or that the MAC key is incorrect.
        ��)Zdigest_bitsr&�datazMAC check failedN)rrrr r!)r%Zmac_tagZsecretZmac1Zmac2r
r
r�verify�s

�zHMAC.verifyc

Csd
�dd�t
|���
D�
�
S)z�Return the **printable** MAC tag of the message authenticated so far.

        :return: The MAC tag, computed over the data processed so far.
                 Hexadecimal encoded.
        :rtype: string
        �c
Ssg|]}
dt|
�
�qS)
z%02x)
r)r�
xr
r
r�
<listcomp>�s
�z"HMAC.hexdigest.<locals>.<listcomp>)�join�tupler )
r%r
r
r�	hexdigest�s


�zHMAC.hexdigestcCs|�t
t|
�
�
�

d
S)a~
Verify that a given **printable** MAC (computed by another party)
        is valid.

        Args:
            hex_mac_tag (string): the expected MAC of the message,
                as a hexadecimal string.

        Raises:
            ValueError: if the MAC does not match. It means that the message
                has been tampered with or that the MAC key is incorrect.
        N)r0rr)r%Zhex_mac_tagr
r
r�	hexverify�s
zHMAC.hexverify�rN)�__name__�
__module__�__qualname__�__doc__r)r#r*r,r r0r6r7r
r
r
rr	=s


0


rNcCst||
|�S)
aACreate a new MAC object.

    Args:
        key (bytes/bytearray/memoryview):
            key for the MAC object.
            It must be long enough to match the expected security level of the
            MAC.
        msg (bytes/bytearray/memoryview):
            Optional. The very first chunk of the message to authenticate.
            It is equivalent to an early call to :meth:`HMAC.update`.
        digestmod (module):
            The hash to use to implement the HMAC.
            Default is :mod:`Cryptodome.Hash.MD5`.

    Returns:
        An :class:`HMAC` object
    )
r	)r&r'r(r
r
rr�sr8)ZCryptodome.Util.py3compatrr�binasciirrrZCryptodome.Util.strxorrZCryptodome.Randomr�__all__r�itemsZ_hmac2hash_oid�objectr	rr
r
r
r�<module>
s,!











�