Gecko [ nbspublicschool.com ]

Name	Size	Permission
__init__.py	86 B	-rw-r--r--
__init__.pyc	250 B	-rw-r--r--
__init__.pyo	250 B	-rw-r--r--
argon2.py	31.27 KB	-rw-r--r--
argon2.pyc	19.42 KB	-rw-r--r--
argon2.pyo	19.11 KB	-rw-r--r--
bcrypt.py	41.33 KB	-rw-r--r--
bcrypt.pyc	27.11 KB	-rw-r--r--
bcrypt.pyo	26.58 KB	-rw-r--r--
cisco.py	15.9 KB	-rw-r--r--
cisco.pyc	11.1 KB	-rw-r--r--
cisco.pyo	11.01 KB	-rw-r--r--
des_crypt.py	21.74 KB	-rw-r--r--
des_crypt.pyc	17.13 KB	-rw-r--r--
des_crypt.pyo	16.87 KB	-rw-r--r--
digests.py	5.32 KB	-rw-r--r--
digests.pyc	4.93 KB	-rw-r--r--
digests.pyo	4.93 KB	-rw-r--r--
django.py	19.55 KB	-rw-r--r--
django.pyc	18.76 KB	-rw-r--r--
django.pyo	18.76 KB	-rw-r--r--
fshp.py	7.62 KB	-rw-r--r--
fshp.pyc	6.42 KB	-rw-r--r--
fshp.pyo	6.33 KB	-rw-r--r--
ldap_digests.py	9.87 KB	-rw-r--r--
ldap_digests.pyc	10.21 KB	-rw-r--r--
ldap_digests.pyo	10.18 KB	-rw-r--r--
md5_crypt.py	13.37 KB	-rw-r--r--
md5_crypt.pyc	8.06 KB	-rw-r--r--
md5_crypt.pyo	7.79 KB	-rw-r--r--
misc.py	9.87 KB	-rw-r--r--
misc.pyc	9.46 KB	-rw-r--r--
misc.pyo	9.41 KB	-rw-r--r--
mssql.py	8.28 KB	-rw-r--r--
mssql.pyc	7.81 KB	-rw-r--r--
mssql.pyo	7.71 KB	-rw-r--r--
mysql.py	4.68 KB	-rw-r--r--
mysql.pyc	3.94 KB	-rw-r--r--
mysql.pyo	3.94 KB	-rw-r--r--
oracle.py	6.53 KB	-rw-r--r--
oracle.pyc	5.68 KB	-rw-r--r--
oracle.pyo	5.68 KB	-rw-r--r--
pbkdf2.py	18.56 KB	-rw-r--r--
pbkdf2.pyc	15.33 KB	-rw-r--r--
pbkdf2.pyo	15.33 KB	-rw-r--r--
phpass.py	4.67 KB	-rw-r--r--
phpass.pyc	4.22 KB	-rw-r--r--
phpass.pyo	4.22 KB	-rw-r--r--
postgres.py	2.22 KB	-rw-r--r--
postgres.pyc	1.88 KB	-rw-r--r--
postgres.pyo	1.88 KB	-rw-r--r--
roundup.py	1.15 KB	-rw-r--r--
roundup.pyc	781 B	-rw-r--r--
roundup.pyo	781 B	-rw-r--r--
scram.py	22.01 KB	-rw-r--r--
scram.pyc	12.52 KB	-rw-r--r--
scram.pyo	12.43 KB	-rw-r--r--
scrypt.py	13.81 KB	-rw-r--r--
scrypt.pyc	10.2 KB	-rw-r--r--
scrypt.pyo	9.97 KB	-rw-r--r--
sha1_crypt.py	5.69 KB	-rw-r--r--
sha1_crypt.pyc	5.14 KB	-rw-r--r--
sha1_crypt.pyo	5.04 KB	-rw-r--r--
sha2_crypt.py	20.67 KB	-rw-r--r--
sha2_crypt.pyc	12.61 KB	-rw-r--r--
sha2_crypt.pyo	12.18 KB	-rw-r--r--
sun_md5_crypt.py	13.61 KB	-rw-r--r--
sun_md5_crypt.pyc	10.03 KB	-rw-r--r--
sun_md5_crypt.pyo	9.92 KB	-rw-r--r--
windows.py	12.09 KB	-rw-r--r--
windows.pyc	10.19 KB	-rw-r--r--
windows.pyo	10.19 KB	-rw-r--r--

Code Editor : mssql.py

"""passlib.handlers.mssql - MS-SQL Password Hash

Notes
=====
MS-SQL has used a number of hash algs over the years,
most of which were exposed through the undocumented
'pwdencrypt' and 'pwdcompare' sql functions.

Known formats
-------------
6.5
    snefru hash, ascii encoded password
    no examples found

7.0
    snefru hash, unicode (what encoding?)
    saw ref that these blobs were 16 bytes in size
    no examples found

2000
    byte string using displayed as 0x hex, using 0x0100 prefix.
    contains hashes of password and upper-case password.

2007
    same as 2000, but without the upper-case hash.

refs
----------
https://blogs.msdn.com/b/lcris/archive/2007/04/30/sql-server-2005-about-login-password-hashes.aspx?Redirected=true
http://us.generation-nt.com/securing-passwords-hash-help-35429432.html
http://forum.md5decrypter.co.uk/topic230-mysql-and-mssql-get-password-hashes.aspx
http://www.theregister.co.uk/2002/07/08/cracking_ms_sql_server_passwords/
"""
#=============================================================================
# imports
#=============================================================================
# core
from binascii import hexlify, unhexlify
from hashlib import sha1
import re
import logging; log = logging.getLogger(__name__)
from warnings import warn
# site
# pkg
from passlib.utils import consteq
from passlib.utils.compat import bascii_to_str, unicode, u
import passlib.utils.handlers as uh
# local
__all__ = [
    "mssql2000",
    "mssql2005",
]

#=============================================================================
# mssql 2000
#=============================================================================
def _raw_mssql(secret, salt):
    assert isinstance(secret, unicode)
    assert isinstance(salt, bytes)
    return sha1(secret.encode("utf-16-le") + salt).digest()

BIDENT = b"0x0100"
##BIDENT2 = b("\x01\x00")
UIDENT = u("0x0100")

def _ident_mssql(hash, csize, bsize):
    """common identify for mssql 2000/2005"""
    if isinstance(hash, unicode):
        if len(hash) == csize and hash.startswith(UIDENT):
            return True
    elif isinstance(hash, bytes):
        if len(hash) == csize and hash.startswith(BIDENT):
            return True
        ##elif len(hash) == bsize and hash.startswith(BIDENT2): # raw bytes
        ##    return True
    else:
        raise uh.exc.ExpectedStringError(hash, "hash")
    return False

def _parse_mssql(hash, csize, bsize, handler):
    """common parser for mssql 2000/2005; returns 4 byte salt + checksum"""
    if isinstance(hash, unicode):
        if len(hash) == csize and hash.startswith(UIDENT):
            try:
                return unhexlify(hash[6:].encode("utf-8"))
            except TypeError: # throw when bad char found
                pass
    elif isinstance(hash, bytes):
        # assumes ascii-compat encoding
        assert isinstance(hash, bytes)
        if len(hash) == csize and hash.startswith(BIDENT):
            try:
                return unhexlify(hash[6:])
            except TypeError: # throw when bad char found
                pass
        ##elif len(hash) == bsize and hash.startswith(BIDENT2): # raw bytes
        ##    return hash[2:]
    else:
        raise uh.exc.ExpectedStringError(hash, "hash")
    raise uh.exc.InvalidHashError(handler)

class mssql2000(uh.HasRawSalt, uh.HasRawChecksum, uh.GenericHandler):
    """This class implements the password hash used by MS-SQL 2000, and follows the :ref:`password-hash-api`.

It supports a fixed-length salt.

The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:

:type salt: bytes
    :param salt:
        Optional salt string.
        If not specified, one will be autogenerated (this is recommended).
        If specified, it must be 4 bytes in length.

:type relaxed: bool
    :param relaxed:
        By default, providing an invalid value for one of the other
        keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
        and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
        will be issued instead. Correctable errors include
        ``salt`` strings that are too long.
    """
    #===================================================================
    # algorithm information
    #===================================================================
    name = "mssql2000"
    setting_kwds = ("salt",)
    checksum_size = 40
    min_salt_size = max_salt_size = 4

#===================================================================
    # formatting
    #===================================================================

# 0100 - 2 byte identifier
    # 4 byte salt
    # 20 byte checksum
    # 20 byte checksum
    # = 46 bytes
    # encoded '0x' + 92 chars = 94

@classmethod
    def identify(cls, hash):
        return _ident_mssql(hash, 94, 46)

@classmethod
    def from_string(cls, hash):
        data = _parse_mssql(hash, 94, 46, cls)
        return cls(salt=data[:4], checksum=data[4:])

def to_string(self):
        raw = self.salt + self.checksum
        # raw bytes format - BIDENT2 + raw
        return "0x0100" + bascii_to_str(hexlify(raw).upper())

def _calc_checksum(self, secret):
        if isinstance(secret, bytes):
            secret = secret.decode("utf-8")
        salt = self.salt
        return _raw_mssql(secret, salt) + _raw_mssql(secret.upper(), salt)

@classmethod
    def verify(cls, secret, hash):
        # NOTE: we only compare against the upper-case hash
        # XXX: add 'full' just to verify both checksums?
        uh.validate_secret(secret)
        self = cls.from_string(hash)
        chk = self.checksum
        if chk is None:
            raise uh.exc.MissingDigestError(cls)
        if isinstance(secret, bytes):
            secret = secret.decode("utf-8")
        result = _raw_mssql(secret.upper(), self.salt)
        return consteq(result, chk[20:])

#=============================================================================
# handler
#=============================================================================
class mssql2005(uh.HasRawSalt, uh.HasRawChecksum, uh.GenericHandler):
    """This class implements the password hash used by MS-SQL 2005, and follows the :ref:`password-hash-api`.

It supports a fixed-length salt.

The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:

:type salt: bytes
    :param salt:
        Optional salt string.
        If not specified, one will be autogenerated (this is recommended).
        If specified, it must be 4 bytes in length.

checksum_size = 20
    min_salt_size = max_salt_size = 4

#===================================================================
    # formatting
    #===================================================================

# 0x0100 - 2 byte identifier
    # 4 byte salt
    # 20 byte checksum
    # = 26 bytes
    # encoded '0x' + 52 chars = 54

@classmethod
    def identify(cls, hash):
        return _ident_mssql(hash, 54, 26)

@classmethod
    def from_string(cls, hash):
        data = _parse_mssql(hash, 54, 26, cls)
        return cls(salt=data[:4], checksum=data[4:])

def to_string(self):
        raw = self.salt + self.checksum
        # raw bytes format - BIDENT2 + raw
        return "0x0100" + bascii_to_str(hexlify(raw)).upper()

def _calc_checksum(self, secret):
        if isinstance(secret, bytes):
            secret = secret.decode("utf-8")
        return _raw_mssql(secret, self.salt)

#===================================================================
    # eoc
    #===================================================================

#=============================================================================
# eof
#=============================================================================

${this.title}

Code Editor : mssql.py