You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
93 lines
2.4 KiB
Python
93 lines
2.4 KiB
Python
# SPDX-License-Identifier: MIT
|
|
|
|
"""
|
|
Legacy mid-level functions.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
import warnings
|
|
|
|
from typing import Literal
|
|
|
|
from ._password_hasher import (
|
|
DEFAULT_HASH_LENGTH,
|
|
DEFAULT_MEMORY_COST,
|
|
DEFAULT_PARALLELISM,
|
|
DEFAULT_RANDOM_SALT_LENGTH,
|
|
DEFAULT_TIME_COST,
|
|
)
|
|
from .low_level import Type, hash_secret, hash_secret_raw, verify_secret
|
|
|
|
|
|
_INSTEAD = " is deprecated, use argon2.PasswordHasher instead"
|
|
|
|
|
|
def hash_password(
|
|
password: bytes,
|
|
salt: bytes | None = None,
|
|
time_cost: int = DEFAULT_TIME_COST,
|
|
memory_cost: int = DEFAULT_MEMORY_COST,
|
|
parallelism: int = DEFAULT_PARALLELISM,
|
|
hash_len: int = DEFAULT_HASH_LENGTH,
|
|
type: Type = Type.I,
|
|
) -> bytes:
|
|
"""
|
|
Legacy alias for :func:`argon2.low_level.hash_secret` with default
|
|
parameters.
|
|
|
|
.. deprecated:: 16.0.0
|
|
Use :class:`argon2.PasswordHasher` for passwords.
|
|
"""
|
|
warnings.warn(
|
|
"argon2.hash_password" + _INSTEAD, DeprecationWarning, stacklevel=2
|
|
)
|
|
if salt is None:
|
|
salt = os.urandom(DEFAULT_RANDOM_SALT_LENGTH)
|
|
return hash_secret(
|
|
password, salt, time_cost, memory_cost, parallelism, hash_len, type
|
|
)
|
|
|
|
|
|
def hash_password_raw(
|
|
password: bytes,
|
|
salt: bytes | None = None,
|
|
time_cost: int = DEFAULT_TIME_COST,
|
|
memory_cost: int = DEFAULT_MEMORY_COST,
|
|
parallelism: int = DEFAULT_PARALLELISM,
|
|
hash_len: int = DEFAULT_HASH_LENGTH,
|
|
type: Type = Type.I,
|
|
) -> bytes:
|
|
"""
|
|
Legacy alias for :func:`argon2.low_level.hash_secret_raw` with default
|
|
parameters.
|
|
|
|
.. deprecated:: 16.0.0
|
|
Use :class:`argon2.PasswordHasher` for passwords.
|
|
"""
|
|
warnings.warn(
|
|
"argon2.hash_password_raw" + _INSTEAD, DeprecationWarning, stacklevel=2
|
|
)
|
|
if salt is None:
|
|
salt = os.urandom(DEFAULT_RANDOM_SALT_LENGTH)
|
|
return hash_secret_raw(
|
|
password, salt, time_cost, memory_cost, parallelism, hash_len, type
|
|
)
|
|
|
|
|
|
def verify_password(
|
|
hash: bytes, password: bytes, type: Type = Type.I
|
|
) -> Literal[True]:
|
|
"""
|
|
Legacy alias for :func:`argon2.low_level.verify_secret` with default
|
|
parameters.
|
|
|
|
.. deprecated:: 16.0.0
|
|
Use :class:`argon2.PasswordHasher` for passwords.
|
|
"""
|
|
warnings.warn(
|
|
"argon2.verify_password" + _INSTEAD, DeprecationWarning, stacklevel=2
|
|
)
|
|
return verify_secret(hash, password, type)
|