af d dl Z d dlmZ d dlZd dlZd dededee defdZd ded edee defd
Zd deded edee def
d Z dS )
N)Optionalemailpasswordsaltreturnc
~ |sWt j }| | d | dd }t | dk sJ t j | d |ddddt j j j
d }|S )
a]
Compute argon2id based secret from user email and password only. This uses Argon2id
for stretching a potentially weak user password/PIN and subsequent HKDF based key
extending to derive private key material (PKM) for different usage contexts.
The Argon2 parameters used are the following:
* kdf ``argon2id-13``
* time cost ``4096``
* memory cost ``512``
* parallelism ``1``
See `draft-irtf-cfrg-argon2 `__ and
`argon2-cffi `__.
:param email: User email.
:param password: User password.
:param salt: Optional salt to use (must be 16 bytes long). If none is given, compute salt
from email as ``salt = SHA256(email)[:16]``.
:return: The computed private key material (256b, 32 octets).
utf8N i i )secretr time_cost memory_cost parallelismhash_lentypeversion) hashlibsha256updateencodedigestlenargon2 low_levelhash_secret_rawTypeID)r r r mpkms F/var/www/html/env/lib/python3.11/site-packages/autobahn/xbr/_wallet.pystretch_argon2_secretr# ! s , N f%%&&&xxzz#2# t99????
*
*v&&
"
% + C J r! contextc v t j || t j }| |d }|S )z
Expand ``pkm`` and ``context`` into a key of length ``bytes`` using
HKDF's expand function based on HMAC SHA-512). See the HKDF draft RFC and paper for usage notes.
:param pkm:
:param context:
:param salt:
:return:
)r input_key_materialhashr )infolength)hkdfHkdfr sha512expand)r! r% r kdfkeys r" expand_argon2_secretr1 K s6 )#GN
K
K
KC
**'"*
-
-C Jr$ c T |sWt j }| | d | dd }t | dk sJ | d }t
| || }t ||| }|S )z_
:param email:
:param password:
:param context:
:param salt:
:return:
r Nr
)r r r )r! r% r )r r r r r r r# r1 )r r r% r r r! r0 s r" pkm_from_argon2_secretr3 [ s N f%%&&&xxzz#2# t99????nnV$$G
ehT
J
J
JC
3d
C
C
CC Jr$ )N)
r typingr r r+ strbytesr# r1 r3 r$ r" r8 s 6
' ' ' '8E? 'V[ ' ' ' 'T
e
e
8E?
V[
# s (SX/ ej r$