o
>h @ s d dl Z d dlmZ d dlZd dlZddededee defddZdd ed
edee defd d Zddeded
edee def
d
dZ dS ) N)Optionalemailpasswordsaltreturnc
C sh |st }|| d | dd }t|dks J tjj|d|ddddtjj j
dd }|S )
a]
Compute argon2id based secret from user email and password only. This uses Argon2id
for stretching a potentially weak user password/PIN and subsequent HKDF based key
extending to derive private key material (PKM) for different usage contexts.
The Argon2 parameters used are the following:
* kdf ``argon2id-13``
* time cost ``4096``
* memory cost ``512``
* parallelism ``1``
See `draft-irtf-cfrg-argon2 `__ and
`argon2-cffi `__.
:param email: User email.
:param password: User password.
:param salt: Optional salt to use (must be 16 bytes long). If none is given, compute salt
from email as ``salt = SHA256(email)[:16]``.
:return: The computed private key material (256b, 32 octets).
utf8N i i )secretr time_cost memory_cost parallelismhash_lentypeversion) hashlibsha256updateencodedigestlenargon2 low_levelhash_secret_rawTypeID)r r r mpkm r t/var/www/vedio/testing/chatpythonscript.ninositsolution.com/env/lib/python3.10/site-packages/autobahn/xbr/_wallet.pystretch_argon2_secret! s r" r contextc C s$ t j|| tjd}|j|dd}|S )z
Expand ``pkm`` and ``context`` into a key of length ``bytes`` using
HKDF's expand function based on HMAC SHA-512). See the HKDF draft RFC and paper for usage notes.
:param pkm:
:param context:
:param salt:
:return:
)r input_key_materialhashr
)infolength)hkdfHkdfr sha512expand)r r# r kdfkeyr r r! expand_argon2_secretK s r. c C sf |st }|| d | dd }t|dks J |d}t| ||d}t|||d}|S )z_
:param email:
:param password:
:param context:
:param salt:
:return:
r Nr )r r r )r r# r )r r r r r r r" r. )r r r# r r r r- r r r! pkm_from_argon2_secret[ s
r/ )N)
r typingr r r( strbytesr" r. r/ r r r r! s *(