o
i @ s d dl Z d dlmZ d dlZd dlZddededee defddZdd ed
edee defd d Zddeded
edee def
d
dZ dS ) N)Optionalemailpasswordsaltreturnc
C sh |st }|| d | dd }t|dks J tjj|d|ddddtjj j
dd }|S )
a]
Compute argon2id based secret from user email and password only. This uses Argon2id
for stretching a potentially weak user password/PIN and subsequent HKDF based key
extending to derive private key material (PKM) for different usage contexts.
The Argon2 parameters used are the following:
* kdf ``argon2id-13``
* time cost ``4096``
* memory cost ``512``
* parallelism ``1``
See `draft-irtf-cfrg-argon2 `__ and
`argon2-cffi `__.
:param email: User email.
:param password: User password.
:param salt: Optional salt to use (must be 16 bytes long). If none is given, compute salt
from email as ``salt = SHA256(email)[:16]``.
:return: The computed private key material (256b, 32 octets).
utf8N i i )secretr Z time_costZ memory_costZ parallelismZhash_lentypeversion) hashlibsha256updateencodedigestlenargon2Z low_levelZhash_secret_rawTypeID)r r r mpkm r ZC:\Users\psant\Downloads\PAF backend\school\venv\Lib\site-packages\autobahn/xbr/_wallet.pystretch_argon2_secret! s r r contextc C s$ t j|| tjd}|j|dd}|S )z
Expand ``pkm`` and ``context`` into a key of length ``bytes`` using
HKDF's expand function based on HMAC SHA-512). See the HKDF draft RFC and paper for usage notes.
:param pkm:
:param context:
:param salt:
:return:
)r Zinput_key_materialhashr
)infolengthN)hkdfZHkdfr sha512expand)r r r Zkdfkeyr r r expand_argon2_secretK s r% c C sf |st }|| d | dd }t|dks J |d}t| ||d}t|||d}|S )z_
:param email:
:param password:
:param context:
:param salt:
:return:
r Nr )r r r )r r r )r r r r r r r r% )r r r r r r r$ r r r pkm_from_argon2_secret[ s
r& )N)
r typingr r r! strbytesr r% r& r r r r s *(