blob: c95077bbf3b1b4cf687567c2c854c177a408ef04 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
Fernet
======
.. currentmodule:: cryptography.fernet
.. testsetup::
import base64
import binascii
key = base64.urlsafe_b64encode(binascii.unhexlify(b"0" * 64))
`Fernet`_ is an implementation of symmetric (also known as "secret key")
authenticated cryptography. Fernet provides guarantees that a message encrypted
using it cannot be manipulated or read without the key.
.. class:: Fernet(key)
This class provides both encryption and decryption facilities.
.. doctest::
>>> from cryptography.fernet import Fernet
>>> f = Fernet(key)
>>> ciphertext = f.encrypt(b"my deep dark secret")
>>> ciphertext
'...'
>>> f.decrypt(ciphertext)
'my deep dark secret'
:param bytes key: A URL-safe base64-encoded 32-byte key. This **must** be
kept secret. Anyone with this key is able to create and
read messages.
.. method:: encrypt(plaintext)
:param bytes plaintext: The message you would like to encrypt.
:returns bytes: A secure message which cannot be read or altered
without the key. It is URL-safe base64-encoded.
.. method:: decrypt(ciphertext, ttl=None)
:param bytes ciphertext: An encrypted message.
:param int ttl: Optionally, the number of seconds old a message may be
for it to be valid. If the message is older than
``ttl`` seconds (from the time it was originally
created) an exception will be raised. If ``ttl`` is not
provided (or is ``None``), the age of the message is
not considered.
:returns bytes: The original plaintext.
:raises InvalidToken: If the ``ciphertext`` is in any way invalid, this
exception is raised. A ciphertext may be invalid
for a number of reasons: it is older than the
``ttl``, it is malformed, or it does not have a
valid signature.
.. class:: InvalidToken
See :meth:`Fernet.decrypt` for more information.
.. _`Fernet`: https://github.com/fernet/spec/
|
