blob: ac610eb8cc9352e0657c925d2a6e4256eeea752f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
Fernet
======
.. currentmodule:: cryptography.fernet
.. testsetup::
import binascii
key = binascii.unhexlify(b"0" * 32)
`Fernet`_ is an implementation of symmetric (also known as "secret key")
authenticated cryptography. Fernet provides guarntees that a message encrypted
using it cannot be manipulated or read without the key.
.. class:: Fernet(key)
This class provides both encryption and decryption facilities.
.. doctest::
>>> from cryptography.fernet import Fernet
>>> f = Fernet(key)
>>> ciphertext = f.encrypt(b"my deep dark secret")
# Secret bytes.
>>> ciphertext
'...'
>>> f.decrypt(ciphertext)
'my deep dark secret'
:param bytes key: A 32-byte key. This **must** be kept secret. Anyone with
this key is able to create and read messages.
.. method:: encrypt(plaintext)
:param bytes plaintext: The message you would like to encrypt.
:returns bytes: A secure message which cannot be read or altered
without the key. It is URL safe base64-encoded.
.. method:: decrypt(ciphertext, ttl=None)
:param bytes ciphertext: An encrypted message.
:param int ttl: Optionally, the number of seconds old a message may be
for it to be valid. If the message is older than
``ttl`` seconds (from the time it was originally
created) an exception will be raised.
:returns bytes: The original plaintext.
.. _`Fernet`: https://github.com/fernet/spec/
|
