aboutsummaryrefslogtreecommitdiffstats
path: root/docs/hazmat/primitives/padding.rst
blob: 995ed9f31b1b9f282d2bd8740310ff3e5ff9a138 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
.. danger::

    This is a "Hazardous Materials" module. You should **ONLY** use it if
    you're 100% absolutely sure that you know what you're doing because this
    module is full of land mines, dragons, and dinosaurs with laser guns.


Padding
=======


Padding is a way to take data that may or may not be be a multiple of the block
size for a cipher and extend it out so that it is. This is required for many
block cipher modes as they require the data to be encrypted to be an exact
multiple of the block size.


.. class:: cryptography.primitives.padding.PKCS7(block_size)

    PKCS7 padding is a generalization of PKCS5 padding (also known as standard
    padding). PKCS7 padding works by appending ``N`` bytes with the value of
    ``chr(N)``, where ``N`` is the number of bytes required to make the final
    block of data the same size as the block size. A simple example of padding
    is:

    .. doctest::

        >>> from cryptography.primitives import padding
        >>> padder = padding.PKCS7(128)
        >>> padder.pad(b"1111111111")
        '1111111111\x06\x06\x06\x06\x06\x06'

    :param block_size: The size of the block in bits that the data is being
                       padded to.

    .. method:: pad(data)

        :param data: The data that should be padded.
        :rtype bytes: The padded data.

    .. method:: unpad(data)

        :param data: The data that should be unpadded.
        :rtype bytes: The unpadded data.