1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
|
============
Installation
============
.. index:: Google App Engine; compatibility
Supported Platforms
===================
Passlib requires Python 3.5 or newer.
It is known to work with the following Python implementations:
.. rst-class:: float-right without-title
.. warning::
**Passlib 1.8 dropped support for Python 2.x, 3.3, and 3.4**;
If you need support for Python 2.6 - 3.4, use the Passlib 1.7.x series.
* CPython 3 -- v3.5 or newer.
* PyPy3 -- v5.3 or newer.
Passlib should work with all operating systems and environments,
as it contains builtin fallbacks for almost all OS-dependant features.
Google App Engine is supported as well.
.. versionchanged:: 1.8
Support for Python 2.x, 3.3, and 3.4 was dropped.
Jython no longer listed, until it has a Python 3 compatible for testing.
.. versionchanged:: 1.7
Support for Python 2.5, 3.0-3.2 was dropped.
Support for PyPy 1.x was dropped.
.. _optional-libraries:
Optional Libraries
==================
* `bcrypt <https://pypi.python.org/pypi/bcrypt>`_
If installed, this will be used to handle :class:~passlib.hash.bcrypt` and
:class:`~passlib.hash.bcrypt_sha256` hashes. If your system lacks :func:`crypt.crypt()`
support for bcrypt hashes, this library is *required* in order for passlib to provide
bcrypt support.
Use ``pip install passlib[bcrypt]`` to get the recommended bcrypt setup.
* `argon2_cffi <https://pypi.python.org/pypi/argon2_cffi>`_ (>= 18.2.0), or
`argon2pure <https://pypi.python.org/pypi/argon2pure>`_ (>= 1.3)
If any of these packages are installed, they will be used to provide
support for the :class:`~passlib.hash.argon2` hash algorithm.
`argon2_cffi <https://pypi.python.org/pypi/argon2_cffi>`_ is currently the recommended
option.
Use ``pip install passlib[argon2]`` to get the recommended argon2 setup.
* `Cryptography <https://pypi.python.org/pypi/cryptography>`_
If installed, will be used to enable encryption of TOTP secrets for storage
(see :mod:`passlib.totp`).
Use ``pip install passlib[totp]`` to get the recommended TOTP setup.
* `fastpbkdf2 <https://pypi.python.org/pypi/fastpbkdf2>`_
If installed, will be used to greatly speed up :func:`~passlib.crypto.digest.pbkdf2_hmac`,
and any pbkdf2-based hashes.
* `SCrypt <https://pypi.python.org/pypi/scrypt>`_ (>= 0.6)
If installed, this will be used to provide support for the :class:`~passlib.hash.scrypt`
hash algorithm. If not installed, a MUCH slower builtin reference implementation will be used.
.. versionchanged:: 1.8
Dropped support for ``py-bcrypt`` and ``bcryptor`` backends.
.. versionchanged:: 1.7
Added fastpbkdf2, cryptography, argon2_cffi, argon2pure, and scrypt support.
Removed M2Crypto support.
Installation Instructions
=========================
.. rst-class:: float-right without-title
.. caution::
All PyPI releases are signed with the gpg key
`4D8592DF4CE1ED31 <http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4D8592DF4CE1ED31>`_.
To install from PyPi using :command:`pip`::
pip install passlib
..
As noted above, you can ensure you have feature-specific extras installed
via any of::
pip install passlib[argon2]
pip install passlib[bcrypt]
pip install passlib[totp]
To install from the source using :command:`setup.py`::
python setup.py install
.. index::
pair: environmental variable; PASSLIB_TEST_MODE
.. rst-class:: html-toggle
Testing
=======
Passlib contains a comprehensive set of unittests (about 38% of the total code),
which provide nearly complete coverage, and verification of the hash
algorithms using multiple external sources (if detected at runtime).
All unit tests are contained within the :mod:`passlib.tests` subpackage,
and are designed to be run using the
`Nose <http://somethingaboutorange.com/mrl/projects/nose>`_ unit testing library.
Once Passlib and Nose have been installed, the main suite of tests may be run using::
nosetests --tests passlib.tests
By default, this runs the main battery of tests, but omits some additional ones
(such as internal cross-checks, and mock-testing of features not provided natively by the host OS).
To run these tests as well, set the following environmental variable::
PASSLIB_TEST_MODE="full" nosetests --tests passlib.tests
To run a quick check to confirm just basic functionality, with a pared-down set of tests::
PASSLIB_TEST_MODE="quick" nosetests --tests passlib.tests
Tests may also be run via ``setup.py test`` or the included ``tox.ini`` file.
The ``tox.ini`` file is used to test passlib before each release,
and contains a number different environment setups.
These tests require `tox <https://pypi.python.org/pypi/tox>`_ 2.5 or later.
.. rst-class:: html-toggle
Building the Documentation
==========================
The latest copy of this documentation should always be available
online at `<https://passlib.readthedocs.io>`_.
If you wish to generate your own copy of the documentation,
you will need to:
1. Download the Passlib source, extract it, and ``cd`` into the source directory.
2. Install all the dependencies required via ``pip install -e .[build_docs]``.
3. Run :samp:`python setup.py build_sphinx`.
4. Once Sphinx completes its run, point a web browser to the file at :samp:`{SOURCE}/build/sphinx/html/index.html`
to access the Passlib documentation in html format.
|
