mm-std 0.4.16__py3-none-any.whl → 0.4.18__py3-none-any.whl

mm_std/__init__.py

@@ -10,9 +10,10 @@ from .concurrency.sync_decorators import synchronized_parameter as synchronized_
 from .concurrency.sync_scheduler import Scheduler as Scheduler
 from .concurrency.sync_task_runner import ConcurrentTasks as ConcurrentTasks
 from .config import BaseConfig as BaseConfig
-from .crypto import fernet_decrypt as fernet_decrypt
-from .crypto import fernet_encrypt as fernet_encrypt
-from .crypto import fernet_generate_key as fernet_generate_key
+from .crypto.fernet import fernet_decrypt as fernet_decrypt
+from .crypto.fernet import fernet_encrypt as fernet_encrypt
+from .crypto.fernet import fernet_generate_key as fernet_generate_key
+from .crypto.openssl import OpensslAes256Cbc as OpensslAes256Cbc
 from .date import parse_date as parse_date
 from .date import utc_delta as utc_delta
 from .date import utc_now as utc_now

mm_std/crypto/openssl.py

@@ -0,0 +1,109 @@
+import base64
+import secrets
+from hashlib import pbkdf2_hmac
+
+from cryptography.hazmat.primitives import padding
+from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
+
+
+class OpensslAes256Cbc:
+    """
+    AES-256-CBC encryption/decryption compatible with OpenSSL's `enc -aes-256-cbc -pbkdf2 -iter 1000000`.
+
+    Provides both raw-byte and Base64-encoded interfaces:
+      • encrypt_bytes / decrypt_bytes: work with bytes
+      • encrypt_base64 / decrypt_base64: work with Base64 strings
+
+    Usage:
+        >>> cipher = OpensslAes256Cbc(password="mypassword")
+        >>> # raw bytes
+        >>> ciphertext = cipher.encrypt_bytes(b"secret")
+        >>> plaintext = cipher.decrypt_bytes(ciphertext)
+        >>> # Base64 convenience
+        >>> token = cipher.encrypt_base64("secret message")
+        >>> result = cipher.decrypt_base64(token)
+        >>> print(result)
+        secret message
+
+    OpenSSL compatibility:
+        echo "secret message" |
+          openssl enc -aes-256-cbc -pbkdf2 -iter 1000000 -salt -base64 -pass pass:mypassword
+
+        echo "U2FsdGVkX1/dGGdg6SExWgtKxvuLroWqhezy54aTt1g=" |
+          openssl enc -d -aes-256-cbc -pbkdf2 -iter 1000000 -base64 -pass pass:mypassword
+    """
+
+    MAGIC_HEADER = b"Salted__"
+    SALT_SIZE = 8
+    KEY_SIZE = 32  # AES-256
+    IV_SIZE = 16  # AES block size
+    ITERATIONS = 1_000_000
+    HEADER_LEN = len(MAGIC_HEADER)
+
+    def __init__(self, password: str) -> None:
+        """
+        Initialize the cipher with password. Uses a fixed iteration count of 1,000,000.
+
+        Args:
+            password: Password for encryption/decryption
+        """
+        self._password = password.encode("utf-8")
+
+    def _derive_key_iv(self, salt: bytes) -> tuple[bytes, bytes]:
+        key_iv = pbkdf2_hmac(
+            hash_name="sha256", password=self._password, salt=salt, iterations=self.ITERATIONS, dklen=self.KEY_SIZE + self.IV_SIZE
+        )
+        return key_iv[: self.KEY_SIZE], key_iv[self.KEY_SIZE :]
+
+    def encrypt_bytes(self, plaintext: bytes) -> bytes:
+        """Encrypt raw bytes and return encrypted bytes (OpenSSL compatible)."""
+        salt = secrets.token_bytes(self.SALT_SIZE)
+        key, iv = self._derive_key_iv(salt)
+
+        padder = padding.PKCS7(algorithms.AES.block_size).padder()
+        padded = padder.update(plaintext) + padder.finalize()
+
+        cipher = Cipher(algorithms.AES(key), modes.CBC(iv))
+        encryptor = cipher.encryptor()
+        ciphertext = encryptor.update(padded) + encryptor.finalize()
+
+        return self.MAGIC_HEADER + salt + ciphertext
+
+    def decrypt_bytes(self, encrypted: bytes) -> bytes:
+        """Decrypt raw encrypted bytes (as produced by encrypt_bytes)."""
+        if not encrypted.startswith(self.MAGIC_HEADER):
+            raise ValueError("Invalid format: missing OpenSSL salt header")
+
+        salt = encrypted[self.HEADER_LEN : self.HEADER_LEN + self.SALT_SIZE]
+        ciphertext = encrypted[self.HEADER_LEN + self.SALT_SIZE :]
+
+        key, iv = self._derive_key_iv(salt)
+        cipher = Cipher(algorithms.AES(key), modes.CBC(iv))
+        decryptor = cipher.decryptor()
+
+        try:
+            padded = decryptor.update(ciphertext) + decryptor.finalize()
+        except ValueError as exc:
+            raise ValueError("Decryption failed: wrong password or corrupted data") from exc
+
+        unpadder = padding.PKCS7(algorithms.AES.block_size).unpadder()
+        try:
+            data = unpadder.update(padded) + unpadder.finalize()
+        except ValueError as exc:
+            raise ValueError("Decryption failed: wrong password or corrupted data") from exc
+
+        return data
+
+    def encrypt_base64(self, plaintext: str) -> str:
+        """Encrypt a UTF-8 string and return Base64-encoded encrypted data."""
+        raw = self.encrypt_bytes(plaintext.encode("utf-8"))
+        return base64.b64encode(raw).decode("ascii")
+
+    def decrypt_base64(self, b64_encoded: str) -> str:
+        """Decode Base64, decrypt bytes, and return UTF-8 string."""
+        try:
+            raw = base64.b64decode(b64_encoded.strip())
+        except Exception as exc:
+            raise ValueError("Invalid base64 format") from exc
+        plaintext_bytes = self.decrypt_bytes(raw)
+        return plaintext_bytes.decode("utf-8")

{mm_std-0.4.16.dist-info → mm_std-0.4.18.dist-info}/METADATA

@@ -1,12 +1,12 @@
 Metadata-Version: 2.4
 Name: mm-std
-Version: 0.4.16
+Version: 0.4.18
 Requires-Python: >=3.12
 Requires-Dist: aiohttp-socks~=0.10.1
-Requires-Dist: aiohttp~=3.11.18
-Requires-Dist: cryptography~=45.0.2
+Requires-Dist: aiohttp~=3.12.2
+Requires-Dist: cryptography~=45.0.3
 Requires-Dist: pydantic-settings>=2.9.1
-Requires-Dist: pydantic~=2.11.4
+Requires-Dist: pydantic~=2.11.5
 Requires-Dist: pydash~=8.0.5
 Requires-Dist: python-dotenv~=1.1.0
 Requires-Dist: requests[socks]~=2.32.3

{mm_std-0.4.16.dist-info → mm_std-0.4.18.dist-info}/RECORD

@@ -1,7 +1,6 @@
-mm_std/__init__.py,sha256=atBLjXR-O2osgfiZru7mA2SSAPb60fRRDFqxf1soMZM,2888
+mm_std/__init__.py,sha256=PGjf3Cs_tDvJW-Mff2NADmi1dLDePVMHIvQsD3wleH8,2974
 mm_std/command.py,sha256=ze286wjUjg0QSTgIu-2WZks53_Vclg69UaYYgPpQvCU,1283
 mm_std/config.py,sha256=3-FxFCtOffY2t9vuu9adojwbzTPwdAH2P6qDaZnHLbY,3206
-mm_std/crypto.py,sha256=jdk0_TCmeU0pPXMyz9xH6kQHSjjZ9GcGClBwQps5vBo,340
 mm_std/date.py,sha256=976eEkSONuNqHQBgSRu8hrtH23tJqztbmHFHLdbP2TY,1879
 mm_std/dict.py,sha256=DxFbZnl5KK4vJ4wLH_pCT0PWzfaIL3YyLNpRsVexfjw,1465
 mm_std/env.py,sha256=5zaR9VeIfObN-4yfgxoFeU5IM1GDeZZj9SuYf7t9sOA,125
@@ -24,10 +23,13 @@ mm_std/concurrency/async_task_runner.py,sha256=EN7tN2enkVYVgDbhSiAr-_W4o9m9wBXCv
 mm_std/concurrency/sync_decorators.py,sha256=syCQBOmN7qPO55yzgJB2rbkh10CVww376hmyvs6e5tA,1080
 mm_std/concurrency/sync_scheduler.py,sha256=j4tBL_cBI1spr0cZplTA7N2CoYsznuORMeRN8rpR6gY,2407
 mm_std/concurrency/sync_task_runner.py,sha256=s5JPlLYLGQGHIxy4oDS-PN7O9gcy-yPZFoNm8RQwzcw,1780
+mm_std/crypto/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+mm_std/crypto/fernet.py,sha256=jdk0_TCmeU0pPXMyz9xH6kQHSjjZ9GcGClBwQps5vBo,340
+mm_std/crypto/openssl.py,sha256=HyiYNgn5IrC3CWfe3qcLKJpAsbcSlCUoPvEg1vxbdvo,4274
 mm_std/http/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 mm_std/http/http_request.py,sha256=6bg3t49c3dG0jKRFxhcceeYb5yKrMoZwuyb25zBG3tY,4088
 mm_std/http/http_request_sync.py,sha256=zXLeDplYWTFIwaD1Ydyg9yTi37WcI-fReLM0mVnuvhM,1835
 mm_std/http/http_response.py,sha256=7ZllZFPKJ9s6m-18Dfhrm7hwc2XFnyX7ppt0O8gNmlE,3916
-mm_std-0.4.16.dist-info/METADATA,sha256=_cSVs-cNmY9lZicgVuawtbNuG5vDmpn6rrFQY_bzwI4,415
-mm_std-0.4.16.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-mm_std-0.4.16.dist-info/RECORD,,
+mm_std-0.4.18.dist-info/METADATA,sha256=eUTWVnKfAtzbA_v27albJ7pj4iuCTlbPpTWOTggjDQw,414
+mm_std-0.4.18.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+mm_std-0.4.18.dist-info/RECORD,,