No project description provided
Project description
This class implements a persistent dictionary using sqlite3 and encrypts the keys and the values of the dictionary in a way, that makes it very hard to bruteforce either the key or the values in the db.
- example usage::
>>> from pcd import PersistentCryptoDict >>> d=PersistentCryptoDict() >>> print d <pcd.PersistentCryptoDict instance at 0x8dcb54c> >>> print d['my key'] None >>> d['my key']='secret value' >>> print d['my key'] secret value >>> d['my key']='top secret value' >>> print d['my key'] top secret value
Crypto
The key and the value in the dict is transformed according to the following algorithm (credit: dnet):
Setting values
we calculate they keyhash - a hmac-sha512(salt,key)
we split the key in half, the first half as a hexdigest (ascii), the second we keep as a binary
we use the second binary half from step 2 of the keyhash to encrypt the value
we use the ascii keyhash from step 2 as a key to the database, and the value is the encrypted result from step 3.
Getting values
we calculate they keyhash - a hmac-sha512(salt,key)
we split the key in half, the first half as a hexdigest (ascii), the second we keep as a binary
we query the database using the ascii keyhash from step 2 as a key
we use the second binary half from step 2 of the keyhash to decrypt the value
The database contains only the following pairs of data:
(hmac-sha512(key, salt).hexdigest()[:64], # key aes256-ofb(hmac-sha512(key, salt).digest()[32:], value)) # value
we diligently obey Schneier’s law: https://www.schneier.com/blog/archives/2011/04/schneiers_law.html, and thus we would consider the task to retrieve any meaningful data without huge rainbow tables from such a database a futile task. :)
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Hashes for persistent_crypto_dict-0.5.0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 0e9bf7e12b6803ced6f6b8d83c9d159f9cc91589125a2094446a90b4d6e227ed |
|
MD5 | 7ae6053e1e60ec3a4636d3ca23b07445 |
|
BLAKE2b-256 | 9d6c3af806b8586dbabe14339b5e6e03d84395dc4d807f552997d8ae87478e73 |