blob: b2bd98dfc7cd7e4c8d0d4d405f011154853d73e3 [file] [log] [blame]
Georg Brandl116aa622007-08-15 14:28:22 +00001:mod:`hmac` --- Keyed-Hashing for Message Authentication
2========================================================
3
4.. module:: hmac
Georg Brandl80b75fd2010-10-17 09:43:35 +00005 :synopsis: Keyed-Hashing for Message Authentication (HMAC) implementation
6 for Python.
Georg Brandl116aa622007-08-15 14:28:22 +00007.. moduleauthor:: Gerhard Häring <ghaering@users.sourceforge.net>
8.. sectionauthor:: Gerhard Häring <ghaering@users.sourceforge.net>
9
10
Georg Brandl116aa622007-08-15 14:28:22 +000011This module implements the HMAC algorithm as described by :rfc:`2104`.
12
13
Georg Brandl036490d2009-05-17 13:00:36 +000014.. function:: new(key, msg=None, digestmod=None)
Georg Brandl116aa622007-08-15 14:28:22 +000015
Georg Brandl80b75fd2010-10-17 09:43:35 +000016 Return a new hmac object. *key* is a bytes object giving the secret key. If
17 *msg* is present, the method call ``update(msg)`` is made. *digestmod* is
18 the digest constructor or module for the HMAC object to use. It defaults to
19 the :func:`hashlib.md5` constructor.
Georg Brandl116aa622007-08-15 14:28:22 +000020
Georg Brandl116aa622007-08-15 14:28:22 +000021
22An HMAC object has the following methods:
23
Georg Brandl116aa622007-08-15 14:28:22 +000024.. method:: hmac.update(msg)
25
Georg Brandl80b75fd2010-10-17 09:43:35 +000026 Update the hmac object with the bytes object *msg*. Repeated calls are
27 equivalent to a single call with the concatenation of all the arguments:
28 ``m.update(a); m.update(b)`` is equivalent to ``m.update(a + b)``.
Georg Brandl116aa622007-08-15 14:28:22 +000029
30
31.. method:: hmac.digest()
32
Georg Brandl80b75fd2010-10-17 09:43:35 +000033 Return the digest of the bytes passed to the :meth:`update` method so far.
34 This bytes object will be the same length as the *digest_size* of the digest
35 given to the constructor. It may contain non-ASCII bytes, including NUL
36 bytes.
Georg Brandl116aa622007-08-15 14:28:22 +000037
38
39.. method:: hmac.hexdigest()
40
Georg Brandl80b75fd2010-10-17 09:43:35 +000041 Like :meth:`digest` except the digest is returned as a string twice the
42 length containing only hexadecimal digits. This may be used to exchange the
43 value safely in email or other non-binary environments.
Georg Brandl116aa622007-08-15 14:28:22 +000044
45
46.. method:: hmac.copy()
47
48 Return a copy ("clone") of the hmac object. This can be used to efficiently
49 compute the digests of strings that share a common initial substring.
50
51
52.. seealso::
53
54 Module :mod:`hashlib`
Ezio Melotti0639d5a2009-12-19 23:26:38 +000055 The Python module providing secure hash functions.