Class PBES2

Parameters:

• data (byte string) - The piece of data to encrypt.
• passphrase (byte string) - The passphrase to use for encrypting the data.
• protection (string) - The identifier of the encryption algorithm to use. The default value is 'PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC'.

• prot_params (dictionary) - Parameters of the protection algorithm.

  Key	Description
  iteration_count	The KDF algorithm is repeated several times to slow down brute force attacks on passwords. The default value is 1 000.
  salt_size	Salt is used to thwart dictionary and rainbow attacks on passwords. The default value is 8 bytes.

• randfunc (callable) - Random number generation function; it should accept a single integer N and return a string of random data, N bytes long. If not specified, a new RNG will be instantiated from Crypto.Random.

Returns:

The encrypted data, as a binary string.

Decrypt a piece of data using a passphrase and PBES2.

The algorithm to use is automatically detected.

Parameters:

• data (byte string) - The piece of data to decrypt.
• passphrase (byte string) - The passphrase to use for decrypting the data.

Returns:

The decrypted data, as a binary string.