PySETO - A Python implementation of PASETO
PySETO is a PASETO (Platform-Agnostic SEcurity TOkens) implementation written in Python which supports all of the versions and purposes below.
- Version 1: NIST Compatibility
-
✅ Local: Symmetric Authenticated Encryption- AES-256-CTR + HMAC-SHA384 (Encrypt-then-MAC).
-
✅ Public: Asymmetric Authentication (Public-Key Signatures)- RSASSA-PSS with 2048-bit key, SHA384 hashing and MGF1+SHA384.
-
- Version 2: Sodium Original
-
✅ Local: Symmetric Authenticated Encryption- XChaCha20-Poly1305 (192-bit nonce, 256-bit key, 128-bit authentication tag).
-
✅ Public: Asymmetric Authentication (Public-Key Signatures)- EdDSA over Curve25519.
-
- Version 3: NIST Modern
-
✅ Local: Symmetric Authenticated Encryption- AES-256-CTR + HMAC-SHA384 (Encrypt-then-MAC).
-
✅ Public: Asymmetric Authentication (Public-Key Signatures)- ECDSA over NIST P-384, with SHA-384, using RFC 6979 deterministic k-values.
-
- Version 4: Sodium Modern
-
✅ Local: Symmetric Authenticated Encryption- XChaCha20 + BLAKE2b-MAC (Encrypt-then-MAC).
-
✅ Public: Asymmetric Authentication (Public-Key Signatures)- EdDSA over Curve25519.
-
See Document for details.
Installation
You can install PySETO with pip:
$ pip install pyseto
Usage
You can use it as follows:
v4.local
>> token = pyseto.encode(key, '{"data": "this is a signed message", "exp": "2022-01-01T00:00:00+00:00"}')
>>> token
b'v4.local.VXJUUePf8zL1670zhOmbO7eRdccapuXlf76fRCkntiRauk2qQFOaBQOk4ISSRXQZvcGG2C5H74ShLzoU3YorK4xdfjHBj4ESoRB5mt1FWf8MEXoDQiIHQ4WDyMR57ferhaKJM6FwgcwM2xINWy1xCSFz5f7al0c8RUnd4xO_42beR83ye0jRYg'
>>> decoded = pyseto.decode(key, token)
>>> decoded.payload
b'{"data": "this is a signed message", "exp": "2022-01-01T00:00:00+00:00"}'
">
>>> import pyseto >>> from pyseto import Key >>> key = Key.new("v4", "local", "our-secret") >>> token = pyseto.encode(key, '{"data": "this is a signed message", "exp": "2022-01-01T00:00:00+00:00"}') >>> token b'v4.local.VXJUUePf8zL1670zhOmbO7eRdccapuXlf76fRCkntiRauk2qQFOaBQOk4ISSRXQZvcGG2C5H74ShLzoU3YorK4xdfjHBj4ESoRB5mt1FWf8MEXoDQiIHQ4WDyMR57ferhaKJM6FwgcwM2xINWy1xCSFz5f7al0c8RUnd4xO_42beR83ye0jRYg' >>> decoded = pyseto.decode(key, token) >>> decoded.payload b'{"data": "this is a signed message", "exp": "2022-01-01T00:00:00+00:00"}'
v4.public
>> public_key_pem = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAHrnbu7wEfAP9cGBOAHHwmH4Wsot1ciXBHwBBXQ4gsaI=\n-----END PUBLIC KEY-----"
>>> secret_key = Key.new("v4", "public", secret_key_pem)
>>> token = pyseto.encode(secret_key, '{"data": "this is a signed message", "exp": "2022-01-01T00:00:00+00:00"}')
>>> token
b'v4.public.eyJkYXRhIjogInRoaXMgaXMgYSBzaWduZWQgbWVzc2FnZSIsICJleHAiOiAiMjAyMi0wMS0wMVQwMDowMDowMCswMDowMCJ9l1YiKei2FESvHBSGPkn70eFO1hv3tXH0jph1IfZyEfgm3t1DjkYqD5r4aHWZm1eZs_3_bZ9pBQlZGp0DPSdzDg'
>>> public_key = Key.new("v4", "public", public_key_pem)
>>> decoded = pyseto.decode(public_key, token)
>>> decoded.payload
b'{"data": "this is a signed message", "exp": "2022-01-01T00:00:00+00:00"}'
">
>>> import pyseto >>> from pyseto import Key >>> secret_key_pem = "-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEILTL+0PfTOIQcn2VPkpxMwf6Gbt9n4UEFDjZ4RuUKjd0\n-----END PRIVATE KEY-----" >>> public_key_pem = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAHrnbu7wEfAP9cGBOAHHwmH4Wsot1ciXBHwBBXQ4gsaI=\n-----END PUBLIC KEY-----" >>> secret_key = Key.new("v4", "public", secret_key_pem) >>> token = pyseto.encode(secret_key, '{"data": "this is a signed message", "exp": "2022-01-01T00:00:00+00:00"}') >>> token b'v4.public.eyJkYXRhIjogInRoaXMgaXMgYSBzaWduZWQgbWVzc2FnZSIsICJleHAiOiAiMjAyMi0wMS0wMVQwMDowMDowMCswMDowMCJ9l1YiKei2FESvHBSGPkn70eFO1hv3tXH0jph1IfZyEfgm3t1DjkYqD5r4aHWZm1eZs_3_bZ9pBQlZGp0DPSdzDg' >>> public_key = Key.new("v4", "public", public_key_pem) >>> decoded = pyseto.decode(public_key, token) >>> decoded.payload b'{"data": "this is a signed message", "exp": "2022-01-01T00:00:00+00:00"}'
API Reference
See Document.
Tests
You can run tests from the project root after cloning with:
$ tox
1 Oct 30, 2021
56 Oct 14, 2022
701 Dec 28, 2022
5 Mar 17, 2022
40 Sep 11, 2022
96 Dec 30, 2022
152 Dec 22, 2022
0 Mar 29, 2022
10 Jun 28, 2022
2 Nov 21, 2021
1.6k Dec 31, 2022
3 May 27, 2022
328 Jan 01, 2023
1 Nov 07, 2021
16 Oct 05, 2022
1 Nov 05, 2021
10 Nov 10, 2022
1 Jan 11, 2022
1.1k Jan 07, 2023
147 Nov 17, 2022