sha module is deprecated; use the hashlib module

cccc · 07-17-2009, 02:52 PM

hi

I've upgrade my Ubuntu to karmic and have this python script to protect the start of thunderbird using password:

Code:

#!/usr/bin/python

# Password protector
import os, sys, sha, getpass

# Read in hash
hash_file = open("/home/ania/.password_protect", "r")
hash = hash_file.read()

# Get new hash
pwhash = ''
counter = 0
while pwhash != hash:
    pwhash = sha.sha(getpass.getpass("Password: ")).hexdigest()
    counter += 1
    if counter > 3:
        sys.exit()

os.system("/usr/bin/thunderbird")

but I'm getting this error message:

Code:

 
/home/pass.py:4: DeprecationWarning: the sha module is deprecated; use the hashlib module instead
  import os, sys, sha, getpass

howto solve this problem?

Sergei Steshenko · 07-17-2009, 04:55 PM

Quote:

Originally Posted by cccc

hi

I've upgrade my Ubuntu to karmic and have this python script to protect the start of thunderbird using password:

Code:

#!/usr/bin/python

# Password protector
import os, sys, sha, getpass

# Read in hash
hash_file = open("/home/ania/.password_protect", "r")
hash = hash_file.read()

# Get new hash
pwhash = ''
counter = 0
while pwhash != hash:
    pwhash = sha.sha(getpass.getpass("Password: ")).hexdigest()
    counter += 1
    if counter > 3:
        sys.exit()

os.system("/usr/bin/thunderbird")

but I'm getting this error message:

Code:

 
/home/pass.py:4: DeprecationWarning: the sha module is deprecated; use the hashlib module instead
  import os, sys, sha, getpass

howto solve this problem?

To follow the suggestion ?

cccc · 07-17-2009, 07:38 PM

howto install hashlib module and change this script to ask for a password without errors?

Dan04 · 07-17-2009, 10:40 PM

Quote:

Originally Posted by cccc

howto install hashlib module and change this script to ask for a password without errors?

hashlib is part of Python's standard library. All you have to do is replace "sha.sha" with "hashlib.sha1", and change the import accordingly.

Sergei Steshenko · 07-18-2009, 10:57 AM

Quote:

Originally Posted by Dan04

hashlib is part of Python's standard library. All you have to do is replace "sha.sha" with "hashlib.sha1", and change the import accordingly.

Seriously speaking, I think SHA1 is deprecated because of insufficient cryptographic strength.

So, say, SHA256.

cccc · 07-18-2009, 12:57 PM

Quote:

Originally Posted by Dan04

hashlib is part of Python's standard library. All you have to do is replace "sha.sha" with "hashlib.sha1", and change the import accordingly.

thx a lot, I changed the script and now it works well without warnings:

Code:

#!/usr/bin/python

# Password protector
import os, sys, hashlib, getpass

# Read in hash
hash_file = open("/home/ania/.password_protect", "r")
hash = hash_file.read()

# Get new hash
pwhash = ''
counter = 0
while pwhash != hash:
    pwhash = hashlib.sha1(getpass.getpass("Password: ")).hexdigest()
    counter += 1
    if counter > 3:
        sys.exit()

os.system("/usr/bin/thunderbird")