Fernet (symmetric encryption) using Cryptography module in Python - GeeksforGeeks

28 Sep, 2020
Cryptography is the practice of securing useful information while transmitting from one computer to another or storing data on a computer. Cryptography deals with the encryption of plaintext into ciphertext and decryption of ciphertext into plaintext. Python supports a cryptography package that helps us encrypt and decrypt data. The fernet module of the cryptography package has inbuilt functions for the generation of the key, encryption of plaintext into ciphertext, and decryption of ciphertext into plaintext using the encrypt and decrypt methods respectively. The fernet module guarantees that data encrypted using it cannot be further manipulated or read without the key. 
Methods Used:
generate_key() : This method generates a new fernet key. The key must be kept safe as it is the most important component to decrypt the ciphertext. If the key is lost then the user can no longer decrypt the message. Also if an intruder or hacker gets access to the key they can not only read the data but also forge the data.
encrypt(data) : It encrypts data passed as a parameter to the method. The outcome of this encryption is known as a “Fernet token” which is basically the ciphertext. The encrypted token also contains the current timestamp when it was generated in plaintext. The encrypt method throws an exception if the data is not in bytes.
Parameters:
data (bytes) – The plaintext to be encrypted.
Return value: A ciphertext that cannot be read or altered without the key. It is URL-safe base64-encoded and is referred to as Fernet token.
decrypt(token,ttl=None) : This method decrypts the Fernet token passed as a parameter to the method. On successful decryption the original plaintext is obtained as a result, otherwise an exception is thrown.
Parameters:
token (bytes) – The Fernet token (ciphertext) is passed for decryption.
ttl (int) – Optionally, one may provide an integer as second parameter in the decrypt method. The ttl denotes the time about how long a token is valid. If the token is older than ttl seconds (from the time it was originally created) an exception is thrown. If ttl is not passed as a parameter, then age of the token is not considered. If the token is somehow invalid, an exception is thrown.
Returns value:  Returns the original plaintext.
Steps to write the program:
At first, the cryptography package needs to be installed using the following command:
pip install cryptography

Python3
# Fernet module is imported from the # cryptography packagefrom cryptography.fernet import Fernet  # key is generatedkey = Fernet.generate_key()  # value of key is assigned to a variablef = Fernet(key)  # the plaintext is converted to ciphertexttoken = f.encrypt(b"welcome to geeksforgeeks")  # display the ciphertextprint(token)  # decrypting the ciphertextd = f.decrypt(token)  # display the plaintextprint(d)
Output:
b’gAAAAABfYMSL3Cjz8I8Sg7NwatdtTvOtqHtPrNDGXTGx4w1gW-9yvrMBUFz3bAWnwVk2WjcOrhjfAzyX7Z6M1IDbcRDhxPvd2dKPjypVv9hLQ1lARWdf-RE=’b’welcome to geeksforgeeks’
The decrypted output has a ‘b’ in front of the original message which indicates the byte format. However, this can be removed using the decode() method while printing the original message. The program below implements the decode() method. 
Python3
# Fernet module is imported from the # cryptography packagefrom cryptography.fernet import Fernet    # key is generatedkey = Fernet.generate_key()  # value of key is assigned to a variablef = Fernet(key)  # the plaintext is converted to ciphertexttoken = f.encrypt(b"welcome to geeksforgeeks")  # display the ciphertextprint(token)  # decrypting the ciphertextd = f.decrypt(token)  # display the plaintext and the decode() method # converts it from byte to stringprint(d.decode())
Output:
b’gAAAAABfYMTfbEYTSsU6BCyXr9ArUIbpELTu5axUtWRfIxc4zzv3AktmOwdNSd1rH_zrL4Qz7tDi1K067kLx0Ma3S828nSTJlP9Y7L0_ZfVyCelZlayGK3k=’welcome to geeksforgeeks
cryptography
python-modules
python-utility
Python
cryptography
Writing code in comment?
Please use ide.geeksforgeeks.org,
generate link and share the link here.
Python Dictionary
How to Install PIP on Windows ?
Enumerate() in Python
Different ways to create Pandas Dataframe
Iterate over a list in Python
Python String | replace()
*args and **kwargs in Python
Reading and Writing to text files in Python
Create a Pandas DataFrame from Lists
Convert integer to string in Python