hashlib: Add support for usedforsecurity keyword (#1662)

Author: jacobtylerwalls

ChangeLog

@@ -98,6 +98,9 @@ What's New in astroid 2.11.7?
 =============================
 Release date: TBA
 
+* Added support for ``usedforsecurity`` keyword to ``hashlib`` constructors.
+
+  Closes PyCQA/pylint#6017
 
 
 What's New in astroid 2.11.6?

astroid/brain/brain_hashlib.py

@@ -8,7 +8,7 @@
 
 
 def _hashlib_transform():
-    signature = "value=''"
+    signature = "value='', usedforsecurity=True"
     template = """
     class %(name)s(object):
       def __init__(self, %(signature)s): pass
@@ -34,10 +34,10 @@ def digest_size(self):
     )
     blake2b_signature = "data=b'', *, digest_size=64, key=b'', salt=b'', \
             person=b'', fanout=1, depth=1, leaf_size=0, node_offset=0, \
-            node_depth=0, inner_size=0, last_node=False"
+            node_depth=0, inner_size=0, last_node=False, usedforsecurity=True"
     blake2s_signature = "data=b'', *, digest_size=32, key=b'', salt=b'', \
             person=b'', fanout=1, depth=1, leaf_size=0, node_offset=0, \
-            node_depth=0, inner_size=0, last_node=False"
+            node_depth=0, inner_size=0, last_node=False, usedforsecurity=True"
     new_algorithms = dict.fromkeys(
         ["sha3_224", "sha3_256", "sha3_384", "sha3_512", "shake_128", "shake_256"],
         signature,

tests/unittest_brain.py

@@ -75,8 +75,8 @@ def _assert_hashlib_class(self, class_obj: ClassDef) -> None:
         self.assertIn("hexdigest", class_obj)
         self.assertIn("block_size", class_obj)
         self.assertIn("digest_size", class_obj)
-        self.assertEqual(len(class_obj["__init__"].args.args), 2)
-        self.assertEqual(len(class_obj["__init__"].args.defaults), 1)
+        self.assertEqual(len(class_obj["__init__"].args.args), 3)
+        self.assertEqual(len(class_obj["__init__"].args.defaults), 2)
         self.assertEqual(len(class_obj["update"].args.args), 2)
         self.assertEqual(len(class_obj["digest"].args.args), 1)
         self.assertEqual(len(class_obj["hexdigest"].args.args), 1)