123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258 |
- #
- # This file is part of pyasn1-modules software.
- #
- # Created by Russ Housley with a very small amount of assistance from
- # asn1ate v.0.6.0.
- # Modified by Russ Housley to add maps for opentypes.
- #
- # Copyright (c) 2019, Vigil Security, LLC
- # License: http://snmplabs.com/pyasn1/license.html
- #
- # Additional Algorithms and Identifiers for RSA Cryptography
- # for use in Certificates and CRLs
- #
- # ASN.1 source from:
- # https://www.rfc-editor.org/rfc/rfc4055.txt
- #
- from pyasn1.type import namedtype
- from pyasn1.type import tag
- from pyasn1.type import univ
-
- from pyasn1_modules import rfc5280
-
-
- def _OID(*components):
- output = []
- for x in tuple(components):
- if isinstance(x, univ.ObjectIdentifier):
- output.extend(list(x))
- else:
- output.append(int(x))
- return univ.ObjectIdentifier(output)
-
-
- id_sha1 = _OID(1, 3, 14, 3, 2, 26)
-
- id_sha256 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 1)
-
- id_sha384 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 2)
-
- id_sha512 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 3)
-
- id_sha224 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 4)
-
- rsaEncryption = _OID(1, 2, 840, 113549, 1, 1, 1)
-
- id_mgf1 = _OID(1, 2, 840, 113549, 1, 1, 8)
-
- id_RSAES_OAEP = _OID(1, 2, 840, 113549, 1, 1, 7)
-
- id_pSpecified = _OID(1, 2, 840, 113549, 1, 1, 9)
-
- id_RSASSA_PSS = _OID(1, 2, 840, 113549, 1, 1, 10)
-
- sha256WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 11)
-
- sha384WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 12)
-
- sha512WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 13)
-
- sha224WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 14)
-
- sha1Identifier = rfc5280.AlgorithmIdentifier()
- sha1Identifier['algorithm'] = id_sha1
- sha1Identifier['parameters'] = univ.Null("")
-
- sha224Identifier = rfc5280.AlgorithmIdentifier()
- sha224Identifier['algorithm'] = id_sha224
- sha224Identifier['parameters'] = univ.Null("")
-
- sha256Identifier = rfc5280.AlgorithmIdentifier()
- sha256Identifier['algorithm'] = id_sha256
- sha256Identifier['parameters'] = univ.Null("")
-
- sha384Identifier = rfc5280.AlgorithmIdentifier()
- sha384Identifier['algorithm'] = id_sha384
- sha384Identifier['parameters'] = univ.Null("")
-
- sha512Identifier = rfc5280.AlgorithmIdentifier()
- sha512Identifier['algorithm'] = id_sha512
- sha512Identifier['parameters'] = univ.Null("")
-
- mgf1SHA1Identifier = rfc5280.AlgorithmIdentifier()
- mgf1SHA1Identifier['algorithm'] = id_mgf1
- mgf1SHA1Identifier['parameters'] = sha1Identifier
-
- mgf1SHA224Identifier = rfc5280.AlgorithmIdentifier()
- mgf1SHA224Identifier['algorithm'] = id_mgf1
- mgf1SHA224Identifier['parameters'] = sha224Identifier
-
- mgf1SHA256Identifier = rfc5280.AlgorithmIdentifier()
- mgf1SHA256Identifier['algorithm'] = id_mgf1
- mgf1SHA256Identifier['parameters'] = sha256Identifier
-
- mgf1SHA384Identifier = rfc5280.AlgorithmIdentifier()
- mgf1SHA384Identifier['algorithm'] = id_mgf1
- mgf1SHA384Identifier['parameters'] = sha384Identifier
-
- mgf1SHA512Identifier = rfc5280.AlgorithmIdentifier()
- mgf1SHA512Identifier['algorithm'] = id_mgf1
- mgf1SHA512Identifier['parameters'] = sha512Identifier
-
- pSpecifiedEmptyIdentifier = rfc5280.AlgorithmIdentifier()
- pSpecifiedEmptyIdentifier['algorithm'] = id_pSpecified
- pSpecifiedEmptyIdentifier['parameters'] = univ.OctetString(value='')
-
-
- class RSAPublicKey(univ.Sequence):
- pass
-
- RSAPublicKey.componentType = namedtype.NamedTypes(
- namedtype.NamedType('modulus', univ.Integer()),
- namedtype.NamedType('publicExponent', univ.Integer())
- )
-
-
- class HashAlgorithm(rfc5280.AlgorithmIdentifier):
- pass
-
-
- class MaskGenAlgorithm(rfc5280.AlgorithmIdentifier):
- pass
-
-
- class RSAES_OAEP_params(univ.Sequence):
- pass
-
- RSAES_OAEP_params.componentType = namedtype.NamedTypes(
- namedtype.OptionalNamedType('hashFunc', rfc5280.AlgorithmIdentifier().subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
- namedtype.OptionalNamedType('maskGenFunc', rfc5280.AlgorithmIdentifier().subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))),
- namedtype.OptionalNamedType('pSourceFunc', rfc5280.AlgorithmIdentifier().subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2)))
- )
-
- rSAES_OAEP_Default_Params = RSAES_OAEP_params()
-
- rSAES_OAEP_Default_Identifier = rfc5280.AlgorithmIdentifier()
- rSAES_OAEP_Default_Identifier['algorithm'] = id_RSAES_OAEP
- rSAES_OAEP_Default_Identifier['parameters'] = rSAES_OAEP_Default_Params
-
- rSAES_OAEP_SHA224_Params = RSAES_OAEP_params()
- rSAES_OAEP_SHA224_Params['hashFunc'] = sha224Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
- rSAES_OAEP_SHA224_Params['maskGenFunc'] = mgf1SHA224Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
-
- rSAES_OAEP_SHA224_Identifier = rfc5280.AlgorithmIdentifier()
- rSAES_OAEP_SHA224_Identifier['algorithm'] = id_RSAES_OAEP
- rSAES_OAEP_SHA224_Identifier['parameters'] = rSAES_OAEP_SHA224_Params
-
- rSAES_OAEP_SHA256_Params = RSAES_OAEP_params()
- rSAES_OAEP_SHA256_Params['hashFunc'] = sha256Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
- rSAES_OAEP_SHA256_Params['maskGenFunc'] = mgf1SHA256Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
-
- rSAES_OAEP_SHA256_Identifier = rfc5280.AlgorithmIdentifier()
- rSAES_OAEP_SHA256_Identifier['algorithm'] = id_RSAES_OAEP
- rSAES_OAEP_SHA256_Identifier['parameters'] = rSAES_OAEP_SHA256_Params
-
- rSAES_OAEP_SHA384_Params = RSAES_OAEP_params()
- rSAES_OAEP_SHA384_Params['hashFunc'] = sha384Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
- rSAES_OAEP_SHA384_Params['maskGenFunc'] = mgf1SHA384Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
-
- rSAES_OAEP_SHA384_Identifier = rfc5280.AlgorithmIdentifier()
- rSAES_OAEP_SHA384_Identifier['algorithm'] = id_RSAES_OAEP
- rSAES_OAEP_SHA384_Identifier['parameters'] = rSAES_OAEP_SHA384_Params
-
- rSAES_OAEP_SHA512_Params = RSAES_OAEP_params()
- rSAES_OAEP_SHA512_Params['hashFunc'] = sha512Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
- rSAES_OAEP_SHA512_Params['maskGenFunc'] = mgf1SHA512Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
-
- rSAES_OAEP_SHA512_Identifier = rfc5280.AlgorithmIdentifier()
- rSAES_OAEP_SHA512_Identifier['algorithm'] = id_RSAES_OAEP
- rSAES_OAEP_SHA512_Identifier['parameters'] = rSAES_OAEP_SHA512_Params
-
-
- class RSASSA_PSS_params(univ.Sequence):
- pass
-
- RSASSA_PSS_params.componentType = namedtype.NamedTypes(
- namedtype.OptionalNamedType('hashAlgorithm', rfc5280.AlgorithmIdentifier().subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
- namedtype.OptionalNamedType('maskGenAlgorithm', rfc5280.AlgorithmIdentifier().subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))),
- namedtype.DefaultedNamedType('saltLength', univ.Integer(value=20).subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
- namedtype.DefaultedNamedType('trailerField', univ.Integer(value=1).subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
- )
-
- rSASSA_PSS_Default_Params = RSASSA_PSS_params()
-
- rSASSA_PSS_Default_Identifier = rfc5280.AlgorithmIdentifier()
- rSASSA_PSS_Default_Identifier['algorithm'] = id_RSASSA_PSS
- rSASSA_PSS_Default_Identifier['parameters'] = rSASSA_PSS_Default_Params
-
- rSASSA_PSS_SHA224_Params = RSASSA_PSS_params()
- rSASSA_PSS_SHA224_Params['hashAlgorithm'] = sha224Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
- rSASSA_PSS_SHA224_Params['maskGenAlgorithm'] = mgf1SHA224Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
-
- rSASSA_PSS_SHA224_Identifier = rfc5280.AlgorithmIdentifier()
- rSASSA_PSS_SHA224_Identifier['algorithm'] = id_RSASSA_PSS
- rSASSA_PSS_SHA224_Identifier['parameters'] = rSASSA_PSS_SHA224_Params
-
- rSASSA_PSS_SHA256_Params = RSASSA_PSS_params()
- rSASSA_PSS_SHA256_Params['hashAlgorithm'] = sha256Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
- rSASSA_PSS_SHA256_Params['maskGenAlgorithm'] = mgf1SHA256Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
-
- rSASSA_PSS_SHA256_Identifier = rfc5280.AlgorithmIdentifier()
- rSASSA_PSS_SHA256_Identifier['algorithm'] = id_RSASSA_PSS
- rSASSA_PSS_SHA256_Identifier['parameters'] = rSASSA_PSS_SHA256_Params
-
- rSASSA_PSS_SHA384_Params = RSASSA_PSS_params()
- rSASSA_PSS_SHA384_Params['hashAlgorithm'] = sha384Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
- rSASSA_PSS_SHA384_Params['maskGenAlgorithm'] = mgf1SHA384Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
-
- rSASSA_PSS_SHA384_Identifier = rfc5280.AlgorithmIdentifier()
- rSASSA_PSS_SHA384_Identifier['algorithm'] = id_RSASSA_PSS
- rSASSA_PSS_SHA384_Identifier['parameters'] = rSASSA_PSS_SHA384_Params
-
- rSASSA_PSS_SHA512_Params = RSASSA_PSS_params()
- rSASSA_PSS_SHA512_Params['hashAlgorithm'] = sha512Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
- rSASSA_PSS_SHA512_Params['maskGenAlgorithm'] = mgf1SHA512Identifier.subtype(
- explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
-
- rSASSA_PSS_SHA512_Identifier = rfc5280.AlgorithmIdentifier()
- rSASSA_PSS_SHA512_Identifier['algorithm'] = id_RSASSA_PSS
- rSASSA_PSS_SHA512_Identifier['parameters'] = rSASSA_PSS_SHA512_Params
-
-
- # Update the Algorithm Identifier map
-
- _algorithmIdentifierMapUpdate = {
- id_sha1: univ.Null(),
- id_sha224: univ.Null(),
- id_sha256: univ.Null(),
- id_sha384: univ.Null(),
- id_sha512: univ.Null(),
- id_mgf1: rfc5280.AlgorithmIdentifier(),
- id_pSpecified: univ.OctetString(),
- id_RSAES_OAEP: RSAES_OAEP_params(),
- id_RSASSA_PSS: RSASSA_PSS_params(),
- }
-
- rfc5280.algorithmIdentifierMap.update(_algorithmIdentifierMapUpdate)
|