|
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260 |
- #
- # This file is part of pyasn1-modules software.
- #
- # Created by Russ Housley.
- #
- # Copyright (c) 2019, Vigil Security, LLC
- # License: http://snmplabs.com/pyasn1/license.html
- #
- # PKCS #5: Password-Based Cryptography Specification, Version 2.1
- #
- # ASN.1 source from:
- # https://www.rfc-editor.org/rfc/rfc8018.txt
- #
-
- from pyasn1.type import constraint
- from pyasn1.type import namedtype
- from pyasn1.type import namedval
- from pyasn1.type import univ
-
- from pyasn1_modules import rfc3565
- from pyasn1_modules import rfc5280
-
- MAX = float('inf')
-
- def _OID(*components):
- output = []
- for x in tuple(components):
- if isinstance(x, univ.ObjectIdentifier):
- output.extend(list(x))
- else:
- output.append(int(x))
-
- return univ.ObjectIdentifier(output)
-
-
- # Import from RFC 3565
-
- AES_IV = rfc3565.AES_IV
-
-
- # Import from RFC 5280
-
- AlgorithmIdentifier = rfc5280.AlgorithmIdentifier
-
-
- # Basic object identifiers
-
- nistAlgorithms = _OID(2, 16, 840, 1, 101, 3, 4)
-
- aes = _OID(nistAlgorithms, 1)
-
- oiw = _OID(1, 3, 14)
-
- rsadsi = _OID(1, 2, 840, 113549)
-
- pkcs = _OID(rsadsi, 1)
-
- digestAlgorithm = _OID(rsadsi, 2)
-
- encryptionAlgorithm = _OID(rsadsi, 3)
-
- pkcs_5 = _OID(pkcs, 5)
-
-
-
- # HMAC object identifiers
-
- id_hmacWithSHA1 = _OID(digestAlgorithm, 7)
-
- id_hmacWithSHA224 = _OID(digestAlgorithm, 8)
-
- id_hmacWithSHA256 = _OID(digestAlgorithm, 9)
-
- id_hmacWithSHA384 = _OID(digestAlgorithm, 10)
-
- id_hmacWithSHA512 = _OID(digestAlgorithm, 11)
-
- id_hmacWithSHA512_224 = _OID(digestAlgorithm, 12)
-
- id_hmacWithSHA512_256 = _OID(digestAlgorithm, 13)
-
-
- # PBES1 object identifiers
-
- pbeWithMD2AndDES_CBC = _OID(pkcs_5, 1)
-
- pbeWithMD2AndRC2_CBC = _OID(pkcs_5, 4)
-
- pbeWithMD5AndDES_CBC = _OID(pkcs_5, 3)
-
- pbeWithMD5AndRC2_CBC = _OID(pkcs_5, 6)
-
- pbeWithSHA1AndDES_CBC = _OID(pkcs_5, 10)
-
- pbeWithSHA1AndRC2_CBC = _OID(pkcs_5, 11)
-
-
- # Supporting techniques object identifiers
-
- desCBC = _OID(oiw, 3, 2, 7)
-
- des_EDE3_CBC = _OID(encryptionAlgorithm, 7)
-
- rc2CBC = _OID(encryptionAlgorithm, 2)
-
- rc5_CBC_PAD = _OID(encryptionAlgorithm, 9)
-
- aes128_CBC_PAD = _OID(aes, 2)
-
- aes192_CBC_PAD = _OID(aes, 22)
-
- aes256_CBC_PAD = _OID(aes, 42)
-
-
- # PBES1
-
- class PBEParameter(univ.Sequence):
- pass
-
- PBEParameter.componentType = namedtype.NamedTypes(
- namedtype.NamedType('salt', univ.OctetString().subtype(
- subtypeSpec=constraint.ValueSizeConstraint(8, 8))),
- namedtype.NamedType('iterationCount', univ.Integer())
- )
-
-
- # PBES2
-
- id_PBES2 = _OID(pkcs_5, 13)
-
-
- class PBES2_params(univ.Sequence):
- pass
-
- PBES2_params.componentType = namedtype.NamedTypes(
- namedtype.NamedType('keyDerivationFunc', AlgorithmIdentifier()),
- namedtype.NamedType('encryptionScheme', AlgorithmIdentifier())
- )
-
-
- # PBMAC1
-
- id_PBMAC1 = _OID(pkcs_5, 14)
-
-
- class PBMAC1_params(univ.Sequence):
- pass
-
- PBMAC1_params.componentType = namedtype.NamedTypes(
- namedtype.NamedType('keyDerivationFunc', AlgorithmIdentifier()),
- namedtype.NamedType('messageAuthScheme', AlgorithmIdentifier())
- )
-
-
- # PBKDF2
-
- id_PBKDF2 = _OID(pkcs_5, 12)
-
-
- algid_hmacWithSHA1 = AlgorithmIdentifier()
- algid_hmacWithSHA1['algorithm'] = id_hmacWithSHA1
- algid_hmacWithSHA1['parameters'] = univ.Null("")
-
-
- class PBKDF2_params(univ.Sequence):
- pass
-
- PBKDF2_params.componentType = namedtype.NamedTypes(
- namedtype.NamedType('salt', univ.Choice(componentType=namedtype.NamedTypes(
- namedtype.NamedType('specified', univ.OctetString()),
- namedtype.NamedType('otherSource', AlgorithmIdentifier())
- ))),
- namedtype.NamedType('iterationCount', univ.Integer().subtype(
- subtypeSpec=constraint.ValueRangeConstraint(1, MAX))),
- namedtype.OptionalNamedType('keyLength', univ.Integer().subtype(
- subtypeSpec=constraint.ValueRangeConstraint(1, MAX))),
- namedtype.DefaultedNamedType('prf', algid_hmacWithSHA1)
- )
-
-
- # RC2 CBC algorithm parameter
-
- class RC2_CBC_Parameter(univ.Sequence):
- pass
-
- RC2_CBC_Parameter.componentType = namedtype.NamedTypes(
- namedtype.OptionalNamedType('rc2ParameterVersion', univ.Integer()),
- namedtype.NamedType('iv', univ.OctetString().subtype(
- subtypeSpec=constraint.ValueSizeConstraint(8, 8)))
- )
-
-
- # RC5 CBC algorithm parameter
-
- class RC5_CBC_Parameters(univ.Sequence):
- pass
-
- RC5_CBC_Parameters.componentType = namedtype.NamedTypes(
- namedtype.NamedType('version',
- univ.Integer(namedValues=namedval.NamedValues(('v1_0', 16))).subtype(
- subtypeSpec=constraint.SingleValueConstraint(16))),
- namedtype.NamedType('rounds',
- univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(8, 127))),
- namedtype.NamedType('blockSizeInBits',
- univ.Integer().subtype(subtypeSpec=constraint.SingleValueConstraint(64, 128))),
- namedtype.OptionalNamedType('iv', univ.OctetString())
- )
-
-
- # Initialization Vector for AES: OCTET STRING (SIZE(16))
-
- class AES_IV(univ.OctetString):
- pass
-
- AES_IV.subtypeSpec = constraint.ValueSizeConstraint(16, 16)
-
-
- # Initialization Vector for DES: OCTET STRING (SIZE(8))
-
- class DES_IV(univ.OctetString):
- pass
-
- DES_IV.subtypeSpec = constraint.ValueSizeConstraint(8, 8)
-
-
- # Update the Algorithm Identifier map
-
- _algorithmIdentifierMapUpdate = {
- # PBKDF2-PRFs
- id_hmacWithSHA1: univ.Null(),
- id_hmacWithSHA224: univ.Null(),
- id_hmacWithSHA256: univ.Null(),
- id_hmacWithSHA384: univ.Null(),
- id_hmacWithSHA512: univ.Null(),
- id_hmacWithSHA512_224: univ.Null(),
- id_hmacWithSHA512_256: univ.Null(),
- # PBES1Algorithms
- pbeWithMD2AndDES_CBC: PBEParameter(),
- pbeWithMD2AndRC2_CBC: PBEParameter(),
- pbeWithMD5AndDES_CBC: PBEParameter(),
- pbeWithMD5AndRC2_CBC: PBEParameter(),
- pbeWithSHA1AndDES_CBC: PBEParameter(),
- pbeWithSHA1AndRC2_CBC: PBEParameter(),
- # PBES2Algorithms
- id_PBES2: PBES2_params(),
- # PBES2-KDFs
- id_PBKDF2: PBKDF2_params(),
- # PBMAC1Algorithms
- id_PBMAC1: PBMAC1_params(),
- # SupportingAlgorithms
- desCBC: DES_IV(),
- des_EDE3_CBC: DES_IV(),
- rc2CBC: RC2_CBC_Parameter(),
- rc5_CBC_PAD: RC5_CBC_Parameters(),
- aes128_CBC_PAD: AES_IV(),
- aes192_CBC_PAD: AES_IV(),
- aes256_CBC_PAD: AES_IV(),
- }
-
- rfc5280.algorithmIdentifierMap.update(_algorithmIdentifierMapUpdate)
|