| # |
| # This file is part of pyasn1-modules software. |
| # |
| # Created by Russ Housley with a very small amount of assistance from |
| # asn1ate v.0.6.0. |
| # Modified by Russ Housley to add maps for opentypes. |
| # |
| # Copyright (c) 2019, Vigil Security, LLC |
| # License: http://snmplabs.com/pyasn1/license.html |
| # |
| # Additional Algorithms and Identifiers for RSA Cryptography |
| # for use in Certificates and CRLs |
| # |
| # ASN.1 source from: |
| # https://www.rfc-editor.org/rfc/rfc4055.txt |
| # |
| from pyasn1.type import namedtype |
| from pyasn1.type import tag |
| from pyasn1.type import univ |
| |
| from pyasn1_modules import rfc5280 |
| |
| |
| def _OID(*components): |
| output = [] |
| for x in tuple(components): |
| if isinstance(x, univ.ObjectIdentifier): |
| output.extend(list(x)) |
| else: |
| output.append(int(x)) |
| return univ.ObjectIdentifier(output) |
| |
| |
| id_sha1 = _OID(1, 3, 14, 3, 2, 26) |
| |
| id_sha256 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 1) |
| |
| id_sha384 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 2) |
| |
| id_sha512 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 3) |
| |
| id_sha224 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 4) |
| |
| rsaEncryption = _OID(1, 2, 840, 113549, 1, 1, 1) |
| |
| id_mgf1 = _OID(1, 2, 840, 113549, 1, 1, 8) |
| |
| id_RSAES_OAEP = _OID(1, 2, 840, 113549, 1, 1, 7) |
| |
| id_pSpecified = _OID(1, 2, 840, 113549, 1, 1, 9) |
| |
| id_RSASSA_PSS = _OID(1, 2, 840, 113549, 1, 1, 10) |
| |
| sha256WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 11) |
| |
| sha384WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 12) |
| |
| sha512WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 13) |
| |
| sha224WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 14) |
| |
| sha1Identifier = rfc5280.AlgorithmIdentifier() |
| sha1Identifier['algorithm'] = id_sha1 |
| sha1Identifier['parameters'] = univ.Null("") |
| |
| sha224Identifier = rfc5280.AlgorithmIdentifier() |
| sha224Identifier['algorithm'] = id_sha224 |
| sha224Identifier['parameters'] = univ.Null("") |
| |
| sha256Identifier = rfc5280.AlgorithmIdentifier() |
| sha256Identifier['algorithm'] = id_sha256 |
| sha256Identifier['parameters'] = univ.Null("") |
| |
| sha384Identifier = rfc5280.AlgorithmIdentifier() |
| sha384Identifier['algorithm'] = id_sha384 |
| sha384Identifier['parameters'] = univ.Null("") |
| |
| sha512Identifier = rfc5280.AlgorithmIdentifier() |
| sha512Identifier['algorithm'] = id_sha512 |
| sha512Identifier['parameters'] = univ.Null("") |
| |
| mgf1SHA1Identifier = rfc5280.AlgorithmIdentifier() |
| mgf1SHA1Identifier['algorithm'] = id_mgf1 |
| mgf1SHA1Identifier['parameters'] = sha1Identifier |
| |
| mgf1SHA224Identifier = rfc5280.AlgorithmIdentifier() |
| mgf1SHA224Identifier['algorithm'] = id_mgf1 |
| mgf1SHA224Identifier['parameters'] = sha224Identifier |
| |
| mgf1SHA256Identifier = rfc5280.AlgorithmIdentifier() |
| mgf1SHA256Identifier['algorithm'] = id_mgf1 |
| mgf1SHA256Identifier['parameters'] = sha256Identifier |
| |
| mgf1SHA384Identifier = rfc5280.AlgorithmIdentifier() |
| mgf1SHA384Identifier['algorithm'] = id_mgf1 |
| mgf1SHA384Identifier['parameters'] = sha384Identifier |
| |
| mgf1SHA512Identifier = rfc5280.AlgorithmIdentifier() |
| mgf1SHA512Identifier['algorithm'] = id_mgf1 |
| mgf1SHA512Identifier['parameters'] = sha512Identifier |
| |
| pSpecifiedEmptyIdentifier = rfc5280.AlgorithmIdentifier() |
| pSpecifiedEmptyIdentifier['algorithm'] = id_pSpecified |
| pSpecifiedEmptyIdentifier['parameters'] = univ.OctetString(value='') |
| |
| |
| class RSAPublicKey(univ.Sequence): |
| pass |
| |
| RSAPublicKey.componentType = namedtype.NamedTypes( |
| namedtype.NamedType('modulus', univ.Integer()), |
| namedtype.NamedType('publicExponent', univ.Integer()) |
| ) |
| |
| |
| class HashAlgorithm(rfc5280.AlgorithmIdentifier): |
| pass |
| |
| |
| class MaskGenAlgorithm(rfc5280.AlgorithmIdentifier): |
| pass |
| |
| |
| class RSAES_OAEP_params(univ.Sequence): |
| pass |
| |
| RSAES_OAEP_params.componentType = namedtype.NamedTypes( |
| namedtype.OptionalNamedType('hashFunc', rfc5280.AlgorithmIdentifier().subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))), |
| namedtype.OptionalNamedType('maskGenFunc', rfc5280.AlgorithmIdentifier().subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))), |
| namedtype.OptionalNamedType('pSourceFunc', rfc5280.AlgorithmIdentifier().subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2))) |
| ) |
| |
| rSAES_OAEP_Default_Params = RSAES_OAEP_params() |
| |
| rSAES_OAEP_Default_Identifier = rfc5280.AlgorithmIdentifier() |
| rSAES_OAEP_Default_Identifier['algorithm'] = id_RSAES_OAEP |
| rSAES_OAEP_Default_Identifier['parameters'] = rSAES_OAEP_Default_Params |
| |
| rSAES_OAEP_SHA224_Params = RSAES_OAEP_params() |
| rSAES_OAEP_SHA224_Params['hashFunc'] = sha224Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True) |
| rSAES_OAEP_SHA224_Params['maskGenFunc'] = mgf1SHA224Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True) |
| |
| rSAES_OAEP_SHA224_Identifier = rfc5280.AlgorithmIdentifier() |
| rSAES_OAEP_SHA224_Identifier['algorithm'] = id_RSAES_OAEP |
| rSAES_OAEP_SHA224_Identifier['parameters'] = rSAES_OAEP_SHA224_Params |
| |
| rSAES_OAEP_SHA256_Params = RSAES_OAEP_params() |
| rSAES_OAEP_SHA256_Params['hashFunc'] = sha256Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True) |
| rSAES_OAEP_SHA256_Params['maskGenFunc'] = mgf1SHA256Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True) |
| |
| rSAES_OAEP_SHA256_Identifier = rfc5280.AlgorithmIdentifier() |
| rSAES_OAEP_SHA256_Identifier['algorithm'] = id_RSAES_OAEP |
| rSAES_OAEP_SHA256_Identifier['parameters'] = rSAES_OAEP_SHA256_Params |
| |
| rSAES_OAEP_SHA384_Params = RSAES_OAEP_params() |
| rSAES_OAEP_SHA384_Params['hashFunc'] = sha384Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True) |
| rSAES_OAEP_SHA384_Params['maskGenFunc'] = mgf1SHA384Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True) |
| |
| rSAES_OAEP_SHA384_Identifier = rfc5280.AlgorithmIdentifier() |
| rSAES_OAEP_SHA384_Identifier['algorithm'] = id_RSAES_OAEP |
| rSAES_OAEP_SHA384_Identifier['parameters'] = rSAES_OAEP_SHA384_Params |
| |
| rSAES_OAEP_SHA512_Params = RSAES_OAEP_params() |
| rSAES_OAEP_SHA512_Params['hashFunc'] = sha512Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True) |
| rSAES_OAEP_SHA512_Params['maskGenFunc'] = mgf1SHA512Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True) |
| |
| rSAES_OAEP_SHA512_Identifier = rfc5280.AlgorithmIdentifier() |
| rSAES_OAEP_SHA512_Identifier['algorithm'] = id_RSAES_OAEP |
| rSAES_OAEP_SHA512_Identifier['parameters'] = rSAES_OAEP_SHA512_Params |
| |
| |
| class RSASSA_PSS_params(univ.Sequence): |
| pass |
| |
| RSASSA_PSS_params.componentType = namedtype.NamedTypes( |
| namedtype.OptionalNamedType('hashAlgorithm', rfc5280.AlgorithmIdentifier().subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))), |
| namedtype.OptionalNamedType('maskGenAlgorithm', rfc5280.AlgorithmIdentifier().subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))), |
| namedtype.DefaultedNamedType('saltLength', univ.Integer(value=20).subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))), |
| namedtype.DefaultedNamedType('trailerField', univ.Integer(value=1).subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))) |
| ) |
| |
| rSASSA_PSS_Default_Params = RSASSA_PSS_params() |
| |
| rSASSA_PSS_Default_Identifier = rfc5280.AlgorithmIdentifier() |
| rSASSA_PSS_Default_Identifier['algorithm'] = id_RSASSA_PSS |
| rSASSA_PSS_Default_Identifier['parameters'] = rSASSA_PSS_Default_Params |
| |
| rSASSA_PSS_SHA224_Params = RSASSA_PSS_params() |
| rSASSA_PSS_SHA224_Params['hashAlgorithm'] = sha224Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True) |
| rSASSA_PSS_SHA224_Params['maskGenAlgorithm'] = mgf1SHA224Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True) |
| |
| rSASSA_PSS_SHA224_Identifier = rfc5280.AlgorithmIdentifier() |
| rSASSA_PSS_SHA224_Identifier['algorithm'] = id_RSASSA_PSS |
| rSASSA_PSS_SHA224_Identifier['parameters'] = rSASSA_PSS_SHA224_Params |
| |
| rSASSA_PSS_SHA256_Params = RSASSA_PSS_params() |
| rSASSA_PSS_SHA256_Params['hashAlgorithm'] = sha256Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True) |
| rSASSA_PSS_SHA256_Params['maskGenAlgorithm'] = mgf1SHA256Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True) |
| |
| rSASSA_PSS_SHA256_Identifier = rfc5280.AlgorithmIdentifier() |
| rSASSA_PSS_SHA256_Identifier['algorithm'] = id_RSASSA_PSS |
| rSASSA_PSS_SHA256_Identifier['parameters'] = rSASSA_PSS_SHA256_Params |
| |
| rSASSA_PSS_SHA384_Params = RSASSA_PSS_params() |
| rSASSA_PSS_SHA384_Params['hashAlgorithm'] = sha384Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True) |
| rSASSA_PSS_SHA384_Params['maskGenAlgorithm'] = mgf1SHA384Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True) |
| |
| rSASSA_PSS_SHA384_Identifier = rfc5280.AlgorithmIdentifier() |
| rSASSA_PSS_SHA384_Identifier['algorithm'] = id_RSASSA_PSS |
| rSASSA_PSS_SHA384_Identifier['parameters'] = rSASSA_PSS_SHA384_Params |
| |
| rSASSA_PSS_SHA512_Params = RSASSA_PSS_params() |
| rSASSA_PSS_SHA512_Params['hashAlgorithm'] = sha512Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True) |
| rSASSA_PSS_SHA512_Params['maskGenAlgorithm'] = mgf1SHA512Identifier.subtype( |
| explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True) |
| |
| rSASSA_PSS_SHA512_Identifier = rfc5280.AlgorithmIdentifier() |
| rSASSA_PSS_SHA512_Identifier['algorithm'] = id_RSASSA_PSS |
| rSASSA_PSS_SHA512_Identifier['parameters'] = rSASSA_PSS_SHA512_Params |
| |
| |
| # Update the Algorithm Identifier map |
| |
| _algorithmIdentifierMapUpdate = { |
| id_sha1: univ.Null(), |
| id_sha224: univ.Null(), |
| id_sha256: univ.Null(), |
| id_sha384: univ.Null(), |
| id_sha512: univ.Null(), |
| id_mgf1: rfc5280.AlgorithmIdentifier(), |
| id_pSpecified: univ.OctetString(), |
| id_RSAES_OAEP: RSAES_OAEP_params(), |
| id_RSASSA_PSS: RSASSA_PSS_params(), |
| } |
| |
| rfc5280.algorithmIdentifierMap.update(_algorithmIdentifierMapUpdate) |
