258 lines
10 KiB
Python
258 lines
10 KiB
Python
#
|
|
# This file is part of pyasn1-modules software.
|
|
#
|
|
# Created by Russ Housley with a very small amount of assistance from
|
|
# asn1ate v.0.6.0.
|
|
# Modified by Russ Housley to add maps for opentypes.
|
|
#
|
|
# Copyright (c) 2019, Vigil Security, LLC
|
|
# License: http://snmplabs.com/pyasn1/license.html
|
|
#
|
|
# Additional Algorithms and Identifiers for RSA Cryptography
|
|
# for use in Certificates and CRLs
|
|
#
|
|
# ASN.1 source from:
|
|
# https://www.rfc-editor.org/rfc/rfc4055.txt
|
|
#
|
|
from pyasn1.type import namedtype
|
|
from pyasn1.type import tag
|
|
from pyasn1.type import univ
|
|
|
|
from pyasn1_modules import rfc5280
|
|
|
|
|
|
def _OID(*components):
|
|
output = []
|
|
for x in tuple(components):
|
|
if isinstance(x, univ.ObjectIdentifier):
|
|
output.extend(list(x))
|
|
else:
|
|
output.append(int(x))
|
|
return univ.ObjectIdentifier(output)
|
|
|
|
|
|
id_sha1 = _OID(1, 3, 14, 3, 2, 26)
|
|
|
|
id_sha256 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 1)
|
|
|
|
id_sha384 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 2)
|
|
|
|
id_sha512 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 3)
|
|
|
|
id_sha224 = _OID(2, 16, 840, 1, 101, 3, 4, 2, 4)
|
|
|
|
rsaEncryption = _OID(1, 2, 840, 113549, 1, 1, 1)
|
|
|
|
id_mgf1 = _OID(1, 2, 840, 113549, 1, 1, 8)
|
|
|
|
id_RSAES_OAEP = _OID(1, 2, 840, 113549, 1, 1, 7)
|
|
|
|
id_pSpecified = _OID(1, 2, 840, 113549, 1, 1, 9)
|
|
|
|
id_RSASSA_PSS = _OID(1, 2, 840, 113549, 1, 1, 10)
|
|
|
|
sha256WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 11)
|
|
|
|
sha384WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 12)
|
|
|
|
sha512WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 13)
|
|
|
|
sha224WithRSAEncryption = _OID(1, 2, 840, 113549, 1, 1, 14)
|
|
|
|
sha1Identifier = rfc5280.AlgorithmIdentifier()
|
|
sha1Identifier['algorithm'] = id_sha1
|
|
sha1Identifier['parameters'] = univ.Null("")
|
|
|
|
sha224Identifier = rfc5280.AlgorithmIdentifier()
|
|
sha224Identifier['algorithm'] = id_sha224
|
|
sha224Identifier['parameters'] = univ.Null("")
|
|
|
|
sha256Identifier = rfc5280.AlgorithmIdentifier()
|
|
sha256Identifier['algorithm'] = id_sha256
|
|
sha256Identifier['parameters'] = univ.Null("")
|
|
|
|
sha384Identifier = rfc5280.AlgorithmIdentifier()
|
|
sha384Identifier['algorithm'] = id_sha384
|
|
sha384Identifier['parameters'] = univ.Null("")
|
|
|
|
sha512Identifier = rfc5280.AlgorithmIdentifier()
|
|
sha512Identifier['algorithm'] = id_sha512
|
|
sha512Identifier['parameters'] = univ.Null("")
|
|
|
|
mgf1SHA1Identifier = rfc5280.AlgorithmIdentifier()
|
|
mgf1SHA1Identifier['algorithm'] = id_mgf1
|
|
mgf1SHA1Identifier['parameters'] = sha1Identifier
|
|
|
|
mgf1SHA224Identifier = rfc5280.AlgorithmIdentifier()
|
|
mgf1SHA224Identifier['algorithm'] = id_mgf1
|
|
mgf1SHA224Identifier['parameters'] = sha224Identifier
|
|
|
|
mgf1SHA256Identifier = rfc5280.AlgorithmIdentifier()
|
|
mgf1SHA256Identifier['algorithm'] = id_mgf1
|
|
mgf1SHA256Identifier['parameters'] = sha256Identifier
|
|
|
|
mgf1SHA384Identifier = rfc5280.AlgorithmIdentifier()
|
|
mgf1SHA384Identifier['algorithm'] = id_mgf1
|
|
mgf1SHA384Identifier['parameters'] = sha384Identifier
|
|
|
|
mgf1SHA512Identifier = rfc5280.AlgorithmIdentifier()
|
|
mgf1SHA512Identifier['algorithm'] = id_mgf1
|
|
mgf1SHA512Identifier['parameters'] = sha512Identifier
|
|
|
|
pSpecifiedEmptyIdentifier = rfc5280.AlgorithmIdentifier()
|
|
pSpecifiedEmptyIdentifier['algorithm'] = id_pSpecified
|
|
pSpecifiedEmptyIdentifier['parameters'] = univ.OctetString(value='')
|
|
|
|
|
|
class RSAPublicKey(univ.Sequence):
|
|
pass
|
|
|
|
RSAPublicKey.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('modulus', univ.Integer()),
|
|
namedtype.NamedType('publicExponent', univ.Integer())
|
|
)
|
|
|
|
|
|
class HashAlgorithm(rfc5280.AlgorithmIdentifier):
|
|
pass
|
|
|
|
|
|
class MaskGenAlgorithm(rfc5280.AlgorithmIdentifier):
|
|
pass
|
|
|
|
|
|
class RSAES_OAEP_params(univ.Sequence):
|
|
pass
|
|
|
|
RSAES_OAEP_params.componentType = namedtype.NamedTypes(
|
|
namedtype.OptionalNamedType('hashFunc', rfc5280.AlgorithmIdentifier().subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
|
|
namedtype.OptionalNamedType('maskGenFunc', rfc5280.AlgorithmIdentifier().subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))),
|
|
namedtype.OptionalNamedType('pSourceFunc', rfc5280.AlgorithmIdentifier().subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2)))
|
|
)
|
|
|
|
rSAES_OAEP_Default_Params = RSAES_OAEP_params()
|
|
|
|
rSAES_OAEP_Default_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSAES_OAEP_Default_Identifier['algorithm'] = id_RSAES_OAEP
|
|
rSAES_OAEP_Default_Identifier['parameters'] = rSAES_OAEP_Default_Params
|
|
|
|
rSAES_OAEP_SHA224_Params = RSAES_OAEP_params()
|
|
rSAES_OAEP_SHA224_Params['hashFunc'] = sha224Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
|
|
rSAES_OAEP_SHA224_Params['maskGenFunc'] = mgf1SHA224Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
|
|
|
|
rSAES_OAEP_SHA224_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSAES_OAEP_SHA224_Identifier['algorithm'] = id_RSAES_OAEP
|
|
rSAES_OAEP_SHA224_Identifier['parameters'] = rSAES_OAEP_SHA224_Params
|
|
|
|
rSAES_OAEP_SHA256_Params = RSAES_OAEP_params()
|
|
rSAES_OAEP_SHA256_Params['hashFunc'] = sha256Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
|
|
rSAES_OAEP_SHA256_Params['maskGenFunc'] = mgf1SHA256Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
|
|
|
|
rSAES_OAEP_SHA256_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSAES_OAEP_SHA256_Identifier['algorithm'] = id_RSAES_OAEP
|
|
rSAES_OAEP_SHA256_Identifier['parameters'] = rSAES_OAEP_SHA256_Params
|
|
|
|
rSAES_OAEP_SHA384_Params = RSAES_OAEP_params()
|
|
rSAES_OAEP_SHA384_Params['hashFunc'] = sha384Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
|
|
rSAES_OAEP_SHA384_Params['maskGenFunc'] = mgf1SHA384Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
|
|
|
|
rSAES_OAEP_SHA384_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSAES_OAEP_SHA384_Identifier['algorithm'] = id_RSAES_OAEP
|
|
rSAES_OAEP_SHA384_Identifier['parameters'] = rSAES_OAEP_SHA384_Params
|
|
|
|
rSAES_OAEP_SHA512_Params = RSAES_OAEP_params()
|
|
rSAES_OAEP_SHA512_Params['hashFunc'] = sha512Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
|
|
rSAES_OAEP_SHA512_Params['maskGenFunc'] = mgf1SHA512Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
|
|
|
|
rSAES_OAEP_SHA512_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSAES_OAEP_SHA512_Identifier['algorithm'] = id_RSAES_OAEP
|
|
rSAES_OAEP_SHA512_Identifier['parameters'] = rSAES_OAEP_SHA512_Params
|
|
|
|
|
|
class RSASSA_PSS_params(univ.Sequence):
|
|
pass
|
|
|
|
RSASSA_PSS_params.componentType = namedtype.NamedTypes(
|
|
namedtype.OptionalNamedType('hashAlgorithm', rfc5280.AlgorithmIdentifier().subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
|
|
namedtype.OptionalNamedType('maskGenAlgorithm', rfc5280.AlgorithmIdentifier().subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))),
|
|
namedtype.DefaultedNamedType('saltLength', univ.Integer(value=20).subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
|
|
namedtype.DefaultedNamedType('trailerField', univ.Integer(value=1).subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
|
|
)
|
|
|
|
rSASSA_PSS_Default_Params = RSASSA_PSS_params()
|
|
|
|
rSASSA_PSS_Default_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSASSA_PSS_Default_Identifier['algorithm'] = id_RSASSA_PSS
|
|
rSASSA_PSS_Default_Identifier['parameters'] = rSASSA_PSS_Default_Params
|
|
|
|
rSASSA_PSS_SHA224_Params = RSASSA_PSS_params()
|
|
rSASSA_PSS_SHA224_Params['hashAlgorithm'] = sha224Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
|
|
rSASSA_PSS_SHA224_Params['maskGenAlgorithm'] = mgf1SHA224Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
|
|
|
|
rSASSA_PSS_SHA224_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSASSA_PSS_SHA224_Identifier['algorithm'] = id_RSASSA_PSS
|
|
rSASSA_PSS_SHA224_Identifier['parameters'] = rSASSA_PSS_SHA224_Params
|
|
|
|
rSASSA_PSS_SHA256_Params = RSASSA_PSS_params()
|
|
rSASSA_PSS_SHA256_Params['hashAlgorithm'] = sha256Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
|
|
rSASSA_PSS_SHA256_Params['maskGenAlgorithm'] = mgf1SHA256Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
|
|
|
|
rSASSA_PSS_SHA256_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSASSA_PSS_SHA256_Identifier['algorithm'] = id_RSASSA_PSS
|
|
rSASSA_PSS_SHA256_Identifier['parameters'] = rSASSA_PSS_SHA256_Params
|
|
|
|
rSASSA_PSS_SHA384_Params = RSASSA_PSS_params()
|
|
rSASSA_PSS_SHA384_Params['hashAlgorithm'] = sha384Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
|
|
rSASSA_PSS_SHA384_Params['maskGenAlgorithm'] = mgf1SHA384Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
|
|
|
|
rSASSA_PSS_SHA384_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSASSA_PSS_SHA384_Identifier['algorithm'] = id_RSASSA_PSS
|
|
rSASSA_PSS_SHA384_Identifier['parameters'] = rSASSA_PSS_SHA384_Params
|
|
|
|
rSASSA_PSS_SHA512_Params = RSASSA_PSS_params()
|
|
rSASSA_PSS_SHA512_Params['hashAlgorithm'] = sha512Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0), cloneValueFlag=True)
|
|
rSASSA_PSS_SHA512_Params['maskGenAlgorithm'] = mgf1SHA512Identifier.subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1), cloneValueFlag=True)
|
|
|
|
rSASSA_PSS_SHA512_Identifier = rfc5280.AlgorithmIdentifier()
|
|
rSASSA_PSS_SHA512_Identifier['algorithm'] = id_RSASSA_PSS
|
|
rSASSA_PSS_SHA512_Identifier['parameters'] = rSASSA_PSS_SHA512_Params
|
|
|
|
|
|
# Update the Algorithm Identifier map
|
|
|
|
_algorithmIdentifierMapUpdate = {
|
|
id_sha1: univ.Null(),
|
|
id_sha224: univ.Null(),
|
|
id_sha256: univ.Null(),
|
|
id_sha384: univ.Null(),
|
|
id_sha512: univ.Null(),
|
|
id_mgf1: rfc5280.AlgorithmIdentifier(),
|
|
id_pSpecified: univ.OctetString(),
|
|
id_RSAES_OAEP: RSAES_OAEP_params(),
|
|
id_RSASSA_PSS: RSASSA_PSS_params(),
|
|
}
|
|
|
|
rfc5280.algorithmIdentifierMap.update(_algorithmIdentifierMapUpdate)
|