@ibgib/core-gib 0.1.60 → 0.1.62

package/src/keystone/policy/profiles/profile-session.json

@@ -0,0 +1,84 @@
+{
+  "$schema": "../schemas/keystone.low.schema.json",
+  "metadata": {
+    "name": "Session/Saga Identity Profile",
+    "securityLevel": "low"
+  },
+  "pools": {
+    "sync": {
+      "id": "sync",
+      "allowedVerbs": [
+        "sync"
+      ],
+      "algo": "SHA-256",
+      "rounds": 1,
+      "behavior": {
+        "size": 50,
+        "replenish": "top-up",
+        "selectSequentially": 2,
+        "selectRandomly": 2,
+        "targetBindingCount": 6
+      }
+    },
+    "manage": {
+      "id": "manage",
+      "allowedVerbs": [
+        "manage"
+      ],
+      "algo": "SHA-256",
+      "rounds": 2,
+      "behavior": {
+        "size": 50,
+        "replenish": "replace-all",
+        "selectSequentially": 2,
+        "selectRandomly": 2,
+        "targetBindingCount": 6
+      }
+    },
+    "revoke": {
+      "id": "revoke",
+      "allowedVerbs": [
+        "revoke"
+      ],
+      "algo": "SHA-256",
+      "rounds": 5,
+      "behavior": {
+        "size": 50,
+        "replenish": "delete-all",
+        "selectSequentially": 3,
+        "selectRandomly": 3,
+        "targetBindingCount": 0
+      }
+    },
+    "connect": {
+      "id": "connect",
+      "allowedVerbs": [
+        "connect"
+      ],
+      "algo": "SHA-256",
+      "rounds": 1,
+      "behavior": {
+        "size": 50,
+        "replenish": "top-up",
+        "selectSequentially": 2,
+        "selectRandomly": 2,
+        "targetBindingCount": 6
+      }
+    },
+    "sign": {
+      "id": "default",
+      "allowedVerbs": [
+        "sign"
+      ],
+      "algo": "SHA-256",
+      "rounds": 2,
+      "behavior": {
+        "size": 50,
+        "replenish": "top-up",
+        "selectSequentially": 2,
+        "selectRandomly": 2,
+        "targetBindingCount": 6
+      }
+    }
+  }
+}

package/src/keystone/policy/profiles/profile-test.json

@@ -0,0 +1,84 @@
+{
+  "$schema": "../schemas/keystone.low.schema.json",
+  "metadata": {
+    "name": "Test Identity Profile",
+    "securityLevel": "low"
+  },
+  "pools": {
+    "sync": {
+      "id": "sync",
+      "allowedVerbs": [
+        "sync"
+      ],
+      "algo": "SHA-256",
+      "rounds": 1,
+      "behavior": {
+        "size": 12,
+        "replenish": "top-up",
+        "selectSequentially": 1,
+        "selectRandomly": 1,
+        "targetBindingCount": 3
+      }
+    },
+    "manage": {
+      "id": "manage",
+      "allowedVerbs": [
+        "manage"
+      ],
+      "algo": "SHA-256",
+      "rounds": 2,
+      "behavior": {
+        "size": 12,
+        "replenish": "replace-all",
+        "selectSequentially": 1,
+        "selectRandomly": 2,
+        "targetBindingCount": 3
+      }
+    },
+    "revoke": {
+      "id": "revoke",
+      "allowedVerbs": [
+        "revoke"
+      ],
+      "algo": "SHA-256",
+      "rounds": 5,
+      "behavior": {
+        "size": 12,
+        "replenish": "delete-all",
+        "selectSequentially": 3,
+        "selectRandomly": 3,
+        "targetBindingCount": 0
+      }
+    },
+    "connect": {
+      "id": "connect",
+      "allowedVerbs": [
+        "connect"
+      ],
+      "algo": "SHA-256",
+      "rounds": 1,
+      "behavior": {
+        "size": 12,
+        "replenish": "top-up",
+        "selectSequentially": 1,
+        "selectRandomly": 1,
+        "targetBindingCount": 3
+      }
+    },
+    "sign": {
+      "id": "default",
+      "allowedVerbs": [
+        "sign"
+      ],
+      "algo": "SHA-256",
+      "rounds": 2,
+      "behavior": {
+        "size": 20,
+        "replenish": "top-up",
+        "selectSequentially": 1,
+        "selectRandomly": 1,
+        "targetBindingCount": 3
+      }
+    }
+  }
+}

package/src/keystone/policy/schemas/connect-pool.high.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "HighSecurityConnectPool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "connect" },
+    "allowedVerbs": { "type": "array", "items": { "const": "connect" } },
+    "algo": { "type": "string", "const": "SHA-512" },
+    "rounds": { "type": "integer", "minimum": 4 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 2000 },
+        "replenish": { "type": "string", "const": "top-up" },
+        "selectSequentially": { "type": "integer", "minimum": 10 },
+        "selectRandomly": { "type": "integer", "minimum": 10 },
+        "targetBindingCount": { "type": "integer", "minimum": 16 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/connect-pool.low.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "LowSecurityConnectPool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "connect" },
+    "allowedVerbs": { "type": "array", "items": { "const": "connect" } },
+    "algo": { "type": "string", "const": "SHA-256" },
+    "rounds": { "type": "integer", "minimum": 1 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 12 },
+        "replenish": { "type": "string", "const": "top-up" },
+        "selectSequentially": { "type": "integer", "minimum": 1 },
+        "selectRandomly": { "type": "integer", "minimum": 1 },
+        "targetBindingCount": { "type": "integer", "minimum": 3 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/connect-pool.medium.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "MediumSecurityConnectPool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "connect" },
+    "allowedVerbs": { "type": "array", "items": { "const": "connect" } },
+    "algo": { "type": "string", "enum": ["SHA-256", "SHA-512"] },
+    "rounds": { "type": "integer", "minimum": 2 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 500 },
+        "replenish": { "type": "string", "const": "top-up" },
+        "selectSequentially": { "type": "integer", "minimum": 5 },
+        "selectRandomly": { "type": "integer", "minimum": 5 },
+        "targetBindingCount": { "type": "integer", "minimum": 10 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/keystone.high.schema.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "HighSecurityKeystoneProfile",
+  "type": "object",
+  "properties": {
+    "metadata": {
+      "type": "object",
+      "properties": {
+        "name": { "type": "string" },
+        "securityLevel": { "type": "string", "const": "high" }
+      }
+    },
+    "pools": {
+      "type": "object",
+      "properties": {
+        "sync": { "$ref": "./sync-pool.high.schema.json" },
+        "manage": { "$ref": "./manage-pool.high.schema.json" },
+        "revoke": { "$ref": "./revoke-pool.high.schema.json" },
+        "connect": { "$ref": "./connect-pool.high.schema.json" },
+        "sign": { "$ref": "./sign-pool.high.schema.json" }
+      },
+      "required": ["sync", "manage", "revoke", "connect", "sign"]
+    }
+  },
+  "required": ["pools"]
+}

package/src/keystone/policy/schemas/keystone.low.schema.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "LowSecurityKeystoneProfile",
+  "type": "object",
+  "properties": {
+    "metadata": {
+      "type": "object",
+      "properties": {
+        "name": { "type": "string" },
+        "securityLevel": { "type": "string", "const": "low" }
+      }
+    },
+    "pools": {
+      "type": "object",
+      "properties": {
+        "sync": { "$ref": "./sync-pool.low.schema.json" },
+        "manage": { "$ref": "./manage-pool.low.schema.json" },
+        "revoke": { "$ref": "./revoke-pool.low.schema.json" },
+        "connect": { "$ref": "./connect-pool.low.schema.json" },
+        "sign": { "$ref": "./sign-pool.low.schema.json" }
+      },
+      "required": ["sync", "manage", "revoke", "connect", "sign"]
+    }
+  },
+  "required": ["pools"]
+}

package/src/keystone/policy/schemas/keystone.medium.schema.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "MediumSecurityKeystoneProfile",
+  "type": "object",
+  "properties": {
+    "metadata": {
+      "type": "object",
+      "properties": {
+        "name": { "type": "string" },
+        "securityLevel": { "type": "string", "const": "medium" }
+      }
+    },
+    "pools": {
+      "type": "object",
+      "properties": {
+        "sync": { "$ref": "./sync-pool.medium.schema.json" },
+        "manage": { "$ref": "./manage-pool.medium.schema.json" },
+        "revoke": { "$ref": "./revoke-pool.medium.schema.json" },
+        "connect": { "$ref": "./connect-pool.medium.schema.json" },
+        "sign": { "$ref": "./sign-pool.medium.schema.json" }
+      },
+      "required": ["sync", "manage", "revoke", "connect", "sign"]
+    }
+  },
+  "required": ["pools"]
+}

package/src/keystone/policy/schemas/manage-pool.high.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "HighSecurityManagePool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "manage" },
+    "allowedVerbs": { "type": "array", "items": { "const": "manage" } },
+    "algo": { "type": "string", "const": "SHA-512" },
+    "rounds": { "type": "integer", "minimum": 4 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 2000 },
+        "replenish": { "type": "string", "enum": ["top-up", "replace-all"] },
+        "selectSequentially": { "type": "integer", "minimum": 10 },
+        "selectRandomly": { "type": "integer", "minimum": 10 },
+        "targetBindingCount": { "type": "integer", "minimum": 16 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/manage-pool.low.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "LowSecurityManagePool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "manage" },
+    "allowedVerbs": { "type": "array", "items": { "const": "manage" } },
+    "algo": { "type": "string", "const": "SHA-256" },
+    "rounds": { "type": "integer", "minimum": 2 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 10 },
+        "replenish": { "type": "string", "enum": ["top-up", "replace-all"] },
+        "selectSequentially": { "type": "integer", "minimum": 1 },
+        "selectRandomly": { "type": "integer", "minimum": 1 },
+        "targetBindingCount": { "type": "integer", "minimum": 3 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/manage-pool.medium.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "MediumSecurityManagePool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "manage" },
+    "allowedVerbs": { "type": "array", "items": { "const": "manage" } },
+    "algo": { "type": "string", "enum": ["SHA-256", "SHA-512"] },
+    "rounds": { "type": "integer", "minimum": 2 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 500 },
+        "replenish": { "type": "string", "enum": ["top-up", "replace-all"] },
+        "selectSequentially": { "type": "integer", "minimum": 5 },
+        "selectRandomly": { "type": "integer", "minimum": 5 },
+        "targetBindingCount": { "type": "integer", "minimum": 10 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/revoke-pool.high.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "HighSecurityRevokePool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "revoke" },
+    "allowedVerbs": { "type": "array", "items": { "const": "revoke" } },
+    "algo": { "type": "string", "const": "SHA-512" },
+    "rounds": { "type": "integer", "minimum": 20 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 2000 },
+        "replenish": { "type": "string", "const": "delete-all" },
+        "selectSequentially": { "type": "integer", "minimum": 50 },
+        "selectRandomly": { "type": "integer", "minimum": 50 },
+        "targetBindingCount": { "type": "integer", "minimum": 0 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/revoke-pool.low.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "LowSecurityRevokePool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "revoke" },
+    "allowedVerbs": { "type": "array", "items": { "const": "revoke" } },
+    "algo": { "type": "string", "const": "SHA-256" },
+    "rounds": { "type": "integer", "minimum": 5 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 12 },
+        "replenish": { "type": "string", "const": "delete-all" },
+        "selectSequentially": { "type": "integer", "minimum": 3 },
+        "selectRandomly": { "type": "integer", "minimum": 3 },
+        "targetBindingCount": { "type": "integer", "minimum": 0 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/revoke-pool.medium.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "MediumSecurityRevokePool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "revoke" },
+    "allowedVerbs": { "type": "array", "items": { "const": "revoke" } },
+    "algo": { "type": "string", "enum": ["SHA-256", "SHA-512"] },
+    "rounds": { "type": "integer", "minimum": 10 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 200 },
+        "replenish": { "type": "string", "const": "delete-all" },
+        "selectSequentially": { "type": "integer", "minimum": 20 },
+        "selectRandomly": { "type": "integer", "minimum": 20 },
+        "targetBindingCount": { "type": "integer", "minimum": 0 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/sign-pool.high.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "HighSecuritySignPool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "default" },
+    "allowedVerbs": { "type": "array", "items": { "const": "sign" } },
+    "algo": { "type": "string", "const": "SHA-512" },
+    "rounds": { "type": "integer", "minimum": 4 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 1000 },
+        "replenish": { "type": "string", "const": "top-up" },
+        "selectSequentially": { "type": "integer", "minimum": 10 },
+        "selectRandomly": { "type": "integer", "minimum": 10 },
+        "targetBindingCount": { "type": "integer", "minimum": 16 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/sign-pool.low.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "LowSecuritySignPool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "default" },
+    "allowedVerbs": { "type": "array", "items": { "const": "sign" } },
+    "algo": { "type": "string", "const": "SHA-256" },
+    "rounds": { "type": "integer", "minimum": 2 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 20 },
+        "replenish": { "type": "string", "const": "top-up" },
+        "selectSequentially": { "type": "integer", "minimum": 1 },
+        "selectRandomly": { "type": "integer", "minimum": 1 },
+        "targetBindingCount": { "type": "integer", "minimum": 3 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/sign-pool.medium.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "MediumSecuritySignPool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "default" },
+    "allowedVerbs": { "type": "array", "items": { "const": "sign" } },
+    "algo": { "type": "string", "enum": ["SHA-256", "SHA-512"] },
+    "rounds": { "type": "integer", "minimum": 2 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 200 },
+        "replenish": { "type": "string", "const": "top-up" },
+        "selectSequentially": { "type": "integer", "minimum": 5 },
+        "selectRandomly": { "type": "integer", "minimum": 5 },
+        "targetBindingCount": { "type": "integer", "minimum": 10 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/sync-pool.high.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "HighSecuritySyncPool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "sync" },
+    "allowedVerbs": { "type": "array", "items": { "const": "sync" } },
+    "algo": { "type": "string", "const": "SHA-512" },
+    "rounds": { "type": "integer", "minimum": 4 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 2000 },
+        "replenish": { "type": "string", "const": "top-up" },
+        "selectSequentially": { "type": "integer", "minimum": 10 },
+        "selectRandomly": { "type": "integer", "minimum": 10 },
+        "targetBindingCount": { "type": "integer", "minimum": 16 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/sync-pool.low.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "LowSecuritySyncPool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "sync" },
+    "allowedVerbs": { "type": "array", "items": { "const": "sync" } },
+    "algo": { "type": "string", "const": "SHA-256" },
+    "rounds": { "type": "integer", "minimum": 1 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 12 },
+        "replenish": { "type": "string", "const": "top-up" },
+        "selectSequentially": { "type": "integer", "minimum": 1 },
+        "selectRandomly": { "type": "integer", "minimum": 1 },
+        "targetBindingCount": { "type": "integer", "minimum": 3 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}

package/src/keystone/policy/schemas/sync-pool.medium.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "MediumSecuritySyncPool",
+  "type": "object",
+  "properties": {
+    "id": { "type": "string", "const": "sync" },
+    "allowedVerbs": { "type": "array", "items": { "const": "sync" } },
+    "algo": { "type": "string", "enum": ["SHA-256", "SHA-512"] },
+    "rounds": { "type": "integer", "minimum": 2 },
+    "behavior": {
+      "type": "object",
+      "properties": {
+        "size": { "type": "integer", "minimum": 500 },
+        "replenish": { "type": "string", "const": "top-up" },
+        "selectSequentially": { "type": "integer", "minimum": 5 },
+        "selectRandomly": { "type": "integer", "minimum": 5 },
+        "targetBindingCount": { "type": "integer", "minimum": 10 }
+      },
+      "required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
+    }
+  },
+  "required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
+}