CryptoParser 1.3.0__tar.gz → 1.4.0__tar.gz

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/.gitignore

@@ -10,7 +10,6 @@
 /.coverage
 
 /.eggs
-/.tox
 /Pipfile
 /Pipfile.lock
 /build

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/.gitlab-ci.yml

@@ -6,62 +6,70 @@ stages:
 - deploy
 
 before_script:
-- pip install tox .[tests]
+- pip install uv
+- uv pip install --system .[tests]
 
 variables:
   GIT_SUBMODULE_DEPTH: 1
   GIT_SUBMODULE_STRATEGY: recursive
   PYTHONPATH: "submodules/cryptodatahub"
 
+.test:
+  script:
+  - coverage run -m unittest discover -v
+  - coverage report
+
 pylint:
   image: python:3.14-slim
   stage: earlytest
-  script: tox -e pylint
+  script:
+  - uv pip install --system pylint
+  - pylint --rcfile .pylintrc cryptoparser docs test
 
-pep8:
+ruff:
   image: python:3.14-slim
   stage: earlytest
-  script: tox -e pep8
+  script: uvx ruff check cryptoparser docs test
 
 python314:
+  extends: .test
   image: python:3.14-slim
   stage: earlytest
-  script: tox -e py314
 
 python39:
+  extends: .test
   image: python:3.9-slim
   stage: fulltest
-  script: tox -e py39
 
 python310:
+  extends: .test
   image: python:3.10-slim
   stage: fulltest
-  script: tox -e py310
 
 python311:
+  extends: .test
   image: python:3.11-slim
   stage: fulltest
-  script: tox -e py311
 
 python312:
+  extends: .test
   image: python:3.12-slim
   stage: fulltest
-  script: tox -e py312
 
 python313:
+  extends: .test
   image: python:3.13-slim
   stage: fulltest
-  script: tox -e py313
 
 pythonrc:
+  extends: .test
   image: python:3.15-rc-slim
   stage: fulltest
-  script: tox -e py315
 
 pypy3:
+  extends: .test
   image: pypy:3-slim
   stage: fulltest
-  script: tox -e pypy3
 
 coveralls:
   image: python:3.12-slim
@@ -75,9 +83,7 @@ coveralls:
     PYTHONPATH: "submodules/cryptodatahub"
   stage: deploy
   script:
-    - pip install coveralls
-    - pip install .
-    - pip install .[tests]
+    - uv pip install --system coveralls
     - coverage run -m unittest -v -f
     - coveralls
   only:

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/.pylintrc

@@ -18,3 +18,4 @@ disable=
     too-many-function-args,
     too-many-ancestors,
     duplicate-code,
+    no-member,

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/CHANGELOG.rst

@@ -2,6 +2,29 @@
 Changelog
 =========
 
+------------------
+1.4.0 - 2026-07-17
+------------------
+
+Features
+========
+
+-  IKE (``ike``)
+
+   -  add getter for multiple payloads with the same type (#93)
+   -  add IKEv2 notify payload parsing for protocol extensions (#93)
+
+      -  NAT detection source IP and destination IP
+      -  set window size
+      -  use transport mode
+      -  HTTP certificate lookup supported
+      -  signature hash algorithms
+      -  intermediate exchange supported
+      -  use PPK
+      -  redirect supported
+      -  IKEv2 fragmentation supported
+      -  childless IKEv2 supported
+
 ------------------
 1.3.0 - 2026-06-15
 ------------------

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/CryptoParser.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: CryptoParser
-Version: 1.3.0
+Version: 1.4.0
 Summary: An analysis oriented security protocol parser and generator
 Author-email: Szilárd Pfeiffer <coroner@pfeifferszilard.hu>
 Maintainer-email: Szilárd Pfeiffer <coroner@pfeifferszilard.hu>
@@ -13,7 +13,6 @@ Project-URL: Source, https://gitlab.com/coroner/cryptoparser
 Keywords: ssl,tls,gost,ja3,ldap,rdp,ssh,hsts,dns,ike
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Console
-Classifier: Framework :: tox
 Classifier: Intended Audience :: Information Technology
 Classifier: Intended Audience :: Science/Research
 Classifier: Intended Audience :: System Administrators
@@ -40,7 +39,7 @@ Description-Content-Type: text/x-rst
 License-File: LICENSE.txt
 Requires-Dist: asn1crypto
 Requires-Dist: attrs
-Requires-Dist: cryptodatahub==1.3.0
+Requires-Dist: cryptodatahub==1.4.0
 Requires-Dist: urllib3
 Provides-Extra: tests
 Requires-Dist: pyfakefs; extra == "tests"

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/CryptoParser.egg-info/SOURCES.txt

@@ -1,5 +1,4 @@
 .coveragerc
-.flake8
 .gitignore
 .gitlab-ci.yml
 .gitmodules

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/CryptoParser.egg-info/requires.txt

@@ -1,6 +1,6 @@
 asn1crypto
 attrs
-cryptodatahub==1.3.0
+cryptodatahub==1.4.0
 urllib3
 
 [docs]

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/CryptoParser.egg-info/top_level.txt

@@ -4,3 +4,4 @@ dist
 docs
 submodules
 test
+tmp

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: CryptoParser
-Version: 1.3.0
+Version: 1.4.0
 Summary: An analysis oriented security protocol parser and generator
 Author-email: Szilárd Pfeiffer <coroner@pfeifferszilard.hu>
 Maintainer-email: Szilárd Pfeiffer <coroner@pfeifferszilard.hu>
@@ -13,7 +13,6 @@ Project-URL: Source, https://gitlab.com/coroner/cryptoparser
 Keywords: ssl,tls,gost,ja3,ldap,rdp,ssh,hsts,dns,ike
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Console
-Classifier: Framework :: tox
 Classifier: Intended Audience :: Information Technology
 Classifier: Intended Audience :: Science/Research
 Classifier: Intended Audience :: System Administrators
@@ -40,7 +39,7 @@ Description-Content-Type: text/x-rst
 License-File: LICENSE.txt
 Requires-Dist: asn1crypto
 Requires-Dist: attrs
-Requires-Dist: cryptodatahub==1.3.0
+Requires-Dist: cryptodatahub==1.4.0
 Requires-Dist: urllib3
 Provides-Extra: tests
 Requires-Dist: pyfakefs; extra == "tests"

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/__setup__.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 
 import importlib.metadata
 

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/common/base.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 # pylint: disable=too-many-lines
 
 import abc
@@ -14,7 +13,7 @@ import ipaddress
 try:
     from collections.abc import MutableSequence  # only works on python 3.3+
 except ImportError:  # pragma: no cover
-    from collections import MutableSequence  # pylint: disable=deprecated-class
+    from collections.abc import MutableSequence  # pylint: disable=deprecated-class
 
 from collections import OrderedDict
 
@@ -49,7 +48,7 @@ _default.default = json.JSONEncoder().default
 json.JSONEncoder.default = _default
 
 
-class SerializableTextEncoder():
+class SerializableTextEncoder:
     def __call__(self, obj, level):
         if isinstance(obj, str):
             string_result = obj
@@ -59,7 +58,7 @@ class SerializableTextEncoder():
         return False, string_result
 
 
-class Serializable():  # pylint: disable=too-few-public-methods
+class Serializable:  # pylint: disable=too-few-public-methods
     _MARKDOWN_RESULT_STRING_CLASSES = (
         ipaddress.IPv4Network,
         ipaddress.IPv6Network,
@@ -367,7 +366,7 @@ class VariantParsableExact(VariantParsableBase):
 
 
 @attr.s
-class VectorParamBase():  # pylint: disable=too-few-public-methods
+class VectorParamBase:  # pylint: disable=too-few-public-methods
     min_byte_num = attr.ib(validator=attr.validators.instance_of(int))
     max_byte_num = attr.ib(validator=attr.validators.instance_of(int))
     item_num_size = attr.ib(init=False, validator=attr.validators.instance_of(int))
@@ -863,7 +862,7 @@ class StringEnumParsableBase(ParsableBaseNoABC):
         return self._asdict().encode('ascii')
 
     def _asdict(self):
-        return getattr(self, 'value').code
+        return self.value.code
 
 
 class StringEnumParsable(StringEnumParsableBase):
@@ -946,7 +945,7 @@ class ProtocolVersionMajorMinorBase(ProtocolVersionBase):
 
 
 @attr.s
-class ListParamParsable():  # pylint: disable=too-few-public-methods
+class ListParamParsable:  # pylint: disable=too-few-public-methods
     item_class = attr.ib(validator=attr.validators.instance_of(type))
     fallback_class = attr.ib(validator=attr.validators.optional(attr.validators.instance_of(type)))
     separator_class = attr.ib(attr.validators.instance_of(ParsableBase))
@@ -994,7 +993,7 @@ class ListParsable(ArrayBase):
 class OpaqueEnumParsable(Vector):
     @classmethod
     def _parse(cls, parsable):
-        opaque, parsed_length = super(OpaqueEnumParsable, cls)._parse(parsable)
+        opaque, parsed_length = super()._parse(parsable)
         code = b''.join([bytes((opaque_item,)) for opaque_item in opaque]).decode(cls.get_encoding())
 
         try:

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/common/classes.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 
 
 from cryptodatahub.common.exception import InvalidValue

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/common/exception.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 
 import typing
 

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/common/field.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 # pylint: disable=too-many-lines
 
 import abc
@@ -540,7 +539,7 @@ class FieldValueComponentPercent(FieldValueComponentNumber):
 
 
 @attr.s
-class FieldValueComponentStringEnumParams():
+class FieldValueComponentStringEnumParams:
     code = attr.ib(validator=attr.validators.instance_of(str))
 
 

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/common/parse.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 # pylint: disable=too-many-lines
 
 import abc
@@ -19,7 +18,7 @@ from cryptoparser.common.exception import InvalidType, NotEnoughData, TooMuchDat
 import cryptoparser.common.utils
 
 
-class ParsableBaseNoABC():
+class ParsableBaseNoABC:
     @classmethod
     def parse_mutable(cls, parsable):
         parsed_object, parsed_length = cls._parse(parsable)
@@ -96,7 +95,7 @@ class ParserBase(collections.abc.Mapping):
         validator=attr.validators.instance_of((bytes, bytearray))
     )
     _parsed_length: int = attr.ib(init=False, default=0)
-    _parsed_values: typing.Dict[str, typing.Any] = attr.ib(init=False, default=None)
+    _parsed_values: dict[str, typing.Any] = attr.ib(init=False, default=None)
 
     def __attrs_post_init__(self):
         if self._parsed_values is None:
@@ -165,7 +164,7 @@ class ParserBase(collections.abc.Mapping):
         value = self._parsable[self._parsed_length:self._parsed_length + parsable_length]
         try:
             value = value.decode(encoding)
-            if converter != str:
+            if converter is not str:
                 value = converter(value)
             self._parsed_values[name] = value
         except UnicodeError as e:
@@ -760,8 +759,8 @@ class ParserBinary(ParserBase):
 
 
 @attr.s
-class ComposerBase():
-    _composed = attr.ib(init=False, default=bytes())
+class ComposerBase:
+    _composed = attr.ib(init=False, default=b'')
 
     @property
     def composed(self):
@@ -795,7 +794,7 @@ class ComposerText(ComposerBase):
         self._encoding = encoding
 
     def _compose_numeric_array(self, values, separator):
-        composed_str = str()
+        composed_str = ''
 
         for value in values:
             composed_str += f'{value:d}{separator}'
@@ -969,7 +968,7 @@ class ComposerBinary(ComposerBase):
             self.compose_numeric(len(composed), item_size)
         self._composed += composed
 
-    def compose_parsable_array(self, values, separator=bytearray()):
+    def compose_parsable_array(self, values, separator=b''):
         self._composed += separator.join(map(lambda item: item.compose(), values))
 
     def compose_bytes(self, value, item_size, converter=bytearray):

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/common/utils.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 
 import binascii
 import inspect

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/common/x509.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 
 import collections
 import datetime

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/dnsrec/record.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 
 import abc
 import collections

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/dnsrec/txt.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 # pylint: disable=too-many-lines
 
 import abc

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/httpx/parse.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 
 from cryptoparser.common.field import (
     FieldValueComponentDateTime,

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/httpx/version.py

@@ -1,5 +1,4 @@
 # SPDX-License-Identifier: MPL-2.0
-# -*- coding: utf-8 -*-
 
 import enum
 

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/ike/ikev1.py

@@ -226,7 +226,7 @@ class Ikev1PayloadTransform(Ikev1PayloadBase):
     """
 
     transform_id: Ikev1TransformId = attr.ib(validator=attr.validators.instance_of(Ikev1TransformId))
-    attributes: typing.List[DataAttributeBase] = attr.ib(
+    attributes: list[DataAttributeBase] = attr.ib(
         validator=attr.validators.deep_iterable(
             member_validator=attr.validators.instance_of(DataAttributeBase),
         )
@@ -310,10 +310,10 @@ class Ikev1PayloadProposal(Ikev1PayloadBase):
     """
 
     protocol_id: Ikev1ProtocolId = attr.ib(validator=attr.validators.instance_of(Ikev1ProtocolId))
-    transforms: typing.List[Ikev1PayloadTransform] = attr.ib(validator=attr.validators.deep_iterable(
+    transforms: list[Ikev1PayloadTransform] = attr.ib(validator=attr.validators.deep_iterable(
         member_validator=attr.validators.instance_of(Ikev1PayloadTransform),
     ))
-    spi: bytes = attr.ib(default=bytes(), converter=bytes, validator=attr.validators.instance_of(bytes))
+    spi: bytes = attr.ib(default=b'', converter=bytes, validator=attr.validators.instance_of(bytes))
     next_payload: typing.Optional[Ikev1PayloadType] = attr.ib(
         init=False,
         default=None,
@@ -409,10 +409,10 @@ class Ikev1PayloadSecurityAssociation(Ikev1PayloadBase):
     """
 
     doi: Ikev1Doi = attr.ib(validator=attr.validators.instance_of(Ikev1Doi))
-    situation: typing.List[Ikev1Situation] = attr.ib(validator=attr.validators.deep_iterable(
+    situation: list[Ikev1Situation] = attr.ib(validator=attr.validators.deep_iterable(
         member_validator=attr.validators.instance_of(Ikev1Situation),
     ))
-    proposals: typing.List[Ikev1PayloadProposal] = attr.ib(validator=attr.validators.deep_iterable(
+    proposals: list[Ikev1PayloadProposal] = attr.ib(validator=attr.validators.deep_iterable(
         member_validator=attr.validators.instance_of(Ikev1PayloadProposal),
     ))
 

{cryptoparser-1.3.0 → cryptoparser-1.4.0}/cryptoparser/ike/ikev2.py

@@ -57,7 +57,7 @@ class Ikev2PayloadBase(ParsableBase):
     """
     HEADER_SIZE = 4
 
-    flags: typing.Set[Ikev2PayloadFlags] = attr.ib(
+    flags: set[Ikev2PayloadFlags] = attr.ib(
         validator=attr.validators.deep_iterable(
             member_validator=attr.validators.instance_of(Ikev2PayloadFlags),
         )
@@ -474,10 +474,10 @@ class Ikev2Proposal(ParsableBase):
     HEADER_SIZE = 8
 
     protocol_id: Ikev2ProtocolId = attr.ib(validator=attr.validators.instance_of(Ikev2ProtocolId))
-    transforms: typing.List[Transform] = attr.ib(validator=attr.validators.deep_iterable(
+    transforms: list[Transform] = attr.ib(validator=attr.validators.deep_iterable(
         member_validator=attr.validators.instance_of(Transform)
     ))
-    spi: bytes = attr.ib(default=bytes(), converter=bytes, validator=attr.validators.instance_of(bytes))
+    spi: bytes = attr.ib(default=b'', converter=bytes, validator=attr.validators.instance_of(bytes))
     last: typing.Optional[Ikev2ProposalNextPayload] = attr.ib(
         init=False,
         default=None,
@@ -579,7 +579,7 @@ class Ikev2PayloadSecurityAssociation(Ikev2PayloadBase):
        |                                                               |
        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     """
-    proposals: typing.List[Ikev2Proposal] = attr.ib(validator=attr.validators.deep_iterable(
+    proposals: list[Ikev2Proposal] = attr.ib(validator=attr.validators.deep_iterable(
         member_validator=attr.validators.instance_of(Ikev2Proposal)
     ))
 
@@ -777,7 +777,7 @@ class Ikev2PayloadDelete(Ikev2PayloadBase):
     :ivar spis: List of Security Parameter Indexes
     """
     protocol_id: Ikev2ProtocolId = attr.ib(validator=attr.validators.instance_of(Ikev2ProtocolId))
-    spis: typing.List[int] = attr.ib(validator=attr.validators.deep_iterable(
+    spis: list[int] = attr.ib(validator=attr.validators.deep_iterable(
         member_validator=attr.validators.instance_of(int),
     ))
 
@@ -889,7 +889,7 @@ class Ikev2PayloadNotifyBase(Ikev2PayloadBase):
             parser.parse_raw('spi', parser['spi_size'])
             spi = parser['spi']
         else:
-            spi = bytes()
+            spi = b''
 
         del parser['spi_size']
         if 'spi' in parser:
@@ -954,6 +954,48 @@ class Ikev2PayloadNotifyAuthenticationFailed(Ikev2PayloadNotifyNoData):
         return Ikev2NotifyType.AUTHENTICATION_FAILED
 
 
+class Ikev2NotifyPayloadUseTransportMode(Ikev2PayloadNotifyNoData):
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.USE_TRANSPORT_MODE
+
+
+class Ikev2NotifyPayloadHttpCertLookupSupported(Ikev2PayloadNotifyNoData):
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.HTTP_CERT_LOOKUP_SUPPORTED
+
+
+class Ikev2NotifyPayloadIkev2FragmentationSupported(Ikev2PayloadNotifyNoData):
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.IKEV2_FRAGMENTATION_SUPPORTED
+
+
+class Ikev2NotifyPayloadIntermediateExchangeSupported(Ikev2PayloadNotifyNoData):
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.INTERMEDIATE_EXCHANGE_SUPPORTED
+
+
+class Ikev2NotifyPayloadUsePpk(Ikev2PayloadNotifyNoData):
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.USE_PPK
+
+
+class Ikev2NotifyPayloadRedirectSupported(Ikev2PayloadNotifyNoData):
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.REDIRECT_SUPPORTED
+
+
+class Ikev2NotifyPayloadChildlessIkev2Supported(Ikev2PayloadNotifyNoData):
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.CHILDLESS_IKEV2_SUPPORTED
+
+
 @attr.s
 class Ikev2PayloadNotifyUnparsed(Ikev2PayloadNotifyBase):
     data: typing.Union[bytes, bytearray] = attr.ib(validator=attr.validators.instance_of((bytes, bytearray)))
@@ -1028,6 +1070,86 @@ class Ikev2NotifyPayloadCookie(Ikev2PayloadNotifyParsedBase):
         composer.compose_raw(self.cookie)
 
 
+@attr.s
+class Ikev2NotifyPayloadSetWindowSize(Ikev2PayloadNotifyParsedBase):
+    """Set window size payload notification data parser."""
+    window_size: int = attr.ib(validator=[
+        attr.validators.instance_of(int),
+        attr.validators.in_(range(0, 2 ** 32)),
+    ])
+
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.SET_WINDOW_SIZE
+
+    @classmethod
+    def _parse_data(cls, parser, notification_data_length):
+        if notification_data_length != 4:
+            raise InvalidValue(notification_data_length, cls, 'notification_data_length')
+        parser.parse_numeric('window_size', 4)
+
+    def _compose_data(self, composer):
+        composer.compose_numeric(self.window_size, 4)
+
+
+@attr.s
+class Ikev2NotifyPayloadNatDetectionBase(Ikev2PayloadNotifyParsedBase):
+    hash_data: typing.Union[bytes, bytearray] = attr.ib(validator=attr.validators.instance_of((bytes, bytearray)))
+
+    @classmethod
+    @abc.abstractmethod
+    def _get_message_type(cls):
+        raise NotImplementedError()
+
+    @classmethod
+    def _parse_data(cls, parser, notification_data_length):
+        parser.parse_raw('hash_data', notification_data_length)
+
+    def _compose_data(self, composer):
+        composer.compose_raw(self.hash_data)
+
+
+@attr.s
+class Ikev2NotifyPayloadNatDetectionSourceIp(Ikev2NotifyPayloadNatDetectionBase):
+    """NAT detection source IP payload notification data parser."""
+
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.NAT_DETECTION_SOURCE_IP
+
+
+@attr.s
+class Ikev2NotifyPayloadNatDetectionDestinationIp(Ikev2NotifyPayloadNatDetectionBase):
+    """NAT detection destination IP payload notification data parser."""
+
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.NAT_DETECTION_DESTINATION_IP
+
+
+@attr.s
+class Ikev2NotifyPayloadSignatureHashAlgorithms(Ikev2PayloadNotifyParsedBase):
+    """Signature hash algorithms notification (RFC 7427 §4)."""
+    hash_algorithms: tuple[int, ...] = attr.ib(
+        converter=tuple,
+        validator=attr.validators.deep_iterable(attr.validators.instance_of(int)),
+    )
+
+    @classmethod
+    def _get_message_type(cls):
+        return Ikev2NotifyType.SIGNATURE_HASH_ALGORITHMS
+
+    @classmethod
+    def _parse_data(cls, parser, notification_data_length):
+        if notification_data_length % 2 != 0:
+            raise InvalidValue(notification_data_length, cls, 'notification_data_length')
+        parser.parse_numeric_array('hash_algorithms', notification_data_length // 2, 2)
+
+    def _compose_data(self, composer):
+        for hash_id in self.hash_algorithms:
+            composer.compose_numeric(hash_id, 2)
+
+
 class Ikev2NotifyPayloadVariantBase(VariantParsable):
     @classmethod
     @abc.abstractmethod
@@ -1053,6 +1175,17 @@ class Ikev2NotifyPayloadVariantResponder(Ikev2NotifyPayloadVariantBase):
         return collections.OrderedDict([
             (Ikev2NotifyType.COOKIE, [Ikev2NotifyPayloadCookie, ]),
             (Ikev2NotifyType.INVALID_KE_PAYLOAD, [Ikev2NotifyPayloadInvalidKe, ]),
+            (Ikev2NotifyType.SET_WINDOW_SIZE, [Ikev2NotifyPayloadSetWindowSize, ]),
+            (Ikev2NotifyType.NAT_DETECTION_SOURCE_IP, [Ikev2NotifyPayloadNatDetectionSourceIp, ]),
+            (Ikev2NotifyType.NAT_DETECTION_DESTINATION_IP, [Ikev2NotifyPayloadNatDetectionDestinationIp, ]),
+            (Ikev2NotifyType.USE_TRANSPORT_MODE, [Ikev2NotifyPayloadUseTransportMode, ]),
+            (Ikev2NotifyType.HTTP_CERT_LOOKUP_SUPPORTED, [Ikev2NotifyPayloadHttpCertLookupSupported, ]),
+            (Ikev2NotifyType.SIGNATURE_HASH_ALGORITHMS, [Ikev2NotifyPayloadSignatureHashAlgorithms, ]),
+            (Ikev2NotifyType.IKEV2_FRAGMENTATION_SUPPORTED, [Ikev2NotifyPayloadIkev2FragmentationSupported, ]),
+            (Ikev2NotifyType.INTERMEDIATE_EXCHANGE_SUPPORTED, [Ikev2NotifyPayloadIntermediateExchangeSupported, ]),
+            (Ikev2NotifyType.USE_PPK, [Ikev2NotifyPayloadUsePpk, ]),
+            (Ikev2NotifyType.REDIRECT_SUPPORTED, [Ikev2NotifyPayloadRedirectSupported, ]),
+            (Ikev2NotifyType.CHILDLESS_IKEV2_SUPPORTED, [Ikev2NotifyPayloadChildlessIkev2Supported, ]),
         ])