pyasn1-alt-modules 0.4.5__py3-none-any.whl

pyasn1_alt_modules/rfc9310.py

@@ -0,0 +1,46 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2022-2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# Certificate Extension for 5G Network Function Types
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9310.txt
+#
+
+from pyasn1.type import char
+from pyasn1.type import constraint
+from pyasn1.type import univ
+
+from pyasn1_alt_modules import opentypemap
+
+certificateExtensionsMap = opentypemap.get('certificateExtensionsMap')
+
+MAX = float('inf')
+
+
+# NFTypes Certificate Extension
+
+class NFType(char.IA5String):
+    subtypeSpec = constraint.ValueSizeConstraint(1, 32)
+
+
+class NFTypes(univ.SequenceOf):
+    componentType = NFType()
+    subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
+
+
+id_pe_nftype = univ.ObjectIdentifier((1, 3, 6, 1, 5, 5, 7, 1, 34))
+
+
+# Add to the map of Certificate Extensions
+
+_certificateExtensionsMap = {
+    id_pe_nftype: NFTypes(),
+}
+
+certificateExtensionsMap.update(_certificateExtensionsMap)

pyasn1_alt_modules/rfc9323.py

@@ -0,0 +1,129 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley with assistance from asn1ate v.0.6.0.
+#
+# Copyright (c) 2022-2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# RPKI Signed Checklist (RSC)
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9323.txt
+#
+
+from pyasn1.type import char
+from pyasn1.type import constraint
+from pyasn1.type import namedtype
+from pyasn1.type import namedval
+from pyasn1.type import tag
+from pyasn1.type import univ
+
+from pyasn1_alt_modules import rfc5652
+from pyasn1_alt_modules import rfc3779
+from pyasn1_alt_modules import opentypemap
+
+cmsContentTypesMap = opentypemap.get('cmsContentTypesMap')
+
+MAX = float('inf')
+
+
+# Imports from RFC 3779
+
+ASIdOrRange = rfc3779.ASIdOrRange
+
+IPAddressOrRange = rfc3779.IPAddressOrRange
+
+
+# Imports from RFC 5652
+
+Digest = rfc5652.Digest
+
+DigestAlgorithmIdentifier = rfc5652.DigestAlgorithmIdentifier
+
+
+# The RPKI Signed Checklist Content Type
+
+id_ct_signedChecklist = univ.ObjectIdentifier('1.2.840.113549.1.9.16.1.48')
+
+
+class ConstrainedIPAddressFamily(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('addressFamily', univ.OctetString().subtype(
+            subtypeSpec=constraint.ValueSizeConstraint(2, 2))),
+        namedtype.NamedType('ipAddressChoice', univ.SequenceOf(
+            componentType=IPAddressOrRange()).subtype(
+                subtypeSpec=constraint.ValueSizeConstraint(1, MAX)))
+    )
+
+
+class ConstrainedASIdentifiers(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('asnum', univ.SequenceOf(
+            componentType=ASIdOrRange()).subtype(
+                subtypeSpec=constraint.ValueSizeConstraint(1, MAX)).subtype(
+                    explicitTag=tag.Tag(tag.tagClassContext,
+                        tag.tagFormatSimple, 0)))
+    )
+
+
+class ConstrainedIPAddrBlocks(univ.SequenceOf):
+    componentType = ConstrainedIPAddressFamily()
+    subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
+
+
+class ResourceBlock(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.OptionalNamedType('asID',
+            ConstrainedASIdentifiers().subtype(explicitTag=tag.Tag(
+                tag.tagClassContext, tag.tagFormatSimple, 0))),
+        namedtype.OptionalNamedType('ipAddrBlocks',
+            ConstrainedIPAddrBlocks().subtype(explicitTag=tag.Tag(
+                tag.tagClassContext, tag.tagFormatSimple, 1)))
+    )
+    subtypeSpec = constraint.ConstraintsUnion(
+        constraint.WithComponentsConstraint(
+            ('asID', constraint.ComponentPresentConstraint())),
+        constraint.WithComponentsConstraint(
+            ('ipAddrBlocks', constraint.ComponentPresentConstraint()))
+    )
+
+
+class PortableFilename(char.IA5String):
+    subtypeSpec = constraint.PermittedAlphabetConstraint(
+        'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l',
+        'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x',
+        'y', 'z', 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J',
+        'K', 'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', 'U', 'V',
+        'W', 'X', 'Y', 'Z', '0', '1', '2', '3', '4', '5', '6', '7',
+        '8', '9', '.', '-', '_'
+    )
+
+
+class FileNameAndHash(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.OptionalNamedType('fileName', PortableFilename()),
+        namedtype.NamedType('hash', Digest())
+    )
+
+
+class RpkiSignedChecklist(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.DefaultedNamedType('version', univ.Integer().subtype(
+            explicitTag=tag.Tag(tag.tagClassContext,
+                tag.tagFormatSimple, 0)).subtype(value=0)),
+        namedtype.NamedType('resources', ResourceBlock()),
+        namedtype.NamedType('digestAlgorithm', DigestAlgorithmIdentifier()),
+        namedtype.NamedType('checkList', univ.SequenceOf(
+            componentType=FileNameAndHash()).subtype(
+                subtypeSpec=constraint.ValueSizeConstraint(1, MAX)))
+    )
+
+
+# Update the CMS Content Type Map
+
+_cmsContentTypesMapUpdate = {
+    id_ct_signedChecklist: RpkiSignedChecklist(),
+}
+
+cmsContentTypesMap.update(_cmsContentTypesMapUpdate)

pyasn1_alt_modules/rfc9336.py

@@ -0,0 +1,20 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2022-2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# Extended Key Usage (EKU) for Document Signing in X.509 Certificates
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9336.txt
+#
+
+from pyasn1.type import univ
+
+
+id_kp = univ.ObjectIdentifier('1.3.6.1.5.5.7.3')
+
+id_kp_documentSigning = id_kp + (36,)

pyasn1_alt_modules/rfc9337.py

@@ -0,0 +1,74 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2022-2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# GOST Algorithms with PKCS#5
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9337.txt
+#
+
+from pyasn1.type import namedtype
+from pyasn1.type import univ
+
+from pyasn1_alt_modules import opentypemap
+
+algorithmIdentifierMap = opentypemap.get('algorithmIdentifierMap')
+
+
+# Object Identifiers
+
+id_tc26 = univ.ObjectIdentifier((1, 2, 643, 7, 1))
+
+id_tc26_algorithms = id_tc26 + (1,)
+
+id_tc26_mac = id_tc26_algorithms + (4,)
+
+id_tc26_hmac_gost3411_12_512 = id_tc26_mac + (2,)
+
+id_tc26_cipher = id_tc26_algorithms + (5,)
+
+id_tc26_cipher_gostr3412_2015_magma = id_tc26_cipher + (1,)
+
+id_tc26_cipher_gostr3412_2015_magma_ctracpkm = \
+    id_tc26_cipher_gostr3412_2015_magma + (1,)
+
+id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac = \
+    id_tc26_cipher_gostr3412_2015_magma + (2,)
+
+id_tc26_cipher_gostr3412_2015_kuznyechik = id_tc26_cipher + (2,)
+
+id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm = \
+    id_tc26_cipher_gostr3412_2015_kuznyechik + (1,)
+
+id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac = \
+    id_tc26_cipher_gostr3412_2015_kuznyechik + (2,)
+
+
+# Parameters
+
+class Gost3412_15_Encryption_Parameters(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('ukm', univ.OctetString())
+    )
+
+
+# Update the algorithm identifiers map
+
+_algorithmIdentifierMapUpdate = {
+    id_tc26_hmac_gost3411_12_512: univ.Null(),
+    id_tc26_cipher_gostr3412_2015_magma_ctracpkm: \
+        Gost3412_15_Encryption_Parameters(),
+    id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac: \
+        Gost3412_15_Encryption_Parameters(),
+    id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm: \
+        Gost3412_15_Encryption_Parameters(),
+    id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac: \
+        Gost3412_15_Encryption_Parameters(),
+}
+
+algorithmIdentifierMap.update(_algorithmIdentifierMapUpdate)

pyasn1_alt_modules/rfc9345.py

@@ -0,0 +1,36 @@
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2023-2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# Delegated Credentials for TLS and DTLS
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9345.txt
+
+from pyasn1.type import univ
+from pyasn1_alt_modules import opentypemap
+
+certificateExtensionsMap = opentypemap.get('certificateExtensionsMap')
+
+
+# DelegatedCredentialExtn
+
+class DelegationUsage(univ.Null):
+    pass
+
+
+id_cloudflare = univ.ObjectIdentifier((1, 3, 6, 1, 4, 1, 44363,))
+
+id_pe_delegationUsage = id_cloudflare + (44,)
+
+
+# Update the Certificate Extension Map
+
+_certificateExtensionsMapUpdate = {
+    id_pe_delegationUsage: DelegationUsage(),
+}
+
+certificateExtensionsMap.update(_certificateExtensionsMapUpdate)

pyasn1_alt_modules/rfc9385.py

@@ -0,0 +1,22 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2023-2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# GOST R 34.10-2012 Algorithm for IKEv2
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9385.txt
+#
+
+from pyasn1_alt_modules import rfc9215
+
+
+# Imports from RFC 9215
+
+id_tc26_signwithdigest_gost3410_12_256 = rfc9215.id_tc26_signwithdigest_gost3410_2012_256
+
+id_tc26_signwithdigest_gost3410_12_512 = rfc9215.id_tc26_signwithdigest_gost3410_2012_512

pyasn1_alt_modules/rfc9399.py

@@ -0,0 +1,59 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley from rfc3709.py and rfc6710.py.
+#
+# Copyright (c) 2023-2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# Logotypes in X.509 Certificates
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9399.txt
+#
+
+from pyasn1_alt_modules import rfc3709
+from pyasn1_alt_modules import rfc6170
+
+
+# Types defined in RFC 3709
+
+HashAlgAndValue = rfc3709.HashAlgAndValue
+
+LogotypeDetails = rfc3709.LogotypeDetails
+
+LogotypeAudioInfo = rfc3709.LogotypeAudioInfo
+
+LogotypeAudio = rfc3709.LogotypeAudio
+
+LogotypeImageType = rfc3709.LogotypeImageType
+
+LogotypeImageResolution = rfc3709.LogotypeImageResolution
+
+LogotypeImageInfo = rfc3709.LogotypeImageInfo
+
+LogotypeImage = rfc3709.LogotypeImage
+
+LogotypeData = rfc3709.LogotypeData
+
+LogotypeReference = rfc3709.LogotypeReference
+
+LogotypeInfo = rfc3709.LogotypeInfo
+
+OtherLogotypeInfo = rfc3709.OtherLogotypeInfo
+
+LogotypeExtn = rfc3709.LogotypeExtn
+
+
+# Object identifiers from RFC 3709 and RFC 6170
+
+id_pe_logotype = rfc3709.id_pe_logotype
+
+id_logo_background = rfc3709.id_logo_background
+
+id_logo_loyalty = rfc3709.id_logo_loyalty
+
+id_logo_certImage = rfc6170.id_logo_certImage
+
+
+# The Certificate Extensions Map is updated by importing rfc3709