pyasn1-alt-modules 0.4.5__py3-none-any.whl

pyasn1_alt_modules/rfc9481.py

@@ -0,0 +1,224 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2023-2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# Certificate Management Protocol (CMP) Algorithms
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9481.txt
+#
+from pyasn1_alt_modules import rfc3370
+from pyasn1_alt_modules import rfc3565
+from pyasn1_alt_modules import rfc4055
+from pyasn1_alt_modules import rfc4210
+from pyasn1_alt_modules import rfc5753
+from pyasn1_alt_modules import rfc5280
+from pyasn1_alt_modules import rfc5480
+from pyasn1_alt_modules import rfc8018
+from pyasn1_alt_modules import rfc8410
+from pyasn1_alt_modules import rfc8692
+from pyasn1_alt_modules import rfc8702
+from pyasn1_alt_modules import rfc9044
+
+
+# Section 2.1:  SHA2
+
+id_sha224 = rfc4055.id_sha224
+
+id_sha256 = rfc4055.id_sha256
+
+id_sha384 = rfc4055.id_sha384
+
+id_sha512 = rfc4055.id_sha512
+
+
+# Section 2.2:  SHAKE
+
+id_shake128 = rfc8692.id_shake128
+
+id_shake256 = rfc8692.id_shake256
+
+mda_shake128 = rfc8692.mda_shake128
+
+mda_shake256 = rfc8692.mda_shake256
+
+
+# Section 3.1:  RSA
+
+id_RSASSA_PSS = rfc4055.id_RSASSA_PSS
+
+id_RSASSA_PSS_SHAKE128 = rfc8692.id_RSASSA_PSS_SHAKE128
+
+id_RSASSA_PSS_SHAKE256 = rfc8692.id_RSASSA_PSS_SHAKE256
+
+sha224WithRSAEncryption = rfc4055.sha224WithRSAEncryption
+
+sha256WithRSAEncryption = rfc4055.sha256WithRSAEncryption
+
+sha384WithRSAEncryption = rfc4055.sha384WithRSAEncryption
+
+sha512WithRSAEncryption = rfc4055.sha512WithRSAEncryption
+
+pk_rsaSSA_PSS_SHAKE128 = rfc8692.pk_rsaSSA_PSS_SHAKE128
+
+pk_rsaSSA_PSS_SHAKE256 = rfc8692.pk_rsaSSA_PSS_SHAKE256
+
+sa_rSASSA_PSS_SHAKE128 = rfc8692.sa_rSASSA_PSS_SHAKE128
+
+sa_rSASSA_PSS_SHAKE256 = rfc8692.sa_rSASSA_PSS_SHAKE256
+
+sa_rsassapssWithSHAKE128 = rfc8692.sa_rSASSA_PSS_SHAKE128
+
+sa_rsassapssWithSHAKE256 = rfc8692.sa_rSASSA_PSS_SHAKE256
+
+
+# Section 3.2:  ECDSA
+
+ecdsa_with_SHA224 = rfc5480.ecdsa_with_SHA224
+
+ecdsa_with_SHA256 = rfc5480.ecdsa_with_SHA256
+
+ecdsa_with_SHA384 = rfc5480.ecdsa_with_SHA384
+
+ecdsa_with_SHA512 = rfc5480.ecdsa_with_SHA512
+
+secp192r1 = rfc5480.secp192r1
+      
+secp224r1 = rfc5480.secp224r1
+
+secp256r1 = rfc5480.secp256r1
+
+secp256r1 = rfc5480.secp256r1
+
+secp256r1 = rfc5480.secp256r1
+
+id_ecdsa_with_shake128 = rfc8692.id_ecdsa_with_shake128
+
+id_ecdsa_with_shake256 = rfc8692.id_ecdsa_with_shake256
+
+sa_ecdsa_with_shake128 = rfc8692.sa_ecdsa_with_shake128
+
+sa_ecdsa_with_shake256 = rfc8692.sa_ecdsa_with_shake256
+
+sa_ecdsaWithSHAKE128 = rfc8692.sa_ecdsa_with_shake128
+
+sa_ecdsaWithSHAKE256 = rfc8692.sa_ecdsa_with_shake256
+
+
+# Section 3.3:  EdDSA
+
+id_Ed25519 = rfc8410.id_Ed25519
+
+id_Ed448 = rfc8410.id_Ed448
+
+
+# Section 4.1.1:  Diffie-Hellman
+
+id_alg_ESDH = rfc3370.id_alg_ESDH
+
+
+# Section 4.1.2:  ECDH
+
+dhSinglePass_stdDH_sha224kdf_scheme = rfc5753.dhSinglePass_stdDH_sha224kdf_scheme
+
+dhSinglePass_stdDH_sha256kdf_scheme = rfc5753.dhSinglePass_stdDH_sha256kdf_scheme
+
+dhSinglePass_stdDH_sha384kdf_scheme = rfc5753.dhSinglePass_stdDH_sha384kdf_scheme
+
+dhSinglePass_stdDH_sha512kdf_scheme = rfc5753.dhSinglePass_stdDH_sha512kdf_scheme
+
+dhSinglePass_cofactorDH_sha224kdf_scheme = rfc5753.dhSinglePass_cofactorDH_sha224kdf_scheme
+
+dhSinglePass_cofactorDH_sha256kdf_scheme = rfc5753.dhSinglePass_cofactorDH_sha256kdf_scheme
+
+dhSinglePass_cofactorDH_sha256kdf_scheme = rfc5753.dhSinglePass_cofactorDH_sha256kdf_scheme
+
+dhSinglePass_cofactorDH_sha256kdf_scheme = rfc5753.dhSinglePass_cofactorDH_sha256kdf_scheme
+
+mqvSinglePass_sha224kdf_scheme = rfc5753.mqvSinglePass_sha224kdf_scheme
+
+mqvSinglePass_sha256kdf_scheme = rfc5753.mqvSinglePass_sha256kdf_scheme
+
+mqvSinglePass_sha384kdf_scheme = rfc5753.mqvSinglePass_sha384kdf_scheme
+
+mqvSinglePass_sha512kdf_scheme = rfc5753.mqvSinglePass_sha512kdf_scheme
+
+id_X25519 = rfc8410.id_X25519
+
+id_X448 = rfc8410.id_X448
+
+
+# Section 4.2.1:  RSA
+
+rsaEncryption = rfc4055.rsaEncryption
+
+id_RSAES_OAEP = rfc4055.id_RSAES_OAEP
+
+
+# Section 4.3.1:  AES Key Wrap
+
+id_aes128_wrap = rfc3565.id_aes128_wrap
+
+id_aes192_wrap = rfc3565.id_aes192_wrap
+
+id_aes256_wrap = rfc3565.id_aes256_wrap
+
+
+# Section 4.4.1:  PBKDF2
+
+id_PBKDF2 = rfc8018.id_PBKDF2
+
+
+# Section 5.1:  AES-CBC
+
+id_aes128_CBC = rfc3565.id_aes128_CBC
+
+id_aes192_CBC = rfc3565.id_aes192_CBC
+
+id_aes256_CBC = rfc3565.id_aes256_CBC
+
+
+# Section 6.1.1:  PasswordBasedMac
+
+id_PasswordBasedMac = rfc4210.id_PasswordBasedMac
+
+
+# Section 6.1.2:  PBMAC1
+
+id_PBMAC1 = rfc8018.id_PBMAC1
+
+
+# Section 6.2.1:  SHA2-Based HMAC
+
+id_hmacWithSHA224 = rfc8018.id_hmacWithSHA224
+
+id_hmacWithSHA256 = rfc8018.id_hmacWithSHA256
+
+id_hmacWithSHA384 = rfc8018.id_hmacWithSHA384
+
+id_hmacWithSHA512 = rfc8018.id_hmacWithSHA512
+
+
+# Section 6.2.2:  AES-GMAC
+
+id_aes128_GMAC = rfc9044.id_aes128_GMAC
+
+id_aes192_GMAC = rfc9044.id_aes192_GMAC
+
+id_aes256_GMAC = rfc9044.id_aes256_GMAC
+
+
+# Section 6.2.3:  SHAKE-Based KMAC
+
+id_KMACWithSHAKE128 = rfc8702.id_KMACWithSHAKE128
+
+id_KMACWithSHAKE256 = rfc8702.id_KMACWithSHAKE256
+
+
+# Note that there is no need to update the Algorithm Identifiers Map.
+# The Algorithm Identifiers Map has already been updated by importing
+# the module that originally defined the object identifier.

pyasn1_alt_modules/rfc9509.py

@@ -0,0 +1,24 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# Extended Key Usage (EKU) for 5G Network Functions
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9509.txt
+#
+
+from pyasn1.type import univ
+
+
+id_kp = univ.ObjectIdentifier('1.3.6.1.5.5.7.3')
+
+id_kp_jwt = id_kp + (37,)
+
+id_kp_httpContentEncrypt = id_kp + (38,)
+
+id_kp_oauthAccessTokenSigning = id_kp + (39,)

pyasn1_alt_modules/rfc9548.py

@@ -0,0 +1,23 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# Generating Transport Key Containers Using the GOST Algorithms
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9548.txt
+#
+
+from pyasn1_alt_modules import rfc9215
+
+
+# Import from RFC 9215
+
+GostR3410_2012_PublicKey = rfc9215.GostR3410_2012_PublicKey
+
+
+# The Algorithm Identifier Map update was done by importing rfc9215.

pyasn1_alt_modules/rfc9579.py

@@ -0,0 +1,89 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# Use of PBMAC1 in the PKCS #12 Syntax
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9579.txt
+#
+
+from pyasn1.type import univ
+
+from pyasn1_alt_modules import rfc5280
+from pyasn1_alt_modules import rfc8018
+
+
+# Import from RFC 5280
+
+AlgorithmIdentifier = rfc5280.AlgorithmIdentifier
+
+
+# Import from RFC 8018
+
+rsadsi = rfc8018.rsadsi
+
+pkcs = rfc8018.pkcs
+
+pkcs_5 = rfc8018.pkcs_5
+
+id_hmacWithSHA1 = rfc8018.id_hmacWithSHA1
+
+id_hmacWithSHA224 = rfc8018.id_hmacWithSHA224
+
+id_hmacWithSHA256 = rfc8018.id_hmacWithSHA256
+
+id_hmacWithSHA384 = rfc8018.id_hmacWithSHA384
+
+id_hmacWithSHA512 = rfc8018.id_hmacWithSHA512
+
+id_hmacWithSHA512_224 = rfc8018.id_hmacWithSHA512_224
+
+id_hmacWithSHA512_256 = rfc8018.id_hmacWithSHA512_256
+
+id_PBMAC1 = rfc8018.id_PBMAC1
+
+PBMAC1_params = rfc8018.PBMAC1_params
+
+id_PBKDF2 = rfc8018.id_PBKDF2
+
+PBKDF2_params = rfc8018.PBKDF2_params
+
+
+# HMAC algorithm identifiers
+
+algid_hmacWithSHA1 = AlgorithmIdentifier()
+algid_hmacWithSHA1['algorithm'] = id_hmacWithSHA1
+algid_hmacWithSHA1['parameters'] = univ.Null("")
+
+algid_hmacWithSHA224 = AlgorithmIdentifier()
+algid_hmacWithSHA224['algorithm'] = id_hmacWithSHA224
+algid_hmacWithSHA224['parameters'] = univ.Null("")
+
+algid_hmacWithSHA256 = AlgorithmIdentifier()
+algid_hmacWithSHA256['algorithm'] = id_hmacWithSHA256
+algid_hmacWithSHA256['parameters'] = univ.Null("")
+
+algid_hmacWithSHA384 = AlgorithmIdentifier()
+algid_hmacWithSHA384['algorithm'] = id_hmacWithSHA384
+algid_hmacWithSHA384['parameters'] = univ.Null("")
+
+algid_hmacWithSHA512 = AlgorithmIdentifier()
+algid_hmacWithSHA512['algorithm'] = id_hmacWithSHA512
+algid_hmacWithSHA512['parameters'] = univ.Null("")
+
+algid_hmacWithSHA512_224 = AlgorithmIdentifier()
+algid_hmacWithSHA512_224['algorithm'] = id_hmacWithSHA512_224
+algid_hmacWithSHA512_224['parameters'] = univ.Null("")
+
+algid_hmacWithSHA512_256 = AlgorithmIdentifier()
+algid_hmacWithSHA512_256['algorithm'] = id_hmacWithSHA512_256
+algid_hmacWithSHA512_256['parameters'] = univ.Null("")
+
+
+# No need to Update the Algorithm Identifier map or the S/MIME Capabilities map;
+# these updates were handled by importing RFC 8018.

pyasn1_alt_modules/rfc9582.py

@@ -0,0 +1,107 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley with assistance from asn1ate v.0.6.0.
+#
+# Copyright (c) 2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# RPKI Route Origin Authorizations (ROAs)
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9582.txt
+#
+
+from pyasn1.type import constraint
+from pyasn1.type import namedtype
+from pyasn1.type import tag
+from pyasn1.type import univ
+
+from pyasn1_alt_modules import rfc5652
+from pyasn1_alt_modules import opentypemap
+
+cmsContentTypesMap = opentypemap.get('cmsContentTypesMap')
+
+MAX = float('inf')
+
+
+id_ct_routeOriginAuthz = univ.ObjectIdentifier('1.2.840.113549.1.9.16.1.24')
+
+afi_IPv4 = univ.OctetString(hexValue='0001').subtype(
+               subtypeSpec=constraint.ValueSizeConstraint(2, 2))
+
+afi_IPv6 = univ.OctetString(hexValue='0002').subtype(
+               subtypeSpec=constraint.ValueSizeConstraint(2, 2))
+
+ub_IPv4 = univ.Integer(32)
+
+ub_IPv6 = univ.Integer(128)
+
+
+class ASID(univ.Integer):
+    subtypeSpec = constraint.ValueRangeConstraint(0, 4294967295)
+
+
+class ROAIPAddress(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('address', univ.BitString()),
+        # For IPv4, the maximum size of the BitString is ub_IPv4 bits
+        # For IPv6, the maximum size of the BitString is ub_IPv6 bits
+        namedtype.OptionalNamedType('maxLength', univ.Integer())
+        # For IPv4, the maximum value of the Integer is ub_IPv4
+        # For IPv6, the maximum value of the Integer is ub_IPv6
+    )
+
+
+class ROAAddresses(univ.SequenceOf):
+    componentType = ROAIPAddress()
+    subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
+
+
+ROAIPAddressIPv4 = ROAIPAddress
+
+ROAIPAddressIPv6 = ROAIPAddress
+
+ROAAddressesIPv4 = ROAAddresses
+
+ROAAddressesIPv6 = ROAAddresses
+
+
+class ROAIPAddressFamily(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('addressFamily',
+            univ.OctetString().subtype(
+                subtypeSpec=constraint.ValueSizeConstraint(2, 2))),
+        namedtype.NamedType('addresses', ROAAddresses())
+    )
+
+
+class RouteOriginAttestation(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.DefaultedNamedType('version',
+            univ.Integer().subtype(explicitTag=tag.Tag(
+                tag.tagClassContext, tag.tagFormatSimple, 0)).subtype(value=0)),
+        namedtype.NamedType('asID', ASID()),
+        namedtype.NamedType('ipAddrBlocks',
+            univ.SequenceOf(componentType=ROAIPAddressFamily()).subtype(
+                subtypeSpec=constraint.ValueSizeConstraint(1, 2)))
+    )
+
+
+addressFamilyIPv4 = ROAIPAddressFamily()
+addressFamilyIPv4['addressFamily'] = afi_IPv4
+addressFamilyIPv4['addresses'] = ROAAddressesIPv4()
+
+
+addressFamilyIPv6 = ROAIPAddressFamily()
+addressFamilyIPv6['addressFamily'] = afi_IPv6
+addressFamilyIPv6['addresses'] = ROAAddressesIPv6()
+
+
+# Update the CMS Content Types Map
+
+_cmsContentTypesMapUpdate = {
+    id_ct_routeOriginAuthz: RouteOriginAttestation(),
+}
+
+cmsContentTypesMap.update(_cmsContentTypesMapUpdate)

pyasn1_alt_modules/rfc9598.py

@@ -0,0 +1,52 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# Internationalized Email Addresses in X.509 Certificates
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9598.txt
+#
+
+from pyasn1.type import char
+from pyasn1.type import constraint
+from pyasn1.type import univ
+
+from pyasn1_alt_modules import rfc5280
+from pyasn1_alt_modules import opentypemap
+
+otherNamesMap = opentypemap.get('otherNamesMap')
+
+MAX = float('inf')
+
+
+# SmtpUTF8Mailbox contains Mailbox as specified in Section 3.3 of RFC 6531.
+# RFC 9598 requires that the domain name be represented as A-labels.
+
+id_pkix = rfc5280.id_pkix
+
+id_on = id_pkix + (8, )
+
+id_on_SmtpUTF8Mailbox = id_on + (9, )
+
+
+class SmtpUTF8Mailbox(char.UTF8String):
+    subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
+
+
+on_SmtpUTF8Mailbox = rfc5280.AnotherName()
+on_SmtpUTF8Mailbox['type-id'] = id_on_SmtpUTF8Mailbox
+on_SmtpUTF8Mailbox['value'] = SmtpUTF8Mailbox()
+
+
+# Update the Other Names Map
+
+_otherNamesMapUpdate = {
+    id_on_SmtpUTF8Mailbox: SmtpUTF8Mailbox(),
+}
+
+otherNamesMap.update(_otherNamesMapUpdate)

pyasn1_alt_modules/rfc9608.py

@@ -0,0 +1,35 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley.
+#
+# Copyright (c) 2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# The noRevAvail Certificate Extension
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9608.txt
+#
+
+from pyasn1.type import univ
+from pyasn1_alt_modules import opentypemap
+
+
+certificateExtensionsMap = opentypemap.get('certificateExtensionsMap')
+
+
+# Object Identifiers
+
+id_ce = univ.ObjectIdentifier((2, 5, 29, ))
+
+id_ce_noRevAvail = id_ce + (56, )
+
+
+# Update the Certificate Extensions Map
+
+_certificateExtensionsMapUpdate = {
+    id_ce_noRevAvail: univ.Null(),
+}
+
+certificateExtensionsMap.update(_certificateExtensionsMapUpdate)

pyasn1_alt_modules/rfc9629.py

@@ -0,0 +1,100 @@
+#
+# This file is part of pyasn1-alt-modules software.
+#
+# Created by Russ Housley with some help from by asn1ate v.0.6.0.
+#
+# Copyright (c) 2023-2024, Vigil Security, LLC
+# License: http://vigilsec.com/pyasn1-alt-modules-license.txt
+#
+# CMS KEMRecipientInfo
+#
+# ASN.1 source from:
+# https://www.rfc-editor.org/rfc/rfc9629.txt
+#
+
+from pyasn1.type import constraint
+from pyasn1.type import namedtype
+from pyasn1.type import tag
+from pyasn1.type import univ
+
+from pyasn1_alt_modules import rfc5280
+from pyasn1_alt_modules import rfc5652
+from pyasn1_alt_modules import opentypemap
+
+otherRecipientInfoMap = opentypemap.get('otherRecipientInfoMap')
+
+MAX = float('inf')
+
+
+# Imports from RFC 5280
+
+AlgorithmIdentifier = rfc5280.AlgorithmIdentifier
+
+
+# Imports from RFC 5652
+
+CMSVersion = rfc5652.CMSVersion
+
+EncryptedKey = rfc5652.EncryptedKey
+
+KeyDerivationAlgorithmIdentifier = rfc5652.KeyDerivationAlgorithmIdentifier
+
+KeyEncryptionAlgorithmIdentifier = rfc5652.KeyEncryptionAlgorithmIdentifier
+
+RecipientIdentifier = rfc5652.RecipientIdentifier
+
+UserKeyingMaterial = rfc5652.UserKeyingMaterial
+
+
+# Object Identifiers
+
+id_ori = univ.ObjectIdentifier((1, 2, 840, 113549, 1, 9, 16, 13))
+
+id_ori_kem = id_ori + (3,)
+
+
+# KEMRecipientInfo
+
+class KEMAlgorithmIdentifier(AlgorithmIdentifier):
+    pass
+
+
+class KEMRecipientInfo(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('version', CMSVersion()),
+        namedtype.NamedType('rid', RecipientIdentifier()),
+        namedtype.NamedType('kem', KEMAlgorithmIdentifier()),
+        namedtype.NamedType('kemct', univ.OctetString()),
+        namedtype.NamedType('kdf', KeyDerivationAlgorithmIdentifier()),
+        namedtype.NamedType('kekLength',
+            univ.Integer().subtype(
+                subtypeSpec=constraint.ValueRangeConstraint(1, MAX))),
+        namedtype.OptionalNamedType('ukm',
+            UserKeyingMaterial().subtype(explicitTag=tag.Tag(
+                tag.tagClassContext, tag.tagFormatSimple, 0))),
+        namedtype.NamedType('wrap', KeyEncryptionAlgorithmIdentifier()),
+        namedtype.NamedType('encryptedKey', EncryptedKey())
+    )
+
+
+# CMSORIforKEMOtherInfo
+
+class CMSORIforKEMOtherInfo(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('wrap', KeyEncryptionAlgorithmIdentifier()),
+        namedtype.NamedType('kekLength',
+            univ.Integer().subtype(
+                subtypeSpec=constraint.ValueRangeConstraint(1, MAX))),
+        namedtype.OptionalNamedType('ukm',
+            UserKeyingMaterial().subtype(explicitTag=tag.Tag(
+                tag.tagClassContext, tag.tagFormatSimple, 0)))
+    )
+
+
+# Update the CMS Other Recipient Info Map
+
+_otherRecipientInfoMapUpdate = {
+    id_ori_kem: KEMRecipientInfo(),
+}
+
+otherRecipientInfoMap.update(_otherRecipientInfoMapUpdate)