tba-bases-encryption 0.4.0.dev2__tar.gz

tba_bases_encryption-0.4.0.dev2/PKG-INFO

@@ -0,0 +1,20 @@
+Metadata-Version: 2.4
+Name: tba-bases-encryption
+Version: 0.4.0.dev2
+Summary: Reusable encryption, decryption, and cipher-policy bases.
+License-Expression: Apache-2.0
+Requires-Python: >=3.10,<3.15
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: tba-bases-protected-artifact (==0.4.0.dev2)
+Requires-Dist: tba-contracts-security-trust (==0.1.0)
+Description-Content-Type: text/markdown
+
+# tba-bases-encryption
+
+Reusable encryption, decryption, multi-recipient, and cipher-policy behavior.
+

tba_bases_encryption-0.4.0.dev2/README.md

@@ -0,0 +1,3 @@
+# tba-bases-encryption
+
+Reusable encryption, decryption, multi-recipient, and cipher-policy behavior.

tba_bases_encryption-0.4.0.dev2/pyproject.toml

@@ -0,0 +1,13 @@
+[project]
+name = "tba-bases-encryption"
+version = "0.4.0.dev2"
+description = "Reusable encryption, decryption, and cipher-policy bases."
+readme = "README.md"
+requires-python = ">=3.10,<3.15"
+license = "Apache-2.0"
+dependencies = ["tba-bases-protected-artifact==0.4.0.dev2", "tba-contracts-security-trust==0.1.0"]
+[build-system]
+requires = ["poetry-core>=1.0.0"]
+build-backend = "poetry.core.masonry.api"
+[tool.poetry]
+packages = [{ include = "tba_bases_encryption", from = "src" }]

tba_bases_encryption-0.4.0.dev2/src/tba_bases_encryption/__init__.py

@@ -0,0 +1,86 @@
+"""Reusable encryption and cipher-policy bases."""
+
+from abc import ABC, abstractmethod
+from typing import Any, Mapping, Sequence
+
+from tba_bases_protected_artifact import (
+    ProtectedArtifactOpenerBase,
+    RecipientSetEditorBase,
+    SecurityArtifactIssuerBase,
+)
+from tba_contracts_security_trust import (
+    Artifact,
+    DecryptRequest,
+    EncryptRequest,
+    ICapabilityProvider,
+    ICipherPolicy,
+    IEncryptionProvider,
+    KeyRefLike,
+    NormalizedDescriptor,
+)
+
+
+class EncryptionProviderBase(IEncryptionProvider, ICapabilityProvider, ABC):
+    async def encrypt(self, request: EncryptRequest) -> Artifact:
+        raise NotImplementedError
+
+    async def decrypt(self, request: DecryptRequest) -> bytes:
+        raise NotImplementedError
+
+
+class CryptoDomainBase(
+    ICapabilityProvider,
+    SecurityArtifactIssuerBase,
+    ProtectedArtifactOpenerBase,
+    ABC,
+):
+    """Single-recipient artifact-encryption composition."""
+
+
+class MreCryptoDomainBase(
+    ICapabilityProvider,
+    SecurityArtifactIssuerBase,
+    ProtectedArtifactOpenerBase,
+    RecipientSetEditorBase,
+    ABC,
+):
+    """Multi-recipient artifact-encryption composition."""
+
+
+class CipherPolicyDomainBase(ICipherPolicy, ICapabilityProvider, ABC):
+    @abstractmethod
+    def suite_id(self) -> str: ...
+
+    @abstractmethod
+    def default_alg(self, op: str, *, for_key: KeyRefLike | None = None) -> str: ...
+
+    @abstractmethod
+    def normalize(
+        self,
+        *,
+        op: str,
+        alg: str | None = None,
+        key: KeyRefLike | None = None,
+        params: Mapping[str, Any] | None = None,
+        dialect: str | None = None,
+    ) -> NormalizedDescriptor: ...
+
+    def lint(self) -> Sequence[str]:
+        issues: list[str] = []
+        for op, allowed in self.supports().ops.items():
+            try:
+                default = self.default_alg(op)
+            except Exception as exc:  # pragma: no cover - defensive base behavior
+                issues.append(f"default_alg({op}) raised: {exc!r}")
+                continue
+            if default not in set(allowed):
+                issues.append(f"default_alg({op})={default} not in supports().ops[{op}]")
+        return tuple(issues)
+
+
+__all__ = [
+    "CipherPolicyDomainBase",
+    "CryptoDomainBase",
+    "EncryptionProviderBase",
+    "MreCryptoDomainBase",
+]

tba_bases_encryption-0.4.0.dev2/src/tba_bases_encryption/py.typed

@@ -0,0 +1 @@
+