File: //usr/share/crypto-policies/python/policygenerators/__pycache__/sequoia.cpython-39.opt-1.pyc
a
ԏ�i � @ s< d dl Z d dlZd dlmZ ddlmZ G dd� de�ZdS )� N)�mkstemp� )�ConfigGeneratorc @ s� e Zd ZdZddhZddgZddgZddd d
d d d
ddd� Zddd d dddd dddd� Zddd d d d ddd �Z d d d!ddd"�Z
d#Z d$d%hd&d'hd(d)hd*�Z d+d,d-d.d/�Z
ed0d1� �Zed2d3� �Zed4d5� �Zd S )6�RPMSequoiaGeneratorz rpm-sequoiaZrpmzMLKEM768-X25519zMLKEM1024-X448zMLDSA65-ED25519z
MLDSA87-ED448ZMD5ZSHA1NzSHA2-224zSHA2-256zSHA2-384zSHA2-512zSHA3-256zSHA3-512) Zmd5Zsha1Z ripemd160Zsha224Zsha256Zsha384Zsha512�sha3-256�sha3-512zIDEA-CFBz3DES-CFBz AES-128-CFBz AES-192-CFBz AES-256-CFBzCAMELLIA-128-CFBzCAMELLIA-192-CFBzCAMELLIA-256-CFB) ZideaZ tripledesZcast5ZblowfishZaes128Zaes192Zaes256ZtwofishZ camellia128Z camellia192Z camellia256Z SECP256R1Z SECP384R1Z SECP521R1ZX25519ZX448)Znistp256Znistp384Znistp521Zcv25519�x25519�x448�mlkem768-x25519�mlkem1024-x448z
EDDSA-ED25519z EDDSA-ED448)�ed25519�eddsa�ed448�mldsa65-ed25519�
mldsa87-ed448)Z elgamal1024Z elgamal2048Z elgamal3072Z elgamal4096Z
brainpoolp256Z
brainpoolp512z AES-256-EAXz AES-128-EAXz AES-256-OCBz AES-128-OCBz AES-256-GCMz AES-128-GCM)ZeaxZocb�gcm)r r )r r r
r )r r r
r r )r )�hash�group�sign�aeadc s: � fdd�|D �}|r6d� dd� |D ��}d|� d�S dS ) Nc s$ g | ] }� j �|g �D ]}|�qqS � )�ignore_invalid�get)�.0�k�v��clsr �=/usr/share/crypto-policies/python/policygenerators/sequoia.py�
<listcomp>h � z@RPMSequoiaGenerator._generate_ignore_invalid.<locals>.<listcomp>z, c s s | ]}d |� d �V qdS )�"Nr )r r r r r � <genexpr>j r z?RPMSequoiaGenerator._generate_ignore_invalid.<locals>.<genexpr>zignore_invalid = [ z ]
� )�join)r Zkinds�valuesr r r �_generate_ignore_invalidf s
z,RPMSequoiaGenerator._generate_ignore_invalidc C s� |j }d}|| �d�7 }| j�� D ]D\}}||d v r:dnd}||� d|� d�7 }||� d|� d�7 }q"|d7 }|d 7 }|| �d
�7 }| j�� D ]0\}}||d
v r�dnd}||� d |� d�7 }q�|d7 }|d 7 }|| �d
d�7 }tdd� |d D ��}tdd� |d D ��}|jd } dD ]4}
|
| k�r4|�r4dnd}|d|
� d |� d�7 }�q |jd } dD ]4}
|
| k�rx|�rxdnd}|d|
� d |� d�7 }�q`| j�� D ]D\} }
|
|d
v �r�dnd}|
| jv �r�d}|| � d |� d�7 }�q�| j �� D ]D\} }||d v �r
dnd}|| j
v �r d}|| � d |� d�7 }�q�| j D ]} || � d�7 }�q<|d7 }|d7 }|d7 }|| �d�7 }| j �� D ]6\} }|�
|d
��r�dnd}|| � d |� d�7 }�q�|S )Nz[hash_algorithms]
r �always�neverz.collision_resistance = "z"
z .second_preimage_resistance = "z default_disposition = "never"
z[symmetric_algorithms]
Zcipherz = "z[asymmetric_algorithms]
r r c s s | ]}|� d �V qdS )zRSA-N��
startswith�r �sr r r r" � r z6RPMSequoiaGenerator.generate_config.<locals>.<genexpr>c s s | ]}|� d �V qdS )zDSA-Nr) r+ r r r r" � r Z min_rsa_size)i i i i ZrsaZ min_dsa_sizeZdsaz = "never"
z default_disposition = "never"
z
[aead_algorithms]
r )Zenabledr& �hash_backwards_map�items�symmetric_backwards_map�anyZintegers� asymmetric_group_backwards_map�force_on_group� asymmetric_sign_backwards_map�
force_on_sign�asymmetric_always_disabled�aead_backwards_map� intersection)r Zpolicy�pZcfgZ seqoia_nameZc_p_namer Zany_rsaZany_dsaZmin_rsa�lZmin_dsaZseq_namer r Z c_p_namesr r r �generate_confign s\
z#RPMSequoiaGenerator.generate_configc C s^ d� dd� |�d�D ��}||k}|}t�d�dkr8dS t� \}}�zz�t�|d��}|�|� W d � n1 st0 Y tjd|gd d
tj tj
d �}| � d |j � |j
r�d
|j
d nd� �� |j |j
fdkr�W W t�|� dS | � d|r�dnd d � | � d|� �� W n, t�y> | � d� Y W t�|� dS 0 W t�|� n t�|� 0 d S )N�
c s s | ]}|� d �s|V qdS )zignore_invalid = Nr) )r r9 r r r r" � s
�z2RPMSequoiaGenerator.test_config.<locals>.<genexpr>Z OLD_SEQUOIA�1T�wzsequoia-policy-config-checkFzutf-8)�check�encoding�stdout�stderrz$sequoia-policy-config-check returns z `�`r# )r r# zThere is an error in a � tightenedZ generatedz sequoia policyzPolicy:
z,sequoia-policy-config not found, skipping...)r$ �split�os�getenvr �fdopen�write�
subprocess�run�PIPEZSTDOUTZeprint�
returncoder@ �unlink�FileNotFoundError)r ZconfigZstricter_configrC �fd�path�f�rr r r � test_config� sR
�
(����
�
��
�z RPMSequoiaGenerator.test_config)�__name__�
__module__� __qualname__Z CONFIG_NAMEZSCOPESr2 r4 r- r/ r1 r3 r5 r6 r � classmethodr& r: rS r r r r r sr �
�� � � �
:r )rE rI Ztempfiler Zconfiggeneratorr r r r r r �<module> s