2 # PyGOST -- Pure Python GOST cryptographic functions library
3 # Copyright (C) 2015-2022 Sergey Matveev <stargrave@stargrave.org>
5 # This program is free software: you can redistribute it and/or modify
6 # it under the terms of the GNU General Public License as published by
7 # the Free Software Foundation, version 3 of the License.
9 # This program is distributed in the hope that it will be useful,
10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 # GNU General Public License for more details.
14 # You should have received a copy of the GNU General Public License
15 # along with this program. If not, see <http://www.gnu.org/licenses/>.
16 """PKCS #12 related structures (**NOT COMPLETE**)
19 from pyderasn import Any
20 from pyderasn import Choice
21 from pyderasn import Integer
22 from pyderasn import ObjectIdentifier
23 from pyderasn import OctetString
24 from pyderasn import Sequence
25 from pyderasn import SequenceOf
26 from pyderasn import SetOf
27 from pyderasn import tag_ctxc
28 from pyderasn import tag_ctxp
30 from pygost.asn1schemas.cms import CMSVersion
31 from pygost.asn1schemas.cms import ContentType
32 from pygost.asn1schemas.cms import Gost2814789Parameters
33 from pygost.asn1schemas.cms import Gost341215EncryptionParameters
34 from pygost.asn1schemas.oids import id_data
35 from pygost.asn1schemas.oids import id_encryptedData
36 from pygost.asn1schemas.oids import id_Gost28147_89
37 from pygost.asn1schemas.oids import id_gostr3412_2015_kuznyechik_ctracpkm
38 from pygost.asn1schemas.oids import id_gostr3412_2015_kuznyechik_ctracpkm_omac
39 from pygost.asn1schemas.oids import id_gostr3412_2015_magma_ctracpkm
40 from pygost.asn1schemas.oids import id_gostr3412_2015_magma_ctracpkm_omac
41 from pygost.asn1schemas.oids import id_pbes2
42 from pygost.asn1schemas.oids import id_pbkdf2
43 from pygost.asn1schemas.oids import id_pkcs9_certTypes_x509Certificate
44 from pygost.asn1schemas.prvkey import PrivateKeyInfo
45 from pygost.asn1schemas.x509 import AlgorithmIdentifier
46 from pygost.asn1schemas.x509 import Certificate
49 class PBKDF2Salt(Choice):
51 ("specified", OctetString()),
52 # ("otherSource", PBKDF2SaltSources()),
56 id_hmacWithSHA1 = ObjectIdentifier("1.2.840.113549.2.7")
59 class PBKDF2PRFs(AlgorithmIdentifier):
61 ("algorithm", ObjectIdentifier(default=id_hmacWithSHA1)),
62 ("parameters", Any(optional=True)),
66 class IterationCount(Integer):
67 bounds = (1, float("+inf"))
70 class KeyLength(Integer):
71 bounds = (1, float("+inf"))
74 class PBKDF2Params(Sequence):
76 ("salt", PBKDF2Salt()),
77 ("iterationCount", IterationCount(optional=True)),
78 ("keyLength", KeyLength(optional=True)),
79 ("prf", PBKDF2PRFs()),
83 class PBES2KDFs(AlgorithmIdentifier):
85 ("algorithm", ObjectIdentifier(defines=(
86 (("parameters",), {id_pbkdf2: PBKDF2Params()}),
88 ("parameters", Any(optional=True)),
92 class PBES2Encs(AlgorithmIdentifier):
94 ("algorithm", ObjectIdentifier(defines=(
96 id_Gost28147_89: Gost2814789Parameters(),
97 id_gostr3412_2015_magma_ctracpkm: Gost341215EncryptionParameters(),
98 id_gostr3412_2015_magma_ctracpkm_omac: Gost341215EncryptionParameters(),
99 id_gostr3412_2015_kuznyechik_ctracpkm: Gost341215EncryptionParameters(),
100 id_gostr3412_2015_kuznyechik_ctracpkm_omac: Gost341215EncryptionParameters(),
103 ("parameters", Any(optional=True)),
107 class PBES2Params(Sequence):
109 ("keyDerivationFunc", PBES2KDFs()),
110 ("encryptionScheme", PBES2Encs()),
114 class EncryptionAlgorithmIdentifier(AlgorithmIdentifier):
116 ("algorithm", ObjectIdentifier(defines=(
117 (("parameters",), {id_pbes2: PBES2Params()}),
119 ("parameters", Any(optional=True)),
123 class ContentEncryptionAlgorithmIdentifier(EncryptionAlgorithmIdentifier):
125 ("algorithm", ObjectIdentifier(defines=(
126 (("parameters",), {id_pbes2: PBES2Params()}),
128 ("parameters", Any(optional=True)),
132 class EncryptedContent(OctetString):
136 class EncryptedContentInfo(Sequence):
138 ("contentType", ContentType()),
139 ("contentEncryptionAlgorithm", ContentEncryptionAlgorithmIdentifier()),
140 ("encryptedContent", EncryptedContent(impl=tag_ctxp(0), optional=True)),
144 class EncryptedData(Sequence):
146 ("version", CMSVersion()),
147 ("encryptedContentInfo", EncryptedContentInfo()),
148 # ("unprotectedAttrs", UnprotectedAttributes(impl=tag_ctxc(1), optional=True)),
152 class PKCS12BagSet(Any):
156 class AttrValue(SetOf):
160 class PKCS12Attribute(Sequence):
162 ("attrId", ObjectIdentifier()),
163 ("attrValue", AttrValue()),
167 class PKCS12Attributes(SetOf):
168 schema = PKCS12Attribute()
171 class SafeBag(Sequence):
173 ("bagId", ObjectIdentifier(defines=(
174 (("bagValue",), {id_encryptedData: EncryptedData()}),
176 ("bagValue", PKCS12BagSet(expl=tag_ctxc(0))),
177 ("bagAttributes", PKCS12Attributes(optional=True)),
181 class SafeContents(SequenceOf):
185 OctetStringSafeContents = SafeContents(expl=OctetString.tag_default)
188 class AuthSafe(Sequence):
190 ("contentType", ContentType(defines=(
191 (("content",), {id_data: OctetStringSafeContents()}),
193 ("content", Any(expl=tag_ctxc(0))),
197 class DigestInfo(Sequence):
199 ("digestAlgorithm", AlgorithmIdentifier()),
200 ("digest", OctetString()),
204 class MacData(Sequence):
206 ("mac", DigestInfo()),
207 ("macSalt", OctetString()),
208 ("iterations", Integer(default=1)),
214 ("version", Integer(default=1)),
215 ("authSafe", AuthSafe()),
216 ("macData", MacData(optional=True)),
220 class EncryptedPrivateKeyInfo(Sequence):
222 ("encryptionAlgorithm", EncryptionAlgorithmIdentifier()),
223 ("encryptedData", OctetString()),
227 class PKCS8ShroudedKeyBag(EncryptedPrivateKeyInfo):
231 OctetStringX509Certificate = Certificate(expl=OctetString.tag_default)
234 class CertTypes(Any):
238 class CertBag(Sequence):
240 ("certId", ObjectIdentifier(defines=(
242 id_pkcs9_certTypes_x509Certificate: OctetStringX509Certificate(),
245 ("certValue", CertTypes(expl=tag_ctxc(0))),
249 class KeyBag(PrivateKeyInfo):