1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
#
# This file is part of pyasn1-modules software.
#
# Created by Russ Housley with some assistance from asn1ate v.0.6.0.
#
# Copyright (c) 2019, Vigil Security, LLC
# License: http://snmplabs.com/pyasn1/license.html
#
# Using Pre-Shared Key (PSK) in the Cryptographic Message Syntax (CMS)
#
# ASN.1 source from:
# https://www.rfc-editor.org/rfc/rfc8696.txt
#
from pyasn1.type import constraint
from pyasn1.type import namedtype
from pyasn1.type import namedval
from pyasn1.type import tag
from pyasn1.type import univ
from pyasn1_modules import rfc5652
MAX = float('inf')
id_ori = univ.ObjectIdentifier('1.2.840.113549.1.9.16.13')
id_ori_keyTransPSK = univ.ObjectIdentifier('1.2.840.113549.1.9.16.13.1')
id_ori_keyAgreePSK = univ.ObjectIdentifier('1.2.840.113549.1.9.16.13.2')
class PreSharedKeyIdentifier(univ.OctetString):
pass
class KeyTransRecipientInfos(univ.SequenceOf):
componentType = rfc5652.KeyTransRecipientInfo()
class KeyTransPSKRecipientInfo(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('version',
rfc5652.CMSVersion()),
namedtype.NamedType('pskid',
PreSharedKeyIdentifier()),
namedtype.NamedType('kdfAlgorithm',
rfc5652.KeyDerivationAlgorithmIdentifier()),
namedtype.NamedType('keyEncryptionAlgorithm',
rfc5652.KeyEncryptionAlgorithmIdentifier()),
namedtype.NamedType('ktris',
KeyTransRecipientInfos()),
namedtype.NamedType('encryptedKey',
rfc5652.EncryptedKey())
)
class KeyAgreePSKRecipientInfo(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('version',
rfc5652.CMSVersion()),
namedtype.NamedType('pskid',
PreSharedKeyIdentifier()),
namedtype.NamedType('originator',
rfc5652.OriginatorIdentifierOrKey().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatConstructed, 0))),
namedtype.OptionalNamedType('ukm',
rfc5652.UserKeyingMaterial().subtype(explicitTag=tag.Tag(
tag.tagClassContext, tag.tagFormatSimple, 1))),
namedtype.NamedType('kdfAlgorithm',
rfc5652.KeyDerivationAlgorithmIdentifier()),
namedtype.NamedType('keyEncryptionAlgorithm',
rfc5652.KeyEncryptionAlgorithmIdentifier()),
namedtype.NamedType('recipientEncryptedKeys',
rfc5652.RecipientEncryptedKeys())
)
class CMSORIforPSKOtherInfo(univ.Sequence):
componentType = namedtype.NamedTypes(
namedtype.NamedType('psk',
univ.OctetString()),
namedtype.NamedType('keyMgmtAlgType',
univ.Enumerated(namedValues=namedval.NamedValues(
('keyTrans', 5), ('keyAgree', 10)))),
namedtype.NamedType('keyEncryptionAlgorithm',
rfc5652.KeyEncryptionAlgorithmIdentifier()),
namedtype.NamedType('pskLength',
univ.Integer().subtype(
subtypeSpec=constraint.ValueRangeConstraint(1, MAX))),
namedtype.NamedType('kdkLength',
univ.Integer().subtype(
subtypeSpec=constraint.ValueRangeConstraint(1, MAX)))
)
# Update the CMS Other Recipient Info map in rfc5652.py
_otherRecipientInfoMapUpdate = {
id_ori_keyTransPSK: KeyTransPSKRecipientInfo(),
id_ori_keyAgreePSK: KeyAgreePSKRecipientInfo(),
}
rfc5652.otherRecipientInfoMap.update(_otherRecipientInfoMapUpdate)
|
