/usr/share/crypto-policies/python/policygenerators/__pycache__
Edit: /usr/share/crypto-policies/python/policygenerators/__pycache__/sequoia.cpython-39.pyc (5505B)
a
ԏi @ s< d dl Z d dlZd dlmZ ddlmZ G dd deZdS ) N)mkstemp )ConfigGeneratorc @ s e Zd ZdZddhZddgZddgZddd d
d d d
ddd Zddd d dddd dddd Zddd d d d ddd Z d d d!ddd"Z
d#Z d$d%hd&d'hd(d)hd*Z d+d,d-d.d/Z
ed0d1 Zed2d3 Zed4d5 Zd S )6RPMSequoiaGeneratorz rpm-sequoiaZrpmzMLKEM768-X25519zMLKEM1024-X448zMLDSA65-ED25519z
MLDSA87-ED448ZMD5ZSHA1NzSHA2-224zSHA2-256zSHA2-384zSHA2-512zSHA3-256zSHA3-512) Zmd5Zsha1Z ripemd160Zsha224Zsha256Zsha384Zsha512sha3-256sha3-512zIDEA-CFBz3DES-CFBz AES-128-CFBz AES-192-CFBz AES-256-CFBzCAMELLIA-128-CFBzCAMELLIA-192-CFBzCAMELLIA-256-CFB) ZideaZ tripledesZcast5ZblowfishZaes128Zaes192Zaes256ZtwofishZ camellia128Z camellia192Z camellia256Z SECP256R1Z SECP384R1Z SECP521R1ZX25519ZX448)Znistp256Znistp384Znistp521Zcv25519x25519x448mlkem768-x25519mlkem1024-x448z
EDDSA-ED25519z EDDSA-ED448)ed25519eddsaed448mldsa65-ed25519
mldsa87-ed448)Z elgamal1024Z elgamal2048Z elgamal3072Z elgamal4096Z
brainpoolp256Z
brainpoolp512z AES-256-EAXz AES-128-EAXz AES-256-OCBz AES-128-OCBz AES-256-GCMz AES-128-GCM)ZeaxZocbgcm)r r )r r r
r )r r r
r r )r )hashgroupsignaeadc s: fdd|D }|r6d dd |D }d| dS dS ) Nc s$ g | ] } j |g D ]}|qqS )ignore_invalidget).0kvclsr =/usr/share/crypto-policies/python/policygenerators/sequoia.py
h z@RPMSequoiaGenerator._generate_ignore_invalid..z, c s s | ]}d | d V qdS )"Nr )r r r r r j r z?RPMSequoiaGenerator._generate_ignore_invalid..zignore_invalid = [ z ]
)join)r Zkindsvaluesr r r _generate_ignore_invalidf s
z,RPMSequoiaGenerator._generate_ignore_invalidc C s |j }d}|| d7 }| j D ]D\}}||d v r:dnd}|| d| d7 }|| d| d7 }q"|d7 }|d 7 }|| d
7 }| j D ]0\}}||d
v rdnd}|| d | d7 }q|d7 }|d 7 }|| d
d7 }tdd |d D }tdd |d D }|jd } dD ]4}
|
| kr4|r4dnd}|d|
d | d7 }q |jd } dD ]4}
|
| krx|rxdnd}|d|
d | d7 }q`| j D ]D\} }
|
|d
v rdnd}|
| jv rd}|| d | d7 }q| j D ]D\} }||d v r
dnd}|| j
v r d}|| d | d7 }q| j D ]} || d7 }q<|d7 }|d7 }|d7 }|| d7 }| j D ]6\} }|
|d
rdnd}|| d | d7 }q|S )Nz[hash_algorithms]
r alwaysneverz.collision_resistance = "z"
z .second_preimage_resistance = "z default_disposition = "never"
z[symmetric_algorithms]
Zcipherz = "z[asymmetric_algorithms]
r r c s s | ]}| d V qdS )zRSA-N
startswithr sr r r r" r z6RPMSequoiaGenerator.generate_config..c s s | ]}| d V qdS )zDSA-Nr) r+ r r r r" r Z min_rsa_size)i i i i ZrsaZ min_dsa_sizeZdsaz = "never"
z default_disposition = "never"
z
[aead_algorithms]
r )Zenabledr& hash_backwards_mapitemssymmetric_backwards_mapanyZintegers asymmetric_group_backwards_mapforce_on_group asymmetric_sign_backwards_map
force_on_signasymmetric_always_disabledaead_backwards_map intersection)r ZpolicypZcfgZ seqoia_nameZc_p_namer Zany_rsaZany_dsaZmin_rsalZmin_dsaZseq_namer r Z c_p_namesr r r generate_confign s\
z#RPMSequoiaGenerator.generate_configc C s^ d dd |dD }||k}|}tddkr8dS t \}}zzt|d}|| W d n1 st0 Y tjd|gd d
tj tj
d }| d |j |j
rd
|j
d nd |j |j
fdkrW W t| dS | d|rdnd d | d| W n, ty> | d Y W t| dS 0 W t| n t| 0 d S )N
c s s | ]}| d s|V qdS )zignore_invalid = Nr) )r r9 r r r r" s
z2RPMSequoiaGenerator.test_config..Z OLD_SEQUOIA1Twzsequoia-policy-config-checkFzutf-8)checkencodingstdoutstderrz$sequoia-policy-config-check returns z ``r# )r r# zThere is an error in a tightenedZ generatedz sequoia policyzPolicy:
z,sequoia-policy-config not found, skipping...)r$ splitosgetenvr fdopenwrite
subprocessrunPIPEZSTDOUTZeprint
returncoder@ unlinkFileNotFoundError)r ZconfigZstricter_configrC fdpathfrr r r test_config sR
(
z RPMSequoiaGenerator.test_config)__name__
__module__ __qualname__Z CONFIG_NAMEZSCOPESr2 r4 r- r/ r1 r3 r5 r6 r classmethodr& r: rS r r r r r sr
:r )rE rI Ztempfiler Zconfiggeneratorr r r r r r s