JFIF $
d d 7
Viewing File: /usr/share/crypto-policies/python/policygenerators/__pycache__/sequoia.cpython-39.opt-1.pyc
a
C�h� � @ s< d dl Z d dlZd dlmZ ddlmZ G dd� de�ZdS )� N)�mkstemp� )�ConfigGeneratorc @ s� e Zd ZdZddhZddgZddgZddd d
d d d
ddd� Zddd d dddd dddd� Zddd d d d ddd �Z d d!ddd"�Z
d#Z d$d%hd&d'hd(d)hd*�Z d+d,d"d-d.�Z
ed/d0� �Zed1d2� �Zed3d4� �Zd S )5�RPMSequoiaGeneratorz rpm-sequoiaZrpmzMLKEM768-X25519zMLKEM1024-X448zMLDSA65-ED25519z
MLDSA87-ED448ZMD5ZSHA1NzSHA2-224zSHA2-256zSHA2-384zSHA2-512zSHA3-256zSHA3-512) Zmd5Zsha1Z ripemd160Zsha224Zsha256Zsha384Zsha512�sha3-256�sha3-512zIDEA-CFBz3DES-CFBz AES-128-CFBz AES-192-CFBz AES-256-CFBzCAMELLIA-128-CFBzCAMELLIA-192-CFBzCAMELLIA-256-CFB) ZideaZ tripledesZcast5ZblowfishZaes128Zaes192Zaes256ZtwofishZ camellia128Z camellia192Z camellia256Z SECP256R1Z SECP384R1Z SECP521R1ZX25519ZX448)Znistp256Znistp384Znistp521Zcv25519�x25519�x448�mlkem768-x25519�mlkem1024-x448z
EDDSA-ED25519z EDDSA-ED448)Zed25519Zed448zmldsa65-ed25519z
mldsa87-ed448)Z elgamal1024Z elgamal2048Z elgamal3072Z elgamal4096Z
brainpoolp256Z
brainpoolp512z AES-256-EAXz AES-128-EAXz AES-256-OCBz AES-128-OCBz AES-256-GCMz AES-128-GCM)ZeaxZocb�gcm)r r )r r r
r )r )�hash�group�sign�aeadc s: � fdd�|D �}|r6d� dd� |D ��}d|� d�S dS ) Nc s$ g | ] }� j �|g �D ]}|�qqS � )�ignore_invalid�get)�.0�k�v��clsr �=/usr/share/crypto-policies/python/policygenerators/sequoia.py�
<listcomp>e � z@RPMSequoiaGenerator._generate_ignore_invalid.<locals>.<listcomp>z, c s s | ]}d |� d �V qdS )�"Nr )r r r r r � <genexpr>g r z?RPMSequoiaGenerator._generate_ignore_invalid.<locals>.<genexpr>zignore_invalid = [ z ]
� )�join)r Zkinds�valuesr r r �_generate_ignore_invalidc s
z,RPMSequoiaGenerator._generate_ignore_invalidc C s� |j }d}|| �d�7 }| j�� D ]D\}}||d v r:dnd}||� d|� d�7 }||� d|� d�7 }q"|d7 }|d 7 }|| �d
�7 }| j�� D ]0\}}||d
v r�dnd}||� d |� d�7 }q�|d7 }|d 7 }|| �d
d�7 }tdd� |d D ��}tdd� |d D ��}|jd } dD ]4}
|
| k�r4|�r4dnd}|d|
� d |� d�7 }�q |jd } dD ]4}
|
| k�rx|�rxdnd}|d|
� d |� d�7 }�q`| j�� D ]D\} }
|
|d
v �r�dnd}|
| jv �r�d}|| � d |� d�7 }�q�| j �� D ]D\} }||d v �r
dnd}|| j
v �r d}|| � d |� d�7 }�q�| j D ]} || � d�7 }�q<|d7 }|d7 }|d7 }|| �d�7 }| j �� D ]6\} }|�
|d
��r�dnd}|| � d |� d�7 }�q�|S )Nz[hash_algorithms]
r
�always�neverz.collision_resistance = "z"
z .second_preimage_resistance = "z default_disposition = "never"
z[symmetric_algorithms]
Zcipherz = "z[asymmetric_algorithms]
r r c s s | ]}|� d �V qdS )zRSA-N��
startswith�r �sr r r r � r z6RPMSequoiaGenerator.generate_config.<locals>.<genexpr>c s s | ]}|� d �V qdS )zDSA-Nr$ r& r r r r � r Z min_rsa_size)i i i i ZrsaZ min_dsa_sizeZdsaz = "never"
z default_disposition = "never"
z
[aead_algorithms]
r )Zenabledr! �hash_backwards_map�items�symmetric_backwards_map�anyZintegers� asymmetric_group_backwards_map�force_on_group� asymmetric_sign_backwards_map�
force_on_sign�asymmetric_always_disabled�aead_backwards_map� intersection)r Zpolicy�pZcfgZ seqoia_nameZc_p_namer Zany_rsaZany_dsaZmin_rsa�lZmin_dsaZseq_namer r Z c_p_namesr r r �generate_configk s\
z#RPMSequoiaGenerator.generate_configc C s^ d� dd� |�d�D ��}||k}|}t�d�dkr8dS t� \}}�zz�t�|d��}|�|� W d � n1 st0 Y tjd|gd d
tj tj
d �}| � d |j � |j
r�d
|j
d nd� �� |j |j
fdkr�W W t�|� dS | � d|r�dnd d � | � d|� �� W n, t�y> | � d� Y W t�|� dS 0 W t�|� n t�|� 0 d S )N�
c s s | ]}|� d �s|V qdS )zignore_invalid = Nr$ )r r4 r r r r � s
�z2RPMSequoiaGenerator.test_config.<locals>.<genexpr>Z OLD_SEQUOIA�1T�wzsequoia-policy-config-checkFzutf-8)�check�encoding�stdout�stderrz$sequoia-policy-config-check returns z `�`r )r r zThere is an error in a � tightenedZ generatedz sequoia policyzPolicy:
z,sequoia-policy-config not found, skipping...)r �split�os�getenvr �fdopen�write�
subprocess�run�PIPEZSTDOUTZeprint�
returncoder; �unlink�FileNotFoundError)r ZconfigZstricter_configr> �fd�path�f�rr r r � test_config� sR
�
(����
�
��
�z RPMSequoiaGenerator.test_config)�__name__�
__module__� __qualname__Z CONFIG_NAMEZSCOPESr- r/ r( r* r, r. r0 r1 r � classmethodr! r5 rN r r r r r sp �
�� � � �
:r )r@ rD Ztempfiler Zconfiggeneratorr r r r r r �<module> s Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg