ruạṛ
a ԏ�i � @ s< d dl Z d dlZd dlmZ ddlmZ G dd� de�ZdS )� N)�mkstemp� )�ConfigGeneratorc @ s� e Zd ZdZddhZddgZddgZddd d d d d ddd� Zddd d dddd dddd� Zddd d d d ddd �Z d d d!ddd"�Z d#Z d$d%hd&d'hd(d)hd*�Z d+d,d-d.d/�Z ed0d1� �Zed2d3� �Zed4d5� �Zd S )6�RPMSequoiaGeneratorz rpm-sequoiaZrpmzMLKEM768-X25519zMLKEM1024-X448zMLDSA65-ED25519z MLDSA87-ED448ZMD5ZSHA1NzSHA2-224zSHA2-256zSHA2-384zSHA2-512zSHA3-256zSHA3-512) Zmd5Zsha1Z ripemd160Zsha224Zsha256Zsha384Zsha512�sha3-256�sha3-512zIDEA-CFBz3DES-CFBz AES-128-CFBz AES-192-CFBz AES-256-CFBzCAMELLIA-128-CFBzCAMELLIA-192-CFBzCAMELLIA-256-CFB) ZideaZ tripledesZcast5ZblowfishZaes128Zaes192Zaes256ZtwofishZ camellia128Z camellia192Z camellia256Z SECP256R1Z SECP384R1Z SECP521R1ZX25519ZX448)Znistp256Znistp384Znistp521Zcv25519�x25519�x448�mlkem768-x25519�mlkem1024-x448z EDDSA-ED25519z EDDSA-ED448)�ed25519�eddsa�ed448�mldsa65-ed25519� mldsa87-ed448)Z elgamal1024Z elgamal2048Z elgamal3072Z elgamal4096Z brainpoolp256Z brainpoolp512z AES-256-EAXz AES-128-EAXz AES-256-OCBz AES-128-OCBz AES-256-GCMz AES-128-GCM)ZeaxZocb�gcm)r r )r r r r )r r r r r )r )�hash�group�sign�aeadc s: � fdd�|D �}|r6d� dd� |D ��}d|� d�S dS ) Nc s$ g | ] }� j �|g �D ]}|�qqS � )�ignore_invalid�get)�.0�k�v��clsr �=/usr/share/crypto-policies/python/policygenerators/sequoia.py� <listcomp>h � z@RPMSequoiaGenerator._generate_ignore_invalid.<locals>.<listcomp>z, c s s | ]}d |� d �V qdS )�"Nr )r r r r r � <genexpr>j r z?RPMSequoiaGenerator._generate_ignore_invalid.<locals>.<genexpr>zignore_invalid = [ z ] � )�join)r Zkinds�valuesr r r �_generate_ignore_invalidf s z,RPMSequoiaGenerator._generate_ignore_invalidc C s� |j }d}|| �d�7 }| j�� D ]D\}}||d v r:dnd}||� d|� d�7 }||� d|� d�7 }q"|d7 }|d 7 }|| �d �7 }| j�� D ]0\}}||d v r�dnd}||� d |� d�7 }q�|d7 }|d 7 }|| �d d�7 }tdd� |d D ��}tdd� |d D ��}|jd } dD ]4} | | k�r4|�r4dnd}|d| � d |� d�7 }�q |jd } dD ]4} | | k�rx|�rxdnd}|d| � d |� d�7 }�q`| j�� D ]D\} } | |d v �r�dnd}| | jv �r�d}|| � d |� d�7 }�q�| j �� D ]D\} }||d v �r dnd}|| j v �r d}|| � d |� d�7 }�q�| j D ]} || � d�7 }�q<|d7 }|d7 }|d7 }|| �d�7 }| j �� D ]6\} }|� |d ��r�dnd}|| � d |� d�7 }�q�|S )Nz[hash_algorithms] r �always�neverz.collision_resistance = "z" z .second_preimage_resistance = "z default_disposition = "never" z[symmetric_algorithms] Zcipherz = "z[asymmetric_algorithms] r r c s s | ]}|� d �V qdS )zRSA-N�� startswith�r �sr r r r" � r z6RPMSequoiaGenerator.generate_config.<locals>.<genexpr>c s s | ]}|� d �V qdS )zDSA-Nr) r+ r r r r" � r Z min_rsa_size)i i i i ZrsaZ min_dsa_sizeZdsaz = "never" z default_disposition = "never" z [aead_algorithms] r )Zenabledr& �hash_backwards_map�items�symmetric_backwards_map�anyZintegers� asymmetric_group_backwards_map�force_on_group� asymmetric_sign_backwards_map� force_on_sign�asymmetric_always_disabled�aead_backwards_map� intersection)r Zpolicy�pZcfgZ seqoia_nameZc_p_namer Zany_rsaZany_dsaZmin_rsa�lZmin_dsaZseq_namer r Z c_p_namesr r r �generate_confign s\ z#RPMSequoiaGenerator.generate_configc C s^ d� dd� |�d�D ��}||k}|}t�d�dkr8dS t� \}}�zz�t�|d��}|�|� W d � n1 st0 Y tjd|gd d tj tj d �}| � d |j � |j r�d |j d nd� �� |j |j fdkr�W W t�|� dS | � d|r�dnd d � | � d|� �� W n, t�y> | � d� Y W t�|� dS 0 W t�|� n t�|� 0 d S )N� c s s | ]}|� d �s|V qdS )zignore_invalid = Nr) )r r9 r r r r" � s �z2RPMSequoiaGenerator.test_config.<locals>.<genexpr>Z OLD_SEQUOIA�1T�wzsequoia-policy-config-checkFzutf-8)�check�encoding�stdout�stderrz$sequoia-policy-config-check returns z `�`r# )r r# zThere is an error in a � tightenedZ generatedz sequoia policyzPolicy: z,sequoia-policy-config not found, skipping...)r$ �split�os�getenvr �fdopen�write� subprocess�run�PIPEZSTDOUTZeprint� returncoder@ �unlink�FileNotFoundError)r ZconfigZstricter_configrC �fd�path�f�rr r r � test_config� sR � (���� � �� �z RPMSequoiaGenerator.test_config)�__name__� __module__� __qualname__Z CONFIG_NAMEZSCOPESr2 r4 r- r/ r1 r3 r5 r6 r � classmethodr& r: rS r r r r r sr � �� � � � :r )rE rI Ztempfiler Zconfiggeneratorr r r r r r �<module> s
cải xoăn