707 lines
20 KiB
Python
707 lines
20 KiB
Python
# coding: utf-8
|
|
#
|
|
# This file is part of pyasn1-modules software.
|
|
#
|
|
# Created by Stanisław Pitucha with asn1ate tool.
|
|
# Copyright (c) 2005-2018, Ilya Etingof <etingof@gmail.com>
|
|
# License: http://snmplabs.com/pyasn1/license.html
|
|
#
|
|
# Cryptographic Message Syntax (CMS)
|
|
#
|
|
# ASN.1 source from:
|
|
# http://www.ietf.org/rfc/rfc3852.txt
|
|
#
|
|
from pyasn1.type import constraint
|
|
from pyasn1.type import namedtype
|
|
from pyasn1.type import namedval
|
|
from pyasn1.type import tag
|
|
from pyasn1.type import univ
|
|
from pyasn1.type import useful
|
|
|
|
from pyasn1_modules import rfc3280
|
|
from pyasn1_modules import rfc3281
|
|
|
|
MAX = float('inf')
|
|
|
|
|
|
def _buildOid(*components):
|
|
output = []
|
|
for x in tuple(components):
|
|
if isinstance(x, univ.ObjectIdentifier):
|
|
output.extend(list(x))
|
|
else:
|
|
output.append(int(x))
|
|
|
|
return univ.ObjectIdentifier(output)
|
|
|
|
|
|
class AttributeValue(univ.Any):
|
|
pass
|
|
|
|
|
|
class Attribute(univ.Sequence):
|
|
pass
|
|
|
|
|
|
Attribute.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('attrType', univ.ObjectIdentifier()),
|
|
namedtype.NamedType('attrValues', univ.SetOf(componentType=AttributeValue()))
|
|
)
|
|
|
|
|
|
class SignedAttributes(univ.SetOf):
|
|
pass
|
|
|
|
|
|
SignedAttributes.componentType = Attribute()
|
|
SignedAttributes.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
|
|
|
|
|
|
class OtherRevocationInfoFormat(univ.Sequence):
|
|
pass
|
|
|
|
|
|
OtherRevocationInfoFormat.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('otherRevInfoFormat', univ.ObjectIdentifier()),
|
|
namedtype.NamedType('otherRevInfo', univ.Any())
|
|
)
|
|
|
|
|
|
class RevocationInfoChoice(univ.Choice):
|
|
pass
|
|
|
|
|
|
RevocationInfoChoice.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('crl', rfc3280.CertificateList()),
|
|
namedtype.NamedType('other', OtherRevocationInfoFormat().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
|
|
)
|
|
|
|
|
|
class RevocationInfoChoices(univ.SetOf):
|
|
pass
|
|
|
|
|
|
RevocationInfoChoices.componentType = RevocationInfoChoice()
|
|
|
|
|
|
class OtherKeyAttribute(univ.Sequence):
|
|
pass
|
|
|
|
|
|
OtherKeyAttribute.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('keyAttrId', univ.ObjectIdentifier()),
|
|
namedtype.OptionalNamedType('keyAttr', univ.Any())
|
|
)
|
|
|
|
id_signedData = _buildOid(1, 2, 840, 113549, 1, 7, 2)
|
|
|
|
|
|
class KeyEncryptionAlgorithmIdentifier(rfc3280.AlgorithmIdentifier):
|
|
pass
|
|
|
|
|
|
class EncryptedKey(univ.OctetString):
|
|
pass
|
|
|
|
|
|
class CMSVersion(univ.Integer):
|
|
pass
|
|
|
|
|
|
CMSVersion.namedValues = namedval.NamedValues(
|
|
('v0', 0),
|
|
('v1', 1),
|
|
('v2', 2),
|
|
('v3', 3),
|
|
('v4', 4),
|
|
('v5', 5)
|
|
)
|
|
|
|
|
|
class KEKIdentifier(univ.Sequence):
|
|
pass
|
|
|
|
|
|
KEKIdentifier.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('keyIdentifier', univ.OctetString()),
|
|
namedtype.OptionalNamedType('date', useful.GeneralizedTime()),
|
|
namedtype.OptionalNamedType('other', OtherKeyAttribute())
|
|
)
|
|
|
|
|
|
class KEKRecipientInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
KEKRecipientInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.NamedType('kekid', KEKIdentifier()),
|
|
namedtype.NamedType('keyEncryptionAlgorithm', KeyEncryptionAlgorithmIdentifier()),
|
|
namedtype.NamedType('encryptedKey', EncryptedKey())
|
|
)
|
|
|
|
|
|
class KeyDerivationAlgorithmIdentifier(rfc3280.AlgorithmIdentifier):
|
|
pass
|
|
|
|
|
|
class PasswordRecipientInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
PasswordRecipientInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.OptionalNamedType('keyDerivationAlgorithm', KeyDerivationAlgorithmIdentifier().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
|
|
namedtype.NamedType('keyEncryptionAlgorithm', KeyEncryptionAlgorithmIdentifier()),
|
|
namedtype.NamedType('encryptedKey', EncryptedKey())
|
|
)
|
|
|
|
|
|
class OtherRecipientInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
OtherRecipientInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('oriType', univ.ObjectIdentifier()),
|
|
namedtype.NamedType('oriValue', univ.Any())
|
|
)
|
|
|
|
|
|
class IssuerAndSerialNumber(univ.Sequence):
|
|
pass
|
|
|
|
|
|
IssuerAndSerialNumber.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('issuer', rfc3280.Name()),
|
|
namedtype.NamedType('serialNumber', rfc3280.CertificateSerialNumber())
|
|
)
|
|
|
|
|
|
class SubjectKeyIdentifier(univ.OctetString):
|
|
pass
|
|
|
|
|
|
class RecipientKeyIdentifier(univ.Sequence):
|
|
pass
|
|
|
|
|
|
RecipientKeyIdentifier.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('subjectKeyIdentifier', SubjectKeyIdentifier()),
|
|
namedtype.OptionalNamedType('date', useful.GeneralizedTime()),
|
|
namedtype.OptionalNamedType('other', OtherKeyAttribute())
|
|
)
|
|
|
|
|
|
class KeyAgreeRecipientIdentifier(univ.Choice):
|
|
pass
|
|
|
|
|
|
KeyAgreeRecipientIdentifier.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('issuerAndSerialNumber', IssuerAndSerialNumber()),
|
|
namedtype.NamedType('rKeyId', RecipientKeyIdentifier().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0)))
|
|
)
|
|
|
|
|
|
class RecipientEncryptedKey(univ.Sequence):
|
|
pass
|
|
|
|
|
|
RecipientEncryptedKey.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('rid', KeyAgreeRecipientIdentifier()),
|
|
namedtype.NamedType('encryptedKey', EncryptedKey())
|
|
)
|
|
|
|
|
|
class RecipientEncryptedKeys(univ.SequenceOf):
|
|
pass
|
|
|
|
|
|
RecipientEncryptedKeys.componentType = RecipientEncryptedKey()
|
|
|
|
|
|
class UserKeyingMaterial(univ.OctetString):
|
|
pass
|
|
|
|
|
|
class OriginatorPublicKey(univ.Sequence):
|
|
pass
|
|
|
|
|
|
OriginatorPublicKey.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('algorithm', rfc3280.AlgorithmIdentifier()),
|
|
namedtype.NamedType('publicKey', univ.BitString())
|
|
)
|
|
|
|
|
|
class OriginatorIdentifierOrKey(univ.Choice):
|
|
pass
|
|
|
|
|
|
OriginatorIdentifierOrKey.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('issuerAndSerialNumber', IssuerAndSerialNumber()),
|
|
namedtype.NamedType('subjectKeyIdentifier', SubjectKeyIdentifier().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
|
|
namedtype.NamedType('originatorKey', OriginatorPublicKey().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1)))
|
|
)
|
|
|
|
|
|
class KeyAgreeRecipientInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
KeyAgreeRecipientInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.NamedType('originator', OriginatorIdentifierOrKey().subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
|
|
namedtype.OptionalNamedType('ukm', UserKeyingMaterial().subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
|
|
namedtype.NamedType('keyEncryptionAlgorithm', KeyEncryptionAlgorithmIdentifier()),
|
|
namedtype.NamedType('recipientEncryptedKeys', RecipientEncryptedKeys())
|
|
)
|
|
|
|
|
|
class RecipientIdentifier(univ.Choice):
|
|
pass
|
|
|
|
|
|
RecipientIdentifier.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('issuerAndSerialNumber', IssuerAndSerialNumber()),
|
|
namedtype.NamedType('subjectKeyIdentifier', SubjectKeyIdentifier().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
|
|
)
|
|
|
|
|
|
class KeyTransRecipientInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
KeyTransRecipientInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.NamedType('rid', RecipientIdentifier()),
|
|
namedtype.NamedType('keyEncryptionAlgorithm', KeyEncryptionAlgorithmIdentifier()),
|
|
namedtype.NamedType('encryptedKey', EncryptedKey())
|
|
)
|
|
|
|
|
|
class RecipientInfo(univ.Choice):
|
|
pass
|
|
|
|
|
|
RecipientInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('ktri', KeyTransRecipientInfo()),
|
|
namedtype.NamedType('kari', KeyAgreeRecipientInfo().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 1))),
|
|
namedtype.NamedType('kekri', KEKRecipientInfo().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2))),
|
|
namedtype.NamedType('pwri', PasswordRecipientInfo().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 3))),
|
|
namedtype.NamedType('ori', OtherRecipientInfo().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 4)))
|
|
)
|
|
|
|
|
|
class RecipientInfos(univ.SetOf):
|
|
pass
|
|
|
|
|
|
RecipientInfos.componentType = RecipientInfo()
|
|
RecipientInfos.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
|
|
|
|
|
|
class DigestAlgorithmIdentifier(rfc3280.AlgorithmIdentifier):
|
|
pass
|
|
|
|
|
|
class Signature(univ.BitString):
|
|
pass
|
|
|
|
|
|
class SignerIdentifier(univ.Choice):
|
|
pass
|
|
|
|
|
|
SignerIdentifier.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('issuerAndSerialNumber', IssuerAndSerialNumber()),
|
|
namedtype.NamedType('subjectKeyIdentifier', SubjectKeyIdentifier().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
|
|
)
|
|
|
|
|
|
class UnprotectedAttributes(univ.SetOf):
|
|
pass
|
|
|
|
|
|
UnprotectedAttributes.componentType = Attribute()
|
|
UnprotectedAttributes.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
|
|
|
|
|
|
class ContentType(univ.ObjectIdentifier):
|
|
pass
|
|
|
|
|
|
class EncryptedContent(univ.OctetString):
|
|
pass
|
|
|
|
|
|
class ContentEncryptionAlgorithmIdentifier(rfc3280.AlgorithmIdentifier):
|
|
pass
|
|
|
|
|
|
class EncryptedContentInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
EncryptedContentInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('contentType', ContentType()),
|
|
namedtype.NamedType('contentEncryptionAlgorithm', ContentEncryptionAlgorithmIdentifier()),
|
|
namedtype.OptionalNamedType('encryptedContent', EncryptedContent().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
|
|
)
|
|
|
|
|
|
class EncryptedData(univ.Sequence):
|
|
pass
|
|
|
|
|
|
EncryptedData.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.NamedType('encryptedContentInfo', EncryptedContentInfo()),
|
|
namedtype.OptionalNamedType('unprotectedAttrs', UnprotectedAttributes().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
|
|
)
|
|
|
|
id_contentType = _buildOid(1, 2, 840, 113549, 1, 9, 3)
|
|
|
|
id_data = _buildOid(1, 2, 840, 113549, 1, 7, 1)
|
|
|
|
id_messageDigest = _buildOid(1, 2, 840, 113549, 1, 9, 4)
|
|
|
|
|
|
class DigestAlgorithmIdentifiers(univ.SetOf):
|
|
pass
|
|
|
|
|
|
DigestAlgorithmIdentifiers.componentType = DigestAlgorithmIdentifier()
|
|
|
|
|
|
class EncapsulatedContentInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
EncapsulatedContentInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('eContentType', ContentType()),
|
|
namedtype.OptionalNamedType('eContent', univ.OctetString().subtype(
|
|
explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
|
|
)
|
|
|
|
|
|
class Digest(univ.OctetString):
|
|
pass
|
|
|
|
|
|
class DigestedData(univ.Sequence):
|
|
pass
|
|
|
|
|
|
DigestedData.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.NamedType('digestAlgorithm', DigestAlgorithmIdentifier()),
|
|
namedtype.NamedType('encapContentInfo', EncapsulatedContentInfo()),
|
|
namedtype.NamedType('digest', Digest())
|
|
)
|
|
|
|
|
|
class ContentInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
ContentInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('contentType', ContentType()),
|
|
namedtype.NamedType('content', univ.Any().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0)))
|
|
)
|
|
|
|
|
|
class UnauthAttributes(univ.SetOf):
|
|
pass
|
|
|
|
|
|
UnauthAttributes.componentType = Attribute()
|
|
UnauthAttributes.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
|
|
|
|
|
|
class ExtendedCertificateInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
ExtendedCertificateInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.NamedType('certificate', rfc3280.Certificate()),
|
|
namedtype.NamedType('attributes', UnauthAttributes())
|
|
)
|
|
|
|
|
|
class SignatureAlgorithmIdentifier(rfc3280.AlgorithmIdentifier):
|
|
pass
|
|
|
|
|
|
class ExtendedCertificate(univ.Sequence):
|
|
pass
|
|
|
|
|
|
ExtendedCertificate.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('extendedCertificateInfo', ExtendedCertificateInfo()),
|
|
namedtype.NamedType('signatureAlgorithm', SignatureAlgorithmIdentifier()),
|
|
namedtype.NamedType('signature', Signature())
|
|
)
|
|
|
|
|
|
class OtherCertificateFormat(univ.Sequence):
|
|
pass
|
|
|
|
|
|
OtherCertificateFormat.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('otherCertFormat', univ.ObjectIdentifier()),
|
|
namedtype.NamedType('otherCert', univ.Any())
|
|
)
|
|
|
|
|
|
class AttributeCertificateV2(rfc3281.AttributeCertificate):
|
|
pass
|
|
|
|
|
|
class AttCertVersionV1(univ.Integer):
|
|
pass
|
|
|
|
|
|
AttCertVersionV1.namedValues = namedval.NamedValues(
|
|
('v1', 0)
|
|
)
|
|
|
|
|
|
class AttributeCertificateInfoV1(univ.Sequence):
|
|
pass
|
|
|
|
|
|
AttributeCertificateInfoV1.componentType = namedtype.NamedTypes(
|
|
namedtype.DefaultedNamedType('version', AttCertVersionV1().subtype(value="v1")),
|
|
namedtype.NamedType(
|
|
'subject', univ.Choice(
|
|
componentType=namedtype.NamedTypes(
|
|
namedtype.NamedType('baseCertificateID', rfc3281.IssuerSerial().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
|
|
namedtype.NamedType('subjectName', rfc3280.GeneralNames().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
|
|
)
|
|
)
|
|
),
|
|
namedtype.NamedType('issuer', rfc3280.GeneralNames()),
|
|
namedtype.NamedType('signature', rfc3280.AlgorithmIdentifier()),
|
|
namedtype.NamedType('serialNumber', rfc3280.CertificateSerialNumber()),
|
|
namedtype.NamedType('attCertValidityPeriod', rfc3281.AttCertValidityPeriod()),
|
|
namedtype.NamedType('attributes', univ.SequenceOf(componentType=rfc3280.Attribute())),
|
|
namedtype.OptionalNamedType('issuerUniqueID', rfc3280.UniqueIdentifier()),
|
|
namedtype.OptionalNamedType('extensions', rfc3280.Extensions())
|
|
)
|
|
|
|
|
|
class AttributeCertificateV1(univ.Sequence):
|
|
pass
|
|
|
|
|
|
AttributeCertificateV1.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('acInfo', AttributeCertificateInfoV1()),
|
|
namedtype.NamedType('signatureAlgorithm', rfc3280.AlgorithmIdentifier()),
|
|
namedtype.NamedType('signature', univ.BitString())
|
|
)
|
|
|
|
|
|
class CertificateChoices(univ.Choice):
|
|
pass
|
|
|
|
|
|
CertificateChoices.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('certificate', rfc3280.Certificate()),
|
|
namedtype.NamedType('extendedCertificate', ExtendedCertificate().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
|
|
namedtype.NamedType('v1AttrCert', AttributeCertificateV1().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
|
|
namedtype.NamedType('v2AttrCert', AttributeCertificateV2().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
|
|
namedtype.NamedType('other', OtherCertificateFormat().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 3)))
|
|
)
|
|
|
|
|
|
class CertificateSet(univ.SetOf):
|
|
pass
|
|
|
|
|
|
CertificateSet.componentType = CertificateChoices()
|
|
|
|
|
|
class MessageAuthenticationCode(univ.OctetString):
|
|
pass
|
|
|
|
|
|
class UnsignedAttributes(univ.SetOf):
|
|
pass
|
|
|
|
|
|
UnsignedAttributes.componentType = Attribute()
|
|
UnsignedAttributes.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
|
|
|
|
|
|
class SignatureValue(univ.OctetString):
|
|
pass
|
|
|
|
|
|
class SignerInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
SignerInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.NamedType('sid', SignerIdentifier()),
|
|
namedtype.NamedType('digestAlgorithm', DigestAlgorithmIdentifier()),
|
|
namedtype.OptionalNamedType('signedAttrs', SignedAttributes().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
|
|
namedtype.NamedType('signatureAlgorithm', SignatureAlgorithmIdentifier()),
|
|
namedtype.NamedType('signature', SignatureValue()),
|
|
namedtype.OptionalNamedType('unsignedAttrs', UnsignedAttributes().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
|
|
)
|
|
|
|
|
|
class SignerInfos(univ.SetOf):
|
|
pass
|
|
|
|
|
|
SignerInfos.componentType = SignerInfo()
|
|
|
|
|
|
class SignedData(univ.Sequence):
|
|
pass
|
|
|
|
|
|
SignedData.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.NamedType('digestAlgorithms', DigestAlgorithmIdentifiers()),
|
|
namedtype.NamedType('encapContentInfo', EncapsulatedContentInfo()),
|
|
namedtype.OptionalNamedType('certificates', CertificateSet().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
|
|
namedtype.OptionalNamedType('crls', RevocationInfoChoices().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
|
|
namedtype.NamedType('signerInfos', SignerInfos())
|
|
)
|
|
|
|
|
|
class MessageAuthenticationCodeAlgorithm(rfc3280.AlgorithmIdentifier):
|
|
pass
|
|
|
|
|
|
class MessageDigest(univ.OctetString):
|
|
pass
|
|
|
|
|
|
class Time(univ.Choice):
|
|
pass
|
|
|
|
|
|
Time.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('utcTime', useful.UTCTime()),
|
|
namedtype.NamedType('generalTime', useful.GeneralizedTime())
|
|
)
|
|
|
|
|
|
class OriginatorInfo(univ.Sequence):
|
|
pass
|
|
|
|
|
|
OriginatorInfo.componentType = namedtype.NamedTypes(
|
|
namedtype.OptionalNamedType('certs', CertificateSet().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
|
|
namedtype.OptionalNamedType('crls', RevocationInfoChoices().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
|
|
)
|
|
|
|
|
|
class AuthAttributes(univ.SetOf):
|
|
pass
|
|
|
|
|
|
AuthAttributes.componentType = Attribute()
|
|
AuthAttributes.subtypeSpec = constraint.ValueSizeConstraint(1, MAX)
|
|
|
|
|
|
class AuthenticatedData(univ.Sequence):
|
|
pass
|
|
|
|
|
|
AuthenticatedData.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.OptionalNamedType('originatorInfo', OriginatorInfo().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
|
|
namedtype.NamedType('recipientInfos', RecipientInfos()),
|
|
namedtype.NamedType('macAlgorithm', MessageAuthenticationCodeAlgorithm()),
|
|
namedtype.OptionalNamedType('digestAlgorithm', DigestAlgorithmIdentifier().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))),
|
|
namedtype.NamedType('encapContentInfo', EncapsulatedContentInfo()),
|
|
namedtype.OptionalNamedType('authAttrs', AuthAttributes().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))),
|
|
namedtype.NamedType('mac', MessageAuthenticationCode()),
|
|
namedtype.OptionalNamedType('unauthAttrs', UnauthAttributes().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3)))
|
|
)
|
|
|
|
id_ct_contentInfo = _buildOid(1, 2, 840, 113549, 1, 9, 16, 1, 6)
|
|
|
|
id_envelopedData = _buildOid(1, 2, 840, 113549, 1, 7, 3)
|
|
|
|
|
|
class EnvelopedData(univ.Sequence):
|
|
pass
|
|
|
|
|
|
EnvelopedData.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('version', CMSVersion()),
|
|
namedtype.OptionalNamedType('originatorInfo', OriginatorInfo().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0))),
|
|
namedtype.NamedType('recipientInfos', RecipientInfos()),
|
|
namedtype.NamedType('encryptedContentInfo', EncryptedContentInfo()),
|
|
namedtype.OptionalNamedType('unprotectedAttrs', UnprotectedAttributes().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1)))
|
|
)
|
|
|
|
|
|
class Countersignature(SignerInfo):
|
|
pass
|
|
|
|
|
|
id_digestedData = _buildOid(1, 2, 840, 113549, 1, 7, 5)
|
|
|
|
id_signingTime = _buildOid(1, 2, 840, 113549, 1, 9, 5)
|
|
|
|
|
|
class ExtendedCertificateOrCertificate(univ.Choice):
|
|
pass
|
|
|
|
|
|
ExtendedCertificateOrCertificate.componentType = namedtype.NamedTypes(
|
|
namedtype.NamedType('certificate', rfc3280.Certificate()),
|
|
namedtype.NamedType('extendedCertificate', ExtendedCertificate().subtype(
|
|
implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 0)))
|
|
)
|
|
|
|
id_encryptedData = _buildOid(1, 2, 840, 113549, 1, 7, 6)
|
|
|
|
id_ct_authData = _buildOid(1, 2, 840, 113549, 1, 9, 16, 1, 2)
|
|
|
|
|
|
class SigningTime(Time):
|
|
pass
|
|
|
|
|
|
id_countersignature = _buildOid(1, 2, 840, 113549, 1, 9, 6)
|