1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
|
from cryptography.hazmat.primitives.asymmetric.ec import (
ECDSA,
SECP256R1,
SECP384R1,
SECP521R1,
EllipticCurve,
EllipticCurveSignatureAlgorithm,
)
from cryptography.hazmat.primitives.hashes import (
SHA1,
SHA256,
SHA384,
SHA512,
HashAlgorithm,
)
from .cose import COSECRV, COSEAlgorithmIdentifier
from .exceptions import UnsupportedAlgorithm, UnsupportedEC2Curve
def is_rsa_pkcs(alg_id: COSEAlgorithmIdentifier) -> bool:
"""Determine if the specified COSE algorithm ID denotes an RSA PKCSv1 public key"""
return alg_id in (
COSEAlgorithmIdentifier.RSASSA_PKCS1_v1_5_SHA_1,
COSEAlgorithmIdentifier.RSASSA_PKCS1_v1_5_SHA_256,
COSEAlgorithmIdentifier.RSASSA_PKCS1_v1_5_SHA_384,
COSEAlgorithmIdentifier.RSASSA_PKCS1_v1_5_SHA_512,
)
def is_rsa_pss(alg_id: COSEAlgorithmIdentifier) -> bool:
"""Determine if the specified COSE algorithm ID denotes an RSA PSS public key"""
return alg_id in (
COSEAlgorithmIdentifier.RSASSA_PSS_SHA_256,
COSEAlgorithmIdentifier.RSASSA_PSS_SHA_384,
COSEAlgorithmIdentifier.RSASSA_PSS_SHA_512,
)
def get_ec2_sig_alg(alg_id: COSEAlgorithmIdentifier) -> EllipticCurveSignatureAlgorithm:
"""Turn an "ECDSA" COSE algorithm identifier into a corresponding signature
algorithm
"""
if alg_id == COSEAlgorithmIdentifier.ECDSA_SHA_256:
return ECDSA(SHA256())
if alg_id == COSEAlgorithmIdentifier.ECDSA_SHA_512:
return ECDSA(SHA512())
raise UnsupportedAlgorithm(f"Unrecognized EC2 signature alg {alg_id}")
def get_ec2_curve(crv_id: COSECRV) -> EllipticCurve:
"""Turn an EC2 COSE crv identifier into a corresponding curve"""
if crv_id == COSECRV.P256:
return SECP256R1()
elif crv_id == COSECRV.P384:
return SECP384R1()
elif crv_id == COSECRV.P521:
return SECP521R1()
raise UnsupportedEC2Curve(f"Unrecognized EC2 curve {crv_id}")
def get_rsa_pkcs1_sig_alg(alg_id: COSEAlgorithmIdentifier) -> HashAlgorithm:
"""Turn an "RSASSA_PKCS1" COSE algorithm identifier into a corresponding signature
algorithm
"""
if alg_id == COSEAlgorithmIdentifier.RSASSA_PKCS1_v1_5_SHA_1:
return SHA1()
if alg_id == COSEAlgorithmIdentifier.RSASSA_PKCS1_v1_5_SHA_256:
return SHA256()
if alg_id == COSEAlgorithmIdentifier.RSASSA_PKCS1_v1_5_SHA_384:
return SHA384()
if alg_id == COSEAlgorithmIdentifier.RSASSA_PKCS1_v1_5_SHA_512:
return SHA512()
raise UnsupportedAlgorithm(f"Unrecognized RSA PKCS1 signature alg {alg_id}")
def get_rsa_pss_sig_alg(alg_id: COSEAlgorithmIdentifier) -> HashAlgorithm:
"""Turn an "RSASSA_PSS" COSE algorithm identifier into a corresponding signature
algorithm
"""
if alg_id == COSEAlgorithmIdentifier.RSASSA_PSS_SHA_256:
return SHA256()
if alg_id == COSEAlgorithmIdentifier.RSASSA_PSS_SHA_384:
return SHA384()
if alg_id == COSEAlgorithmIdentifier.RSASSA_PSS_SHA_512:
return SHA512()
raise UnsupportedAlgorithm(f"Unrecognized RSA PSS signature alg {alg_id}")
|
