# Copyright (c) 2014 The Johns Hopkins University/Applied Physics Laboratory
# All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.

# In case of new content, remove the following line to enable flake8 tests
# flake8: noqa

import copy
import enum
import functools
import six


class OrderedEnum(enum.Enum):
    """
    An ordered variant of the Enum class that allows for comparisons.

    Taken from: https://docs.python.org/3/library/enum.html#orderedenum
    """

    def __ge__(self, other):
        if self.__class__ is other.__class__:
            return self.value >= other.value
        return NotImplemented

    def __gt__(self, other):
        if self.__class__ is other.__class__:
            return self.value > other.value
        return NotImplemented

    def __le__(self, other):
        if self.__class__ is other.__class__:
            return self.value <= other.value
        return NotImplemented

    def __lt__(self, other):
        if self.__class__ is other.__class__:
            return self.value < other.value
        return NotImplemented


class AdjustmentType(enum.Enum):
    # KMIP 2.0
    INCREMENT = 0x00000001
    DECREMENT = 0x00000002
    NEGATE    = 0x00000003


class AlternativeNameType(enum.Enum):
    # KMIP 1.2
    UNINTERPRETED_TEXT_STRING = 0x00000001
    URI                       = 0x00000002
    OBJECT_SERIAL_NUMBER      = 0x00000003
    EMAIL_ADDRESS             = 0x00000004
    DNS_NAME                  = 0x00000005
    X500_DISTINGUISHED_NAME   = 0x00000006
    IP_ADDRESS                = 0x00000007


class AsynchronousIndicator(enum.Enum):
    # KMIP 2.0
    MANDATORY  = 0x00000001
    OPTIONAL   = 0x00000002
    PROHIBITED = 0x00000003


class AttestationType(enum.Enum):
    # KMIP 1.2
    TPM_QUOTE            = 0x00000001
    TCG_INTEGRITY_REPORT = 0x00000002
    SAML_ASSERTION       = 0x00000003


class AttributeType(enum.Enum):
    UNIQUE_IDENTIFIER                = 'Unique Identifier'
    NAME                             = 'Name'
    OBJECT_TYPE                      = 'Object Type'
    CRYPTOGRAPHIC_ALGORITHM          = 'Cryptographic Algorithm'
    CRYPTOGRAPHIC_LENGTH             = 'Cryptographic Length'
    CRYPTOGRAPHIC_PARAMETERS         = 'Cryptographic Parameters'
    CRYPTOGRAPHIC_DOMAIN_PARAMETERS  = 'Cryptographic Domain Parameters'
    CERTIFICATE_TYPE                 = 'Certificate Type'
    CERTIFICATE_LENGTH               = 'Certificate Length'
    X_509_CERTIFICATE_IDENTIFIER     = 'X.509 Certificate Identifier'
    X_509_CERTIFICATE_SUBJECT        = 'X.509 Certificate Subject'
    X_509_CERTIFICATE_ISSUER         = 'X.509 Certificate Issuer'
    CERTIFICATE_IDENTIFIER           = 'Certificate Identifier'
    CERTIFICATE_SUBJECT              = 'Certificate Subject'
    CERTIFICATE_ISSUER               = 'Certificate Issuer'
    DIGITAL_SIGNATURE_ALGORITHM      = 'Digital Signature Algorithm'
    DIGEST                           = 'Digest'
    OPERATION_POLICY_NAME            = 'Operation Policy Name'
    CRYPTOGRAPHIC_USAGE_MASK         = 'Cryptographic Usage Mask'
    LEASE_TIME                       = 'Lease Time'
    USAGE_LIMITS                     = 'Usage Limits'
    STATE                            = 'State'
    INITIAL_DATE                     = 'Initial Date'
    ACTIVATION_DATE                  = 'Activation Date'
    PROCESS_START_DATE               = 'Process Start Date'
    PROTECT_STOP_DATE                = 'Protect Stop Date'
    DEACTIVATION_DATE                = 'Deactivation Date'
    DESTROY_DATE                     = 'Destroy Date'
    COMPROMISE_OCCURRENCE_DATE       = 'Compromise Occurrence Date'
    COMPROMISE_DATE                  = 'Compromise Date'
    REVOCATION_REASON                = 'Revocation Reason'
    ARCHIVE_DATE                     = 'Archive Date'
    OBJECT_GROUP                     = 'Object Group'
    FRESH                            = 'Fresh'
    LINK                             = 'Link'
    APPLICATION_SPECIFIC_INFORMATION = 'Application Specific Information'
    CONTACT_INFORMATION              = 'Contact Information'
    LAST_CHANGE_DATE                 = 'Last Change Date'
    CUSTOM_ATTRIBUTE                 = 'Custom Attribute'
    ALTERNATIVE_NAME                 = 'Alternative Name'
    KEY_VALUE_PRESENT                = 'Key Value Present'
    KEY_VALUE_LOCATION               = 'Key Value Location'
    ORIGINAL_CREATION_DATE           = 'Original Creation Date'
    SENSITIVE                        = "Sensitive"


class AuthenticationSuite(enum.Enum):
    """
    The type of authentication suite used by KMIP clients and servers.

    The authentication suite defines the protocol versions and cipher suites
    that should be used to secure KMIP client/server communications. An
    authentication suite is one of two core components that make up a KMIP
    client/server profile. For more information, see Section 3 of the KMIP
    1.1 profiles document.
    """
    BASIC = 1
    TLS12 = 2


class BatchErrorContinuationOption(enum.Enum):
    # KMIP 1.0
    CONTINUE = 0x00000001
    STOP     = 0x00000002
    UNDO     = 0x00000003


class BlockCipherMode(enum.Enum):
    # KMIP 1.0
    CBC                  = 0x00000001
    ECB                  = 0x00000002
    PCBC                 = 0x00000003
    CFB                  = 0x00000004
    OFB                  = 0x00000005
    CTR                  = 0x00000006
    CMAC                 = 0x00000007
    CCM                  = 0x00000008
    GCM                  = 0x00000009
    CBC_MAC              = 0x0000000A
    XTS                  = 0x0000000B
    AES_KEY_WRAP_PADDING = 0x0000000C
    NIST_KEY_WRAP        = 0x0000000D
    X9_102_AESKW         = 0x0000000E
    X9_102_TDKW          = 0x0000000F
    X9_102_AKW1          = 0x00000010
    X9_102_AKW2          = 0x00000011
    # KMIP 1.4
    AEAD                 = 0x00000012


class CancellationResult(enum.Enum):
    # KMIP 1.0
    CANCELED         = 0x00000001
    UNABLE_TO_CANCEL = 0x00000002
    COMPLETED        = 0x00000003
    FAILED           = 0x00000004
    UNAVAILABLE      = 0x00000005


class CertificateRequestType(enum.Enum):
    # KMIP 1.0
    CRMF   = 0x00000001
    PKCS10 = 0x00000002
    PEM    = 0x00000003
    PGP    = 0x00000004  # Deprecated, designated '(Reserved)' in KMIP 2.0


class CertificateType(enum.Enum):
    # KMIP 1.0
    X_509 = 0x00000001
    PGP   = 0x00000002  # Deprecated as of KMIP 1.2, not deprecated in KMIP 2.0


class ClientRegistrationMethod(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED         = 0x00000001
    SERVER_PREGENERATED = 0x00000002
    SERVER_ON_DEMAND    = 0x00000003
    CLIENT_GENERATED    = 0x00000004
    CLIENT_REGISTERED   = 0x00000005


class ConformanceClause(enum.Enum):
    DISCOVER_VERSIONS                      = 1
    BASELINE                               = 2
    SECRET_DATA                            = 3
    SYMMETRIC_KEY_STORE                    = 4
    SYMMETRIC_KEY_FOUNDRY                  = 5
    ASYMMETRIC_KEY_STORE                   = 6
    ASYMMETRIC_KEY_AND_CERTIFICATE_STORE   = 7
    ASYMMETRIC_KEY_FOUNDRY                 = 8
    CERTIFICATE                            = 9
    ASYMMETRIC_KEY_FOUNDRY_AND_CERTIFICATE = 10
    STORAGE                                = 11


class CredentialType(enum.Enum):
    # KMIP 1.0
    USERNAME_AND_PASSWORD = 0x00000001
    # KMIP 1.1
    DEVICE                = 0x00000002
    # KMIP 1.2
    ATTESTATION           = 0x00000003
    # KMIP 2.0
    ONE_TIME_PASSWORD     = 0x00000004
    HASHED_PASSWORD       = 0x00000005
    TICKET                = 0x00000006


class CryptographicAlgorithm(enum.Enum):
    # KMIP 1.0
    DES               = 0x00000001
    TRIPLE_DES        = 0x00000002  # '3DES' is invalid syntax
    AES               = 0x00000003
    RSA               = 0x00000004
    DSA               = 0x00000005
    ECDSA             = 0x00000006
    HMAC_SHA1         = 0x00000007
    HMAC_SHA224       = 0x00000008
    HMAC_SHA256       = 0x00000009
    HMAC_SHA384       = 0x0000000A
    HMAC_SHA512       = 0x0000000B
    HMAC_MD5          = 0x0000000C
    DH                = 0x0000000D
    ECDH              = 0x0000000E
    ECMQV             = 0x0000000F
    BLOWFISH          = 0x00000010
    CAMELLIA          = 0x00000011
    CAST5             = 0x00000012
    IDEA              = 0x00000013
    MARS              = 0x00000014
    RC2               = 0x00000015
    RC4               = 0x00000016
    RC5               = 0x00000017
    SKIPJACK          = 0x00000018
    TWOFISH           = 0x00000019
    # KMIP 1.2
    EC                = 0x0000001A
    # KMIP 1.3
    ONE_TIME_PAD      = 0x0000001B
    # KMIP 1.4
    CHACHA20          = 0x0000001C
    POLY1305          = 0x0000001D
    CHACHA20_POLY1305 = 0x0000001E
    SHA3_224          = 0x0000001F
    SHA3_256          = 0x00000020
    SHA3_384          = 0x00000021
    SHA3_512          = 0x00000022
    HMAC_SHA3_224     = 0x00000023
    HMAC_SHA3_256     = 0x00000024
    HMAC_SHA3_384     = 0x00000025
    HMAC_SHA3_512     = 0x00000026
    SHAKE_128         = 0x00000027
    SHAKE_256         = 0x00000028
    # KMIP 2.0
    ARIA              = 0x00000029
    SEED              = 0x0000002A
    SM2               = 0x0000002B
    SM3               = 0x0000002C
    SM4               = 0x0000002D
    GOST_R_34_10_2012 = 0x0000002E
    GOST_R_34_11_2012 = 0x0000002F
    GOST_R_34_13_2015 = 0x00000030
    GOST_28147_89     = 0x00000031
    XMSS              = 0x00000032
    SPHINCS_256       = 0x00000033
    MCELIECE          = 0x00000034
    MCELIECE_6960119  = 0x00000035
    MCELIECE_8192128  = 0x00000036
    ED25519           = 0x00000037
    ED448             = 0x00000038


class CryptographicUsageMask(enum.Enum):
    # KMIP 1.0
    SIGN                = 0x00000001
    VERIFY              = 0x00000002
    ENCRYPT             = 0x00000004
    DECRYPT             = 0x00000008
    WRAP_KEY            = 0x00000010
    UNWRAP_KEY          = 0x00000020
    EXPORT              = 0x00000040
    MAC_GENERATE        = 0x00000080
    MAC_VERIFY          = 0x00000100
    DERIVE_KEY          = 0x00000200
    CONTENT_COMMITMENT  = 0x00000400
    KEY_AGREEMENT       = 0x00000800
    CERTIFICATE_SIGN    = 0x00001000
    CRL_SIGN            = 0x00002000
    GENERATE_CRYPTOGRAM = 0x00004000  # Designated '(Reserved)' in KMIP 2.0
    VALIDATE_CRYPTOGRAM = 0x00008000  # Designated '(Reserved)' in KMIP 2.0
    TRANSLATE_ENCRYPT   = 0x00010000  # Designated '(Reserved)' in KMIP 2.0
    TRANSLATE_DECRYPT   = 0x00020000  # Designated '(Reserved)' in KMIP 2.0
    TRANSLATE_WRAP      = 0x00040000  # Designated '(Reserved)' in KMIP 2.0
    TRANSLATE_UNWRAP    = 0x00080000  # Designated '(Reserved)' in KMIP 2.0
    # KMIP 2.0
    AUTHENTICATE        = 0x00100000
    UNRESTRICTED        = 0x00200000
    FPE_ENCRYPT         = 0x00400000
    FPE_DECRYPT         = 0x00800000


class Data(enum.Enum):
    # KMIP 2.0
    DECRYPT             = 0x00000001
    ENCRYPT             = 0x00000002
    HASH                = 0x00000003
    MAC_MAC_DATA        = 0x00000004
    RNG_RETRIEVE        = 0x00000005
    SIGN_SIGNATURE_DATA = 0x00000006
    SIGNATURE_VERIFY    = 0x00000007


class DerivationMethod(enum.Enum):
    # KMIP 1.0
    PBKDF2                  = 0x00000001
    HASH                    = 0x00000002
    HMAC                    = 0x00000003
    ENCRYPT                 = 0x00000004
    NIST800_108_C           = 0x00000005
    NIST800_108_F           = 0x00000006
    NIST800_108_DPI         = 0x00000007
    # KMIP 1.4
    ASYMMETRIC_KEY          = 0x00000008
    # KMIP 2.0
    AWS_SIGNATURE_VERSION_4 = 0x00000009
    HKDF                    = 0x0000000A


class DestroyAction(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED           = 0x00000001
    KEY_MATERIAL_DELETED  = 0x00000002
    KEY_MATERIAL_SHREDDED = 0x00000003
    METADATA_DELETED      = 0x00000004
    METADATA_SHREDDED     = 0x00000005
    DELETED               = 0x00000006
    SHREDDED              = 0x00000007


class DigitalSignatureAlgorithm(enum.Enum):
    # KMIP 1.1
    MD2_WITH_RSA_ENCRYPTION      = 0x00000001
    MD5_WITH_RSA_ENCRYPTION      = 0x00000002
    SHA1_WITH_RSA_ENCRYPTION     = 0x00000003
    SHA224_WITH_RSA_ENCRYPTION   = 0x00000004
    SHA256_WITH_RSA_ENCRYPTION   = 0x00000005
    SHA384_WITH_RSA_ENCRYPTION   = 0x00000006
    SHA512_WITH_RSA_ENCRYPTION   = 0x00000007
    RSASSA_PSS                   = 0x00000008
    DSA_WITH_SHA1                = 0x00000009
    DSA_WITH_SHA224              = 0x0000000A
    DSA_WITH_SHA256              = 0x0000000B
    ECDSA_WITH_SHA1              = 0x0000000C
    ECDSA_WITH_SHA224            = 0x0000000D
    ECDSA_WITH_SHA256            = 0x0000000E
    ECDSA_WITH_SHA384            = 0x0000000F
    ECDSA_WITH_SHA512            = 0x00000010
    # KMIP 1.4
    SHA3_256_WITH_RSA_ENCRYPTION = 0x00000011
    SHA3_384_WITH_RSA_ENCRYPTION = 0x00000012
    SHA3_512_WITH_RSA_ENCRYPTION = 0x00000013


class DRBGAlgorithm(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED = 0x00000001
    DUAL_EC     = 0x00000002
    HASH        = 0x00000003
    HMAC        = 0x00000004
    CTR         = 0x00000005


class EncodingOption(enum.Enum):
    # KMIP 1.1
    NO_ENCODING   = 0x00000001
    TTLV_ENCODING = 0x00000002


class EndpointRole(enum.Enum):
    CLIENT = 0x00000001
    SERVER = 0x00000002


class FIPS186Variation(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED        = 0x00000001
    GP_X_ORIGINAL      = 0x00000002
    GP_X_CHANGE_NOTICE = 0x00000003
    X_ORIGINAL         = 0x00000004
    X_CHANGE_NOTICE    = 0x00000005
    K_ORIGINAL         = 0x00000006
    K_CHANGE_NOTICE    = 0x00000007


class HashingAlgorithm(enum.Enum):
    # KMIP 1.0
    MD2         = 0x00000001
    MD4         = 0x00000002
    MD5         = 0x00000003
    SHA_1       = 0x00000004
    SHA_224     = 0x00000005
    SHA_256     = 0x00000006
    SHA_384     = 0x00000007
    SHA_512     = 0x00000008
    RIPEMD_160  = 0x00000009
    TIGER       = 0x0000000A
    WHIRLPOOL   = 0x0000000B
    # KMIP 1.2
    SHA_512_224 = 0x0000000C
    SHA_512_256 = 0x0000000D
    # KMIP 1.4
    SHA3_224    = 0x0000000E
    SHA3_256    = 0x0000000F
    SHA3_384    = 0x00000010
    SHA3_512    = 0x00000011


class InteropFunction(enum.Enum):
    # KMIP 2.0
    BEGIN = 0x00000001
    END   = 0x00000002
    RESET = 0x00000003


class ItemType(enum.Enum):
    # KMIP 2.0
    STRUCTURE          = 0x00000001
    INTEGER            = 0x00000002
    LONG_INTEGER       = 0x00000003
    BIG_INTEGER        = 0x00000004
    ENUMERATION        = 0x00000005
    BOOLEAN            = 0x00000006
    TEXT_STRING        = 0x00000007
    BYTE_STRING        = 0x00000008
    DATE_TIME          = 0x00000009
    INTERVAL           = 0x0000000A
    DATE_TIME_EXTENDED = 0x0000000B


class KeyCompressionType(enum.Enum):
    # KMIP 1.0
    EC_PUBLIC_KEY_TYPE_UNCOMPRESSED           = 0x00000001
    EC_PUBLIC_KEY_TYPE_X9_62_COMPRESSED_PRIME = 0x00000002
    EC_PUBLIC_KEY_TYPE_X9_62_COMPRESSED_CHAR2 = 0x00000003
    EC_PUBLIC_KEY_TYPE_X9_62_HYBRID           = 0x00000004


class KeyFormatType(enum.Enum):
    # KMIP 1.0
    RAW                           = 0x00000001
    OPAQUE                        = 0x00000002
    PKCS_1                        = 0x00000003
    PKCS_8                        = 0x00000004
    X_509                         = 0x00000005
    EC_PRIVATE_KEY                = 0x00000006
    TRANSPARENT_SYMMETRIC_KEY     = 0x00000007
    TRANSPARENT_DSA_PRIVATE_KEY   = 0x00000008
    TRANSPARENT_DSA_PUBLIC_KEY    = 0x00000009
    TRANSPARENT_RSA_PRIVATE_KEY   = 0x0000000A
    TRANSPARENT_RSA_PUBLIC_KEY    = 0x0000000B
    TRANSPARENT_DH_PRIVATE_KEY    = 0x0000000C
    TRANSPARENT_DH_PUBLIC_KEY     = 0x0000000D
    TRANSPARENT_ECDSA_PRIVATE_KEY = 0x0000000E  # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
    TRANSPARENT_ECDSA_PUBLIC_KEY  = 0x0000000F  # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
    TRANSPARENT_ECDH_PRIVATE_KEY  = 0x00000010  # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
    TRANSPARENT_ECDH_PUBLIC_KEY   = 0x00000011  # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
    TRANSPARENT_ECMQV_PRIVATE_KEY = 0x00000012  # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
    TRANSPARENT_ECMQV_PUBLIC_KEY  = 0x00000013  # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
    # KMIP 1.3
    TRANSPARENT_EC_PRIVATE_KEY    = 0x00000014
    TRANSPARENT_EC_PUBLIC_KEY     = 0x00000015
    # KMIP 1.4
    PKCS_12                       = 0x00000016


class KeyRoleType(enum.Enum):
    # KMIP 1.0
    BDK       = 0x00000001
    CVK       = 0x00000002
    DEK       = 0x00000003
    MKAC      = 0x00000004
    MKSMC     = 0x00000005
    MKSMI     = 0x00000006
    MKDAC     = 0x00000007
    MKDN      = 0x00000008
    MKCP      = 0x00000009
    MKOTH     = 0x0000000A
    KEK       = 0x0000000B
    MAC_16609 = 0x0000000C
    MAC_97971 = 0x0000000D
    MAC_97972 = 0x0000000E
    MAC_97973 = 0x0000000F
    MAC_97974 = 0x00000010
    MAC_97975 = 0x00000011
    ZPK       = 0x00000012
    PVKIBM    = 0x00000013
    PVKPVV    = 0x00000014
    PVKOTH    = 0x00000015
    # KMIP 1.4
    DUKPT     = 0x00000016
    IV        = 0x00000017
    TRKBK     = 0x00000018


class KeyValueLocationType(enum.Enum):
    # KMIP 1.2
    UNINTERPRETED_TEXT_STRING = 0x00000001
    URI                       = 0x00000002


class KeyWrapType(enum.Enum):
    NOT_WRAPPED   = 0x00000001
    AS_REGISTERED = 0x00000002


class KMIPVersion(OrderedEnum):
    KMIP_1_0 = 1.0
    KMIP_1_1 = 1.1
    KMIP_1_2 = 1.2
    KMIP_1_3 = 1.3
    KMIP_1_4 = 1.4
    KMIP_2_0 = 2.0


class LinkType(enum.Enum):
    # KMIP 1.0
    CERTIFICATE_LINK            = 0x00000101
    PUBLIC_KEY_LINK             = 0x00000102
    PRIVATE_KEY_LINK            = 0x00000103
    DERIVATION_BASE_OBJECT_LINK = 0x00000104
    DERIVED_KEY_LINK            = 0x00000105
    REPLACEMENT_OBJECT_LINK     = 0x00000106
    REPLACED_OBJECT_LINK        = 0x00000107
    # KMIP 1.2
    PARENT_LINK                 = 0x00000108
    CHILD_LINK                  = 0x00000109
    PREVIOUS_LINK               = 0x0000010A
    NEXT_LINK                   = 0x0000010B
    # KMIP 1.4
    PKCS12_CERTIFICATE_LINK     = 0x0000010C
    PKCS12_PASSWORD_LINK        = 0x0000010D
    # KMIP 2.0
    WRAPPING_KEY_LINK           = 0x0000010E


class MaskGenerator(enum.Enum):
    # KMIP 1.4
    MGF1 = 0x00000001


class NameType(enum.Enum):
    # KMIP 1.0
    UNINTERPRETED_TEXT_STRING = 0x00000001
    URI                       = 0x00000002


class NISTKeyType(enum.Enum):
    # KMIP 2.0
    PRIVATE_SIGNATURE_KEY                  = 0x00000001
    PUBLIC_SIGNATURE_VERIFICATION_KEY      = 0x00000002
    SYMMETRIC_AUTHENTICATION_KEY           = 0x00000003
    PRIVATE_AUTHENTICATION_KEY             = 0x00000004
    PUBLIC_AUTHENTICATION_KEY              = 0x00000005
    SYMMETRIC_DATA_ENCRYPTION_KEY          = 0x00000006
    SYMMETRIC_KEY_WRAPPING_KEY             = 0x00000007
    SYMMETRIC_RANDOM_NUMBER_GENERATION_KEY = 0x00000008
    SYMMETRIC_MASTER_KEY                   = 0x00000009
    PRIVATE_KEY_TRANSPORT_KEY              = 0x0000000A
    PUBLIC_KEY_TRANSPORT_KEY               = 0x0000000B
    SYMMETRIC_KEY_AGREEMENT_KEY            = 0x0000000C
    PRIVATE_STATIC_KEY_AGREEMENT_KEY       = 0x0000000D
    PUBLIC_STATIC_KEY_AGREEMENT_KEY        = 0x0000000E
    PRIVATE_EPHEMERAL_KEY_AGREEMENT_KEY    = 0x0000000F
    PUBLIC_EPHEMERAL_KEY_AGREEMENT_KEY     = 0x00000010
    SYMMETRIC_AUTHORIZATION_KEY            = 0x00000011
    PRIVATE_AUTHORIZATION_KEY              = 0x00000012
    PUBLIC_AUTHORIZATION_KEY               = 0x00000013


class ObjectGroupMember(enum.Enum):
    # KMIP 1.1
    GROUP_MEMBER_FRESH   = 0x00000001
    GROUP_MEMBER_DEFAULT = 0x00000002


class ObjectType(enum.Enum):
    # KMIP 1.0
    CERTIFICATE         = 0x00000001
    SYMMETRIC_KEY       = 0x00000002
    PUBLIC_KEY          = 0x00000003
    PRIVATE_KEY         = 0x00000004
    SPLIT_KEY           = 0x00000005
    TEMPLATE            = 0x00000006  # Deprecated in KMIP 1.3, designated '(Reserved)' in KMIP 2.0
    SECRET_DATA         = 0x00000007
    OPAQUE_DATA         = 0x00000008
    # KMIP 1.2
    PGP_KEY             = 0x00000009
    # KMIP 2.0
    CERTIFICATE_REQUEST = 0x0000000A


class OpaqueDataType(enum.Enum):
    NONE = 0x80000000 # Not defined by the standard, but we need something.
                      # The standard does say that values starting 0x8xxxxxx
                      # are considered extensions


class Operation(enum.Enum):
    # KMIP 1.0
    CREATE               = 0x00000001
    CREATE_KEY_PAIR      = 0x00000002
    REGISTER             = 0x00000003
    REKEY                = 0x00000004
    DERIVE_KEY           = 0x00000005
    CERTIFY              = 0x00000006
    RECERTIFY            = 0x00000007
    LOCATE               = 0x00000008
    CHECK                = 0x00000009
    GET                  = 0x0000000A
    GET_ATTRIBUTES       = 0x0000000B
    GET_ATTRIBUTE_LIST   = 0x0000000C
    ADD_ATTRIBUTE        = 0x0000000D
    MODIFY_ATTRIBUTE     = 0x0000000E
    DELETE_ATTRIBUTE     = 0x0000000F
    OBTAIN_LEASE         = 0x00000010
    GET_USAGE_ALLOCATION = 0x00000011
    ACTIVATE             = 0x00000012
    REVOKE               = 0x00000013
    DESTROY              = 0x00000014
    ARCHIVE              = 0x00000015
    RECOVER              = 0x00000016
    VALIDATE             = 0x00000017
    QUERY                = 0x00000018
    CANCEL               = 0x00000019
    POLL                 = 0x0000001A
    NOTIFY               = 0x0000001B
    PUT                  = 0x0000001C
    # KMIP 1.1
    REKEY_KEY_PAIR       = 0x0000001D
    DISCOVER_VERSIONS    = 0x0000001E
    # KMIP 1.2
    ENCRYPT              = 0x0000001F
    DECRYPT              = 0x00000020
    SIGN                 = 0x00000021
    SIGNATURE_VERIFY     = 0x00000022
    MAC                  = 0x00000023
    MAC_VERIFY           = 0x00000024
    RNG_RETRIEVE         = 0x00000025
    RNG_SEED             = 0x00000026
    HASH                 = 0x00000027
    CREATE_SPLIT_KEY     = 0x00000028
    JOIN_SPLIT_KEY       = 0x00000029
    # KMIP 1.4
    IMPORT               = 0x0000002A
    EXPORT               = 0x0000002B
    # KMIP 2.0
    LOG                  = 0x0000002C
    LOGIN                = 0x0000002D
    LOGOUT               = 0x0000002E
    DELEGATED_LOGIN      = 0x0000002F
    ADJUST_ATTRIBUTE     = 0x00000030
    SET_ATTRIBUTE        = 0x00000031
    SET_ENDPOINT_ROLE    = 0x00000032
    PKCS_11              = 0x00000033
    INTEROP              = 0x00000034
    REPROVISION          = 0x00000035


class PaddingMethod(enum.Enum):
    # KMIP 1.0
    NONE      = 0x00000001
    OAEP      = 0x00000002
    PKCS5     = 0x00000003
    SSL3      = 0x00000004
    ZEROS     = 0x00000005
    ANSI_X923 = 0x00000006
    ISO_10126 = 0x00000007
    PKCS1v15  = 0x00000008
    X931      = 0x00000009
    PSS       = 0x0000000A


class PKCS11Function(enum.Enum):
    # KMIP 2.0
    #
    # These values are the 1-based offset count of the function in the
    # CK_FUNCTION_LIST_3_0 structure as specified in the OASIS PKCS#11
    # Cryptographic Token Interface Base Specification Version 3.0 document.
    #
    # The above document is not currently available, so this set of
    # enumerations is intentionally left empty as a placeholder. It should
    # be filled in in a future update.
    PLACEHOLDER = 'Do not use this.'


class PKCS11ReturnCode(enum.Enum):
    # KMIP 2.0
    #
    # These values are specified in the CK_RV values in the OASIS PKCS#11
    # Cryptographic Token Interface Base Specification Version 3.0 document.
    #
    # The above document is not currently available, so this set of
    # enumerations is intentionally left empty as a placeholder. It should
    # be filled in in a future update.
    PLACEHOLDER = 'Do not use this.'


class Policy(enum.Enum):
    ALLOW_ALL    = "Allow All"
    ALLOW_OWNER  = "Allow Owner"
    DISALLOW_ALL = "Disallow All"


class ProfileName(enum.Enum):
    # KMIP 1.3
    BASELINE_SERVER_BASIC_KMIPv12                           = 0x00000001
    BASELINE_SERVER_TLSv12_KMIPv12                          = 0x00000002
    BASELINE_CLIENT_BASIC_KMIPv12                           = 0x00000003
    BASELINE_CLIENT_TLSv12_KMIPv12                          = 0x00000004
    COMPLETE_SERVER_BASIC_KMIPv12                           = 0x00000005
    COMPLETE_SERVER_TLSv12_KMIPv12                          = 0x00000006
    TAPE_LIBRARY_CLIENT_KMIPv10                             = 0x00000007
    TAPE_LIBRARY_CLIENT_KMIPv11                             = 0x00000008
    TAPE_LIBRARY_CLIENT_KMIPv12                             = 0x00000009
    TAPE_LIBRARY_SERVER_KMIPv10                             = 0x0000000A
    TAPE_LIBRARY_SERVER_KMIPv11                             = 0x0000000B
    TAPE_LIBRARY_SERVER_KMIPv12                             = 0x0000000C
    SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv10                  = 0x0000000D
    SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv11                  = 0x0000000E
    SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv12                  = 0x0000000F
    SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv10                  = 0x00000010
    SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv11                  = 0x00000011
    SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv12                  = 0x00000012
    ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv10                 = 0x00000013
    ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv11                 = 0x00000014
    ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv12                 = 0x00000015
    ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv10                 = 0x00000016
    ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv11                 = 0x00000017
    ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv12                 = 0x00000018
    BASIC_CRYPTOGRAPHIC_CLIENT_KMIPv12                      = 0x00000019
    BASIC_CRYPTOGRAPHIC_SERVER_KMIPv12                      = 0x0000001A
    ADVANCED_CRYPTOGRAPHIC_CLIENT_KMIPv12                   = 0x0000001B
    ADVANCED_CRYPTOGRAPHIC_SERVER_KMIPv12                   = 0x0000001C
    RNG_CRYPTOGRAPHIC_CLIENT_KMIPv12                        = 0x0000001D
    RNG_CRYPTOGRAPHIC_SERVER_KMIPv12                        = 0x0000001E
    BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv10              = 0x0000001F
    INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv10       = 0x00000020
    ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv10           = 0x00000021
    BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv11              = 0x00000022
    INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv11       = 0x00000023
    ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv11           = 0x00000024
    BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv12              = 0x00000025
    INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv12       = 0x00000026
    ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv12           = 0x00000027
    SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv10                    = 0x00000028
    SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv11                    = 0x00000029
    SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv12                    = 0x0000002A
    OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv10              = 0x0000002B
    OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv11              = 0x0000002C
    OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv12              = 0x0000002D
    OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv10              = 0x0000002E
    OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv11              = 0x0000002F
    OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv12              = 0x00000030
    SUITE_B_MINLOS_128_CLIENT_KMIPv10                       = 0x00000031
    SUITE_B_MINLOS_128_CLIENT_KMIPv11                       = 0x00000032
    SUITE_B_MINLOS_128_CLIENT_KMIPv12                       = 0x00000033
    SUITE_B_MINLOS_128_SERVER_KMIPv10                       = 0x00000034
    SUITE_B_MINLOS_128_SERVER_KMIPv11                       = 0x00000035
    SUITE_B_MINLOS_128_SERVER_KMIPv12                       = 0x00000036
    SUITE_B_MINLOS_192_CLIENT_KMIPv10                       = 0x00000037
    SUITE_B_MINLOS_192_CLIENT_KMIPv11                       = 0x00000038
    SUITE_B_MINLOS_192_CLIENT_KMIPv12                       = 0x00000039
    SUITE_B_MINLOS_192_SERVER_KMIPv10                       = 0x0000003A
    SUITE_B_MINLOS_192_SERVER_KMIPv11                       = 0x0000003B
    SUITE_B_MINLOS_192_SERVER_KMIPv12                       = 0x0000003C
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv10 = 0x0000003D
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv11 = 0x0000003E
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv12 = 0x0000003F
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv10 = 0x00000040
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv11 = 0x00000041
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv12 = 0x00000042
    HTTPS_CLIENT_KMIPv10                                    = 0x00000043
    HTTPS_CLIENT_KMIPv11                                    = 0x00000044
    HTTPS_CLIENT_KMIPv12                                    = 0x00000045
    HTTPS_SERVER_KMIPv10                                    = 0x00000046
    HTTPS_SERVER_KMIPv11                                    = 0x00000047
    HTTPS_SERVER_KMIPv12                                    = 0x00000048
    JSON_CLIENT_KMIPv10                                     = 0x00000049
    JSON_CLIENT_KMIPv11                                     = 0x0000004A
    JSON_CLIENT_KMIPv12                                     = 0x0000004B
    JSON_SERVER_KMIPv10                                     = 0x0000004C
    JSON_SERVER_KMIPv11                                     = 0x0000004D
    JSON_SERVER_KMIPv12                                     = 0x0000004E
    XML_CLIENT_KMIPv10                                      = 0x0000004F
    XML_CLIENT_KMIPv11                                      = 0x00000050
    XML_CLIENT_KMIPv12                                      = 0x00000051
    XML_SERVER_KMIPv10                                      = 0x00000052
    XML_SERVER_KMIPv11                                      = 0x00000053
    XML_SERVER_KMIPv12                                      = 0x00000054
    BASELINE_SERVER_BASIC_KMIPv13                           = 0x00000055
    BASELINE_SERVER_TLSv12_KMIPv13                          = 0x00000056
    BASELINE_CLIENT_BASIC_KMIPv13                           = 0x00000057
    BASELINE_CLIENT_TLSv12_KMIPv13                          = 0x00000058
    COMPLETE_SERVER_BASIC_KMIPv13                           = 0x00000059
    COMPLETE_SERVER_TLSv12_KMIPv13                          = 0x0000005A
    TAPE_LIBRARY_CLIENT_KMIPv13                             = 0x0000005B
    TAPE_LIBRARY_SERVER_KMIPv13                             = 0x0000005C
    SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv13                  = 0x0000005D
    SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv13                  = 0x0000005E
    ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv13                 = 0x0000005F
    ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv13                 = 0x00000060
    BASIC_CRYPTOGRAPHIC_CLIENT_KMIPv13                      = 0x00000061
    BASIC_CRYPTOGRAPHIC_SERVER_KMIPv13                      = 0x00000062
    ADVANCED_CRYPTOGRAPHIC_CLIENT_KMIPv13                   = 0x00000063
    ADVANCED_CRYPTOGRAPHIC_SERVER_KMIPv13                   = 0x00000064
    RNG_CRYPTOGRAPHIC_CLIENT_KMIPv13                        = 0x00000065
    RNG_CRYPTOGRAPHIC_SERVER_KMIPv13                        = 0x00000066
    BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv13              = 0x00000067
    INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv13       = 0x00000068
    ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv13           = 0x00000069
    SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv13                    = 0x0000006A
    OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv13              = 0x0000006B
    OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv13              = 0x0000006C
    SUITE_B_MINLOS_128_CLIENT_KMIPv13                       = 0x0000006D
    SUITE_B_MINLOS_128_SERVER_KMIPv13                       = 0x0000006E
    SUITE_B_MINLOS_192_CLIENT_KMIPv13                       = 0x0000006F
    SUITE_B_MINLOS_192_SERVER_KMIPv13                       = 0x00000070
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv13 = 0x00000071
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv13 = 0x00000072
    HTTPS_CLIENT_KMIPv13                                    = 0x00000073
    HTTPS_SERVER_KMIPv13                                    = 0x00000074
    JSON_CLIENT_KMIPv13                                     = 0x00000075
    JSON_SERVER_KMIPv13                                     = 0x00000076
    XML_CLIENT_KMIPv13                                      = 0x00000077
    XML_SERVER_KMIPv13                                      = 0x00000078
    # KMIP 1.4
    BASELINE_SERVER_BASIC_KMIPv14                           = 0x00000079
    BASELINE_SERVER_TLSv12_KMIPv14                          = 0x0000007A
    BASELINE_CLIENT_BASIC_KMIPv14                           = 0x0000007B
    BASELINE_CLIENT_TLSv12_KMIPv14                          = 0x0000007C
    COMPLETE_SERVER_BASIC_KMIPv14                           = 0x0000007D
    COMPLETE_SERVER_TLSv12_KMIPv14                          = 0x0000007E
    TAPE_LIBRARY_CLIENT_KMIPv14                             = 0x0000007F
    TAPE_LIBRARY_SERVER_KMIPv14                             = 0x00000080
    SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv14                  = 0x00000081
    SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv14                  = 0x00000082
    ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv14                 = 0x00000083
    ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv14                 = 0x00000084
    BASIC_CRYPTOGRAPHIC_CLIENT_KMIPv14                      = 0x00000085
    BASIC_CRYPTOGRAPHIC_SERVER_KMIPv14                      = 0x00000086
    ADVANCED_CRYPTOGRAPHIC_CLIENT_KMIPv14                   = 0x00000087
    ADVANCED_CRYPTOGRAPHIC_SERVER_KMIPv14                   = 0x00000088
    RNG_CRYPTOGRAPHIC_CLIENT_KMIPv14                        = 0x00000089
    RNG_CRYPTOGRAPHIC_SERVER_KMIPv14                        = 0x0000008A
    BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv14              = 0x0000008B
    INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv14       = 0x0000008C
    ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv14           = 0x0000008D
    SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv14                    = 0x0000008E
    OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv14              = 0x0000008F
    OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv14              = 0x00000090
    SUITE_B_MINLOS_128_CLIENT_KMIPv14                       = 0x00000091
    SUITE_B_MINLOS_128_SERVER_KMIPv14                       = 0x00000092
    SUITE_B_MINLOS_192_CLIENT_KMIPv14                       = 0x00000093
    SUITE_B_MINLOS_192_SERVER_KMIPv14                       = 0x00000094
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv14 = 0x00000095
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv14 = 0x00000096
    HTTPS_CLIENT_KMIPv14                                    = 0x00000097
    HTTPS_SERVER_KMIPv14                                    = 0x00000098
    JSON_CLIENT_KMIPv14                                     = 0x00000099
    JSON_SERVER_KMIPv14                                     = 0x0000009A
    XML_CLIENT_KMIPv14                                      = 0x0000009B
    XML_SERVER_KMIPv14                                      = 0x0000009C
    # KMIP 2.0 - All of the above are now designated '(Reserved)' in KMIP 2.0
    COMPLETE_SERVER_BASIC                                   = 0x00000104
    COMPLETE_SERVER_TLSv12                                  = 0x00000105
    TAPE_LIBRARY_CLIENT                                     = 0x00000106
    TAPE_LIBRARY_SERVER                                     = 0x00000107
    SYMMETRIC_KEY_LIFECYCLE_CLIENT                          = 0x00000108
    SYMMETRIC_KEY_LIFECYCLE_SERVER                          = 0x00000109
    ASYMMETRIC_KEY_LIFECYCLE_CLIENT                         = 0x0000010A
    ASYMMETRIC_KEY_LIFECYCLE_SERVER                         = 0x0000010B
    BASIC_CRYPTOGRAPHIC_CLIENT                              = 0x0000010C
    BASIC_CRYPTOGRAPHIC_SERVER                              = 0x0000010D
    ADVANCED_CRYPTOGRAPHIC_CLIENT                           = 0x0000010E
    ADVANCED_CRYPTOGRAPHIC_SERVER                           = 0x0000010F
    RNG_CRYPTOGRAPHIC_CLIENT                                = 0x00000110
    RNG_CRYPTOGRAPHIC_SERVER                                = 0x00000111
    BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT                      = 0x00000112
    INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT               = 0x00000113
    ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT                   = 0x00000114
    SYMMETRIC_KEY_FOUNDRY_SERVER                            = 0x00000115
    OPAQUE_MANAGED_OBJECT_STORE_CLIENT                      = 0x00000116
    OPAQUE_MANAGED_OBJECT_STORE_SERVER                      = 0x00000117
    SUITE_B_MINLOS_128_CLIENT                               = 0x00000118
    SUITE_B_MINLOS_128_SERVER                               = 0x00000119
    SUITE_B_MINLOS_192_CLIENT                               = 0x0000011A
    SUITE_B_MINLOS_192_SERVER                               = 0x0000011B
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT         = 0x0000011C
    STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER         = 0x0000011D
    HTTPS_CLIENT                                            = 0x0000011E
    HTTPS_SERVER                                            = 0x0000011F
    JSON_CLIENT                                             = 0x00000120
    JSON_SERVER                                             = 0x00000121
    XML_CLIENT                                              = 0x00000122
    XML_SERVER                                              = 0x00000123
    AES_XTS_CLIENT                                          = 0x00000124
    AES_XTS_SERVER                                          = 0x00000125
    QUANTUM_SAFE_CLIENT                                     = 0x00000126
    QUANTUM_SAFE_SERVER                                     = 0x00000127
    PKCS11_CLIENT                                           = 0x00000128
    PKCS11_SERVER                                           = 0x00000129
    BASELINE_CLIENT                                         = 0x0000012A
    BASELINE_SERVER                                         = 0x0000012B
    COMPLETE_SERVER                                         = 0x0000012C


class ProtectionLevel(enum.Enum):
    # KMIP 2.0
    HIGH = 0x00000001
    LOW  = 0x00000002


class ProtectionStorageMask(enum.Enum):
    # KMIP 2.0
    SOFTWARE          = 0x00000001
    HARDWARE          = 0x00000002
    ON_PROCESSOR      = 0x00000004
    ON_SYSTEM         = 0x00000008
    OFF_SYSTEM        = 0x00000010
    HYPERVISOR        = 0x00000020
    OPERATING_SYSTEM  = 0x00000040
    CONTAINER         = 0x00000080
    ON_PREMISES       = 0x00000100
    OFF_PREMISES      = 0x00000200
    SELF_MANAGED      = 0x00000400
    OUTSOURCED        = 0x00000800
    VALIDATED         = 0x00001000
    SAME_JURISDICTION = 0x00002000


class PutFunction(enum.Enum):
    # KMIP 1.0
    NEW     = 0x00000001
    REPLACE = 0x00000002


class QueryFunction(enum.Enum):
    # KMIP 1.0
    QUERY_OPERATIONS                  = 0x00000001
    QUERY_OBJECTS                     = 0x00000002
    QUERY_SERVER_INFORMATION          = 0x00000003
    QUERY_APPLICATION_NAMESPACES      = 0x00000004
    # KMIP 1.1
    QUERY_EXTENSION_LIST              = 0x00000005
    QUERY_EXTENSION_MAP               = 0x00000006
    # KMIP 1.2
    QUERY_ATTESTATION_TYPES           = 0x00000007
    # KMIP 1.3
    QUERY_RNGS                        = 0x00000008
    QUERY_VALIDATIONS                 = 0x00000009
    QUERY_PROFILES                    = 0x0000000A
    QUERY_CAPABILITIES                = 0x0000000B
    QUERY_CLIENT_REGISTRATION_METHODS = 0x0000000C
    # KMIP 2.0
    QUERY_DEFAULTS_INFORMATION        = 0x0000000D
    QUERY_STORAGE_PROTECTION_MASKS    = 0x0000000E


class RecommendedCurve(enum.Enum):
    # KMIP 1.0
    P_192            = 0x00000001
    K_163            = 0x00000002
    B_163            = 0x00000003
    P_224            = 0x00000004
    K_233            = 0x00000005
    B_233            = 0x00000006
    P_256            = 0x00000007
    K_283            = 0x00000008
    B_283            = 0x00000009
    P_384            = 0x0000000A
    K_409            = 0x0000000B
    B_409            = 0x0000000C
    P_521            = 0x0000000D
    K_571            = 0x0000000E
    B_571            = 0x0000000F
    # KMIP 1.2
    SECP112R1        = 0x00000010
    SECP112R2        = 0x00000011
    SECP128R1        = 0x00000012
    SECP128R2        = 0x00000013
    SECP160K1        = 0x00000014
    SECP160R1        = 0x00000015
    SECP160R2        = 0x00000016
    SECP191K1        = 0x00000017
    SECP224K1        = 0x00000018
    SECP256K1        = 0x00000019
    SECT113R1        = 0x0000001A
    SECT113R2        = 0x0000001B
    SECT131R1        = 0x0000001C
    SECT131R2        = 0x0000001D
    SECT163R1        = 0x0000001E
    SECT193R1        = 0x0000001F
    SECT193R2        = 0x00000020
    SECT239K1        = 0x00000021
    ANSIX9P192V2     = 0x00000022
    ANSIX9P192V3     = 0x00000023
    ANSIX9P239V1     = 0x00000024
    ANSIX9P239V2     = 0x00000025
    ANSIX9P239V3     = 0x00000026
    ANSIX9C2PNB163V1 = 0x00000027
    ANSIX9C2PNB163V2 = 0x00000028
    ANSIX9C2PNB163V3 = 0x00000029
    ANSIX9C2PNB176V1 = 0x0000002A
    ANSIX9C2TNB191V1 = 0x0000002B
    ANSIX9C2TNB191V2 = 0x0000002C
    ANSIX9C2TNB191V3 = 0x0000002D
    ANSIX9C2PNB208W1 = 0x0000002E
    ANSIX9C2TNB239V1 = 0x0000002F
    ANSIX9C2TNB239V2 = 0x00000030
    ANSIX9C2TNB239V3 = 0x00000031
    ANSIX9C2PNB272W1 = 0x00000032
    ANSIX9C2PNB304W1 = 0x00000033
    ANSIX9C2TNB359V1 = 0x00000034
    ANSIX9C2PNB368W1 = 0x00000035
    ANSIX9C2TNB431R1 = 0x00000036
    BRAINPOOLP160R1  = 0x00000037
    BRAINPOOLP160T1  = 0x00000038
    BRAINPOOLP192R1  = 0x00000039
    BRAINPOOLP192T1  = 0x0000003A
    BRAINPOOLP224R1  = 0x0000003B
    BRAINPOOLP224T1  = 0x0000003C
    BRAINPOOLP256R1  = 0x0000003D
    BRAINPOOLP256T1  = 0x0000003E
    BRAINPOOLP320R1  = 0x0000003F
    BRAINPOOLP320T1  = 0x00000040
    BRAINPOOLP384R1  = 0x00000041
    BRAINPOOLP384T1  = 0x00000042
    BRAINPOOLP512R1  = 0x00000043
    BRAINPOOLP512T1  = 0x00000044
    # KMIP 2.0
    CURVE25519       = 0x00000045
    CURVE448         = 0x00000046


class ResultReason(enum.Enum):
    # KMIP 1.0
    ITEM_NOT_FOUND                         = 0x00000001
    RESPONSE_TOO_LARGE                     = 0x00000002
    AUTHENTICATION_NOT_SUCCESSFUL          = 0x00000003
    INVALID_MESSAGE                        = 0x00000004
    OPERATION_NOT_SUPPORTED                = 0x00000005
    MISSING_DATA                           = 0x00000006
    INVALID_FIELD                          = 0x00000007
    FEATURE_NOT_SUPPORTED                  = 0x00000008
    OPERATION_CANCELED_BY_REQUESTER        = 0x00000009
    CRYPTOGRAPHIC_FAILURE                  = 0x0000000A
    ILLEGAL_OPERATION                      = 0x0000000B
    PERMISSION_DENIED                      = 0x0000000C
    OBJECT_ARCHIVED                        = 0x0000000D
    INDEX_OUT_OF_BOUNDS                    = 0x0000000E
    APPLICATION_NAMESPACE_NOT_SUPPORTED    = 0x0000000F
    KEY_FORMAT_TYPE_NOT_SUPPORTED          = 0x00000010
    KEY_COMPRESSION_TYPE_NOT_SUPPORTED     = 0x00000011
    ENCODING_OPTION_ERROR                  = 0x00000012
    KEY_VALUE_NOT_PRESENT                  = 0x00000013
    ATTESTATION_REQUIRED                   = 0x00000014
    ATTESTATION_FAILED                     = 0x00000015
    SENSITIVE                              = 0x00000016
    NOT_EXTRACTABLE                        = 0x00000017
    OBJECT_ALREADY_EXISTS                  = 0x00000018
    GENERAL_FAILURE                        = 0x00000100
    # KMIP 2.0
    INVALID_TICKET                         = 0x00000019
    USAGE_LIMIT_EXCEEDED                   = 0x0000001A
    NUMERIC_RANGE                          = 0x0000001B
    INVALID_DATA_TYPE                      = 0x0000001C
    READ_ONLY_ATTRIBUTE                    = 0x0000001D
    MULTI_VALUED_ATTRIBUTE                 = 0x0000001E
    UNSUPPORTED_ATTRIBUTE                  = 0x0000001F
    ATTRIBUTE_INSTANCE_NOT_FOUND           = 0x00000020
    ATTRIBUTE_NOT_FOUND                    = 0x00000021
    ATTRIBUTE_READ_ONLY                    = 0x00000022
    ATTRIBUTE_SINGLE_VALUED                = 0x00000023
    BAD_CRYPTOGRAPHIC_PARAMETERS           = 0x00000024
    BAD_PASSWORD                           = 0x00000025
    CODEC_ERROR                            = 0x00000026
                                           # 0x00000027 is designated '(Reserved)' in KMIP 2.0
    ILLEGAL_OBJECT_TYPE                    = 0x00000028
    INCOMPATIBLE_CRYPTOGRAPHIC_USAGE_MASK  = 0x00000029
    INTERNAL_SERVER_ERROR                  = 0x0000002A
    INVALID_ASYNCHRONOUS_CORRELATION_VALUE = 0x0000002B
    INVALID_ATTRIBUTE                      = 0x0000002C
    INVALID_ATTRIBUTE_VALUE                = 0x0000002D
    INVALID_CORRELATION_VALUE              = 0x0000002E
    INVALID_CSR                            = 0x0000002F
    INVALID_OBJECT_TYPE                    = 0x00000030
                                           # 0x00000031 is designated '(Reserved)' in KMIP 2.0
    KEY_WRAP_TYPE_NOT_SUPPORTED            = 0x00000032
                                           # 0x00000033 is designated '(Reserved)' in KMIP 2.0
    MISSING_INITIALIZATION_VECTOR          = 0x00000034
    NON_UNIQUE_NAME_ATTRIBUTE              = 0x00000035
    OBJECT_DESTROYED                       = 0x00000036
    OBJECT_NOT_FOUND                       = 0x00000037
                                           # 0x00000038 is unassigned
    NOT_AUTHORISED                         = 0x00000039
    SERVER_LIMIT_EXCEEDED                  = 0x0000003A
    UNKNOWN_ENUMERATION                    = 0x0000003B
    UNKNOWN_MESSAGE_EXTENSION              = 0x0000003C
    UNKNOWN_TAG                            = 0x0000003D
    UNSUPPORTED_CRYPTOGRAPHIC_PARAMETERS   = 0x0000003E
    UNSUPPORTED_PROTOCOL_VERSION           = 0x0000003F
    WRAPPING_OBJECT_ARCHIVED               = 0x00000040
    WRAPPING_OBJECT_DESTROYED              = 0x00000041
    WRAPPING_OBJECT_NOT_FOUND              = 0x00000042
    WRONG_KEY_LIFECYCLE_STATE              = 0x00000043
    PROTECTION_STORAGE_UNAVAILABLE         = 0x00000044
    PKCS11_CODEC_ERROR                     = 0x00000045
    PKCS11_INVALID_FUNCTION                = 0x00000046
    PKCS11_INVALID_INTERFACE               = 0x00000047


class ResultStatus(enum.Enum):
    # KMIP 1.0
    SUCCESS           = 0x00000000
    OPERATION_FAILED  = 0x00000001
    OPERATION_PENDING = 0x00000002
    OPERATION_UNDONE  = 0x00000003


class RevocationReasonCode(enum.Enum):
    # KMIP 1.0
    UNSPECIFIED            = 0x00000001
    KEY_COMPROMISE         = 0x00000002
    CA_COMPROMISE          = 0x00000003
    AFFILIATION_CHANGED    = 0x00000004
    SUPERSEDED             = 0x00000005
    CESSATION_OF_OPERATION = 0x00000006
    PRIVILEGE_WITHDRAWN    = 0x00000007


class RNGAlgorithm(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED = 0x00000001
    FIPS186_2   = 0x00000002
    DRBG        = 0x00000003
    NRBG        = 0x00000004
    ANSI_X931   = 0x00000005
    ANSI_X962   = 0x00000006


class RNGMode(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED              = 0x00000001
    SHARED_INSTANTIATION     = 0x00000002
    NON_SHARED_INSTANTIATION = 0x00000003


class SecretDataType(enum.Enum):
    # KMIP 1.0
    PASSWORD = 0x00000001
    SEED     = 0x00000002


class ShreddingAlgorithm(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED   = 0x00000001
    CRYPTOGRAPHIC = 0x00000002
    UNSUPPORTED   = 0x00000003


class SplitKeyMethod(enum.Enum):
    # KMIP 1.0
    XOR                            = 0x00000001
    POLYNOMIAL_SHARING_GF_2_16     = 0x00000002
    POLYNOMIAL_SHARING_PRIME_FIELD = 0x00000003
    # KMIP 1.2
    POLYNOMIAL_SHARING_GF_2_8      = 0x00000004


class State(enum.Enum):
    # KMIP 1.0
    PRE_ACTIVE            = 0x00000001
    ACTIVE                = 0x00000002
    DEACTIVATED           = 0x00000003
    COMPROMISED           = 0x00000004
    DESTROYED             = 0x00000005
    DESTROYED_COMPROMISED = 0x00000006


class StorageStatusMask(enum.Enum):
    # KMIP 1.0
    ONLINE_STORAGE    = 0x00000001
    ARCHIVAL_STORAGE  = 0x00000002
    # KMIP 2.0
    DESTROYED_STORAGE = 0x00000004


class Tags(enum.Enum):
    DEFAULT                                  = 0x420000  # Custom PyKMIP tag used as the global default
    # KMIP 1.0
    ACTIVATION_DATE                          = 0x420001
    APPLICATION_DATA                         = 0x420002
    APPLICATION_NAMESPACE                    = 0x420003
    APPLICATION_SPECIFIC_INFORMATION         = 0x420004
    ARCHIVE_DATE                             = 0x420005
    ASYNCHRONOUS_CORRELATION_VALUE           = 0x420006
    ASYNCHRONOUS_INDICATOR                   = 0x420007
    ATTRIBUTE                                = 0x420008
    ATTRIBUTE_INDEX                          = 0x420009  # Designated '(Reserved)' in KMIP 2.0
    ATTRIBUTE_NAME                           = 0x42000A
    ATTRIBUTE_VALUE                          = 0x42000B
    AUTHENTICATION                           = 0x42000C
    BATCH_COUNT                              = 0x42000D
    BATCH_ERROR_CONTINUATION_OPTION          = 0x42000E
    BATCH_ITEM                               = 0x42000F
    BATCH_ORDER_OPTION                       = 0x420010
    BLOCK_CIPHER_MODE                        = 0x420011
    CANCELLATION_RESULT                      = 0x420012
    CERTIFICATE                              = 0x420013
    CERTIFICATE_IDENTIFIER                   = 0x420014  # Deprecated, designated '(Reserved)' in KMIP 2.0
    CERTIFICATE_ISSUER                       = 0x420015  # Deprecated, designated '(Reserved)' in KMIP 2.0
    CERTIFICATE_ISSUER_ALTERNATIVE_NAME      = 0x420016  # Deprecated, designated '(Reserved)' in KMIP 2.0
    CERTIFICATE_ISSUER_DISTINGUISHED_NAME    = 0x420017  # Deprecated, designated '(Reserved)' in KMIP 2.0
    CERTIFICATE_REQUEST                      = 0x420018
    CERTIFICATE_REQUEST_TYPE                 = 0x420019
    CERTIFICATE_SUBJECT                      = 0x42001A  # Deprecated, designated '(Reserved)' in KMIP 2.0
    CERTIFICATE_SUBJECT_ALTERNATIVE_NAME     = 0x42001B  # Deprecated, designated '(Reserved)' in KMIP 2.0
    CERTIFICATE_SUBJECT_DISTINGUISHED_NAME   = 0x42001C  # Deprecated, designated '(Reserved)' in KMIP 2.0
    CERTIFICATE_TYPE                         = 0x42001D
    CERTIFICATE_VALUE                        = 0x42001E
    COMMON_TEMPLATE_ATTRIBUTE                = 0x42001F  # Designated '(Reserved)' in KMIP 2.0
    COMPROMISE_DATE                          = 0x420020
    COMPROMISE_OCCURRENCE_DATE               = 0x420021
    CONTACT_INFORMATION                      = 0x420022
    CREDENTIAL                               = 0x420023
    CREDENTIAL_TYPE                          = 0x420024
    CREDENTIAL_VALUE                         = 0x420025
    CRITICALITY_INDICATOR                    = 0x420026
    CRT_COEFFICIENT                          = 0x420027
    CRYPTOGRAPHIC_ALGORITHM                  = 0x420028
    CRYPTOGRAPHIC_DOMAIN_PARAMETERS          = 0x420029
    CRYPTOGRAPHIC_LENGTH                     = 0x42002A
    CRYPTOGRAPHIC_PARAMETERS                 = 0x42002B
    CRYPTOGRAPHIC_USAGE_MASK                 = 0x42002C
    CUSTOM_ATTRIBUTE                         = 0x42002D  # Designated '(Reserved)' in KMIP 2.0
    D                                        = 0x42002E
    DEACTIVATION_DATE                        = 0x42002F
    DERIVATION_DATA                          = 0x420030
    DERIVATION_METHOD                        = 0x420031
    DERIVATION_PARAMETERS                    = 0x420032
    DESTROY_DATE                             = 0x420033
    DIGEST                                   = 0x420034
    DIGEST_VALUE                             = 0x420035
    ENCRYPTION_KEY_INFORMATION               = 0x420036
    G                                        = 0x420037
    HASHING_ALGORITHM                        = 0x420038
    INITIAL_DATE                             = 0x420039
    INITIALIZATION_VECTOR                    = 0x42003A
    ISSUER                                   = 0x42003B  # Deprecated, designated '(Reserved)' in KMIP 2.0
    ITERATION_COUNT                          = 0x42003C
    IV_COUNTER_NONCE                         = 0x42003D
    J                                        = 0x42003E
    KEY                                      = 0x42003F
    KEY_BLOCK                                = 0x420040
    KEY_COMPRESSION_TYPE                     = 0x420041
    KEY_FORMAT_TYPE                          = 0x420042
    KEY_MATERIAL                             = 0x420043
    KEY_PART_IDENTIFIER                      = 0x420044
    KEY_VALUE                                = 0x420045
    KEY_WRAPPING_DATA                        = 0x420046
    KEY_WRAPPING_SPECIFICATION               = 0x420047
    LAST_CHANGE_DATE                         = 0x420048
    LEASE_TIME                               = 0x420049
    LINK                                     = 0x42004A
    LINK_TYPE                                = 0x42004B
    LINKED_OBJECT_IDENTIFIER                 = 0x42004C
    MAC_SIGNATURE                            = 0x42004D
    MAC_SIGNATURE_KEY_INFORMATION            = 0x42004E
    MAXIMUM_ITEMS                            = 0x42004F
    MAXIMUM_RESPONSE_SIZE                    = 0x420050
    MESSAGE_EXTENSION                        = 0x420051
    MODULUS                                  = 0x420052
    NAME                                     = 0x420053
    NAME_TYPE                                = 0x420054
    NAME_VALUE                               = 0x420055
    OBJECT_GROUP                             = 0x420056
    OBJECT_TYPE                              = 0x420057
    OFFSET                                   = 0x420058
    OPAQUE_DATA_TYPE                         = 0x420059
    OPAQUE_DATA_VALUE                        = 0x42005A
    OPAQUE_OBJECT                            = 0x42005B
    OPERATION                                = 0x42005C
    OPERATION_POLICY_NAME                    = 0x42005D  # Designated '(Reserved)' in KMIP 2.0
    P                                        = 0x42005E
    PADDING_METHOD                           = 0x42005F
    PRIME_EXPONENT_P                         = 0x420060
    PRIME_EXPONENT_Q                         = 0x420061
    PRIME_FIELD_SIZE                         = 0x420062
    PRIVATE_EXPONENT                         = 0x420063
    PRIVATE_KEY                              = 0x420064
    PRIVATE_KEY_TEMPLATE_ATTRIBUTE           = 0x420065  # Designated '(Reserved)' in KMIP 2.0
    PRIVATE_KEY_UNIQUE_IDENTIFIER            = 0x420066
    PROCESS_START_DATE                       = 0x420067
    PROTECT_STOP_DATE                        = 0x420068
    PROTOCOL_VERSION                         = 0x420069
    PROTOCOL_VERSION_MAJOR                   = 0x42006A
    PROTOCOL_VERSION_MINOR                   = 0x42006B
    PUBLIC_EXPONENT                          = 0x42006C
    PUBLIC_KEY                               = 0x42006D
    PUBLIC_KEY_TEMPLATE_ATTRIBUTE            = 0x42006E  # Designated '(Reserved)' in KMIP 2.0
    PUBLIC_KEY_UNIQUE_IDENTIFIER             = 0x42006F
    PUT_FUNCTION                             = 0x420070
    Q                                        = 0x420071
    Q_STRING                                 = 0x420072
    QLENGTH                                  = 0x420073
    QUERY_FUNCTION                           = 0x420074
    RECOMMENDED_CURVE                        = 0x420075
    REPLACED_UNIQUE_IDENTIFIER               = 0x420076
    REQUEST_BATCH_ITEM                       = 0x42000F
    REQUEST_HEADER                           = 0x420077
    REQUEST_MESSAGE                          = 0x420078
    REQUEST_PAYLOAD                          = 0x420079
    RESPONSE_BATCH_ITEM                      = 0x42000F
    RESPONSE_HEADER                          = 0x42007A
    RESPONSE_MESSAGE                         = 0x42007B
    RESPONSE_PAYLOAD                         = 0x42007C
    RESULT_MESSAGE                           = 0x42007D
    RESULT_REASON                            = 0x42007E
    RESULT_STATUS                            = 0x42007F
    REVOCATION_MESSAGE                       = 0x420080
    REVOCATION_REASON                        = 0x420081
    REVOCATION_REASON_CODE                   = 0x420082
    KEY_ROLE_TYPE                            = 0x420083
    SALT                                     = 0x420084
    SECRET_DATA                              = 0x420085
    SECRET_DATA_TYPE                         = 0x420086
    SERIAL_NUMBER                            = 0x420087  # Deprecated, designated '(Reserved)' in KMIP 2.0
    SERVER_INFORMATION                       = 0x420088
    SPLIT_KEY                                = 0x420089
    SPLIT_KEY_METHOD                         = 0x42008A
    SPLIT_KEY_PARTS                          = 0x42008B
    SPLIT_KEY_THRESHOLD                      = 0x42008C
    STATE                                    = 0x42008D
    STORAGE_STATUS_MASK                      = 0x42008E
    SYMMETRIC_KEY                            = 0x42008F
    TEMPLATE                                 = 0x420090  # Designated '(Reserved)' in KMIP 2.0
    TEMPLATE_ATTRIBUTE                       = 0x420091  # Designated '(Reserved)' in KMIP 2.0
    TIME_STAMP                               = 0x420092
    UNIQUE_BATCH_ITEM_ID                     = 0x420093
    UNIQUE_IDENTIFIER                        = 0x420094
    USAGE_LIMITS                             = 0x420095
    USAGE_LIMITS_COUNT                       = 0x420096
    USAGE_LIMITS_TOTAL                       = 0x420097
    USAGE_LIMITS_UNIT                        = 0x420098
    USERNAME                                 = 0x420099
    VALIDITY_DATE                            = 0x42009A
    VALIDITY_INDICATOR                       = 0x42009B
    VENDOR_EXTENSION                         = 0x42009C
    VENDOR_IDENTIFICATION                    = 0x42009D
    WRAPPING_METHOD                          = 0x42009E
    X                                        = 0x42009F
    Y                                        = 0x4200A0
    PASSWORD                                 = 0x4200A1
    # KMIP 1.1
    DEVICE_IDENTIFIER                        = 0x4200A2
    ENCODING_OPTION                          = 0x4200A3
    EXTENSION_INFORMATION                    = 0x4200A4
    EXTENSION_NAME                           = 0x4200A5
    EXTENSION_TAG                            = 0x4200A6
    EXTENSION_TYPE                           = 0x4200A7
    FRESH                                    = 0x4200A8
    MACHINE_IDENTIFIER                       = 0x4200A9
    MEDIA_IDENTIFIER                         = 0x4200AA
    NETWORK_IDENTIFIER                       = 0x4200AB
    OBJECT_GROUP_MEMBER                      = 0x4200AC
    CERTIFICATE_LENGTH                       = 0x4200AD
    DIGITAL_SIGNATURE_ALGORITHM              = 0x4200AE
    CERTIFICATE_SERIAL_NUMBER                = 0x4200AF
    DEVICE_SERIAL_NUMBER                     = 0x4200B0
    ISSUER_ALTERNATIVE_NAME                  = 0x4200B1
    ISSUER_DISTINGUISHED_NAME                = 0x4200B2
    SUBJECT_ALTERNATIVE_NAME                 = 0x4200B3
    SUBJECT_DISTINGUISHED_NAME               = 0x4200B4
    X_509_CERTIFICATE_IDENTIFIER             = 0x4200B5
    X_509_CERTIFICATE_ISSUER                 = 0x4200B6
    X_509_CERTIFICATE_SUBJECT                = 0x4200B7
    # KMIP 1.2
    KEY_VALUE_LOCATION                       = 0x4200B8
    KEY_VALUE_LOCATION_VALUE                 = 0x4200B9
    KEY_VALUE_LOCATION_TYPE                  = 0x4200BA
    KEY_VALUE_PRESENT                        = 0x4200BB
    ORIGINAL_CREATION_DATE                   = 0x4200BC
    PGP_KEY                                  = 0x4200BD
    PGP_KEY_VERSION                          = 0x4200BE
    ALTERNATIVE_NAME                         = 0x4200BF
    ALTERNATIVE_NAME_VALUE                   = 0x4200C0
    ALTERNATIVE_NAME_TYPE                    = 0x4200C1
    DATA                                     = 0x4200C2
    SIGNATURE_DATA                           = 0x4200C3
    DATA_LENGTH                              = 0x4200C4
    RANDOM_IV                                = 0x4200C5
    MAC_DATA                                 = 0x4200C6
    ATTESTATION_TYPE                         = 0x4200C7
    NONCE                                    = 0x4200C8
    NONCE_ID                                 = 0x4200C9
    NONCE_VALUE                              = 0x4200CA
    ATTESTATION_MEASUREMENT                  = 0x4200CB
    ATTESTATION_ASSERTION                    = 0x4200CC
    IV_LENGTH                                = 0x4200CD
    TAG_LENGTH                               = 0x4200CE
    FIXED_FIELD_LENGTH                       = 0x4200CF
    COUNTER_LENGTH                           = 0x4200D0
    INITIAL_COUNTER_VALUE                    = 0x4200D1
    INVOCATION_FIELD_LENGTH                  = 0x4200D2
    ATTESTATION_CAPABLE_INDICATOR            = 0x4200D3
    # KMIP 1.3
    OFFSET_ITEMS                             = 0x4200D4
    LOCATED_ITEMS                            = 0x4200D5
    CORRELATION_VALUE                        = 0x4200D6
    INIT_INDICATOR                           = 0x4200D7
    FINAL_INDICATOR                          = 0x4200D8
    RNG_PARAMETERS                           = 0x4200D9
    RNG_ALGORITHM                            = 0x4200DA
    DRBG_ALGORITHM                           = 0x4200DB
    FIPS186_VARIATION                        = 0x4200DC
    PREDICTION_RESISTANCE                    = 0x4200DD
    RANDOM_NUMBER_GENERATOR                  = 0x4200DE
    VALIDATION_INFORMATION                   = 0x4200DF
    VALIDATION_AUTHORITY_TYPE                = 0x4200E0
    VALIDATION_AUTHORITY_COUNTRY             = 0x4200E1
    VALIDATION_AUTHORITY_URI                 = 0x4200E2
    VALIDATION_VERSION_MAJOR                 = 0x4200E3
    VALIDATION_VERSION_MINOR                 = 0x4200E4
    VALIDATION_TYPE                          = 0x4200E5
    VALIDATION_LEVEL                         = 0x4200E6
    VALIDATION_CERTIFICATE_IDENTIFIER        = 0x4200E7
    VALIDATION_CERTIFICATE_URI               = 0x4200E8
    VALIDATION_VENDOR_URI                    = 0x4200E9
    VALIDATION_PROFILE                       = 0x4200EA
    PROFILE_INFORMATION                      = 0x4200EB
    PROFILE_NAME                             = 0x4200EC
    SERVER_URI                               = 0x4200ED
    SERVER_PORT                              = 0x4200EE
    STREAMING_CAPABILITY                     = 0x4200EF
    ASYNCHRONOUS_CAPABILITY                  = 0x4200F0
    ATTESTATION_CAPABILITY                   = 0x4200F1
    UNWRAP_MODE                              = 0x4200F2
    DESTROY_ACTION                           = 0x4200F3
    SHREDDING_ALGORITHM                      = 0x4200F4
    RNG_MODE                                 = 0x4200F5
    CLIENT_REGISTRATION_METHOD               = 0x4200F6
    CAPABILITY_INFORMATION                   = 0x4200F7
    # KMIP 1.4
    KEY_WRAP_TYPE                            = 0x4200F8
    BATCH_UNDO_CAPABILITY                    = 0x4200F9
    BATCH_CONTINUE_CAPABILITY                = 0x4200FA
    PKCS12_FRIENDLY_NAME                     = 0x4200FB
    DESCRIPTION                              = 0x4200FC
    COMMENT                                  = 0x4200FD
    AUTHENTICATED_ENCRYPTION_ADDITIONAL_DATA = 0x4200FE
    AUTHENTICATED_ENCRYPTION_TAG             = 0x4200FF
    SALT_LENGTH                              = 0x420100
    MASK_GENERATOR                           = 0x420101
    MASK_GENERATOR_HASHING_ALGORITHM         = 0x420102
    P_SOURCE                                 = 0x420103
    TRAILER_FIELD                            = 0x420104
    CLIENT_CORRELATION_VALUE                 = 0x420105
    SERVER_CORRELATION_VALUE                 = 0x420106
    DIGESTED_DATA                            = 0x420107
    CERTIFICATE_SUBJECT_CN                   = 0x420108
    CERTIFICATE_SUBJECT_O                    = 0x420109
    CERTIFICATE_SUBJECT_OU                   = 0x42010A
    CERTIFICATE_SUBJECT_EMAIL                = 0x42010B
    CERTIFICATE_SUBJECT_C                    = 0x42010C
    CERTIFICATE_SUBJECT_ST                   = 0x42010D
    CERTIFICATE_SUBJECT_L                    = 0x42010E
    CERTIFICATE_SUBJECT_UID                  = 0x42010F
    CERTIFICATE_SUBJECT_SERIAL_NUMBER        = 0x420110
    CERTIFICATE_SUBJECT_TITLE                = 0x420111
    CERTIFICATE_SUBJECT_DC                   = 0x420112
    CERTIFICATE_SUBJECT_DN_QUALIFIER         = 0x420113
    CERTIFICATE_ISSUER_CN                    = 0x420114
    CERTIFICATE_ISSUER_O                     = 0x420115
    CERTIFICATE_ISSUER_OU                    = 0x420116
    CERTIFICATE_ISSUER_EMAIL                 = 0x420117
    CERTIFICATE_ISSUER_C                     = 0x420118
    CERTIFICATE_ISSUER_ST                    = 0x420119
    CERTIFICATE_ISSUER_L                     = 0x42011A
    CERTIFICATE_ISSUER_UID                   = 0x42011B
    CERTIFICATE_ISSUER_SERIAL_NUMBER         = 0x42011C
    CERTIFICATE_ISSUER_TITLE                 = 0x42011D
    CERTIFICATE_ISSUER_DC                    = 0x42011E
    CERTIFICATE_ISSUER_DN_QUALIFIER          = 0x42011F
    SENSITIVE                                = 0x420120
    ALWAYS_SENSITIVE                         = 0x420121
    EXTRACTABLE                              = 0x420122
    NEVER_EXTRACTABLE                        = 0x420123
    REPLACE_EXISTING                         = 0x420124
    # KMIP 2.0
    ATTRIBUTES                               = 0x420125
    COMMON_ATTRIBUTES                        = 0x420126
    PRIVATE_KEY_ATTRIBUTES                   = 0x420127
    PUBLIC_KEY_ATTRIBUTES                    = 0x420128
    EXTENSION_ENUMERATION                    = 0x420129
    EXTENSION_ATTRIBUTE                      = 0x42012A
    EXTENSION_PARENT_STRUCTURE_TAG           = 0x42012B
    EXTENSION_DESCRIPTION                    = 0x42012C
    SERVER_NAME                              = 0x42012D
    SERVER_SERIAL_NUMBER                     = 0x42012E
    SERVER_VERSION                           = 0x42012F
    SERVER_LOAD                              = 0x420130
    PRODUCT_NAME                             = 0x420131
    BUILD_LEVEL                              = 0x420132
    BUILD_DATE                               = 0x420133
    CLUSTER_INFO                             = 0x420134
    ALTERNATE_FAILOVER_ENDPOINTS             = 0x420135
    SHORT_UNIQUE_IDENTIFIER                  = 0x420136
    RESERVED                                 = 0x420137
    TAG                                      = 0x420138
    CERTIFICATE_REQUEST_UNIQUE_IDENTIFIER    = 0x420139
    NIST_KEY_TYPE                            = 0x42013A
    ATTRIBUTE_REFERENCE                      = 0x42013B
    CURRENT_ATTRIBUTE                        = 0x42013C
    NEW_ATTRIBUTE                            = 0x42013D
                                             # 0x42013E is designated '(Reserved)' in KMIP 2.0
                                             # 0x42013F is designated '(Reserved)' in KMIP 2.0
    CERTIFICATE_REQUEST_VALUE                = 0x420140
    LOG_MESSAGE                              = 0x420141
    PROFILE_VERSION                          = 0x420142
    PROFILE_VERSION_MAJOR                    = 0x420143
    PROFILE_VERSION_MINOR                    = 0x420144
    PROTECTION_LEVEL                         = 0x420145
    PROTECTION_PERIOD                        = 0x420146
    QUANTUM_SAFE                             = 0x420147
    QUANTUM_SAFE_CAPABILITY                  = 0x420148
    TICKET                                   = 0x420149
    TICKET_TYPE                              = 0x42014A
    TICKET_VALUE                             = 0x42014B
    REQUEST_COUNT                            = 0x42014C
    RIGHTS                                   = 0x42014D
    OBJECTS                                  = 0x42014E
    OPERATIONS                               = 0x42014F
    RIGHT                                    = 0x420150
    ENDPOINT_ROLE                            = 0x420151
    DEFAULTS_INFORMATION                     = 0x420152
    OBJECT_DEFAULTS                          = 0x420153
    EPHEMERAL                                = 0x420154
    SERVER_HASHED_PASSWORD                   = 0x420155
    ONE_TIME_PASSWORD                        = 0x420156
    HASHED_PASSWORD                          = 0x420157
    ADJUSTMENT_TYPE                          = 0x420158
    PKCS11_INTERFACE                         = 0x420159
    PKCS11_FUNCTION                          = 0x42015A
    PKCS11_INPUT_PARAMETERS                  = 0x42015B
    PKCS11_OUTPUT_PARAMETERS                 = 0x42015C
    PKCS11_RETURN_CODE                       = 0x42015D
    PROTECTION_STORAGE_MASK                  = 0x42015E
    PROTECTION_STORAGE_MASKS                 = 0x42015F
    INTEROP_FUNCTION                         = 0x420160
    INTEROP_IDENTIFIER                       = 0x420161
    ADJUSTMENT_VALUE                         = 0x420162
    COMMON_PROTECTION_STORAGE_MASKS          = 0x420163
    PRIVATE_PROTECTION_STORAGE_MASKS         = 0x420164
    PUBLIC_PROTECTION_STORAGE_MASKS          = 0x420165


class TicketType(enum.Enum):
    # KMIP 2.0
    LOGIN = 0x00000001


class Types(enum.Enum):
    DEFAULT      = 0x00
    STRUCTURE    = 0x01
    INTEGER      = 0x02
    LONG_INTEGER = 0x03
    BIG_INTEGER  = 0x04
    ENUMERATION  = 0x05
    BOOLEAN      = 0x06
    TEXT_STRING  = 0x07
    BYTE_STRING  = 0x08
    DATE_TIME    = 0x09
    INTERVAL     = 0x0A


class UniqueIdentifier(enum.Enum):
    # KMIP 2.0
    ID_PLACEHOLDER              = 0x00000001
    CERTIFY                     = 0x00000002
    CREATE                      = 0x00000003
    CREATE_KEY_PAIR             = 0x00000004
    CREATE_KEY_PAIR_PRIVATE_KEY = 0x00000005
    CREATE_KEY_PAIR_PUBLIC_KEY  = 0x00000006
    CREATE_SPLIT_KEY            = 0x00000007
    DERIVE_KEY                  = 0x00000008
    IMPORT                      = 0x00000009
    JOIN_SPLIT_KEY              = 0x0000000A
    LOCATE                      = 0x0000000B
    REGISTER                    = 0x0000000C
    REKEY                       = 0x0000000D
    RECERTIFY                   = 0x0000000E
    REKEY_KEY_PAIR              = 0x0000000F
    REKEY_KEY_PAIR_PRIVATE_KEY  = 0x00000010
    REKEY_KEY_PAIR_PUBLIC_KEY   = 0x00000011


class UnwrapMode(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED   = 0x00000001
    PROCESSED     = 0x00000002
    NOT_PROCESSED = 0x00000003


class UsageLimitsUnit(enum.Enum):
    # KMIP 1.0
    BYTE   = 0x00000001
    OBJECT = 0x00000002


class ValidationAuthorityType(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED     = 0x00000001
    NIST_CMVP       = 0x00000002
    COMMON_CRITERIA = 0x00000003


class ValidationType(enum.Enum):
    # KMIP 1.3
    UNSPECIFIED = 0x00000001
    HARDWARE    = 0x00000002
    SOFTWARE    = 0x00000003
    FIRMWARE    = 0x00000004
    HYBRID      = 0x00000005


class ValidityIndicator(enum.Enum):
    # KMIP 1.0
    VALID   = 0x00000001
    INVALID = 0x00000002
    UNKNOWN = 0x00000003


class WrappingMethod(enum.Enum):
    # KMIP 1.0
    ENCRYPT               = 0x00000001
    MAC_SIGN              = 0x00000002
    ENCRYPT_THEN_MAC_SIGN = 0x00000003
    MAC_SIGN_THEN_ENCRYPT = 0x00000004
    TR_31                 = 0x00000005


attribute_name_tag_table = [
    ("Activation Date",                   Tags.ACTIVATION_DATE),
    ("Alternative Name",                  Tags.ALTERNATIVE_NAME),
    ("Always Sensitive",                  Tags.ALWAYS_SENSITIVE),
    ("Application Specific Information",  Tags.APPLICATION_SPECIFIC_INFORMATION),
    ("Archive Date",                      Tags.ARCHIVE_DATE),
    ("Attribute",                         Tags.ATTRIBUTE),
    ("Certificate Identifier",            Tags.CERTIFICATE_IDENTIFIER),
    ("Certificate Issuer",                Tags.CERTIFICATE_ISSUER),
    ("Certificate Issuer C",              Tags.CERTIFICATE_ISSUER_C),
    ("Certificate Issuer CN",             Tags.CERTIFICATE_ISSUER_CN),
    ("Certificate Issuer DC",             Tags.CERTIFICATE_ISSUER_DC),
    ("Certificate Issuer DN Qualifier",   Tags.CERTIFICATE_ISSUER_DN_QUALIFIER),
    ("Certificate Issuer Email",          Tags.CERTIFICATE_ISSUER_EMAIL),
    ("Certificate Issuer L",              Tags.CERTIFICATE_ISSUER_L),
    ("Certificate Issuer O",              Tags.CERTIFICATE_ISSUER_O),
    ("Certificate Issuer OU",             Tags.CERTIFICATE_ISSUER_OU),
    ("Certificate Issuer Serial Number",  Tags.CERTIFICATE_ISSUER_SERIAL_NUMBER),
    ("Certificate Issuer ST",             Tags.CERTIFICATE_ISSUER_ST),
    ("Certificate Issuer Title",          Tags.CERTIFICATE_ISSUER_TITLE),
    ("Certificate Issuer UID",            Tags.CERTIFICATE_ISSUER_UID),
    ("Certificate Length",                Tags.CERTIFICATE_LENGTH),
    ("Certificate Subject",               Tags.CERTIFICATE_SUBJECT),
    ("Certificate Subject C",             Tags.CERTIFICATE_SUBJECT_C),
    ("Certificate Subject CN",            Tags.CERTIFICATE_SUBJECT_CN),
    ("Certificate Subject DC",            Tags.CERTIFICATE_SUBJECT_DC),
    ("Certificate Subject DN Qualifier",  Tags.CERTIFICATE_SUBJECT_DN_QUALIFIER),
    ("Certificate Subject Email",         Tags.CERTIFICATE_SUBJECT_EMAIL),
    ("Certificate Subject L",             Tags.CERTIFICATE_SUBJECT_L),
    ("Certificate Subject O",             Tags.CERTIFICATE_SUBJECT_O),
    ("Certificate Subject OU",            Tags.CERTIFICATE_SUBJECT_OU),
    ("Certificate Subject Serial Number", Tags.CERTIFICATE_SUBJECT_SERIAL_NUMBER),
    ("Certificate Subject ST",            Tags.CERTIFICATE_SUBJECT_ST),
    ("Certificate Subject Title",         Tags.CERTIFICATE_SUBJECT_TITLE),
    ("Certificate Subject UID",           Tags.CERTIFICATE_SUBJECT_UID),
    ("Certificate Type",                  Tags.CERTIFICATE_TYPE),
    ("Comment",                           Tags.COMMENT),
    ("Compromise Date",                   Tags.COMPROMISE_DATE),
    ("Compromise Occurrence Date",        Tags.COMPROMISE_OCCURRENCE_DATE),
    ("Contact Information",               Tags.CONTACT_INFORMATION),
    ("Cryptographic Algorithm",           Tags.CRYPTOGRAPHIC_ALGORITHM),
    ("Cryptographic Domain Parameters",   Tags.CRYPTOGRAPHIC_DOMAIN_PARAMETERS),
    ("Cryptographic Length",              Tags.CRYPTOGRAPHIC_LENGTH),
    ("Cryptographic Parameters",          Tags.CRYPTOGRAPHIC_PARAMETERS),
    ("Cryptographic Usage Mask",          Tags.CRYPTOGRAPHIC_USAGE_MASK),
    ("Custom Attribute",                  Tags.CUSTOM_ATTRIBUTE),
    ("Deactivation Date",                 Tags.DEACTIVATION_DATE),
    ("Description",                       Tags.DESCRIPTION),
    ("Destroy Date",                      Tags.DESTROY_DATE),
    ("Digest",                            Tags.DIGEST),
    ("Digital Signature Algorithm",       Tags.DIGITAL_SIGNATURE_ALGORITHM),
    ("Extractable",                       Tags.EXTRACTABLE),
    ("Fresh",                             Tags.FRESH),
    ("Initial Date",                      Tags.INITIAL_DATE),
    ("Key Format Type",                   Tags.KEY_FORMAT_TYPE),
    ("Key Value Location",                Tags.KEY_VALUE_LOCATION),
    ("Key Value Present",                 Tags.KEY_VALUE_PRESENT),
    ("Last Change Date",                  Tags.LAST_CHANGE_DATE),
    ("Lease Time",                        Tags.LEASE_TIME),
    ("Link",                              Tags.LINK),
    ("Name",                              Tags.NAME),
    ("Never Extractable",                 Tags.NEVER_EXTRACTABLE),
    ("NIST Key Type",                     Tags.NIST_KEY_TYPE),
    ("Object Group",                      Tags.OBJECT_GROUP),
    ("Object Type",                       Tags.OBJECT_TYPE),
    ("Opaque Data Type",                  Tags.OPAQUE_DATA_TYPE),
    ("Operation Policy Name",             Tags.OPERATION_POLICY_NAME),
    ("Original Creation Date",            Tags.ORIGINAL_CREATION_DATE),
    ("PKCS#12 Friendly Name",             Tags.PKCS12_FRIENDLY_NAME),
    ("Process Start Date",                Tags.PROCESS_START_DATE),
    ("Protect Stop Date",                 Tags.PROTECT_STOP_DATE),
    ("Protection Level",                  Tags.PROTECTION_LEVEL),
    ("Protection Period",                 Tags.PROTECTION_PERIOD),
    ("Protection Storage Mask",           Tags.PROTECTION_STORAGE_MASK),
    ("Quantum Safe",                      Tags.QUANTUM_SAFE),
    ("Random Number Generator",           Tags.RANDOM_NUMBER_GENERATOR),
    ("Revocation Reason",                 Tags.REVOCATION_REASON),
    ("Sensitive",                         Tags.SENSITIVE),
    ("Short Unique Identifier",           Tags.SHORT_UNIQUE_IDENTIFIER),
    ("State",                             Tags.STATE),
    ("Unique Identifier",                 Tags.UNIQUE_IDENTIFIER),
    ("Usage Limits",                      Tags.USAGE_LIMITS),
    ("X.509 Certificate Identifier",      Tags.X_509_CERTIFICATE_IDENTIFIER),
    ("X.509 Certificate Issuer",          Tags.X_509_CERTIFICATE_ISSUER),
    ("X.509 Certificate Subject",         Tags.X_509_CERTIFICATE_SUBJECT)
]


def convert_attribute_name_to_tag(value):
    """
    A utility function that converts an attribute name string into the
    corresponding attribute tag.

    For example: 'State' -> enums.Tags.STATE

    Args:
        value (string): The string name of the attribute.

    Returns:
        enum: The Tags enumeration value that corresponds to the attribute
            name string.

    Raises:
        ValueError: if the attribute name string is not a string or if it is
            an unrecognized attribute name
    """
    if not isinstance(value, six.string_types):
        raise ValueError("The attribute name must be a string.")

    for entry in attribute_name_tag_table:
        if value == entry[0]:
            return entry[1]

    raise ValueError("Unrecognized attribute name: '{}'".format(value))


def convert_attribute_tag_to_name(value):
    """
    A utility function that converts an attribute tag into the corresponding
    attribute name string.

    For example: enums.Tags.STATE -> 'State'

    Args:
        value (enum): The Tags enumeration value of the attribute.

    Returns:
        string: The attribute name string that corresponds to the attribute
            tag.

    Raises:
        ValueError: if the attribute tag is not a Tags enumeration or if it
            is unrecognized attribute tag
    """
    if not isinstance(value, Tags):
        raise ValueError("The attribute tag must be a Tags enumeration.")

    for entry in attribute_name_tag_table:
        if value == entry[1]:
            return entry[0]

    raise ValueError("Unrecognized attribute tag: {}".format(value))


def get_bit_mask_from_enumerations(enumerations):
    """
    A utility function that computes a bit mask from a collection of
    enumeration values.

    Args:
        enumerations (list): A list of enumeration values to be combined in a
            composite bit mask.

    Returns:
        int: The composite bit mask.
    """
    return functools.reduce(
        lambda x, y: x | y, [z.value for z in enumerations]
    )


def get_enumerations_from_bit_mask(enumeration, mask):
    """
    A utility function that creates a list of enumeration values from a bit
    mask for a specific mask enumeration class.

    Args:
        enumeration (class): The enumeration class from which to draw
            enumeration values.
        mask (int): The bit mask from which to identify enumeration values.

    Returns:
        list: A list of enumeration values corresponding to the bit mask.
    """
    return [x for x in enumeration if (x.value & mask) == x.value]


def is_bit_mask(enumeration, potential_mask):
    """
    A utility function that checks if the provided value is a composite bit
    mask of enumeration values in the specified enumeration class.

    Args:
        enumeration (class): One of the mask enumeration classes found in this
            file. These include:
                * Cryptographic Usage Mask
                * Protection Storage Mask
                * Storage Status Mask
        potential_mask (int): A potential bit mask composed of enumeration
            values belonging to the enumeration class.

    Returns:
        True: if the potential mask is a valid bit mask of the mask enumeration
        False: otherwise
    """
    if not isinstance(potential_mask, six.integer_types):
        return False

    mask_enumerations = (
        CryptographicUsageMask,
        ProtectionStorageMask,
        StorageStatusMask
    )
    if enumeration not in mask_enumerations:
        return False

    mask = 0
    for value in [e.value for e in enumeration]:
        if (value & potential_mask) == value:
            mask |= value

    if mask != potential_mask:
        return False

    return True


def is_enum_value(enumeration, potential_value):
    """
    A utility function that checks if the enumeration class contains the
    provided value.

    Args:
        enumeration (class): One of the enumeration classes found in this file.
        potential_value (int, string): A potential value of the enumeration
            class.

    Returns:
        True: if the potential value is a valid value of the enumeration class
        False: otherwise
    """
    try:
        enumeration(potential_value)
    except ValueError:
        return False

    return True


def is_attribute(tag, kmip_version=None):
    """
    A utility function that checks if the tag is a valid attribute tag.

    Args:
        tag (enum): A Tags enumeration that may or may not correspond to a
            KMIP attribute type.
        kmip_version (enum): The KMIPVersion enumeration that should be used
            when checking if the tag is a valid attribute tag. Optional,
            defaults to None. If None, the tag is compared with all possible
            attribute tags across all KMIP versions. Otherwise, only the
            attribute tags for a specific KMIP version are checked.

    Returns:
        True: if the tag is a valid attribute tag
        False: otherwise
    """
    kmip_1_0_attribute_tags = [
        Tags.UNIQUE_IDENTIFIER,
        Tags.NAME,
        Tags.OBJECT_TYPE,
        Tags.CRYPTOGRAPHIC_ALGORITHM,
        Tags.CRYPTOGRAPHIC_LENGTH,
        Tags.CRYPTOGRAPHIC_PARAMETERS,
        Tags.CRYPTOGRAPHIC_DOMAIN_PARAMETERS,
        Tags.CERTIFICATE_TYPE,
        Tags.CERTIFICATE_IDENTIFIER,
        Tags.CERTIFICATE_SUBJECT,
        Tags.CERTIFICATE_ISSUER,
        Tags.DIGEST,
        Tags.OPERATION_POLICY_NAME,
        Tags.CRYPTOGRAPHIC_USAGE_MASK,
        Tags.LEASE_TIME,
        Tags.USAGE_LIMITS,
        Tags.STATE,
        Tags.INITIAL_DATE,
        Tags.ACTIVATION_DATE,
        Tags.PROCESS_START_DATE,
        Tags.PROTECT_STOP_DATE,
        Tags.DEACTIVATION_DATE,
        Tags.DESTROY_DATE,
        Tags.COMPROMISE_OCCURRENCE_DATE,
        Tags.COMPROMISE_DATE,
        Tags.REVOCATION_REASON,
        Tags.ARCHIVE_DATE,
        Tags.OBJECT_GROUP,
        Tags.LINK,
        Tags.APPLICATION_SPECIFIC_INFORMATION,
        Tags.CONTACT_INFORMATION,
        Tags.LAST_CHANGE_DATE,
        Tags.CUSTOM_ATTRIBUTE
    ]
    kmip_1_1_attribute_tags = copy.deepcopy(kmip_1_0_attribute_tags) + [
        Tags.CERTIFICATE_LENGTH,
        Tags.X_509_CERTIFICATE_IDENTIFIER,
        Tags.X_509_CERTIFICATE_SUBJECT,
        Tags.X_509_CERTIFICATE_ISSUER,
        Tags.DIGITAL_SIGNATURE_ALGORITHM,
        Tags.FRESH
    ]
    kmip_1_2_attribute_tags = copy.deepcopy(kmip_1_1_attribute_tags) + [
        Tags.ALTERNATIVE_NAME,
        Tags.KEY_VALUE_PRESENT,
        Tags.KEY_VALUE_LOCATION,
        Tags.ORIGINAL_CREATION_DATE
    ]
    kmip_1_3_attribute_tags = copy.deepcopy(kmip_1_2_attribute_tags) + [
        Tags.RANDOM_NUMBER_GENERATOR
    ]
    kmip_1_4_attribute_tags = copy.deepcopy(kmip_1_3_attribute_tags) + [
        Tags.PKCS12_FRIENDLY_NAME,
        Tags.DESCRIPTION,
        Tags.COMMENT,
        Tags.SENSITIVE,
        Tags.ALWAYS_SENSITIVE,
        Tags.EXTRACTABLE,
        Tags.NEVER_EXTRACTABLE
    ]
    kmip_2_0_attribute_tags = copy.deepcopy(kmip_1_4_attribute_tags) + [
        Tags.CERTIFICATE_SUBJECT_CN,
        Tags.CERTIFICATE_SUBJECT_O,
        Tags.CERTIFICATE_SUBJECT_OU,
        Tags.CERTIFICATE_SUBJECT_EMAIL,
        Tags.CERTIFICATE_SUBJECT_C,
        Tags.CERTIFICATE_SUBJECT_ST,
        Tags.CERTIFICATE_SUBJECT_L,
        Tags.CERTIFICATE_SUBJECT_UID,
        Tags.CERTIFICATE_SUBJECT_SERIAL_NUMBER,
        Tags.CERTIFICATE_SUBJECT_TITLE,
        Tags.CERTIFICATE_SUBJECT_DC,
        Tags.CERTIFICATE_SUBJECT_DN_QUALIFIER,
        Tags.CERTIFICATE_ISSUER_CN,
        Tags.CERTIFICATE_ISSUER_O,
        Tags.CERTIFICATE_ISSUER_OU,
        Tags.CERTIFICATE_ISSUER_EMAIL,
        Tags.CERTIFICATE_ISSUER_C,
        Tags.CERTIFICATE_ISSUER_ST,
        Tags.CERTIFICATE_ISSUER_L,
        Tags.CERTIFICATE_ISSUER_UID,
        Tags.CERTIFICATE_ISSUER_SERIAL_NUMBER,
        Tags.CERTIFICATE_ISSUER_TITLE,
        Tags.CERTIFICATE_ISSUER_DC,
        Tags.CERTIFICATE_ISSUER_DN_QUALIFIER,
        Tags.KEY_FORMAT_TYPE,
        Tags.NIST_KEY_TYPE,
        Tags.OPAQUE_DATA_TYPE,
        Tags.PROTECTION_LEVEL,
        Tags.PROTECTION_PERIOD,
        Tags.PROTECTION_STORAGE_MASK,
        Tags.QUANTUM_SAFE,
        Tags.SHORT_UNIQUE_IDENTIFIER,
        Tags.ATTRIBUTE
    ]
    kmip_2_0_attribute_tags.remove(Tags.CERTIFICATE_IDENTIFIER)
    kmip_2_0_attribute_tags.remove(Tags.CERTIFICATE_SUBJECT)
    kmip_2_0_attribute_tags.remove(Tags.CERTIFICATE_ISSUER)
    kmip_2_0_attribute_tags.remove(Tags.OPERATION_POLICY_NAME)
    kmip_2_0_attribute_tags.remove(Tags.CUSTOM_ATTRIBUTE)

    if kmip_version == KMIPVersion.KMIP_1_0:
        return tag in kmip_1_0_attribute_tags
    elif kmip_version == KMIPVersion.KMIP_1_1:
        return tag in kmip_1_1_attribute_tags
    elif kmip_version == KMIPVersion.KMIP_1_2:
        return tag in kmip_1_2_attribute_tags
    elif kmip_version == KMIPVersion.KMIP_1_3:
        return tag in kmip_1_3_attribute_tags
    elif kmip_version == KMIPVersion.KMIP_1_4:
        return tag in kmip_1_4_attribute_tags
    elif kmip_version == KMIPVersion.KMIP_2_0:
        return tag in kmip_2_0_attribute_tags
    else:
        all_attribute_tags = set(
            kmip_1_0_attribute_tags +
            kmip_1_1_attribute_tags +
            kmip_1_2_attribute_tags +
            kmip_1_3_attribute_tags +
            kmip_1_4_attribute_tags +
            kmip_2_0_attribute_tags
        )
        return tag in all_attribute_tags