@@ -50,7 +50,15 @@ class EncryptionSuite(Enum):
50
50
AES_192_GCM_IV12_TAG16 = (algorithms .AES , modes .GCM , 24 , 12 , 16 )
51
51
AES_256_GCM_IV12_TAG16 = (algorithms .AES , modes .GCM , 32 , 12 , 16 )
52
52
53
- def __init__ (self , algorithm , mode , data_key_length , iv_length , auth_length , auth_key_length = 0 ):
53
+ def __init__ (
54
+ self ,
55
+ algorithm ,
56
+ mode ,
57
+ data_key_length ,
58
+ iv_length ,
59
+ auth_length ,
60
+ auth_key_length = 0 ,
61
+ ):
54
62
"""Prepare a new EncryptionSuite."""
55
63
self .algorithm = algorithm
56
64
self .mode = mode
@@ -157,9 +165,21 @@ class AlgorithmSuite(Enum): # pylint: disable=too-many-instance-attributes
157
165
AES_128_GCM_IV12_TAG16 = (0x0014 , EncryptionSuite .AES_128_GCM_IV12_TAG16 )
158
166
AES_192_GCM_IV12_TAG16 = (0x0046 , EncryptionSuite .AES_192_GCM_IV12_TAG16 )
159
167
AES_256_GCM_IV12_TAG16 = (0x0078 , EncryptionSuite .AES_256_GCM_IV12_TAG16 )
160
- AES_128_GCM_IV12_TAG16_HKDF_SHA256 = (0x0114 , EncryptionSuite .AES_128_GCM_IV12_TAG16 , KDFSuite .HKDF_SHA256 )
161
- AES_192_GCM_IV12_TAG16_HKDF_SHA256 = (0x0146 , EncryptionSuite .AES_192_GCM_IV12_TAG16 , KDFSuite .HKDF_SHA256 )
162
- AES_256_GCM_IV12_TAG16_HKDF_SHA256 = (0x0178 , EncryptionSuite .AES_256_GCM_IV12_TAG16 , KDFSuite .HKDF_SHA256 )
168
+ AES_128_GCM_IV12_TAG16_HKDF_SHA256 = (
169
+ 0x0114 ,
170
+ EncryptionSuite .AES_128_GCM_IV12_TAG16 ,
171
+ KDFSuite .HKDF_SHA256 ,
172
+ )
173
+ AES_192_GCM_IV12_TAG16_HKDF_SHA256 = (
174
+ 0x0146 ,
175
+ EncryptionSuite .AES_192_GCM_IV12_TAG16 ,
176
+ KDFSuite .HKDF_SHA256 ,
177
+ )
178
+ AES_256_GCM_IV12_TAG16_HKDF_SHA256 = (
179
+ 0x0178 ,
180
+ EncryptionSuite .AES_256_GCM_IV12_TAG16 ,
181
+ KDFSuite .HKDF_SHA256 ,
182
+ )
163
183
AES_128_GCM_IV12_TAG16_HKDF_SHA256_ECDSA_P256 = (
164
184
0x0214 ,
165
185
EncryptionSuite .AES_128_GCM_IV12_TAG16 ,
@@ -240,6 +260,8 @@ def safe_to_cache(self):
240
260
return self .kdf is not KDFSuite .NONE
241
261
242
262
263
+ # algorithm is just an alias for AlgorithmSuite ... but Sphinx does not recognize this fact
264
+ # so we need to go through and fix the references
243
265
Algorithm = AlgorithmSuite
244
266
245
267
@@ -271,16 +293,60 @@ class WrappingAlgorithm(Enum):
271
293
:type padding_mgf:
272
294
"""
273
295
274
- AES_128_GCM_IV12_TAG16_NO_PADDING = (EncryptionType .SYMMETRIC , Algorithm .AES_128_GCM_IV12_TAG16 , None , None , None )
275
- AES_192_GCM_IV12_TAG16_NO_PADDING = (EncryptionType .SYMMETRIC , Algorithm .AES_192_GCM_IV12_TAG16 , None , None , None )
276
- AES_256_GCM_IV12_TAG16_NO_PADDING = (EncryptionType .SYMMETRIC , Algorithm .AES_256_GCM_IV12_TAG16 , None , None , None )
296
+ AES_128_GCM_IV12_TAG16_NO_PADDING = (
297
+ EncryptionType .SYMMETRIC ,
298
+ AlgorithmSuite .AES_128_GCM_IV12_TAG16 ,
299
+ None ,
300
+ None ,
301
+ None ,
302
+ )
303
+ AES_192_GCM_IV12_TAG16_NO_PADDING = (
304
+ EncryptionType .SYMMETRIC ,
305
+ AlgorithmSuite .AES_192_GCM_IV12_TAG16 ,
306
+ None ,
307
+ None ,
308
+ None ,
309
+ )
310
+ AES_256_GCM_IV12_TAG16_NO_PADDING = (
311
+ EncryptionType .SYMMETRIC ,
312
+ AlgorithmSuite .AES_256_GCM_IV12_TAG16 ,
313
+ None ,
314
+ None ,
315
+ None ,
316
+ )
277
317
RSA_PKCS1 = (EncryptionType .ASYMMETRIC , rsa , padding .PKCS1v15 , None , None )
278
- RSA_OAEP_SHA1_MGF1 = (EncryptionType .ASYMMETRIC , rsa , padding .OAEP , hashes .SHA1 , padding .MGF1 )
279
- RSA_OAEP_SHA256_MGF1 = (EncryptionType .ASYMMETRIC , rsa , padding .OAEP , hashes .SHA256 , padding .MGF1 )
280
- RSA_OAEP_SHA384_MGF1 = (EncryptionType .ASYMMETRIC , rsa , padding .OAEP , hashes .SHA384 , padding .MGF1 )
281
- RSA_OAEP_SHA512_MGF1 = (EncryptionType .ASYMMETRIC , rsa , padding .OAEP , hashes .SHA512 , padding .MGF1 )
318
+ RSA_OAEP_SHA1_MGF1 = (
319
+ EncryptionType .ASYMMETRIC ,
320
+ rsa ,
321
+ padding .OAEP ,
322
+ hashes .SHA1 ,
323
+ padding .MGF1 ,
324
+ )
325
+ RSA_OAEP_SHA256_MGF1 = (
326
+ EncryptionType .ASYMMETRIC ,
327
+ rsa ,
328
+ padding .OAEP ,
329
+ hashes .SHA256 ,
330
+ padding .MGF1 ,
331
+ )
332
+ RSA_OAEP_SHA384_MGF1 = (
333
+ EncryptionType .ASYMMETRIC ,
334
+ rsa ,
335
+ padding .OAEP ,
336
+ hashes .SHA384 ,
337
+ padding .MGF1 ,
338
+ )
339
+ RSA_OAEP_SHA512_MGF1 = (
340
+ EncryptionType .ASYMMETRIC ,
341
+ rsa ,
342
+ padding .OAEP ,
343
+ hashes .SHA512 ,
344
+ padding .MGF1 ,
345
+ )
282
346
283
- def __init__ (self , encryption_type , algorithm , padding_type , padding_algorithm , padding_mgf ):
347
+ def __init__ (
348
+ self , encryption_type , algorithm , padding_type , padding_algorithm , padding_mgf
349
+ ):
284
350
"""Prepares new WrappingAlgorithm."""
285
351
self .encryption_type = encryption_type
286
352
self .algorithm = algorithm
0 commit comments