| Server IP : 77.50.203.18 / Your IP : 192.168.0.10 Web Server : Apache/2.4.62 (CentOS Stream) OpenSSL/3.5.7 mpm-itk/2.4.7-04 PHP/8.4.23 System : Linux web2 5.14.0-722.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jul 6 09:07:51 UTC 2026 x86_64 User : warsnews.ru ( 1001) PHP Version : 8.4.23 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /usr/share/crypto-policies/python/policygenerators/__pycache__/ |
Upload File : |
a
Rz)j� � @ s< d dl Z d dlZd dlmZ ddlmZ G dd� de�ZdS )� N)�mkstemp� )�ConfigGeneratorc @ s� e Zd ZdZddhZddddddd d
d d � Zd
ddddddddddd� Zdddddddd d �Zd d d d d!d"�Zd#Z d$d%hd&d'hd(d)hd*�Z
d+d,d-d.d/�Z e d0d1� �Z
e d2d3� �Ze d4d5� �ZdS )6�RPMSequoiaGeneratorz rpm-sequoiaZrpmZMD5ZSHA1NzSHA2-224zSHA2-256zSHA2-384zSHA2-512zSHA3-256zSHA3-512) Zmd5Zsha1Z ripemd160Zsha224Zsha256Zsha384Zsha512�sha3-256�sha3-512zIDEA-CFBz3DES-CFBz AES-128-CFBz AES-192-CFBz AES-256-CFBzCAMELLIA-128-CFBzCAMELLIA-192-CFBzCAMELLIA-256-CFB) ZideaZ tripledesZcast5ZblowfishZaes128Zaes192Zaes256ZtwofishZ camellia128Z camellia192Z camellia256Z SECP256R1Z SECP384R1Z SECP521R1ZX25519ZX448zMLKEM768-X25519zMLKEM1024-X448)Znistp256Znistp384Znistp521Zcv25519�x25519�x448�mlkem768-x25519�mlkem1024-x448z
EDDSA-ED25519z EDDSA-ED448zMLDSA65-ED25519z
MLDSA87-ED448)�ed25519�eddsa�ed448�mldsa65-ed25519�
mldsa87-ed448)Z elgamal1024Z elgamal2048Z elgamal3072Z elgamal4096Z
brainpoolp256Z
brainpoolp512z AES-256-EAXz AES-128-EAXz AES-256-OCBz AES-128-OCBz AES-256-GCMz AES-128-GCM)ZeaxZocb�gcm)r r )r r r
r )r r r
r r )r )�hash�group�sign�aeadc s: � fdd�|D �}|r6d� dd� |D ��}d|� d�S dS ) Nc s$ g | ] }� j �|g �D ]}|�qqS � )�ignore_invalid�get)�.0�k�v��clsr �=/usr/share/crypto-policies/python/policygenerators/sequoia.py�
<listcomp>d � z@RPMSequoiaGenerator._generate_ignore_invalid.<locals>.<listcomp>z, c s s | ]}d |� d �V qdS )�"Nr )r r r r r � <genexpr>f r z?RPMSequoiaGenerator._generate_ignore_invalid.<locals>.<genexpr>zignore_invalid = [ z ]
� )�join)r Zkinds�valuesr r r �_generate_ignore_invalidb s
z,RPMSequoiaGenerator._generate_ignore_invalidc C s� |j }d}|| �d�7 }| j�� D ]D\}}||d v r:dnd}||� d|� d�7 }||� d|� d�7 }q"|d7 }|d 7 }|| �d
�7 }| j�� D ]0\}}||d
v r�dnd}||� d |� d�7 }q�|d7 }|d 7 }|| �d
d�7 }tdd� |d D ��}tdd� |d D ��}|jd } dD ]4}
|
| k�r4|�r4dnd}|d|
� d |� d�7 }�q |jd } dD ]4}
|
| k�rx|�rxdnd}|d|
� d |� d�7 }�q`| j�� D ]4\} }
|
|d
v �r�dnd}|| � d |� d�7 }�q�| j�� D ]4\} }||d v �r�dnd}|| � d |� d�7 }�q�| j D ]} || � d�7 }�q |d7 }|d7 }|d7 }|| �d�7 }| j
�� D ]6\} }|� |d
��r~dnd}|| � d |� d�7 }�qb|S )Nz[hash_algorithms]
r �always�neverz.collision_resistance = "z"
z .second_preimage_resistance = "z default_disposition = "never"
z[symmetric_algorithms]
Zcipherz = "z[asymmetric_algorithms]
r r c s s | ]}|� d �V qdS )zRSA-N��
startswith�r �sr r r r" � r z6RPMSequoiaGenerator.generate_config.<locals>.<genexpr>c s s | ]}|� d �V qdS )zDSA-Nr) r+ r r r r" � r Z min_rsa_size)i i i i ZrsaZ min_dsa_sizeZdsaz = "never"
z default_disposition = "never"
z
[aead_algorithms]
r ) Zenabledr& �hash_backwards_map�items�symmetric_backwards_map�anyZintegers� asymmetric_group_backwards_map� asymmetric_sign_backwards_map�asymmetric_always_disabled�aead_backwards_map� intersection)r Zpolicy�pZcfgZ seqoia_nameZc_p_namer Zany_rsaZany_dsaZmin_rsa�lZmin_dsaZseq_namer r Z c_p_namesr r r �generate_configj sT
z#RPMSequoiaGenerator.generate_configc C s^ d� dd� |�d�D ��}||k}|}t�d�dkr8dS t� \}}�zz�t�|d��}|�|� W d � n1 st0 Y tjd|gd d
tj tj
d �}| � d |j � |j
r�d
|j
d nd� �� |j |j
fdkr�W W t�|� dS | � d|r�dnd d � | � d|� �� W n, t�y> | � d� Y W t�|� dS 0 W t�|� n t�|� 0 d S )N�
c s s | ]}|� d �s|V qdS )zignore_invalid = Nr) )r r7 r r r r" � s
�z2RPMSequoiaGenerator.test_config.<locals>.<genexpr>Z OLD_SEQUOIA�1T�wzsequoia-policy-config-checkFzutf-8)�check�encoding�stdout�stderrz$sequoia-policy-config-check returns z `�`r# )r r# zThere is an error in a � tightenedZ generatedz sequoia policyzPolicy:
z,sequoia-policy-config not found, skipping...)r$ �split�os�getenvr �fdopen�write�
subprocess�run�PIPEZSTDOUTZeprint�
returncoder> �unlink�FileNotFoundError)r ZconfigZstricter_configrA �fd�path�f�rr r r � test_config� sR
�
(����
�
��
�z RPMSequoiaGenerator.test_config)�__name__�
__module__� __qualname__Z CONFIG_NAMEZSCOPESr- r/ r1 r2 r3 r4 r � classmethodr& r8 rQ r r r r r sn �
�� � � �
6r )rC rG Ztempfiler Zconfiggeneratorr r r r r r �<module> s