mirror of
https://github.com/OpenKMIP/PyKMIP.git
synced 2025-04-08 19:25:06 +02:00
e313731692
This change adds support for the Sensitive attribute, adding it to the attribute factory, the SQLAlchemy object hierarchy, and to the server attribute handling methods. The intent is to use this new attribute to test the new SetAttribute and ModifyAttribute operations coming in future commits. Unit tests have been added and modified to support the new additions.
2058 lines
86 KiB
Python
2058 lines
86 KiB
Python
# Copyright (c) 2014 The Johns Hopkins University/Applied Physics Laboratory
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
# In case of new content, remove the following line to enable flake8 tests
|
|
# flake8: noqa
|
|
|
|
import copy
|
|
import enum
|
|
import functools
|
|
import six
|
|
|
|
|
|
class OrderedEnum(enum.Enum):
|
|
"""
|
|
An ordered variant of the Enum class that allows for comparisons.
|
|
|
|
Taken from: https://docs.python.org/3/library/enum.html#orderedenum
|
|
"""
|
|
|
|
def __ge__(self, other):
|
|
if self.__class__ is other.__class__:
|
|
return self.value >= other.value
|
|
return NotImplemented
|
|
|
|
def __gt__(self, other):
|
|
if self.__class__ is other.__class__:
|
|
return self.value > other.value
|
|
return NotImplemented
|
|
|
|
def __le__(self, other):
|
|
if self.__class__ is other.__class__:
|
|
return self.value <= other.value
|
|
return NotImplemented
|
|
|
|
def __lt__(self, other):
|
|
if self.__class__ is other.__class__:
|
|
return self.value < other.value
|
|
return NotImplemented
|
|
|
|
|
|
class AdjustmentType(enum.Enum):
|
|
# KMIP 2.0
|
|
INCREMENT = 0x00000001
|
|
DECREMENT = 0x00000002
|
|
NEGATE = 0x00000003
|
|
|
|
|
|
class AlternativeNameType(enum.Enum):
|
|
# KMIP 1.2
|
|
UNINTERPRETED_TEXT_STRING = 0x00000001
|
|
URI = 0x00000002
|
|
OBJECT_SERIAL_NUMBER = 0x00000003
|
|
EMAIL_ADDRESS = 0x00000004
|
|
DNS_NAME = 0x00000005
|
|
X500_DISTINGUISHED_NAME = 0x00000006
|
|
IP_ADDRESS = 0x00000007
|
|
|
|
|
|
class AsynchronousIndicator(enum.Enum):
|
|
# KMIP 2.0
|
|
MANDATORY = 0x00000001
|
|
OPTIONAL = 0x00000002
|
|
PROHIBITED = 0x00000003
|
|
|
|
|
|
class AttestationType(enum.Enum):
|
|
# KMIP 1.2
|
|
TPM_QUOTE = 0x00000001
|
|
TCG_INTEGRITY_REPORT = 0x00000002
|
|
SAML_ASSERTION = 0x00000003
|
|
|
|
|
|
class AttributeType(enum.Enum):
|
|
UNIQUE_IDENTIFIER = 'Unique Identifier'
|
|
NAME = 'Name'
|
|
OBJECT_TYPE = 'Object Type'
|
|
CRYPTOGRAPHIC_ALGORITHM = 'Cryptographic Algorithm'
|
|
CRYPTOGRAPHIC_LENGTH = 'Cryptographic Length'
|
|
CRYPTOGRAPHIC_PARAMETERS = 'Cryptographic Parameters'
|
|
CRYPTOGRAPHIC_DOMAIN_PARAMETERS = 'Cryptographic Domain Parameters'
|
|
CERTIFICATE_TYPE = 'Certificate Type'
|
|
CERTIFICATE_LENGTH = 'Certificate Length'
|
|
X_509_CERTIFICATE_IDENTIFIER = 'X.509 Certificate Identifier'
|
|
X_509_CERTIFICATE_SUBJECT = 'X.509 Certificate Subject'
|
|
X_509_CERTIFICATE_ISSUER = 'X.509 Certificate Issuer'
|
|
CERTIFICATE_IDENTIFIER = 'Certificate Identifier'
|
|
CERTIFICATE_SUBJECT = 'Certificate Subject'
|
|
CERTIFICATE_ISSUER = 'Certificate Issuer'
|
|
DIGITAL_SIGNATURE_ALGORITHM = 'Digital Signature Algorithm'
|
|
DIGEST = 'Digest'
|
|
OPERATION_POLICY_NAME = 'Operation Policy Name'
|
|
CRYPTOGRAPHIC_USAGE_MASK = 'Cryptographic Usage Mask'
|
|
LEASE_TIME = 'Lease Time'
|
|
USAGE_LIMITS = 'Usage Limits'
|
|
STATE = 'State'
|
|
INITIAL_DATE = 'Initial Date'
|
|
ACTIVATION_DATE = 'Activation Date'
|
|
PROCESS_START_DATE = 'Process Start Date'
|
|
PROTECT_STOP_DATE = 'Protect Stop Date'
|
|
DEACTIVATION_DATE = 'Deactivation Date'
|
|
DESTROY_DATE = 'Destroy Date'
|
|
COMPROMISE_OCCURRENCE_DATE = 'Compromise Occurrence Date'
|
|
COMPROMISE_DATE = 'Compromise Date'
|
|
REVOCATION_REASON = 'Revocation Reason'
|
|
ARCHIVE_DATE = 'Archive Date'
|
|
OBJECT_GROUP = 'Object Group'
|
|
FRESH = 'Fresh'
|
|
LINK = 'Link'
|
|
APPLICATION_SPECIFIC_INFORMATION = 'Application Specific Information'
|
|
CONTACT_INFORMATION = 'Contact Information'
|
|
LAST_CHANGE_DATE = 'Last Change Date'
|
|
CUSTOM_ATTRIBUTE = 'Custom Attribute'
|
|
ALTERNATIVE_NAME = 'Alternative Name'
|
|
KEY_VALUE_PRESENT = 'Key Value Present'
|
|
KEY_VALUE_LOCATION = 'Key Value Location'
|
|
ORIGINAL_CREATION_DATE = 'Original Creation Date'
|
|
SENSITIVE = "Sensitive"
|
|
|
|
|
|
class AuthenticationSuite(enum.Enum):
|
|
"""
|
|
The type of authentication suite used by KMIP clients and servers.
|
|
|
|
The authentication suite defines the protocol versions and cipher suites
|
|
that should be used to secure KMIP client/server communications. An
|
|
authentication suite is one of two core components that make up a KMIP
|
|
client/server profile. For more information, see Section 3 of the KMIP
|
|
1.1 profiles document.
|
|
"""
|
|
BASIC = 1
|
|
TLS12 = 2
|
|
|
|
|
|
class BatchErrorContinuationOption(enum.Enum):
|
|
# KMIP 1.0
|
|
CONTINUE = 0x00000001
|
|
STOP = 0x00000002
|
|
UNDO = 0x00000003
|
|
|
|
|
|
class BlockCipherMode(enum.Enum):
|
|
# KMIP 1.0
|
|
CBC = 0x00000001
|
|
ECB = 0x00000002
|
|
PCBC = 0x00000003
|
|
CFB = 0x00000004
|
|
OFB = 0x00000005
|
|
CTR = 0x00000006
|
|
CMAC = 0x00000007
|
|
CCM = 0x00000008
|
|
GCM = 0x00000009
|
|
CBC_MAC = 0x0000000A
|
|
XTS = 0x0000000B
|
|
AES_KEY_WRAP_PADDING = 0x0000000C
|
|
NIST_KEY_WRAP = 0x0000000D
|
|
X9_102_AESKW = 0x0000000E
|
|
X9_102_TDKW = 0x0000000F
|
|
X9_102_AKW1 = 0x00000010
|
|
X9_102_AKW2 = 0x00000011
|
|
# KMIP 1.4
|
|
AEAD = 0x00000012
|
|
|
|
|
|
class CancellationResult(enum.Enum):
|
|
# KMIP 1.0
|
|
CANCELED = 0x00000001
|
|
UNABLE_TO_CANCEL = 0x00000002
|
|
COMPLETED = 0x00000003
|
|
FAILED = 0x00000004
|
|
UNAVAILABLE = 0x00000005
|
|
|
|
|
|
class CertificateRequestType(enum.Enum):
|
|
# KMIP 1.0
|
|
CRMF = 0x00000001
|
|
PKCS10 = 0x00000002
|
|
PEM = 0x00000003
|
|
PGP = 0x00000004 # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
|
|
|
|
class CertificateType(enum.Enum):
|
|
# KMIP 1.0
|
|
X_509 = 0x00000001
|
|
PGP = 0x00000002 # Deprecated as of KMIP 1.2, not deprecated in KMIP 2.0
|
|
|
|
|
|
class ClientRegistrationMethod(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
SERVER_PREGENERATED = 0x00000002
|
|
SERVER_ON_DEMAND = 0x00000003
|
|
CLIENT_GENERATED = 0x00000004
|
|
CLIENT_REGISTERED = 0x00000005
|
|
|
|
|
|
class ConformanceClause(enum.Enum):
|
|
DISCOVER_VERSIONS = 1
|
|
BASELINE = 2
|
|
SECRET_DATA = 3
|
|
SYMMETRIC_KEY_STORE = 4
|
|
SYMMETRIC_KEY_FOUNDRY = 5
|
|
ASYMMETRIC_KEY_STORE = 6
|
|
ASYMMETRIC_KEY_AND_CERTIFICATE_STORE = 7
|
|
ASYMMETRIC_KEY_FOUNDRY = 8
|
|
CERTIFICATE = 9
|
|
ASYMMETRIC_KEY_FOUNDRY_AND_CERTIFICATE = 10
|
|
STORAGE = 11
|
|
|
|
|
|
class CredentialType(enum.Enum):
|
|
# KMIP 1.0
|
|
USERNAME_AND_PASSWORD = 0x00000001
|
|
# KMIP 1.1
|
|
DEVICE = 0x00000002
|
|
# KMIP 1.2
|
|
ATTESTATION = 0x00000003
|
|
# KMIP 2.0
|
|
ONE_TIME_PASSWORD = 0x00000004
|
|
HASHED_PASSWORD = 0x00000005
|
|
TICKET = 0x00000006
|
|
|
|
|
|
class CryptographicAlgorithm(enum.Enum):
|
|
# KMIP 1.0
|
|
DES = 0x00000001
|
|
TRIPLE_DES = 0x00000002 # '3DES' is invalid syntax
|
|
AES = 0x00000003
|
|
RSA = 0x00000004
|
|
DSA = 0x00000005
|
|
ECDSA = 0x00000006
|
|
HMAC_SHA1 = 0x00000007
|
|
HMAC_SHA224 = 0x00000008
|
|
HMAC_SHA256 = 0x00000009
|
|
HMAC_SHA384 = 0x0000000A
|
|
HMAC_SHA512 = 0x0000000B
|
|
HMAC_MD5 = 0x0000000C
|
|
DH = 0x0000000D
|
|
ECDH = 0x0000000E
|
|
ECMQV = 0x0000000F
|
|
BLOWFISH = 0x00000010
|
|
CAMELLIA = 0x00000011
|
|
CAST5 = 0x00000012
|
|
IDEA = 0x00000013
|
|
MARS = 0x00000014
|
|
RC2 = 0x00000015
|
|
RC4 = 0x00000016
|
|
RC5 = 0x00000017
|
|
SKIPJACK = 0x00000018
|
|
TWOFISH = 0x00000019
|
|
# KMIP 1.2
|
|
EC = 0x0000001A
|
|
# KMIP 1.3
|
|
ONE_TIME_PAD = 0x0000001B
|
|
# KMIP 1.4
|
|
CHACHA20 = 0x0000001C
|
|
POLY1305 = 0x0000001D
|
|
CHACHA20_POLY1305 = 0x0000001E
|
|
SHA3_224 = 0x0000001F
|
|
SHA3_256 = 0x00000020
|
|
SHA3_384 = 0x00000021
|
|
SHA3_512 = 0x00000022
|
|
HMAC_SHA3_224 = 0x00000023
|
|
HMAC_SHA3_256 = 0x00000024
|
|
HMAC_SHA3_384 = 0x00000025
|
|
HMAC_SHA3_512 = 0x00000026
|
|
SHAKE_128 = 0x00000027
|
|
SHAKE_256 = 0x00000028
|
|
# KMIP 2.0
|
|
ARIA = 0x00000029
|
|
SEED = 0x0000002A
|
|
SM2 = 0x0000002B
|
|
SM3 = 0x0000002C
|
|
SM4 = 0x0000002D
|
|
GOST_R_34_10_2012 = 0x0000002E
|
|
GOST_R_34_11_2012 = 0x0000002F
|
|
GOST_R_34_13_2015 = 0x00000030
|
|
GOST_28147_89 = 0x00000031
|
|
XMSS = 0x00000032
|
|
SPHINCS_256 = 0x00000033
|
|
MCELIECE = 0x00000034
|
|
MCELIECE_6960119 = 0x00000035
|
|
MCELIECE_8192128 = 0x00000036
|
|
ED25519 = 0x00000037
|
|
ED448 = 0x00000038
|
|
|
|
|
|
class CryptographicUsageMask(enum.Enum):
|
|
# KMIP 1.0
|
|
SIGN = 0x00000001
|
|
VERIFY = 0x00000002
|
|
ENCRYPT = 0x00000004
|
|
DECRYPT = 0x00000008
|
|
WRAP_KEY = 0x00000010
|
|
UNWRAP_KEY = 0x00000020
|
|
EXPORT = 0x00000040
|
|
MAC_GENERATE = 0x00000080
|
|
MAC_VERIFY = 0x00000100
|
|
DERIVE_KEY = 0x00000200
|
|
CONTENT_COMMITMENT = 0x00000400
|
|
KEY_AGREEMENT = 0x00000800
|
|
CERTIFICATE_SIGN = 0x00001000
|
|
CRL_SIGN = 0x00002000
|
|
GENERATE_CRYPTOGRAM = 0x00004000 # Designated '(Reserved)' in KMIP 2.0
|
|
VALIDATE_CRYPTOGRAM = 0x00008000 # Designated '(Reserved)' in KMIP 2.0
|
|
TRANSLATE_ENCRYPT = 0x00010000 # Designated '(Reserved)' in KMIP 2.0
|
|
TRANSLATE_DECRYPT = 0x00020000 # Designated '(Reserved)' in KMIP 2.0
|
|
TRANSLATE_WRAP = 0x00040000 # Designated '(Reserved)' in KMIP 2.0
|
|
TRANSLATE_UNWRAP = 0x00080000 # Designated '(Reserved)' in KMIP 2.0
|
|
# KMIP 2.0
|
|
AUTHENTICATE = 0x00100000
|
|
UNRESTRICTED = 0x00200000
|
|
FPE_ENCRYPT = 0x00400000
|
|
FPE_DECRYPT = 0x00800000
|
|
|
|
|
|
class Data(enum.Enum):
|
|
# KMIP 2.0
|
|
DECRYPT = 0x00000001
|
|
ENCRYPT = 0x00000002
|
|
HASH = 0x00000003
|
|
MAC_MAC_DATA = 0x00000004
|
|
RNG_RETRIEVE = 0x00000005
|
|
SIGN_SIGNATURE_DATA = 0x00000006
|
|
SIGNATURE_VERIFY = 0x00000007
|
|
|
|
|
|
class DerivationMethod(enum.Enum):
|
|
# KMIP 1.0
|
|
PBKDF2 = 0x00000001
|
|
HASH = 0x00000002
|
|
HMAC = 0x00000003
|
|
ENCRYPT = 0x00000004
|
|
NIST800_108_C = 0x00000005
|
|
NIST800_108_F = 0x00000006
|
|
NIST800_108_DPI = 0x00000007
|
|
# KMIP 1.4
|
|
ASYMMETRIC_KEY = 0x00000008
|
|
# KMIP 2.0
|
|
AWS_SIGNATURE_VERSION_4 = 0x00000009
|
|
HKDF = 0x0000000A
|
|
|
|
|
|
class DestroyAction(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
KEY_MATERIAL_DELETED = 0x00000002
|
|
KEY_MATERIAL_SHREDDED = 0x00000003
|
|
METADATA_DELETED = 0x00000004
|
|
METADATA_SHREDDED = 0x00000005
|
|
DELETED = 0x00000006
|
|
SHREDDED = 0x00000007
|
|
|
|
|
|
class DigitalSignatureAlgorithm(enum.Enum):
|
|
# KMIP 1.1
|
|
MD2_WITH_RSA_ENCRYPTION = 0x00000001
|
|
MD5_WITH_RSA_ENCRYPTION = 0x00000002
|
|
SHA1_WITH_RSA_ENCRYPTION = 0x00000003
|
|
SHA224_WITH_RSA_ENCRYPTION = 0x00000004
|
|
SHA256_WITH_RSA_ENCRYPTION = 0x00000005
|
|
SHA384_WITH_RSA_ENCRYPTION = 0x00000006
|
|
SHA512_WITH_RSA_ENCRYPTION = 0x00000007
|
|
RSASSA_PSS = 0x00000008
|
|
DSA_WITH_SHA1 = 0x00000009
|
|
DSA_WITH_SHA224 = 0x0000000A
|
|
DSA_WITH_SHA256 = 0x0000000B
|
|
ECDSA_WITH_SHA1 = 0x0000000C
|
|
ECDSA_WITH_SHA224 = 0x0000000D
|
|
ECDSA_WITH_SHA256 = 0x0000000E
|
|
ECDSA_WITH_SHA384 = 0x0000000F
|
|
ECDSA_WITH_SHA512 = 0x00000010
|
|
# KMIP 1.4
|
|
SHA3_256_WITH_RSA_ENCRYPTION = 0x00000011
|
|
SHA3_384_WITH_RSA_ENCRYPTION = 0x00000012
|
|
SHA3_512_WITH_RSA_ENCRYPTION = 0x00000013
|
|
|
|
|
|
class DRBGAlgorithm(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
DUAL_EC = 0x00000002
|
|
HASH = 0x00000003
|
|
HMAC = 0x00000004
|
|
CTR = 0x00000005
|
|
|
|
|
|
class EncodingOption(enum.Enum):
|
|
# KMIP 1.1
|
|
NO_ENCODING = 0x00000001
|
|
TTLV_ENCODING = 0x00000002
|
|
|
|
|
|
class EndpointRole(enum.Enum):
|
|
CLIENT = 0x00000001
|
|
SERVER = 0x00000002
|
|
|
|
|
|
class FIPS186Variation(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
GP_X_ORIGINAL = 0x00000002
|
|
GP_X_CHANGE_NOTICE = 0x00000003
|
|
X_ORIGINAL = 0x00000004
|
|
X_CHANGE_NOTICE = 0x00000005
|
|
K_ORIGINAL = 0x00000006
|
|
K_CHANGE_NOTICE = 0x00000007
|
|
|
|
|
|
class HashingAlgorithm(enum.Enum):
|
|
# KMIP 1.0
|
|
MD2 = 0x00000001
|
|
MD4 = 0x00000002
|
|
MD5 = 0x00000003
|
|
SHA_1 = 0x00000004
|
|
SHA_224 = 0x00000005
|
|
SHA_256 = 0x00000006
|
|
SHA_384 = 0x00000007
|
|
SHA_512 = 0x00000008
|
|
RIPEMD_160 = 0x00000009
|
|
TIGER = 0x0000000A
|
|
WHIRLPOOL = 0x0000000B
|
|
# KMIP 1.2
|
|
SHA_512_224 = 0x0000000C
|
|
SHA_512_256 = 0x0000000D
|
|
# KMIP 1.4
|
|
SHA3_224 = 0x0000000E
|
|
SHA3_256 = 0x0000000F
|
|
SHA3_384 = 0x00000010
|
|
SHA3_512 = 0x00000011
|
|
|
|
|
|
class InteropFunction(enum.Enum):
|
|
# KMIP 2.0
|
|
BEGIN = 0x00000001
|
|
END = 0x00000002
|
|
RESET = 0x00000003
|
|
|
|
|
|
class ItemType(enum.Enum):
|
|
# KMIP 2.0
|
|
STRUCTURE = 0x00000001
|
|
INTEGER = 0x00000002
|
|
LONG_INTEGER = 0x00000003
|
|
BIG_INTEGER = 0x00000004
|
|
ENUMERATION = 0x00000005
|
|
BOOLEAN = 0x00000006
|
|
TEXT_STRING = 0x00000007
|
|
BYTE_STRING = 0x00000008
|
|
DATE_TIME = 0x00000009
|
|
INTERVAL = 0x0000000A
|
|
DATE_TIME_EXTENDED = 0x0000000B
|
|
|
|
|
|
class KeyCompressionType(enum.Enum):
|
|
# KMIP 1.0
|
|
EC_PUBLIC_KEY_TYPE_UNCOMPRESSED = 0x00000001
|
|
EC_PUBLIC_KEY_TYPE_X9_62_COMPRESSED_PRIME = 0x00000002
|
|
EC_PUBLIC_KEY_TYPE_X9_62_COMPRESSED_CHAR2 = 0x00000003
|
|
EC_PUBLIC_KEY_TYPE_X9_62_HYBRID = 0x00000004
|
|
|
|
|
|
class KeyFormatType(enum.Enum):
|
|
# KMIP 1.0
|
|
RAW = 0x00000001
|
|
OPAQUE = 0x00000002
|
|
PKCS_1 = 0x00000003
|
|
PKCS_8 = 0x00000004
|
|
X_509 = 0x00000005
|
|
EC_PRIVATE_KEY = 0x00000006
|
|
TRANSPARENT_SYMMETRIC_KEY = 0x00000007
|
|
TRANSPARENT_DSA_PRIVATE_KEY = 0x00000008
|
|
TRANSPARENT_DSA_PUBLIC_KEY = 0x00000009
|
|
TRANSPARENT_RSA_PRIVATE_KEY = 0x0000000A
|
|
TRANSPARENT_RSA_PUBLIC_KEY = 0x0000000B
|
|
TRANSPARENT_DH_PRIVATE_KEY = 0x0000000C
|
|
TRANSPARENT_DH_PUBLIC_KEY = 0x0000000D
|
|
TRANSPARENT_ECDSA_PRIVATE_KEY = 0x0000000E # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
|
|
TRANSPARENT_ECDSA_PUBLIC_KEY = 0x0000000F # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
|
|
TRANSPARENT_ECDH_PRIVATE_KEY = 0x00000010 # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
|
|
TRANSPARENT_ECDH_PUBLIC_KEY = 0x00000011 # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
|
|
TRANSPARENT_ECMQV_PRIVATE_KEY = 0x00000012 # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
|
|
TRANSPARENT_ECMQV_PUBLIC_KEY = 0x00000013 # Deprecated in KMIP 1.4, designated '(Reserved)' in KMIP 2.0
|
|
# KMIP 1.3
|
|
TRANSPARENT_EC_PRIVATE_KEY = 0x00000014
|
|
TRANSPARENT_EC_PUBLIC_KEY = 0x00000015
|
|
# KMIP 1.4
|
|
PKCS_12 = 0x00000016
|
|
|
|
|
|
class KeyRoleType(enum.Enum):
|
|
# KMIP 1.0
|
|
BDK = 0x00000001
|
|
CVK = 0x00000002
|
|
DEK = 0x00000003
|
|
MKAC = 0x00000004
|
|
MKSMC = 0x00000005
|
|
MKSMI = 0x00000006
|
|
MKDAC = 0x00000007
|
|
MKDN = 0x00000008
|
|
MKCP = 0x00000009
|
|
MKOTH = 0x0000000A
|
|
KEK = 0x0000000B
|
|
MAC_16609 = 0x0000000C
|
|
MAC_97971 = 0x0000000D
|
|
MAC_97972 = 0x0000000E
|
|
MAC_97973 = 0x0000000F
|
|
MAC_97974 = 0x00000010
|
|
MAC_97975 = 0x00000011
|
|
ZPK = 0x00000012
|
|
PVKIBM = 0x00000013
|
|
PVKPVV = 0x00000014
|
|
PVKOTH = 0x00000015
|
|
# KMIP 1.4
|
|
DUKPT = 0x00000016
|
|
IV = 0x00000017
|
|
TRKBK = 0x00000018
|
|
|
|
|
|
class KeyValueLocationType(enum.Enum):
|
|
# KMIP 1.2
|
|
UNINTERPRETED_TEXT_STRING = 0x00000001
|
|
URI = 0x00000002
|
|
|
|
|
|
class KeyWrapType(enum.Enum):
|
|
NOT_WRAPPED = 0x00000001
|
|
AS_REGISTERED = 0x00000002
|
|
|
|
|
|
class KMIPVersion(OrderedEnum):
|
|
KMIP_1_0 = 1.0
|
|
KMIP_1_1 = 1.1
|
|
KMIP_1_2 = 1.2
|
|
KMIP_1_3 = 1.3
|
|
KMIP_1_4 = 1.4
|
|
KMIP_2_0 = 2.0
|
|
|
|
|
|
class LinkType(enum.Enum):
|
|
# KMIP 1.0
|
|
CERTIFICATE_LINK = 0x00000101
|
|
PUBLIC_KEY_LINK = 0x00000102
|
|
PRIVATE_KEY_LINK = 0x00000103
|
|
DERIVATION_BASE_OBJECT_LINK = 0x00000104
|
|
DERIVED_KEY_LINK = 0x00000105
|
|
REPLACEMENT_OBJECT_LINK = 0x00000106
|
|
REPLACED_OBJECT_LINK = 0x00000107
|
|
# KMIP 1.2
|
|
PARENT_LINK = 0x00000108
|
|
CHILD_LINK = 0x00000109
|
|
PREVIOUS_LINK = 0x0000010A
|
|
NEXT_LINK = 0x0000010B
|
|
# KMIP 1.4
|
|
PKCS12_CERTIFICATE_LINK = 0x0000010C
|
|
PKCS12_PASSWORD_LINK = 0x0000010D
|
|
# KMIP 2.0
|
|
WRAPPING_KEY_LINK = 0x0000010E
|
|
|
|
|
|
class MaskGenerator(enum.Enum):
|
|
# KMIP 1.4
|
|
MGF1 = 0x00000001
|
|
|
|
|
|
class NameType(enum.Enum):
|
|
# KMIP 1.0
|
|
UNINTERPRETED_TEXT_STRING = 0x00000001
|
|
URI = 0x00000002
|
|
|
|
|
|
class NISTKeyType(enum.Enum):
|
|
# KMIP 2.0
|
|
PRIVATE_SIGNATURE_KEY = 0x00000001
|
|
PUBLIC_SIGNATURE_VERIFICATION_KEY = 0x00000002
|
|
SYMMETRIC_AUTHENTICATION_KEY = 0x00000003
|
|
PRIVATE_AUTHENTICATION_KEY = 0x00000004
|
|
PUBLIC_AUTHENTICATION_KEY = 0x00000005
|
|
SYMMETRIC_DATA_ENCRYPTION_KEY = 0x00000006
|
|
SYMMETRIC_KEY_WRAPPING_KEY = 0x00000007
|
|
SYMMETRIC_RANDOM_NUMBER_GENERATION_KEY = 0x00000008
|
|
SYMMETRIC_MASTER_KEY = 0x00000009
|
|
PRIVATE_KEY_TRANSPORT_KEY = 0x0000000A
|
|
PUBLIC_KEY_TRANSPORT_KEY = 0x0000000B
|
|
SYMMETRIC_KEY_AGREEMENT_KEY = 0x0000000C
|
|
PRIVATE_STATIC_KEY_AGREEMENT_KEY = 0x0000000D
|
|
PUBLIC_STATIC_KEY_AGREEMENT_KEY = 0x0000000E
|
|
PRIVATE_EPHEMERAL_KEY_AGREEMENT_KEY = 0x0000000F
|
|
PUBLIC_EPHEMERAL_KEY_AGREEMENT_KEY = 0x00000010
|
|
SYMMETRIC_AUTHORIZATION_KEY = 0x00000011
|
|
PRIVATE_AUTHORIZATION_KEY = 0x00000012
|
|
PUBLIC_AUTHORIZATION_KEY = 0x00000013
|
|
|
|
|
|
class ObjectGroupMember(enum.Enum):
|
|
# KMIP 1.1
|
|
GROUP_MEMBER_FRESH = 0x00000001
|
|
GROUP_MEMBER_DEFAULT = 0x00000002
|
|
|
|
|
|
class ObjectType(enum.Enum):
|
|
# KMIP 1.0
|
|
CERTIFICATE = 0x00000001
|
|
SYMMETRIC_KEY = 0x00000002
|
|
PUBLIC_KEY = 0x00000003
|
|
PRIVATE_KEY = 0x00000004
|
|
SPLIT_KEY = 0x00000005
|
|
TEMPLATE = 0x00000006 # Deprecated in KMIP 1.3, designated '(Reserved)' in KMIP 2.0
|
|
SECRET_DATA = 0x00000007
|
|
OPAQUE_DATA = 0x00000008
|
|
# KMIP 1.2
|
|
PGP_KEY = 0x00000009
|
|
# KMIP 2.0
|
|
CERTIFICATE_REQUEST = 0x0000000A
|
|
|
|
|
|
class OpaqueDataType(enum.Enum):
|
|
NONE = 0x80000000 # Not defined by the standard, but we need something.
|
|
# The standard does say that values starting 0x8xxxxxx
|
|
# are considered extensions
|
|
|
|
|
|
class Operation(enum.Enum):
|
|
# KMIP 1.0
|
|
CREATE = 0x00000001
|
|
CREATE_KEY_PAIR = 0x00000002
|
|
REGISTER = 0x00000003
|
|
REKEY = 0x00000004
|
|
DERIVE_KEY = 0x00000005
|
|
CERTIFY = 0x00000006
|
|
RECERTIFY = 0x00000007
|
|
LOCATE = 0x00000008
|
|
CHECK = 0x00000009
|
|
GET = 0x0000000A
|
|
GET_ATTRIBUTES = 0x0000000B
|
|
GET_ATTRIBUTE_LIST = 0x0000000C
|
|
ADD_ATTRIBUTE = 0x0000000D
|
|
MODIFY_ATTRIBUTE = 0x0000000E
|
|
DELETE_ATTRIBUTE = 0x0000000F
|
|
OBTAIN_LEASE = 0x00000010
|
|
GET_USAGE_ALLOCATION = 0x00000011
|
|
ACTIVATE = 0x00000012
|
|
REVOKE = 0x00000013
|
|
DESTROY = 0x00000014
|
|
ARCHIVE = 0x00000015
|
|
RECOVER = 0x00000016
|
|
VALIDATE = 0x00000017
|
|
QUERY = 0x00000018
|
|
CANCEL = 0x00000019
|
|
POLL = 0x0000001A
|
|
NOTIFY = 0x0000001B
|
|
PUT = 0x0000001C
|
|
# KMIP 1.1
|
|
REKEY_KEY_PAIR = 0x0000001D
|
|
DISCOVER_VERSIONS = 0x0000001E
|
|
# KMIP 1.2
|
|
ENCRYPT = 0x0000001F
|
|
DECRYPT = 0x00000020
|
|
SIGN = 0x00000021
|
|
SIGNATURE_VERIFY = 0x00000022
|
|
MAC = 0x00000023
|
|
MAC_VERIFY = 0x00000024
|
|
RNG_RETRIEVE = 0x00000025
|
|
RNG_SEED = 0x00000026
|
|
HASH = 0x00000027
|
|
CREATE_SPLIT_KEY = 0x00000028
|
|
JOIN_SPLIT_KEY = 0x00000029
|
|
# KMIP 1.4
|
|
IMPORT = 0x0000002A
|
|
EXPORT = 0x0000002B
|
|
# KMIP 2.0
|
|
LOG = 0x0000002C
|
|
LOGIN = 0x0000002D
|
|
LOGOUT = 0x0000002E
|
|
DELEGATED_LOGIN = 0x0000002F
|
|
ADJUST_ATTRIBUTE = 0x00000030
|
|
SET_ATTRIBUTE = 0x00000031
|
|
SET_ENDPOINT_ROLE = 0x00000032
|
|
PKCS_11 = 0x00000033
|
|
INTEROP = 0x00000034
|
|
REPROVISION = 0x00000035
|
|
|
|
|
|
class PaddingMethod(enum.Enum):
|
|
# KMIP 1.0
|
|
NONE = 0x00000001
|
|
OAEP = 0x00000002
|
|
PKCS5 = 0x00000003
|
|
SSL3 = 0x00000004
|
|
ZEROS = 0x00000005
|
|
ANSI_X923 = 0x00000006
|
|
ISO_10126 = 0x00000007
|
|
PKCS1v15 = 0x00000008
|
|
X931 = 0x00000009
|
|
PSS = 0x0000000A
|
|
|
|
|
|
class PKCS11Function(enum.Enum):
|
|
# KMIP 2.0
|
|
#
|
|
# These values are the 1-based offset count of the function in the
|
|
# CK_FUNCTION_LIST_3_0 structure as specified in the OASIS PKCS#11
|
|
# Cryptographic Token Interface Base Specification Version 3.0 document.
|
|
#
|
|
# The above document is not currently available, so this set of
|
|
# enumerations is intentionally left empty as a placeholder. It should
|
|
# be filled in in a future update.
|
|
PLACEHOLDER = 'Do not use this.'
|
|
|
|
|
|
class PKCS11ReturnCode(enum.Enum):
|
|
# KMIP 2.0
|
|
#
|
|
# These values are specified in the CK_RV values in the OASIS PKCS#11
|
|
# Cryptographic Token Interface Base Specification Version 3.0 document.
|
|
#
|
|
# The above document is not currently available, so this set of
|
|
# enumerations is intentionally left empty as a placeholder. It should
|
|
# be filled in in a future update.
|
|
PLACEHOLDER = 'Do not use this.'
|
|
|
|
|
|
class Policy(enum.Enum):
|
|
ALLOW_ALL = "Allow All"
|
|
ALLOW_OWNER = "Allow Owner"
|
|
DISALLOW_ALL = "Disallow All"
|
|
|
|
|
|
class ProfileName(enum.Enum):
|
|
# KMIP 1.3
|
|
BASELINE_SERVER_BASIC_KMIPv12 = 0x00000001
|
|
BASELINE_SERVER_TLSv12_KMIPv12 = 0x00000002
|
|
BASELINE_CLIENT_BASIC_KMIPv12 = 0x00000003
|
|
BASELINE_CLIENT_TLSv12_KMIPv12 = 0x00000004
|
|
COMPLETE_SERVER_BASIC_KMIPv12 = 0x00000005
|
|
COMPLETE_SERVER_TLSv12_KMIPv12 = 0x00000006
|
|
TAPE_LIBRARY_CLIENT_KMIPv10 = 0x00000007
|
|
TAPE_LIBRARY_CLIENT_KMIPv11 = 0x00000008
|
|
TAPE_LIBRARY_CLIENT_KMIPv12 = 0x00000009
|
|
TAPE_LIBRARY_SERVER_KMIPv10 = 0x0000000A
|
|
TAPE_LIBRARY_SERVER_KMIPv11 = 0x0000000B
|
|
TAPE_LIBRARY_SERVER_KMIPv12 = 0x0000000C
|
|
SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv10 = 0x0000000D
|
|
SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv11 = 0x0000000E
|
|
SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv12 = 0x0000000F
|
|
SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv10 = 0x00000010
|
|
SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv11 = 0x00000011
|
|
SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv12 = 0x00000012
|
|
ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv10 = 0x00000013
|
|
ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv11 = 0x00000014
|
|
ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv12 = 0x00000015
|
|
ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv10 = 0x00000016
|
|
ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv11 = 0x00000017
|
|
ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv12 = 0x00000018
|
|
BASIC_CRYPTOGRAPHIC_CLIENT_KMIPv12 = 0x00000019
|
|
BASIC_CRYPTOGRAPHIC_SERVER_KMIPv12 = 0x0000001A
|
|
ADVANCED_CRYPTOGRAPHIC_CLIENT_KMIPv12 = 0x0000001B
|
|
ADVANCED_CRYPTOGRAPHIC_SERVER_KMIPv12 = 0x0000001C
|
|
RNG_CRYPTOGRAPHIC_CLIENT_KMIPv12 = 0x0000001D
|
|
RNG_CRYPTOGRAPHIC_SERVER_KMIPv12 = 0x0000001E
|
|
BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv10 = 0x0000001F
|
|
INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv10 = 0x00000020
|
|
ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv10 = 0x00000021
|
|
BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv11 = 0x00000022
|
|
INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv11 = 0x00000023
|
|
ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv11 = 0x00000024
|
|
BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv12 = 0x00000025
|
|
INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv12 = 0x00000026
|
|
ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv12 = 0x00000027
|
|
SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv10 = 0x00000028
|
|
SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv11 = 0x00000029
|
|
SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv12 = 0x0000002A
|
|
OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv10 = 0x0000002B
|
|
OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv11 = 0x0000002C
|
|
OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv12 = 0x0000002D
|
|
OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv10 = 0x0000002E
|
|
OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv11 = 0x0000002F
|
|
OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv12 = 0x00000030
|
|
SUITE_B_MINLOS_128_CLIENT_KMIPv10 = 0x00000031
|
|
SUITE_B_MINLOS_128_CLIENT_KMIPv11 = 0x00000032
|
|
SUITE_B_MINLOS_128_CLIENT_KMIPv12 = 0x00000033
|
|
SUITE_B_MINLOS_128_SERVER_KMIPv10 = 0x00000034
|
|
SUITE_B_MINLOS_128_SERVER_KMIPv11 = 0x00000035
|
|
SUITE_B_MINLOS_128_SERVER_KMIPv12 = 0x00000036
|
|
SUITE_B_MINLOS_192_CLIENT_KMIPv10 = 0x00000037
|
|
SUITE_B_MINLOS_192_CLIENT_KMIPv11 = 0x00000038
|
|
SUITE_B_MINLOS_192_CLIENT_KMIPv12 = 0x00000039
|
|
SUITE_B_MINLOS_192_SERVER_KMIPv10 = 0x0000003A
|
|
SUITE_B_MINLOS_192_SERVER_KMIPv11 = 0x0000003B
|
|
SUITE_B_MINLOS_192_SERVER_KMIPv12 = 0x0000003C
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv10 = 0x0000003D
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv11 = 0x0000003E
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv12 = 0x0000003F
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv10 = 0x00000040
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv11 = 0x00000041
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv12 = 0x00000042
|
|
HTTPS_CLIENT_KMIPv10 = 0x00000043
|
|
HTTPS_CLIENT_KMIPv11 = 0x00000044
|
|
HTTPS_CLIENT_KMIPv12 = 0x00000045
|
|
HTTPS_SERVER_KMIPv10 = 0x00000046
|
|
HTTPS_SERVER_KMIPv11 = 0x00000047
|
|
HTTPS_SERVER_KMIPv12 = 0x00000048
|
|
JSON_CLIENT_KMIPv10 = 0x00000049
|
|
JSON_CLIENT_KMIPv11 = 0x0000004A
|
|
JSON_CLIENT_KMIPv12 = 0x0000004B
|
|
JSON_SERVER_KMIPv10 = 0x0000004C
|
|
JSON_SERVER_KMIPv11 = 0x0000004D
|
|
JSON_SERVER_KMIPv12 = 0x0000004E
|
|
XML_CLIENT_KMIPv10 = 0x0000004F
|
|
XML_CLIENT_KMIPv11 = 0x00000050
|
|
XML_CLIENT_KMIPv12 = 0x00000051
|
|
XML_SERVER_KMIPv10 = 0x00000052
|
|
XML_SERVER_KMIPv11 = 0x00000053
|
|
XML_SERVER_KMIPv12 = 0x00000054
|
|
BASELINE_SERVER_BASIC_KMIPv13 = 0x00000055
|
|
BASELINE_SERVER_TLSv12_KMIPv13 = 0x00000056
|
|
BASELINE_CLIENT_BASIC_KMIPv13 = 0x00000057
|
|
BASELINE_CLIENT_TLSv12_KMIPv13 = 0x00000058
|
|
COMPLETE_SERVER_BASIC_KMIPv13 = 0x00000059
|
|
COMPLETE_SERVER_TLSv12_KMIPv13 = 0x0000005A
|
|
TAPE_LIBRARY_CLIENT_KMIPv13 = 0x0000005B
|
|
TAPE_LIBRARY_SERVER_KMIPv13 = 0x0000005C
|
|
SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv13 = 0x0000005D
|
|
SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv13 = 0x0000005E
|
|
ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv13 = 0x0000005F
|
|
ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv13 = 0x00000060
|
|
BASIC_CRYPTOGRAPHIC_CLIENT_KMIPv13 = 0x00000061
|
|
BASIC_CRYPTOGRAPHIC_SERVER_KMIPv13 = 0x00000062
|
|
ADVANCED_CRYPTOGRAPHIC_CLIENT_KMIPv13 = 0x00000063
|
|
ADVANCED_CRYPTOGRAPHIC_SERVER_KMIPv13 = 0x00000064
|
|
RNG_CRYPTOGRAPHIC_CLIENT_KMIPv13 = 0x00000065
|
|
RNG_CRYPTOGRAPHIC_SERVER_KMIPv13 = 0x00000066
|
|
BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv13 = 0x00000067
|
|
INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv13 = 0x00000068
|
|
ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv13 = 0x00000069
|
|
SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv13 = 0x0000006A
|
|
OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv13 = 0x0000006B
|
|
OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv13 = 0x0000006C
|
|
SUITE_B_MINLOS_128_CLIENT_KMIPv13 = 0x0000006D
|
|
SUITE_B_MINLOS_128_SERVER_KMIPv13 = 0x0000006E
|
|
SUITE_B_MINLOS_192_CLIENT_KMIPv13 = 0x0000006F
|
|
SUITE_B_MINLOS_192_SERVER_KMIPv13 = 0x00000070
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv13 = 0x00000071
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv13 = 0x00000072
|
|
HTTPS_CLIENT_KMIPv13 = 0x00000073
|
|
HTTPS_SERVER_KMIPv13 = 0x00000074
|
|
JSON_CLIENT_KMIPv13 = 0x00000075
|
|
JSON_SERVER_KMIPv13 = 0x00000076
|
|
XML_CLIENT_KMIPv13 = 0x00000077
|
|
XML_SERVER_KMIPv13 = 0x00000078
|
|
# KMIP 1.4
|
|
BASELINE_SERVER_BASIC_KMIPv14 = 0x00000079
|
|
BASELINE_SERVER_TLSv12_KMIPv14 = 0x0000007A
|
|
BASELINE_CLIENT_BASIC_KMIPv14 = 0x0000007B
|
|
BASELINE_CLIENT_TLSv12_KMIPv14 = 0x0000007C
|
|
COMPLETE_SERVER_BASIC_KMIPv14 = 0x0000007D
|
|
COMPLETE_SERVER_TLSv12_KMIPv14 = 0x0000007E
|
|
TAPE_LIBRARY_CLIENT_KMIPv14 = 0x0000007F
|
|
TAPE_LIBRARY_SERVER_KMIPv14 = 0x00000080
|
|
SYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv14 = 0x00000081
|
|
SYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv14 = 0x00000082
|
|
ASYMMETRIC_KEY_LIFECYCLE_CLIENT_KMIPv14 = 0x00000083
|
|
ASYMMETRIC_KEY_LIFECYCLE_SERVER_KMIPv14 = 0x00000084
|
|
BASIC_CRYPTOGRAPHIC_CLIENT_KMIPv14 = 0x00000085
|
|
BASIC_CRYPTOGRAPHIC_SERVER_KMIPv14 = 0x00000086
|
|
ADVANCED_CRYPTOGRAPHIC_CLIENT_KMIPv14 = 0x00000087
|
|
ADVANCED_CRYPTOGRAPHIC_SERVER_KMIPv14 = 0x00000088
|
|
RNG_CRYPTOGRAPHIC_CLIENT_KMIPv14 = 0x00000089
|
|
RNG_CRYPTOGRAPHIC_SERVER_KMIPv14 = 0x0000008A
|
|
BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv14 = 0x0000008B
|
|
INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv14 = 0x0000008C
|
|
ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT_KMIPv14 = 0x0000008D
|
|
SYMMETRIC_KEY_FOUNDRY_SERVER_KMIPv14 = 0x0000008E
|
|
OPAQUE_MANAGED_OBJECT_STORE_CLIENT_KMIPv14 = 0x0000008F
|
|
OPAQUE_MANAGED_OBJECT_STORE_SERVER_KMIPv14 = 0x00000090
|
|
SUITE_B_MINLOS_128_CLIENT_KMIPv14 = 0x00000091
|
|
SUITE_B_MINLOS_128_SERVER_KMIPv14 = 0x00000092
|
|
SUITE_B_MINLOS_192_CLIENT_KMIPv14 = 0x00000093
|
|
SUITE_B_MINLOS_192_SERVER_KMIPv14 = 0x00000094
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT_KMIPv14 = 0x00000095
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER_KMIPv14 = 0x00000096
|
|
HTTPS_CLIENT_KMIPv14 = 0x00000097
|
|
HTTPS_SERVER_KMIPv14 = 0x00000098
|
|
JSON_CLIENT_KMIPv14 = 0x00000099
|
|
JSON_SERVER_KMIPv14 = 0x0000009A
|
|
XML_CLIENT_KMIPv14 = 0x0000009B
|
|
XML_SERVER_KMIPv14 = 0x0000009C
|
|
# KMIP 2.0 - All of the above are now designated '(Reserved)' in KMIP 2.0
|
|
COMPLETE_SERVER_BASIC = 0x00000104
|
|
COMPLETE_SERVER_TLSv12 = 0x00000105
|
|
TAPE_LIBRARY_CLIENT = 0x00000106
|
|
TAPE_LIBRARY_SERVER = 0x00000107
|
|
SYMMETRIC_KEY_LIFECYCLE_CLIENT = 0x00000108
|
|
SYMMETRIC_KEY_LIFECYCLE_SERVER = 0x00000109
|
|
ASYMMETRIC_KEY_LIFECYCLE_CLIENT = 0x0000010A
|
|
ASYMMETRIC_KEY_LIFECYCLE_SERVER = 0x0000010B
|
|
BASIC_CRYPTOGRAPHIC_CLIENT = 0x0000010C
|
|
BASIC_CRYPTOGRAPHIC_SERVER = 0x0000010D
|
|
ADVANCED_CRYPTOGRAPHIC_CLIENT = 0x0000010E
|
|
ADVANCED_CRYPTOGRAPHIC_SERVER = 0x0000010F
|
|
RNG_CRYPTOGRAPHIC_CLIENT = 0x00000110
|
|
RNG_CRYPTOGRAPHIC_SERVER = 0x00000111
|
|
BASIC_SYMMETRIC_KEY_FOUNDRY_CLIENT = 0x00000112
|
|
INTERMEDIATE_SYMMETRIC_KEY_FOUNDRY_CLIENT = 0x00000113
|
|
ADVANCED_SYMMETRIC_KEY_FOUNDRY_CLIENT = 0x00000114
|
|
SYMMETRIC_KEY_FOUNDRY_SERVER = 0x00000115
|
|
OPAQUE_MANAGED_OBJECT_STORE_CLIENT = 0x00000116
|
|
OPAQUE_MANAGED_OBJECT_STORE_SERVER = 0x00000117
|
|
SUITE_B_MINLOS_128_CLIENT = 0x00000118
|
|
SUITE_B_MINLOS_128_SERVER = 0x00000119
|
|
SUITE_B_MINLOS_192_CLIENT = 0x0000011A
|
|
SUITE_B_MINLOS_192_SERVER = 0x0000011B
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_CLIENT = 0x0000011C
|
|
STORAGE_ARRAY_WITH_SELF_ENCRYPTING_DRIVE_SERVER = 0x0000011D
|
|
HTTPS_CLIENT = 0x0000011E
|
|
HTTPS_SERVER = 0x0000011F
|
|
JSON_CLIENT = 0x00000120
|
|
JSON_SERVER = 0x00000121
|
|
XML_CLIENT = 0x00000122
|
|
XML_SERVER = 0x00000123
|
|
AES_XTS_CLIENT = 0x00000124
|
|
AES_XTS_SERVER = 0x00000125
|
|
QUANTUM_SAFE_CLIENT = 0x00000126
|
|
QUANTUM_SAFE_SERVER = 0x00000127
|
|
PKCS11_CLIENT = 0x00000128
|
|
PKCS11_SERVER = 0x00000129
|
|
BASELINE_CLIENT = 0x0000012A
|
|
BASELINE_SERVER = 0x0000012B
|
|
COMPLETE_SERVER = 0x0000012C
|
|
|
|
|
|
class ProtectionLevel(enum.Enum):
|
|
# KMIP 2.0
|
|
HIGH = 0x00000001
|
|
LOW = 0x00000002
|
|
|
|
|
|
class ProtectionStorageMask(enum.Enum):
|
|
# KMIP 2.0
|
|
SOFTWARE = 0x00000001
|
|
HARDWARE = 0x00000002
|
|
ON_PROCESSOR = 0x00000004
|
|
ON_SYSTEM = 0x00000008
|
|
OFF_SYSTEM = 0x00000010
|
|
HYPERVISOR = 0x00000020
|
|
OPERATING_SYSTEM = 0x00000040
|
|
CONTAINER = 0x00000080
|
|
ON_PREMISES = 0x00000100
|
|
OFF_PREMISES = 0x00000200
|
|
SELF_MANAGED = 0x00000400
|
|
OUTSOURCED = 0x00000800
|
|
VALIDATED = 0x00001000
|
|
SAME_JURISDICTION = 0x00002000
|
|
|
|
|
|
class PutFunction(enum.Enum):
|
|
# KMIP 1.0
|
|
NEW = 0x00000001
|
|
REPLACE = 0x00000002
|
|
|
|
|
|
class QueryFunction(enum.Enum):
|
|
# KMIP 1.0
|
|
QUERY_OPERATIONS = 0x00000001
|
|
QUERY_OBJECTS = 0x00000002
|
|
QUERY_SERVER_INFORMATION = 0x00000003
|
|
QUERY_APPLICATION_NAMESPACES = 0x00000004
|
|
# KMIP 1.1
|
|
QUERY_EXTENSION_LIST = 0x00000005
|
|
QUERY_EXTENSION_MAP = 0x00000006
|
|
# KMIP 1.2
|
|
QUERY_ATTESTATION_TYPES = 0x00000007
|
|
# KMIP 1.3
|
|
QUERY_RNGS = 0x00000008
|
|
QUERY_VALIDATIONS = 0x00000009
|
|
QUERY_PROFILES = 0x0000000A
|
|
QUERY_CAPABILITIES = 0x0000000B
|
|
QUERY_CLIENT_REGISTRATION_METHODS = 0x0000000C
|
|
# KMIP 2.0
|
|
QUERY_DEFAULTS_INFORMATION = 0x0000000D
|
|
QUERY_STORAGE_PROTECTION_MASKS = 0x0000000E
|
|
|
|
|
|
class RecommendedCurve(enum.Enum):
|
|
# KMIP 1.0
|
|
P_192 = 0x00000001
|
|
K_163 = 0x00000002
|
|
B_163 = 0x00000003
|
|
P_224 = 0x00000004
|
|
K_233 = 0x00000005
|
|
B_233 = 0x00000006
|
|
P_256 = 0x00000007
|
|
K_283 = 0x00000008
|
|
B_283 = 0x00000009
|
|
P_384 = 0x0000000A
|
|
K_409 = 0x0000000B
|
|
B_409 = 0x0000000C
|
|
P_521 = 0x0000000D
|
|
K_571 = 0x0000000E
|
|
B_571 = 0x0000000F
|
|
# KMIP 1.2
|
|
SECP112R1 = 0x00000010
|
|
SECP112R2 = 0x00000011
|
|
SECP128R1 = 0x00000012
|
|
SECP128R2 = 0x00000013
|
|
SECP160K1 = 0x00000014
|
|
SECP160R1 = 0x00000015
|
|
SECP160R2 = 0x00000016
|
|
SECP191K1 = 0x00000017
|
|
SECP224K1 = 0x00000018
|
|
SECP256K1 = 0x00000019
|
|
SECT113R1 = 0x0000001A
|
|
SECT113R2 = 0x0000001B
|
|
SECT131R1 = 0x0000001C
|
|
SECT131R2 = 0x0000001D
|
|
SECT163R1 = 0x0000001E
|
|
SECT193R1 = 0x0000001F
|
|
SECT193R2 = 0x00000020
|
|
SECT239K1 = 0x00000021
|
|
ANSIX9P192V2 = 0x00000022
|
|
ANSIX9P192V3 = 0x00000023
|
|
ANSIX9P239V1 = 0x00000024
|
|
ANSIX9P239V2 = 0x00000025
|
|
ANSIX9P239V3 = 0x00000026
|
|
ANSIX9C2PNB163V1 = 0x00000027
|
|
ANSIX9C2PNB163V2 = 0x00000028
|
|
ANSIX9C2PNB163V3 = 0x00000029
|
|
ANSIX9C2PNB176V1 = 0x0000002A
|
|
ANSIX9C2TNB191V1 = 0x0000002B
|
|
ANSIX9C2TNB191V2 = 0x0000002C
|
|
ANSIX9C2TNB191V3 = 0x0000002D
|
|
ANSIX9C2PNB208W1 = 0x0000002E
|
|
ANSIX9C2TNB239V1 = 0x0000002F
|
|
ANSIX9C2TNB239V2 = 0x00000030
|
|
ANSIX9C2TNB239V3 = 0x00000031
|
|
ANSIX9C2PNB272W1 = 0x00000032
|
|
ANSIX9C2PNB304W1 = 0x00000033
|
|
ANSIX9C2TNB359V1 = 0x00000034
|
|
ANSIX9C2PNB368W1 = 0x00000035
|
|
ANSIX9C2TNB431R1 = 0x00000036
|
|
BRAINPOOLP160R1 = 0x00000037
|
|
BRAINPOOLP160T1 = 0x00000038
|
|
BRAINPOOLP192R1 = 0x00000039
|
|
BRAINPOOLP192T1 = 0x0000003A
|
|
BRAINPOOLP224R1 = 0x0000003B
|
|
BRAINPOOLP224T1 = 0x0000003C
|
|
BRAINPOOLP256R1 = 0x0000003D
|
|
BRAINPOOLP256T1 = 0x0000003E
|
|
BRAINPOOLP320R1 = 0x0000003F
|
|
BRAINPOOLP320T1 = 0x00000040
|
|
BRAINPOOLP384R1 = 0x00000041
|
|
BRAINPOOLP384T1 = 0x00000042
|
|
BRAINPOOLP512R1 = 0x00000043
|
|
BRAINPOOLP512T1 = 0x00000044
|
|
# KMIP 2.0
|
|
CURVE25519 = 0x00000045
|
|
CURVE448 = 0x00000046
|
|
|
|
|
|
class ResultReason(enum.Enum):
|
|
# KMIP 1.0
|
|
ITEM_NOT_FOUND = 0x00000001
|
|
RESPONSE_TOO_LARGE = 0x00000002
|
|
AUTHENTICATION_NOT_SUCCESSFUL = 0x00000003
|
|
INVALID_MESSAGE = 0x00000004
|
|
OPERATION_NOT_SUPPORTED = 0x00000005
|
|
MISSING_DATA = 0x00000006
|
|
INVALID_FIELD = 0x00000007
|
|
FEATURE_NOT_SUPPORTED = 0x00000008
|
|
OPERATION_CANCELED_BY_REQUESTER = 0x00000009
|
|
CRYPTOGRAPHIC_FAILURE = 0x0000000A
|
|
ILLEGAL_OPERATION = 0x0000000B
|
|
PERMISSION_DENIED = 0x0000000C
|
|
OBJECT_ARCHIVED = 0x0000000D
|
|
INDEX_OUT_OF_BOUNDS = 0x0000000E
|
|
APPLICATION_NAMESPACE_NOT_SUPPORTED = 0x0000000F
|
|
KEY_FORMAT_TYPE_NOT_SUPPORTED = 0x00000010
|
|
KEY_COMPRESSION_TYPE_NOT_SUPPORTED = 0x00000011
|
|
ENCODING_OPTION_ERROR = 0x00000012
|
|
KEY_VALUE_NOT_PRESENT = 0x00000013
|
|
ATTESTATION_REQUIRED = 0x00000014
|
|
ATTESTATION_FAILED = 0x00000015
|
|
SENSITIVE = 0x00000016
|
|
NOT_EXTRACTABLE = 0x00000017
|
|
OBJECT_ALREADY_EXISTS = 0x00000018
|
|
GENERAL_FAILURE = 0x00000100
|
|
# KMIP 2.0
|
|
INVALID_TICKET = 0x00000019
|
|
USAGE_LIMIT_EXCEEDED = 0x0000001A
|
|
NUMERIC_RANGE = 0x0000001B
|
|
INVALID_DATA_TYPE = 0x0000001C
|
|
READ_ONLY_ATTRIBUTE = 0x0000001D
|
|
MULTI_VALUED_ATTRIBUTE = 0x0000001E
|
|
UNSUPPORTED_ATTRIBUTE = 0x0000001F
|
|
ATTRIBUTE_INSTANCE_NOT_FOUND = 0x00000020
|
|
ATTRIBUTE_NOT_FOUND = 0x00000021
|
|
ATTRIBUTE_READ_ONLY = 0x00000022
|
|
ATTRIBUTE_SINGLE_VALUED = 0x00000023
|
|
BAD_CRYPTOGRAPHIC_PARAMETERS = 0x00000024
|
|
BAD_PASSWORD = 0x00000025
|
|
CODEC_ERROR = 0x00000026
|
|
# 0x00000027 is designated '(Reserved)' in KMIP 2.0
|
|
ILLEGAL_OBJECT_TYPE = 0x00000028
|
|
INCOMPATIBLE_CRYPTOGRAPHIC_USAGE_MASK = 0x00000029
|
|
INTERNAL_SERVER_ERROR = 0x0000002A
|
|
INVALID_ASYNCHRONOUS_CORRELATION_VALUE = 0x0000002B
|
|
INVALID_ATTRIBUTE = 0x0000002C
|
|
INVALID_ATTRIBUTE_VALUE = 0x0000002D
|
|
INVALID_CORRELATION_VALUE = 0x0000002E
|
|
INVALID_CSR = 0x0000002F
|
|
INVALID_OBJECT_TYPE = 0x00000030
|
|
# 0x00000031 is designated '(Reserved)' in KMIP 2.0
|
|
KEY_WRAP_TYPE_NOT_SUPPORTED = 0x00000032
|
|
# 0x00000033 is designated '(Reserved)' in KMIP 2.0
|
|
MISSING_INITIALIZATION_VECTOR = 0x00000034
|
|
NON_UNIQUE_NAME_ATTRIBUTE = 0x00000035
|
|
OBJECT_DESTROYED = 0x00000036
|
|
OBJECT_NOT_FOUND = 0x00000037
|
|
# 0x00000038 is unassigned
|
|
NOT_AUTHORISED = 0x00000039
|
|
SERVER_LIMIT_EXCEEDED = 0x0000003A
|
|
UNKNOWN_ENUMERATION = 0x0000003B
|
|
UNKNOWN_MESSAGE_EXTENSION = 0x0000003C
|
|
UNKNOWN_TAG = 0x0000003D
|
|
UNSUPPORTED_CRYPTOGRAPHIC_PARAMETERS = 0x0000003E
|
|
UNSUPPORTED_PROTOCOL_VERSION = 0x0000003F
|
|
WRAPPING_OBJECT_ARCHIVED = 0x00000040
|
|
WRAPPING_OBJECT_DESTROYED = 0x00000041
|
|
WRAPPING_OBJECT_NOT_FOUND = 0x00000042
|
|
WRONG_KEY_LIFECYCLE_STATE = 0x00000043
|
|
PROTECTION_STORAGE_UNAVAILABLE = 0x00000044
|
|
PKCS11_CODEC_ERROR = 0x00000045
|
|
PKCS11_INVALID_FUNCTION = 0x00000046
|
|
PKCS11_INVALID_INTERFACE = 0x00000047
|
|
|
|
|
|
class ResultStatus(enum.Enum):
|
|
# KMIP 1.0
|
|
SUCCESS = 0x00000000
|
|
OPERATION_FAILED = 0x00000001
|
|
OPERATION_PENDING = 0x00000002
|
|
OPERATION_UNDONE = 0x00000003
|
|
|
|
|
|
class RevocationReasonCode(enum.Enum):
|
|
# KMIP 1.0
|
|
UNSPECIFIED = 0x00000001
|
|
KEY_COMPROMISE = 0x00000002
|
|
CA_COMPROMISE = 0x00000003
|
|
AFFILIATION_CHANGED = 0x00000004
|
|
SUPERSEDED = 0x00000005
|
|
CESSATION_OF_OPERATION = 0x00000006
|
|
PRIVILEGE_WITHDRAWN = 0x00000007
|
|
|
|
|
|
class RNGAlgorithm(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
FIPS186_2 = 0x00000002
|
|
DRBG = 0x00000003
|
|
NRBG = 0x00000004
|
|
ANSI_X931 = 0x00000005
|
|
ANSI_X962 = 0x00000006
|
|
|
|
|
|
class RNGMode(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
SHARED_INSTANTIATION = 0x00000002
|
|
NON_SHARED_INSTANTIATION = 0x00000003
|
|
|
|
|
|
class SecretDataType(enum.Enum):
|
|
# KMIP 1.0
|
|
PASSWORD = 0x00000001
|
|
SEED = 0x00000002
|
|
|
|
|
|
class ShreddingAlgorithm(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
CRYPTOGRAPHIC = 0x00000002
|
|
UNSUPPORTED = 0x00000003
|
|
|
|
|
|
class SplitKeyMethod(enum.Enum):
|
|
# KMIP 1.0
|
|
XOR = 0x00000001
|
|
POLYNOMIAL_SHARING_GF_2_16 = 0x00000002
|
|
POLYNOMIAL_SHARING_PRIME_FIELD = 0x00000003
|
|
# KMIP 1.2
|
|
POLYNOMIAL_SHARING_GF_2_8 = 0x00000004
|
|
|
|
|
|
class State(enum.Enum):
|
|
# KMIP 1.0
|
|
PRE_ACTIVE = 0x00000001
|
|
ACTIVE = 0x00000002
|
|
DEACTIVATED = 0x00000003
|
|
COMPROMISED = 0x00000004
|
|
DESTROYED = 0x00000005
|
|
DESTROYED_COMPROMISED = 0x00000006
|
|
|
|
|
|
class StorageStatusMask(enum.Enum):
|
|
# KMIP 1.0
|
|
ONLINE_STORAGE = 0x00000001
|
|
ARCHIVAL_STORAGE = 0x00000002
|
|
# KMIP 2.0
|
|
DESTROYED_STORAGE = 0x00000004
|
|
|
|
|
|
class Tags(enum.Enum):
|
|
DEFAULT = 0x420000 # Custom PyKMIP tag used as the global default
|
|
# KMIP 1.0
|
|
ACTIVATION_DATE = 0x420001
|
|
APPLICATION_DATA = 0x420002
|
|
APPLICATION_NAMESPACE = 0x420003
|
|
APPLICATION_SPECIFIC_INFORMATION = 0x420004
|
|
ARCHIVE_DATE = 0x420005
|
|
ASYNCHRONOUS_CORRELATION_VALUE = 0x420006
|
|
ASYNCHRONOUS_INDICATOR = 0x420007
|
|
ATTRIBUTE = 0x420008
|
|
ATTRIBUTE_INDEX = 0x420009 # Designated '(Reserved)' in KMIP 2.0
|
|
ATTRIBUTE_NAME = 0x42000A
|
|
ATTRIBUTE_VALUE = 0x42000B
|
|
AUTHENTICATION = 0x42000C
|
|
BATCH_COUNT = 0x42000D
|
|
BATCH_ERROR_CONTINUATION_OPTION = 0x42000E
|
|
BATCH_ITEM = 0x42000F
|
|
BATCH_ORDER_OPTION = 0x420010
|
|
BLOCK_CIPHER_MODE = 0x420011
|
|
CANCELLATION_RESULT = 0x420012
|
|
CERTIFICATE = 0x420013
|
|
CERTIFICATE_IDENTIFIER = 0x420014 # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
CERTIFICATE_ISSUER = 0x420015 # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
CERTIFICATE_ISSUER_ALTERNATIVE_NAME = 0x420016 # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
CERTIFICATE_ISSUER_DISTINGUISHED_NAME = 0x420017 # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
CERTIFICATE_REQUEST = 0x420018
|
|
CERTIFICATE_REQUEST_TYPE = 0x420019
|
|
CERTIFICATE_SUBJECT = 0x42001A # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
CERTIFICATE_SUBJECT_ALTERNATIVE_NAME = 0x42001B # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
CERTIFICATE_SUBJECT_DISTINGUISHED_NAME = 0x42001C # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
CERTIFICATE_TYPE = 0x42001D
|
|
CERTIFICATE_VALUE = 0x42001E
|
|
COMMON_TEMPLATE_ATTRIBUTE = 0x42001F # Designated '(Reserved)' in KMIP 2.0
|
|
COMPROMISE_DATE = 0x420020
|
|
COMPROMISE_OCCURRENCE_DATE = 0x420021
|
|
CONTACT_INFORMATION = 0x420022
|
|
CREDENTIAL = 0x420023
|
|
CREDENTIAL_TYPE = 0x420024
|
|
CREDENTIAL_VALUE = 0x420025
|
|
CRITICALITY_INDICATOR = 0x420026
|
|
CRT_COEFFICIENT = 0x420027
|
|
CRYPTOGRAPHIC_ALGORITHM = 0x420028
|
|
CRYPTOGRAPHIC_DOMAIN_PARAMETERS = 0x420029
|
|
CRYPTOGRAPHIC_LENGTH = 0x42002A
|
|
CRYPTOGRAPHIC_PARAMETERS = 0x42002B
|
|
CRYPTOGRAPHIC_USAGE_MASK = 0x42002C
|
|
CUSTOM_ATTRIBUTE = 0x42002D # Designated '(Reserved)' in KMIP 2.0
|
|
D = 0x42002E
|
|
DEACTIVATION_DATE = 0x42002F
|
|
DERIVATION_DATA = 0x420030
|
|
DERIVATION_METHOD = 0x420031
|
|
DERIVATION_PARAMETERS = 0x420032
|
|
DESTROY_DATE = 0x420033
|
|
DIGEST = 0x420034
|
|
DIGEST_VALUE = 0x420035
|
|
ENCRYPTION_KEY_INFORMATION = 0x420036
|
|
G = 0x420037
|
|
HASHING_ALGORITHM = 0x420038
|
|
INITIAL_DATE = 0x420039
|
|
INITIALIZATION_VECTOR = 0x42003A
|
|
ISSUER = 0x42003B # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
ITERATION_COUNT = 0x42003C
|
|
IV_COUNTER_NONCE = 0x42003D
|
|
J = 0x42003E
|
|
KEY = 0x42003F
|
|
KEY_BLOCK = 0x420040
|
|
KEY_COMPRESSION_TYPE = 0x420041
|
|
KEY_FORMAT_TYPE = 0x420042
|
|
KEY_MATERIAL = 0x420043
|
|
KEY_PART_IDENTIFIER = 0x420044
|
|
KEY_VALUE = 0x420045
|
|
KEY_WRAPPING_DATA = 0x420046
|
|
KEY_WRAPPING_SPECIFICATION = 0x420047
|
|
LAST_CHANGE_DATE = 0x420048
|
|
LEASE_TIME = 0x420049
|
|
LINK = 0x42004A
|
|
LINK_TYPE = 0x42004B
|
|
LINKED_OBJECT_IDENTIFIER = 0x42004C
|
|
MAC_SIGNATURE = 0x42004D
|
|
MAC_SIGNATURE_KEY_INFORMATION = 0x42004E
|
|
MAXIMUM_ITEMS = 0x42004F
|
|
MAXIMUM_RESPONSE_SIZE = 0x420050
|
|
MESSAGE_EXTENSION = 0x420051
|
|
MODULUS = 0x420052
|
|
NAME = 0x420053
|
|
NAME_TYPE = 0x420054
|
|
NAME_VALUE = 0x420055
|
|
OBJECT_GROUP = 0x420056
|
|
OBJECT_TYPE = 0x420057
|
|
OFFSET = 0x420058
|
|
OPAQUE_DATA_TYPE = 0x420059
|
|
OPAQUE_DATA_VALUE = 0x42005A
|
|
OPAQUE_OBJECT = 0x42005B
|
|
OPERATION = 0x42005C
|
|
OPERATION_POLICY_NAME = 0x42005D # Designated '(Reserved)' in KMIP 2.0
|
|
P = 0x42005E
|
|
PADDING_METHOD = 0x42005F
|
|
PRIME_EXPONENT_P = 0x420060
|
|
PRIME_EXPONENT_Q = 0x420061
|
|
PRIME_FIELD_SIZE = 0x420062
|
|
PRIVATE_EXPONENT = 0x420063
|
|
PRIVATE_KEY = 0x420064
|
|
PRIVATE_KEY_TEMPLATE_ATTRIBUTE = 0x420065 # Designated '(Reserved)' in KMIP 2.0
|
|
PRIVATE_KEY_UNIQUE_IDENTIFIER = 0x420066
|
|
PROCESS_START_DATE = 0x420067
|
|
PROTECT_STOP_DATE = 0x420068
|
|
PROTOCOL_VERSION = 0x420069
|
|
PROTOCOL_VERSION_MAJOR = 0x42006A
|
|
PROTOCOL_VERSION_MINOR = 0x42006B
|
|
PUBLIC_EXPONENT = 0x42006C
|
|
PUBLIC_KEY = 0x42006D
|
|
PUBLIC_KEY_TEMPLATE_ATTRIBUTE = 0x42006E # Designated '(Reserved)' in KMIP 2.0
|
|
PUBLIC_KEY_UNIQUE_IDENTIFIER = 0x42006F
|
|
PUT_FUNCTION = 0x420070
|
|
Q = 0x420071
|
|
Q_STRING = 0x420072
|
|
QLENGTH = 0x420073
|
|
QUERY_FUNCTION = 0x420074
|
|
RECOMMENDED_CURVE = 0x420075
|
|
REPLACED_UNIQUE_IDENTIFIER = 0x420076
|
|
REQUEST_BATCH_ITEM = 0x42000F
|
|
REQUEST_HEADER = 0x420077
|
|
REQUEST_MESSAGE = 0x420078
|
|
REQUEST_PAYLOAD = 0x420079
|
|
RESPONSE_BATCH_ITEM = 0x42000F
|
|
RESPONSE_HEADER = 0x42007A
|
|
RESPONSE_MESSAGE = 0x42007B
|
|
RESPONSE_PAYLOAD = 0x42007C
|
|
RESULT_MESSAGE = 0x42007D
|
|
RESULT_REASON = 0x42007E
|
|
RESULT_STATUS = 0x42007F
|
|
REVOCATION_MESSAGE = 0x420080
|
|
REVOCATION_REASON = 0x420081
|
|
REVOCATION_REASON_CODE = 0x420082
|
|
KEY_ROLE_TYPE = 0x420083
|
|
SALT = 0x420084
|
|
SECRET_DATA = 0x420085
|
|
SECRET_DATA_TYPE = 0x420086
|
|
SERIAL_NUMBER = 0x420087 # Deprecated, designated '(Reserved)' in KMIP 2.0
|
|
SERVER_INFORMATION = 0x420088
|
|
SPLIT_KEY = 0x420089
|
|
SPLIT_KEY_METHOD = 0x42008A
|
|
SPLIT_KEY_PARTS = 0x42008B
|
|
SPLIT_KEY_THRESHOLD = 0x42008C
|
|
STATE = 0x42008D
|
|
STORAGE_STATUS_MASK = 0x42008E
|
|
SYMMETRIC_KEY = 0x42008F
|
|
TEMPLATE = 0x420090 # Designated '(Reserved)' in KMIP 2.0
|
|
TEMPLATE_ATTRIBUTE = 0x420091 # Designated '(Reserved)' in KMIP 2.0
|
|
TIME_STAMP = 0x420092
|
|
UNIQUE_BATCH_ITEM_ID = 0x420093
|
|
UNIQUE_IDENTIFIER = 0x420094
|
|
USAGE_LIMITS = 0x420095
|
|
USAGE_LIMITS_COUNT = 0x420096
|
|
USAGE_LIMITS_TOTAL = 0x420097
|
|
USAGE_LIMITS_UNIT = 0x420098
|
|
USERNAME = 0x420099
|
|
VALIDITY_DATE = 0x42009A
|
|
VALIDITY_INDICATOR = 0x42009B
|
|
VENDOR_EXTENSION = 0x42009C
|
|
VENDOR_IDENTIFICATION = 0x42009D
|
|
WRAPPING_METHOD = 0x42009E
|
|
X = 0x42009F
|
|
Y = 0x4200A0
|
|
PASSWORD = 0x4200A1
|
|
# KMIP 1.1
|
|
DEVICE_IDENTIFIER = 0x4200A2
|
|
ENCODING_OPTION = 0x4200A3
|
|
EXTENSION_INFORMATION = 0x4200A4
|
|
EXTENSION_NAME = 0x4200A5
|
|
EXTENSION_TAG = 0x4200A6
|
|
EXTENSION_TYPE = 0x4200A7
|
|
FRESH = 0x4200A8
|
|
MACHINE_IDENTIFIER = 0x4200A9
|
|
MEDIA_IDENTIFIER = 0x4200AA
|
|
NETWORK_IDENTIFIER = 0x4200AB
|
|
OBJECT_GROUP_MEMBER = 0x4200AC
|
|
CERTIFICATE_LENGTH = 0x4200AD
|
|
DIGITAL_SIGNATURE_ALGORITHM = 0x4200AE
|
|
CERTIFICATE_SERIAL_NUMBER = 0x4200AF
|
|
DEVICE_SERIAL_NUMBER = 0x4200B0
|
|
ISSUER_ALTERNATIVE_NAME = 0x4200B1
|
|
ISSUER_DISTINGUISHED_NAME = 0x4200B2
|
|
SUBJECT_ALTERNATIVE_NAME = 0x4200B3
|
|
SUBJECT_DISTINGUISHED_NAME = 0x4200B4
|
|
X_509_CERTIFICATE_IDENTIFIER = 0x4200B5
|
|
X_509_CERTIFICATE_ISSUER = 0x4200B6
|
|
X_509_CERTIFICATE_SUBJECT = 0x4200B7
|
|
# KMIP 1.2
|
|
KEY_VALUE_LOCATION = 0x4200B8
|
|
KEY_VALUE_LOCATION_VALUE = 0x4200B9
|
|
KEY_VALUE_LOCATION_TYPE = 0x4200BA
|
|
KEY_VALUE_PRESENT = 0x4200BB
|
|
ORIGINAL_CREATION_DATE = 0x4200BC
|
|
PGP_KEY = 0x4200BD
|
|
PGP_KEY_VERSION = 0x4200BE
|
|
ALTERNATIVE_NAME = 0x4200BF
|
|
ALTERNATIVE_NAME_VALUE = 0x4200C0
|
|
ALTERNATIVE_NAME_TYPE = 0x4200C1
|
|
DATA = 0x4200C2
|
|
SIGNATURE_DATA = 0x4200C3
|
|
DATA_LENGTH = 0x4200C4
|
|
RANDOM_IV = 0x4200C5
|
|
MAC_DATA = 0x4200C6
|
|
ATTESTATION_TYPE = 0x4200C7
|
|
NONCE = 0x4200C8
|
|
NONCE_ID = 0x4200C9
|
|
NONCE_VALUE = 0x4200CA
|
|
ATTESTATION_MEASUREMENT = 0x4200CB
|
|
ATTESTATION_ASSERTION = 0x4200CC
|
|
IV_LENGTH = 0x4200CD
|
|
TAG_LENGTH = 0x4200CE
|
|
FIXED_FIELD_LENGTH = 0x4200CF
|
|
COUNTER_LENGTH = 0x4200D0
|
|
INITIAL_COUNTER_VALUE = 0x4200D1
|
|
INVOCATION_FIELD_LENGTH = 0x4200D2
|
|
ATTESTATION_CAPABLE_INDICATOR = 0x4200D3
|
|
# KMIP 1.3
|
|
OFFSET_ITEMS = 0x4200D4
|
|
LOCATED_ITEMS = 0x4200D5
|
|
CORRELATION_VALUE = 0x4200D6
|
|
INIT_INDICATOR = 0x4200D7
|
|
FINAL_INDICATOR = 0x4200D8
|
|
RNG_PARAMETERS = 0x4200D9
|
|
RNG_ALGORITHM = 0x4200DA
|
|
DRBG_ALGORITHM = 0x4200DB
|
|
FIPS186_VARIATION = 0x4200DC
|
|
PREDICTION_RESISTANCE = 0x4200DD
|
|
RANDOM_NUMBER_GENERATOR = 0x4200DE
|
|
VALIDATION_INFORMATION = 0x4200DF
|
|
VALIDATION_AUTHORITY_TYPE = 0x4200E0
|
|
VALIDATION_AUTHORITY_COUNTRY = 0x4200E1
|
|
VALIDATION_AUTHORITY_URI = 0x4200E2
|
|
VALIDATION_VERSION_MAJOR = 0x4200E3
|
|
VALIDATION_VERSION_MINOR = 0x4200E4
|
|
VALIDATION_TYPE = 0x4200E5
|
|
VALIDATION_LEVEL = 0x4200E6
|
|
VALIDATION_CERTIFICATE_IDENTIFIER = 0x4200E7
|
|
VALIDATION_CERTIFICATE_URI = 0x4200E8
|
|
VALIDATION_VENDOR_URI = 0x4200E9
|
|
VALIDATION_PROFILE = 0x4200EA
|
|
PROFILE_INFORMATION = 0x4200EB
|
|
PROFILE_NAME = 0x4200EC
|
|
SERVER_URI = 0x4200ED
|
|
SERVER_PORT = 0x4200EE
|
|
STREAMING_CAPABILITY = 0x4200EF
|
|
ASYNCHRONOUS_CAPABILITY = 0x4200F0
|
|
ATTESTATION_CAPABILITY = 0x4200F1
|
|
UNWRAP_MODE = 0x4200F2
|
|
DESTROY_ACTION = 0x4200F3
|
|
SHREDDING_ALGORITHM = 0x4200F4
|
|
RNG_MODE = 0x4200F5
|
|
CLIENT_REGISTRATION_METHOD = 0x4200F6
|
|
CAPABILITY_INFORMATION = 0x4200F7
|
|
# KMIP 1.4
|
|
KEY_WRAP_TYPE = 0x4200F8
|
|
BATCH_UNDO_CAPABILITY = 0x4200F9
|
|
BATCH_CONTINUE_CAPABILITY = 0x4200FA
|
|
PKCS12_FRIENDLY_NAME = 0x4200FB
|
|
DESCRIPTION = 0x4200FC
|
|
COMMENT = 0x4200FD
|
|
AUTHENTICATED_ENCRYPTION_ADDITIONAL_DATA = 0x4200FE
|
|
AUTHENTICATED_ENCRYPTION_TAG = 0x4200FF
|
|
SALT_LENGTH = 0x420100
|
|
MASK_GENERATOR = 0x420101
|
|
MASK_GENERATOR_HASHING_ALGORITHM = 0x420102
|
|
P_SOURCE = 0x420103
|
|
TRAILER_FIELD = 0x420104
|
|
CLIENT_CORRELATION_VALUE = 0x420105
|
|
SERVER_CORRELATION_VALUE = 0x420106
|
|
DIGESTED_DATA = 0x420107
|
|
CERTIFICATE_SUBJECT_CN = 0x420108
|
|
CERTIFICATE_SUBJECT_O = 0x420109
|
|
CERTIFICATE_SUBJECT_OU = 0x42010A
|
|
CERTIFICATE_SUBJECT_EMAIL = 0x42010B
|
|
CERTIFICATE_SUBJECT_C = 0x42010C
|
|
CERTIFICATE_SUBJECT_ST = 0x42010D
|
|
CERTIFICATE_SUBJECT_L = 0x42010E
|
|
CERTIFICATE_SUBJECT_UID = 0x42010F
|
|
CERTIFICATE_SUBJECT_SERIAL_NUMBER = 0x420110
|
|
CERTIFICATE_SUBJECT_TITLE = 0x420111
|
|
CERTIFICATE_SUBJECT_DC = 0x420112
|
|
CERTIFICATE_SUBJECT_DN_QUALIFIER = 0x420113
|
|
CERTIFICATE_ISSUER_CN = 0x420114
|
|
CERTIFICATE_ISSUER_O = 0x420115
|
|
CERTIFICATE_ISSUER_OU = 0x420116
|
|
CERTIFICATE_ISSUER_EMAIL = 0x420117
|
|
CERTIFICATE_ISSUER_C = 0x420118
|
|
CERTIFICATE_ISSUER_ST = 0x420119
|
|
CERTIFICATE_ISSUER_L = 0x42011A
|
|
CERTIFICATE_ISSUER_UID = 0x42011B
|
|
CERTIFICATE_ISSUER_SERIAL_NUMBER = 0x42011C
|
|
CERTIFICATE_ISSUER_TITLE = 0x42011D
|
|
CERTIFICATE_ISSUER_DC = 0x42011E
|
|
CERTIFICATE_ISSUER_DN_QUALIFIER = 0x42011F
|
|
SENSITIVE = 0x420120
|
|
ALWAYS_SENSITIVE = 0x420121
|
|
EXTRACTABLE = 0x420122
|
|
NEVER_EXTRACTABLE = 0x420123
|
|
REPLACE_EXISTING = 0x420124
|
|
# KMIP 2.0
|
|
ATTRIBUTES = 0x420125
|
|
COMMON_ATTRIBUTES = 0x420126
|
|
PRIVATE_KEY_ATTRIBUTES = 0x420127
|
|
PUBLIC_KEY_ATTRIBUTES = 0x420128
|
|
EXTENSION_ENUMERATION = 0x420129
|
|
EXTENSION_ATTRIBUTE = 0x42012A
|
|
EXTENSION_PARENT_STRUCTURE_TAG = 0x42012B
|
|
EXTENSION_DESCRIPTION = 0x42012C
|
|
SERVER_NAME = 0x42012D
|
|
SERVER_SERIAL_NUMBER = 0x42012E
|
|
SERVER_VERSION = 0x42012F
|
|
SERVER_LOAD = 0x420130
|
|
PRODUCT_NAME = 0x420131
|
|
BUILD_LEVEL = 0x420132
|
|
BUILD_DATE = 0x420133
|
|
CLUSTER_INFO = 0x420134
|
|
ALTERNATE_FAILOVER_ENDPOINTS = 0x420135
|
|
SHORT_UNIQUE_IDENTIFIER = 0x420136
|
|
RESERVED = 0x420137
|
|
TAG = 0x420138
|
|
CERTIFICATE_REQUEST_UNIQUE_IDENTIFIER = 0x420139
|
|
NIST_KEY_TYPE = 0x42013A
|
|
ATTRIBUTE_REFERENCE = 0x42013B
|
|
CURRENT_ATTRIBUTE = 0x42013C
|
|
NEW_ATTRIBUTE = 0x42013D
|
|
# 0x42013E is designated '(Reserved)' in KMIP 2.0
|
|
# 0x42013F is designated '(Reserved)' in KMIP 2.0
|
|
CERTIFICATE_REQUEST_VALUE = 0x420140
|
|
LOG_MESSAGE = 0x420141
|
|
PROFILE_VERSION = 0x420142
|
|
PROFILE_VERSION_MAJOR = 0x420143
|
|
PROFILE_VERSION_MINOR = 0x420144
|
|
PROTECTION_LEVEL = 0x420145
|
|
PROTECTION_PERIOD = 0x420146
|
|
QUANTUM_SAFE = 0x420147
|
|
QUANTUM_SAFE_CAPABILITY = 0x420148
|
|
TICKET = 0x420149
|
|
TICKET_TYPE = 0x42014A
|
|
TICKET_VALUE = 0x42014B
|
|
REQUEST_COUNT = 0x42014C
|
|
RIGHTS = 0x42014D
|
|
OBJECTS = 0x42014E
|
|
OPERATIONS = 0x42014F
|
|
RIGHT = 0x420150
|
|
ENDPOINT_ROLE = 0x420151
|
|
DEFAULTS_INFORMATION = 0x420152
|
|
OBJECT_DEFAULTS = 0x420153
|
|
EPHEMERAL = 0x420154
|
|
SERVER_HASHED_PASSWORD = 0x420155
|
|
ONE_TIME_PASSWORD = 0x420156
|
|
HASHED_PASSWORD = 0x420157
|
|
ADJUSTMENT_TYPE = 0x420158
|
|
PKCS11_INTERFACE = 0x420159
|
|
PKCS11_FUNCTION = 0x42015A
|
|
PKCS11_INPUT_PARAMETERS = 0x42015B
|
|
PKCS11_OUTPUT_PARAMETERS = 0x42015C
|
|
PKCS11_RETURN_CODE = 0x42015D
|
|
PROTECTION_STORAGE_MASK = 0x42015E
|
|
PROTECTION_STORAGE_MASKS = 0x42015F
|
|
INTEROP_FUNCTION = 0x420160
|
|
INTEROP_IDENTIFIER = 0x420161
|
|
ADJUSTMENT_VALUE = 0x420162
|
|
COMMON_PROTECTION_STORAGE_MASKS = 0x420163
|
|
PRIVATE_PROTECTION_STORAGE_MASKS = 0x420164
|
|
PUBLIC_PROTECTION_STORAGE_MASKS = 0x420165
|
|
|
|
|
|
class TicketType(enum.Enum):
|
|
# KMIP 2.0
|
|
LOGIN = 0x00000001
|
|
|
|
|
|
class Types(enum.Enum):
|
|
DEFAULT = 0x00
|
|
STRUCTURE = 0x01
|
|
INTEGER = 0x02
|
|
LONG_INTEGER = 0x03
|
|
BIG_INTEGER = 0x04
|
|
ENUMERATION = 0x05
|
|
BOOLEAN = 0x06
|
|
TEXT_STRING = 0x07
|
|
BYTE_STRING = 0x08
|
|
DATE_TIME = 0x09
|
|
INTERVAL = 0x0A
|
|
|
|
|
|
class UniqueIdentifier(enum.Enum):
|
|
# KMIP 2.0
|
|
ID_PLACEHOLDER = 0x00000001
|
|
CERTIFY = 0x00000002
|
|
CREATE = 0x00000003
|
|
CREATE_KEY_PAIR = 0x00000004
|
|
CREATE_KEY_PAIR_PRIVATE_KEY = 0x00000005
|
|
CREATE_KEY_PAIR_PUBLIC_KEY = 0x00000006
|
|
CREATE_SPLIT_KEY = 0x00000007
|
|
DERIVE_KEY = 0x00000008
|
|
IMPORT = 0x00000009
|
|
JOIN_SPLIT_KEY = 0x0000000A
|
|
LOCATE = 0x0000000B
|
|
REGISTER = 0x0000000C
|
|
REKEY = 0x0000000D
|
|
RECERTIFY = 0x0000000E
|
|
REKEY_KEY_PAIR = 0x0000000F
|
|
REKEY_KEY_PAIR_PRIVATE_KEY = 0x00000010
|
|
REKEY_KEY_PAIR_PUBLIC_KEY = 0x00000011
|
|
|
|
|
|
class UnwrapMode(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
PROCESSED = 0x00000002
|
|
NOT_PROCESSED = 0x00000003
|
|
|
|
|
|
class UsageLimitsUnit(enum.Enum):
|
|
# KMIP 1.0
|
|
BYTE = 0x00000001
|
|
OBJECT = 0x00000002
|
|
|
|
|
|
class ValidationAuthorityType(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
NIST_CMVP = 0x00000002
|
|
COMMON_CRITERIA = 0x00000003
|
|
|
|
|
|
class ValidationType(enum.Enum):
|
|
# KMIP 1.3
|
|
UNSPECIFIED = 0x00000001
|
|
HARDWARE = 0x00000002
|
|
SOFTWARE = 0x00000003
|
|
FIRMWARE = 0x00000004
|
|
HYBRID = 0x00000005
|
|
|
|
|
|
class ValidityIndicator(enum.Enum):
|
|
# KMIP 1.0
|
|
VALID = 0x00000001
|
|
INVALID = 0x00000002
|
|
UNKNOWN = 0x00000003
|
|
|
|
|
|
class WrappingMethod(enum.Enum):
|
|
# KMIP 1.0
|
|
ENCRYPT = 0x00000001
|
|
MAC_SIGN = 0x00000002
|
|
ENCRYPT_THEN_MAC_SIGN = 0x00000003
|
|
MAC_SIGN_THEN_ENCRYPT = 0x00000004
|
|
TR_31 = 0x00000005
|
|
|
|
|
|
attribute_name_tag_table = [
|
|
("Activation Date", Tags.ACTIVATION_DATE),
|
|
("Alternative Name", Tags.ALTERNATIVE_NAME),
|
|
("Always Sensitive", Tags.ALWAYS_SENSITIVE),
|
|
("Application Specific Information", Tags.APPLICATION_SPECIFIC_INFORMATION),
|
|
("Archive Date", Tags.ARCHIVE_DATE),
|
|
("Attribute", Tags.ATTRIBUTE),
|
|
("Certificate Identifier", Tags.CERTIFICATE_IDENTIFIER),
|
|
("Certificate Issuer", Tags.CERTIFICATE_ISSUER),
|
|
("Certificate Issuer C", Tags.CERTIFICATE_ISSUER_C),
|
|
("Certificate Issuer CN", Tags.CERTIFICATE_ISSUER_CN),
|
|
("Certificate Issuer DC", Tags.CERTIFICATE_ISSUER_DC),
|
|
("Certificate Issuer DN Qualifier", Tags.CERTIFICATE_ISSUER_DN_QUALIFIER),
|
|
("Certificate Issuer Email", Tags.CERTIFICATE_ISSUER_EMAIL),
|
|
("Certificate Issuer L", Tags.CERTIFICATE_ISSUER_L),
|
|
("Certificate Issuer O", Tags.CERTIFICATE_ISSUER_O),
|
|
("Certificate Issuer OU", Tags.CERTIFICATE_ISSUER_OU),
|
|
("Certificate Issuer Serial Number", Tags.CERTIFICATE_ISSUER_SERIAL_NUMBER),
|
|
("Certificate Issuer ST", Tags.CERTIFICATE_ISSUER_ST),
|
|
("Certificate Issuer Title", Tags.CERTIFICATE_ISSUER_TITLE),
|
|
("Certificate Issuer UID", Tags.CERTIFICATE_ISSUER_UID),
|
|
("Certificate Length", Tags.CERTIFICATE_LENGTH),
|
|
("Certificate Subject", Tags.CERTIFICATE_SUBJECT),
|
|
("Certificate Subject C", Tags.CERTIFICATE_SUBJECT_C),
|
|
("Certificate Subject CN", Tags.CERTIFICATE_SUBJECT_CN),
|
|
("Certificate Subject DC", Tags.CERTIFICATE_SUBJECT_DC),
|
|
("Certificate Subject DN Qualifier", Tags.CERTIFICATE_SUBJECT_DN_QUALIFIER),
|
|
("Certificate Subject Email", Tags.CERTIFICATE_SUBJECT_EMAIL),
|
|
("Certificate Subject L", Tags.CERTIFICATE_SUBJECT_L),
|
|
("Certificate Subject O", Tags.CERTIFICATE_SUBJECT_O),
|
|
("Certificate Subject OU", Tags.CERTIFICATE_SUBJECT_OU),
|
|
("Certificate Subject Serial Number", Tags.CERTIFICATE_SUBJECT_SERIAL_NUMBER),
|
|
("Certificate Subject ST", Tags.CERTIFICATE_SUBJECT_ST),
|
|
("Certificate Subject Title", Tags.CERTIFICATE_SUBJECT_TITLE),
|
|
("Certificate Subject UID", Tags.CERTIFICATE_SUBJECT_UID),
|
|
("Certificate Type", Tags.CERTIFICATE_TYPE),
|
|
("Comment", Tags.COMMENT),
|
|
("Compromise Date", Tags.COMPROMISE_DATE),
|
|
("Compromise Occurrence Date", Tags.COMPROMISE_OCCURRENCE_DATE),
|
|
("Contact Information", Tags.CONTACT_INFORMATION),
|
|
("Cryptographic Algorithm", Tags.CRYPTOGRAPHIC_ALGORITHM),
|
|
("Cryptographic Domain Parameters", Tags.CRYPTOGRAPHIC_DOMAIN_PARAMETERS),
|
|
("Cryptographic Length", Tags.CRYPTOGRAPHIC_LENGTH),
|
|
("Cryptographic Parameters", Tags.CRYPTOGRAPHIC_PARAMETERS),
|
|
("Cryptographic Usage Mask", Tags.CRYPTOGRAPHIC_USAGE_MASK),
|
|
("Custom Attribute", Tags.CUSTOM_ATTRIBUTE),
|
|
("Deactivation Date", Tags.DEACTIVATION_DATE),
|
|
("Description", Tags.DESCRIPTION),
|
|
("Destroy Date", Tags.DESTROY_DATE),
|
|
("Digest", Tags.DIGEST),
|
|
("Digital Signature Algorithm", Tags.DIGITAL_SIGNATURE_ALGORITHM),
|
|
("Extractable", Tags.EXTRACTABLE),
|
|
("Fresh", Tags.FRESH),
|
|
("Initial Date", Tags.INITIAL_DATE),
|
|
("Key Format Type", Tags.KEY_FORMAT_TYPE),
|
|
("Key Value Location", Tags.KEY_VALUE_LOCATION),
|
|
("Key Value Present", Tags.KEY_VALUE_PRESENT),
|
|
("Last Change Date", Tags.LAST_CHANGE_DATE),
|
|
("Lease Time", Tags.LEASE_TIME),
|
|
("Link", Tags.LINK),
|
|
("Name", Tags.NAME),
|
|
("Never Extractable", Tags.NEVER_EXTRACTABLE),
|
|
("NIST Key Type", Tags.NIST_KEY_TYPE),
|
|
("Object Group", Tags.OBJECT_GROUP),
|
|
("Object Type", Tags.OBJECT_TYPE),
|
|
("Opaque Data Type", Tags.OPAQUE_DATA_TYPE),
|
|
("Operation Policy Name", Tags.OPERATION_POLICY_NAME),
|
|
("Original Creation Date", Tags.ORIGINAL_CREATION_DATE),
|
|
("PKCS#12 Friendly Name", Tags.PKCS12_FRIENDLY_NAME),
|
|
("Process Start Date", Tags.PROCESS_START_DATE),
|
|
("Protect Stop Date", Tags.PROTECT_STOP_DATE),
|
|
("Protection Level", Tags.PROTECTION_LEVEL),
|
|
("Protection Period", Tags.PROTECTION_PERIOD),
|
|
("Protection Storage Mask", Tags.PROTECTION_STORAGE_MASK),
|
|
("Quantum Safe", Tags.QUANTUM_SAFE),
|
|
("Random Number Generator", Tags.RANDOM_NUMBER_GENERATOR),
|
|
("Revocation Reason", Tags.REVOCATION_REASON),
|
|
("Sensitive", Tags.SENSITIVE),
|
|
("Short Unique Identifier", Tags.SHORT_UNIQUE_IDENTIFIER),
|
|
("State", Tags.STATE),
|
|
("Unique Identifier", Tags.UNIQUE_IDENTIFIER),
|
|
("Usage Limits", Tags.USAGE_LIMITS),
|
|
("X.509 Certificate Identifier", Tags.X_509_CERTIFICATE_IDENTIFIER),
|
|
("X.509 Certificate Issuer", Tags.X_509_CERTIFICATE_ISSUER),
|
|
("X.509 Certificate Subject", Tags.X_509_CERTIFICATE_SUBJECT)
|
|
]
|
|
|
|
|
|
def convert_attribute_name_to_tag(value):
|
|
"""
|
|
A utility function that converts an attribute name string into the
|
|
corresponding attribute tag.
|
|
|
|
For example: 'State' -> enums.Tags.STATE
|
|
|
|
Args:
|
|
value (string): The string name of the attribute.
|
|
|
|
Returns:
|
|
enum: The Tags enumeration value that corresponds to the attribute
|
|
name string.
|
|
|
|
Raises:
|
|
ValueError: if the attribute name string is not a string or if it is
|
|
an unrecognized attribute name
|
|
"""
|
|
if not isinstance(value, six.string_types):
|
|
raise ValueError("The attribute name must be a string.")
|
|
|
|
for entry in attribute_name_tag_table:
|
|
if value == entry[0]:
|
|
return entry[1]
|
|
|
|
raise ValueError("Unrecognized attribute name: '{}'".format(value))
|
|
|
|
|
|
def convert_attribute_tag_to_name(value):
|
|
"""
|
|
A utility function that converts an attribute tag into the corresponding
|
|
attribute name string.
|
|
|
|
For example: enums.Tags.STATE -> 'State'
|
|
|
|
Args:
|
|
value (enum): The Tags enumeration value of the attribute.
|
|
|
|
Returns:
|
|
string: The attribute name string that corresponds to the attribute
|
|
tag.
|
|
|
|
Raises:
|
|
ValueError: if the attribute tag is not a Tags enumeration or if it
|
|
is unrecognized attribute tag
|
|
"""
|
|
if not isinstance(value, Tags):
|
|
raise ValueError("The attribute tag must be a Tags enumeration.")
|
|
|
|
for entry in attribute_name_tag_table:
|
|
if value == entry[1]:
|
|
return entry[0]
|
|
|
|
raise ValueError("Unrecognized attribute tag: {}".format(value))
|
|
|
|
|
|
def get_bit_mask_from_enumerations(enumerations):
|
|
"""
|
|
A utility function that computes a bit mask from a collection of
|
|
enumeration values.
|
|
|
|
Args:
|
|
enumerations (list): A list of enumeration values to be combined in a
|
|
composite bit mask.
|
|
|
|
Returns:
|
|
int: The composite bit mask.
|
|
"""
|
|
return functools.reduce(
|
|
lambda x, y: x | y, [z.value for z in enumerations]
|
|
)
|
|
|
|
|
|
def get_enumerations_from_bit_mask(enumeration, mask):
|
|
"""
|
|
A utility function that creates a list of enumeration values from a bit
|
|
mask for a specific mask enumeration class.
|
|
|
|
Args:
|
|
enumeration (class): The enumeration class from which to draw
|
|
enumeration values.
|
|
mask (int): The bit mask from which to identify enumeration values.
|
|
|
|
Returns:
|
|
list: A list of enumeration values corresponding to the bit mask.
|
|
"""
|
|
return [x for x in enumeration if (x.value & mask) == x.value]
|
|
|
|
|
|
def is_bit_mask(enumeration, potential_mask):
|
|
"""
|
|
A utility function that checks if the provided value is a composite bit
|
|
mask of enumeration values in the specified enumeration class.
|
|
|
|
Args:
|
|
enumeration (class): One of the mask enumeration classes found in this
|
|
file. These include:
|
|
* Cryptographic Usage Mask
|
|
* Protection Storage Mask
|
|
* Storage Status Mask
|
|
potential_mask (int): A potential bit mask composed of enumeration
|
|
values belonging to the enumeration class.
|
|
|
|
Returns:
|
|
True: if the potential mask is a valid bit mask of the mask enumeration
|
|
False: otherwise
|
|
"""
|
|
if not isinstance(potential_mask, six.integer_types):
|
|
return False
|
|
|
|
mask_enumerations = (
|
|
CryptographicUsageMask,
|
|
ProtectionStorageMask,
|
|
StorageStatusMask
|
|
)
|
|
if enumeration not in mask_enumerations:
|
|
return False
|
|
|
|
mask = 0
|
|
for value in [e.value for e in enumeration]:
|
|
if (value & potential_mask) == value:
|
|
mask |= value
|
|
|
|
if mask != potential_mask:
|
|
return False
|
|
|
|
return True
|
|
|
|
|
|
def is_enum_value(enumeration, potential_value):
|
|
"""
|
|
A utility function that checks if the enumeration class contains the
|
|
provided value.
|
|
|
|
Args:
|
|
enumeration (class): One of the enumeration classes found in this file.
|
|
potential_value (int, string): A potential value of the enumeration
|
|
class.
|
|
|
|
Returns:
|
|
True: if the potential value is a valid value of the enumeration class
|
|
False: otherwise
|
|
"""
|
|
try:
|
|
enumeration(potential_value)
|
|
except ValueError:
|
|
return False
|
|
|
|
return True
|
|
|
|
|
|
def is_attribute(tag, kmip_version=None):
|
|
"""
|
|
A utility function that checks if the tag is a valid attribute tag.
|
|
|
|
Args:
|
|
tag (enum): A Tags enumeration that may or may not correspond to a
|
|
KMIP attribute type.
|
|
kmip_version (enum): The KMIPVersion enumeration that should be used
|
|
when checking if the tag is a valid attribute tag. Optional,
|
|
defaults to None. If None, the tag is compared with all possible
|
|
attribute tags across all KMIP versions. Otherwise, only the
|
|
attribute tags for a specific KMIP version are checked.
|
|
|
|
Returns:
|
|
True: if the tag is a valid attribute tag
|
|
False: otherwise
|
|
"""
|
|
kmip_1_0_attribute_tags = [
|
|
Tags.UNIQUE_IDENTIFIER,
|
|
Tags.NAME,
|
|
Tags.OBJECT_TYPE,
|
|
Tags.CRYPTOGRAPHIC_ALGORITHM,
|
|
Tags.CRYPTOGRAPHIC_LENGTH,
|
|
Tags.CRYPTOGRAPHIC_PARAMETERS,
|
|
Tags.CRYPTOGRAPHIC_DOMAIN_PARAMETERS,
|
|
Tags.CERTIFICATE_TYPE,
|
|
Tags.CERTIFICATE_IDENTIFIER,
|
|
Tags.CERTIFICATE_SUBJECT,
|
|
Tags.CERTIFICATE_ISSUER,
|
|
Tags.DIGEST,
|
|
Tags.OPERATION_POLICY_NAME,
|
|
Tags.CRYPTOGRAPHIC_USAGE_MASK,
|
|
Tags.LEASE_TIME,
|
|
Tags.USAGE_LIMITS,
|
|
Tags.STATE,
|
|
Tags.INITIAL_DATE,
|
|
Tags.ACTIVATION_DATE,
|
|
Tags.PROCESS_START_DATE,
|
|
Tags.PROTECT_STOP_DATE,
|
|
Tags.DEACTIVATION_DATE,
|
|
Tags.DESTROY_DATE,
|
|
Tags.COMPROMISE_OCCURRENCE_DATE,
|
|
Tags.COMPROMISE_DATE,
|
|
Tags.REVOCATION_REASON,
|
|
Tags.ARCHIVE_DATE,
|
|
Tags.OBJECT_GROUP,
|
|
Tags.LINK,
|
|
Tags.APPLICATION_SPECIFIC_INFORMATION,
|
|
Tags.CONTACT_INFORMATION,
|
|
Tags.LAST_CHANGE_DATE,
|
|
Tags.CUSTOM_ATTRIBUTE
|
|
]
|
|
kmip_1_1_attribute_tags = copy.deepcopy(kmip_1_0_attribute_tags) + [
|
|
Tags.CERTIFICATE_LENGTH,
|
|
Tags.X_509_CERTIFICATE_IDENTIFIER,
|
|
Tags.X_509_CERTIFICATE_SUBJECT,
|
|
Tags.X_509_CERTIFICATE_ISSUER,
|
|
Tags.DIGITAL_SIGNATURE_ALGORITHM,
|
|
Tags.FRESH
|
|
]
|
|
kmip_1_2_attribute_tags = copy.deepcopy(kmip_1_1_attribute_tags) + [
|
|
Tags.ALTERNATIVE_NAME,
|
|
Tags.KEY_VALUE_PRESENT,
|
|
Tags.KEY_VALUE_LOCATION,
|
|
Tags.ORIGINAL_CREATION_DATE
|
|
]
|
|
kmip_1_3_attribute_tags = copy.deepcopy(kmip_1_2_attribute_tags) + [
|
|
Tags.RANDOM_NUMBER_GENERATOR
|
|
]
|
|
kmip_1_4_attribute_tags = copy.deepcopy(kmip_1_3_attribute_tags) + [
|
|
Tags.PKCS12_FRIENDLY_NAME,
|
|
Tags.DESCRIPTION,
|
|
Tags.COMMENT,
|
|
Tags.SENSITIVE,
|
|
Tags.ALWAYS_SENSITIVE,
|
|
Tags.EXTRACTABLE,
|
|
Tags.NEVER_EXTRACTABLE
|
|
]
|
|
kmip_2_0_attribute_tags = copy.deepcopy(kmip_1_4_attribute_tags) + [
|
|
Tags.CERTIFICATE_SUBJECT_CN,
|
|
Tags.CERTIFICATE_SUBJECT_O,
|
|
Tags.CERTIFICATE_SUBJECT_OU,
|
|
Tags.CERTIFICATE_SUBJECT_EMAIL,
|
|
Tags.CERTIFICATE_SUBJECT_C,
|
|
Tags.CERTIFICATE_SUBJECT_ST,
|
|
Tags.CERTIFICATE_SUBJECT_L,
|
|
Tags.CERTIFICATE_SUBJECT_UID,
|
|
Tags.CERTIFICATE_SUBJECT_SERIAL_NUMBER,
|
|
Tags.CERTIFICATE_SUBJECT_TITLE,
|
|
Tags.CERTIFICATE_SUBJECT_DC,
|
|
Tags.CERTIFICATE_SUBJECT_DN_QUALIFIER,
|
|
Tags.CERTIFICATE_ISSUER_CN,
|
|
Tags.CERTIFICATE_ISSUER_O,
|
|
Tags.CERTIFICATE_ISSUER_OU,
|
|
Tags.CERTIFICATE_ISSUER_EMAIL,
|
|
Tags.CERTIFICATE_ISSUER_C,
|
|
Tags.CERTIFICATE_ISSUER_ST,
|
|
Tags.CERTIFICATE_ISSUER_L,
|
|
Tags.CERTIFICATE_ISSUER_UID,
|
|
Tags.CERTIFICATE_ISSUER_SERIAL_NUMBER,
|
|
Tags.CERTIFICATE_ISSUER_TITLE,
|
|
Tags.CERTIFICATE_ISSUER_DC,
|
|
Tags.CERTIFICATE_ISSUER_DN_QUALIFIER,
|
|
Tags.KEY_FORMAT_TYPE,
|
|
Tags.NIST_KEY_TYPE,
|
|
Tags.OPAQUE_DATA_TYPE,
|
|
Tags.PROTECTION_LEVEL,
|
|
Tags.PROTECTION_PERIOD,
|
|
Tags.PROTECTION_STORAGE_MASK,
|
|
Tags.QUANTUM_SAFE,
|
|
Tags.SHORT_UNIQUE_IDENTIFIER,
|
|
Tags.ATTRIBUTE
|
|
]
|
|
kmip_2_0_attribute_tags.remove(Tags.CERTIFICATE_IDENTIFIER)
|
|
kmip_2_0_attribute_tags.remove(Tags.CERTIFICATE_SUBJECT)
|
|
kmip_2_0_attribute_tags.remove(Tags.CERTIFICATE_ISSUER)
|
|
kmip_2_0_attribute_tags.remove(Tags.OPERATION_POLICY_NAME)
|
|
kmip_2_0_attribute_tags.remove(Tags.CUSTOM_ATTRIBUTE)
|
|
|
|
if kmip_version == KMIPVersion.KMIP_1_0:
|
|
return tag in kmip_1_0_attribute_tags
|
|
elif kmip_version == KMIPVersion.KMIP_1_1:
|
|
return tag in kmip_1_1_attribute_tags
|
|
elif kmip_version == KMIPVersion.KMIP_1_2:
|
|
return tag in kmip_1_2_attribute_tags
|
|
elif kmip_version == KMIPVersion.KMIP_1_3:
|
|
return tag in kmip_1_3_attribute_tags
|
|
elif kmip_version == KMIPVersion.KMIP_1_4:
|
|
return tag in kmip_1_4_attribute_tags
|
|
elif kmip_version == KMIPVersion.KMIP_2_0:
|
|
return tag in kmip_2_0_attribute_tags
|
|
else:
|
|
all_attribute_tags = set(
|
|
kmip_1_0_attribute_tags +
|
|
kmip_1_1_attribute_tags +
|
|
kmip_1_2_attribute_tags +
|
|
kmip_1_3_attribute_tags +
|
|
kmip_1_4_attribute_tags +
|
|
kmip_2_0_attribute_tags
|
|
)
|
|
return tag in all_attribute_tags
|