linotp.lib.security package¶
module for SecurityModules / devices like hsms
- exception linotp.lib.security.FatalHSMException¶
Bases:
Exception
- class linotp.lib.security.SecurityModule(config=None, add_conf=None)¶
Bases:
object- decrypt(value: bytes, iv: bytes, id: int = 0) bytes¶
- decryptPassword(cryptPass: str) bytes¶
- decryptPin(cryptPin: str) bytes¶
- encrypt(data: bytes, iv: bytes, id: int = 0) bytes¶
- encryptPassword(cryptPass: bytes) str¶
- encryptPin(cryptPin, iv=None) str¶
- classmethod getAdditionalClassConfig()¶
- isReady()¶
- random(len: int) bytes¶
- setup_module(params)¶
- signMessage(message, method=None, slot_id=3)¶
- verfiyMessageSignature(message, hex_mac, method=None, slot_id=3)¶
Submodules¶
- linotp.lib.security.default module
DefaultSecurityModuleDefaultSecurityModule.decrypt()DefaultSecurityModule.decryptPassword()DefaultSecurityModule.decryptPin()DefaultSecurityModule.encrypt()DefaultSecurityModule.encryptPassword()DefaultSecurityModule.encryptPin()DefaultSecurityModule.getSecret()DefaultSecurityModule.hash_digest()DefaultSecurityModule.hmac_digest()DefaultSecurityModule.isReady()DefaultSecurityModule.padd_data()DefaultSecurityModule.random()DefaultSecurityModule.schemaDefaultSecurityModule.setup_module()DefaultSecurityModule.signMessage()DefaultSecurityModule.unpadd_data()DefaultSecurityModule.verfiyMessageSignature()
- linotp.lib.security.fips module
- linotp.lib.security.pkcs11 module
CK_ATTRIBUTECK_MECHANISMCK_TOKEN_INFOCK_TOKEN_INFO.firmwareVersionCK_TOKEN_INFO.flagsCK_TOKEN_INFO.hardwareVersionCK_TOKEN_INFO.labelCK_TOKEN_INFO.manufacturerIDCK_TOKEN_INFO.modelCK_TOKEN_INFO.serialNumberCK_TOKEN_INFO.ulFreePrivateMemoryCK_TOKEN_INFO.ulFreePublicMemoryCK_TOKEN_INFO.ulMaxPinLenCK_TOKEN_INFO.ulMaxRwSessionCountCK_TOKEN_INFO.ulMaxSessionCountCK_TOKEN_INFO.ulMinPinLenCK_TOKEN_INFO.ulRwSessionCountCK_TOKEN_INFO.ulSessionCountCK_TOKEN_INFO.ulTotalPrivateMemoryCK_TOKEN_INFO.ulTotalPublicMemoryCK_TOKEN_INFO.utcTime
CK_VERSIONPkcs11SecurityModulePkcs11SecurityModule.createAES()Pkcs11SecurityModule.decrypt()Pkcs11SecurityModule.decryptPassword()Pkcs11SecurityModule.decryptPin()Pkcs11SecurityModule.encrypt()Pkcs11SecurityModule.encryptPassword()Pkcs11SecurityModule.encryptPin()Pkcs11SecurityModule.find_aes_keys()Pkcs11SecurityModule.gettokeninfo()Pkcs11SecurityModule.initpkcs11()Pkcs11SecurityModule.isReady()Pkcs11SecurityModule.login()Pkcs11SecurityModule.logout()Pkcs11SecurityModule.number_or_nullPkcs11SecurityModule.pad()Pkcs11SecurityModule.populate_handles()Pkcs11SecurityModule.random()Pkcs11SecurityModule.schemaPkcs11SecurityModule.setup_module()Pkcs11SecurityModule.unpad()
main()output()pkcs11error()
- linotp.lib.security.provider module