mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-01-26 03:35:35 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
mbedtls/translate_ciphers.py

67 lines
2.0 KiB
Python
Raw Normal View History

Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
import re
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
def translate_gnu(m_cipher):
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# Remove "TLS-"
# Replace "-WITH-" with ":+"
# Remove "EDE"
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
m_cipher = "+" + m_cipher[4:]
m_cipher = m_cipher.replace("-WITH-", ":+")
m_cipher = m_cipher.replace("-EDE", "")
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# SHA == SHA1, if the last 3 chars are SHA append 1
if m_cipher[-3:] == "SHA":
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
m_cipher = m_cipher+"1"
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# CCM or CCM-8 should be followed by ":+AEAD"
if "CCM" in m_cipher:
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
m_cipher = m_cipher+":+AEAD"
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# Replace the last "-" with ":+"
# Replace "GCM:+SHAxyz" with "GCM:+AEAD"
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
else:
index=m_cipher.rindex("-")
m_cipher = m_cipher[:index]+":+"+m_cipher[index+1:]
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
m_cipher = re.sub(r"GCM\:\+SHA\d\d\d", "GCM:+AEAD", m_cipher)
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
return m_cipher
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
def translate_ossl(m_cipher):
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# Remove "TLS-"
# Remove "WITH"
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
m_cipher = m_cipher[4:]
m_cipher = m_cipher.replace("-WITH", "")
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# Remove the "-" from "ABC-xyz"
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
m_cipher = m_cipher.replace("AES-", "AES")
m_cipher = m_cipher.replace("CAMELLIA-", "CAMELLIA")
m_cipher = m_cipher.replace("ARIA-", "ARIA")
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# Remove "RSA" if it is at the beginning
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
if m_cipher[:4] == "RSA-":
m_cipher = m_cipher[4:]
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# For all circumstances outside of PSK
if "PSK" not in m_cipher:
m_cipher = m_cipher.replace("-EDE", "")
m_cipher = m_cipher.replace("3DES-CBC", "DES-CBC3")
# Remove "CBC" if it is not prefixed by DES
if "CBC" in m_cipher:
index = m_cipher.rindex("CBC")
if m_cipher[index-4:index-1] != "DES":
m_cipher = m_cipher.replace("CBC-", "")
# ECDHE-RSA-ARIA does not exist in OpenSSL
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
m_cipher = m_cipher.replace("ECDHE-RSA-ARIA", "ECDHE-ARIA")
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# POLY1305 should not be followed by anything
if "POLY1305" in m_cipher:
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
index = m_cipher.rindex("POLY1305")
m_cipher=m_cipher[:index+8]
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
# If DES is being used, Replace DHE with EDH
if "DES" in m_cipher and "DHE" in m_cipher and "ECDHE" not in m_cipher:
m_cipher = m_cipher.replace("DHE", "EDH")
Add draft python tool to translate MBed ciphersuites Created 2 functions - translate_gnu() - translate_ossl() Each function takes a parameter `m_cipher` (expected in the MBedTLS naming standard), and through a series of edge cases/replaces, modifies the ciphersuite name to match the GNU and OpenSSL naming conventions respectively. This will serve as to maintain a single list that can be translated, rather than maintaining 3 lists for OpenSSL and GNU also. This commit serves as a checkpoint, and the program will be cleaned up in the future. The program currently runs a series of tests to check every given ciphersuite name combination in compat.sh to ensure they are translated correctly. Some OpenSSL names appear to have typos and as such have been corrected in this program until I have recieved more information. The errors were commented out to keep note of. Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-20 18:26:03 +01:00
Reformat translation functions and test in seperate file Moved the test over to a seperate file, where I can start experimenting with how the script will be called. Commented and improved the translation functions. They should be more readable, however I added comments anyway to quickly identify every step involved with te translation from MBedTLS to GNU or OpenSSL Signed-off-by: Joe Subbiani <joe.subbiani@arm.com>
2021-07-21 16:48:54 +01:00
return m_cipher
Reference in New Issue Copy Permalink