stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 3 Releases Wiki Activity

consolidation of some of the modules, localization fixes, product advisories work, qa work

Browse Source
This commit is contained in:
master
2026-03-05 03:54:22 +02:00
parent 7bafcc3eef
commit 8e1cb9448d
3878 changed files with 72600 additions and 46861 deletions
Download Patch File Download Diff File Expand all files Collapse all files

286
src/etc/crypto-plugins-manifest.json Normal file
View File

@@ -0,0 +1,286 @@
{
"$schema": "https://schema.stella-ops.org/crypto-plugins-manifest/v1.json",
"version": "1.0",
"plugins": [
{
"id": "default",
"name": "DefaultCryptoProvider",
"assembly": "StellaOps.Cryptography.dll",
"type": "StellaOps.Cryptography.DefaultCryptoProvider",
"capabilities": [
"signing:ES256",
"signing:ES384",
"signing:ES512",
"signing:RS256",
"signing:RS384",
"signing:RS512",
"signing:PS256",
"signing:PS384",
"signing:PS512",
"hashing:SHA256",
"hashing:SHA384",
"hashing:SHA512",
"password:PBKDF2",
"password:Argon2id"
],
"jurisdiction": "world",
"compliance": ["NIST", "FIPS-140-3-candidate"],
"platforms": ["linux", "windows", "osx"],
"priority": 50
},
{
"id": "libsodium",
"name": "LibsodiumCryptoProvider",
"assembly": "StellaOps.Cryptography.dll",
"type": "StellaOps.Cryptography.LibsodiumCryptoProvider",
"capabilities": [
"signing:Ed25519",
"hashing:Blake2b",
"symmetric:XSalsa20-Poly1305",
"password:Argon2id"
],
"jurisdiction": "world",
"compliance": ["NIST"],
"platforms": ["linux", "windows", "osx"],
"priority": 60,
"conditionalCompilation": "STELLAOPS_CRYPTO_SODIUM"
},
{
"id": "openssl.gost",
"name": "OpenSslGostProvider",
"assembly": "StellaOps.Cryptography.Plugin.OpenSslGost.dll",
"type": "StellaOps.Cryptography.Plugin.OpenSslGost.OpenSslGostProvider",
"capabilities": [
"signing:GOST-R-34.10-2012-256",
"signing:GOST-R-34.10-2012-512",
"hashing:GOST-R-34.11-2012-256",
"hashing:GOST-R-34.11-2012-512"
],
"jurisdiction": "russia",
"compliance": ["GOST", "FSB"],
"platforms": ["linux", "osx"],
"priority": 100,
"options": {
"enginePath": "/usr/lib/x86_64-linux-gnu/engines-3/gost.so"
}
},
{
"id": "cryptopro.gost",
"name": "CryptoProGostCryptoProvider",
"assembly": "StellaOps.Cryptography.Plugin.CryptoPro.dll",
"type": "StellaOps.Cryptography.Plugin.CryptoPro.CryptoProGostCryptoProvider",
"capabilities": [
"signing:GOST-R-34.10-2001",
"signing:GOST-R-34.10-2012-256",
"signing:GOST-R-34.10-2012-512",
"hashing:GOST-R-34.11-94",
"hashing:GOST-R-34.11-2012-256",
"hashing:GOST-R-34.11-2012-512"
],
"jurisdiction": "russia",
"compliance": ["GOST", "FSB", "ГосСОПКА"],
"platforms": ["windows"],
"priority": 110,
"conditionalCompilation": "STELLAOPS_CRYPTO_PRO"
},
{
"id": "pkcs11.gost",
"name": "Pkcs11GostCryptoProvider",
"assembly": "StellaOps.Cryptography.Plugin.Pkcs11Gost.dll",
"type": "StellaOps.Cryptography.Plugin.Pkcs11Gost.Pkcs11GostCryptoProvider",
"capabilities": [
"signing:GOST-R-34.10-2012-256",
"signing:GOST-R-34.10-2012-512",
"hashing:GOST-R-34.11-2012-256",
"hashing:GOST-R-34.11-2012-512"
],
"jurisdiction": "russia",
"compliance": ["GOST", "FSB", "PKCS#11"],
"platforms": ["linux", "windows"],
"priority": 105,
"options": {
"libraryPath": "/usr/lib/x86_64-linux-gnu/pkcs11/librtpkcs11ecp.so"
}
},
{
"id": "wine.csp",
"name": "WineCspProvider",
"assembly": "StellaOps.Cryptography.Plugin.WineCsp.dll",
"type": "StellaOps.Cryptography.Plugin.WineCsp.WineCspProvider",
"capabilities": [
"signing:GOST-R-34.10-2012-256",
"signing:GOST-R-34.10-2012-512",
"hashing:GOST-R-34.11-2012-256",
"hashing:GOST-R-34.11-2012-512"
],
"jurisdiction": "russia",
"compliance": ["GOST"],
"platforms": ["linux"],
"priority": 95,
"options": {
"winePrefix": "/opt/stellaops/wine"
}
},
{
"id": "sm.soft",
"name": "SmSoftCryptoProvider",
"assembly": "StellaOps.Cryptography.Plugin.SmSoft.dll",
"type": "StellaOps.Cryptography.Plugin.SmSoft.SmSoftCryptoProvider",
"capabilities": [
"signing:SM2",
"hashing:SM3",
"symmetric:SM4"
],
"jurisdiction": "china",
"compliance": ["GM/T", "OSCCA"],
"platforms": ["linux", "windows", "osx"],
"priority": 100
},
{
"id": "sm.remote",
"name": "SmRemoteHttpProvider",
"assembly": "StellaOps.Cryptography.Plugin.SmRemote.dll",
"type": "StellaOps.Cryptography.Plugin.SmRemote.SmRemoteHttpProvider",
"capabilities": [
"signing:SM2",
"hashing:SM3"
],
"jurisdiction": "china",
"compliance": ["GM/T", "OSCCA"],
"platforms": ["linux", "windows", "osx"],
"priority": 90,
"options": {
"baseAddress": "http://localhost:8900"
}
},
{
"id": "pq.soft",
"name": "PqSoftCryptoProvider",
"assembly": "StellaOps.Cryptography.Plugin.PqSoft.dll",
"type": "StellaOps.Cryptography.Plugin.PqSoft.PqSoftCryptoProvider",
"capabilities": [
"signing:ML-DSA-44",
"signing:ML-DSA-65",
"signing:ML-DSA-87",
"signing:SLH-DSA-SHA2-128s",
"signing:SLH-DSA-SHA2-128f",
"signing:SLH-DSA-SHAKE-128s",
"signing:SLH-DSA-SHAKE-128f",
"hashing:SHA3-256",
"hashing:SHA3-512",
"hashing:SHAKE256"
],
"jurisdiction": "world",
"compliance": ["NIST-PQC", "FIPS-203", "FIPS-205"],
"platforms": ["linux", "windows", "osx"],
"priority": 70
},
{
"id": "fips.soft",
"name": "FipsSoftCryptoProvider",
"assembly": "StellaOps.Cryptography.dll",
"type": "StellaOps.Cryptography.FipsSoftCryptoProvider",
"capabilities": [
"signing:ES256",
"signing:ES384",
"signing:ES512",
"signing:RS256",
"signing:RS384",
"signing:RS512",
"hashing:SHA256",
"hashing:SHA384",
"hashing:SHA512"
],
"jurisdiction": "world",
"compliance": ["FIPS-140-3"],
"platforms": ["linux", "windows"],
"priority": 80
},
{
"id": "eidas.soft",
"name": "EidasSoftCryptoProvider",
"assembly": "StellaOps.Cryptography.dll",
"type": "StellaOps.Cryptography.EidasSoftCryptoProvider",
"capabilities": [
"signing:ES256",
"signing:ES384",
"signing:ES512",
"signing:RS256",
"signing:RS384",
"signing:RS512",
"hashing:SHA256",
"hashing:SHA384",
"hashing:SHA512"
],
"jurisdiction": "eu",
"compliance": ["eIDAS", "ETSI-TS-119-312"],
"platforms": ["linux", "windows", "osx"],
"priority": 85
},
{
"id": "kcmvp.hash",
"name": "KcmvpHashOnlyProvider",
"assembly": "StellaOps.Cryptography.dll",
"type": "StellaOps.Cryptography.KcmvpHashOnlyProvider",
"capabilities": [
"hashing:SHA256",
"hashing:SHA384",
"hashing:SHA512"
],
"jurisdiction": "korea",
"compliance": ["KCMVP"],
"platforms": ["linux", "windows"],
"priority": 75
},
{
"id": "offline-verification",
"name": "OfflineVerificationCryptoProvider",
"assembly": "StellaOps.Cryptography.Plugin.OfflineVerification.dll",
"type": "StellaOps.Cryptography.Plugin.OfflineVerification.OfflineVerificationCryptoProvider",
"capabilities": [
"signing:ES256",
"signing:ES384",
"signing:ES512",
"signing:RS256",
"signing:RS384",
"signing:RS512",
"signing:PS256",
"signing:PS384",
"signing:PS512",
"hashing:SHA-256",
"hashing:SHA-384",
"hashing:SHA-512",
"verification:ES256",
"verification:ES384",
"verification:ES512",
"verification:RS256",
"verification:RS384",
"verification:RS512"
],
"jurisdiction": "world",
"compliance": ["NIST", "offline-airgap"],
"platforms": ["linux", "windows", "osx"],
"priority": 45,
"enabledByDefault": true
},
{
"id": "sim.crypto.remote",
"name": "SimRemoteProvider",
"assembly": "StellaOps.Cryptography.Plugin.SimRemote.dll",
"type": "StellaOps.Cryptography.Plugin.SimRemote.SimRemoteProvider",
"capabilities": [
"signing:*",
"hashing:*",
"verification:*"
],
"jurisdiction": "world",
"compliance": ["test-only"],
"platforms": ["linux", "windows", "osx"],
"priority": 10,
"options": {
"baseAddress": "http://localhost:8901"
},
"enabledByDefault": false
}
]
}