New algorithms

src/Bundle/JoseFramework/DataCollector/AlgorithmCollector.php

@@ -106,6 +106,82 @@ private function getAlgorithmMessages(): array
                 'severity' => 'severity-low',
                 'message'  => 'This algorithm is not secured. Please use with caution.',
             ],
+            'HS256/64' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental. Please use for testing purpose only.',
+            ],
+            'hs1' => [
+                'severity' => 'severity-high',
+                'message'  => 'This algorithm has known vulnerabilities. See <a target="_blank" href="https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-17">https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-17</a>.',
+            ],
+            'A128CTR' => [
+                'severity' => 'severity-high',
+                'message'  => 'This algorithm is prohibited. For compatibility with old application only. See <a target="_blank" href="https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11">https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11</a>.',
+            ],
+            'A192CTR' => [
+                'severity' => 'severity-high',
+                'message'  => 'This algorithm is prohibited. For compatibility with old application only. See <a target="_blank" href="https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11">https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11</a>.',
+            ],
+            'A256CTR' => [
+                'severity' => 'severity-high',
+                'message'  => 'This algorithm is prohibited. For compatibility with old application only. See <a target="_blank" href="https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11">https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11</a>.',
+            ],
+            'A128CBC' => [
+                'severity' => 'severity-high',
+                'message'  => 'This algorithm is prohibited. For compatibility with old application only. See <a target="_blank" href="https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11">https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11</a>.',
+            ],
+            'A192CBC' => [
+                'severity' => 'severity-high',
+                'message'  => 'This algorithm is prohibited. For compatibility with old application only. See <a target="_blank" href="https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11">https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11</a>.',
+            ],
+            'A256CBC' => [
+                'severity' => 'severity-high',
+                'message'  => 'This algorithm is prohibited. For compatibility with old application only. See <a target="_blank" href="https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11">https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-11</a>.',
+            ],
+            'chacha20-poly1305' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental. Please use for testing purpose only.',
+            ],
+            'RSA-OAEP-384' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental. Please use for testing purpose only.',
+            ],
+            'RSA-OAEP-512' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental. Please use for testing purpose only.',
+            ],
+            'AES-CCM-16-64-128' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental and subject to changes. Please use for testing purpose only.',
+            ],
+            'AES-CCM-16-64-256' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental and subject to changes. Please use for testing purpose only.',
+            ],
+            'AES-CCM-64-64-128' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental and subject to changes. Please use for testing purpose only.',
+            ],
+            'AES-CCM-64-64-256' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental and subject to changes. Please use for testing purpose only.',
+            ],
+            'AES-CCM-16-128-128' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental and subject to changes. Please use for testing purpose only.',
+            ],
+            'AES-CCM-16-128-256' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental and subject to changes. Please use for testing purpose only.',
+            ],
+            'AES-CCM-64-128-128' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental and subject to changes. Please use for testing purpose only.',
+            ],
+            'AES-CCM-64-128-256' => [
+                'severity' => 'severity-low',
+                'message'  => 'Experimental and subject to changes. Please use for testing purpose only.',
+            ],
             'RSA1_5' => [
                 'severity' => 'severity-high',
                 'message'  => 'This algorithm is not secured (known attacks). See <a target="_blank" href="https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-5">https://tools.ietf.org/html/draft-irtf-cfrg-webcrypto-algorithms-00#section-5</a>.',

src/Bundle/JoseFramework/Resources/config/encryption_algorithms.yml

@@ -80,3 +80,56 @@ services:
     Jose\Component\Encryption\Algorithm\KeyEncryption\RSAOAEP256:
         tags:
             - {'name': 'jose.algorithm', 'alias': 'RSA-OAEP-256'}
+
+# ---- New algorithms ----
+# These algorithms are out of the main specifications but referenced in
+# some WebAuthn documents.
+#
+# They may be subject to changes.
+# ------------------------
+
+    Jose\Component\Encryption\Algorithm\KeyEncryption\Chacha20Poly1305:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'chacha20-poly1305'}
+
+    Jose\Component\Encryption\Algorithm\KeyEncryption\A128CTR:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A128CTR'}
+    Jose\Component\Encryption\Algorithm\KeyEncryption\A256CTR:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A256CTR'}
+
+    Jose\Component\Encryption\Algorithm\KeyEncryption\RSAOAEP384:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'RSA-OAEP-384'}
+
+    Jose\Component\Encryption\Algorithm\KeyEncryption\RSAOAEP512:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'RSA-OAEP-512'}
+
+
+    Jose\Component\Encryption\Algorithm\ContentEncryption\A128CCM_16_64:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A128CCM-16-64'}
+    Jose\Component\Encryption\Algorithm\ContentEncryption\A128CCM_16_128:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A128CCM-16-128'}
+    Jose\Component\Encryption\Algorithm\ContentEncryption\A128CCM_64_64:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A128CCM-64-64'}
+    Jose\Component\Encryption\Algorithm\ContentEncryption\A128CCM_64_128:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A128CCM-64-128'}
+
+    Jose\Component\Encryption\Algorithm\ContentEncryption\A256CCM_16_64:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A256CCM-16-64'}
+    Jose\Component\Encryption\Algorithm\ContentEncryption\A256CCM_16_128:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A256CCM-16-256'}
+    Jose\Component\Encryption\Algorithm\ContentEncryption\A256CCM_64_64:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A256CCM-64-64'}
+    Jose\Component\Encryption\Algorithm\ContentEncryption\A256CCM_64_128:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'A256CCM-64-256'}

src/Bundle/JoseFramework/Resources/config/signature_algorithms.yml

@@ -51,3 +51,16 @@ services:
     Jose\Component\Signature\Algorithm\None:
         tags:
             - {'name': 'jose.algorithm', 'alias': 'none'}
+
+# ---- New algorithms ----
+# These algorithms are out of the main specifications but referenced in
+# some WebAuthn documents.
+#
+# They may be subject to changes.
+# ------------------------
+    Jose\Component\Signature\Algorithm\HS1:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'HS1'}
+    Jose\Component\Signature\Algorithm\HS256_64:
+        tags:
+            - {'name': 'jose.algorithm', 'alias': 'HS256/64'}

src/Component/Encryption/Algorithm/ContentEncryption/A128CCM_16_128.php

@@ -0,0 +1,51 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * The MIT License (MIT)
+ *
+ * Copyright (c) 2014-2018 Spomky-Labs
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license.  See the LICENSE file for details.
+ */
+
+namespace Jose\Component\Encryption\Algorithm\ContentEncryption;
+
+final class A128CCM_16_128 extends AESCCM
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function getCEKSize(): int
+    {
+        return 128;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    protected function getMode(): string
+    {
+        return 'aes-128-ccm';
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function name(): string
+    {
+        return 'A128CCM-16-128';
+    }
+
+    protected function getTagLength(): int
+    {
+        return 16;
+    }
+
+    public function getIVSize(): int
+    {
+        return 13;
+    }
+}

src/Component/Encryption/Algorithm/ContentEncryption/A128CCM_16_64.php

@@ -0,0 +1,51 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * The MIT License (MIT)
+ *
+ * Copyright (c) 2014-2018 Spomky-Labs
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license.  See the LICENSE file for details.
+ */
+
+namespace Jose\Component\Encryption\Algorithm\ContentEncryption;
+
+final class A128CCM_16_64 extends AESCCM
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function getCEKSize(): int
+    {
+        return 128;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    protected function getMode(): string
+    {
+        return 'aes-128-ccm';
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function name(): string
+    {
+        return 'A128CCM-16-64';
+    }
+
+    protected function getTagLength(): int
+    {
+        return 8;
+    }
+
+    public function getIVSize(): int
+    {
+        return 13;
+    }
+}

src/Component/Encryption/Algorithm/ContentEncryption/A128CCM_64_128.php

@@ -0,0 +1,51 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * The MIT License (MIT)
+ *
+ * Copyright (c) 2014-2018 Spomky-Labs
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license.  See the LICENSE file for details.
+ */
+
+namespace Jose\Component\Encryption\Algorithm\ContentEncryption;
+
+final class A128CCM_64_128 extends AESCCM
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function getCEKSize(): int
+    {
+        return 128;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    protected function getMode(): string
+    {
+        return 'aes-128-ccm';
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function name(): string
+    {
+        return 'A128CCM-64-128';
+    }
+
+    protected function getTagLength(): int
+    {
+        return 16;
+    }
+
+    public function getIVSize(): int
+    {
+        return 7;
+    }
+}

src/Component/Encryption/Algorithm/ContentEncryption/A128CCM_64_64.php

@@ -0,0 +1,51 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * The MIT License (MIT)
+ *
+ * Copyright (c) 2014-2018 Spomky-Labs
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license.  See the LICENSE file for details.
+ */
+
+namespace Jose\Component\Encryption\Algorithm\ContentEncryption;
+
+final class A128CCM_64_64 extends AESCCM
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function getCEKSize(): int
+    {
+        return 128;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    protected function getMode(): string
+    {
+        return 'aes-128-ccm';
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function name(): string
+    {
+        return 'A128CCM-64-64';
+    }
+
+    protected function getTagLength(): int
+    {
+        return 8;
+    }
+
+    public function getIVSize(): int
+    {
+        return 7;
+    }
+}