| module iana-ssh-public-key-algs { |
| yang-version 1.1; |
| namespace "urn:ietf:params:xml:ns:yang:iana-ssh-public-key-algs"; |
| prefix sshpka; |
| |
| organization |
| "Internet Assigned Numbers Authority (IANA)"; |
| contact |
| "Postal: ICANN |
| 12025 Waterfront Drive, Suite 300 |
| Los Angeles, CA 90094-2536 |
| United States of America |
| Tel: +1 310 301 5800 |
| Email: iana@iana.org"; |
| |
| description |
| "This module defines identities for the public key algorithms |
| defined in the 'Public Key Algorithm Names' sub-registry of the |
| 'Secure Shell (SSH) Protocol Parameters' registry maintained |
| by IANA. |
| |
| Copyright (c) 2022 IETF Trust and the persons identified as |
| authors of the code. All rights reserved. |
| |
| Redistribution and use in source and binary forms, with |
| or without modification, is permitted pursuant to, and |
| subject to the license terms contained in, the Revised |
| BSD License set forth in Section 4.c of the IETF Trust's |
| Legal Provisions Relating to IETF Documents |
| (https://trustee.ietf.org/license-info). |
| |
| The initial version of this YANG module is part of RFC EEEE |
| (https://www.rfc-editor.org/info/rfcEEEE); see the RFC |
| itself for full legal notices."; |
| |
| revision 2022-06-16 { |
| description |
| "Reflects contents of the public key algorithms registry |
| on June 16, 2022."; |
| reference |
| "RFC EEEE: YANG Groupings for SSH Clients and SSH Servers"; |
| } |
| |
| // Typedefs |
| |
| typedef public-key-algorithm-ref { |
| type identityref { |
| base "public-key-alg-base"; |
| } |
| description |
| "A reference to a SSH public key algorithm identifier."; |
| } |
| |
| // Identities |
| identity public-key-alg-base { |
| description |
| "Base identity used to identify public key algorithms."; |
| } |
| |
| identity ssh-dss { |
| base public-key-alg-base; |
| description |
| "SSH-DSS"; |
| reference |
| "RFC 4253: |
| The Secure Shell (SSH) Transport Layer Protocol"; |
| } |
| |
| identity ssh-rsa { |
| base public-key-alg-base; |
| description |
| "SSH-RSA"; |
| reference |
| "RFC 4253: |
| The Secure Shell (SSH) Transport Layer Protocol"; |
| } |
| |
| identity rsa-sha2-256 { |
| base public-key-alg-base; |
| description |
| "RSA-SHA2-256"; |
| reference |
| "RFC 8332: |
| Use of RSA Keys with SHA-256 and SHA-512 |
| in the Secure Shell (SSH) Protocol"; |
| } |
| |
| identity rsa-sha2-512 { |
| base public-key-alg-base; |
| description |
| "RSA-SHA2-512"; |
| reference |
| "RFC 8332: |
| Use of RSA Keys with SHA-256 and SHA-512 |
| in the Secure Shell (SSH) Protocol"; |
| } |
| |
| identity spki-sign-rsa { |
| base public-key-alg-base; |
| description |
| "SPKI-SIGN-RSA"; |
| reference |
| "RFC 4253: |
| The Secure Shell (SSH) Transport Layer Protocol"; |
| } |
| |
| identity spki-sign-dss { |
| base public-key-alg-base; |
| description |
| "SPKI-SIGN-DSS"; |
| reference |
| "RFC 4253: |
| The Secure Shell (SSH) Transport Layer Protocol"; |
| } |
| |
| identity pgp-sign-rsa { |
| base public-key-alg-base; |
| description |
| "PGP-SIGN-RSA"; |
| reference |
| "RFC 4253: |
| The Secure Shell (SSH) Transport Layer Protocol"; |
| } |
| |
| identity pgp-sign-dss { |
| base public-key-alg-base; |
| description |
| "PGP-SIGN-DSS"; |
| reference |
| "RFC 4253: |
| The Secure Shell (SSH) Transport Layer Protocol"; |
| } |
| |
| identity null { |
| base public-key-alg-base; |
| description |
| "NULL"; |
| reference |
| "RFC 4462: |
| Generic Security Service Application Program Interface |
| (GSS-API) Authentication and Key Exchange for the |
| Secure Shell (SSH) Protocol"; |
| } |
| |
| identity ecdsa-sha2-nistp256 { |
| base public-key-alg-base; |
| status deprecated; |
| description |
| "ECDSA-SHA2-NISTP256 (secp256r1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-nistp384 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-NISTP384 (secp384r1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-nistp521 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-NISTP521 (secp521r1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-1.3.132.0.1 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-1.3.132.0.1 (nistk163, sect163k1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-1.2.840.10045.3.1.1 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-1.2.840.10045.3.1.1 (nistp192, secp192r1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-1.3.132.0.33 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-1.3.132.0.33 (nistp224, secp224r1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-1.3.132.0.26 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-1.3.132.0.26 (nistk233, sect233k1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-1.3.132.0.27 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-1.3.132.0.27 (nistb233, sect233r1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-1.3.132.0.16 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-1.3.132.0.16 (nistk283, sect283k1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-1.3.132.0.36 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-1.3.132.0.36 (nistk409, sect409k1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-1.3.132.0.37 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-1.3.132.0.37 (nistb409, sect409r1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity ecdsa-sha2-1.3.132.0.38 { |
| base public-key-alg-base; |
| description |
| "ECDSA-SHA2-1.3.132.0.38 (nistt571, sect571k1)"; |
| reference |
| "RFC 5656: |
| Elliptic Curve Algorithm Integration in the |
| Secure Shell Transport Layer"; |
| } |
| |
| identity x509v3-ssh-dss { |
| base public-key-alg-base; |
| description |
| "X509V3-SSH-DSS"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ssh-rsa { |
| base public-key-alg-base; |
| description |
| "X509V3-SSH-RSA"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-rsa2048-sha256 { |
| base public-key-alg-base; |
| status deprecated; |
| description |
| "X509V3-RSA2048-SHA256"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-nistp256 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-NISTP256 (secp256r1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-nistp384 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-NISTP384 (secp384r1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-nistp521 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-NISTP521 (secp521r1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-1.3.132.0.1 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-1.3.132.0.1 (nistk163, sect163k1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-1.2.840.10045.3.1.1 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-1.2.840.10045.3.1.1 (nistp192, secp192r1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-1.3.132.0.33 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-1.3.132.0.33 (nistp224, secp224r1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-1.3.132.0.26 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-1.3.132.0.26 (nistk233, sect233k1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-1.3.132.0.27 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-1.3.132.0.27 (nistb233, sect233r1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-1.3.132.0.16 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-1.3.132.0.16 (nistk283, sect283k1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-1.3.132.0.36 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-1.3.132.0.36 (nistk409, sect409k1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-1.3.132.0.37 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-1.3.132.0.37 (nistb409, sect409r1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity x509v3-ecdsa-sha2-1.3.132.0.38 { |
| base public-key-alg-base; |
| description |
| "X509V3-ECDSA-SHA2-1.3.132.0.38 (nistt571, sect571k1)"; |
| reference |
| "RFC 6187: |
| X.509v3 Certificates for Secure Shell Authentication"; |
| } |
| |
| identity ssh-ed25519 { |
| base public-key-alg-base; |
| description |
| "SSH-ED25519"; |
| reference |
| "RFC 8709: |
| Ed25519 and Ed448 Public Key Algorithms for the |
| Secure Shell (SSH) Protocol"; |
| } |
| |
| identity ssh-ed448 { |
| base public-key-alg-base; |
| description |
| "SSH-ED448"; |
| reference |
| "RFC 8709: |
| Ed25519 and Ed448 Public Key Algorithms for the |
| Secure Shell (SSH) Protocol"; |
| } |
| |
| // Protocol-accessible Nodes |
| |
| container supported-algorithms { |
| config false; |
| description |
| "A container for a list of public key algorithms |
| supported by the server."; |
| leaf-list supported-algorithm { |
| type public-key-algorithm-ref; |
| description |
| "A public key algorithm supported by the server."; |
| } |
| } |
| |
| } |