aff4 0.2.6

Pure-Rust read-only AFF4 (Advanced Forensic Format 4) disk image reader
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

[package]
name         = "aff4"
version      = "0.2.6"
edition.workspace = true
repository.workspace = true
homepage.workspace = true
rust-version.workspace = true
description  = "Pure-Rust read-only AFF4 (Advanced Forensic Format 4) disk image reader"
license.workspace = true
exclude     = ["tests/data/", "corpus/", "fuzz/", ".github/", "deny.toml", "renovate.json", ".pre-commit-config.yaml"]
authors.workspace = true
keywords     = ["forensics", "aff4", "disk-image", "container"]
categories   = ["parser-implementations", "filesystem"]

[features]
# Exposes the `testutil` fixture builder to downstream test suites. It writes
# synthetic AFF4 containers with the third-party `zip` writer (zip-forensic-core
# is read-only), so it — and only it — pulls `zip`.
test-helpers = ["dep:zip"]
# forensic-vfs ImageSource contract (optional): present a decoded AFF4 as a
# read-only positioned-read byte source. Behind the `vfs` feature so a normal
# aff4 consumer carries no forensic-vfs dependency (ADR 0004).
vfs = ["dep:forensic-vfs"]

[dependencies]
safe-read.workspace = true
thiserror = { workspace = true }
forensic-vfs = { version = "0.3", optional = true }
# The reader reads through zip-forensic-core (our pure-Rust forensic ZIP reader).
zip-forensic-core = { workspace = true }
# Third-party `zip` is a WRITER, needed only to build test fixtures — optional so
# a normal `aff4` consumer never pulls it (dev-dependency covers our own tests).
zip       = { workspace = true, optional = true }
flate2    = { workspace = true }
snap      = { workspace = true }
lz4_flex  = { workspace = true }
# Encrypted AFF4 decrypt (RustCrypto): PBKDF2 → RFC 3394 unwrap → AES-XTS.
pbkdf2   = { workspace = true }
sha2     = { workspace = true }
aes      = { workspace = true }
aes-kw   = { workspace = true }
xts-mode = { workspace = true }

[dev-dependencies]
tempfile  = { workspace = true }
proptest  = { workspace = true }
lz4_flex  = { workspace = true }
md-5.workspace = true
# For this crate's own tests (fixture writing); consumers get it only via test-helpers.
zip       = { workspace = true }

[lints]
workspace = true