auths-crypto 0.1.1

Cryptographic primitives for Auths: KERI key parsing and DID:key encoding
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

//! Cryptographic primitives for Auths.
//!
//! Layer 0: a curve-agnostic provider abstraction (sign / verify / keygen /
//! AEAD / KDF), key parsing, and `did:key` encoding, isolated from concrete
//! backends to keep everything above dependency-light. The default curve is
//! **P-256** (the iOS Secure Enclave only supports P-256); Ed25519 is a
//! fully-supported peer. Keys, seeds, and signatures carry their curve tag
//! in-band — never dispatch on byte length. See `README.md` for the full
//! curve policy and build profiles.
//!
//! - [`provider`] — Pluggable [`CryptoProvider`] trait (curve-agnostic
//!   `sign_typed` / `verify_typed` / `generate_typed_keypair`), [`CurveType`],
//!   and `default_provider`
//! - [`key_ops`] — [`TypedSignerKey`], the curve-tagged signer that replaces
//!   `(SecureSeed, CurveType)` pairs
//! - [`did_key`] — DID:key ↔ raw key, auto-detecting the curve from the
//!   multicodec ([`DidKeyError`], [`did_key_decode`], [`did_key_to_p256`])

#[cfg(all(feature = "fips", not(target_arch = "wasm32")))]
pub mod aws_lc_provider;
#[cfg(all(feature = "cnsa", not(target_arch = "wasm32")))]
pub mod cnsa_provider;
pub mod did_key;
pub mod error;
pub mod hash256;
pub mod key_material;
pub mod key_ops;
pub mod pkcs8;
pub mod provider;
#[cfg(all(feature = "native", not(target_arch = "wasm32")))]
pub mod ring_provider;
pub mod secret;
pub mod ssh;
#[cfg(feature = "wasm")]
pub mod webcrypto_provider;

#[cfg(all(feature = "fips", not(target_arch = "wasm32")))]
pub use aws_lc_provider::AwsLcProvider;
#[cfg(all(feature = "cnsa", not(target_arch = "wasm32")))]
pub use cnsa_provider::CnsaProvider;
pub use did_key::{
    DecodedDidKey, DidKeyError, did_key_decode, did_key_to_p256, ed25519_pubkey_to_did_keri,
};
pub use error::AuthsErrorInfo;
pub use hash256::Hash256;
pub use key_material::{build_ed25519_pkcs8_v2, parse_ed25519_key_material, parse_ed25519_seed};
pub use key_ops::{ParsedKey, TypedSeed, TypedSignerKey, normalize_verkey, parse_key_material};
#[cfg(all(feature = "native", not(target_arch = "wasm32")))]
pub use key_ops::{public_key as typed_public_key, sign as typed_sign};
pub use pkcs8::Pkcs8Der;
#[cfg(all(feature = "native", not(target_arch = "wasm32")))]
pub use provider::default_provider;
pub use provider::{
    CryptoError, CryptoProvider, CurveType, ED25519_PUBLIC_KEY_LEN, ED25519_SIGNATURE_LEN,
    P256_PUBLIC_KEY_LEN, P256_SIGNATURE_LEN, SecureSeed, SeedDecodeError, decode_seed_hex,
};
#[cfg(all(feature = "native", not(target_arch = "wasm32")))]
pub use ring_provider::RingCryptoProvider;
pub use secret::Secret;
#[allow(deprecated)]
pub use ssh::openssh_pub_to_raw_ed25519;
pub use ssh::{SshKeyError, openssh_pub_to_raw};
#[cfg(all(any(test, feature = "test-utils"), not(target_arch = "wasm32")))]
#[allow(clippy::unwrap_used, clippy::expect_used)]
pub mod testing;

#[cfg(feature = "wasm")]
pub use webcrypto_provider::WebCryptoProvider;