auths-crypto 0.1.1

Cryptographic primitives for Auths: KERI key parsing and DID:key encoding
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

use auths_crypto::ssh::{SshKeyError, openssh_pub_to_raw};

#[test]
fn parses_valid_ed25519_key() {
    // Generated with: ssh-keygen -t ed25519 -C "" -f /tmp/test_key -N ""
    let openssh_pub =
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
    let (curve, raw) = openssh_pub_to_raw(openssh_pub).unwrap();
    assert_eq!(curve, auths_crypto::CurveType::Ed25519);
    assert_eq!(raw.len(), 32);
}

#[test]
fn rejects_wrong_key_type() {
    // An RSA key line (abbreviated) — key type is ssh-rsa, not ssh-ed25519
    let openssh_pub = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC comment";
    let err = openssh_pub_to_raw(openssh_pub).unwrap_err();
    // ssh-key will reject malformed RSA data as InvalidFormat; an actual valid RSA key
    // would return UnsupportedKeyType. Both are acceptable rejections for this input.
    assert!(
        matches!(
            err,
            SshKeyError::UnsupportedKeyType | SshKeyError::InvalidFormat(_)
        ),
        "unexpected error variant: {:?}",
        err
    );
}

#[test]
fn rejects_malformed_base64() {
    let openssh_pub = "ssh-ed25519 !!!not_base64!!! comment";
    let err = openssh_pub_to_raw(openssh_pub).unwrap_err();
    assert!(
        matches!(err, SshKeyError::InvalidFormat(_)),
        "unexpected error variant: {:?}",
        err
    );
}