aws-lc-rs 1.17.2

aws-lc-rs is a cryptographic library using AWS-LC for its cryptographic operations. This library strives to be API-compatible with the popular Rust library named ring.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121

// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
// SPDX-License-Identifier: Apache-2.0 OR ISC

#![cfg(debug_assertions)]

use crate::fips::{assert_fips_status_indicator, FipsServiceStatus};
use crate::rsa::{KeyPair, KeySize, PrivateDecryptingKey};

macro_rules! generate_key {
    ($name:ident, KeyPair, $size:expr) => {
        #[test]
        fn $name() {
            // Using the non-fips generator will not set the indicator
            #[cfg(not(feature = "fips"))]
            let _ =
                assert_fips_status_indicator!(KeyPair::generate($size), FipsServiceStatus::Unset)
                    .expect("key generated");

            // Using the fips generator should set the indicator
            #[cfg(feature = "fips")]
            let _ = assert_fips_status_indicator!(
                KeyPair::generate($size),
                FipsServiceStatus::Approved
            )
            .expect("key generated");
        }
    };
    ($name:ident, PrivateDecryptingKey, $size:expr) => {
        #[test]
        fn $name() {
            // Using the non-fips generator will not set the indicator
            #[cfg(not(feature = "fips"))]
            let _ = assert_fips_status_indicator!(
                PrivateDecryptingKey::generate($size),
                FipsServiceStatus::Unset
            )
            .expect("key generated");

            // Using the fips generator should set the indicator
            #[cfg(feature = "fips")]
            let _ = assert_fips_status_indicator!(
                PrivateDecryptingKey::generate($size),
                FipsServiceStatus::Approved
            )
            .expect("key generated");
        }
    };
    ($name:ident, KeyPair, $size:expr, false) => {
        #[test]
        fn $name() {
            // Using the non-fips generator will not set the indicator
            let _ =
                assert_fips_status_indicator!(KeyPair::generate($size), FipsServiceStatus::Unset);

            // Using the fips generator should set the indicator
            let _ = assert_fips_status_indicator!(
                KeyPair::generate_fips($size),
                FipsServiceStatus::NonApproved
            )
            .expect_err("key size not allowed");
        }
    };
    ($name:ident, PrivateDecryptingKey, $size:expr, false) => {
        #[test]
        fn $name() {
            // Using the non-fips generator will not set the indicator
            let _ = assert_fips_status_indicator!(
                PrivateDecryptingKey::generate($size),
                FipsServiceStatus::Unset
            );

            // Using the fips generator should set the indicator
            let _ = assert_fips_status_indicator!(
                PrivateDecryptingKey::generate_fips($size),
                FipsServiceStatus::NonApproved
            )
            .expect_err("key size not allowed");
        }
    };
}

generate_key!(rsa2048_signing_generate_key, KeyPair, KeySize::Rsa2048);
// Key generation for large RSA keys is very slow
#[cfg(not(disable_slow_tests))]
generate_key!(rsa3072_signing_generate_key, KeyPair, KeySize::Rsa3072);
// Key generation for large RSA keys is very slow
#[cfg(not(disable_slow_tests))]
generate_key!(rsa4096_signing_generate_key, KeyPair, KeySize::Rsa4096);
// Key generation for large RSA keys is very slow
#[cfg(not(disable_slow_tests))]
generate_key!(rsa8192_signing_generate_key, KeyPair, KeySize::Rsa8192);

generate_key!(
    rsa2048_encryption_generate_key,
    PrivateDecryptingKey,
    KeySize::Rsa2048
);

// Key generation for large RSA keys is very slow
#[cfg(not(disable_slow_tests))]
generate_key!(
    rsa3072_encryption_generate_key,
    PrivateDecryptingKey,
    KeySize::Rsa3072
);

// Key generation for large RSA keys is very slow
#[cfg(not(disable_slow_tests))]
generate_key!(
    rsa4096_encryption_signing_generate_key,
    PrivateDecryptingKey,
    KeySize::Rsa4096
);

// Key generation for large RSA keys is very slow
#[cfg(not(disable_slow_tests))]
generate_key!(
    rsa8192_encryption_generate_key,
    PrivateDecryptingKey,
    KeySize::Rsa8192
);