brynja 0.20.0

Security-first no_std cryptography and secure-protocol facade
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94

//! Security-first, first-party Rust `no_std` cryptography and protocol facade.
//!
//! This release exposes checked numeric/resource domains, transactional
//! borrowed cursors, caller-owned workspaces, secret-lifetime and owned-memory
//! foundations, fixed-width constant-time operations, provider capability
//! contracts with opaque exact-operation handles, and typed wall and monotonic
//! clocks. Pending certificate, external-signature, and accelerator operations
//! have an affine bounded lifecycle. An inert FIPS-aware architecture freezes
//! service, environment, SSP, self-test, and permanent-failure contracts
//! without implementing or claiming a validated module. Mandatory typed
//! security outcomes now bind exact decision domains to authoritative state,
//! including token-gated external-key destruction. Bounded observational
//! events duplicate those outcomes without gaining authority. Shared TLS and
//! DTLS record envelopes are now parsed and encoded independently of protocol
//! selection. A bounded borrowed DER reader now exposes canonical framing
//! without ASN.1 or X.509 semantics. This crate does not provide a TLS
//! connection API, provider implementation, or cryptographic algorithm.

#![no_std]

/// Whether this facade provides its complete planned protocol implementation.
///
/// This remains `false`; the exposed completed core foundations have explicit
/// flags.
pub const IMPLEMENTED: bool = false;

pub use brynja_core as core;
pub use brynja_crypto as crypto;
pub use brynja_pki as pki;
pub use brynja_protocol as protocol;
pub use brynja_tls as tls;

#[cfg(feature = "dtls")]
pub use brynja_dtls as dtls;
#[cfg(feature = "platform")]
pub use brynja_platform as platform;
#[cfg(feature = "quic")]
pub use brynja_quic_tls as quic_tls;

#[cfg(test)]
mod tests {
    #[test]
    fn facade_claims_only_completed_foundation_domains() {
        assert!(!::core::hint::black_box(super::IMPLEMENTED));
        assert!(::core::hint::black_box(
            super::core::READ_CURSOR_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::WRITE_CURSOR_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::WORKSPACE_ARENAS_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::SECRET_LIFETIME_CONTRACT_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::OWNED_MEMORY_ZEROIZATION_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::CONSTANT_TIME_FOUNDATION_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::PROVIDER_CONTRACTS_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::CPU_BACKEND_CONTRACT_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::CLOCK_CONTRACT_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::PENDING_OPERATION_LIFECYCLE_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::FIPS_AWARE_PROVIDER_ARCHITECTURE_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::SECURITY_OUTCOME_AUTHORITY_CONTRACT_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::core::SECURITY_EVENT_SCHEMA_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::protocol::TLS_DTLS_RECORD_FRAMING_IMPLEMENTED
        ));
        assert!(::core::hint::black_box(
            super::pki::BOUNDED_DER_READER_IMPLEMENTED
        ));
        let mut output = [];
        let cursor = super::core::WriteCursor::new(&mut output);
        assert_eq!(cursor.finish().map(|finished| finished.len()), Ok(0));
    }
}