c2pa_raw_crypto 0.1.1

// Copyright 2025 Adobe. All rights reserved.
// This file is licensed to you under the Apache License,
// Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0)
// or the MIT license (http://opensource.org/licenses/MIT),
// at your option.

// Unless required by applicable law or agreed to in writing,
// this software is distributed on an "AS IS" BASIS, WITHOUT
// WARRANTIES OR REPRESENTATIONS OF ANY KIND, either express or
// implied. See the LICENSE-MIT and LICENSE-APACHE files for the
// specific language governing permissions and limitations under
// each license.

//! This module binds Rust native logic for generating raw signatures to this
//! crate's [`RawSigner`] trait.

use crate::{RawSigner, RawSignerError, SigningAlg};

mod ecdsa_signer;
mod ed25519_signer;
mod rsa_signer;

/// Returns a built-in [`RawSigner`] instance using the provided private key.
///
/// May return an `Err` response if the private key is invalid.
pub(crate) fn signer_from_private_key(
    private_key: &[u8],
    alg: SigningAlg,
) -> Result<Box<dyn RawSigner + Send + Sync>, RawSignerError> {
    match alg {
        SigningAlg::Ed25519 => Ok(Box::new(ed25519_signer::Ed25519Signer::from_private_key(
            private_key,
        )?)),

        SigningAlg::Ps256 | SigningAlg::Ps384 | SigningAlg::Ps512 => Ok(Box::new(
            rsa_signer::RsaSigner::from_private_key(private_key, alg)?,
        )),

        SigningAlg::Es256 | SigningAlg::Es384 | SigningAlg::Es512 => Ok(Box::new(
            ecdsa_signer::EcdsaSigner::from_private_key(private_key, alg)?,
        )),
    }
}

#[cfg(test)]
mod tests {
    #![allow(clippy::expect_used)]
    #![allow(clippy::panic)]
    #![allow(clippy::unwrap_used)]

    #[cfg(all(target_arch = "wasm32", not(target_os = "wasi")))]
    use wasm_bindgen_test::wasm_bindgen_test;

    use crate::{SigningAlg, rust_native};

    /* Not implemented in rust_native yet.
    #[test]
    // #[cfg_attr(all(target_arch = "wasm32", not(target_os = "wasi")), wasm_bindgen_test)]
    fn es256() {
        let private_key = include_bytes!("../../../tests/fixtures/raw_signature/es256.priv");

        let signer =
            rust_native::signers::signer_from_private_key(private_key, SigningAlg::Es256)
                .unwrap();

        let data = b"some sample content to sign";
        let signature = signer.sign(data).unwrap();

        println!("signature len = {}", signature.len());
        assert!(signature.len() <= signer.max_signature_size());

        let pub_key = include_bytes!("../../../tests/fixtures/raw_signature/es256.pub_key");

        let validator = rust_native::validators::validator_for_signing_alg(SigningAlg::Es256).unwrap();
        validator.validate(&signature, data, pub_key).unwrap();
    }

    #[test]
    // #[cfg_attr(all(target_arch = "wasm32", not(target_os = "wasi")), wasm_bindgen_test)]
    fn es384() {
        let private_key = include_bytes!("../../../tests/fixtures/raw_signature/es384.priv");

        let signer =
            rust_native::signers::signer_from_private_key(private_key, SigningAlg::Es384)
                .unwrap();

        let data = b"some sample content to sign";
        let signature = signer.sign(data).unwrap();

        println!("signature len = {}", signature.len());
        assert!(signature.len() <= signer.max_signature_size());

        let pub_key = include_bytes!("../../../tests/fixtures/raw_signature/es384.pub_key");

        let validator = rust_native::validators::validator_for_signing_alg(SigningAlg::Es384).unwrap();
        validator.validate(&signature, data, pub_key).unwrap();
    }

    #[test]
    // #[cfg_attr(all(target_arch = "wasm32", not(target_os = "wasi")), wasm_bindgen_test)]
    fn es512() {
        let private_key = include_bytes!("../../../tests/fixtures/raw_signature/es512.priv");

        let signer =
            rust_native::signers::signer_from_private_key(private_key, SigningAlg::Es512)
                .unwrap();

        let data = b"some sample content to sign";
        let signature = signer.sign(data).unwrap();

        println!("signature len = {}", signature.len());
        assert!(signature.len() <= signer.max_signature_size());

        let pub_key = include_bytes!("../../../tests/fixtures/raw_signature/es512.pub_key");

        let validator = rust_native::validators::validator_for_signing_alg(SigningAlg::Es512).unwrap();
        validator.validate(&signature, data, pub_key).unwrap();
    }
    */

    #[test]
    #[cfg_attr(
        all(target_arch = "wasm32", not(target_os = "wasi")),
        wasm_bindgen_test
    )]
    fn ed25519() {
        let private_key = include_bytes!("../../../tests/fixtures/raw_signature/ed25519.priv");

        let signer =
            rust_native::signers::signer_from_private_key(private_key, SigningAlg::Ed25519)
                .unwrap();

        let data = b"some sample content to sign";
        let signature = signer.sign(data).unwrap();

        println!("signature len = {}", signature.len());
        assert!(signature.len() <= signer.max_signature_size());

        let pub_key = include_bytes!("../../../tests/fixtures/raw_signature/ed25519.pub_key");

        let validator =
            rust_native::validators::validator_for_signing_alg(SigningAlg::Ed25519).unwrap();
        validator.validate(&signature, data, pub_key).unwrap();
    }

    #[test]
    #[cfg_attr(
        all(target_arch = "wasm32", not(target_os = "wasi")),
        wasm_bindgen_test
    )]
    fn ps256() {
        let private_key = include_bytes!("../../../tests/fixtures/raw_signature/ps256.priv");

        let signer =
            rust_native::signers::signer_from_private_key(private_key, SigningAlg::Ps256).unwrap();

        let data = b"some sample content to sign";
        let signature = signer.sign(data).unwrap();

        println!("signature len = {}", signature.len());
        assert!(signature.len() <= signer.max_signature_size());

        let pub_key = include_bytes!("../../../tests/fixtures/raw_signature/ps256.pub_key");

        let validator =
            rust_native::validators::validator_for_signing_alg(SigningAlg::Ps256).unwrap();
        validator.validate(&signature, data, pub_key).unwrap();
    }

    #[test]
    #[cfg_attr(
        all(target_arch = "wasm32", not(target_os = "wasi")),
        wasm_bindgen_test
    )]
    fn ps384() {
        let private_key = include_bytes!("../../../tests/fixtures/raw_signature/ps384.priv");

        let signer =
            rust_native::signers::signer_from_private_key(private_key, SigningAlg::Ps384).unwrap();

        let data = b"some sample content to sign";
        let signature = signer.sign(data).unwrap();

        println!("signature len = {}", signature.len());
        assert!(signature.len() <= signer.max_signature_size());

        let pub_key = include_bytes!("../../../tests/fixtures/raw_signature/ps384.pub_key");

        let validator =
            rust_native::validators::validator_for_signing_alg(SigningAlg::Ps384).unwrap();
        validator.validate(&signature, data, pub_key).unwrap();
    }

    #[test]
    #[cfg_attr(
        all(target_arch = "wasm32", not(target_os = "wasi")),
        wasm_bindgen_test
    )]
    fn ps512() {
        let private_key = include_bytes!("../../../tests/fixtures/raw_signature/ps512.priv");

        let signer =
            rust_native::signers::signer_from_private_key(private_key, SigningAlg::Ps512).unwrap();

        let data = b"some sample content to sign";
        let signature = signer.sign(data).unwrap();

        println!("signature len = {}", signature.len());
        assert!(signature.len() <= signer.max_signature_size());

        let pub_key = include_bytes!("../../../tests/fixtures/raw_signature/ps512.pub_key");

        let validator =
            rust_native::validators::validator_for_signing_alg(SigningAlg::Ps512).unwrap();
        validator.validate(&signature, data, pub_key).unwrap();
    }
}