cosmian_kms_cli 5.17.0

Command Line Interface used to manage the KMS server If any assistance is needed, please either visit the Cosmian technical documentation at https://docs.cosmian.com or contact the Cosmian support team on Discord https://discord.com/invite/7kPMNtHpnz
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87

use cosmian_kms_client::reexport::cosmian_kms_client_utils::configurable_kem_utils::KemAlgorithm;
use cosmian_logger::debug;
use tempfile::TempDir;
use test_kms_server::{TestsContext, start_default_test_kms_server};

use crate::{
    actions::kms::configurable_kem::{
        decaps::DecapsAction, encaps::EncapsAction, keygen::CreateKemKeyPairAction,
    },
    error::result::KmsCliResult,
};

async fn test_kem(ctx: &TestsContext, name: &str, kem_algorithm: KemAlgorithm) -> KmsCliResult<()> {
    debug!("Key generation ({name})");

    let (dk_id, ek_id) = Box::pin(
        CreateKemKeyPairAction {
            access_structure: None,
            tags: vec![name.to_owned()],
            sensitive: false,
            kem_algorithm,
            wrapping_key_id: None,
        }
        .run(ctx.get_owner_client()),
    )
    .await?;

    let tmp_dir = TempDir::new()?;
    let tmp_path = tmp_dir.path();
    let encapsulation_file = tmp_path.join("encapsulation.enc");
    let session_key_file = tmp_path.join("session_key.plain");

    debug!("Encapsulation");

    EncapsAction {
        key_id: Some(ek_id.to_string()),
        encryption_policy: None,
        tags: None,
        output_file: Some(encapsulation_file.clone()),
    }
    .run(ctx.get_owner_client())
    .await?;

    debug!("Decapsulation");

    DecapsAction {
        input_file: encapsulation_file,
        key_id: Some(dk_id.to_string()),
        tags: None,
        output_file: Some(session_key_file.clone()),
    }
    .run(ctx.get_owner_client())
    .await?;

    // Verify the session key was written to the output file
    assert!(session_key_file.exists());
    let session_key = std::fs::read(&session_key_file)?;
    assert!(!session_key.is_empty());

    Ok(())
}

#[tokio::test]
pub(crate) async fn test_create_configurable_kem_key_pair() -> KmsCliResult<()> {
    let ctx = start_default_test_kms_server().await;

    test_kem(ctx, "ML-KEM512 KEM", KemAlgorithm::MlKem512).await?;
    test_kem(ctx, "ML-KEM768 KEM", KemAlgorithm::MlKem768).await?;
    test_kem(ctx, "P256 KEM", KemAlgorithm::P256).await?;
    test_kem(ctx, "CURVE25519 KEM", KemAlgorithm::Curve25519).await?;
    test_kem(ctx, "ML-KEM512/P256 KEM", KemAlgorithm::MlKem512P256).await?;
    test_kem(ctx, "ML-KEM768/P256 KEM", KemAlgorithm::MlKem768P256).await?;
    test_kem(
        ctx,
        "ML-KEM512/CURVE25519 KEM",
        KemAlgorithm::MlKem512Curve25519,
    )
    .await?;
    test_kem(
        ctx,
        "ML-KEM768/CURVE25519 KEM",
        KemAlgorithm::MlKem768Curve25519,
    )
    .await?;

    Ok(())
}