cosmian_kms_cli 5.18.0

Command Line Interface used to manage the KMS server If any assistance is needed, please either visit the Cosmian technical documentation at https://docs.cosmian.com or contact the Cosmian support team on Discord https://discord.com/invite/7kPMNtHpnz
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

use cosmian_kmip::{
    kmip_0::kmip_messages::{ResponseMessage, ResponseMessageBatchItemVersioned},
    kmip_2_1::{kmip_operations::Operation, kmip_types::UniqueIdentifier},
};

use crate::tests::kms::xml::request::PrepareRequest;

/// Update cached artifacts for KMIP 2.1 responses only.
pub(crate) fn update_cached_artifacts_v21(
    state: &mut PrepareRequest,
    resp: &ResponseMessage,
    pending_encrypt_aad: &mut Option<Vec<u8>>,
) {
    for bi in &resp.batch_item {
        let ResponseMessageBatchItemVersioned::V21(inner) = bi else {
            continue;
        };

        if let Some(Operation::EncryptResponse(enc_resp)) = &inner.response_payload {
            match (&enc_resp.data, &enc_resp.i_v_counter_nonce) {
                (Some(data), Some(iv)) => {
                    let tag: Vec<u8> = enc_resp
                        .authenticated_encryption_tag
                        .clone()
                        .unwrap_or_default();
                    state.last_encrypt_artifacts = Some((data.clone(), iv.clone(), tag.clone()));
                    if let Some(aad) = pending_encrypt_aad.take() {
                        state
                            .encrypt_artifacts_by_aad
                            .insert(aad, (data.clone(), iv.clone(), tag.clone()));
                    }
                }
                _ => {
                    state.last_encrypt_artifacts = None;
                }
            }
        }
        if let Some(Operation::DecryptResponse(_)) = &inner.response_payload {
            state.last_encrypt_artifacts = None;
        }
        if let Some(Operation::SignResponse(sr)) = &inner.response_payload {
            state.last_signature_from_sign = sr.signature_data.clone();
        }
        if let Some(Operation::MACResponse(mr)) = &inner.response_payload {
            state.last_mac_from_mac = mr.mac_data.clone();
        }

        // Update last_uid and PKCS11 correlation from response payloads
        match &inner.response_payload {
            Some(Operation::CreateResponse(cr)) => {
                if let UniqueIdentifier::TextString(s) = &cr.unique_identifier {
                    state.last_uid = Some(s.clone());
                }
            }
            Some(Operation::PKCS11Response(pk)) => {
                state.last_pkcs11_correlation_value = pk.correlation_value.clone();
            }
            Some(Operation::RegisterResponse(rr)) => {
                if let UniqueIdentifier::TextString(s) = &rr.unique_identifier {
                    state.last_uid = Some(s.clone());
                }
            }
            Some(Operation::CreateKeyPairResponse(ckpr)) => {
                if let UniqueIdentifier::TextString(s) = &ckpr.private_key_unique_identifier {
                    state.last_uid = Some(s.clone());
                }
            }
            Some(Operation::LocateResponse(lr)) => {
                if let Some(list) = &lr.unique_identifier {
                    if list.len() == 1 {
                        if let UniqueIdentifier::TextString(s) = &list[0] {
                            state.last_uid = Some(s.clone());
                        }
                    }
                }
            }
            _ => {}
        }
    }
}