cosmian_kms_cli 5.20.0

Command Line Interface used to manage the KMS server If any assistance is needed, please either visit the Cosmian technical documentation at https://docs.cosmian.com or contact the Cosmian support team on Discord https://discord.com/invite/7kPMNtHpnz
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

use cosmian_kmip::{
    kmip_0::kmip_messages::{ResponseMessage, ResponseMessageBatchItemVersioned},
    kmip_1_4::kmip_operations::Operation as Op14,
};

use crate::tests::kms::xml::request::PrepareRequest;

/// Update cached artifacts for KMIP 1.4 responses only.
pub(crate) fn update_cached_artifacts_v14(
    state: &mut PrepareRequest,
    resp: &ResponseMessage,
    pending_encrypt_aad: &mut Option<Vec<u8>>,
) {
    for bi in &resp.batch_item {
        let ResponseMessageBatchItemVersioned::V14(inner) = bi else {
            continue;
        };

        match &inner.response_payload {
            Some(Op14::EncryptResponse(enc_resp)) => {
                match (&enc_resp.data, &enc_resp.i_v_counter_nonce) {
                    (Some(data), Some(iv)) => {
                        let tag: Vec<u8> = enc_resp
                            .authenticated_encryption_tag
                            .clone()
                            .unwrap_or_default();
                        state.last_encrypt_artifacts =
                            Some((data.clone(), iv.clone(), tag.clone()));
                        if let Some(aad) = pending_encrypt_aad.take() {
                            state
                                .encrypt_artifacts_by_aad
                                .insert(aad, (data.clone(), iv.clone(), tag.clone()));
                        }
                    }
                    _ => state.last_encrypt_artifacts = None,
                }
            }
            Some(Op14::DecryptResponse(_)) => {
                state.last_encrypt_artifacts = None;
            }
            Some(Op14::SignResponse(sr)) => {
                state.last_signature_from_sign = Some(sr.signature_data.clone());
            }
            Some(Op14::MACResponse(mr)) => {
                state.last_mac_from_mac = mr.mac_data.clone();
            }
            Some(Op14::CreateResponse(cr)) => {
                state.last_uid = Some(cr.unique_identifier.clone());
            }
            Some(Op14::RegisterResponse(rr)) => {
                state.last_uid = Some(rr.unique_identifier.clone());
            }
            Some(Op14::CreateKeyPairResponse(ckpr)) => {
                state.last_uid = Some(ckpr.private_key_unique_identifier.clone());
            }
            Some(Op14::LocateResponse(lr)) => {
                if let Some(list) = &lr.unique_identifier {
                    if list.len() == 1 {
                        state.last_uid = Some(list[0].clone());
                    }
                }
            }
            _ => {}
        }
    }
}