cosmian_kms_client_utils 5.25.0

Cosmian KMS Client Utilities - used in WASM and KMS Client
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

use clap::ValueEnum;
use cosmian_kmip::{
    kmip_0::kmip_types::{HashingAlgorithm, PaddingMethod},
    kmip_2_1::kmip_types::{CryptographicAlgorithm, CryptographicParameters},
};
use serde::Deserialize;
use strum::EnumString;

#[derive(ValueEnum, Debug, Clone, Copy, EnumString, Deserialize)]
pub enum RsaEncryptionAlgorithm {
    #[cfg(feature = "non-fips")]
    // a.k.a PKCS#1 v1.5 RSA
    CkmRsaPkcs,
    // a.k.a PKCS#1 RSA OAEP
    CkmRsaPkcsOaep,
    // CKM_RSA_AES_KEY_WRAP
    CkmRsaAesKeyWrap,
}

impl RsaEncryptionAlgorithm {
    #[must_use]
    pub fn to_cryptographic_parameters(self, hash_fn: HashFn) -> CryptographicParameters {
        match self {
            #[cfg(feature = "non-fips")]
            Self::CkmRsaPkcs => CryptographicParameters {
                cryptographic_algorithm: Some(CryptographicAlgorithm::RSA),
                padding_method: Some(PaddingMethod::PKCS1v15),
                hashing_algorithm: None,
                ..Default::default()
            },
            Self::CkmRsaPkcsOaep => CryptographicParameters {
                cryptographic_algorithm: Some(CryptographicAlgorithm::RSA),
                padding_method: Some(PaddingMethod::OAEP),
                hashing_algorithm: Some(hash_fn.into()),
                ..Default::default()
            },
            Self::CkmRsaAesKeyWrap => CryptographicParameters {
                cryptographic_algorithm: Some(CryptographicAlgorithm::RSA),
                padding_method: Some(PaddingMethod::None),
                hashing_algorithm: Some(hash_fn.into()),
                ..Default::default()
            },
        }
    }

    #[must_use]
    pub const fn as_str(&self) -> &'static str {
        match self {
            Self::CkmRsaPkcsOaep => "ckm-rsa-pkcs-oaep",
            Self::CkmRsaAesKeyWrap => "ckm-rsa-aes-key-wrap",
            #[cfg(feature = "non-fips")]
            Self::CkmRsaPkcs => "ckm-rsa-pkcs",
        }
    }
}

#[derive(ValueEnum, Debug, Clone, Copy, EnumString, Deserialize)]
pub enum HashFn {
    Sha1,
    Sha224,
    Sha256,
    Sha384,
    Sha512,
    Sha3_224,
    Sha3_256,
    Sha3_384,
    Sha3_512,
}

impl From<HashFn> for HashingAlgorithm {
    fn from(value: HashFn) -> Self {
        match value {
            HashFn::Sha1 => Self::SHA1,
            HashFn::Sha224 => Self::SHA224,
            HashFn::Sha256 => Self::SHA256,
            HashFn::Sha384 => Self::SHA384,
            HashFn::Sha512 => Self::SHA512,
            HashFn::Sha3_224 => Self::SHA3224,
            HashFn::Sha3_256 => Self::SHA3256,
            HashFn::Sha3_384 => Self::SHA3384,
            HashFn::Sha3_512 => Self::SHA3512,
        }
    }
}