dig-capsule 0.5.0

The DIG Network .dig capsule data plane — one crate over the DIGS format, capsule read-crypto, compiler, staging, and the guest/host serve triad.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117

use crate::imp::core::codec::{Decode, Encode};
use crate::imp::core::tombstone::{RevocationReason, Tombstone, TombstoneScope};
use crate::imp::core::Bytes32;

fn assert_roundtrip<T: Encode + Decode + PartialEq + core::fmt::Debug>(value: T) {
    let bytes = value.to_bytes();
    let decoded = T::from_bytes(&bytes).expect("decode");
    assert_eq!(decoded, value);
}

#[test]
fn root_scoped_tombstone_round_trips() {
    assert_roundtrip(Tombstone::root(
        Bytes32([1; 32]),
        Bytes32([2; 32]),
        1_700_000_000,
        RevocationReason::Compromise,
    ));
}

#[test]
fn store_scoped_tombstone_round_trips() {
    assert_roundtrip(Tombstone::store(
        Bytes32([9; 32]),
        42,
        RevocationReason::Takedown,
    ));
}

#[test]
fn canonical_layout_is_stable_for_root_scope() {
    let t = Tombstone {
        store_id: Bytes32([0xAA; 32]),
        scope: TombstoneScope::Root(Bytes32([0xBB; 32])),
        not_after: 0x0102_0304_0506_0708,
        reason: RevocationReason::Superseded.as_u8(),
    };
    let b = t.canonical();
    // store_id(32) || scope_tag(1=0 for Root) || root(32) || not_after_be(8) || reason(1)
    assert_eq!(b.len(), 32 + 1 + 32 + 8 + 1);
    assert_eq!(&b[0..32], &[0xAA; 32]);
    assert_eq!(b[32], 0, "Root scope tag is 0");
    assert_eq!(&b[33..65], &[0xBB; 32]);
    assert_eq!(
        &b[65..73],
        &[0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08],
        "not_after is big-endian"
    );
    assert_eq!(b[73], 2, "Superseded reason byte");
}

#[test]
fn canonical_layout_is_stable_for_store_scope() {
    let t = Tombstone::store(Bytes32([0xCC; 32]), 7, RevocationReason::Unspecified);
    let b = t.canonical();
    // store_id(32) || scope_tag(1=1 for Store) || not_after_be(8) || reason(1)
    // (NO root field for the Store scope).
    assert_eq!(b.len(), 32 + 1 + 8 + 1);
    assert_eq!(b[32], 1, "Store scope tag is 1");
}

#[test]
fn reason_byte_round_trips_known_values() {
    for (r, byte) in [
        (RevocationReason::Unspecified, 0u8),
        (RevocationReason::Compromise, 1),
        (RevocationReason::Superseded, 2),
        (RevocationReason::Takedown, 3),
    ] {
        assert_eq!(r.as_u8(), byte);
        assert_eq!(RevocationReason::from_u8(byte), r);
    }
    // Unknown bytes degrade to Unspecified for the human label.
    assert_eq!(
        RevocationReason::from_u8(200),
        RevocationReason::Unspecified
    );
}

#[test]
fn changing_any_field_changes_canonical_bytes() {
    let base = Tombstone::root(
        Bytes32([1; 32]),
        Bytes32([2; 32]),
        100,
        RevocationReason::Compromise,
    );
    let diff_store = Tombstone::root(
        Bytes32([3; 32]),
        Bytes32([2; 32]),
        100,
        RevocationReason::Compromise,
    );
    let diff_root = Tombstone::root(
        Bytes32([1; 32]),
        Bytes32([4; 32]),
        100,
        RevocationReason::Compromise,
    );
    let diff_time = Tombstone::root(
        Bytes32([1; 32]),
        Bytes32([2; 32]),
        101,
        RevocationReason::Compromise,
    );
    let diff_reason = Tombstone::root(
        Bytes32([1; 32]),
        Bytes32([2; 32]),
        100,
        RevocationReason::Takedown,
    );
    let c = base.canonical();
    assert_ne!(c, diff_store.canonical());
    assert_ne!(c, diff_root.canonical());
    assert_ne!(c, diff_time.canonical());
    assert_ne!(c, diff_reason.canonical());
}