dns-update-lite 0.5.9

Dynamic DNS update (RFC 2136 and cloud) library for Rust. Lightweight fork of dns-update
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107

#![allow(clippy::needless_return)]
// Above is to suppress clippy warnings that would lead to fixed code that has
// rust-analyzer error false-positives

#[inline(always)]
pub fn sha1_digest(data: &[u8]) -> Vec<u8> {
    #[cfg(feature = "aws-lc-rs")]
    return aws_lc_rs::digest::digest(&aws_lc_rs::digest::SHA1_FOR_LEGACY_USE_ONLY, data)
        .as_ref()
        .to_vec();

    #[cfg(all(feature = "ring", not(feature = "aws-lc-rs")))]
    return ring::digest::digest(&ring::digest::SHA1_FOR_LEGACY_USE_ONLY, data)
        .as_ref()
        .to_vec();

    #[cfg(not(any(feature = "aws-lc-rs", feature = "ring")))]
    compile_error!(
        "dns-update-lite requires the `aws-lc-rs` or `ring` feature to be enabled for crypto support"
    );
}

#[inline(always)]
pub fn sha256_digest(data: &[u8]) -> Vec<u8> {
    #[cfg(feature = "aws-lc-rs")]
    return aws_lc_rs::digest::digest(&aws_lc_rs::digest::SHA256, data)
        .as_ref()
        .to_vec();

    #[cfg(all(feature = "ring", not(feature = "aws-lc-rs")))]
    return ring::digest::digest(&ring::digest::SHA256, data)
        .as_ref()
        .to_vec();

    #[cfg(not(any(feature = "aws-lc-rs", feature = "ring")))]
    compile_error!(
        "dns-update-lite requires the `aws-lc-rs` or `ring` feature to be enabled for crypto support"
    );
}

pub fn hmac_sha1(key: &[u8], data: &[u8]) -> Vec<u8> {
    #[cfg(feature = "aws-lc-rs")]
    {
        let key = aws_lc_rs::hmac::Key::new(aws_lc_rs::hmac::HMAC_SHA1_FOR_LEGACY_USE_ONLY, key);
        let tag = aws_lc_rs::hmac::sign(&key, data);
        return tag.as_ref().to_vec();
    }

    #[cfg(all(feature = "ring", not(feature = "aws-lc-rs")))]
    {
        let key = ring::hmac::Key::new(ring::hmac::HMAC_SHA1_FOR_LEGACY_USE_ONLY, key);
        let tag = ring::hmac::sign(&key, data);
        return tag.as_ref().to_vec();
    }

    #[cfg(not(any(feature = "aws-lc-rs", feature = "ring")))]
    compile_error!(
        "dns-update-lite requires the `aws-lc-rs` or `ring` feature to be enabled for crypto support"
    );
}

pub fn hmac_sha256(key: &[u8], data: &[u8]) -> Vec<u8> {
    #[cfg(feature = "aws-lc-rs")]
    {
        let key = aws_lc_rs::hmac::Key::new(aws_lc_rs::hmac::HMAC_SHA256, key);
        let tag = aws_lc_rs::hmac::sign(&key, data);
        return tag.as_ref().to_vec();
    }

    #[cfg(all(feature = "ring", not(feature = "aws-lc-rs")))]
    {
        let key = ring::hmac::Key::new(ring::hmac::HMAC_SHA256, key);
        let tag = ring::hmac::sign(&key, data);
        return tag.as_ref().to_vec();
    }

    #[cfg(not(any(feature = "aws-lc-rs", feature = "ring")))]
    compile_error!(
        "dns-update-lite requires the `aws-lc-rs` or `ring` feature to be enabled for crypto support"
    );
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_sha1_digest() {
        let data = b"hello world";
        let digest = sha1_digest(data);
        let hex_digest = digest
            .iter()
            .map(|b| format!("{:02x}", b))
            .collect::<String>();

        assert_eq!(hex_digest, "2aae6c35c94fcfb415dbe95f408b9ce91ee846ed");
    }

    #[test]
    fn test_hmac_sha1() {
        let key = b"key";
        let data = b"The quick brown fox jumps over the lazy dog";
        let mac = hmac_sha1(key, data);
        let hex_mac = mac.iter().map(|b| format!("{:02x}", b)).collect::<String>();
        assert_eq!(hex_mac, "de7c9b85b8b78aa6bc8a7a36f70a90701c9db4d9");
    }
}