nzcp 1.0.2

An implementation of NZ COVID verification, New Zealand's proof of COVID-19 vaccination solution
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63

use thiserror::Error;


pub mod verify;

#[derive(Debug, PartialEq, Eq)]
pub struct CoseSignature<'a> {
    pub bytes: &'a [u8],
    pub sign_structure: CoseSignStructure,
    pub protected_headers_raw: &'a [u8],
    pub cwt_claims_raw: &'a [u8],
}

const SIGN1_TAG: u64 = 18;

#[derive(Debug, PartialEq, Eq)]
pub enum CoseSignStructure {
    Sign1,
}

#[derive(Debug, Error)]
pub enum CoseSignStructureError {
    #[error("missing CBOR tag (infering the sign structure)")]
    MissingTag,
    #[error("invalid CBOR sign structure (only COSE_Sign1 is permitted)")]
    InvalidSignStructure,
}

impl TryFrom<Option<u64>> for CoseSignStructure {
    type Error = CoseSignStructureError;

    fn try_from(value: Option<u64>) -> Result<Self, Self::Error> {
        match value {
            Some(SIGN1_TAG) => Ok(CoseSignStructure::Sign1),
            Some(..) => Err(CoseSignStructureError::InvalidSignStructure),
            None => Err(CoseSignStructureError::MissingTag),
        }
    }
}

const ES256_ID: i8 = -7;

#[derive(Debug, PartialEq, Eq)]
pub enum SignatureAlgorithm {
    Es256,
}

#[derive(Debug, Error)]
pub enum SignatureAlgorithmError {
    #[error("invalid CBOR signature algorithm (must be ES256)")]
    SignatureAlgorithm,
}

impl TryFrom<i8> for SignatureAlgorithm {
    type Error = SignatureAlgorithmError;

    fn try_from(value: i8) -> Result<Self, Self::Error> {
        match value {
            ES256_ID => Ok(SignatureAlgorithm::Es256),
            _ => Err(SignatureAlgorithmError::SignatureAlgorithm),
        }
    }
}