pqaudit 0.2.0

TLS post-quantum readiness auditor
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

use crate::audit::scoring::model::ScoringModel;
use crate::audit::scoring::{
    binary_gates::FipsBinaryGatesModel, cnsa2_strict::Cnsa2StrictModel, weighted::NistWeightedModel,
};
use crate::audit::tables::{
    cnsa2::Cnsa2Table, fips::FipsTable, nist_ir8547::NistIr8547Table, DeadlineTable,
};
use crate::cli::ComplianceMode;

/// Returns the (DeadlineTable, ScoringModel) pair for the given compliance mode.
/// This is the single place that knows which table and model belong together.
pub fn compliance_pair(mode: ComplianceMode) -> (Box<dyn DeadlineTable>, Box<dyn ScoringModel>) {
    match mode {
        ComplianceMode::Nist => (Box::new(NistIr8547Table), Box::new(NistWeightedModel)),
        ComplianceMode::Cnsa2 => (Box::new(Cnsa2Table), Box::new(Cnsa2StrictModel)),
        ComplianceMode::Fips => (Box::new(FipsTable), Box::new(FipsBinaryGatesModel)),
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn nist_mode_returns_nist_table() {
        let (table, model) = compliance_pair(ComplianceMode::Nist);
        assert_eq!(table.name(), "NIST IR 8547 (IPD)");
        assert_eq!(model.name(), "nist-weighted");
    }

    #[test]
    fn cnsa2_mode_returns_cnsa2_model() {
        let (table, model) = compliance_pair(ComplianceMode::Cnsa2);
        assert_eq!(table.name(), "NSA CNSA 2.0");
        assert_eq!(model.name(), "cnsa2-strict");
    }

    #[test]
    fn fips_mode_returns_binary_gates_model() {
        let (table, model) = compliance_pair(ComplianceMode::Fips);
        assert_eq!(table.name(), "FIPS 140-3");
        assert_eq!(model.name(), "fips-binary-gates");
    }
}