reallyme-crypto-dispatch 0.3.16

Algorithm dispatch, codec binding, and structural validation for cryptographic primitives.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

// SPDX-FileCopyrightText: 2026 ReallyMe LLC
//
// SPDX-License-Identifier: MIT OR Apache-2.0

use crate::AlgorithmError;
use crypto_core::Algorithm;

/// A compressed SEC1 prefix and length do not establish curve membership.
/// Parse the point before a multikey identifier can be issued or trusted.
pub(crate) fn validate_compressed_public_key(
    algorithm: Algorithm,
    public_key: &[u8],
) -> Result<(), AlgorithmError> {
    match algorithm {
        Algorithm::P256 => {
            #[cfg(all(feature = "p256", any(feature = "native", feature = "wasm")))]
            {
                crypto_p256::decompress_public_key(public_key)
                    .map(|_| ())
                    .map_err(|_| AlgorithmError::InvalidKey(algorithm))
            }
            #[cfg(not(all(feature = "p256", any(feature = "native", feature = "wasm"))))]
            {
                let _ = public_key;
                Err(AlgorithmError::UnsupportedAlgorithm(algorithm))
            }
        }
        Algorithm::P384 => {
            #[cfg(all(feature = "p384", any(feature = "native", feature = "wasm")))]
            {
                crypto_p384::decompress_public_key(public_key)
                    .map(|_| ())
                    .map_err(|_| AlgorithmError::InvalidKey(algorithm))
            }
            #[cfg(not(all(feature = "p384", any(feature = "native", feature = "wasm"))))]
            {
                let _ = public_key;
                Err(AlgorithmError::UnsupportedAlgorithm(algorithm))
            }
        }
        Algorithm::P521 => {
            #[cfg(all(feature = "p521", any(feature = "native", feature = "wasm")))]
            {
                crypto_p521::decompress_public_key(public_key)
                    .map(|_| ())
                    .map_err(|_| AlgorithmError::InvalidKey(algorithm))
            }
            #[cfg(not(all(feature = "p521", any(feature = "native", feature = "wasm"))))]
            {
                let _ = public_key;
                Err(AlgorithmError::UnsupportedAlgorithm(algorithm))
            }
        }
        Algorithm::Secp256k1 => {
            #[cfg(all(feature = "secp256k1", any(feature = "native", feature = "wasm")))]
            {
                crypto_secp256k1::decompress_public_key(public_key)
                    .map(|_| ())
                    .map_err(|_| AlgorithmError::InvalidKey(algorithm))
            }
            #[cfg(not(all(feature = "secp256k1", any(feature = "native", feature = "wasm"))))]
            {
                let _ = public_key;
                Err(AlgorithmError::UnsupportedAlgorithm(algorithm))
            }
        }
        _ => Ok(()),
    }
}