reallyme-crypto-rsa 0.3.2

RSA signature verification primitive for ReallyMe Crypto.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
//
// SPDX-License-Identifier: Apache-2.0

/// Hash function bound into an RSA signature verification suite.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum RsaHash {
    /// SHA-1 for historical X.509/eMRTD document verification only.
    Sha1,
    /// SHA-256.
    Sha256,
    /// SHA-384.
    Sha384,
    /// SHA-512.
    Sha512,
}

impl RsaHash {
    /// Numeric suite identifier used by the C FFI.
    pub const fn ffi_id(self) -> u32 {
        match self {
            Self::Sha1 => 1,
            Self::Sha256 => 2,
            Self::Sha384 => 3,
            Self::Sha512 => 4,
        }
    }

    /// Parses a C FFI suite identifier.
    pub const fn from_ffi_id(value: u32) -> Option<Self> {
        match value {
            1 => Some(Self::Sha1),
            2 => Some(Self::Sha256),
            3 => Some(Self::Sha384),
            4 => Some(Self::Sha512),
            _ => None,
        }
    }
}

/// Public-key DER encoding supplied by a caller.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum RsaPublicKeyDerEncoding {
    /// PKCS#1 `RSAPublicKey` DER.
    Pkcs1,
    /// X.509 SubjectPublicKeyInfo DER.
    Spki,
}

impl RsaPublicKeyDerEncoding {
    /// Numeric encoding identifier used by the C FFI.
    pub const fn ffi_id(self) -> u32 {
        match self {
            Self::Pkcs1 => 1,
            Self::Spki => 2,
        }
    }

    /// Parses a C FFI encoding identifier.
    pub const fn from_ffi_id(value: u32) -> Option<Self> {
        match value {
            1 => Some(Self::Pkcs1),
            2 => Some(Self::Spki),
            _ => None,
        }
    }
}

/// Parameters for RSASSA-PSS verification.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub struct RsaPssParams {
    /// Hash applied to the message before PSS verification.
    pub message_hash: RsaHash,
    /// Hash used by MGF1 inside PSS.
    pub mgf1_hash: RsaHash,
    /// Expected salt length in bytes.
    pub salt_len: usize,
}