riptering 0.7.0

Maintained fork of kryptering: cryptographic operations with RustCrypto or AWS-LC software providers and PKCS#11 HSM backends
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

#![cfg(all(feature = "fips", feature = "tls-aws-lc"))]

use riptering::{initialize_backend, supports, FipsStatus, Operation};

#[test]
fn selected_document_and_tls_providers_attest_fips() {
    let info = initialize_backend().expect("selected FIPS providers must initialize");
    assert_eq!(info.fips, FipsStatus::Active);
    assert!(
        supports(Operation::Digest(riptering::HashAlgorithm::Sha256))
            .expect("approved operation after initialization")
    );
    assert!(!supports(Operation::Digest(riptering::HashAlgorithm::Sha1))
        .expect("unapproved operation query after initialization"));

    let tls = riptering::build_tls_client_config(rustls::RootCertStore::empty())
        .expect("selected FIPS TLS configuration");
    assert_eq!(tls.fips_status(), FipsStatus::Active);
}