rnp-rs 0.1.7

//! Idiomatic Rust binding to the RNP OpenPGP C library (`librnp`).
//!
//! RNP is the OpenPGP implementation that powers Mozilla Thunderbird. This
//! crate provides a thin, idiomatic Rust wrapper over the public C FFI
//! declared in `<rnp/rnp.h>`.
//!
//! ## Quick start
//!
//! Generate a keypair, sign a message, verify the signature:
//!
//! ```no_run
//! use rnp::{Algorithm, Context, Hash, KeyBuilder, KeyUsage};
//!
//! let ctx = Context::new()?;
//! let key = KeyBuilder::new(Algorithm::Rsa)
//!     .bits(2048)
//!     .userid("alice <alice@example.com>")
//!     .hash(Hash::Sha256)
//!     .add_usage(KeyUsage::Sign)
//!     .add_usage(KeyUsage::Certify)
//!     .build(&ctx)?;
//!
//! let message = b"hello, world";
//! let signed = rnp::sign(&ctx, message, &key)?;
//! let result = rnp::verify(&ctx, &signed)?;
//! assert!(result.any_valid()?);
//! # Ok::<(), rnp::Error>(())
//! ```
//!
//! Encrypt and decrypt with a recipient key:
//!
//! ```no_run
//! use rnp::{Algorithm, Context, Decryptor, Encryptor, KeyBuilder, KeyUsage, Output};
//!
//! let ctx = Context::new()?;
//! let key = KeyBuilder::new(Algorithm::Rsa)
//!     .bits(2048)
//!     .userid("enc <enc@example.com>")
//!     .add_usage(KeyUsage::EncryptComms)
//!     .build(&ctx)?;
//!
//! let mut ct = Output::to_memory()?;
//! Encryptor::new(&ctx, b"secret")?
//!     .add_recipient(&key)
//!     .build(&mut ct)?;
//! let ciphertext = ct.into_bytes()?;
//!
//! let result = Decryptor::new(&ctx, &ciphertext).build()?;
//! assert_eq!(result.plaintext(), b"secret");
//! # Ok::<(), rnp::Error>(())
//! ```
//!
//! Multi-signer detached signature via the [`Signer`] builder:
//!
//! ```no_run
//! use rnp::{Algorithm, Context, Hash, KeyBuilder, KeyUsage, Mode, Signer};
//!
//! let ctx = Context::new()?;
//! let k1 = KeyBuilder::new(Algorithm::Rsa).bits(2048).userid("a")
//!     .add_usage(KeyUsage::Sign).build(&ctx)?;
//! let k2 = KeyBuilder::new(Algorithm::Rsa).bits(2048).userid("b")
//!     .add_usage(KeyUsage::Sign).build(&ctx)?;
//!
//! let sig = Signer::new(&ctx, b"doc", Mode::Detached)
//!     .add_signer(&k1)
//!     .add_signer_with_hash(&k2, Hash::Sha384)
//!     .armor(true)
//!     .build_to_memory()?;
//! # Ok::<(), rnp::Error>(())
//! ```
//!
//! ## Cargo features
//!
//! | Feature | Description |
//! |---------|-------------|
//! | `vendored` | Build librnp from `vendor/rnp/` via CMake and statically link the result. |
//! | `pqc` | Expose PQC algorithm constants and `Encryptor::prefer_pqc_enc_subkey`. Requires librnp built with `ENABLE_PQC=ON`. |
//! | `crypto-refresh` | Expose v6 keys, crypto-refresh algorithms, and v6 PKESK/SKESK. Requires librnp built with `ENABLE_CRYPTO_REFRESH=ON`. |
//! | `logging` | Gate `Context::set_log_fd` / `set_log_file`. |
//!
//! ## Status
//!
//! This crate wraps ~250 of librnp's ~309 public functions across all
//! major OpenPGP concerns. See the per-phase TODO files in
//! [`TODO.roadmap`](https://github.com/rnpgp/rnp-rs/tree/main/TODO.roadmap)
//! for the full status matrix.
//!
//! ## Linking
//!
//! By default the crate links against a system-installed `librnp`
//! (`-lrnp`). Install via `brew install rnp` (macOS),
//! `dnf install librnp-devel` (Fedora), or build from source. To point
//! at a non-standard install location set `RNP_INCLUDE_DIR` and
//! `RNP_LIB_DIR`. Use `--features vendored` to build librnp from source.

pub mod algorithm;
pub mod armor;
pub mod callbacks;
pub mod context;
pub mod dump;
pub mod encrypt;
pub mod error;
pub mod ffi;
pub mod ffi_safe;
pub mod key;
pub mod keygen;
pub mod keyring;
pub mod key_signature_builder;
pub mod ops;
pub mod secret;
pub mod security;
pub mod signature;
pub mod signature_handle;
pub mod strconv;
pub mod subkey;
pub mod uid;
pub mod verify;
pub mod version;

pub use algorithm::{Algorithm, Cipher, Compression, Curve, Hash, KeyUsage};
#[cfg(feature = "pqc")]
pub use algorithm::{librnp_supports_pqc, PqcAlgorithm};
pub use armor::{armor_bytes, dearmor, dearmor_bytes, enarmor, guess_contents, ContentType};
pub use callbacks::{KeyProvider, KeyRequestOutcome, PasswordProvider, RequestedKeyType};
pub use context::{Context, KeyringFormat};
pub use dump::{
    dump_packets_bytes_to_json, dump_packets_to_json, dump_packets_to_output, DumpFlags,
    JsonDumpFlags, JsonFlags,
};
pub use encrypt::{
    decrypt, decrypt_to, AddPasswordOptions, AeadType, DecryptResult, Decryptor, EncryptFlags,
    Encryptor,
};
pub use error::{from_rnp_code, unknown_variant, Error, ErrorKind, Result};
pub use key::{
    ExportFlags, Key, KeyIdentifier, LoadSaveFlags, RemoveFlags, RemoveSignaturesFlags,
    UnloadFlags,
};
pub use key::{AddUidOptions, ProtectOptions, RevocationCode, RevocationReason};
pub use keygen::{generate_key_json, KeyBuilder, SubkeyBuilder};
#[cfg(feature = "pqc")]
pub use algorithm::{librnp_supports_pqc, PqcAlgorithm};
pub use keyring::{IdentifierIterator, IdentifierKind};
pub use key_signature_builder::{
    CertificationBuilder, ConfiguredBuilder, DirectSignatureBuilder, RevocationSignatureBuilder,
    SignatureSetterOps,
};
pub use ops::{
    call_for_optional_string, call_for_string, cstr_to_optional_string, cstr_to_string,
    ArmorType, Input, Output, OutputFileFlags,
};
pub use secret::{zero_string_bytes, SecretString};
pub use security::{
    calculate_iterations, request_password, supports_feature, supported_features, FeatureType,
    SecurityFlags, SecurityLevel, SecurityRule,
};
pub use signature::{
    generate_revocation_certificate, generate_revocation_certificate_with, sign, sign_cleartext,
    sign_detached, verify, verify_detached, Mode, Signer,
};
pub use signature_handle::{Signature, SignatureType, Subpacket, SubpacketType};
pub use subkey::Subkey;
pub use uid::{Uid, UidType};
pub use verify::{
    FileInfo, Recipient, SignatureStatus, Symenc, VerifyFlags, VerifyOp, VerifyResult,
    VerifySignature,
};

/// librnp version string, e.g. `"0.18.1"`.
pub fn version_string() -> String {
    crate::version::version_string()
}