rustls-openssl 0.3.0

Rustls crypto provider for OpenSSL
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

//! OpenSSL PRF bindings
//! https://github.com/sfackler/rust-openssl/pull/2329
use core::ffi::c_void;
use foreign_types::ForeignTypeRef;
use openssl::{error::ErrorStack, md::MdRef, pkey_ctx::PkeyCtxRef};
use openssl_sys::{EVP_MD, EVP_PKEY_ALG_CTRL, EVP_PKEY_CTX, EVP_PKEY_OP_DERIVE, c_int};

use super::cvt;

unsafe extern "C" {
    fn EVP_PKEY_CTX_ctrl(
        ctx: *mut EVP_PKEY_CTX,
        keytype: c_int,
        optype: c_int,
        cmd: c_int,
        p1: c_int,
        p2: *mut c_void,
    ) -> c_int;
}

const EVP_PKEY_CTRL_TLS_MD: c_int = EVP_PKEY_ALG_CTRL;
const EVP_PKEY_CTRL_TLS_SECRET: c_int = EVP_PKEY_ALG_CTRL + 1;
const EVP_PKEY_CTRL_TLS_SEED: c_int = EVP_PKEY_ALG_CTRL + 2;

#[allow(non_snake_case)]
unsafe fn EVP_PKEY_CTX_set_tls1_prf_md(ctx: *mut EVP_PKEY_CTX, md: *const EVP_MD) -> c_int {
    unsafe {
        EVP_PKEY_CTX_ctrl(
            ctx,
            -1,
            EVP_PKEY_OP_DERIVE,
            EVP_PKEY_CTRL_TLS_MD,
            0,
            md as *mut c_void,
        )
    }
}

#[allow(non_snake_case)]
unsafe fn EVP_PKEY_CTX_set1_tls1_prf_secret(
    ctx: *mut EVP_PKEY_CTX,
    sec: *const u8,
    seclen: c_int,
) -> c_int {
    unsafe {
        EVP_PKEY_CTX_ctrl(
            ctx,
            -1,
            EVP_PKEY_OP_DERIVE,
            EVP_PKEY_CTRL_TLS_SECRET,
            seclen,
            sec as *mut c_void,
        )
    }
}

#[allow(non_snake_case)]
unsafe fn EVP_PKEY_CTX_add1_tls1_prf_seed(
    ctx: *mut EVP_PKEY_CTX,
    seed: *const u8,
    seedlen: c_int,
) -> c_int {
    unsafe {
        EVP_PKEY_CTX_ctrl(
            ctx,
            -1,
            EVP_PKEY_OP_DERIVE,
            EVP_PKEY_CTRL_TLS_SEED,
            seedlen,
            seed as *mut c_void,
        )
    }
}

pub(crate) fn set_tls1_prf_secret<T>(
    ctx: &mut PkeyCtxRef<T>,
    secret: &[u8],
) -> Result<(), openssl::error::ErrorStack> {
    let len = c_int::try_from(secret.len()).unwrap();

    unsafe {
        cvt(EVP_PKEY_CTX_set1_tls1_prf_secret(
            ctx.as_ptr(),
            secret.as_ptr(),
            len,
        ))?;
    }

    Ok(())
}

pub(crate) fn add_tls1_prf_seed<T>(
    ctx: &mut PkeyCtxRef<T>,
    seed: &[u8],
) -> Result<(), openssl::error::ErrorStack> {
    let len = c_int::try_from(seed.len()).unwrap();

    unsafe {
        cvt(EVP_PKEY_CTX_add1_tls1_prf_seed(
            ctx.as_ptr(),
            seed.as_ptr(),
            len,
        ))?;
    }

    Ok(())
}

pub(crate) fn set_tls1_prf_md<T>(
    ctx: &mut PkeyCtxRef<T>,
    digest: &MdRef,
) -> Result<(), ErrorStack> {
    unsafe {
        cvt(EVP_PKEY_CTX_set_tls1_prf_md(ctx.as_ptr(), digest.as_ptr()))?;
    }

    Ok(())
}