s2n-quic-dc 0.88.0

Internal crate used by s2n-quic
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
// SPDX-License-Identifier: Apache-2.0

use crate::{credentials::Id, packet::secret_control::TAG_LEN};
use aws_lc_rs::hmac;

#[derive(Debug)]
pub struct Signer {
    key: hmac::Key,
}

impl Signer {
    /// Creates a signer with the given secret
    pub fn new(secret: &[u8]) -> Self {
        let key = hmac::Key::new(hmac::HMAC_SHA384, secret);
        Self { key }
    }

    /// Returns a random `Signer`
    ///
    /// Note that this signer cannot be used across restarts and will result in an endpoint
    /// producing invalid `UnknownPathSecret` packets.
    pub fn random() -> Self {
        let mut secret = [0u8; 32];
        #[expect(clippy::unwrap_used, reason = "no recovery from broken entropy pool")]
        aws_lc_rs::rand::fill(&mut secret).unwrap();
        Self::new(&secret)
    }

    pub fn sign(&self, id: &Id) -> [u8; TAG_LEN] {
        let mut stateless_reset = [0; TAG_LEN];

        let tag = hmac::sign(&self.key, &**id);
        stateless_reset.copy_from_slice(&tag.as_ref()[..TAG_LEN]);

        stateless_reset
    }
}