structured-xades 0.21.0

XAdES mechanisms over caller-owned XML and explicit resource accounting
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

use super::*;
use crate::timestamp::Role;

#[test]
fn another_timestamp_token_cannot_supply_self_carried_validation_data() {
    // Siblings and two tokens inside the SAME property are distinct. No
    // URI hint, global timestamp-purpose bit or encoding hash reassigns it.
    for (property, token, expected, cost) in [(4, 8, true, 2), (4, 9, false, 2), (5, 8, false, 1)] {
        let mut calls = 0;
        let placement = Placement::TimestampToken {
            property,
            token,
            role: Role::Signature,
        };
        assert_eq!(
            allowed(placement, 4, 8, &mut |left, right| {
                calls += 1;
                Ok::<_, ()>(left == right)
            }),
            Ok(expected)
        );
        assert_eq!(calls, cost);
    }
    for placement in [Placement::General(1), Placement::Timestamp(2)] {
        assert_eq!(
            allowed(placement, 4, 8, &mut |_, _| -> Result<bool, ()> {
                panic!("no fabricated token association")
            }),
            Ok(true)
        );
    }
    for placement in [
        Placement::KeyInfo(1),
        Placement::Signature(2),
        Placement::Attribute(3),
    ] {
        assert_eq!(
            allowed(placement, 4, 8, &mut |_, _| -> Result<bool, ()> {
                panic!("placement is already excluded")
            }),
            Ok(false)
        );
    }
}

#[test]
fn token_identity_refusal_does_not_become_missing_or_allowed_material() {
    // Both original IDs are paid before comparison; preserve the first
    // failure instead of treating a budget error as a nonmatching copy.
    let placement = Placement::TimestampToken {
        property: 4,
        token: 8,
        role: Role::Signature,
    };
    assert_eq!(
        allowed(placement, 4, 8, &mut |_, _| Err::<bool, _>(
            MemoryError::WorkExceeded
        )),
        Err(MemoryError::WorkExceeded)
    );
}