suit_validator 0.1.3

no_std-friendly Rust crate for decoding and verifying SUIT Manifest.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

#[cfg(feature = "default_crypto")]
use cose_minicbor::cose_keys::{CoseAlg, CoseKey, CoseKeySetBuilder, Curve, KeyType};

use suit_validator::SuitError;
use suit_validator::crypto::SuitCrypto;

pub struct MockCrypto;

impl SuitCrypto for MockCrypto {
    fn verify_cose(&self, _auth_bytes: &[u8], _digest_bytes: &[u8]) -> Result<(), SuitError> {
        Ok(())
    }
}

#[cfg(feature = "default_crypto")]
pub fn get_keys() -> impl AsRef<[u8]> {
    // Initialize key set
    let mut cose_key_builder: CoseKeySetBuilder<100> =
        CoseKeySetBuilder::try_new().expect("valid builder");
    let mut key = CoseKey::new(KeyType::Ec2);
    key.alg(CoseAlg::ES256);
    key.crv(Curve::P256).unwrap();
    key.x(&hex_literal::hex!(
        "8496811aae0baaabd26157189eecda26beaa8bf11b6f3fe6e2b5659c85dbc0ad"
    ))
    .expect("X unvalid");
    key.y(&hex_literal::hex!(
        "3b1f2a4b6c098131c0a36dacd1d78bd381dcdfb09c052db33991db7338b4a896"
    ))
    .expect("Y unvalid");
    cose_key_builder.push_key(key).expect("Key Set is full");
    cose_key_builder.into_bytes().expect("Bytes should be okay")
}