tss-esapi 8.0.0-alpha.3

Rust-native wrapper around TSS 2.0 Enhanced System API
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89

// Copyright 2024 Contributors to the Parsec project.
// SPDX-License-Identifier: Apache-2.0

use crate::{
    Error, Result, WrapperErrorKind,
    structures::{EccSignature, Signature},
};

use std::convert::TryFrom;

use ecdsa::SignatureSize;
use elliptic_curve::{
    FieldBytes, FieldBytesSize, PrimeCurve,
    generic_array::{ArrayLength, typenum::Unsigned},
};

impl<C> TryFrom<&EccSignature> for ecdsa::Signature<C>
where
    C: PrimeCurve,
    SignatureSize<C>: ArrayLength<u8>,
{
    type Error = Error;

    fn try_from(signature: &EccSignature) -> Result<Self> {
        let r = signature.signature_r().as_slice();
        let s = signature.signature_s().as_slice();

        if r.len() != FieldBytesSize::<C>::USIZE {
            return Err(Error::local_error(WrapperErrorKind::InvalidParam));
        }
        if s.len() != FieldBytesSize::<C>::USIZE {
            return Err(Error::local_error(WrapperErrorKind::InvalidParam));
        }

        let signature = ecdsa::Signature::from_scalars(
            FieldBytes::<C>::clone_from_slice(r),
            FieldBytes::<C>::clone_from_slice(s),
        )
        .map_err(|_| Error::local_error(WrapperErrorKind::InvalidParam))?;
        Ok(signature)
    }
}

impl<C> TryFrom<&Signature> for ecdsa::Signature<C>
where
    C: PrimeCurve,
    SignatureSize<C>: ArrayLength<u8>,
{
    type Error = Error;

    fn try_from(signature: &Signature) -> Result<Self> {
        let Signature::EcDsa(signature) = signature else {
            return Err(Error::local_error(WrapperErrorKind::InvalidParam));
        };
        Self::try_from(signature)
    }
}

// Note: this does not implement `TryFrom<RsaSignature>` because `RsaSignature` does not carry the
// information whether the signatures was generated using PKCS#1v1.5 or PSS.
#[cfg(feature = "rsa")]
impl TryFrom<&Signature> for rsa::pkcs1v15::Signature {
    type Error = Error;

    fn try_from(signature: &Signature) -> Result<Self> {
        let Signature::RsaSsa(signature) = signature else {
            return Err(Error::local_error(WrapperErrorKind::InvalidParam));
        };

        Self::try_from(signature.signature().as_bytes())
            .map_err(|_| Error::local_error(WrapperErrorKind::InvalidParam))
    }
}

// Note: this does not implement `TryFrom<RsaSignature>` because `RsaSignature` does not carry the
// information whether the signatures was generated using PKCS#1v1.5 or PSS.
#[cfg(feature = "rsa")]
impl TryFrom<&Signature> for rsa::pss::Signature {
    type Error = Error;

    fn try_from(signature: &Signature) -> Result<Self> {
        let Signature::RsaPss(signature) = signature else {
            return Err(Error::local_error(WrapperErrorKind::InvalidParam));
        };

        Self::try_from(signature.signature().as_bytes())
            .map_err(|_| Error::local_error(WrapperErrorKind::InvalidParam))
    }
}