wtx 0.44.1

A collection of different transport implementations and related tools focused primarily on web technologies.
Documentation
use crate::{
  crypto::{
    CryptoError, Ed25519SignKeyAwsLcRs, P256SignKeyAwsLcRs, P384SignKeyAwsLcRs,
    RsaPssSignKeySha256AwsLcRs, RsaPssSignKeySha384AwsLcRs, sign_key::SignKey,
  },
  rng::CryptoRng,
};
use aws_lc_rs::{
  rand::SystemRandom,
  rsa::KeySize,
  signature::{
    ECDSA_P256_SHA256_ASN1_SIGNING, ECDSA_P384_SHA384_ASN1_SIGNING, EcdsaKeyPair, Ed25519KeyPair,
    RsaKeyPair,
  },
};

impl SignKey for Ed25519SignKeyAwsLcRs {
  #[inline]
  fn from_pkcs8(bytes: &[u8]) -> crate::Result<Self> {
    Ok(Self(
      Ed25519KeyPair::from_pkcs8_maybe_unchecked(bytes)
        .map_err(|_err| CryptoError::SignKeyError)?,
    ))
  }

  #[inline]
  fn generate<RNG>(rng: &mut RNG) -> crate::Result<Self>
  where
    RNG: CryptoRng,
  {
    let mut seed = [0u8; 32];
    rng.fill_slice(&mut seed);
    Self::from_pkcs8(&seed)
  }
}

impl SignKey for P256SignKeyAwsLcRs {
  #[inline]
  fn from_pkcs8(bytes: &[u8]) -> crate::Result<Self> {
    Ok(Self(
      EcdsaKeyPair::from_pkcs8(&ECDSA_P256_SHA256_ASN1_SIGNING, bytes)
        .map_err(|_| CryptoError::SignKeyError)?,
    ))
  }

  #[inline]
  fn generate<RNG>(_: &mut RNG) -> crate::Result<Self>
  where
    RNG: CryptoRng,
  {
    let pkcs8 = EcdsaKeyPair::generate_pkcs8(&ECDSA_P256_SHA256_ASN1_SIGNING, &SystemRandom::new())
      .map_err(|_| CryptoError::SignKeyError)?;
    Self::from_pkcs8(pkcs8.as_ref())
  }
}

impl SignKey for P384SignKeyAwsLcRs {
  #[inline]
  fn from_pkcs8(bytes: &[u8]) -> crate::Result<Self> {
    Ok(Self(
      EcdsaKeyPair::from_pkcs8(&ECDSA_P384_SHA384_ASN1_SIGNING, bytes)
        .map_err(|_| CryptoError::SignKeyError)?,
    ))
  }

  #[inline]
  fn generate<RNG>(_: &mut RNG) -> crate::Result<Self>
  where
    RNG: CryptoRng,
  {
    let pkcs8 = EcdsaKeyPair::generate_pkcs8(&ECDSA_P384_SHA384_ASN1_SIGNING, &SystemRandom::new())
      .map_err(|_| CryptoError::SignKeyError)?;
    Self::from_pkcs8(pkcs8.as_ref())
  }
}

impl SignKey for RsaPssSignKeySha256AwsLcRs {
  #[inline]
  fn from_pkcs8(bytes: &[u8]) -> crate::Result<Self> {
    Ok(Self(RsaKeyPair::from_pkcs8(bytes).map_err(|_| CryptoError::SignKeyError)?))
  }

  #[inline]
  fn generate<RNG>(_: &mut RNG) -> crate::Result<Self>
  where
    RNG: CryptoRng,
  {
    Ok(Self(RsaKeyPair::generate(KeySize::Rsa2048).map_err(|_| CryptoError::SignKeyError)?))
  }
}

impl SignKey for RsaPssSignKeySha384AwsLcRs {
  #[inline]
  fn from_pkcs8(bytes: &[u8]) -> crate::Result<Self> {
    Ok(Self(RsaKeyPair::from_pkcs8(bytes).map_err(|_| CryptoError::SignKeyError)?))
  }

  #[inline]
  fn generate<RNG>(_: &mut RNG) -> crate::Result<Self>
  where
    RNG: CryptoRng,
  {
    Ok(Self(RsaKeyPair::generate(KeySize::Rsa4096).map_err(|_| CryptoError::SignKeyError)?))
  }
}