wtx 0.51.0

A collection of different transport implementations and related tools focused primarily on web technologies.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

use crate::{
  codec::{Decode, Encode},
  tls::{
    TlsError, de::De, tls_decode_wrapper::TlsDecodeWrapper, tls_encode_wrapper::TlsEncodeWrapper,
  },
  x509::{PublicKeyTy, SignatureTy},
};

/// Signature Scheme
#[derive(Clone, Copy, Debug, Default, Eq, Hash, Ord, PartialEq, PartialOrd)]
pub enum SignatureScheme {
  /// `EcdsaSecp256r1Sha256`
  EcdsaSecp256r1Sha256 = 0x0403,
  /// `EcdsaSecp384r1Sha384`
  EcdsaSecp384r1Sha384 = 0x0503,
  /// `RsaPssRsaeSha256`
  RsaPssRsaeSha256 = 0x0804,
  /// `RsaPssRsaeSha384`
  RsaPssRsaeSha384 = 0x0805,
  /// `Ed25519`
  #[default]
  Ed25519 = 0x0807,
  /// `RsaPssPssSha256`
  RsaPssPssSha256 = 0x0809,
  /// `RsaPssPssSha384`
  RsaPssPssSha384 = 0x080a,
}

impl SignatureScheme {
  pub(crate) const PRIORITY: [Self; SignatureScheme::len()] = [
    Self::Ed25519,
    Self::EcdsaSecp256r1Sha256,
    Self::EcdsaSecp384r1Sha384,
    Self::RsaPssPssSha256,
    Self::RsaPssPssSha384,
    Self::RsaPssRsaeSha256,
    Self::RsaPssRsaeSha384,
  ];

  /// Used to verify existing certificates. For example, if a client wants to negotiate only with
  /// [`Self::RsaPssRsaeSha256`] but a server only serves [`SignatureTy::RsaPssSha256`], that would
  /// be a mismatch.
  #[inline]
  pub(crate) fn cert_pkt(self) -> PublicKeyTy {
    match self {
      Self::Ed25519 => PublicKeyTy::Ed25519,
      Self::EcdsaSecp256r1Sha256 => PublicKeyTy::EcdsaP256,
      Self::EcdsaSecp384r1Sha384 => PublicKeyTy::EcdsaP384,
      Self::RsaPssRsaeSha256 | Self::RsaPssRsaeSha384 => PublicKeyTy::RsaPkcs1,
      Self::RsaPssPssSha256 => PublicKeyTy::RsaPssSha256,
      Self::RsaPssPssSha384 => PublicKeyTy::RsaPssSha384,
    }
  }

  /// Used in TLS records like `CertificateVerify`.
  #[inline]
  pub(crate) fn handshake_st(self) -> SignatureTy {
    match self {
      Self::EcdsaSecp256r1Sha256 => SignatureTy::EcdsaP256,
      Self::EcdsaSecp384r1Sha384 => SignatureTy::EcdsaP384,
      Self::RsaPssRsaeSha256 | Self::RsaPssPssSha256 => SignatureTy::RsaPssSha256,
      Self::RsaPssRsaeSha384 | Self::RsaPssPssSha384 => SignatureTy::RsaPssSha384,
      Self::Ed25519 => SignatureTy::Ed25519,
    }
  }

  pub(crate) const fn len() -> usize {
    7
  }
}

impl<'de> Decode<'de, De> for SignatureScheme {
  #[inline]
  fn decode(dw: &mut TlsDecodeWrapper<'de>) -> crate::Result<Self> {
    Self::try_from(<u16 as Decode<De>>::decode(dw)?)
  }
}

impl Encode<De> for SignatureScheme {
  #[inline]
  fn encode(&self, ew: &mut TlsEncodeWrapper<'_>) -> crate::Result<()> {
    ew.buffer().extend_from_copyable_slice(&u16::from(*self).to_be_bytes())?;
    Ok(())
  }
}

impl From<SignatureScheme> for u16 {
  #[inline]
  fn from(value: SignatureScheme) -> Self {
    match value {
      SignatureScheme::EcdsaSecp256r1Sha256 => 0x0403,
      SignatureScheme::EcdsaSecp384r1Sha384 => 0x0503,
      SignatureScheme::RsaPssRsaeSha256 => 0x0804,
      SignatureScheme::RsaPssRsaeSha384 => 0x0805,
      SignatureScheme::Ed25519 => 0x0807,
      SignatureScheme::RsaPssPssSha256 => 0x0809,
      SignatureScheme::RsaPssPssSha384 => 0x080a,
    }
  }
}

impl TryFrom<u16> for SignatureScheme {
  type Error = crate::Error;

  #[inline]
  fn try_from(value: u16) -> crate::Result<Self> {
    Ok(match value {
      0x0403 => SignatureScheme::EcdsaSecp256r1Sha256,
      0x0503 => SignatureScheme::EcdsaSecp384r1Sha384,
      0x0804 => SignatureScheme::RsaPssRsaeSha256,
      0x0805 => SignatureScheme::RsaPssRsaeSha384,
      0x0807 => SignatureScheme::Ed25519,
      0x0809 => SignatureScheme::RsaPssPssSha256,
      0x080a => SignatureScheme::RsaPssPssSha384,
      _ => return Err(TlsError::UnknownSignatureScheme.into()),
    })
  }
}