wtx 0.52.0

A collection of different transport implementations and related tools focused primarily on web technologies.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101

pub(crate) mod enc_sk_ctx;
pub(crate) mod plaintext_ctx;
pub(crate) mod sk_ctx;
pub(crate) mod trusted_ctx;
pub(crate) mod unverified_ctx;

use crate::{
  asn1::Asn1DecodeWrapperAux,
  codec::{Decode as _, DecodeWrapper, Pem},
  collections::{ShortBoxSliceU16, Vector},
  misc::SecretContext,
  rng::CryptoRng,
  tls::{SignatureScheme, TlsMode},
  x509::{KeyTy, Pkcs8},
};
use core::fmt::Debug;

/// TLS Context
///
/// Dictates how a TLS connection should behave.
pub trait TlsCtx: Debug {
  /// See [`TlsMode`].
  const TY: TlsMode;
}

/// TLS Context - Secret Keys
///
/// Dictates how a TLS connection should behave and also manages privates keys and theirs signatures.
pub trait TlsCtxSk: TlsCtx {
  /// Signature
  type Signature: AsRef<[u8]>;

  /// Sign the given message and return a digital signature.
  fn sign<RNG>(
    &self,
    buffer: &mut Vector<u8>,
    msg: &[u8],
    rng: &mut RNG,
    sc: SignatureScheme,
  ) -> crate::Result<Self::Signature>
  where
    RNG: CryptoRng;
}

/// Provides mechanisms to instantiate a secret key context from different formats.
pub trait TlsCtxSkLoader: Sized + TlsCtxSk {
  /// Input of the [`Self::from_ders`] method.
  type SkInputDer<'data>: TlsCtxSkInput<TlsCtxSk = Self>;
  /// Input of the [`Self::from_pems`] method.
  type SkInputPem<'data>: TlsCtxSkInput<TlsCtxSk = Self>;

  /// From a secret key in DER format.
  fn from_ders<'data, RNG>(
    input: impl IntoIterator<Item = Self::SkInputDer<'data>>,
    rng: &mut RNG,
  ) -> crate::Result<Self>
  where
    RNG: CryptoRng;

  /// From a secret key in PEM format.
  fn from_pems<'data, RNG>(
    input: impl IntoIterator<Item = Self::SkInputPem<'data>>,
    rng: &mut RNG,
  ) -> crate::Result<Self>
  where
    RNG: CryptoRng;
}

/// Used for type inference. Doesn't contain any internal logic.
pub trait TlsCtxSkInput {
  /// See [`TlsCtxSk`].
  type TlsCtxSk: TlsCtxSk;
}

impl TlsCtxSkInput for &[u8] {
  type TlsCtxSk = sk_ctx::SkCtx;
}

impl TlsCtxSkInput for ShortBoxSliceU16<u8> {
  type TlsCtxSk = sk_ctx::SkCtx;
}

impl TlsCtxSkInput for (SecretContext, &mut [u8]) {
  type TlsCtxSk = enc_sk_ctx::EncSkCtx;
}

#[inline]
fn secret_key_from_pem(pem_bytes: &[u8]) -> crate::Result<(ShortBoxSliceU16<u8>, KeyTy)> {
  let mut buffer = Vector::new();
  let pem = Pem::<_, 1>::decode(&mut DecodeWrapper::new(pem_bytes, &mut buffer))?;
  let rslt = pem.data.into_inner()?;
  buffer.truncate(rslt[0].1.end);
  let key_ty = secret_key_ty(&buffer)?;
  Ok((buffer.try_into()?, key_ty))
}

#[inline]
fn secret_key_ty(der: &[u8]) -> crate::Result<KeyTy> {
  let mut dw = DecodeWrapper::new(der, Asn1DecodeWrapperAux::default());
  KeyTy::try_from(&Pkcs8::<&[u8]>::decode(&mut dw)?)
}