wtx 0.52.1

A collection of different transport implementations and related tools focused primarily on web technologies.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

use crate::{
  collections::{ShortBoxSliceU8, Vector},
  crypto::DynSigningOutput,
  misc::{Secret, SecretContext, SensitiveBytes},
  rng::CryptoRng,
  tls::{
    SignatureScheme, TlsCtx, TlsCtxSk, TlsCtxSkLoader, TlsError, TlsMode,
    tls_ctx::{secret_key_from_pem, secret_key_ty},
  },
  x509::KeyTy,
};
use core::hint::cold_path;

/// Encrypted Secret Key Context
///
/// Secure connection with protected private key. Data is encrypted and certificates are verified.
///
/// Used by servers.
#[derive(Debug, Default)]
pub struct EncSkCtx(ShortBoxSliceU8<(Secret, KeyTy)>);

impl TlsCtx for EncSkCtx {
  const TY: TlsMode = TlsMode::Verified;
}

impl TlsCtxSk for EncSkCtx {
  type Signature = DynSigningOutput;

  #[inline]
  fn sign<RNG>(
    &self,
    buffer: &mut Vector<u8>,
    msg: &[u8],
    rng: &mut RNG,
    sc: SignatureScheme,
  ) -> crate::Result<Self::Signature>
  where
    RNG: CryptoRng,
  {
    let kt = sc.cert_kt();
    for value in self.0.iter() {
      if value.1 == kt {
        return value.0.peek(&mut buffer.into(), |sp| {
          sc.handshake_st().sign_key_from_pkcs8(sp.data())?.sign(msg, rng)
        })?;
      }
    }
    cold_path();
    Err(TlsError::UnsupportedSignAlgorithm.into())
  }
}

impl TlsCtxSkLoader for EncSkCtx {
  type SkInputDer<'data> = (SecretContext, &'data mut [u8]);
  type SkInputPem<'data> = (SecretContext, &'data mut [u8]);

  #[inline]
  fn from_ders<'data, RNG>(
    input: impl IntoIterator<Item = Self::SkInputDer<'data>>,
    rng: &mut RNG,
  ) -> crate::Result<Self>
  where
    RNG: CryptoRng,
  {
    let mut vector = Vector::new();
    for (secret_context, secret_key) in input {
      let key_ty = secret_key_ty(secret_key)?;
      vector.push((Secret::new(secret_key, rng, secret_context)?, key_ty))?;
    }
    Ok(Self(vector.try_into()?))
  }

  /// From a secret key in PEM format.
  #[inline]
  fn from_pems<'data, RNG>(
    input: impl IntoIterator<Item = Self::SkInputPem<'data>>,
    rng: &mut RNG,
  ) -> crate::Result<Self>
  where
    RNG: CryptoRng,
  {
    let mut vector = Vector::new();
    for (secret_context, pem_bytes) in input {
      let sb = SensitiveBytes::new(pem_bytes);
      let (mut secret_key, key_ty) = secret_key_from_pem(*sb)?;
      vector.push((Secret::new(&mut secret_key, rng, secret_context)?, key_ty))?;
    }
    Ok(Self(vector.try_into()?))
  }
}