xml-sec 0.1.13

Pure Rust XML Security: XMLDSig, XMLEnc, C14N. Drop-in replacement for libxmlsec1.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

//! Non-configurable implementation safety ceilings.
//!
//! These caps bound allocations even when a future compiled deployment policy
//! permits larger inputs. Deployment policy may only select stricter values.

/// Maximum XML nodes allocated while parsing one verification or transform document.
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XML_DOCUMENT_NODE_CEILING: u32 = 100_000;

/// Maximum inherited `xml:base` attributes considered for one URI resolution.
pub(crate) const XML_BASE_COMPONENT_CEILING: usize = 64;

/// Maximum cumulative bytes inspected or allocated while resolving XML Base.
pub(crate) const XML_BASE_RESOLUTION_BYTE_CEILING: usize = 1024 * 1024;

/// Maximum canonicalized SignedInfo plus retained diagnostics for one signature.
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const CANONICALIZED_SIGNATURE_DATA_BYTE_CEILING: usize = 32 * 1024 * 1024;

#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const EXTERNAL_RESOURCE_BYTE_CEILING: usize = 8 * 1024 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const EXTERNAL_RESOURCE_TOTAL_BYTE_CEILING: usize = 32 * 1024 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const ENCRYPTION_CIPHER_VALUE_BASE64_BYTE_CEILING: usize = 16 * 1024 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const ENCRYPTION_PLAINTEXT_BYTE_CEILING: usize =
    (ENCRYPTION_CIPHER_VALUE_BASE64_BYTE_CEILING / 4 * 3) - 32;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XML_DOCUMENT_BYTE_CEILING: usize = ENCRYPTION_CIPHER_VALUE_BASE64_BYTE_CEILING;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const ENCRYPTION_RECIPIENT_CEILING: usize = 64;
/// Maximum symmetric keys attempted by one prepared decryption operation.
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const KEY_CANDIDATE_CEILING: usize = 64;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const ENCRYPTION_METADATA_BYTE_CEILING: usize = 4 * 1024;

/// Largest RSA modulus accepted by built-in operation paths.
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const RSA_MODULUS_BIT_CEILING: usize = 8192;
/// Largest DSA prime modulus accepted by built-in verification paths.
#[cfg(feature = "xmldsig")]
pub(crate) const DSA_MODULUS_BIT_CEILING: usize = 3072;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const SIGNATURE_REFERENCE_CEILING: usize = 64;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const REFERENCE_TRANSFORM_CEILING: usize = 64;
#[cfg(feature = "xmldsig")]
pub(crate) const X509_CHAIN_DEPTH_CEILING: usize = 9;
#[cfg(feature = "xmldsig")]
pub(crate) const X509_CANDIDATE_PATH_CEILING: usize = 64;

/// Absolute transform and XPath work ceilings. Operation policy may only tighten these.
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const BASE64_TRANSFORM_INPUT_BYTE_CEILING: usize = 16 * 1024 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const BASE64_TRANSFORM_OUTPUT_BYTE_CEILING: usize = 8 * 1024 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_EXPRESSION_COUNT_CEILING: usize = 4_096;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_EXPRESSION_BYTE_CEILING: usize = 16 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_EXPRESSION_COMPLEXITY_CEILING: usize = 256;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_CONTEXT_EVALUATION_CEILING: usize = 4_096;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_EVALUATION_WORK_CEILING: usize = 6_000_000;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_MIRROR_STRING_BYTE_CEILING: usize = 8 * 1024 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_STRING_WORK_BYTE_CEILING: usize = 512 * 1024 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_NAMESPACE_BINDING_CEILING: usize = 1_024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_NAMESPACE_BYTE_CEILING: usize = 64 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const XPATH_FILTER_COUNT_CEILING: usize = 64;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const NODE_SET_FILTER_WORK_CEILING: usize = 6_000_000;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const NODE_SET_ENTRY_CEILING: usize = 65_536;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const NODE_SET_OWNED_STRING_BYTE_CEILING: usize = 8 * 1024 * 1024;
#[cfg(any(feature = "xmldsig", feature = "xmlenc"))]
pub(crate) const NODE_SET_CUMULATIVE_OWNED_STRING_BYTE_CEILING: usize = 64 * 1024 * 1024;