yubico 0.11.0

Yubikey client API library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

use crate::yubicoerror::YubicoError;
use base64::decode;
use hmac::{digest::CtOutput, Hmac, Mac};
use sha1::Sha1;

type HmacSha1 = Hmac<Sha1>;

//  1. Apply the HMAC-SHA-1 algorithm on the line as an octet string using the API key as key
pub fn build_signature(
    key: &[u8],
    input: &[u8],
) -> Result<CtOutput<HmacSha1>, YubicoError> {
    let decoded_key = decode(key)?;

    let mut hmac = match HmacSha1::new_from_slice(&decoded_key) {
        Ok(h) => h,
        Err(_) => return Err(YubicoError::InvalidKeyLength),
    };
    hmac.update(input);
    Ok(hmac.finalize())
}

pub fn verify_signature(
    key: &[u8],
    input: &[u8],
    expected: &[u8],
) -> Result<(), YubicoError> {
    let decoded_key = decode(key)?;

    let mut hmac = match HmacSha1::new_from_slice(&decoded_key) {
        Ok(h) => h,
        Err(_) => return Err(YubicoError::InvalidKeyLength),
    };
    hmac.update(input);
    hmac.verify_slice(expected).map_err(|_| YubicoError::SignatureMismatch)
}