yubihsm 0.20.0

Pure Rust client for YubiHSM2 devices with support for HTTP and USB-based access to the device. Supports most HSM functionality including ECDSA, Ed25519, HMAC, and RSA.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

//! Session error types

use crate::connector::ConnectionError;
use crate::error::{Error, HsmErrorKind};
use crate::serialization::SerializationError;

/// Session errors
pub type SessionError = Error<SessionErrorKind>;

/// Session error kinds
#[derive(Copy, Clone, Eq, PartialEq, Debug, Fail)]
pub enum SessionErrorKind {
    /// Couldn't authenticate session
    #[fail(display = "authentication failed")]
    AuthFail,

    /// Session is closed
    #[fail(display = "session closed")]
    ClosedSessionError,

    /// Max command per session exceeded and a new session should be created
    #[fail(display = "max commands per session exceeded")]
    CommandLimitExceeded,

    /// Couldn't create session
    #[fail(display = "couldn't create session")]
    CreateFailed,

    /// Errors originating in the HSM device
    #[fail(display = "HSM error: {}", kind)]
    DeviceError {
        /// HSM error kind
        kind: HsmErrorKind,
    },

    /// Message was intended for a different session than the current one
    #[fail(display = "message has differing session ID")]
    MismatchError,

    /// Protocol error occurred
    #[fail(display = "protocol error")]
    ProtocolError,

    /// Error response from HSM we can't further specify
    #[fail(display = "HSM error")]
    ResponseError,

    /// MAC or cryptogram verify failed
    #[fail(display = "verification failed")]
    VerifyFailed,
}

impl From<ConnectionError> for SessionError {
    fn from(err: ConnectionError) -> Self {
        err!(SessionErrorKind::ProtocolError, err.to_string())
    }
}

impl From<HsmErrorKind> for SessionError {
    fn from(kind: HsmErrorKind) -> Self {
        SessionError::new(SessionErrorKind::DeviceError { kind }, None)
    }
}

impl From<SerializationError> for SessionError {
    fn from(err: SerializationError) -> Self {
        err!(SessionErrorKind::ProtocolError, err.to_string())
    }
}