Enum kerberos_crypto::Key

pub enum Key {
    Secret(String),
    RC4Key([u8; 16]),
    AES128Key([u8; 16]),
    AES256Key([u8; 32]),
}

Encapsules the possible keys used by this Kerberos implementation. Each key can be used by a different cryptographic algorithm.

Variants

Secret(String)

The secret of the user. This is the most versatile key, since can it can be use to derive the rest of the keys, and therefore, being used by any cryptographic algorithm.

RC4Key([u8; 16])

RC4 key used by RC4-HMAC algorithm. In Windows, this is the NTLM hash of the user password.

AES128Key([u8; 16])

AES key used by AES128-CTS-HMAC-SHA1-96 algorithm.

AES256Key([u8; 32])

AES key used by AES256-CTS-HMAC-SHA1-96 algorithm.

Implementations

impl Key

pub fn random(etype: i32) -> Result<Self>

Generates a random key of the given etype

Error

Returns error if the etype is not supported

pub fn etypes(&self) -> Vec<i32>

Return the etypes associated with the type of key.

Examples

use kerberos_crypto::*;
use kerberos_constants::etypes::*;

assert_eq!(
    vec![AES256_CTS_HMAC_SHA1_96, AES128_CTS_HMAC_SHA1_96, RC4_HMAC],
    Key::Secret("".to_string()).etypes()
);
assert_eq!(vec![RC4_HMAC], Key::RC4Key([0; RC4_KEY_SIZE]).etypes());
assert_eq!(
    vec![AES128_CTS_HMAC_SHA1_96],
    Key::AES128Key([0; AES128_KEY_SIZE]).etypes()
);
assert_eq!(
    vec![AES256_CTS_HMAC_SHA1_96],
    Key::AES256Key([0; AES256_KEY_SIZE]).etypes()
);

pub fn as_bytes(&self) -> &[u8]

Retrieve the key as an array of bytes.

Examples

use kerberos_crypto::*;

assert_eq!(&[0x73, 0x65, 0x63, 0x72, 0x65, 0x74], Key::Secret("secret".to_string()).as_bytes());
assert_eq!(&[0; RC4_KEY_SIZE], Key::RC4Key([0; RC4_KEY_SIZE]).as_bytes());
assert_eq!(&[0; AES128_KEY_SIZE], Key::AES128Key([0; AES128_KEY_SIZE]).as_bytes());
assert_eq!(&[0; AES256_KEY_SIZE], Key::AES256Key([0; AES256_KEY_SIZE]).as_bytes());

pub fn from_rc4_key_string(hex_str: &str) -> Result<Self>

Get a RC4 key from a hexdump.

Example

use kerberos_crypto::Key;
assert_eq!(
    Key::RC4Key([0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef]),
    Key::from_rc4_key_string("0123456789ABCDEF0123456789abcdef").unwrap()
);

Errors

An error if raised if the argument string has any non hexadecimal character or size is different from 32.

pub fn from_aes_128_key_string(hex_str: &str) -> Result<Self>

Get a AES-128 key from a hexdump.

Example

use kerberos_crypto::Key;
assert_eq!(
    Key::AES128Key([0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef]),
    Key::from_aes_128_key_string("0123456789ABCDEF0123456789abcdef").unwrap()
);

Errors

An error if raised if the argument string has any non hexadecimal character or size is different from 32.

pub fn from_aes_256_key_string(hex_str: &str) -> Result<Self>

Get a AES-256 key from a hexdump.

Example

use kerberos_crypto::Key;
assert_eq!(
    Key::AES256Key([
        0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
        0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef
    ]),
    Key::from_aes_256_key_string("0123456789ABCDEF0123456789abcdef0123456789ABCDEF0123456789abcdef").unwrap()
);

Errors

An error if raised if the argument string has any non hexadecimal character or size is different from 64.

Trait Implementations

impl Clone for Key

pub fn clone(&self) -> Key

Returns a copy of the value.

pub fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Key

pub fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq<Key> for Key

pub fn eq(&self, other: &Key) -> bool

This method tests for self and other values to be equal, and is used by ==.

pub fn ne(&self, other: &Key) -> bool

This method tests for !=.

impl StructuralPartialEq for Key