lys_core/lib.rs
1//! `lys-core` — domain-agnostic cryptographic trust primitives.
2//!
3//! A focused library of trust primitives: certificate authority operations,
4//! Merkle transparency-log operations, signed attestations, sealed payload
5//! transport, and Ed25519 key management. Consumers compose domain meaning
6//! on top — this crate knows nothing about any higher-level concepts.
7//!
8//! The foundation laid here is [`TrustError`], [`TrustResult`], and
9//! [`Ed25519Identity`]. The [`ca`], [`merkle`], [`attestation`], `receipt`,
10//! `bundle`, `delegation`, [`seal`], [`checkpoint`], and [`tlog`] modules are
11//! implemented on top of these primitives. (`receipt`, `bundle` and
12//! `delegation` are named without intra-doc links because they exist only under
13//! `unstable-anchor`; a link from ungated docs to a gated item resolves under
14//! `--all-features` and breaks in the default doc build, which is the shape
15//! consumers get.)
16//!
17//! ```
18//! use lys_core::TrustResult;
19//!
20//! fn fallible_op() -> TrustResult<()> {
21//! Ok(())
22//! }
23//!
24//! assert!(fallible_op().is_ok());
25//! ```
26
27// Library code contains no unsafe whatsoever, and no test in this crate uses
28// unsafe code either. Non-test builds forbid it outright; test builds are held
29// by the workspace-level `deny`, which no test overrides.
30#![cfg_attr(not(test), forbid(unsafe_code))]
31
32pub mod attestation;
33#[cfg(feature = "unstable-anchor")]
34pub mod bundle;
35pub mod ca;
36mod cbor;
37pub mod checkpoint;
38pub mod clock;
39#[cfg(feature = "unstable-anchor")]
40pub mod delegation;
41pub mod error;
42pub mod keys;
43pub mod merkle;
44#[cfg(feature = "unstable-anchor")]
45pub mod receipt;
46pub mod seal;
47pub mod tlog;
48
49pub use error::{TrustError, TrustResult};
50pub use keys::Ed25519Identity;
51
52/// Lowercase hex encoding of a byte slice.
53pub(crate) fn hex_lower(bytes: &[u8]) -> String {
54 const DIGITS: &[u8; 16] = b"0123456789abcdef";
55 let mut s = String::with_capacity(bytes.len() * 2);
56 for &b in bytes {
57 s.push(char::from(DIGITS[usize::from(b >> 4)]));
58 s.push(char::from(DIGITS[usize::from(b & 0x0f)]));
59 }
60 s
61}