Struct CryptoProvider

pub struct CryptoProvider {
    pub fips_enabled: bool,
    pub validation_enabled: bool,
    pub fips_mode: bool,
    pub module_initialized: Arc<AtomicBool>,
    pub self_tests_passed: Arc<AtomicBool>,
}

Fields

fips_enabled: bool

validation_enabled: bool

fips_mode: bool

module_initialized: Arc<AtomicBool>

self_tests_passed: Arc<AtomicBool>

Implementations

impl CryptoProvider

pub fn new(fips_enabled: bool, validation_enabled: bool) -> Result<Self>

pub fn initialize(&mut self) -> Result<()>

Initialize the cryptographic provider with FIPS compliance

pub fn hash_sha256(&self, data: &[u8]) -> Result<[u8; 32]>

FIPS-compliant SHA-256 hash using OpenSSL

pub fn hash_sha512(&self, data: &[u8]) -> Result<[u8; 64]>

FIPS-compliant SHA-512 hash using OpenSSL

pub fn hash_alternative(&self, data: &[u8]) -> Result<Vec<u8>>

FIPS-compliant alternative hash (SHA-512 in FIPS mode, SHA-256 otherwise)

pub fn generate_random(&self, size: usize) -> Result<Vec<u8>>

FIPS-compliant random number generation using OpenSSL

pub fn derive_key_pbkdf2( &self, password: &[u8], salt: &[u8], iterations: u32, key_len: usize, ) -> Result<Vec<u8>>

FIPS-compliant PBKDF2 key derivation using OpenSSL

pub fn derive_key_hkdf( &self, secret: &[u8], salt: &[u8], info: &[u8], key_len: usize, ) -> Result<Vec<u8>>

FIPS-compliant HKDF key derivation using the hkdf crate

pub fn encrypt_aes_gcm( &self, key: &[u8], nonce: &[u8], plaintext: &[u8], aad: &[u8], ) -> Result<(Vec<u8>, Vec<u8>)>

AES-256-GCM encryption (FIPS approved)

pub fn decrypt_aes_gcm( &self, key: &[u8], nonce: &[u8], ciphertext: &[u8], aad: &[u8], tag: &[u8], ) -> Result<Vec<u8>>

AES-256-GCM decryption (FIPS approved)

pub fn get_fips_status(&self) -> FipsStatus

Get FIPS status with OpenSSL information

pub fn validate_fips_compliance(&mut self) -> Result<()>

Validate FIPS compliance

pub fn get_fips_server_config( &self, cert_path: &Path, key_path: &Path, ) -> Result<ServerConfig>

Create FIPS-compliant server configuration using rustls with OpenSSL backend

pub fn get_fips_client_config(&self) -> Result<ClientConfig>

Create FIPS-compliant client configuration

Trait Implementations

impl Clone for CryptoProvider

fn clone(&self) -> CryptoProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.