Struct parsec_service::providers::pkcs11::Provider

pub struct Provider { /* private fields */ }

Provider for Public Key Cryptography Standard #11

Operations for this provider are serviced through a PKCS11 interface, allowing any libraries exposing said interface to be loaded and used at runtime.

Implementations

impl Provider

pub const DEFAULT_PROVIDER_NAME: &'static str = "pkcs11-provider"

The default provider name for pkcs11 provider

pub const PROVIDER_UUID: &'static str = "30e39502-eba6-4d60-a4af-c518b7f5e38f"

The UUID for this provider

Trait Implementations

impl CanDoCrypto for Provider

fn can_do_crypto_internal( &self, _application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Provider specific heck if the crypto operation is supported by provider. This method should be re-implemented by providers.

fn use_check_internal(&self, attributes: Attributes) -> Result<Result>

Provider specific Use check. This method should be re-implemented by providers.

fn generate_check_internal(&self, attributes: Attributes) -> Result<Result>

Provider specific Generate check. This method should be re-implemented by providers.

fn import_check_internal(&self, attributes: Attributes) -> Result<Result>

Provider specific Import check. This method should be re-implemented by providers.

fn can_do_crypto_main( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Check if the crypto operation is supported by provider. This method is called by Provide trait and doesn’t need to be changed.

fn use_check(&self, attributes: Attributes) -> Result<Result>

Common checks if an existing key of the key type that defined in the attributes and the same length can be used to perform the algorithm in policy.key_algorithm

fn generate_check(&self, attributes: Attributes) -> Result<Result>

Common checks if a key with the attributes can be generated

fn import_check(&self, attributes: Attributes) -> Result<Result>

Common checks if a key with the attributes can be imported.

fn derive_check(&self, _attributes: Attributes) -> Result<Result>

Checks if a key with the attributes can be derived.

impl Debug for Provider

fn fmt(&self, __f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Provide for Provider

fn can_do_crypto( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Check if the crypto operation is supported by PKCS11 provider by using CanDoCrypto trait.

fn describe(&self) -> Result<(ProviderInfo, HashSet<Opcode>)>

Return a description of the current provider.

fn list_keys( &self, application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Lists all keys belonging to the application.

fn list_clients(&self, _op: Operation) -> Result<Result>

Lists all clients currently having data in the service.

fn psa_generate_random(&self, op: Operation) -> Result<Result>

Execute a GenerateRandom operation.

fn psa_generate_key( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Execute a GenerateKey operation.

fn psa_import_key( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Execute an ImportKey operation.

fn psa_export_public_key( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Execute an ExportPublicKey operation.

fn psa_destroy_key( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Execute a DestroyKey operation.

fn psa_sign_hash( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Execute a SignHash operation. This operation only signs the short digest given but does not hash it.

fn psa_verify_hash( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Execute a VerifyHash operation.

fn psa_asymmetric_encrypt( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Execute an AsymmetricEncrypt operation.

fn psa_asymmetric_decrypt( &self, application_identity: &ApplicationIdentity, op: Operation ) -> Result<Result>

Execute an AsymmetricDecrypt operation.

fn list_providers(&self, _op: Operation) -> Result<Result>

List the providers running in the service.

fn list_opcodes(&self, _op: Operation) -> Result<Result>

List the opcodes supported by the given provider.

fn list_authenticators(&self, _op: Operation) -> Result<Result>

List the authenticators supported by the given provider.

fn delete_client( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Delete all data a client has in the service..

fn ping(&self, _op: Operation) -> Result<Result>

Execute a Ping operation to get the wire protocol version major and minor information.

fn psa_export_key( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Execute an ExportKey operation.

fn psa_aead_encrypt( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Execute an AeadEncrypt operation.

fn psa_aead_decrypt( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Execute an AeadDecrypt operation.

fn psa_hash_compute(&self, _op: Operation) -> Result<Result>

Execute a HashCompute operation.

fn psa_hash_compare(&self, _op: Operation) -> Result<Result>

Execute a HashCompare operation.

fn psa_raw_key_agreement( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Execute a RawKeyAgreement operation.

fn psa_cipher_encrypt( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Encrypt a short message with a symmetric cipher.

fn psa_cipher_decrypt( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Decrypt a short message with a symmetric cipher.

fn psa_sign_message( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Sign a message with a private key.

fn psa_verify_message( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Verify the signature of a message using a public key.

fn prepare_key_attestation( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Prepare a key attestation operation.

fn attest_key( &self, _application_identity: &ApplicationIdentity, _op: Operation ) -> Result<Result>

Attest a key.