1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109

#[cfg(all(feature = "digest", feature = "sha2"))]
use digest::Digest;
#[cfg(all(feature = "digest", feature = "sha2"))]
use sha2::{Sha256, Sha384, Sha512};

#[cfg(all(feature = "digest", feature = "sha2"))]
use super::digest::DigestVerifier;
use crate::{Error, Signature};

// TODO: define these using a macro?

/// Verifier which computes SHA-256 digests of messages
pub trait Sha256Verifier<S>: Send + Sync
where
    S: Signature,
{
    /// Verify a signature of the SHA-256 digest of a message
    fn verify_sha256(&self, msg: &[u8], signature: &S) -> Result<(), Error>;
}

#[cfg(all(feature = "digest", feature = "sha2"))]
impl<S, T> Sha256Verifier<S> for T
where
    S: Signature,
    T: DigestVerifier<Sha256, S>,
{
    fn verify_sha256(&self, msg: &[u8], signature: &S) -> Result<(), Error> {
        self.verify(Sha256::new().chain(msg), signature)
    }
}

/// Verifier which computes SHA-384 digests of messages
pub trait Sha384Verifier<S>: Send + Sync
where
    S: Signature,
{
    /// Verify a signature of the SHA-384 digest of a message
    fn verify_sha384(&self, msg: &[u8], signature: &S) -> Result<(), Error>;
}

#[cfg(all(feature = "digest", feature = "sha2"))]
impl<S, T> Sha384Verifier<S> for T
where
    S: Signature,
    T: DigestVerifier<Sha384, S>,
{
    fn verify_sha384(&self, msg: &[u8], signature: &S) -> Result<(), Error> {
        self.verify(Sha384::new().chain(msg), signature)
    }
}

/// Verifier which computes SHA-512 digests of messages
pub trait Sha512Verifier<S>: Send + Sync
where
    S: Signature,
{
    /// Verify a signature of the SHA-512 digest of a message
    fn verify_sha512(&self, msg: &[u8], signature: &S) -> Result<(), Error>;
}

#[cfg(all(feature = "digest", feature = "sha2"))]
impl<S, T> Sha512Verifier<S> for T
where
    S: Signature,
    T: DigestVerifier<Sha512, S>,
{
    fn verify_sha512(&self, msg: &[u8], signature: &S) -> Result<(), Error> {
        self.verify(Sha512::new().chain(msg), signature)
    }
}

/// Verify SHA-256 of the given message and then sign the resulting digest.
/// This can be used to avoid importing the `Verifier` and `Signature` traits
pub fn verify_sha256<S>(
    verifier: &dyn Sha256Verifier<S>,
    msg: &[u8],
    signature: &S,
) -> Result<(), Error>
where
    S: Signature,
{
    verifier.verify_sha256(msg, signature)
}

/// Verify SHA-384 of the given message and then sign the resulting digest.
/// This can be used to avoid importing the `Verifier` and `Signature` traits
pub fn verify_sha384<S>(
    verifier: &dyn Sha384Verifier<S>,
    msg: &[u8],
    signature: &S,
) -> Result<(), Error>
where
    S: Signature,
{
    verifier.verify_sha384(msg, signature)
}

/// Verify SHA-512 of the given message and then sign the resulting digest.
/// This can be used to avoid importing the `Verifier` and `Signature` traits
pub fn verify_sha512<S>(
    verifier: &dyn Sha512Verifier<S>,
    msg: &[u8],
    signature: &S,
) -> Result<(), Error>
where
    S: Signature,
{
    verifier.verify_sha512(msg, signature)
}