Crate ssri

ssri, short for Standard Subresource Integrity, is a Rust library for parsing, manipulating, serializing, generating, and verifying Subresource Integrity hashes.

Examples

Parse a string as Integrity to convert it to a struct:

let source = "sha256-uU0nuZNNPgilLlLX2n2r+sSE7+N6U4DukIj3rOLvzek=";

let parsed: Integrity = source.parse().unwrap();
assert_eq!(parsed.to_string(), source)

Generating a new hash from file data:

// By default, generates Integrity as Sha256.
// Use IntegrityOpts to pick the algorithm yourself.
let sri = Integrity::from(b"hello world");
assert_eq!(sri.to_string(), "sha256-uU0nuZNNPgilLlLX2n2r+sSE7+N6U4DukIj3rOLvzek=");

Verifying data against an SRI:

let sri = Integrity::from(b"hello world");
assert_eq!(sri.check(b"hello world").unwrap(), Algorithm::Sha256);

You can also use IntegrityOpts and IntegrityChecker to generate and check subresource integrity, respectively. These allow things like multiple algorithms, and incremental/streamed data input.

Re-exports

pub use algorithm::Algorithm::*;

Structs

Hash

Represents a single algorithm/digest pair.

Integrity

Representation of a full Subresource Integrity string.

IntegrityChecker

Check data against an Integrity.

IntegrityOpts

Builds a new Integrity, allowing multiple algorithms and incremental input.

Enums

Algorithm

Valid algorithms for integrity strings.

Error

Integrity-related error values.