Struct PublicKeyComponents 

pub struct PublicKeyComponents<B>
where
    B: AsRef<[u8]> + Debug,
{
    pub n: B,
    pub e: B,
}

Low-level API for RSA public keys.

When the public key is in DER-encoded PKCS#1 ASN.1 format, it is recommended to use aws_lc_rs::signature::verify() with aws_lc_rs::signature::RSA_PKCS1_*, because aws_lc_rs::signature::verify() will handle the parsing in that case. Otherwise, this function can be used to pass in the raw bytes for the public key components as untrusted::Input arguments.

Fields

n: B

The public modulus, encoded in big-endian bytes without leading zeros.

e: B

The public exponent, encoded in big-endian bytes without leading zeros.

Implementations

impl<B> PublicKeyComponents<B>

where B: AsRef<[u8]> + Debug,

fn build_rsa(&self) -> Result<ManagedPointer<*mut EVP_PKEY>, ()>

pub fn verify( &self, params: &RsaParameters, message: &[u8], signature: &[u8], ) -> Result<(), Unspecified>

Verifies that signature is a valid signature of message using self as the public key. params determine what algorithm parameters (padding, digest algorithm, key length range, etc.) are used in the verification.

Errors

error::Unspecified if message was not verified.

pub fn to_parsed_public_key( &self, params: &'static RsaParameters, ) -> Result<ParsedPublicKey, KeyRejected>

Parses these components into a crate::signature::ParsedPublicKey, which can then be used to verify multiple signatures while amortizing the cost of key parsing.

params specifies the RSA verification algorithm, such as crate::signature::RSA_PKCS1_2048_8192_SHA256 or crate::signature::RSA_PSS_2048_8192_SHA256.

Note that the algorithm’s accepted key-size range is not enforced at this point; that check is deferred to crate::signature::ParsedPublicKey::verify_sig, matching the behavior of crate::signature::ParsedPublicKey::new.

Errors

KeyRejected if self does not form a valid RSA public key.

Examples

use aws_lc_rs::signature::{self, RsaPublicKeyComponents};

// Public key components (big-endian, no leading zeros) received
// out-of-band from a peer.
let components = RsaPublicKeyComponents {
    n: modulus_bytes(),
    e: exponent_bytes(),
};
let parsed =
    components.to_parsed_public_key(&signature::RSA_PKCS1_2048_8192_SHA256)?;
parsed.verify_sig(b"hello, world", signature_bytes())?;

Trait Implementations

impl<B> AsDer<PublicKeyX509Der<'static>> for PublicKeyComponents<B>

where B: AsRef<[u8]> + Debug,

fn as_der(&self) -> Result<PublicKeyX509Der<'static>, Unspecified>

Serializes the RSA public key components into an X.509 SubjectPublicKeyInfo structure, as specified in RFC 5280.

Errors

error::Unspecified if the components do not form a valid RSA public key.

impl<B> Clone for PublicKeyComponents<B>

where B: AsRef<[u8]> + Debug + Clone,

fn clone(&self) -> PublicKeyComponents<B>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<B: AsRef<[u8]> + Debug> Debug for PublicKeyComponents<B>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<B> TryInto<PublicEncryptingKey> for PublicKeyComponents<B>

where B: AsRef<[u8]> + Debug,

fn try_into(self) -> Result<PublicEncryptingKey, Self::Error>

Try to build a PublicEncryptingKey from the public key components.

Errors

error::Unspecified if the key failed to verify.

type Error = Unspecified

The type returned in the event of a conversion error.

impl<B: Copy + AsRef<[u8]> + Debug> Copy for PublicKeyComponents<B>