| <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="generator" content="rustdoc"><meta name="description" content="Source of the Rust file `/root/.cargo/registry/src/github.com-1ecc6299db9ec823/jsonwebtoken-7.2.0/src/crypto/rsa.rs`."><meta name="keywords" content="rust, rustlang, rust-lang"><title>rsa.rs - source</title><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../SourceSerif4-Regular.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../FiraSans-Regular.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../FiraSans-Medium.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../SourceCodePro-Regular.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../SourceSerif4-Bold.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../SourceCodePro-Semibold.ttf.woff2"><link rel="stylesheet" href="../../../normalize.css"><link rel="stylesheet" href="../../../rustdoc.css" id="mainThemeStyle"><link rel="stylesheet" href="../../../ayu.css" disabled><link rel="stylesheet" href="../../../dark.css" disabled><link rel="stylesheet" href="../../../light.css" id="themeStyle"><script id="default-settings" ></script><script src="../../../storage.js"></script><script defer src="../../../source-script.js"></script><script defer src="../../../source-files.js"></script><script defer src="../../../main.js"></script><noscript><link rel="stylesheet" href="../../../noscript.css"></noscript><link rel="alternate icon" type="image/png" href="../../../favicon-16x16.png"><link rel="alternate icon" type="image/png" href="../../../favicon-32x32.png"><link rel="icon" type="image/svg+xml" href="../../../favicon.svg"></head><body class="rustdoc source"><!--[if lte IE 11]><div class="warning">This old browser is unsupported and will most likely display funky things.</div><![endif]--><nav class="sidebar"><a class="sidebar-logo" href="../../../jsonwebtoken/index.html"><div class="logo-container"><img class="rust-logo" src="../../../rust-logo.svg" alt="logo"></div></a></nav><main><div class="width-limiter"><nav class="sub"><a class="sub-logo-container" href="../../../jsonwebtoken/index.html"><img class="rust-logo" src="../../../rust-logo.svg" alt="logo"></a><form class="search-form"><div class="search-container"><span></span><input class="search-input" name="search" autocomplete="off" spellcheck="false" placeholder="Click or press ‘S’ to search, ‘?’ for more options…" type="search"><div id="help-button" title="help" tabindex="-1"><a href="../../../help.html">?</a></div><div id="settings-menu" tabindex="-1"><a href="../../../settings.html" title="settings"><img width="22" height="22" alt="Change settings" src="../../../wheel.svg"></a></div></div></form></nav><section id="main-content" class="content"><div class="example-wrap"><pre class="src-line-numbers"><span id="1">1</span> |
| <span id="2">2</span> |
| <span id="3">3</span> |
| <span id="4">4</span> |
| <span id="5">5</span> |
| <span id="6">6</span> |
| <span id="7">7</span> |
| <span id="8">8</span> |
| <span id="9">9</span> |
| <span id="10">10</span> |
| <span id="11">11</span> |
| <span id="12">12</span> |
| <span id="13">13</span> |
| <span id="14">14</span> |
| <span id="15">15</span> |
| <span id="16">16</span> |
| <span id="17">17</span> |
| <span id="18">18</span> |
| <span id="19">19</span> |
| <span id="20">20</span> |
| <span id="21">21</span> |
| <span id="22">22</span> |
| <span id="23">23</span> |
| <span id="24">24</span> |
| <span id="25">25</span> |
| <span id="26">26</span> |
| <span id="27">27</span> |
| <span id="28">28</span> |
| <span id="29">29</span> |
| <span id="30">30</span> |
| <span id="31">31</span> |
| <span id="32">32</span> |
| <span id="33">33</span> |
| <span id="34">34</span> |
| <span id="35">35</span> |
| <span id="36">36</span> |
| <span id="37">37</span> |
| <span id="38">38</span> |
| <span id="39">39</span> |
| <span id="40">40</span> |
| <span id="41">41</span> |
| <span id="42">42</span> |
| <span id="43">43</span> |
| <span id="44">44</span> |
| <span id="45">45</span> |
| <span id="46">46</span> |
| <span id="47">47</span> |
| <span id="48">48</span> |
| <span id="49">49</span> |
| <span id="50">50</span> |
| <span id="51">51</span> |
| <span id="52">52</span> |
| <span id="53">53</span> |
| <span id="54">54</span> |
| <span id="55">55</span> |
| <span id="56">56</span> |
| <span id="57">57</span> |
| <span id="58">58</span> |
| <span id="59">59</span> |
| <span id="60">60</span> |
| <span id="61">61</span> |
| <span id="62">62</span> |
| <span id="63">63</span> |
| <span id="64">64</span> |
| <span id="65">65</span> |
| <span id="66">66</span> |
| </pre><pre class="rust"><code><span class="kw">use </span>ring::{rand, signature}; |
| <span class="kw">use </span>simple_asn1::BigUint; |
| |
| <span class="kw">use </span><span class="kw">crate</span>::algorithms::Algorithm; |
| <span class="kw">use </span><span class="kw">crate</span>::errors::{ErrorKind, <span class="prelude-ty">Result</span>}; |
| <span class="kw">use </span><span class="kw">crate</span>::serialization::{b64_decode, b64_encode}; |
| |
| <span class="doccomment">/// Only used internally when validating RSA, to map from our enum to the Ring param structs. |
| </span><span class="kw">pub</span>(<span class="kw">crate</span>) <span class="kw">fn </span>alg_to_rsa_parameters(alg: Algorithm) -> <span class="kw-2">&</span><span class="lifetime">'static </span>signature::RsaParameters { |
| <span class="kw">match </span>alg { |
| Algorithm::RS256 => <span class="kw-2">&</span>signature::RSA_PKCS1_2048_8192_SHA256, |
| Algorithm::RS384 => <span class="kw-2">&</span>signature::RSA_PKCS1_2048_8192_SHA384, |
| Algorithm::RS512 => <span class="kw-2">&</span>signature::RSA_PKCS1_2048_8192_SHA512, |
| Algorithm::PS256 => <span class="kw-2">&</span>signature::RSA_PSS_2048_8192_SHA256, |
| Algorithm::PS384 => <span class="kw-2">&</span>signature::RSA_PSS_2048_8192_SHA384, |
| Algorithm::PS512 => <span class="kw-2">&</span>signature::RSA_PSS_2048_8192_SHA512, |
| <span class="kw">_ </span>=> <span class="macro">unreachable!</span>(<span class="string">"Tried to get RSA signature for a non-rsa algorithm"</span>), |
| } |
| } |
| |
| <span class="doccomment">/// Only used internally when signing with RSA, to map from our enum to the Ring signing structs. |
| </span><span class="kw">pub</span>(<span class="kw">crate</span>) <span class="kw">fn </span>alg_to_rsa_signing(alg: Algorithm) -> <span class="kw-2">&</span><span class="lifetime">'static </span><span class="kw">dyn </span>signature::RsaEncoding { |
| <span class="kw">match </span>alg { |
| Algorithm::RS256 => <span class="kw-2">&</span>signature::RSA_PKCS1_SHA256, |
| Algorithm::RS384 => <span class="kw-2">&</span>signature::RSA_PKCS1_SHA384, |
| Algorithm::RS512 => <span class="kw-2">&</span>signature::RSA_PKCS1_SHA512, |
| Algorithm::PS256 => <span class="kw-2">&</span>signature::RSA_PSS_SHA256, |
| Algorithm::PS384 => <span class="kw-2">&</span>signature::RSA_PSS_SHA384, |
| Algorithm::PS512 => <span class="kw-2">&</span>signature::RSA_PSS_SHA512, |
| <span class="kw">_ </span>=> <span class="macro">unreachable!</span>(<span class="string">"Tried to get RSA signature for a non-rsa algorithm"</span>), |
| } |
| } |
| |
| <span class="doccomment">/// The actual RSA signing + encoding |
| /// The key needs to be in PKCS8 format |
| /// Taken from Ring doc https://briansmith.org/rustdoc/ring/signature/index.html |
| </span><span class="kw">pub</span>(<span class="kw">crate</span>) <span class="kw">fn </span>sign( |
| alg: <span class="kw-2">&</span><span class="lifetime">'static </span><span class="kw">dyn </span>signature::RsaEncoding, |
| key: <span class="kw-2">&</span>[u8], |
| message: <span class="kw-2">&</span>str, |
| ) -> <span class="prelude-ty">Result</span><String> { |
| <span class="kw">let </span>key_pair = signature::RsaKeyPair::from_der(key).map_err(|<span class="kw">_</span>| ErrorKind::InvalidRsaKey)<span class="question-mark">?</span>; |
| |
| <span class="kw">let </span><span class="kw-2">mut </span>signature = <span class="macro">vec!</span>[<span class="number">0</span>; key_pair.public_modulus_len()]; |
| <span class="kw">let </span>rng = rand::SystemRandom::new(); |
| key_pair |
| .sign(alg, <span class="kw-2">&</span>rng, message.as_bytes(), <span class="kw-2">&mut </span>signature) |
| .map_err(|<span class="kw">_</span>| ErrorKind::InvalidRsaKey)<span class="question-mark">?</span>; |
| |
| <span class="prelude-val">Ok</span>(b64_encode(<span class="kw-2">&</span>signature)) |
| } |
| |
| <span class="doccomment">/// Checks that a signature is valid based on the (n, e) RSA pubkey components |
| </span><span class="kw">pub</span>(<span class="kw">crate</span>) <span class="kw">fn </span>verify_from_components( |
| alg: <span class="kw-2">&</span><span class="lifetime">'static </span>signature::RsaParameters, |
| signature: <span class="kw-2">&</span>str, |
| message: <span class="kw-2">&</span>str, |
| components: (<span class="kw-2">&</span>str, <span class="kw-2">&</span>str), |
| ) -> <span class="prelude-ty">Result</span><bool> { |
| <span class="kw">let </span>signature_bytes = b64_decode(signature)<span class="question-mark">?</span>; |
| <span class="kw">let </span>n = BigUint::from_bytes_be(<span class="kw-2">&</span>b64_decode(components.<span class="number">0</span>)<span class="question-mark">?</span>).to_bytes_be(); |
| <span class="kw">let </span>e = BigUint::from_bytes_be(<span class="kw-2">&</span>b64_decode(components.<span class="number">1</span>)<span class="question-mark">?</span>).to_bytes_be(); |
| <span class="kw">let </span>pubkey = signature::RsaPublicKeyComponents { n, e }; |
| <span class="kw">let </span>res = pubkey.verify(alg, message.as_ref(), <span class="kw-2">&</span>signature_bytes); |
| <span class="prelude-val">Ok</span>(res.is_ok()) |
| } |
| </code></pre></div> |
| </section></div></main><div id="rustdoc-vars" data-root-path="../../../" data-current-crate="jsonwebtoken" data-themes="ayu,dark,light" data-resource-suffix="" data-rustdoc-version="1.66.0-nightly (5c8bff74b 2022-10-21)" ></div></body></html> |
