hatter/swift-secure-enclave-tool-rs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: updates

Browse Source
This commit is contained in:
Hatter Jiang
2025-03-23 23:34:34 +08:00
parent cb2ac74ce7
commit e9086a8e8f
2 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
examples/private_ecdh.rs
View File

@@ -5,7 +5,7 @@ use swift_secure_enclave_tool_rs::private_key_ecdh;
fn main() { fn main() {
let args = std::env::args().collect::<Vec<_>>(); let args = std::env::args().collect::<Vec<_>>();
let private_key_representation = STANDARD.decode(&args[1]).unwrap(); let private_key_representation = STANDARD.decode(&args[1]).unwrap();
let epk = hex::decode(&args[2]).unwrap(); let epk = STANDARD.decode(&args[2]).unwrap();
let shared_secret = private_key_ecdh(&private_key_representation, &epk).unwrap(); let shared_secret = private_key_ecdh(&private_key_representation, &epk).unwrap();

11
src/lib.rs
View File

@@ -1,6 +1,6 @@
use base64::Engine;
use base64::engine::general_purpose::STANDARD; use base64::engine::general_purpose::STANDARD;
use rust_util::{XResult, debugging, opt_result, simple_error}; use base64::Engine;
use rust_util::{debugging, opt_result, simple_error, XResult};
use std::process::{Command, Output}; use std::process::{Command, Output};
const SWIFT_SECURE_ENCLAVE_TOOL_CMD: &str = "swift-secure-enclave-tool"; const SWIFT_SECURE_ENCLAVE_TOOL_CMD: &str = "swift-secure-enclave-tool";
@@ -76,6 +76,7 @@ pub fn private_key_ecdsa_sign(
} }
} }
// ephemera_public_key MUST be DER format public key
pub fn private_key_ecdh( pub fn private_key_ecdh(
private_key_representation: &[u8], private_key_representation: &[u8],
ephemera_public_key: &[u8], ephemera_public_key: &[u8],
@@ -86,9 +87,9 @@ pub fn private_key_ecdh(
cmd.arg(&STANDARD.encode(ephemera_public_key)); cmd.arg(&STANDARD.encode(ephemera_public_key));
let cmd_stdout = run_command_stdout(cmd)?; let cmd_stdout = run_command_stdout(cmd)?;
if cmd_stdout.starts_with("ok:") { if cmd_stdout.starts_with("ok:SharedSecret:") {
let result = cmd_stdout.chars().skip(3).collect::<String>(); let result = cmd_stdout.chars().skip(16).collect::<String>();
Ok(STANDARD.decode(result)?) Ok(hex::decode(result.trim())?)
} else { } else {
simple_error!("Invalid compute_p256_ecdh result: {}", cmd_stdout) simple_error!("Invalid compute_p256_ecdh result: {}", cmd_stdout)
} }