[CryptoAuthLib provider] Support for psa_sign_message and psa_verify_message.

Cargo.toml

@@ -15,7 +15,7 @@ name = "parsec"
 path = "src/bin/main.rs"
 
 [dependencies]
-parsec-interface = "0.24.0"
+parsec-interface = { git = "https://github.com/parallaxsecond/parsec-interface-rs.git", rev = "a7f3c7e246a64b9474ca3a0a1365b6deee74e7a4"}
 rand = { version = "0.8.3", features = ["small_rng"], optional = true }
 base64 = "0.13.0"
 uuid = "0.8.2"
@@ -26,7 +26,7 @@ toml = "0.5.8"
 serde = { version = "1.0.123", features = ["derive"] }
 env_logger = "0.8.3"
 log = { version = "0.4.14", features = ["serde"] }
-cryptoki = { git = "https://github.com/parallaxsecond/rust-cryptoki", rev = "850b826b631df354553bf62757f35cd394b3dfff", optional = true, features = ["psa-crypto-conversions"] }
+cryptoki = { git = "https://github.com/parallaxsecond/rust-cryptoki", rev = "0345c8caa40fd9a64012f053721aa3de52ad3e3e", optional = true, features = ["psa-crypto-conversions"] }
 picky-asn1-der = { version = "0.2.4", optional = true }
 picky-asn1 = { version = "0.3.1", optional = true }
 tss-esapi = { git = "https://github.com/parallaxsecond/rust-tss-esapi", rev = "56c487a101dc85e17560416d71f0fc2eb81739a6", optional = true }
@@ -35,7 +35,7 @@ structopt = "0.3.21"
 derivative = "2.2.0"
 version = "3.0.0"
 hex = { version = "0.4.2", optional = true }
-psa-crypto = { version = "0.8.0", default-features = false, features = ["operations"], optional = true }
+psa-crypto = { git = "https://github.com/parallaxsecond/rust-psa-crypto.git", rev = "15ba7cd048923ae7193b268df51c004e8ceff48e", default-features = false, features = ["operations"], optional = true }
 zeroize = { version = "1.2.0", features = ["zeroize_derive"] }
 picky-asn1-x509 = { version = "0.4.0", optional = true }
 users = "0.11.0"

e2e_tests/Cargo.toml

@@ -11,7 +11,7 @@ publish = false
 
 [dependencies]
 serde = { version = "1.0.123", features = ["derive"] }
-parsec-client = { version = "0.12.0", features = ["testing"] }
+parsec-client = { git = "https://github.com/parallaxsecond/parsec-client-rust.git", rev = "06b921c4bfc6cd0c2aad91ffacb6e0ea1cda1fd7", features = ["testing"]}
 log = "0.4.14"
 # Compatible version with crate rsa
 rand = "0.7.3"

e2e_tests/src/lib.rs

@@ -22,7 +22,7 @@ use parsec_client::core::interface::operations::psa_algorithm::{
 use parsec_client::core::interface::operations::psa_key_attributes::{
     Attributes, EccFamily, Lifetime, Policy, Type, UsageFlags,
 };
-use parsec_client::core::interface::requests::{Opcode, ProviderID, ResponseStatus, Result};
+use parsec_client::core::interface::requests::{Opcode, ProviderId, ResponseStatus, Result};
 use parsec_client::core::ipc_handler::unix_socket;
 use parsec_client::error::Error;
 use std::collections::HashSet;
@@ -35,7 +35,7 @@ const TEST_TIMEOUT: Duration = Duration::from_secs(60);
 #[derive(Debug)]
 pub struct TestClient {
     basic_client: BasicClient,
-    created_keys: Option<HashSet<(String, Option<String>, ProviderID)>>,
+    created_keys: Option<HashSet<(String, Option<String>, ProviderId)>>,
 }
 
 fn convert_error(err: Error) -> ResponseStatus {
@@ -81,12 +81,12 @@ impl TestClient {
     }
 
     /// Manually set the provider to execute the requests.
-    pub fn set_provider(&mut self, provider: ProviderID) {
+    pub fn set_provider(&mut self, provider: ProviderId) {
         self.basic_client.set_implicit_provider(provider);
     }
 
     /// Get client provider
-    pub fn provider(&self) -> ProviderID {
+    pub fn provider(&self) -> ProviderId {
         self.basic_client.implicit_provider()
     }
 
@@ -666,7 +666,7 @@ impl TestClient {
                     .into(),
                 },
             },
-            data
+            data,
         )
     }
 
@@ -734,7 +734,7 @@ impl TestClient {
         )
     }
 
-    /// Verifies a signature.
+    /// Verifies a hash signature.
     pub fn verify(
         &mut self,
         key_name: String,
@@ -747,7 +747,7 @@ impl TestClient {
             .map_err(convert_error)
     }
 
-    /// Verifies a signature made with an RSA key.
+    /// Verifies a hash signature made with an RSA key.
     pub fn verify_with_rsa_sha256(
         &mut self,
         key_name: String,
@@ -764,7 +764,7 @@ impl TestClient {
         )
     }
 
-    /// Verifies a signature made with an ECDSA key.
+    /// Verifies a hash signature made with an ECDSA key.
     pub fn verify_with_ecdsa_sha256(
         &mut self,
         key_name: String,
@@ -781,6 +781,63 @@ impl TestClient {
         )
     }
 
+    /// Signs a message with a key.
+    pub fn sign_msg(
+        &mut self,
+        key_name: String,
+        alg: AsymmetricSignature,
+        msg: Vec<u8>,
+    ) -> Result<Vec<u8>> {
+        self.basic_client
+            .psa_sign_message(key_name, &msg, alg)
+            .map_err(convert_error)
+    }
+
+    /// Signs a message with an ECDSA key.
+    pub fn sign_msg_with_ecdsa_sha256(
+        &mut self,
+        key_name: String,
+        msg: Vec<u8>,
+    ) -> Result<Vec<u8>> {
+        self.sign_msg(
+            key_name,
+            AsymmetricSignature::Ecdsa {
+                hash_alg: Hash::Sha256.into(),
+            },
+            msg,
+        )
+    }
+
+    /// Verifies a message signature.
+    pub fn verify_msg(
+        &mut self,
+        key_name: String,
+        alg: AsymmetricSignature,
+        msg: Vec<u8>,
+        signature: Vec<u8>,
+    ) -> Result<()> {
+        self.basic_client
+            .psa_verify_message(key_name, &msg, alg, &signature)
+            .map_err(convert_error)
+    }
+
+    /// Verifies a message signature made with an ECDSA key and SHA256 hash.
+    pub fn verify_msg_with_ecdsa_sha256(
+        &mut self,
+        key_name: String,
+        msg: Vec<u8>,
+        signature: Vec<u8>,
+    ) -> Result<()> {
+        self.verify_msg(
+            key_name,
+            AsymmetricSignature::Ecdsa {
+                hash_alg: Hash::Sha256.into(),
+            },
+            msg,
+            signature,
+        )
+    }
+
     pub fn asymmetric_encrypt_message_with_rsapkcs1v15(
         &mut self,
         key_name: String,
@@ -959,7 +1016,7 @@ impl TestClient {
     }
 
     /// Lists the opcodes available for one provider to execute.
-    pub fn list_opcodes(&mut self, provider_id: ProviderID) -> Result<HashSet<Opcode>> {
+    pub fn list_opcodes(&mut self, provider_id: ProviderId) -> Result<HashSet<Opcode>> {
         self.basic_client
             .list_opcodes(provider_id)
             .map_err(convert_error)