cms: ECC KeyAgreementRecipientInfo initial support

Cargo.toml

@@ -58,3 +58,11 @@ tls_codec_derive = { path = "./tls_codec/derive" }
 x509-tsp = { path = "./x509-tsp" }
 x509-cert = { path = "./x509-cert" }
 x509-ocsp = { path = "./x509-ocsp" }
+
+# https://github.com/RustCrypto/key-wraps/pull/34
+# https://github.com/RustCrypto/key-wraps/pull/35
+aes-kw = { git = "https://github.com/RustCrypto/key-wraps.git" }
+
+# https://github.com/RustCrypto/KDFs/pull/102
+ansi-x963-kdf = { git = "https://github.com/RustCrypto/KDFs.git" }
+

cms/Cargo.toml

@@ -22,9 +22,12 @@ x509-cert = { version = "=0.3.0-pre.0", default-features = false }
 
 # optional dependencies
 aes = { version = "=0.9.0-pre.2", optional = true }
+aes-kw = { version ="=0.3.0-pre", optional = true }
+ansi-x963-kdf = { version = "0.1.0", optional = true }
 async-signature = { version = "=0.6.0-pre.4", features = ["digest", "rand_core"], optional = true }
 cbc = { version = "=0.2.0-pre.2", optional = true }
 cipher = { version = "=0.5.0-pre.7", features = ["alloc", "block-padding", "rand_core"], optional = true }
+elliptic-curve = { version = "=0.14.0-rc.1", optional = true }
 rsa = { version = "=0.10.0-pre.3", optional = true }
 sha1 = { version = "=0.11.0-pre.4", optional = true }
 sha2 = { version = "=0.11.0-pre.4", optional = true }
@@ -50,9 +53,13 @@ x509-cert = { version = "=0.3.0-pre.0", features = ["pem"] }
 std = ["der/std", "spki/std"]
 builder = [
     "dep:aes",
+    "dep:aes-kw",
+    "dep:ansi-x963-kdf",
     "dep:async-signature",
     "dep:cbc",
     "dep:cipher",
+    "elliptic-curve/ecdh",
+    "elliptic-curve/pkcs8",
     "dep:rsa",
     "dep:sha1",
     "dep:sha2",

cms/src/builder.rs

@@ -47,6 +47,14 @@ use x509_cert::attr::{Attribute, AttributeValue, Attributes};
 use x509_cert::builder::{self, AsyncBuilder, Builder};
 use zeroize::Zeroize;
 
+// Modules
+mod kari;
+mod utils;
+
+// Exports
+pub use kari::{EcKeyEncryptionInfo, KeyAgreeRecipientInfoBuilder, KeyAgreementAlgorithm};
+pub use utils::kw::KeyWrapAlgorithm;
+
 /// Error type
 #[derive(Debug)]
 #[non_exhaustive]
@@ -695,64 +703,6 @@ where
     }
 }
 
-/// Builds a `KeyAgreeRecipientInfo` according to RFC 5652 § 6.
-/// This type uses key agreement:  the recipient's public key and the sender's
-/// private key are used to generate a pairwise symmetric key, then
-/// the content-encryption key is encrypted in the pairwise symmetric key.
-pub struct KeyAgreeRecipientInfoBuilder<R> {
-    /// A CHOICE with three alternatives specifying the sender's key agreement public key.
-    pub originator: OriginatorIdentifierOrKey,
-    /// Optional information which helps generating different keys every time.
-    pub ukm: Option<UserKeyingMaterial>,
-    /// Encryption algorithm to be used for key encryption
-    pub key_enc_alg: AlgorithmIdentifierOwned,
-    _rng: PhantomData<R>,
-}
-
-impl<R> KeyAgreeRecipientInfoBuilder<R> {
-    /// Creates a `KeyAgreeRecipientInfoBuilder`
-    pub fn new(
-        originator: OriginatorIdentifierOrKey,
-        ukm: Option<UserKeyingMaterial>,
-        key_enc_alg: AlgorithmIdentifierOwned,
-    ) -> Result<Self> {
-        Ok(KeyAgreeRecipientInfoBuilder {
-            originator,
-            ukm,
-            key_enc_alg,
-            _rng: PhantomData,
-        })
-    }
-}
-
-impl<R> RecipientInfoBuilder for KeyAgreeRecipientInfoBuilder<R>
-where
-    R: CryptoRngCore,
-{
-    type Rng = R;
-
-    /// Returns the RecipientInfoType
-    fn recipient_info_type(&self) -> RecipientInfoType {
-        RecipientInfoType::Kari
-    }
-
-    /// Returns the `CMSVersion` for this `RecipientInfo`
-    fn recipient_info_version(&self) -> CmsVersion {
-        CmsVersion::V3
-    }
-
-    /// Build a `KeyAgreeRecipientInfoBuilder`. See RFC 5652 § 6.2.1
-    fn build_with_rng(
-        &mut self,
-        _content_encryption_key: &[u8],
-        _rng: &mut Self::Rng,
-    ) -> Result<RecipientInfo> {
-        Err(Error::Builder(String::from(
-            "Building KeyAgreeRecipientInfo is not implemented, yet.",
-        )))
-    }
-}
-
 /// Builds a `KekRecipientInfo` according to RFC 5652 § 6.
 /// Uses symmetric key-encryption keys: the content-encryption key is
 /// encrypted in a previously distributed symmetric key-encryption key.