kaidokert / krabitls-rs / 28215622615

85%

Build Type

push

github

Committed by web-flow

Commit Message

refactor(rsa): centralize PKCS#1/PSS cert-sig dispatch; collapse matches_cert (#65)

The `match alg { Pkcs1 => verify(RsaPkcs1Sig) | Pss => verify(RsaPssSig) }`
block — with the rsa_pss_only gate on the PKCS#1 arm — was copy-pasted at three
sites (server-flight self-sig, chain-link, pin/self-signed). Extract one
`verify_cert_sig` helper in traits/rsa_verify.rs so each site is a single call
and the rsa_pss_only cfg lives in one place. Also collapse the two
`PreparedVerifier::matches_cert` impls (rsa / not-rsa) into one with cfg-gated
arms — the not-rsa leaf match is exhaustive. non-test cfgs 254 -> 246.

backends/rsa_verify.rs (the Bug-2 file) is untouched; M3 RSA still ACCEPTs
(.text +12 B, noise).

Coverage Stats

13 of 18 new or added lines in 4 files covered. (72.22%)

1 existing line in 1 file now uncovered.

3690 of 4550 relevant lines covered (81.1%)

180.91 hits per line