kaidokert / krabiecdsa-rs / 31302938776

93%

push

github

Ephemeral ECDH (P-256/P-384/secp256k1) for TLS key_share (#38)

* Add ephemeral ECDH (P-256/P-384/secp256k1)

krabitls needs NIST-curve ECDHE for the Azure IoT TLS key_share, which
the verify+sign surface didn't cover and krabitls can't build itself (all
the curve math is private here). Add a `pub mod ecdh` in RustCrypto's
`elliptic_curve::ecdh` shape: `EphemeralSecret` (random scalar via
`TryCryptoRng`, fallible/no-panic), `.public_key()` = SEC1 `d·G`, and
`.diffie_hellman(peer_sec1) -> Option<SharedSecret>` = raw affine X (no
KDF; TLS does HKDF). Secret/shared bytes are zeroized.

97 of 102 new or added lines in 1 file covered. (95.1%)

912 of 949 relevant lines covered (96.1%)

18236.95 hits per line