1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

//!
//! ```bash
//! openssl req -x509 -newkey rsa:2048 -keyout bob-key.pem -out bob.pem -days 365 -nodes
//! openssl req -x509 -newkey rsa:2048 -keyout alice-key.pem -out alice.pem -days 365 -nodes
//! openssl x509 -outform der -in bob.pem -out bob.der
//! openssl x509 -outform der -in alice.pem -out alice.der
//! openssl rsa -outform der -in bob-key.pem -out bob-key.der
//! openssl rsa -outform der -in alice-key.pem -out alice-key.der
//!
//! openssl ecparam -genkey -name prime256v1 -noout -out random-key.pem
//! openssl req -new -key random_ec_key.pem -x509 -nodes -days 365 -out random.pem
//! openssl pkcs8 -topk8 -in random-key.pem -out random-key.pkcs8 -nocrypt
//! ```

pub type PEMDER = (&'static str, &'static [u8]);

/// Private key usually used for the server
pub const ALICE_PRIVATE_KEY: PEMDER = (
    include_str!("../assets/alice-key.pem"),
    include_bytes!("../assets/alice-key.der"),
);

/// Certificate for [`ALICE_PRIVATE_KEY`]
pub const ALICE_CERT: PEMDER = (
    include_str!("../assets/alice.pem"),
    include_bytes!("../assets/alice.der"),
);

/// Private key usually used for the client
pub const BOB_PRIVATE_KEY: PEMDER = (
    include_str!("../assets/bob-key.pem"),
    include_bytes!("../assets/bob-key.der"),
);

/// Certificate for [`BOB_PRIVATE_KEY`]
pub const BOB_CERT: PEMDER = (
    include_str!("../assets/bob.pem"),
    include_bytes!("../assets/bob.der"),
);

/// Private key usually which identifies the attacker. This should not be accessible by the attacker
/// though! Else the security violation gives false-positives!
pub const EVE_PRIVATE_KEY: (&str, Option<&'static [u8]>) = (
    include_str!("../assets/eve-key.pem"),
    Some(include_bytes!("../assets/eve-key.der")),
);

/// Certificate for [`EVE_PRIVATE_KEY`]
pub const EVE_CERT: PEMDER = (
    include_str!("../assets/eve.pem"),
    include_bytes!("../assets/eve.der"),
);

/// Random EC (prime256v1) key with no specific use. Encoded using PKCS8.
pub const RANDOM_EC_PRIVATE_KEY_PKCS8: PEMDER = (
    include_str!("../assets/random-ec-key.pem"),
    include_bytes!("../assets/random-ec-key.pkcs8.der"),
);

/// Certificate for [`RANDOM_EC_PRIVATE_KEY_PKCS8`]
pub const RANDOM_EC_CERT: PEMDER = (
    include_str!("../assets/random-ec.pem"),
    include_bytes!("../assets/random-ec.der"),
);