1 unstable release
0.1.0 | Feb 17, 2024 |
---|
#2595 in Algorithms
76 downloads per month
32KB
605 lines
ssri2
ssri2
, short for Standard Subresource
Integrity, is a Rust library for parsing, manipulating, serializing,
generating, and verifying Subresource Integrity
hashes.
Example
Parse a string as Integrity
to convert it to a struct:
use ssri2::Integrity;
let source = "sha256-uU0nuZNNPgilLlLX2n2r+sSE7+N6U4DukIj3rOLvzek=";
let parsed: Integrity = source.parse().unwrap();
assert_eq!(parsed.to_string(), source)
Generating a new hash from file data:
use ssri2::Integrity;
// By default, generates Integrity as Sha256.
// Use IntegrityOpts to pick the algorithm yourself.
let sri = Integrity::from(b"hello world");
assert_eq!(sri.to_string(), "sha256-uU0nuZNNPgilLlLX2n2r+sSE7+N6U4DukIj3rOLvzek=");
Verifying data against an SRI:
use ssri2::{Integrity, Algorithm};
let sri = Integrity::from(b"hello world");
assert_eq!(sri.check(b"hello world").unwrap(), Algorithm::Sha256);
You can also use IntegrityOpts
and IntegrityChecker
to generate
and check subresource integrity, respectively. These allow things like multiple algorithms, and
incremental/streamed data input.
Documentation
Features
- Parses and stringifies Subresource Integrity strings.
- Generates SRI strings from raw data.
- Strict standard compliance.
- Multiple entries for the same algorithm.
License
This project is licensed under the Apache-2.0 License.
Dependencies
~1–1.7MB
~38K SLoC