Refactor ec key import

.github/workflows/codecov.yml

@@ -0,0 +1,32 @@
+name: Code coverage check
+
+on:
+  push:
+
+env:
+  BUILDER_VERSION: v0.9.74
+  BUILDER_SOURCE: releases
+  BUILDER_HOST: https://d19elf31gohf1l.cloudfront.net
+  PACKAGE_NAME: aws-c-cal
+  RUN: ${{ github.run_id }}-${{ github.run_number }}
+  CRT_CI_ROLE: ${{ secrets.CRT_CI_ROLE_ARN }}
+  AWS_DEFAULT_REGION: us-east-1
+
+permissions:
+  id-token: write # This is required for requesting the JWT
+
+jobs:
+  codecov-linux:
+    runs-on: ubuntu-24.04
+    steps:
+    - uses: aws-actions/configure-aws-credentials@v4
+      with:
+        role-to-assume: ${{ env.CRT_CI_ROLE }}
+        aws-region: ${{ env.AWS_DEFAULT_REGION }}
+    - name: Checkout Sources
+      uses: actions/checkout@v4
+    - name: Build ${{ env.PACKAGE_NAME }} + consumers
+      run: |
+        python3 -c "from urllib.request import urlretrieve; urlretrieve('${{ env.BUILDER_HOST }}/${{ env.BUILDER_SOURCE }}/${{ env.BUILDER_VERSION }}/builder.pyz?run=${{ env.RUN }}', 'builder')"
+        chmod a+x builder
+        ./builder build -p ${{ env.PACKAGE_NAME }} --compiler=gcc --cmake-extra=-DASSERT_LOCK_HELD=ON --coverage

include/aws/cal/private/der.h

@@ -177,6 +177,12 @@ AWS_CAL_API void aws_der_decoder_destroy(struct aws_der_decoder *decoder);
  */
 AWS_CAL_API bool aws_der_decoder_next(struct aws_der_decoder *decoder);
 
+/**
+ * Resets der decoder to the start.
+ * @param decoder The decoder to reset
+ */
+AWS_CAL_API void aws_der_decoder_reset(struct aws_der_decoder *decoder);
+
 /**
  * The type of the current TLV
  * @param decoder The decoder to inspect

include/aws/cal/private/ecc.h

@@ -13,10 +13,16 @@ struct aws_der_decoder;
 
 AWS_EXTERN_C_BEGIN
 
+/*
+ * Helper to load keypair from various ASN1 format.
+ * Note: there are several formats in the wild: Sec1 and PKCS8 for private key and X509 for public key.
+ * This function attempts to automatically recognize the format and load from it.
+ * Depending on data available in the asn, either private or public key might remain uninitialized.
+ */
 AWS_CAL_API int aws_der_decoder_load_ecc_key_pair(
     struct aws_der_decoder *decoder,
-    struct aws_byte_cursor *out_public_x_coor,
-    struct aws_byte_cursor *out_public_y_coor,
+    struct aws_byte_cursor *out_public_x_coord,
+    struct aws_byte_cursor *out_public_y_coord,
     struct aws_byte_cursor *out_private_d,
     enum aws_ecc_curve_name *out_curve_name);
 

source/der.c

@@ -467,6 +467,10 @@ bool aws_der_decoder_next(struct aws_der_decoder *decoder) {
     return (++decoder->tlv_idx < (int)decoder->tlvs.length);
 }
 
+void aws_der_decoder_reset(struct aws_der_decoder *decoder) {
+    decoder->tlv_idx = 0;
+}
+
 static struct der_tlv s_decoder_tlv(struct aws_der_decoder *decoder) {
     AWS_FATAL_ASSERT(decoder->tlv_idx < (int)decoder->tlvs.length);
     struct der_tlv tlv = {0};