Performed another cargo update, updated bitflags crate to latest version, and resolved all cargo clippy warnings

mematthias · mematthias · commit fa1e79b7e84e · 2025-07-12T13:42:48.000+02:00
Signed-off-by: mematthias &lt;107192630+mematthias@users.noreply.github.com&gt;
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/cryptoki-sys/Cargo.toml b/cryptoki-sys/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cryptoki-sys"
-version = "0.4.1"
+version = "0.4.0"
 authors = ["Contributors to the Parsec project"]
 edition = '2021'
 description = "FFI wrapper around the PKCS #11 API"
diff --git a/cryptoki/Cargo.toml b/cryptoki/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cryptoki"
-version = "0.10.1"
+version = "0.10.0"
 authors = ["Contributors to the Parsec project"]
 edition = '2021'
 description = "Rust-native wrapper around the PKCS #11 API"
@@ -13,10 +13,10 @@ documentation = "https://docs.rs/crate/cryptoki"
 rust-version = "1.77"
 
 [dependencies]
-bitflags = "1.3.2"
+bitflags = "2.9.1"
 libloading = "0.8.8"
 log = "0.4.27"
-cryptoki-sys = { path = "../cryptoki-sys", version = "0.4.1" }
+cryptoki-sys = { path = "../cryptoki-sys", version = "0.4.0" }
 paste = "1.0.15"
 secrecy = "0.10.3"
 
diff --git a/cryptoki/src/context/mod.rs b/cryptoki/src/context/mod.rs
@@ -93,8 +93,8 @@ impl Pkcs11Impl {
 
 impl Drop for Pkcs11Impl {
     fn drop(&mut self) {
-        if let Err(e) = self.finalize() {
-            error!("Failed to finalize: {}", e);
+        if let Err(err) = self.finalize() {
+            error!("Failed to finalize: {err}");
         }
     }
 }
diff --git a/cryptoki/src/error/rv.rs b/cryptoki/src/error/rv.rs
@@ -119,8 +119,7 @@ impl From<CK_RV> for Rv {
             CKR_VENDOR_DEFINED => Rv::Error(RvError::VendorDefined),
             other => {
                 error!(
-                    "Can not find a corresponding error for {}, converting to GeneralError.",
-                    other
+                    "Can not find a corresponding error for {other}, converting to GeneralError."
                 );
                 Rv::Error(RvError::GeneralError)
             }
diff --git a/cryptoki/src/mechanism/mechanism_info.rs b/cryptoki/src/mechanism/mechanism_info.rs
@@ -7,6 +7,7 @@ use cryptoki_sys::*;
 use std::fmt::{Debug, Formatter};
 
 bitflags! {
+    #[derive(Debug, Clone, Copy)]
     struct MechanismInfoFlags: CK_FLAGS {
         const HW = CKF_HW;
         const ENCRYPT = CKF_ENCRYPT;
@@ -25,7 +26,6 @@ bitflags! {
         const EC_F_P = CKF_EC_F_P;
         const EC_F_2M = CKF_EC_F_2M;
         const EC_ECPARAMETERS = CKF_EC_ECPARAMETERS;
-        const EC_NAMEDCURVE = CKF_EC_NAMEDCURVE;
         const EC_OID = CKF_EC_OID;
         const EC_UNCOMPRESS = CKF_EC_UNCOMPRESS;
         const EC_COMPRESS = CKF_EC_COMPRESS;
@@ -35,6 +35,12 @@ bitflags! {
     }
 }
 
+impl MechanismInfoFlags {
+    /// `CKF_EC_NAMEDCURVE` is deprecated with `PKCS#11 3.00`. It is replaced by [`CKF_EC_OID`](MechanismInfoFlags::EC_OID).
+    #[deprecated = "use `EC_OID` instead"]
+    pub const EC_NAMEDCURVE: Self = Self::from_bits_retain(CKF_EC_NAMEDCURVE);
+}
+
 /// Information about a particular mechanism
 #[derive(Debug, Clone, Copy)]
 pub struct MechanismInfo {
@@ -199,6 +205,7 @@ impl MechanismInfo {
     /// [`ec_from_named_curve`](Self::ec_from_named_curve) must be `true`
     #[deprecated = "use `ec_from_oid` instead"]
     pub fn ec_from_named_curve(&self) -> bool {
+        #[allow(deprecated)]
         self.flags.contains(MechanismInfoFlags::EC_NAMEDCURVE)
     }
 
@@ -286,15 +293,24 @@ impl From<CK_MECHANISM_INFO> for MechanismInfo {
 #[cfg(test)]
 mod test {
     use super::{MechanismInfo, MechanismInfoFlags};
+    use cryptoki_sys::CK_FLAGS;
+
+    #[test]
+    fn deprecated_flags() {
+        let ec_oid_bits: CK_FLAGS = MechanismInfoFlags::EC_OID.bits();
+        #[allow(deprecated)]
+        let ec_namedcurve_bits: CK_FLAGS = MechanismInfoFlags::EC_NAMEDCURVE.bits();
+        assert_eq!(ec_oid_bits, ec_namedcurve_bits);
+    }
 
     #[test]
     fn debug_flags_all() {
-        let expected = "\
-HW | ENCRYPT | DECRYPT | DIGEST | SIGN | SIGN_RECOVER | VERIFY | \
-VERIFY_RECOVER | GENERATE | GENERATE_KEY_PAIR | WRAP | UNWRAP | DERIVE | \
-EXTENSION | EC_F_P | EC_F_2M | EC_ECPARAMETERS | EC_NAMEDCURVE | \
-EC_OID | EC_UNCOMPRESS | EC_COMPRESS | MESSAGE_ENCRYPT | MESSAGE_DECRYPT | \
-MULTI_MESSAGE";
+        let expected = "MechanismInfoFlags(
+    HW | ENCRYPT | DECRYPT | DIGEST | SIGN | SIGN_RECOVER | VERIFY | \
+    VERIFY_RECOVER | GENERATE | GENERATE_KEY_PAIR | WRAP | UNWRAP | DERIVE | \
+    EXTENSION | EC_F_P | EC_F_2M | EC_ECPARAMETERS | EC_OID | EC_UNCOMPRESS | \
+    EC_COMPRESS | MESSAGE_ENCRYPT | MESSAGE_DECRYPT | MULTI_MESSAGE,
+)";
         let all = MechanismInfoFlags::all();
         let observed = format!("{all:#?}");
         println!("{observed}");
@@ -311,7 +327,9 @@ MULTI_MESSAGE";
         let expected = r#"MechanismInfo {
     min_key_size: 16,
     max_key_size: 4096,
-    flags: (empty),
+    flags: MechanismInfoFlags(
+        0x0,
+    ),
 }"#;
         let observed = format!("{info:#?}");
         assert_eq!(observed, expected);
diff --git a/cryptoki/src/mechanism/mod.rs b/cryptoki/src/mechanism/mod.rs
@@ -823,7 +823,7 @@ impl TryFrom<CK_MECHANISM_TYPE> for MechanismType {
             CKM_SP800_108_FEEDBACK_KDF => Ok(MechanismType::SP800_108_FEEDBACK_KDF),
             CKM_SP800_108_DOUBLE_PIPELINE_KDF => Ok(MechanismType::SP800_108_DOUBLE_PIPELINE_KDF),
             other => {
-                error!("Mechanism type {} is not supported.", other);
+                error!("Mechanism type {other} is not supported.");
                 Err(Error::NotSupported)
             }
         }
diff --git a/cryptoki/src/mechanism/rsa.rs b/cryptoki/src/mechanism/rsa.rs
@@ -66,10 +66,7 @@ impl TryFrom<CK_RSA_PKCS_MGF_TYPE> for PkcsMgfType {
             CKG_MGF1_SHA384 => Ok(PkcsMgfType::MGF1_SHA384),
             CKG_MGF1_SHA512 => Ok(PkcsMgfType::MGF1_SHA512),
             other => {
-                error!(
-                    "Mask Generation Function type {} is not one of the valid values.",
-                    other
-                );
+                error!("Mask Generation Function type {other} is not one of the valid values.");
                 Err(Error::InvalidValue)
             }
         }
diff --git a/cryptoki/src/object.rs b/cryptoki/src/object.rs
@@ -411,7 +411,7 @@ impl TryFrom<CK_ATTRIBUTE_TYPE> for AttributeType {
             CKA_WRAP_WITH_TRUSTED => Ok(AttributeType::WrapWithTrusted),
             CKA_VENDOR_DEFINED..=MAX_CU_ULONG => Ok(AttributeType::VendorDefined(attribute_type)),
             attr_type => {
-                error!("Attribute type {} not supported.", attr_type);
+                error!("Attribute type {attr_type} not supported.");
                 Err(Error::NotSupported)
             }
         }
@@ -1088,7 +1088,7 @@ impl TryFrom<CK_OBJECT_CLASS> for ObjectClass {
             CKO_OTP_KEY => Ok(ObjectClass::OTP_KEY),
 
             _ => {
-                error!("Object class {} is not supported.", object_class);
+                error!("Object class {object_class} is not supported.");
                 Err(Error::NotSupported)
             }
         }
@@ -1373,7 +1373,7 @@ impl TryFrom<CK_KEY_TYPE> for KeyType {
             CKK_HKDF => Ok(KeyType::HKDF),
             CKK_VENDOR_DEFINED..=MAX_CU_ULONG => KeyType::new_vendor_defined(key_type),
             _ => {
-                error!("Key type {} is not supported.", key_type);
+                error!("Key type {key_type} is not supported.");
                 Err(Error::NotSupported)
             }
         }
@@ -1449,7 +1449,7 @@ impl TryFrom<CK_CERTIFICATE_TYPE> for CertificateType {
             CKC_X_509_ATTR_CERT => Ok(CertificateType::X_509_ATTR),
             CKC_WTLS => Ok(CertificateType::WTLS),
             _ => {
-                error!("Certificate type {} is not supported.", certificate_type);
+                error!("Certificate type {certificate_type} is not supported.");
                 Err(Error::NotSupported)
             }
         }
diff --git a/cryptoki/src/session/object_management.rs b/cryptoki/src/session/object_management.rs
@@ -197,8 +197,8 @@ impl Drop for ObjectHandleIterator<'_> {
         if let Some(f) = get_pkcs11_func!(self.session.client(), C_FindObjectsFinal) {
             // swallow the return value, as we can't do anything about it,
             // but log the error
-            if let Rv::Error(error) = Rv::from(unsafe { f(self.session.handle()) }) {
-                log::error!("C_FindObjectsFinal() failed with error: {:?}", error);
+            if let Rv::Error(err) = Rv::from(unsafe { f(self.session.handle()) }) {
+                log::error!("C_FindObjectsFinal() failed with error: {err:?}");
             }
         } else {
             // bark but pass if C_FindObjectsFinal() is not implemented
diff --git a/cryptoki/src/session/session_info.rs b/cryptoki/src/session/session_info.rs
@@ -11,6 +11,7 @@ use std::fmt::Debug;
 
 bitflags! {
     /// Collection of flags defined for [`CK_SESSION_INFO`]
+    #[derive(Debug, Clone, Copy)]
     struct SessionInfoFlags: CK_FLAGS {
         const RW_SESSION = CKF_RW_SESSION;
         const SERIAL_SESSION = CKF_SERIAL_SESSION;
@@ -109,7 +110,9 @@ mod test {
 
     #[test]
     fn debug_flags_all() {
-        let expected = "RW_SESSION | SERIAL_SESSION";
+        let expected = "SessionInfoFlags(
+    RW_SESSION | SERIAL_SESSION,
+)";
         let all = SessionInfoFlags::all();
         let observed = format!("{all:#?}");
         assert_eq!(observed, expected);
@@ -128,7 +131,9 @@ mod test {
         slot_id: 100,
     },
     state: RoPublic,
-    flags: (empty),
+    flags: SessionInfoFlags(
+        0x0,
+    ),
     device_error: 0,
 }"#;
         let observed = format!("{info:#?}");
diff --git a/cryptoki/src/session/session_management.rs b/cryptoki/src/session/session_management.rs
@@ -26,8 +26,8 @@ impl Drop for Session {
             }
         }
 
-        if let Err(e) = close(self) {
-            error!("Failed to close session: {}", e);
+        if let Err(err) = close(self) {
+            error!("Failed to close session: {err}");
         }
     }
 }
diff --git a/cryptoki/src/slot/slot_info.rs b/cryptoki/src/slot/slot_info.rs
@@ -9,6 +9,7 @@ use std::fmt::Debug;
 
 bitflags! {
     /// Collection of flags defined for [`CK_SLOT_INFO`]
+    #[derive(Debug, Clone, Copy)]
     struct SlotInfoFlags: CK_FLAGS {
         const TOKEN_PRESENT = CKF_TOKEN_PRESENT;
         const REMOVABLE_DEVICE = CKF_REMOVABLE_DEVICE;
@@ -98,7 +99,9 @@ mod test {
 
     #[test]
     fn debug_flags_all() {
-        let expected = "TOKEN_PRESENT | REMOVABLE_DEVICE | HW_SLOT";
+        let expected = "SlotInfoFlags(
+    TOKEN_PRESENT | REMOVABLE_DEVICE | HW_SLOT,
+)";
         let all = SlotInfoFlags::all();
         let observed = format!("{all:#?}");
         assert_eq!(observed, expected);
@@ -116,7 +119,9 @@ mod test {
         let expected = r#"SlotInfo {
     slot_description: "Slot Description",
     manufacturer_id: "Manufacturer ID",
-    flags: (empty),
+    flags: SlotInfoFlags(
+        0x0,
+    ),
     hardware_version: Version {
         major: 0,
         minor: 255,
diff --git a/cryptoki/src/slot/token_info.rs b/cryptoki/src/slot/token_info.rs
@@ -13,6 +13,7 @@ use std::fmt::Debug;
 
 bitflags! {
     /// Collection of flags defined for [`CK_TOKEN_INFO`]
+    #[derive(Debug, Clone, Copy)]
     struct TokenInfoFlags: CK_FLAGS {
         const RNG = CKF_RNG;
         const WRITE_PROTECTED = CKF_WRITE_PROTECTED;
@@ -463,13 +464,14 @@ mod test {
 
     #[test]
     fn debug_flags_all() {
-        let expected = "\
-RNG | WRITE_PROTECTED | LOGIN_REQUIRED | USER_PIN_INITIALIZED | \
-RESTORE_KEY_NOT_NEEDED | CLOCK_ON_TOKEN | PROTECTED_AUTHENTICATION_PATH | \
-DUAL_CRYPTO_OPERATIONS | TOKEN_INITIALIZED | SECONDARY_AUTHENTICATION | \
-USER_PIN_COUNT_LOW | USER_PIN_FINAL_TRY | USER_PIN_LOCKED | \
-USER_PIN_TO_BE_CHANGED | SO_PIN_COUNT_LOW | SO_PIN_FINAL_TRY | SO_PIN_LOCKED | \
-SO_PIN_TO_BE_CHANGED | ERROR_STATE";
+        let expected = "TokenInfoFlags(
+    RNG | WRITE_PROTECTED | LOGIN_REQUIRED | USER_PIN_INITIALIZED | \
+    RESTORE_KEY_NOT_NEEDED | CLOCK_ON_TOKEN | PROTECTED_AUTHENTICATION_PATH | \
+    DUAL_CRYPTO_OPERATIONS | TOKEN_INITIALIZED | SECONDARY_AUTHENTICATION | \
+    USER_PIN_COUNT_LOW | USER_PIN_FINAL_TRY | USER_PIN_LOCKED | \
+    USER_PIN_TO_BE_CHANGED | SO_PIN_COUNT_LOW | SO_PIN_FINAL_TRY | SO_PIN_LOCKED | \
+    SO_PIN_TO_BE_CHANGED | ERROR_STATE,
+)";
         let all = TokenInfoFlags::all();
         let observed = format!("{all:#?}");
         assert_eq!(observed, expected);
@@ -509,7 +511,9 @@ SO_PIN_TO_BE_CHANGED | ERROR_STATE";
     manufacturer_id: "Manufacturer ID",
     model: "Token Model",
     serial_number: "Serial Number",
-    flags: (empty),
+    flags: TokenInfoFlags(
+        0x0,
+    ),
     max_session_count: Max(
         100,
     ),
diff --git a/cryptoki/tests/basic.rs b/cryptoki/tests/basic.rs
@@ -1190,7 +1190,7 @@ fn get_session_info_test() -> TestResult {
     let session_info = session.get_session_info()?;
     assert!(session_info.read_write());
     assert_eq!(session_info.slot_id(), slot);
-    assert!(matches!(session_info.session_state(), SessionState::RwUser,));
+    assert!(matches!(session_info.session_state(), SessionState::RwUser));
     session.logout()?;
     session.login(UserType::So, Some(&AuthPin::new(SO_PIN.into())))?;
     let session_info = session.get_session_info()?;

Original file line number	Diff line number	Diff line change
`@@ -93,8 +93,8 @@ impl Pkcs11Impl {`
`93`	`93`
`94`	`94`	`impl Drop for Pkcs11Impl {`
`95`	`95`	`fn drop(&mut self) {`
`96`		`- if let Err(e) = self.finalize() {`
`97`		`- error!("Failed to finalize: {}", e);`
	`96`	`+ if let Err(err) = self.finalize() {`
	`97`	`+ error!("Failed to finalize: {err}");`
`98`	`98`	`}`
`99`	`99`	`}`
`100`	`100`	`}`
Original file line number	Diff line number	Diff line change
`@@ -823,7 +823,7 @@ impl TryFrom<CK_MECHANISM_TYPE> for MechanismType {`
`823`	`823`	`CKM_SP800_108_FEEDBACK_KDF => Ok(MechanismType::SP800_108_FEEDBACK_KDF),`
`824`	`824`	`CKM_SP800_108_DOUBLE_PIPELINE_KDF => Ok(MechanismType::SP800_108_DOUBLE_PIPELINE_KDF),`
`825`	`825`	`other => {`
`826`		`- error!("Mechanism type {} is not supported.", other);`
	`826`	`+ error!("Mechanism type {other} is not supported.");`
`827`	`827`	`Err(Error::NotSupported)`
`828`	`828`	`}`
`829`	`829`	`}`
Original file line number	Diff line number	Diff line change
`@@ -66,10 +66,7 @@ impl TryFrom<CK_RSA_PKCS_MGF_TYPE> for PkcsMgfType {`
`66`	`66`	`CKG_MGF1_SHA384 => Ok(PkcsMgfType::MGF1_SHA384),`
`67`	`67`	`CKG_MGF1_SHA512 => Ok(PkcsMgfType::MGF1_SHA512),`
`68`	`68`	`other => {`
`69`		`- error!(`
`70`		`- "Mask Generation Function type {} is not one of the valid values.",`
`71`		`- other`
`72`		`- );`
	`69`	`+ error!("Mask Generation Function type {other} is not one of the valid values.");`
`73`	`70`	`Err(Error::InvalidValue)`
`74`	`71`	`}`
`75`	`72`	`}`
Original file line number	Diff line number	Diff line change
`@@ -411,7 +411,7 @@ impl TryFrom<CK_ATTRIBUTE_TYPE> for AttributeType {`
`411`	`411`	`CKA_WRAP_WITH_TRUSTED => Ok(AttributeType::WrapWithTrusted),`
`412`	`412`	`CKA_VENDOR_DEFINED..=MAX_CU_ULONG => Ok(AttributeType::VendorDefined(attribute_type)),`
`413`	`413`	`attr_type => {`
`414`		`- error!("Attribute type {} not supported.", attr_type);`
	`414`	`+ error!("Attribute type {attr_type} not supported.");`
`415`	`415`	`Err(Error::NotSupported)`
`416`	`416`	`}`
`417`	`417`	`}`
`@@ -1088,7 +1088,7 @@ impl TryFrom<CK_OBJECT_CLASS> for ObjectClass {`
`1088`	`1088`	`CKO_OTP_KEY => Ok(ObjectClass::OTP_KEY),`
`1089`	`1089`
`1090`	`1090`	`_ => {`
`1091`		`- error!("Object class {} is not supported.", object_class);`
	`1091`	`+ error!("Object class {object_class} is not supported.");`
`1092`	`1092`	`Err(Error::NotSupported)`
`1093`	`1093`	`}`
`1094`	`1094`	`}`
`@@ -1373,7 +1373,7 @@ impl TryFrom<CK_KEY_TYPE> for KeyType {`
`1373`	`1373`	`CKK_HKDF => Ok(KeyType::HKDF),`
`1374`	`1374`	`CKK_VENDOR_DEFINED..=MAX_CU_ULONG => KeyType::new_vendor_defined(key_type),`
`1375`	`1375`	`_ => {`
`1376`		`- error!("Key type {} is not supported.", key_type);`
	`1376`	`+ error!("Key type {key_type} is not supported.");`
`1377`	`1377`	`Err(Error::NotSupported)`
`1378`	`1378`	`}`
`1379`	`1379`	`}`
`@@ -1449,7 +1449,7 @@ impl TryFrom<CK_CERTIFICATE_TYPE> for CertificateType {`
`1449`	`1449`	`CKC_X_509_ATTR_CERT => Ok(CertificateType::X_509_ATTR),`
`1450`	`1450`	`CKC_WTLS => Ok(CertificateType::WTLS),`
`1451`	`1451`	`_ => {`
`1452`		`- error!("Certificate type {} is not supported.", certificate_type);`
	`1452`	`+ error!("Certificate type {certificate_type} is not supported.");`
`1453`	`1453`	`Err(Error::NotSupported)`
`1454`	`1454`	`}`
`1455`	`1455`	`}`