Merge branch 'main' into dependabot/cargo/sec1-0.8.1

Author: thieman

.github/workflows/ci.yml

@@ -31,9 +31,28 @@ jobs:
       - name: Check third-party license inventory
         run: make check-licenses
 
+  license-policy:
+    name: License Policy
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - name: Install toolchain
+        uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1
+        with:
+          toolchain: stable
+      - name: Cache build artifacts
+        uses: Swatinem/rust-cache@42dc69e1aa15d09112580998cf2ef0119e2e91ae # v2
+      - name: Check dependency license policy
+        run: make check-deny
+
   test:
-    name: Test
-    runs-on: windows-2022
+    name: Test (${{ matrix.runner }})
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        runner: [windows-2022, windows-2025]
     steps:
       - name: Check out repository
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

Makefile

@@ -6,8 +6,10 @@
 .DEFAULT_GOAL := help
 
 export CARGO_TOOL_VERSION_dd-rust-license-tool ?= 1.0.6
+export CARGO_TOOL_VERSION_cargo-deny ?= 0.18.9
 export CARGO_BIN_DIR := $(shell echo "$${HOME}/.cargo/bin")
 DD_RUST_LICENSE_TOOL := $(CARGO_BIN_DIR)/dd-rust-license-tool
+CARGO_DENY := $(CARGO_BIN_DIR)/cargo-deny
 
 .PHONY: help
 help:
@@ -17,6 +19,7 @@ help:
 	@printf "  %-20s %s\n" "test" "Run the test suite"
 	@printf "  %-20s %s\n" "sync-licenses" "Regenerate LICENSE-3rdparty.csv"
 	@printf "  %-20s %s\n" "check-licenses" "Verify LICENSE-3rdparty.csv is up to date"
+	@printf "  %-20s %s\n" "check-deny" "Check dependency licenses with cargo-deny"
 
 .PHONY: cargo-install-dd-rust-license-tool
 cargo-install-dd-rust-license-tool:
@@ -25,6 +28,13 @@ cargo-install-dd-rust-license-tool:
 		cargo install "dd-rust-license-tool@$(CARGO_TOOL_VERSION_dd-rust-license-tool)"; \
 	fi
 
+.PHONY: cargo-install-cargo-deny
+cargo-install-cargo-deny:
+	@if [ ! -x "$(CARGO_DENY)" ] || ! "$(CARGO_DENY)" --version 2>/dev/null | grep -q "$(CARGO_TOOL_VERSION_cargo-deny)"; then \
+		echo "[*] Installing cargo-deny $(CARGO_TOOL_VERSION_cargo-deny)..."; \
+		cargo install "cargo-deny@$(CARGO_TOOL_VERSION_cargo-deny)"; \
+	fi
+
 .PHONY: fmt
 fmt:
 	@echo "[*] Checking Rust source code formatting..."
@@ -49,3 +59,8 @@ sync-licenses: cargo-install-dd-rust-license-tool
 check-licenses: cargo-install-dd-rust-license-tool
 	@echo "[*] Checking if third-party license file is up to date..."
 	@"$(DD_RUST_LICENSE_TOOL)" check
+
+.PHONY: check-deny
+check-deny: cargo-install-cargo-deny
+	@echo "[*] Checking dependency licenses with cargo-deny..."
+	@"$(CARGO_DENY)" check licenses

deny.toml

@@ -0,0 +1,23 @@
+# Unless explicitly stated otherwise all files in this repository are licensed under the MIT License.
+#
+# This product includes software developed at Datadog (https://www.datadoghq.com/)
+# Copyright 2026 Datadog, Inc.
+
+[licenses]
+version = 2
+allow = [
+  "Apache-2.0",
+  "Apache-2.0 WITH LLVM-exception",
+  "BSD-3-Clause",
+  "ISC",
+  "MIT",
+  "MIT-0",
+  "Unicode-3.0",
+]
+
+[bans]
+multiple-versions = "allow"
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"

src/kx.rs

@@ -3,6 +3,7 @@
 // This product includes software developed at Datadog (https://www.datadoghq.com/)
 // Copyright 2026 Datadog, Inc.
 
+use once_cell::sync::Lazy;
 use rustls::crypto::{ActiveKeyExchange, SharedSecret, SupportedKxGroup};
 use rustls::{Error, NamedGroup};
 use windows::core::Owned;
@@ -26,6 +27,13 @@ const MAX_SECRET_SIZE: usize = 48;
 /// * [SECP256R1]
 ///
 pub const ALL_KX_GROUPS: &[&dyn SupportedKxGroup] = &[X25519, SECP256R1, SECP384R1];
+static DEFAULT_KX_GROUPS: Lazy<Vec<&'static dyn SupportedKxGroup>> = Lazy::new(|| {
+    ALL_KX_GROUPS
+        .iter()
+        .copied()
+        .filter(|kx_group| usable_kx_group(*kx_group))
+        .collect()
+});
 
 #[derive(Debug, Copy, Clone)]
 enum KxGroup {
@@ -67,6 +75,26 @@ impl KxGroup {
     }
 }
 
+fn usable_kx_group(kx_group: &dyn SupportedKxGroup) -> bool {
+    kx_group.name() != NamedGroup::X25519 || cng_supports_x25519()
+}
+
+fn cng_supports_x25519() -> bool {
+    // Windows CNG's Curve25519 public-key import behavior differs by OS version. Windows Server
+    // 2022 accepts the X25519 Wycheproof `u = 4` vector, but Windows Server 2025 rejects it with
+    // STATUS_INVALID_PARAMETER even when the import blob includes a valid Montgomery `v`
+    // coordinate. That vector is a valid X25519 input, so a CNG backend that rejects it should not
+    // advertise X25519 for TLS negotiation. Probe the same public key shape used by the provider and
+    // leave X25519 available only on hosts whose CNG implementation can import it.
+    let u = [
+        0x04, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+        0, 0, 0,
+    ];
+    let y = [0; 32];
+
+    import_ecdh_public_key(KxGroup::X25519.alg_handle(), &u, &y).is_ok()
+}
+
 struct EcKeyExchange {
     kx_group: KxGroup,
     key_handle: Owned<BCRYPT_KEY_HANDLE>,
@@ -83,6 +111,11 @@ pub const SECP256R1: &dyn SupportedKxGroup = &KxGroup::SECP256R1;
 /// secp384r1 key exchange group as registered with [IANA](https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-8)
 pub const SECP384R1: &dyn SupportedKxGroup = &KxGroup::SECP384R1;
 
+/// Returns key exchange groups usable by the host CNG implementation.
+pub fn default_kx_groups() -> Vec<&'static dyn SupportedKxGroup> {
+    DEFAULT_KX_GROUPS.clone()
+}
+
 impl SupportedKxGroup for KxGroup {
     fn start(&self) -> Result<Box<dyn ActiveKeyExchange>, Error> {
         let mut key_handle = Owned::default();
@@ -249,6 +282,14 @@ mod test {
 
     use crate::{keys::import_ecdh_private_key, kx::EcKeyExchange};
 
+    #[test]
+    fn default_kx_groups_match_cng_x25519_support() {
+        let advertises_x25519 = super::default_kx_groups()
+            .iter()
+            .any(|kx_group| kx_group.name() == rustls::NamedGroup::X25519);
+        assert_eq!(advertises_x25519, super::cng_supports_x25519());
+    }
+
     #[test]
     fn secp256r1() {
         let test_set = wycheproof::ecdh::TestSet::load(TestName::EcdhSecp256r1Ecpoint).unwrap();
@@ -286,6 +327,10 @@ mod test {
 
     #[test]
     fn x25519() {
+        if !super::cng_supports_x25519() {
+            return;
+        }
+
         let test_set = wycheproof::xdh::TestSet::load(wycheproof::xdh::TestName::X25519).unwrap();
 
         let mut counter = 0;

src/lib.rs

@@ -130,7 +130,7 @@ pub use verify::SUPPORTED_SIG_ALGS;
 pub fn default_provider() -> CryptoProvider {
     CryptoProvider {
         cipher_suites: ALL_CIPHER_SUITES.to_vec(),
-        kx_groups: ALL_KX_GROUPS.to_vec(),
+        kx_groups: kx::default_kx_groups(),
         signature_verification_algorithms: SUPPORTED_SIG_ALGS,
         secure_random: &SecureRandom,
         key_provider: &KeyProvider,

src/verify.rs

@@ -437,13 +437,21 @@ mod tests {
         for test_group in test_set.test_groups {
             for test in test_group.tests {
                 let res = alg.verify_signature(&test_group.key.key, &test.msg, &test.sig);
-                let expected_failure = test.flags.contains(&TestFlag::EdgeCaseShamirMultiplication);
 
-                match (&test.result, expected_failure) {
-                    (TestResult::Acceptable | TestResult::Valid, false) => {
+                if test.result == TestResult::Valid
+                    && test.flags.contains(&TestFlag::EdgeCaseShamirMultiplication)
+                {
+                    // Windows CNG versions differ on these valid arithmetic edge cases:
+                    // Windows Server 2022 rejects them, while Windows Server 2025 accepts them.
+                    // Invalid signatures below must still be rejected.
+                    continue;
+                }
+
+                match test.result {
+                    TestResult::Acceptable | TestResult::Valid => {
                         assert!(res.is_ok(), "Failed test: {test:?}");
                     }
-                    _ => {
+                    TestResult::Invalid => {
                         assert!(res.is_err(), "Failed test: {test:?}");
                     }
                 }

tests/it.rs

@@ -19,6 +19,13 @@ use webpki::EndEntityCert;
 
 pub mod server;
 
+fn cng_supports_group(group: &'static dyn SupportedKxGroup) -> bool {
+    default_provider()
+        .kx_groups
+        .iter()
+        .any(|supported| supported.name() == group.name())
+}
+
 fn test_with_provider(
     provider: CryptoProvider,
     port: u16,
@@ -157,6 +164,10 @@ fn test_client_and_server(
     #[case] alg: &'static rcgen::SignatureAlgorithm,
     #[case] expected: CipherSuite,
 ) {
+    if !cng_supports_group(group) {
+        return;
+    }
+
     // Run against a server using our default provider
     let (port, certificate) = start_server(alg);
     let provider = custom_provider(vec![suite], vec![group]);