Implement PublicKeyComponents::build_encrypting_key

aws-lc-rs/src/rsa/encryption.rs

@@ -146,7 +146,7 @@ impl Clone for PrivateDecryptingKey {
 pub struct PublicEncryptingKey(LcPtr<EVP_PKEY>);
 
 impl PublicEncryptingKey {
-    fn new(evp_pkey: LcPtr<EVP_PKEY>) -> Result<Self, Unspecified> {
+    pub(crate) fn new(evp_pkey: LcPtr<EVP_PKEY>) -> Result<Self, Unspecified> {
         Self::validate_key(&evp_pkey)?;
         Ok(Self(evp_pkey))
     }

aws-lc-rs/src/rsa/key.rs

@@ -14,6 +14,7 @@ use crate::io;
 use crate::ptr::ConstPointer;
 use crate::{
     digest::{self},
+    rsa::{PublicEncryptingKey},
     encoding::{AsDer, Pkcs8V1Der},
     error::{KeyRejected, Unspecified},
     fips::indicator_check,
@@ -432,6 +433,16 @@ where
         Ok(pkey)
     }
 
+    /// Builds a `PublicEncryptingKey` from the public key components.
+    ///
+    /// # Errors
+    /// `error::Unspecified` if the key failed to verify.
+    pub fn build_encrypting_key(&self) -> Result<PublicEncryptingKey, Unspecified> {
+        let rsa = self.build_rsa()?;
+
+        PublicEncryptingKey::new(rsa)
+    }
+
     /// Verifies that `signature` is a valid signature of `message` using `self`
     /// as the public key. `params` determine what algorithm parameters
     /// (padding, digest algorithm, key length range, etc.) are used in the