Add yhsm-audit for working with yubihsm2 audit log objects & encodi…

…ngs.

Cargo.toml

@@ -5,4 +5,18 @@ members = [
     "dice-cert-tmpl",
     "dice-mfg",
     "dice-mfg-msgs",
+    "yhsm-audit",
 ]
+
+[workspace.dependencies]
+anyhow = { version = "1", features = ["backtrace"] }
+clap = { version = "4", features = ["derive"] }
+derive_more = "0.99"
+env_logger = "0.10"
+hex = "0.4"
+log = { version = "0.4", features = ["std"] }
+ron = "0.8"
+serde = "1"
+serde_json = { version = "1", features = ["std", "alloc"] }
+sha2 = "0.10"
+yubihsm = { git = "https://github.com/oxidecomputer/yubihsm.rs", branch="v0.42.0-with-audit", features = ["default", "usb"] }

yhsm-audit/Cargo.toml

@@ -0,0 +1,19 @@
+[package]
+name = "yubihsm-audit"
+version = "0.1.0"
+edition = "2021"
+
+# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+
+[dependencies]
+anyhow.workspace = true
+clap.workspace = true
+derive_more.workspace = true
+env_logger.workspace = true
+hex.workspace = true
+log.workspace = true
+ron.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+sha2.workspace = true
+yubihsm.workspace = true

yhsm-audit/src/lib.rs

@@ -0,0 +1,41 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
+use clap::ValueEnum;
+use std::fmt;
+
+#[derive(Clone, Debug, ValueEnum)]
+pub enum Kind {
+    LogEntries,
+    LogEntry,
+}
+
+impl fmt::Display for Kind {
+    fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
+        match *self {
+            Kind::LogEntries => write!(f, "LogEntries"),
+            Kind::LogEntry => write!(f, "LogEntry"),
+        }
+    }
+}
+
+#[derive(Clone, Debug, ValueEnum)]
+pub enum Encoding {
+    // The binary serializer from upstream is not exposed publicly.
+    // We maintain a patch here:
+    // https://github.com/oxidecomputer/yubihsm.rs/tree/v0.42.0-with-audit
+    Bin,
+    Json,
+    Ron,
+}
+
+impl fmt::Display for Encoding {
+    fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
+        match *self {
+            Encoding::Bin => write!(f, "bin"),
+            Encoding::Json => write!(f, "json"),
+            Encoding::Ron => write!(f, "ron"),
+        }
+    }
+}