impl core::hash::Hash for non-secret types

Author: ctz

src/lib.rs

@@ -502,7 +502,7 @@ impl fmt::Debug for PrivatePkcs8KeyDer<'_> {
 /// The most common way to get one of these is to call [`rustls_webpki::anchor_from_trusted_cert()`].
 ///
 /// [`rustls_webpki::anchor_from_trusted_cert()`]: https://docs.rs/rustls-webpki/latest/webpki/fn.anchor_from_trusted_cert.html
-#[derive(Clone, Debug, PartialEq, Eq)]
+#[derive(Clone, Debug, Hash, PartialEq, Eq)]
 pub struct TrustAnchor<'a> {
     /// Value of the `subject` field of the trust anchor
     pub subject: Der<'a>,
@@ -555,7 +555,7 @@ impl TrustAnchor<'_> {
 /// # }
 /// ```
 
-#[derive(Clone, Debug, PartialEq, Eq)]
+#[derive(Clone, Debug, Hash, PartialEq, Eq)]
 pub struct CertificateRevocationListDer<'a>(Der<'a>);
 
 #[cfg(feature = "alloc")]
@@ -607,7 +607,7 @@ impl From<Vec<u8>> for CertificateRevocationListDer<'_> {
 /// CertificateSigningRequestDer::from_pem_slice(byte_slice).unwrap();
 /// # }
 /// ```
-#[derive(Clone, Debug, PartialEq, Eq)]
+#[derive(Clone, Debug, Hash, PartialEq, Eq)]
 pub struct CertificateSigningRequestDer<'a>(Der<'a>);
 
 #[cfg(feature = "alloc")]
@@ -668,7 +668,7 @@ impl From<Vec<u8>> for CertificateSigningRequestDer<'_> {
 /// assert_eq!(certs.len(), 3);
 /// # }
 /// ```
-#[derive(Clone, Debug, PartialEq, Eq)]
+#[derive(Clone, Debug, Hash, PartialEq, Eq)]
 pub struct CertificateDer<'a>(Der<'a>);
 
 impl<'a> CertificateDer<'a> {
@@ -738,7 +738,7 @@ pub type SubjectPublicKeyInfo<'a> = SubjectPublicKeyInfoDer<'a>;
 /// SubjectPublicKeyInfoDer::from_pem_slice(byte_slice).unwrap();
 /// # }
 /// ```
-#[derive(Clone, Debug, PartialEq, Eq)]
+#[derive(Clone, Debug, Hash, PartialEq, Eq)]
 pub struct SubjectPublicKeyInfoDer<'a>(Der<'a>);
 
 #[cfg(feature = "alloc")]
@@ -783,7 +783,7 @@ impl SubjectPublicKeyInfoDer<'_> {
 
 /// A TLS-encoded Encrypted Client Hello (ECH) configuration list (`ECHConfigList`); as specified in
 /// [draft-ietf-tls-esni-18 §4](https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni-18#section-4)
-#[derive(Clone, Eq, PartialEq)]
+#[derive(Clone, Eq, Hash, PartialEq)]
 pub struct EchConfigListBytes<'a>(BytesInner<'a>);
 
 impl EchConfigListBytes<'_> {
@@ -936,7 +936,7 @@ pub struct InvalidSignature;
 /// A timestamp, tracking the number of non-leap seconds since the Unix epoch.
 ///
 /// The Unix epoch is defined January 1, 1970 00:00:00 UTC.
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)]
+#[derive(Debug, Clone, Copy, Hash, PartialEq, Eq, PartialOrd, Ord)]
 pub struct UnixTime(u64);
 
 impl UnixTime {
@@ -974,7 +974,7 @@ impl UnixTime {
 /// This wrapper type is used to represent DER-encoded data in a way that is agnostic to whether
 /// the data is owned (by a `Vec<u8>`) or borrowed (by a `&[u8]`). Support for the owned
 /// variant is only available when the `alloc` feature is enabled.
-#[derive(Clone, Eq, PartialEq)]
+#[derive(Clone, Eq, Hash, PartialEq)]
 pub struct Der<'a>(BytesInner<'a>);
 
 impl<'a> Der<'a> {
@@ -1054,6 +1054,12 @@ impl AsRef<[u8]> for BytesInner<'_> {
     }
 }
 
+impl core::hash::Hash for BytesInner<'_> {
+    fn hash<H: core::hash::Hasher>(&self, state: &mut H) {
+        state.write(self.as_ref());
+    }
+}
+
 impl PartialEq for BytesInner<'_> {
     fn eq(&self, other: &Self) -> bool {
         self.as_ref() == other.as_ref()