denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

unit-tests: Create and verify some RSA PSS signatures

Browse Source
This commit is contained in:
Tobias Brunner
2017-11-08 16:48:10 +01:00
parent 2f95d7195d
commit 89015dff9e
1 changed files with 25 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/tests/suites/test_rsa.c
+25 -3
View File
@@ -19,6 +19,7 @@
#include "test_suite.h" #include "test_suite.h"
#include <plugins/plugin_feature.h> #include <plugins/plugin_feature.h>
#include <credentials/keys/signature_params.h>
/** /**
* Signature schemes to test * Signature schemes to test
@@ -31,6 +32,15 @@ static signature_scheme_t schemes[] = {
SIGN_RSA_EMSA_PKCS1_SHA2_256, SIGN_RSA_EMSA_PKCS1_SHA2_256,
SIGN_RSA_EMSA_PKCS1_SHA2_384, SIGN_RSA_EMSA_PKCS1_SHA2_384,
SIGN_RSA_EMSA_PKCS1_SHA2_512, SIGN_RSA_EMSA_PKCS1_SHA2_512,
SIGN_RSA_EMSA_PSS,
};
/**
* Default parameters for RSA PSS signatures
*/
static rsa_pss_params_t default_pss_params = {
.hash = HASH_SHA256,
.mgf1_hash = HASH_SHA256,
.salt_len = RSA_PSS_SALT_LEN_DEFAULT,
}; };
/** /**
@@ -43,6 +53,8 @@ static void test_good_sig(private_key_t *privkey, public_key_t *pubkey)
for (i = 0; i < countof(schemes); i++) for (i = 0; i < countof(schemes); i++)
{ {
rsa_pss_params_t *params = NULL;
if (!lib->plugins->has_feature(lib->plugins, if (!lib->plugins->has_feature(lib->plugins,
PLUGIN_PROVIDE(PUBKEY_VERIFY, schemes[i])) || PLUGIN_PROVIDE(PUBKEY_VERIFY, schemes[i])) ||
!lib->plugins->has_feature(lib->plugins, !lib->plugins->has_feature(lib->plugins,
@@ -50,9 +62,13 @@ static void test_good_sig(private_key_t *privkey, public_key_t *pubkey)
{ {
continue; continue;
} }
fail_unless(privkey->sign(privkey, schemes[i], NULL, data, &sig), if (schemes[i] == SIGN_RSA_EMSA_PSS)
{
params = &default_pss_params;
}
fail_unless(privkey->sign(privkey, schemes[i], params, data, &sig),
"sign %N", signature_scheme_names, schemes[i]); "sign %N", signature_scheme_names, schemes[i]);
fail_unless(pubkey->verify(pubkey, schemes[i], NULL, data, sig), fail_unless(pubkey->verify(pubkey, schemes[i], params, data, sig),
"verify %N", signature_scheme_names, schemes[i]); "verify %N", signature_scheme_names, schemes[i]);
free(sig.ptr); free(sig.ptr);
} }
@@ -101,15 +117,21 @@ static void test_bad_sigs(public_key_t *pubkey)
for (s = 0; s < countof(schemes); s++) for (s = 0; s < countof(schemes); s++)
{ {
rsa_pss_params_t *params = NULL;
if (!lib->plugins->has_feature(lib->plugins, if (!lib->plugins->has_feature(lib->plugins,
PLUGIN_PROVIDE(PUBKEY_VERIFY, schemes[s]))) PLUGIN_PROVIDE(PUBKEY_VERIFY, schemes[s])))
{ {
continue; continue;
} }
if (schemes[s] == SIGN_RSA_EMSA_PSS)
{
params = &default_pss_params;
}
for (i = 0; i < countof(invalid_sigs); i++) for (i = 0; i < countof(invalid_sigs); i++)
{ {
fail_if( fail_if(
pubkey->verify(pubkey, schemes[s], NULL, data, invalid_sigs[i]), pubkey->verify(pubkey, schemes[s], params, data, invalid_sigs[i]),
"bad %N sig accepted %B", signature_scheme_names, schemes[s], "bad %N sig accepted %B", signature_scheme_names, schemes[s],
&invalid_sigs[i]); &invalid_sigs[i]);
} }