1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
// Package ecdsa implements ECDSA signature, suitable for OpenPGP,
// as specified in RFC 6637, section 5.
package ecdsa
import (
"crypto/rand"
"io"
"math/big"
"testing"
"github.com/ProtonMail/go-crypto/openpgp/internal/ecc"
)
func TestCurves(t *testing.T) {
for _, curve := range ecc.Curves {
ECDSACurve, ok := curve.Curve.(ecc.ECDSACurve)
if !ok {
continue
}
t.Run(ECDSACurve.GetCurveName(), func(t *testing.T) {
testFingerprint := make([]byte, 20)
_, err := io.ReadFull(rand.Reader, testFingerprint[:])
if err != nil {
t.Fatal(err)
}
priv := testGenerate(t, ECDSACurve)
testSignVerify(t, priv)
testValidation(t, priv)
// Needs fresh key
priv = testGenerate(t, ECDSACurve)
testMarshalUnmarshal(t, priv)
})
}
}
func testGenerate(t *testing.T, curve ecc.ECDSACurve) *PrivateKey {
priv, err := GenerateKey(rand.Reader, curve)
if err != nil {
t.Fatal(err)
}
return priv
}
func testSignVerify(t *testing.T, priv *PrivateKey) {
digest := make([]byte, 32)
_, err := io.ReadFull(rand.Reader, digest[:])
if err != nil {
t.Fatal(err)
}
r, s, err := Sign(rand.Reader, priv, digest)
if err != nil {
t.Errorf("error signing: %s", err)
}
result := Verify(&priv.PublicKey, digest, r, s)
if !result {
t.Error("unable to verify message")
}
}
func testValidation(t *testing.T, priv *PrivateKey) {
if err := Validate(priv); err != nil {
t.Fatalf("valid key marked as invalid: %s", err)
}
priv.X.Sub(priv.X, big.NewInt(1))
if err := Validate(priv); err == nil {
t.Fatal("failed to detect invalid key")
}
}
func testMarshalUnmarshal(t *testing.T, priv *PrivateKey) {
p := priv.MarshalPoint()
d := priv.MarshalIntegerSecret()
parsed := NewPrivateKey(*NewPublicKey(priv.GetCurve()))
if err := parsed.UnmarshalPoint(p); err != nil {
t.Fatalf("unable to unmarshal point: %s", err)
}
if err := parsed.UnmarshalIntegerSecret(d); err != nil {
t.Fatalf("unable to unmarshal integer: %s", err)
}
if priv.X.Cmp(parsed.X) != 0 || priv.Y.Cmp(parsed.Y) != 0 || priv.D.Cmp(parsed.D) != 0 {
t.Fatal("failed to marshal/unmarshal correctly")
}
}
|
