Add DER parsing of AlgorithmId for signatures.

net/cert/internal/signature_algorithm_unittest.cc

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "net/cert/internal/signature_algorithm.h"
+
+#include "base/files/file_util.h"
+#include "base/strings/string_number_conversions.h"
+#include "net/base/test_data_directory.h"
+#include "net/cert/pem_tokenizer.h"
+#include "net/der/input.h"
+#include "net/der/parser.h"
+#include "testing/gtest/include/gtest/gtest.h"
+
+namespace net {
+
+namespace {
+
+// Parses a SignatureAlgorithm given an empty DER input.
+TEST(SignatureAlgorithmTest, ParseDer_Empty) {
+  SignatureAlgorithm algorithm;
+  ASSERT_FALSE(algorithm.ParseDer(der::Input()));
+}
+
+// Parses a SignatureAlgorithm given invalid DER input.
+TEST(SignatureAlgorithmTest, ParseDer_Bogus) {
+  const uint8_t kData[] = {0x00};
+  SignatureAlgorithm algorithm;
+  ASSERT_FALSE(algorithm.ParseDer(der::Input(kData)));
+}
+
+// Parses a sha-1WithRSAEncryption which contains no parameters field.
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.5
+TEST(SignatureAlgorithmTest, ParseDer_sha1WithRSAEncryption_NoParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x0B,  // SEQUENCE (11 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x05,
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_TRUE(algorithm.ParseDer(der::Input(kData)));
+
+  EXPECT_EQ(SignatureAlgorithmId::RsaPkcs1, algorithm.algorithm());
+  EXPECT_EQ(DigestAlgorithm::Sha1, algorithm.digest());
+}
+
+// Parses a sha-1WithRSAEncryption which contains a NULL parameters field.
+//
+//   SEQUENCE (2 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.5
+//       NULL
+TEST(SignatureAlgorithmTest, ParseDer_sha1WithRSAEncryption_NullParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x0D,  // SEQUENCE (13 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x05,
+    0x05, 0x00,  // NULL (0 bytes)
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_TRUE(algorithm.ParseDer(der::Input(kData)));
+
+  EXPECT_EQ(SignatureAlgorithmId::RsaPkcs1, algorithm.algorithm());
+  EXPECT_EQ(DigestAlgorithm::Sha1, algorithm.digest());
+}
+
+// Parses a sha-1WithRSAEncryption which contains an unexpected parameters
+// field. Instead of being NULL or omitted, it is an integer.
+//
+//   SEQUENCE (2 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.5
+//       INTEGER  0
+TEST(SignatureAlgorithmTest, ParseDer_sha1WithRSAEncryption_NonNullParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x0E,  // SEQUENCE (14 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x05,
+    0x02, 0x01, 0x00,  // INTEGER (1 byte)
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_FALSE(algorithm.ParseDer(der::Input(kData)));
+}
+
+// Parses a sha-1WithRSAEncryption which contains values after the sequence.
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.5
+//   INTEGER  0
+TEST(SignatureAlgorithmTest, ParseDer_DataAfterSequence) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x0B,  // SEQUENCE (11 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x05,
+    0x02, 0x01, 0x00,  // INTEGER (1 byte)
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_FALSE(algorithm.ParseDer(der::Input(kData)));
+}
+
+// Parses a sha-1WithRSAEncryption which contains a bad NULL parameters field.
+// Normally NULL is encoded as {0x05, 0x00} (tag for NULL and length of 0). Here
+// NULL is encoded as having a length of 1 instead, followed by data 0x09.
+//
+//   SEQUENCE (2 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.5
+//       NULL
+TEST(SignatureAlgorithmTest, ParseDer_sha1WithRSAEncryption_BadNullParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x0E,  // SEQUENCE (13 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x05,
+    0x05, 0x01, 0x09,  // NULL (1 byte)
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_FALSE(algorithm.ParseDer(der::Input(kData)));
+}
+
+// Parses a sha-1WithRSAEncryption which contains a NULL parameters field,
+// followed by an integer.
+//
+//   SEQUENCE (3 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.5
+//       NULL
+//       INTEGER  0
+TEST(SignatureAlgorithmTest,
+     ParseDer_sha1WithRSAEncryption_NullParamsThenInteger) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x10,  // SEQUENCE (16 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x05,
+    0x05, 0x00,  // NULL (0 bytes)
+    0x02, 0x01, 0x00,  // INTEGER (1 byte)
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_FALSE(algorithm.ParseDer(der::Input(kData)));
+}
+
+// Try parsing a SignatureAlgorithm given DER which does not encode a sequence.
+//
+//   INTEGER 0
+TEST(SignatureAlgorithmTest, ParseDer_NotASequence) {
+  // clang-format off
+  const uint8_t kData[] = {
+      0x02, 0x01, 0x00,  // INTEGER (1 byte)
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_FALSE(algorithm.ParseDer(der::Input(kData)));
+}
+
+// Parses a sha256WithRSAEncryption which contains no parameters field.
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.11
+TEST(SignatureAlgorithmTest, ParseDer_sha256WithRSAEncryption_NoParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x0B,  // SEQUENCE (11 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b,
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_TRUE(algorithm.ParseDer(der::Input(kData)));
+
+  EXPECT_EQ(SignatureAlgorithmId::RsaPkcs1, algorithm.algorithm());
+  EXPECT_EQ(DigestAlgorithm::Sha256, algorithm.digest());
+}
+
+// Parses a sha384WithRSAEncryption which contains no parameters field.
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.12
+TEST(SignatureAlgorithmTest, ParseDer_sha384WithRSAEncryption_NoParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x0B,  // SEQUENCE (11 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0c,
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_TRUE(algorithm.ParseDer(der::Input(kData)));
+
+  EXPECT_EQ(SignatureAlgorithmId::RsaPkcs1, algorithm.algorithm());
+  EXPECT_EQ(DigestAlgorithm::Sha384, algorithm.digest());
+}
+
+// Parses a sha512WithRSAEncryption which contains no parameters field.
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.13
+TEST(SignatureAlgorithmTest, ParseDer_sha512WithRSAEncryption_NoParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x0B,  // SEQUENCE (11 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0d,
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_TRUE(algorithm.ParseDer(der::Input(kData)));
+
+  EXPECT_EQ(SignatureAlgorithmId::RsaPkcs1, algorithm.algorithm());
+  EXPECT_EQ(DigestAlgorithm::Sha512, algorithm.digest());
+}
+
+// Parses a sha224WithRSAEncryption which contains no parameters field. This
+// fails because the parsing code does not enumerate this OID (even though it is
+// in fact valid).
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.113549.1.1.14
+TEST(SignatureAlgorithmTest, ParseDer_sha224WithRSAEncryption_NoParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+    0x30, 0x0B,  // SEQUENCE (11 bytes)
+    0x06, 0x09,  // OBJECT IDENTIFIER (9 bytes)
+    0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0e,
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_FALSE(algorithm.ParseDer(der::Input(kData)));
+}
+
+// Parses a ecdsa-with-SHA1 which contains no parameters field.
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.10045.4.1
+TEST(SignatureAlgorithmTest, ParseDer_ecdsaWithSHA1_NoParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+      0x30, 0x09,  // SEQUENCE (11 bytes)
+      0x06, 0x07,  // OBJECT IDENTIFIER (7 bytes)
+      0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x01,
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_TRUE(algorithm.ParseDer(der::Input(kData)));
+
+  EXPECT_EQ(SignatureAlgorithmId::Ecdsa, algorithm.algorithm());
+  EXPECT_EQ(DigestAlgorithm::Sha1, algorithm.digest());
+}
+
+// Parses a ecdsa-with-SHA256 which contains no parameters field.
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.10045.4.3.2
+TEST(SignatureAlgorithmTest, ParseDer_ecdsaWithSHA256_NoParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+      0x30, 0x0A,  // SEQUENCE (10 bytes)
+      0x06, 0x08,  // OBJECT IDENTIFIER (8 bytes)
+      0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x03, 0x02,
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_TRUE(algorithm.ParseDer(der::Input(kData)));
+
+  EXPECT_EQ(SignatureAlgorithmId::Ecdsa, algorithm.algorithm());
+  EXPECT_EQ(DigestAlgorithm::Sha256, algorithm.digest());
+}
+
+// Parses a ecdsa-with-SHA384 which contains no parameters field.
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.10045.4.3.3
+
+TEST(SignatureAlgorithmTest, ParseDer_ecdsaWithSHA384_NoParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+      0x30, 0x0A,  // SEQUENCE (10 bytes)
+      0x06, 0x08,  // OBJECT IDENTIFIER (8 bytes)
+      0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x03, 0x03,
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_TRUE(algorithm.ParseDer(der::Input(kData)));
+
+  EXPECT_EQ(SignatureAlgorithmId::Ecdsa, algorithm.algorithm());
+  EXPECT_EQ(DigestAlgorithm::Sha384, algorithm.digest());
+}
+
+// Parses a ecdsa-with-SHA512 which contains no parameters field.
+//
+//   SEQUENCE (1 elem)
+//       OBJECT IDENTIFIER  1.2.840.10045.4.3.4
+TEST(SignatureAlgorithmTest, ParseDer_ecdsaWithSHA512_NoParams) {
+  // clang-format off
+  const uint8_t kData[] = {
+      0x30, 0x0A,  // SEQUENCE (10 bytes)
+      0x06, 0x08,  // OBJECT IDENTIFIER (8 bytes)
+      0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x03, 0x04,
+  };
+  // clang-format on
+  SignatureAlgorithm algorithm;
+  ASSERT_TRUE(algorithm.ParseDer(der::Input(kData)));
+
+  EXPECT_EQ(SignatureAlgorithmId::Ecdsa, algorithm.algorithm());
+  EXPECT_EQ(DigestAlgorithm::Sha512, algorithm.digest());
+}
+
+// Tests that two RSA algorithms with different digests are not equal.
+TEST(SignatureAlgorithmTest, Equals_RsaWithDifferentDigest) {
+  SignatureAlgorithm alg1;
+  alg1.AssignRsaPkcs1(DigestAlgorithm::Sha1);
+
+  SignatureAlgorithm alg2;
+  alg2.AssignRsaPkcs1(DigestAlgorithm::Sha256);
+
+  ASSERT_FALSE(alg1.Equals(alg2));
+}
+
+// Tests that two ECDSA algorithms with different digests are not equal.
+TEST(SignatureAlgorithmTest, Equals_EcdsaWithDifferentDigest) {
+  SignatureAlgorithm alg1;
+  alg1.AssignEcdsa(DigestAlgorithm::Sha1);
+
+  SignatureAlgorithm alg2;
+  alg2.AssignEcdsa(DigestAlgorithm::Sha256);
+
+  ASSERT_FALSE(alg1.Equals(alg2));
+}
+
+// Tests that an ECDSA algorithm is not equal to an RSA algorithm (even though
+// digests match).
+TEST(SignatureAlgorithmTest, Equals_EcdsaNotEqualRsa) {
+  SignatureAlgorithm alg1;
+  alg1.AssignEcdsa(DigestAlgorithm::Sha256);
+
+  SignatureAlgorithm alg2;
+  alg2.AssignRsaPkcs1(DigestAlgorithm::Sha256);
+
+  ASSERT_FALSE(alg1.Equals(alg2));
+}
+
+// Tests that two identical ECDSA algorithms are equal - both use SHA-256.
+TEST(SignatureAlgorithmTest, Equals_EcdsaMatch) {
+  SignatureAlgorithm alg1;
+  alg1.AssignEcdsa(DigestAlgorithm::Sha256);
+
+  SignatureAlgorithm alg2;
+  alg2.AssignEcdsa(DigestAlgorithm::Sha256);
+
+  ASSERT_TRUE(alg1.Equals(alg2));
+}
+
+// Tests that two identical RSA algorithms are equal - both use SHA-512
+TEST(SignatureAlgorithmTest, Equals_RsaPkcs1Match) {
+  SignatureAlgorithm alg1;
+  alg1.AssignRsaPkcs1(DigestAlgorithm::Sha512);
+
+  SignatureAlgorithm alg2;
+  alg2.AssignRsaPkcs1(DigestAlgorithm::Sha512);
+
+  ASSERT_TRUE(alg1.Equals(alg2));
+}
+
+// Tests that two RSASSA-PSS algorithms are equal.
+TEST(SignatureAlgorithmTest, Equals_RsaPssMatch) {
+  SignatureAlgorithm alg1;
+  alg1.AssignRsaPss(DigestAlgorithm::Sha256, DigestAlgorithm::Sha1, 21);
+
+  SignatureAlgorithm alg2;
+  alg2.AssignRsaPss(DigestAlgorithm::Sha256, DigestAlgorithm::Sha1, 21);
+
+  ASSERT_TRUE(alg1.Equals(alg2));
+}
+
+// Tests that two invalid algorithms are considered equal.
+TEST(SignatureAlgorithmTest, Equals_BothInvalid) {
+  SignatureAlgorithm alg1;
+  SignatureAlgorithm alg2;
+
+  ASSERT_TRUE(alg1.Equals(alg2));
+}
+
+// Tests that an invalid algorith is not considered equal to a valid one.
+TEST(SignatureAlgorithmTest, Equals_OneInvalid) {
+  SignatureAlgorithm alg1;
+  alg1.AssignEcdsa(DigestAlgorithm::Sha256);
+
+  SignatureAlgorithm alg2;
+
+  ASSERT_FALSE(alg1.Equals(alg2));
+}
+
+// Tests that two RSASSA-PSS algorithms with different hashes are not equal.
+TEST(SignatureAlgorithmTest, Equals_RsaPssWithDifferentDigest) {
+  SignatureAlgorithm alg1;
+  alg1.AssignRsaPss(DigestAlgorithm::Sha1, DigestAlgorithm::Sha1, 20);
+
+  SignatureAlgorithm alg2;
+  alg1.AssignRsaPss(DigestAlgorithm::Sha256, DigestAlgorithm::Sha1, 20);
+
+  ASSERT_FALSE(alg1.Equals(alg2));
+}
+
+// Tests that two RSASSA-PSS algorithms with different mask gens are not equal.
+TEST(SignatureAlgorithmTest, Equals_RsaPssWithDifferentMaskGen) {
+  SignatureAlgorithm alg1;
+  alg1.AssignRsaPss(DigestAlgorithm::Sha256, DigestAlgorithm::Sha1, 20);
+
+  SignatureAlgorithm alg2;
+  alg1.AssignRsaPss(DigestAlgorithm::Sha256, DigestAlgorithm::Sha256, 20);
+
+  ASSERT_FALSE(alg1.Equals(alg2));
+}
+
+// Tests that two RSASSA-PSS algorithms with different salts
+TEST(SignatureAlgorithmTest, Equals_RsaPssWithDifferentSalt) {
+  SignatureAlgorithm alg1;
+  alg1.AssignRsaPss(DigestAlgorithm::Sha1, DigestAlgorithm::Sha1, 20);
+
+  SignatureAlgorithm alg2;
+  alg1.AssignRsaPss(DigestAlgorithm::Sha1, DigestAlgorithm::Sha1, 16);
+
+  ASSERT_FALSE(alg1.Equals(alg2));
+}
+
+// Tests that the parmeters returned for an ECDSA algorithm are null for
+// non-ECDSA algorithms.
+TEST(SignatureAlgorithmTest, ParamsAreNullForWrongType_Ecdsa) {
+  SignatureAlgorithm alg1;
+  alg1.AssignEcdsa(DigestAlgorithm::Sha1);
+
+  EXPECT_FALSE(alg1.ParamsForRsaPss());
+}
+
+// Tests that the parmeters returned for an RSA PKCS#1 v1.5 algorithm are null
+// for non-RSA PKCS#1 v1.5 algorithms.
+TEST(SignatureAlgorithmTest, ParamsAreNullForWrongType_RsaPkcs1) {
+  SignatureAlgorithm alg1;
+  alg1.AssignRsaPkcs1(DigestAlgorithm::Sha1);
+
+  EXPECT_FALSE(alg1.ParamsForRsaPss());
+}
+
+// Tests that the parmeters returned for an invalid algorithm are null.
+TEST(SignatureAlgorithmTest, ParamsAreNullForWrongType_Invalid) {
+  SignatureAlgorithm alg1;
+
+  EXPECT_FALSE(alg1.ParamsForRsaPss());
+}
+
+}  // namespace
+
+}  // namespace net