| Index: crypto/ec_signature_creator_unittest.cc
|
| diff --git a/crypto/ec_signature_creator_unittest.cc b/crypto/ec_signature_creator_unittest.cc
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..2a40cfe0c12a40f93dfa7f4db51f779de18b8663
|
| --- /dev/null
|
| +++ b/crypto/ec_signature_creator_unittest.cc
|
| @@ -0,0 +1,75 @@
|
| +// Copyright (c) 2012 The Chromium Authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +#include "crypto/ec_signature_creator.h"
|
| +
|
| +#include <string>
|
| +#include <vector>
|
| +
|
| +#include "base/memory/scoped_ptr.h"
|
| +#include "crypto/ec_private_key.h"
|
| +#include "crypto/signature_verifier.h"
|
| +#include "testing/gtest/include/gtest/gtest.h"
|
| +
|
| +// TODO(rch): Add some exported keys from each to
|
| +// test interop between NSS and OpenSSL.
|
| +
|
| +TEST(ECSignatureCreatorTest, BasicTest) {
|
| + // Do a verify round trip.
|
| + scoped_ptr<crypto::ECPrivateKey> key_original(
|
| + crypto::ECPrivateKey::Create());
|
| + ASSERT_TRUE(key_original.get());
|
| +
|
| + std::vector<uint8> key_info;
|
| + ASSERT_TRUE(
|
| + key_original->ExportEncryptedPrivateKey(std::string(), 1000, &key_info));
|
| + std::vector<uint8> pubkey_info;
|
| + ASSERT_TRUE(key_original->ExportPublicKey(&pubkey_info));
|
| +
|
| + scoped_ptr<crypto::ECPrivateKey> key(
|
| + crypto::ECPrivateKey::CreateFromEncryptedPrivateKeyInfo(
|
| + std::string(), key_info, pubkey_info));
|
| + ASSERT_TRUE(key.get());
|
| + ASSERT_TRUE(key->key() != NULL);
|
| +
|
| + scoped_ptr<crypto::ECSignatureCreator> signer(
|
| + crypto::ECSignatureCreator::Create(key.get()));
|
| + ASSERT_TRUE(signer.get());
|
| +
|
| + std::string data("Hello, World!");
|
| + std::vector<uint8> signature;
|
| + ASSERT_TRUE(signer->Sign(reinterpret_cast<const uint8*>(data.c_str()),
|
| + data.size(),
|
| + &signature));
|
| +
|
| + std::vector<uint8> public_key_info;
|
| + ASSERT_TRUE(key_original->ExportPublicKey(&public_key_info));
|
| +
|
| + // This is the algorithm ID for ECDSA with SHA-256. Parameters are ABSENT.
|
| + // RFC 5758:
|
| + // ecdsa-with-SHA256 OBJECT IDENTIFIER ::= { iso(1) member-body(2)
|
| + // us(840) ansi-X9-62(10045) signatures(4) ecdsa-with-SHA2(3) 2 }
|
| + // ...
|
| + // When the ecdsa-with-SHA224, ecdsa-with-SHA256, ecdsa-with-SHA384, or
|
| + // ecdsa-with-SHA512 algorithm identifier appears in the algorithm field
|
| + // as an AlgorithmIdentifier, the encoding MUST omit the parameters
|
| + // field. That is, the AlgorithmIdentifier SHALL be a SEQUENCE of one
|
| + // component, the OID ecdsa-with-SHA224, ecdsa-with-SHA256, ecdsa-with-
|
| + // SHA384, or ecdsa-with-SHA512.
|
| + // See also RFC 5480, Appendix A.
|
| + const uint8 kECDSAWithSHA256AlgorithmID[] = {
|
| + 0x30, 0x0a,
|
| + 0x06, 0x08,
|
| + 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x04, 0x03, 0x02,
|
| + };
|
| + crypto::SignatureVerifier verifier;
|
| + ASSERT_TRUE(verifier.VerifyInit(
|
| + kECDSAWithSHA256AlgorithmID, sizeof(kECDSAWithSHA256AlgorithmID),
|
| + &signature[0], signature.size(),
|
| + &public_key_info.front(), public_key_info.size()));
|
| +
|
| + verifier.VerifyUpdate(reinterpret_cast<const uint8*>(data.c_str()),
|
| + data.size());
|
| + ASSERT_TRUE(verifier.VerifyFinal());
|
| +}
|
|
|