Implement verify() for HMAC using NSS

content/renderer/webcrypto_impl_unittest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "webcrypto_impl.h"
 
 #include "base/basictypes.h"
 #include "base/logging.h"
 #include "base/memory/ref_counted.h"
 #include "base/strings/string_number_conversions.h"
@@ skipping 253 matching lines @@
             crypto_key,
             message_raw.data(),
             message_raw.size(),
             &array_buffer));
 
     // Ignore case, it's checking the hex value.
     EXPECT_STRCASEEQ(
         input_set[index].mac,
         base::HexEncode(
             array_buffer.data(), array_buffer.byteLength()).c_str());
+
+    bool signature_match = false;
+    EXPECT_TRUE(
+        crypto.VerifySignatureInternal(
+            hmac_algorithm,
+            crypto_key,
+            static_cast<const unsigned char*>(array_buffer.data()),
+            array_buffer.byteLength(),
+            message_raw.data(),
+            message_raw.size(),
+            &signature_match));
+    EXPECT_TRUE(signature_match);
+
+    // Ensure truncated signature does not verify by passing one less byte.
+    EXPECT_TRUE(
+        crypto.VerifySignatureInternal(
+            hmac_algorithm,
+            crypto_key,
+            static_cast<const unsigned char*>(array_buffer.data()),
+            array_buffer.byteLength() - 1,
+            message_raw.data(),
+            message_raw.size(),
+            &signature_match));
+    EXPECT_FALSE(signature_match);
   }
 }
 
 }  // namespace content