test_PKCS8.py 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459
  1. #
  2. # SelfTest/IO/test_PKCS8.py: Self-test for the PKCS8 module
  3. #
  4. # ===================================================================
  5. #
  6. # Copyright (c) 2014, Legrandin <helderijs@gmail.com>
  7. # All rights reserved.
  8. #
  9. # Redistribution and use in source and binary forms, with or without
  10. # modification, are permitted provided that the following conditions
  11. # are met:
  12. #
  13. # 1. Redistributions of source code must retain the above copyright
  14. # notice, this list of conditions and the following disclaimer.
  15. # 2. Redistributions in binary form must reproduce the above copyright
  16. # notice, this list of conditions and the following disclaimer in
  17. # the documentation and/or other materials provided with the
  18. # distribution.
  19. #
  20. # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  21. # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  22. # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
  23. # FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
  24. # COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
  25. # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
  26. # BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  27. # LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
  28. # CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  29. # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
  30. # ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  31. # POSSIBILITY OF SUCH DAMAGE.
  32. # ===================================================================
  33. """Self-tests for Crypto.IO.PKCS8 module"""
  34. import unittest
  35. from binascii import unhexlify
  36. from Crypto.Util.py3compat import *
  37. from Crypto.IO import PKCS8
  38. from Crypto.Util.asn1 import DerNull
  39. oid_key = '1.2.840.113549.1.1.1'
  40. # Original RSA key (in DER format)
  41. # hexdump -v -e '32/1 "%02x" "\n"' key.der
  42. clear_key="""
  43. 308201ab020100025a00b94a7f7075ab9e79e8196f47be707781e80dd965cf16
  44. 0c951a870b71783b6aaabbd550c0e65e5a3dfe15b8620009f6d7e5efec42a3f0
  45. 6fe20faeebb0c356e79cdec6db4dd427e82d8ae4a5b90996227b8ba54ccfc4d2
  46. 5c08050203010001025a00afa09c70d528299b7552fe766b5d20f9a221d66938
  47. c3b68371d48515359863ff96f0978d700e08cd6fd3d8a3f97066fc2e0d5f78eb
  48. 3a50b8e17ba297b24d1b8e9cdfd18d608668198d724ad15863ef0329195dee89
  49. 3f039395022d0ebe0518df702a8b25954301ec60a97efdcec8eaa4f2e76ca7e8
  50. 8dfbc3f7e0bb83f9a0e8dc47c0f8c746e9df6b022d0c9195de13f09b7be1fdd7
  51. 1f56ae7d973e08bd9fd2c3dfd8936bb05be9cc67bd32d663c7f00d70932a0be3
  52. c24f022d0ac334eb6cabf1933633db007b763227b0d9971a9ea36aca8b669ec9
  53. 4fcf16352f6b3dcae28e4bd6137db4ddd3022d0400a09f15ee7b351a2481cb03
  54. 09920905c236d09c87afd3022f3afc2a19e3b746672b635238956ee7e6dd62d5
  55. 022d0cd88ed14fcfbda5bbf0257f700147137bbab9c797af7df866704b889aa3
  56. 7e2e93df3ff1a0fd3490111dcdbc4c
  57. """
  58. # Same key as above, wrapped in PKCS#8 but w/o password
  59. #
  60. # openssl pkcs8 -topk8 -inform DER -nocrypt -in key.der -outform DER -out keyp8.der
  61. # hexdump -v -e '32/1 "%02x" "\n"' keyp8.der
  62. wrapped_clear_key="""
  63. 308201c5020100300d06092a864886f70d0101010500048201af308201ab0201
  64. 00025a00b94a7f7075ab9e79e8196f47be707781e80dd965cf160c951a870b71
  65. 783b6aaabbd550c0e65e5a3dfe15b8620009f6d7e5efec42a3f06fe20faeebb0
  66. c356e79cdec6db4dd427e82d8ae4a5b90996227b8ba54ccfc4d25c0805020301
  67. 0001025a00afa09c70d528299b7552fe766b5d20f9a221d66938c3b68371d485
  68. 15359863ff96f0978d700e08cd6fd3d8a3f97066fc2e0d5f78eb3a50b8e17ba2
  69. 97b24d1b8e9cdfd18d608668198d724ad15863ef0329195dee893f039395022d
  70. 0ebe0518df702a8b25954301ec60a97efdcec8eaa4f2e76ca7e88dfbc3f7e0bb
  71. 83f9a0e8dc47c0f8c746e9df6b022d0c9195de13f09b7be1fdd71f56ae7d973e
  72. 08bd9fd2c3dfd8936bb05be9cc67bd32d663c7f00d70932a0be3c24f022d0ac3
  73. 34eb6cabf1933633db007b763227b0d9971a9ea36aca8b669ec94fcf16352f6b
  74. 3dcae28e4bd6137db4ddd3022d0400a09f15ee7b351a2481cb0309920905c236
  75. d09c87afd3022f3afc2a19e3b746672b635238956ee7e6dd62d5022d0cd88ed1
  76. 4fcfbda5bbf0257f700147137bbab9c797af7df866704b889aa37e2e93df3ff1
  77. a0fd3490111dcdbc4c
  78. """
  79. ###
  80. #
  81. # The key above will now be encrypted with different algorithms.
  82. # The password is always 'TestTest'.
  83. #
  84. # Each item in the wrapped_enc_keys list contains:
  85. # * wrap algorithm
  86. # * iteration count
  87. # * Salt
  88. # * IV
  89. # * Expected result
  90. ###
  91. wrapped_enc_keys = []
  92. #
  93. # openssl pkcs8 -topk8 -passin pass:TestTest -inform DER -in key.der -outform DER -out keyenc.der -v2 des3
  94. # hexdump -v -e '32/1 "%02x" "\n"' keyenc.der
  95. #
  96. wrapped_enc_keys.append((
  97. 'PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC',
  98. 2048,
  99. "47EA7227D8B22E2F", # IV
  100. "E3F7A838AB911A4D", # Salt
  101. """
  102. 30820216304006092a864886f70d01050d3033301b06092a864886f70d01050c
  103. 300e0408e3f7a838ab911a4d02020800301406082a864886f70d0307040847ea
  104. 7227d8b22e2f048201d0ea388b374d2d0e4ceb7a5139f850fdff274884a6e6c0
  105. 64326e09d00dbba9018834edb5a51a6ae3d1806e6e91eebf33788ce71fee0637
  106. a2ebf58859dd32afc644110c390274a6128b50c39b8d907823810ec471bada86
  107. 6f5b75d8ea04ad310fad2e73621696db8e426cd511ee93ec1714a1a7db45e036
  108. 4bf20d178d1f16bbb250b32c2d200093169d588de65f7d99aad9ddd0104b44f1
  109. 326962e1520dfac3c2a800e8a14f678dff2b3d0bb23f69da635bf2a643ac934e
  110. 219a447d2f4460b67149e860e54f365da130763deefa649c72b0dcd48966a2d3
  111. 4a477444782e3e66df5a582b07bbb19778a79bd355074ce331f4a82eb966b0c4
  112. 52a09eab6116f2722064d314ae433b3d6e81d2436e93fdf446112663cde93b87
  113. 9c8be44beb45f18e2c78fee9b016033f01ecda51b9b142091fa69f65ab784d2c
  114. 5ad8d34be6f7f1464adfc1e0ef3f7848f40d3bdea4412758f2fcb655c93d8f4d
  115. f6fa48fc5aa4b75dd1c017ab79ac9d737233a6d668f5364ccf47786debd37334
  116. 9c10c9e6efbe78430a61f71c89948aa32cdc3cc7338cf994147819ce7ab23450
  117. c8f7d9b94c3bb377d17a3fa204b601526317824b142ff6bc843fa7815ece89c0
  118. 839573f234dac8d80cc571a045353d61db904a4398d8ef3df5ac
  119. """
  120. ))
  121. #
  122. # openssl pkcs8 -topk8 -passin pass:TestTest -inform DER -in key.der -outform DER -out keyenc.der
  123. # hexdump -v -e '32/1 "%02x" "\n"' keyenc.der
  124. #
  125. wrapped_enc_keys.append((
  126. 'skip encryption', # pbeWithMD5AndDES-CBC, only decoding is supported
  127. -1,
  128. "",
  129. "",
  130. """
  131. 308201f1301b06092a864886f70d010503300e0408f9b990c89af1d41b020208
  132. 00048201d0c6267fe8592903891933d559e71a7ca68b2e39150f19daca0f7921
  133. 52f97e249d72f670d5140e9150433310ed7c7ee51927693fd39884cb9551cea5
  134. a7b746f7edf199f8787d4787a35dad930d7db057b2118851211b645ac8b90fa6
  135. b0e7d49ac8567cbd5fff226e87aa9129a0f52c45e9307752e8575c3b0ff756b7
  136. 31fda6942d15ecb6b27ea19370ccc79773f47891e80d22b440d81259c4c28eac
  137. e0ca839524116bcf52d8c566e49a95ddb0e5493437279a770a39fd333f3fca91
  138. 55884fad0ba5aaf273121f893059d37dd417da7dcfd0d6fa7494968f13b2cc95
  139. 65633f2c891340193e5ec00e4ee0b0e90b3b93da362a4906360845771ade1754
  140. 9df79140be5993f3424c012598eadd3e7c7c0b4db2c72cf103d7943a5cf61420
  141. 93370b9702386c3dd4eb0a47f34b579624a46a108b2d13921fa1b367495fe345
  142. 6aa128aa70f8ca80ae13eb301e96c380724ce67c54380bbea2316c1faf4d058e
  143. b4ca2e23442047606b9bc4b3bf65b432cb271bea4eb35dd3eb360d3be8612a87
  144. a50e96a2264490aeabdc07c6e78e5dbf4fe3388726d0e2a228346bf3c2907d68
  145. 2a6276b22ae883fb30fa611f4e4193e7a08480fcd7db48308bacbd72bf4807aa
  146. 11fd394859f97d22982f7fe890b2e2a0f7e7ffb693
  147. """
  148. ))
  149. #
  150. # openssl pkcs8 -topk8 -passin pass:TestTest -inform DER -in key.der
  151. # -outform DER -out keyenc.der -v1 PBE-SHA1-RC2-64
  152. # hexdump -v -e '32/1 "%02x" "\n"' keyenc.der
  153. #
  154. wrapped_enc_keys.append((
  155. 'skip encryption', # pbeWithSHA1AndRC2-CBC, only decoding is supported
  156. -1,
  157. "",
  158. "",
  159. """
  160. 308201f1301b06092a864886f70d01050b300e04083ee943bdae185008020208
  161. 00048201d0e4614d9371d3ff10ceabc2f6a7a13a0f449f9a714144e46518ea55
  162. e3e6f0cde24031d01ef1f37ec40081449ef01914faf45983dde0d2bc496712de
  163. 8dd15a5527dff4721d9016c13f34fb93e3ce68577e30146266d71b539f854e56
  164. 753a192cf126ed4812734d86f81884374f1100772f78d0646e9946407637c565
  165. d070acab413c55952f7237437f2e48cae7fa0ff8d370de2bf446dd08049a3663
  166. d9c813ac197468c02e2b687e7ca994cf7f03f01b6eca87dbfed94502c2094157
  167. ea39f73fe4e591df1a68b04d19d9adab90bb9898467c1464ad20bf2b8fb9a5ff
  168. d3ec91847d1c67fd768a4b9cfb46572eccc83806601372b6fad0243f58f623b7
  169. 1c5809dea0feb8278fe27e5560eed8448dc93f5612f546e5dd7c5f6404365eb2
  170. 5bf3396814367ae8b15c5c432b57eaed1f882c05c7f6517ee9e42b87b7b8d071
  171. 9d6125d1b52f7b2cca1f6bd5f584334bf90bce1a7d938274cafe27b68e629698
  172. b16e27ae528db28593af9adcfccbebb3b9e1f2af5cd5531b51968389caa6c091
  173. e7de1f1b96f0d258e54e540d961a7c0ef51fda45d6da5fddd33e9bbfd3a5f8d7
  174. d7ab2e971de495cddbc86d38444fee9f0ac097b00adaf7802dabe0cff5b43b45
  175. 4f26b7b547016f89be52676866189911c53e2f2477"""
  176. ))
  177. #
  178. # openssl pkcs8 -topk8 -passin pass:TestTest -inform DER -in key.der
  179. # -outform DER -out keyenc.der -v1 PBE-MD5-RC2-64
  180. # hexdump -v -e '32/1 "%02x" "\n"' keyenc.der
  181. #
  182. wrapped_enc_keys.append((
  183. 'skip encryption', # pbeWithMD5AndRC2-CBC, only decoding is supported
  184. -1,
  185. "",
  186. "",
  187. """
  188. 308201f1301b06092a864886f70d010506300e0408f5cd2fee56d9b4b8020208
  189. 00048201d086454942d6166a19d6b108465bd111e7080911f573d54b1369c676
  190. df28600e84936bfec04f91023ff16499e2e07178c340904f12ffa6886ab66228
  191. 32bf43c2bff5a0ed14e765918cf5fc543ad49566246f7eb3fc044fa5a9c25f40
  192. 8fc8c8296b91658d3bb1067c0aba008c4fefd9e2bcdbbbd63fdc8085482bccf4
  193. f150cec9a084259ad441a017e5d81a1034ef2484696a7a50863836d0eeda45cd
  194. 8cee8ecabfed703f8d9d4bbdf3a767d32a0ccdc38550ee2928d7fe3fa27eda5b
  195. 5c7899e75ad55d076d2c2d3c37d6da3d95236081f9671dab9a99afdb1cbc890e
  196. 332d1a91105d9a8ce08b6027aa07367bd1daec3059cb51f5d896124da16971e4
  197. 0ca4bcadb06c854bdf39f42dd24174011414e51626d198775eff3449a982df7b
  198. ace874e77e045eb6d7c3faef0750792b29a068a6291f7275df1123fac5789c51
  199. 27ace42836d81633faf9daf38f6787fff0394ea484bbcd465b57d4dbee3cf8df
  200. b77d1db287b3a6264c466805be5a4fe85cfbca180699859280f2dd8e2c2c10b5
  201. 7a7d2ac670c6039d41952fbb0e4f99b560ebe1d020e1b96d02403283819c00cc
  202. 529c51f0b0101555e4c58002ba3c6e3c12e3fde1aec94382792e96d9666a2b33
  203. 3dc397b22ecab67ee38a552fec29a1d4ff8719c748"""
  204. ))
  205. #
  206. # openssl pkcs8 -topk8 -passin pass:TestTest -inform DER -in key.der
  207. # -outform DER -out keyenc.der -v1 PBE-SHA1-DES
  208. # hexdump -v -e '32/1 "%02x" "\n"' keyenc.der
  209. #
  210. wrapped_enc_keys.append((
  211. 'skip encryption', # pbeWithSHA1AndDES-CBC, only decoding is supported
  212. -1,
  213. "",
  214. "",
  215. """
  216. 308201f1301b06092a864886f70d01050a300e04089bacc9cf1e8f734e020208
  217. 00048201d03e502f3ceafe8fd19ab2939576bfdded26d719b2441db1459688f5
  218. 9673218b41ec1f739edf1e460bd927bc28470c87b2d4fc8ea02ba17b47a63c49
  219. c5c1bee40529dadfd3ef8b4472c730bc136678c78abfb34670ec9d7dcd17ee3f
  220. 892f93f2629e6e0f4b24ecb9f954069bf722f466dece3913bb6abbd2c471d9a5
  221. c5eea89b14aaccda43d30b0dd0f6eb6e9850d9747aa8aa8414c383ad01c374ee
  222. 26d3552abec9ba22669cc9622ccf2921e3d0c8ecd1a70e861956de0bec6104b5
  223. b649ac994970c83f8a9e84b14a7dff7843d4ca3dd4af87cea43b5657e15ae0b5
  224. a940ce5047f006ab3596506600724764f23757205fe374fee04911336d655acc
  225. 03e159ec27789191d1517c4f3f9122f5242d44d25eab8f0658cafb928566ca0e
  226. 8f6589aa0c0ab13ca7a618008ae3eafd4671ee8fe0b562e70b3623b0e2a16eee
  227. 97fd388087d2e03530c9fe7db6e52eccc7c48fd701ede35e08922861a9508d12
  228. bc8bbf24f0c6bee6e63dbcb489b603d4c4a78ce45bf2eab1d5d10456c42a65a8
  229. 3a606f4e4b9b46eb13b57f2624b651859d3d2d5192b45dbd5a2ead14ff20ca76
  230. 48f321309aa56d8c0c4a192b580821cc6c70c75e6f19d1c5414da898ec4dd39d
  231. b0eb93d6ba387a80702dfd2db610757ba340f63230
  232. """
  233. ))
  234. #
  235. # openssl pkcs8 -topk8 -passin pass:TestTest -inform DER -in key.der
  236. # -outform DER -out keyenc.der -v2 aes128
  237. # hexdump -v -e '32/1 "%02x" "\n"' keyenc.der
  238. #
  239. wrapped_enc_keys.append((
  240. 'PBKDF2WithHMAC-SHA1AndAES128-CBC',
  241. 2048,
  242. "4F66EE5D3BCD531FE6EBF4B4E73016B8", # IV
  243. "479F25156176C53A", # Salt
  244. """
  245. 3082021f304906092a864886f70d01050d303c301b06092a864886f70d01050c
  246. 300e0408479f25156176c53a02020800301d060960864801650304010204104f
  247. 66ee5d3bcd531fe6ebf4b4e73016b8048201d0e33cfa560423f589d097d21533
  248. 3b880a5ebac5b2ac58b4e73b0d787aee7764f034fe34ca1d1bd845c0a7c3316f
  249. afbfb2129e03dcaf5a5031394206492828dacef1e04639bee5935e0f46114202
  250. 10bc6c37182f4889be11c5d0486c398f4be952e5740f65de9d8edeb275e2b406
  251. e19bc29ad5ebb97fa536344fc3d84c7e755696f12b810898de4e6f069b8a81c8
  252. 0aab0d45d7d062303aaa4a10c2ce84fdb5a03114039cfe138e38bb15b2ced717
  253. 93549cdad85e730b14d9e2198b663dfdc8d04a4349eb3de59b076ad40b116d4a
  254. 25ed917c576bc7c883c95ef0f1180e28fc9981bea069594c309f1aa1b253ceab
  255. a2f0313bb1372bcb51a745056be93d77a1f235a762a45e8856512d436b2ca0f7
  256. dd60fbed394ba28978d2a2b984b028529d0a58d93aba46c6bbd4ac1e4013cbaa
  257. 63b00988bc5f11ccc40141c346762d2b28f64435d4be98ec17c1884985e3807e
  258. e550db606600993efccf6de0dfc2d2d70b5336a3b018fa415d6bdd59f5777118
  259. 16806b7bc17c4c7e20ad7176ebfa5a1aa3f6bc10f04b77afd443944642ac9cca
  260. d740e082b4a3bbb8bafdd34a0b3c5f2f3c2aceccccdccd092b78994b845bfa61
  261. 706c3b9df5165ed1dbcbf1244fe41fc9bf993f52f7658e2f87e1baaeacb0f562
  262. 9d905c
  263. """
  264. ))
  265. #
  266. # openssl pkcs8 -topk8 -passin pass:TestTest -inform DER -in key.der
  267. # -outform DER -out keyenc.der -v2 aes192
  268. # hexdump -v -e '32/1 "%02x" "\n"' keyenc.der
  269. #
  270. wrapped_enc_keys.append((
  271. 'PBKDF2WithHMAC-SHA1AndAES192-CBC',
  272. 2048,
  273. "5CFC2A4FF7B63201A4A8A5B021148186", # IV
  274. "D718541C264944CE", # Salt
  275. """
  276. 3082021f304906092a864886f70d01050d303c301b06092a864886f70d01050c
  277. 300e0408d718541c264944ce02020800301d060960864801650304011604105c
  278. fc2a4ff7b63201a4a8a5b021148186048201d08e74aaa21b8bcfb15b9790fe95
  279. b0e09ddb0f189b6fb1682fdb9f122b804650ddec3c67a1df093a828b3e5fbcc6
  280. 286abbcc5354c482fd796d972e919ca8a5eba1eaa2293af1d648013ddad72106
  281. 75622264dfba55dafdda39e338f058f1bdb9846041ffff803797d3fdf3693135
  282. 8a192729ea8346a7e5e58e925a2e2e4af0818581859e8215d87370eb4194a5ff
  283. bae900857d4c591dbc651a241865a817eaede9987c9f9ae4f95c0bf930eea88c
  284. 4d7596e535ffb7ca369988aba75027a96b9d0bc9c8b0b75f359067fd145a378b
  285. 02aaa15e9db7a23176224da48a83249005460cc6e429168657f2efa8b1af7537
  286. d7d7042f2d683e8271b21d591090963eeb57aea6172f88da139e1614d6a7d1a2
  287. 1002d5a7a93d6d21156e2b4777f6fc069287a85a1538c46b7722ccde591ab55c
  288. 630e1ceeb1ac42d1b41f3f654e9da86b5efced43775ea68b2594e50e4005e052
  289. 0fe753c0898120c2c07265367ff157f6538a1e4080d6f9d1ca9eb51939c9574e
  290. f2e4e1e87c1434affd5808563cddd376776dbbf790c6a40028f311a8b58dafa2
  291. 0970ed34acd6e3e89d063987893b2b9570ddb8cc032b05a723bba9444933ebf3
  292. c624204be72f4190e0245197d0cb772bec933fd8442445f9a28bd042d5a3a1e9
  293. 9a8a07
  294. """
  295. ))
  296. #
  297. # openssl pkcs8 -topk8 -passin pass:TestTest -inform DER -in key.der
  298. # -outform DER -out keyenc.der -v2 aes192
  299. # hexdump -v -e '32/1 "%02x" "\n"' keyenc.der
  300. #
  301. wrapped_enc_keys.append((
  302. 'PBKDF2WithHMAC-SHA1AndAES256-CBC',
  303. 2048,
  304. "323351F94462AC563E053A056252C2C4", # IV
  305. "02A6CD0D12E727B5", # Salt
  306. """
  307. 3082021f304906092a864886f70d01050d303c301b06092a864886f70d01050c
  308. 300e040802a6cd0d12e727b502020800301d060960864801650304012a041032
  309. 3351f94462ac563e053a056252c2c4048201d07f4ef1c7be21aae738a20c5632
  310. b8bdbbb9083b6e7f68822267b1f481fd27fdafd61a90660de6e4058790e4c912
  311. bf3f319a7c37e6eb3d956daaa143865020d554bf6215e8d7492359aaeef45d6e
  312. d85a686ed26c0bf7c18d071d827a86f0b73e1db0c0e7f3d42201544093302a90
  313. 551ad530692468c47ac15c69500b8ca67d4a17b64d15cecc035ae50b768a36cf
  314. 07c395afa091e9e6f86f665455fbdc1b21ad79c0908b73da5de75a9b43508d5d
  315. 44dc97a870cd3cd9f01ca24452e9b11c1b4982946702cfcbfda5b2fcc0203fb5
  316. 0b52a115760bd635c94d4c95ac2c640ee9a04ffaf6ccff5a8d953dd5d88ca478
  317. c377811c521f2191639c643d657a9e364af88bb7c14a356c2b0b4870a23c2f54
  318. d41f8157afff731471dccc6058b15e1151bcf84b39b5e622a3a1d65859c912a5
  319. 591b85e034a1f6af664f030a6bfc8c3d20c70f32b54bcf4da9c2da83cef49cf8
  320. e9a74f0e5d358fe50b88acdce6a9db9a7ad61536212fc5f877ebfc7957b8bda4
  321. b1582a0f10d515a20ee06cf768db9c977aa6fbdca7540d611ff953012d009dac
  322. e8abd059f8e8ffea637c9c7721f817aaf0bb23403e26a0ef0ff0e2037da67d41
  323. af728481f53443551a9bff4cea023164e9622b5441a309e1f4bff98e5bf76677
  324. 8d7cd9
  325. """
  326. ))
  327. # hexdump -v -e '32/1 "%02x" "\n"' botan_scrypt.der
  328. botan_scrypt = """
  329. 3081f1305206092a864886f70d01050d3045302806092b06010401da47040b30
  330. 1b040c316c5c7a847276a838a668280202200002010102010102012030190609
  331. 60864801650304012e040c293e9bcddc0d59d64e060cb604819ab92318063480
  332. 16148081a3123bb092b636ec0cc3b964628e181504c13eaf94987e6fb9f171d4
  333. 9c45baeeb79c1d805d5a762d9bfd6d1995669df60a2cd0174b6d204693964de7
  334. 05bc3fdc3a4ce5db01f30a994c82b0aac786e4f8655138c952f1cf2cc6093f90
  335. b5e5ca507beb539ff497b7b6370ba7f31f4928d3385dbe8bcd2395813ba1324e
  336. 6795e81a8518aff0f0a9e01396539f937b8b7b08
  337. """
  338. # hexdump -v -e '32/1 "%02x" "\n"' botan_pbkdf2.der
  339. botan_pbkdf2 = """
  340. 3081f3305e06092a864886f70d01050d3051303006092a864886f70d01050c30
  341. 23040cc91c89b368db578d2ec4c32002020fa0020118300c06082a864886f70d
  342. 02090500301d060960864801650304011604102a7147289e7c914a7d8257e4a1
  343. a2135b048190a648955fc96ecae56dcb4d0ab19edc5b7ef1219c88c7c3b2d0ed
  344. b21e25d2559447f53e20b90b2f20e72456d943561c4925aad6067a4c720afb3d
  345. 691e14dfffa10ef77898e21d134f19136d35088a7aac508b296fd00d5742ad69
  346. 8c693293b6a591e3660b130d718724d23d696f4da9bf4031475fafb682d7955c
  347. 996363f37032e10ac85afebb7cc1cbfc0e5d4c60a4c2
  348. """
  349. def txt2bin(inputs):
  350. s = b('').join([b(x) for x in inputs if not (x in '\n\r\t ')])
  351. return unhexlify(s)
  352. class Rng:
  353. def __init__(self, output):
  354. self.output=output
  355. self.idx=0
  356. def __call__(self, n):
  357. output = self.output[self.idx:self.idx+n]
  358. self.idx += n
  359. return output
  360. class PKCS8_Decrypt(unittest.TestCase):
  361. def setUp(self):
  362. self.oid_key = oid_key
  363. self.clear_key = txt2bin(clear_key)
  364. self.wrapped_clear_key = txt2bin(wrapped_clear_key)
  365. self.wrapped_enc_keys = []
  366. for t in wrapped_enc_keys:
  367. self.wrapped_enc_keys.append((
  368. t[0],
  369. t[1],
  370. txt2bin(t[2]),
  371. txt2bin(t[3]),
  372. txt2bin(t[4])
  373. ))
  374. ### NO ENCRYTION
  375. def test1(self):
  376. """Verify unwrapping w/o encryption"""
  377. res1, res2, res3 = PKCS8.unwrap(self.wrapped_clear_key)
  378. self.assertEqual(res1, self.oid_key)
  379. self.assertEqual(res2, self.clear_key)
  380. def test2(self):
  381. """Verify wrapping w/o encryption"""
  382. wrapped = PKCS8.wrap(self.clear_key, self.oid_key)
  383. res1, res2, res3 = PKCS8.unwrap(wrapped)
  384. self.assertEqual(res1, self.oid_key)
  385. self.assertEqual(res2, self.clear_key)
  386. ## ENCRYPTION
  387. def test3(self):
  388. """Verify unwrapping with encryption"""
  389. for t in self.wrapped_enc_keys:
  390. res1, res2, res3 = PKCS8.unwrap(t[4], b"TestTest")
  391. self.assertEqual(res1, self.oid_key)
  392. self.assertEqual(res2, self.clear_key)
  393. def test4(self):
  394. """Verify wrapping with encryption"""
  395. for t in self.wrapped_enc_keys:
  396. if t[0] == 'skip encryption':
  397. continue
  398. rng = Rng(t[2]+t[3])
  399. params = { 'iteration_count':t[1] }
  400. wrapped = PKCS8.wrap(
  401. self.clear_key,
  402. self.oid_key,
  403. b("TestTest"),
  404. protection=t[0],
  405. prot_params=params,
  406. key_params=DerNull(),
  407. randfunc=rng)
  408. self.assertEqual(wrapped, t[4])
  409. def test_import_botan_keys(self):
  410. botan_scrypt_der = txt2bin(botan_scrypt)
  411. key1 = PKCS8.unwrap(botan_scrypt_der,
  412. b'your_password')
  413. botan_pbkdf2_der = txt2bin(botan_pbkdf2)
  414. key2 = PKCS8.unwrap(botan_pbkdf2_der,
  415. b'your_password')
  416. self.assertEqual(key1, key2)
  417. def get_tests(config={}):
  418. from Crypto.SelfTest.st_common import list_test_cases
  419. listTests = []
  420. listTests += list_test_cases(PKCS8_Decrypt)
  421. return listTests
  422. if __name__ == '__main__':
  423. suite = lambda: unittest.TestSuite(get_tests())
  424. unittest.main(defaultTest='suite')