test_dss.py 56 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369
  1. #
  2. # SelfTest/Signature/test_dss.py: Self-test for DSS signatures
  3. #
  4. # ===================================================================
  5. #
  6. # Copyright (c) 2014, Legrandin <helderijs@gmail.com>
  7. # All rights reserved.
  8. #
  9. # Redistribution and use in source and binary forms, with or without
  10. # modification, are permitted provided that the following conditions
  11. # are met:
  12. #
  13. # 1. Redistributions of source code must retain the above copyright
  14. # notice, this list of conditions and the following disclaimer.
  15. # 2. Redistributions in binary form must reproduce the above copyright
  16. # notice, this list of conditions and the following disclaimer in
  17. # the documentation and/or other materials provided with the
  18. # distribution.
  19. #
  20. # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  21. # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  22. # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
  23. # FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
  24. # COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
  25. # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
  26. # BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  27. # LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
  28. # CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  29. # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
  30. # ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  31. # POSSIBILITY OF SUCH DAMAGE.
  32. # ===================================================================
  33. import re
  34. import unittest
  35. from binascii import hexlify, unhexlify
  36. from Crypto.Util.py3compat import tobytes, bord, bchr
  37. from Crypto.Hash import (SHA1, SHA224, SHA256, SHA384, SHA512,
  38. SHA3_224, SHA3_256, SHA3_384, SHA3_512)
  39. from Crypto.Signature import DSS
  40. from Crypto.PublicKey import DSA, ECC
  41. from Crypto.SelfTest.st_common import list_test_cases
  42. from Crypto.SelfTest.loader import load_test_vectors, load_test_vectors_wycheproof
  43. from Crypto.Util.number import bytes_to_long, long_to_bytes
  44. def t2b(hexstring):
  45. ws = hexstring.replace(" ", "").replace("\n", "")
  46. return unhexlify(tobytes(ws))
  47. def t2l(hexstring):
  48. ws = hexstring.replace(" ", "").replace("\n", "")
  49. return int(ws, 16)
  50. def load_hash_by_name(hash_name):
  51. return __import__("Crypto.Hash." + hash_name, globals(), locals(), ["new"])
  52. class StrRNG:
  53. def __init__(self, randomness):
  54. length = len(randomness)
  55. self._idx = 0
  56. # Fix required to get the right K (see how randint() works!)
  57. self._randomness = long_to_bytes(bytes_to_long(randomness) - 1, length)
  58. def __call__(self, n):
  59. out = self._randomness[self._idx:self._idx + n]
  60. self._idx += n
  61. return out
  62. class FIPS_DSA_Tests(unittest.TestCase):
  63. # 1st 1024 bit key from SigGen.txt
  64. P = 0xa8f9cd201e5e35d892f85f80e4db2599a5676a3b1d4f190330ed3256b26d0e80a0e49a8fffaaad2a24f472d2573241d4d6d6c7480c80b4c67bb4479c15ada7ea8424d2502fa01472e760241713dab025ae1b02e1703a1435f62ddf4ee4c1b664066eb22f2e3bf28bb70a2a76e4fd5ebe2d1229681b5b06439ac9c7e9d8bde283
  65. Q = 0xf85f0f83ac4df7ea0cdf8f469bfeeaea14156495
  66. G = 0x2b3152ff6c62f14622b8f48e59f8af46883b38e79b8c74deeae9df131f8b856e3ad6c8455dab87cc0da8ac973417ce4f7878557d6cdf40b35b4a0ca3eb310c6a95d68ce284ad4e25ea28591611ee08b8444bd64b25f3f7c572410ddfb39cc728b9c936f85f419129869929cdb909a6a3a99bbe089216368171bd0ba81de4fe33
  67. X = 0xc53eae6d45323164c7d07af5715703744a63fc3a
  68. Y = 0x313fd9ebca91574e1c2eebe1517c57e0c21b0209872140c5328761bbb2450b33f1b18b409ce9ab7c4cd8fda3391e8e34868357c199e16a6b2eba06d6749def791d79e95d3a4d09b24c392ad89dbf100995ae19c01062056bb14bce005e8731efde175f95b975089bdcdaea562b32786d96f5a31aedf75364008ad4fffebb970b
  69. key_pub = DSA.construct((Y, G, P, Q))
  70. key_priv = DSA.construct((Y, G, P, Q, X))
  71. def shortDescription(self):
  72. return "FIPS DSA Tests"
  73. def test_loopback(self):
  74. hashed_msg = SHA512.new(b"test")
  75. signer = DSS.new(self.key_priv, 'fips-186-3')
  76. signature = signer.sign(hashed_msg)
  77. verifier = DSS.new(self.key_pub, 'fips-186-3')
  78. verifier.verify(hashed_msg, signature)
  79. def test_negative_unapproved_hashes(self):
  80. """Verify that unapproved hashes are rejected"""
  81. from Crypto.Hash import RIPEMD160
  82. self.description = "Unapproved hash (RIPEMD160) test"
  83. hash_obj = RIPEMD160.new()
  84. signer = DSS.new(self.key_priv, 'fips-186-3')
  85. self.assertRaises(ValueError, signer.sign, hash_obj)
  86. self.assertRaises(ValueError, signer.verify, hash_obj, b"\x00" * 40)
  87. def test_negative_unknown_modes_encodings(self):
  88. """Verify that unknown modes/encodings are rejected"""
  89. self.description = "Unknown mode test"
  90. self.assertRaises(ValueError, DSS.new, self.key_priv, 'fips-186-0')
  91. self.description = "Unknown encoding test"
  92. self.assertRaises(ValueError, DSS.new, self.key_priv, 'fips-186-3', 'xml')
  93. def test_asn1_encoding(self):
  94. """Verify ASN.1 encoding"""
  95. self.description = "ASN.1 encoding test"
  96. hash_obj = SHA1.new()
  97. signer = DSS.new(self.key_priv, 'fips-186-3', 'der')
  98. signature = signer.sign(hash_obj)
  99. # Verify that output looks like a DER SEQUENCE
  100. self.assertEqual(bord(signature[0]), 48)
  101. signer.verify(hash_obj, signature)
  102. # Verify that ASN.1 parsing fails as expected
  103. signature = bchr(7) + signature[1:]
  104. self.assertRaises(ValueError, signer.verify, hash_obj, signature)
  105. def test_sign_verify(self):
  106. """Verify public/private method"""
  107. self.description = "can_sign() test"
  108. signer = DSS.new(self.key_priv, 'fips-186-3')
  109. self.assertTrue(signer.can_sign())
  110. signer = DSS.new(self.key_pub, 'fips-186-3')
  111. self.assertFalse(signer.can_sign())
  112. try:
  113. signer.sign(SHA256.new(b'xyz'))
  114. except TypeError as e:
  115. msg = str(e)
  116. else:
  117. msg = ""
  118. self.assertTrue("Private key is needed" in msg)
  119. class FIPS_DSA_Tests_KAT(unittest.TestCase):
  120. pass
  121. test_vectors_verify = load_test_vectors(("Signature", "DSA"),
  122. "FIPS_186_3_SigVer.rsp",
  123. "Signature Verification 186-3",
  124. {'result': lambda x: x}) or []
  125. for idx, tv in enumerate(test_vectors_verify):
  126. if isinstance(tv, str):
  127. res = re.match(r"\[mod = L=([0-9]+), N=([0-9]+), ([a-zA-Z0-9-]+)\]", tv)
  128. assert(res)
  129. hash_name = res.group(3).replace("-", "")
  130. hash_module = load_hash_by_name(hash_name)
  131. continue
  132. if hasattr(tv, "p"):
  133. modulus = tv.p
  134. generator = tv.g
  135. suborder = tv.q
  136. continue
  137. hash_obj = hash_module.new(tv.msg)
  138. comps = [bytes_to_long(x) for x in (tv.y, generator, modulus, suborder)]
  139. key = DSA.construct(comps, False) # type: ignore
  140. verifier = DSS.new(key, 'fips-186-3')
  141. def positive_test(self, verifier=verifier, hash_obj=hash_obj, signature=tv.r+tv.s):
  142. verifier.verify(hash_obj, signature)
  143. def negative_test(self, verifier=verifier, hash_obj=hash_obj, signature=tv.r+tv.s):
  144. self.assertRaises(ValueError, verifier.verify, hash_obj, signature)
  145. if tv.result == 'p':
  146. setattr(FIPS_DSA_Tests_KAT, "test_verify_positive_%d" % idx, positive_test)
  147. else:
  148. setattr(FIPS_DSA_Tests_KAT, "test_verify_negative_%d" % idx, negative_test)
  149. test_vectors_sign = load_test_vectors(("Signature", "DSA"),
  150. "FIPS_186_3_SigGen.txt",
  151. "Signature Creation 186-3",
  152. {}) or []
  153. for idx, tv in enumerate(test_vectors_sign):
  154. if isinstance(tv, str):
  155. res = re.match(r"\[mod = L=([0-9]+), N=([0-9]+), ([a-zA-Z0-9-]+)\]", tv)
  156. assert(res)
  157. hash_name = res.group(3).replace("-", "")
  158. hash_module = load_hash_by_name(hash_name)
  159. continue
  160. if hasattr(tv, "p"):
  161. modulus = tv.p
  162. generator = tv.g
  163. suborder = tv.q
  164. continue
  165. hash_obj = hash_module.new(tv.msg)
  166. comps_dsa = [bytes_to_long(x) for x in (tv.y, generator, modulus, suborder, tv.x)]
  167. key = DSA.construct(comps_dsa, False) # type: ignore
  168. signer = DSS.new(key, 'fips-186-3', randfunc=StrRNG(tv.k))
  169. def new_test(self, signer=signer, hash_obj=hash_obj, signature=tv.r+tv.s):
  170. self.assertEqual(signer.sign(hash_obj), signature)
  171. setattr(FIPS_DSA_Tests_KAT, "test_sign_%d" % idx, new_test)
  172. class FIPS_ECDSA_Tests(unittest.TestCase):
  173. key_priv = ECC.generate(curve="P-256")
  174. key_pub = key_priv.public_key()
  175. def shortDescription(self):
  176. return "FIPS ECDSA Tests"
  177. def test_loopback(self):
  178. hashed_msg = SHA512.new(b"test")
  179. signer = DSS.new(self.key_priv, 'fips-186-3')
  180. signature = signer.sign(hashed_msg)
  181. verifier = DSS.new(self.key_pub, 'fips-186-3')
  182. verifier.verify(hashed_msg, signature)
  183. def test_negative_unapproved_hashes(self):
  184. """Verify that unapproved hashes are rejected"""
  185. from Crypto.Hash import SHA1
  186. self.description = "Unapproved hash (SHA-1) test"
  187. hash_obj = SHA1.new()
  188. signer = DSS.new(self.key_priv, 'fips-186-3')
  189. self.assertRaises(ValueError, signer.sign, hash_obj)
  190. self.assertRaises(ValueError, signer.verify, hash_obj, b"\x00" * 40)
  191. def test_negative_eddsa_key(self):
  192. key = ECC.generate(curve="ed25519")
  193. self.assertRaises(ValueError, DSS.new, key, 'fips-186-3')
  194. def test_sign_verify(self):
  195. """Verify public/private method"""
  196. self.description = "can_sign() test"
  197. signer = DSS.new(self.key_priv, 'fips-186-3')
  198. self.assertTrue(signer.can_sign())
  199. signer = DSS.new(self.key_pub, 'fips-186-3')
  200. self.assertFalse(signer.can_sign())
  201. self.assertRaises(TypeError, signer.sign, SHA256.new(b'xyz'))
  202. try:
  203. signer.sign(SHA256.new(b'xyz'))
  204. except TypeError as e:
  205. msg = str(e)
  206. else:
  207. msg = ""
  208. self.assertTrue("Private key is needed" in msg)
  209. def test_negative_unknown_modes_encodings(self):
  210. """Verify that unknown modes/encodings are rejected"""
  211. self.description = "Unknown mode test"
  212. self.assertRaises(ValueError, DSS.new, self.key_priv, 'fips-186-0')
  213. self.description = "Unknown encoding test"
  214. self.assertRaises(ValueError, DSS.new, self.key_priv, 'fips-186-3', 'xml')
  215. def test_asn1_encoding(self):
  216. """Verify ASN.1 encoding"""
  217. self.description = "ASN.1 encoding test"
  218. hash_obj = SHA256.new()
  219. signer = DSS.new(self.key_priv, 'fips-186-3', 'der')
  220. signature = signer.sign(hash_obj)
  221. # Verify that output looks like a DER SEQUENCE
  222. self.assertEqual(bord(signature[0]), 48)
  223. signer.verify(hash_obj, signature)
  224. # Verify that ASN.1 parsing fails as expected
  225. signature = bchr(7) + signature[1:]
  226. self.assertRaises(ValueError, signer.verify, hash_obj, signature)
  227. class FIPS_ECDSA_Tests_KAT(unittest.TestCase):
  228. pass
  229. test_vectors_verify = load_test_vectors(("Signature", "ECDSA"),
  230. "SigVer.rsp",
  231. "ECDSA Signature Verification 186-3",
  232. {'result': lambda x: x,
  233. 'qx': lambda x: int(x, 16),
  234. 'qy': lambda x: int(x, 16),
  235. }) or []
  236. test_vectors_verify += load_test_vectors(("Signature", "ECDSA"),
  237. "SigVer_TruncatedSHAs.rsp",
  238. "ECDSA Signature Verification 186-3",
  239. {'result': lambda x: x,
  240. 'qx': lambda x: int(x, 16),
  241. 'qy': lambda x: int(x, 16),
  242. }) or []
  243. for idx, tv in enumerate(test_vectors_verify):
  244. if isinstance(tv, str):
  245. res = re.match(r"\[(P-[0-9]+),(SHA-[0-9]+)\]", tv)
  246. assert res
  247. curve_name = res.group(1)
  248. hash_name = res.group(2).replace("-", "")
  249. if hash_name in ("SHA512224", "SHA512256"):
  250. truncate = hash_name[-3:]
  251. hash_name = hash_name[:-3]
  252. else:
  253. truncate = None
  254. hash_module = load_hash_by_name(hash_name)
  255. continue
  256. if truncate is None:
  257. hash_obj = hash_module.new(tv.msg)
  258. else:
  259. hash_obj = hash_module.new(tv.msg, truncate=truncate)
  260. ecc_key = ECC.construct(curve=curve_name, point_x=tv.qx, point_y=tv.qy)
  261. verifier = DSS.new(ecc_key, 'fips-186-3')
  262. def positive_test(self, verifier=verifier, hash_obj=hash_obj, signature=tv.r+tv.s):
  263. verifier.verify(hash_obj, signature)
  264. def negative_test(self, verifier=verifier, hash_obj=hash_obj, signature=tv.r+tv.s):
  265. self.assertRaises(ValueError, verifier.verify, hash_obj, signature)
  266. if tv.result.startswith('p'):
  267. setattr(FIPS_ECDSA_Tests_KAT, "test_verify_positive_%d" % idx, positive_test)
  268. else:
  269. setattr(FIPS_ECDSA_Tests_KAT, "test_verify_negative_%d" % idx, negative_test)
  270. test_vectors_sign = load_test_vectors(("Signature", "ECDSA"),
  271. "SigGen.txt",
  272. "ECDSA Signature Verification 186-3",
  273. {'d': lambda x: int(x, 16)}) or []
  274. for idx, tv in enumerate(test_vectors_sign):
  275. if isinstance(tv, str):
  276. res = re.match(r"\[(P-[0-9]+),(SHA-[0-9]+)\]", tv)
  277. assert res
  278. curve_name = res.group(1)
  279. hash_name = res.group(2).replace("-", "")
  280. hash_module = load_hash_by_name(hash_name)
  281. continue
  282. hash_obj = hash_module.new(tv.msg)
  283. ecc_key = ECC.construct(curve=curve_name, d=tv.d)
  284. signer = DSS.new(ecc_key, 'fips-186-3', randfunc=StrRNG(tv.k))
  285. def sign_test(self, signer=signer, hash_obj=hash_obj, signature=tv.r+tv.s):
  286. self.assertEqual(signer.sign(hash_obj), signature)
  287. setattr(FIPS_ECDSA_Tests_KAT, "test_sign_%d" % idx, sign_test)
  288. class Det_DSA_Tests(unittest.TestCase):
  289. """Tests from rfc6979"""
  290. # Each key is (p, q, g, x, y, desc)
  291. keys = [
  292. (
  293. """
  294. 86F5CA03DCFEB225063FF830A0C769B9DD9D6153AD91D7CE27F787C43278B447
  295. E6533B86B18BED6E8A48B784A14C252C5BE0DBF60B86D6385BD2F12FB763ED88
  296. 73ABFD3F5BA2E0A8C0A59082EAC056935E529DAF7C610467899C77ADEDFC846C
  297. 881870B7B19B2B58F9BE0521A17002E3BDD6B86685EE90B3D9A1B02B782B1779""",
  298. "996F967F6C8E388D9E28D01E205FBA957A5698B1",
  299. """
  300. 07B0F92546150B62514BB771E2A0C0CE387F03BDA6C56B505209FF25FD3C133D
  301. 89BBCD97E904E09114D9A7DEFDEADFC9078EA544D2E401AEECC40BB9FBBF78FD
  302. 87995A10A1C27CB7789B594BA7EFB5C4326A9FE59A070E136DB77175464ADCA4
  303. 17BE5DCE2F40D10A46A3A3943F26AB7FD9C0398FF8C76EE0A56826A8A88F1DBD""",
  304. "411602CB19A6CCC34494D79D98EF1E7ED5AF25F7",
  305. """
  306. 5DF5E01DED31D0297E274E1691C192FE5868FEF9E19A84776454B100CF16F653
  307. 92195A38B90523E2542EE61871C0440CB87C322FC4B4D2EC5E1E7EC766E1BE8D
  308. 4CE935437DC11C3C8FD426338933EBFE739CB3465F4D3668C5E473508253B1E6
  309. 82F65CBDC4FAE93C2EA212390E54905A86E2223170B44EAA7DA5DD9FFCFB7F3B""",
  310. "DSA1024"
  311. ),
  312. (
  313. """
  314. 9DB6FB5951B66BB6FE1E140F1D2CE5502374161FD6538DF1648218642F0B5C48
  315. C8F7A41AADFA187324B87674FA1822B00F1ECF8136943D7C55757264E5A1A44F
  316. FE012E9936E00C1D3E9310B01C7D179805D3058B2A9F4BB6F9716BFE6117C6B5
  317. B3CC4D9BE341104AD4A80AD6C94E005F4B993E14F091EB51743BF33050C38DE2
  318. 35567E1B34C3D6A5C0CEAA1A0F368213C3D19843D0B4B09DCB9FC72D39C8DE41
  319. F1BF14D4BB4563CA28371621CAD3324B6A2D392145BEBFAC748805236F5CA2FE
  320. 92B871CD8F9C36D3292B5509CA8CAA77A2ADFC7BFD77DDA6F71125A7456FEA15
  321. 3E433256A2261C6A06ED3693797E7995FAD5AABBCFBE3EDA2741E375404AE25B""",
  322. "F2C3119374CE76C9356990B465374A17F23F9ED35089BD969F61C6DDE9998C1F",
  323. """
  324. 5C7FF6B06F8F143FE8288433493E4769C4D988ACE5BE25A0E24809670716C613
  325. D7B0CEE6932F8FAA7C44D2CB24523DA53FBE4F6EC3595892D1AA58C4328A06C4
  326. 6A15662E7EAA703A1DECF8BBB2D05DBE2EB956C142A338661D10461C0D135472
  327. 085057F3494309FFA73C611F78B32ADBB5740C361C9F35BE90997DB2014E2EF5
  328. AA61782F52ABEB8BD6432C4DD097BC5423B285DAFB60DC364E8161F4A2A35ACA
  329. 3A10B1C4D203CC76A470A33AFDCBDD92959859ABD8B56E1725252D78EAC66E71
  330. BA9AE3F1DD2487199874393CD4D832186800654760E1E34C09E4D155179F9EC0
  331. DC4473F996BDCE6EED1CABED8B6F116F7AD9CF505DF0F998E34AB27514B0FFE7""",
  332. "69C7548C21D0DFEA6B9A51C9EAD4E27C33D3B3F180316E5BCAB92C933F0E4DBC",
  333. """
  334. 667098C654426C78D7F8201EAC6C203EF030D43605032C2F1FA937E5237DBD94
  335. 9F34A0A2564FE126DC8B715C5141802CE0979C8246463C40E6B6BDAA2513FA61
  336. 1728716C2E4FD53BC95B89E69949D96512E873B9C8F8DFD499CC312882561ADE
  337. CB31F658E934C0C197F2C4D96B05CBAD67381E7B768891E4DA3843D24D94CDFB
  338. 5126E9B8BF21E8358EE0E0A30EF13FD6A664C0DCE3731F7FB49A4845A4FD8254
  339. 687972A2D382599C9BAC4E0ED7998193078913032558134976410B89D2C171D1
  340. 23AC35FD977219597AA7D15C1A9A428E59194F75C721EBCBCFAE44696A499AFA
  341. 74E04299F132026601638CB87AB79190D4A0986315DA8EEC6561C938996BEADF""",
  342. "DSA2048"
  343. ),
  344. ]
  345. # This is a sequence of items:
  346. # message, k, r, s, hash module
  347. signatures = [
  348. (
  349. "sample",
  350. "7BDB6B0FF756E1BB5D53583EF979082F9AD5BD5B",
  351. "2E1A0C2562B2912CAAF89186FB0F42001585DA55",
  352. "29EFB6B0AFF2D7A68EB70CA313022253B9A88DF5",
  353. SHA1,
  354. 'DSA1024'
  355. ),
  356. (
  357. "sample",
  358. "562097C06782D60C3037BA7BE104774344687649",
  359. "4BC3B686AEA70145856814A6F1BB53346F02101E",
  360. "410697B92295D994D21EDD2F4ADA85566F6F94C1",
  361. SHA224,
  362. 'DSA1024'
  363. ),
  364. (
  365. "sample",
  366. "519BA0546D0C39202A7D34D7DFA5E760B318BCFB",
  367. "81F2F5850BE5BC123C43F71A3033E9384611C545",
  368. "4CDD914B65EB6C66A8AAAD27299BEE6B035F5E89",
  369. SHA256,
  370. 'DSA1024'
  371. ),
  372. (
  373. "sample",
  374. "95897CD7BBB944AA932DBC579C1C09EB6FCFC595",
  375. "07F2108557EE0E3921BC1774F1CA9B410B4CE65A",
  376. "54DF70456C86FAC10FAB47C1949AB83F2C6F7595",
  377. SHA384,
  378. 'DSA1024'
  379. ),
  380. (
  381. "sample",
  382. "09ECE7CA27D0F5A4DD4E556C9DF1D21D28104F8B",
  383. "16C3491F9B8C3FBBDD5E7A7B667057F0D8EE8E1B",
  384. "02C36A127A7B89EDBB72E4FFBC71DABC7D4FC69C",
  385. SHA512,
  386. 'DSA1024'
  387. ),
  388. (
  389. "test",
  390. "5C842DF4F9E344EE09F056838B42C7A17F4A6433",
  391. "42AB2052FD43E123F0607F115052A67DCD9C5C77",
  392. "183916B0230D45B9931491D4C6B0BD2FB4AAF088",
  393. SHA1,
  394. 'DSA1024'
  395. ),
  396. (
  397. "test",
  398. "4598B8EFC1A53BC8AECD58D1ABBB0C0C71E67297",
  399. "6868E9964E36C1689F6037F91F28D5F2C30610F2",
  400. "49CEC3ACDC83018C5BD2674ECAAD35B8CD22940F",
  401. SHA224,
  402. 'DSA1024'
  403. ),
  404. (
  405. "test",
  406. "5A67592E8128E03A417B0484410FB72C0B630E1A",
  407. "22518C127299B0F6FDC9872B282B9E70D0790812",
  408. "6837EC18F150D55DE95B5E29BE7AF5D01E4FE160",
  409. SHA256,
  410. 'DSA1024'
  411. ),
  412. (
  413. "test",
  414. "220156B761F6CA5E6C9F1B9CF9C24BE25F98CD89",
  415. "854CF929B58D73C3CBFDC421E8D5430CD6DB5E66",
  416. "91D0E0F53E22F898D158380676A871A157CDA622",
  417. SHA384,
  418. 'DSA1024'
  419. ),
  420. (
  421. "test",
  422. "65D2C2EEB175E370F28C75BFCDC028D22C7DBE9C",
  423. "8EA47E475BA8AC6F2D821DA3BD212D11A3DEB9A0",
  424. "7C670C7AD72B6C050C109E1790008097125433E8",
  425. SHA512,
  426. 'DSA1024'
  427. ),
  428. (
  429. "sample",
  430. "888FA6F7738A41BDC9846466ABDB8174C0338250AE50CE955CA16230F9CBD53E",
  431. "3A1B2DBD7489D6ED7E608FD036C83AF396E290DBD602408E8677DAABD6E7445A",
  432. "D26FCBA19FA3E3058FFC02CA1596CDBB6E0D20CB37B06054F7E36DED0CDBBCCF",
  433. SHA1,
  434. 'DSA2048'
  435. ),
  436. (
  437. "sample",
  438. "BC372967702082E1AA4FCE892209F71AE4AD25A6DFD869334E6F153BD0C4D806",
  439. "DC9F4DEADA8D8FF588E98FED0AB690FFCE858DC8C79376450EB6B76C24537E2C",
  440. "A65A9C3BC7BABE286B195D5DA68616DA8D47FA0097F36DD19F517327DC848CEC",
  441. SHA224,
  442. 'DSA2048'
  443. ),
  444. (
  445. "sample",
  446. "8926A27C40484216F052F4427CFD5647338B7B3939BC6573AF4333569D597C52",
  447. "EACE8BDBBE353C432A795D9EC556C6D021F7A03F42C36E9BC87E4AC7932CC809",
  448. "7081E175455F9247B812B74583E9E94F9EA79BD640DC962533B0680793A38D53",
  449. SHA256,
  450. 'DSA2048'
  451. ),
  452. (
  453. "sample",
  454. "C345D5AB3DA0A5BCB7EC8F8FB7A7E96069E03B206371EF7D83E39068EC564920",
  455. "B2DA945E91858834FD9BF616EBAC151EDBC4B45D27D0DD4A7F6A22739F45C00B",
  456. "19048B63D9FD6BCA1D9BAE3664E1BCB97F7276C306130969F63F38FA8319021B",
  457. SHA384,
  458. 'DSA2048'
  459. ),
  460. (
  461. "sample",
  462. "5A12994431785485B3F5F067221517791B85A597B7A9436995C89ED0374668FC",
  463. "2016ED092DC5FB669B8EFB3D1F31A91EECB199879BE0CF78F02BA062CB4C942E",
  464. "D0C76F84B5F091E141572A639A4FB8C230807EEA7D55C8A154A224400AFF2351",
  465. SHA512,
  466. 'DSA2048'
  467. ),
  468. (
  469. "test",
  470. "6EEA486F9D41A037B2C640BC5645694FF8FF4B98D066A25F76BE641CCB24BA4F",
  471. "C18270A93CFC6063F57A4DFA86024F700D980E4CF4E2CB65A504397273D98EA0",
  472. "414F22E5F31A8B6D33295C7539C1C1BA3A6160D7D68D50AC0D3A5BEAC2884FAA",
  473. SHA1,
  474. 'DSA2048'
  475. ),
  476. (
  477. "test",
  478. "06BD4C05ED74719106223BE33F2D95DA6B3B541DAD7BFBD7AC508213B6DA6670",
  479. "272ABA31572F6CC55E30BF616B7A265312018DD325BE031BE0CC82AA17870EA3",
  480. "E9CC286A52CCE201586722D36D1E917EB96A4EBDB47932F9576AC645B3A60806",
  481. SHA224,
  482. 'DSA2048'
  483. ),
  484. (
  485. "test",
  486. "1D6CE6DDA1C5D37307839CD03AB0A5CBB18E60D800937D67DFB4479AAC8DEAD7",
  487. "8190012A1969F9957D56FCCAAD223186F423398D58EF5B3CEFD5A4146A4476F0",
  488. "7452A53F7075D417B4B013B278D1BB8BBD21863F5E7B1CEE679CF2188E1AB19E",
  489. SHA256,
  490. 'DSA2048'
  491. ),
  492. (
  493. "test",
  494. "206E61F73DBE1B2DC8BE736B22B079E9DACD974DB00EEBBC5B64CAD39CF9F91C",
  495. "239E66DDBE8F8C230A3D071D601B6FFBDFB5901F94D444C6AF56F732BEB954BE",
  496. "6BD737513D5E72FE85D1C750E0F73921FE299B945AAD1C802F15C26A43D34961",
  497. SHA384,
  498. 'DSA2048'
  499. ),
  500. (
  501. "test",
  502. "AFF1651E4CD6036D57AA8B2A05CCF1A9D5A40166340ECBBDC55BE10B568AA0AA",
  503. "89EC4BB1400ECCFF8E7D9AA515CD1DE7803F2DAFF09693EE7FD1353E90A68307",
  504. "C9F0BDABCC0D880BB137A994CC7F3980CE91CC10FAF529FC46565B15CEA854E1",
  505. SHA512,
  506. 'DSA2048'
  507. )
  508. ]
  509. def setUp(self):
  510. # Convert DSA key components from hex strings to integers
  511. # Each key is (p, q, g, x, y, desc)
  512. from collections import namedtuple
  513. TestKey = namedtuple('TestKey', 'p q g x y')
  514. new_keys = {}
  515. for k in self.keys:
  516. tk = TestKey(*[t2l(y) for y in k[:-1]])
  517. new_keys[k[-1]] = tk
  518. self.keys = new_keys
  519. # Convert signature encoding
  520. TestSig = namedtuple('TestSig', 'message nonce result module test_key')
  521. new_signatures = []
  522. for message, nonce, r, s, module, test_key in self.signatures:
  523. tsig = TestSig(
  524. tobytes(message),
  525. t2l(nonce),
  526. t2b(r) + t2b(s),
  527. module,
  528. self.keys[test_key]
  529. )
  530. new_signatures.append(tsig)
  531. self.signatures = new_signatures
  532. def test1(self):
  533. q = 0x4000000000000000000020108A2E0CC0D99F8A5EF
  534. x = 0x09A4D6792295A7F730FC3F2B49CBC0F62E862272F
  535. p = 2 * q + 1
  536. y = pow(2, x, p)
  537. key = DSA.construct([pow(y, 2, p), 2, p, q, x], False)
  538. signer = DSS.new(key, 'deterministic-rfc6979')
  539. # Test _int2octets
  540. self.assertEqual(hexlify(signer._int2octets(x)),
  541. b'009a4d6792295a7f730fc3f2b49cbc0f62e862272f')
  542. # Test _bits2octets
  543. h1 = SHA256.new(b"sample").digest()
  544. self.assertEqual(hexlify(signer._bits2octets(h1)),
  545. b'01795edf0d54db760f156d0dac04c0322b3a204224')
  546. def test2(self):
  547. for sig in self.signatures:
  548. tk = sig.test_key
  549. key = DSA.construct([tk.y, tk.g, tk.p, tk.q, tk.x], False)
  550. signer = DSS.new(key, 'deterministic-rfc6979')
  551. hash_obj = sig.module.new(sig.message)
  552. result = signer.sign(hash_obj)
  553. self.assertEqual(sig.result, result)
  554. class Det_ECDSA_Tests(unittest.TestCase):
  555. key_priv_p192 = ECC.construct(curve="P-192", d=0x6FAB034934E4C0FC9AE67F5B5659A9D7D1FEFD187EE09FD4)
  556. key_pub_p192 = key_priv_p192.public_key()
  557. key_priv_p224 = ECC.construct(curve="P-224", d=0xF220266E1105BFE3083E03EC7A3A654651F45E37167E88600BF257C1)
  558. key_pub_p224 = key_priv_p224.public_key()
  559. key_priv_p256 = ECC.construct(curve="P-256", d=0xC9AFA9D845BA75166B5C215767B1D6934E50C3DB36E89B127B8A622B120F6721)
  560. key_pub_p256 = key_priv_p256.public_key()
  561. key_priv_p384 = ECC.construct(curve="P-384", d=0x6B9D3DAD2E1B8C1C05B19875B6659F4DE23C3B667BF297BA9AA47740787137D896D5724E4C70A825F872C9EA60D2EDF5)
  562. key_pub_p384 = key_priv_p384.public_key()
  563. key_priv_p521 = ECC.construct(curve="P-521", d=0x0FAD06DAA62BA3B25D2FB40133DA757205DE67F5BB0018FEE8C86E1B68C7E75CAA896EB32F1F47C70855836A6D16FCC1466F6D8FBEC67DB89EC0C08B0E996B83538)
  564. key_pub_p521 = key_priv_p521.public_key()
  565. # This is a sequence of items:
  566. # message, k, r, s, hash module
  567. # taken from RFC6979
  568. signatures_p192_ = (
  569. (
  570. "sample",
  571. "37D7CA00D2C7B0E5E412AC03BD44BA837FDD5B28CD3B0021",
  572. "98C6BD12B23EAF5E2A2045132086BE3EB8EBD62ABF6698FF",
  573. "57A22B07DEA9530F8DE9471B1DC6624472E8E2844BC25B64",
  574. SHA1
  575. ),
  576. (
  577. "sample",
  578. "4381526B3FC1E7128F202E194505592F01D5FF4C5AF015D8",
  579. "A1F00DAD97AEEC91C95585F36200C65F3C01812AA60378F5",
  580. "E07EC1304C7C6C9DEBBE980B9692668F81D4DE7922A0F97A",
  581. SHA224
  582. ),
  583. (
  584. "sample",
  585. "32B1B6D7D42A05CB449065727A84804FB1A3E34D8F261496",
  586. "4B0B8CE98A92866A2820E20AA6B75B56382E0F9BFD5ECB55",
  587. "CCDB006926EA9565CBADC840829D8C384E06DE1F1E381B85",
  588. SHA256
  589. ),
  590. (
  591. "sample",
  592. "4730005C4FCB01834C063A7B6760096DBE284B8252EF4311",
  593. "DA63BF0B9ABCF948FBB1E9167F136145F7A20426DCC287D5",
  594. "C3AA2C960972BD7A2003A57E1C4C77F0578F8AE95E31EC5E",
  595. SHA384
  596. ),
  597. (
  598. "sample",
  599. "A2AC7AB055E4F20692D49209544C203A7D1F2C0BFBC75DB1",
  600. "4D60C5AB1996BD848343B31C00850205E2EA6922DAC2E4B8",
  601. "3F6E837448F027A1BF4B34E796E32A811CBB4050908D8F67",
  602. SHA512
  603. ),
  604. (
  605. "test",
  606. "D9CF9C3D3297D3260773A1DA7418DB5537AB8DD93DE7FA25",
  607. "0F2141A0EBBC44D2E1AF90A50EBCFCE5E197B3B7D4DE036D",
  608. "EB18BC9E1F3D7387500CB99CF5F7C157070A8961E38700B7",
  609. SHA1
  610. ),
  611. (
  612. "test",
  613. "F5DC805F76EF851800700CCE82E7B98D8911B7D510059FBE",
  614. "6945A1C1D1B2206B8145548F633BB61CEF04891BAF26ED34",
  615. "B7FB7FDFC339C0B9BD61A9F5A8EAF9BE58FC5CBA2CB15293",
  616. SHA224
  617. ),
  618. (
  619. "test",
  620. "5C4CE89CF56D9E7C77C8585339B006B97B5F0680B4306C6C",
  621. "3A718BD8B4926C3B52EE6BBE67EF79B18CB6EB62B1AD97AE",
  622. "5662E6848A4A19B1F1AE2F72ACD4B8BBE50F1EAC65D9124F",
  623. SHA256
  624. ),
  625. (
  626. "test",
  627. "5AFEFB5D3393261B828DB6C91FBC68C230727B030C975693",
  628. "B234B60B4DB75A733E19280A7A6034BD6B1EE88AF5332367",
  629. "7994090B2D59BB782BE57E74A44C9A1C700413F8ABEFE77A",
  630. SHA384
  631. ),
  632. (
  633. "test",
  634. "0758753A5254759C7CFBAD2E2D9B0792EEE44136C9480527",
  635. "FE4F4AE86A58B6507946715934FE2D8FF9D95B6B098FE739",
  636. "74CF5605C98FBA0E1EF34D4B5A1577A7DCF59457CAE52290",
  637. SHA512
  638. )
  639. )
  640. signatures_p224_ = (
  641. (
  642. "sample",
  643. "7EEFADD91110D8DE6C2C470831387C50D3357F7F4D477054B8B426BC",
  644. "22226F9D40A96E19C4A301CE5B74B115303C0F3A4FD30FC257FB57AC",
  645. "66D1CDD83E3AF75605DD6E2FEFF196D30AA7ED7A2EDF7AF475403D69",
  646. SHA1
  647. ),
  648. (
  649. "sample",
  650. "C1D1F2F10881088301880506805FEB4825FE09ACB6816C36991AA06D",
  651. "1CDFE6662DDE1E4A1EC4CDEDF6A1F5A2FB7FBD9145C12113E6ABFD3E",
  652. "A6694FD7718A21053F225D3F46197CA699D45006C06F871808F43EBC",
  653. SHA224
  654. ),
  655. (
  656. "sample",
  657. "AD3029E0278F80643DE33917CE6908C70A8FF50A411F06E41DEDFCDC",
  658. "61AA3DA010E8E8406C656BC477A7A7189895E7E840CDFE8FF42307BA",
  659. "BC814050DAB5D23770879494F9E0A680DC1AF7161991BDE692B10101",
  660. SHA256
  661. ),
  662. (
  663. "sample",
  664. "52B40F5A9D3D13040F494E83D3906C6079F29981035C7BD51E5CAC40",
  665. "0B115E5E36F0F9EC81F1325A5952878D745E19D7BB3EABFABA77E953",
  666. "830F34CCDFE826CCFDC81EB4129772E20E122348A2BBD889A1B1AF1D",
  667. SHA384
  668. ),
  669. (
  670. "sample",
  671. "9DB103FFEDEDF9CFDBA05184F925400C1653B8501BAB89CEA0FBEC14",
  672. "074BD1D979D5F32BF958DDC61E4FB4872ADCAFEB2256497CDAC30397",
  673. "A4CECA196C3D5A1FF31027B33185DC8EE43F288B21AB342E5D8EB084",
  674. SHA512
  675. ),
  676. (
  677. "test",
  678. "2519178F82C3F0E4F87ED5883A4E114E5B7A6E374043D8EFD329C253",
  679. "DEAA646EC2AF2EA8AD53ED66B2E2DDAA49A12EFD8356561451F3E21C",
  680. "95987796F6CF2062AB8135271DE56AE55366C045F6D9593F53787BD2",
  681. SHA1
  682. ),
  683. (
  684. "test",
  685. "DF8B38D40DCA3E077D0AC520BF56B6D565134D9B5F2EAE0D34900524",
  686. "C441CE8E261DED634E4CF84910E4C5D1D22C5CF3B732BB204DBEF019",
  687. "902F42847A63BDC5F6046ADA114953120F99442D76510150F372A3F4",
  688. SHA224
  689. ),
  690. (
  691. "test",
  692. "FF86F57924DA248D6E44E8154EB69F0AE2AEBAEE9931D0B5A969F904",
  693. "AD04DDE87B84747A243A631EA47A1BA6D1FAA059149AD2440DE6FBA6",
  694. "178D49B1AE90E3D8B629BE3DB5683915F4E8C99FDF6E666CF37ADCFD",
  695. SHA256
  696. ),
  697. (
  698. "test",
  699. "7046742B839478C1B5BD31DB2E862AD868E1A45C863585B5F22BDC2D",
  700. "389B92682E399B26518A95506B52C03BC9379A9DADF3391A21FB0EA4",
  701. "414A718ED3249FF6DBC5B50C27F71F01F070944DA22AB1F78F559AAB",
  702. SHA384
  703. ),
  704. (
  705. "test",
  706. "E39C2AA4EA6BE2306C72126D40ED77BF9739BB4D6EF2BBB1DCB6169D",
  707. "049F050477C5ADD858CAC56208394B5A55BAEBBE887FDF765047C17C",
  708. "077EB13E7005929CEFA3CD0403C7CDCC077ADF4E44F3C41B2F60ECFF",
  709. SHA512
  710. )
  711. )
  712. signatures_p256_ = (
  713. (
  714. "sample",
  715. "882905F1227FD620FBF2ABF21244F0BA83D0DC3A9103DBBEE43A1FB858109DB4",
  716. "61340C88C3AAEBEB4F6D667F672CA9759A6CCAA9FA8811313039EE4A35471D32",
  717. "6D7F147DAC089441BB2E2FE8F7A3FA264B9C475098FDCF6E00D7C996E1B8B7EB",
  718. SHA1
  719. ),
  720. (
  721. "sample",
  722. "103F90EE9DC52E5E7FB5132B7033C63066D194321491862059967C715985D473",
  723. "53B2FFF5D1752B2C689DF257C04C40A587FABABB3F6FC2702F1343AF7CA9AA3F",
  724. "B9AFB64FDC03DC1A131C7D2386D11E349F070AA432A4ACC918BEA988BF75C74C",
  725. SHA224
  726. ),
  727. (
  728. "sample",
  729. "A6E3C57DD01ABE90086538398355DD4C3B17AA873382B0F24D6129493D8AAD60",
  730. "EFD48B2AACB6A8FD1140DD9CD45E81D69D2C877B56AAF991C34D0EA84EAF3716",
  731. "F7CB1C942D657C41D436C7A1B6E29F65F3E900DBB9AFF4064DC4AB2F843ACDA8",
  732. SHA256
  733. ),
  734. (
  735. "sample",
  736. "09F634B188CEFD98E7EC88B1AA9852D734D0BC272F7D2A47DECC6EBEB375AAD4",
  737. "0EAFEA039B20E9B42309FB1D89E213057CBF973DC0CFC8F129EDDDC800EF7719",
  738. "4861F0491E6998B9455193E34E7B0D284DDD7149A74B95B9261F13ABDE940954",
  739. SHA384
  740. ),
  741. (
  742. "sample",
  743. "5FA81C63109BADB88C1F367B47DA606DA28CAD69AA22C4FE6AD7DF73A7173AA5",
  744. "8496A60B5E9B47C825488827E0495B0E3FA109EC4568FD3F8D1097678EB97F00",
  745. "2362AB1ADBE2B8ADF9CB9EDAB740EA6049C028114F2460F96554F61FAE3302FE",
  746. SHA512
  747. ),
  748. (
  749. "test",
  750. "8C9520267C55D6B980DF741E56B4ADEE114D84FBFA2E62137954164028632A2E",
  751. "0CBCC86FD6ABD1D99E703E1EC50069EE5C0B4BA4B9AC60E409E8EC5910D81A89",
  752. "01B9D7B73DFAA60D5651EC4591A0136F87653E0FD780C3B1BC872FFDEAE479B1",
  753. SHA1
  754. ),
  755. (
  756. "test",
  757. "669F4426F2688B8BE0DB3A6BD1989BDAEFFF84B649EEB84F3DD26080F667FAA7",
  758. "C37EDB6F0AE79D47C3C27E962FA269BB4F441770357E114EE511F662EC34A692",
  759. "C820053A05791E521FCAAD6042D40AEA1D6B1A540138558F47D0719800E18F2D",
  760. SHA224
  761. ),
  762. (
  763. "test",
  764. "D16B6AE827F17175E040871A1C7EC3500192C4C92677336EC2537ACAEE0008E0",
  765. "F1ABB023518351CD71D881567B1EA663ED3EFCF6C5132B354F28D3B0B7D38367",
  766. "019F4113742A2B14BD25926B49C649155F267E60D3814B4C0CC84250E46F0083",
  767. SHA256
  768. ),
  769. (
  770. "test",
  771. "16AEFFA357260B04B1DD199693960740066C1A8F3E8EDD79070AA914D361B3B8",
  772. "83910E8B48BB0C74244EBDF7F07A1C5413D61472BD941EF3920E623FBCCEBEB6",
  773. "8DDBEC54CF8CD5874883841D712142A56A8D0F218F5003CB0296B6B509619F2C",
  774. SHA384
  775. ),
  776. (
  777. "test",
  778. "6915D11632ACA3C40D5D51C08DAF9C555933819548784480E93499000D9F0B7F",
  779. "461D93F31B6540894788FD206C07CFA0CC35F46FA3C91816FFF1040AD1581A04",
  780. "39AF9F15DE0DB8D97E72719C74820D304CE5226E32DEDAE67519E840D1194E55",
  781. SHA512
  782. )
  783. )
  784. signatures_p384_ = (
  785. (
  786. "sample",
  787. "4471EF7518BB2C7C20F62EAE1C387AD0C5E8E470995DB4ACF694466E6AB096630F29E5938D25106C3C340045A2DB01A7",
  788. "EC748D839243D6FBEF4FC5C4859A7DFFD7F3ABDDF72014540C16D73309834FA37B9BA002899F6FDA3A4A9386790D4EB2",
  789. "A3BCFA947BEEF4732BF247AC17F71676CB31A847B9FF0CBC9C9ED4C1A5B3FACF26F49CA031D4857570CCB5CA4424A443",
  790. SHA1
  791. ),
  792. (
  793. "sample",
  794. "A4E4D2F0E729EB786B31FC20AD5D849E304450E0AE8E3E341134A5C1AFA03CAB8083EE4E3C45B06A5899EA56C51B5879",
  795. "42356E76B55A6D9B4631C865445DBE54E056D3B3431766D0509244793C3F9366450F76EE3DE43F5A125333A6BE060122",
  796. "9DA0C81787064021E78DF658F2FBB0B042BF304665DB721F077A4298B095E4834C082C03D83028EFBF93A3C23940CA8D",
  797. SHA224
  798. ),
  799. (
  800. "sample",
  801. "180AE9F9AEC5438A44BC159A1FCB277C7BE54FA20E7CF404B490650A8ACC414E375572342863C899F9F2EDF9747A9B60",
  802. "21B13D1E013C7FA1392D03C5F99AF8B30C570C6F98D4EA8E354B63A21D3DAA33BDE1E888E63355D92FA2B3C36D8FB2CD",
  803. "F3AA443FB107745BF4BD77CB3891674632068A10CA67E3D45DB2266FA7D1FEEBEFDC63ECCD1AC42EC0CB8668A4FA0AB0",
  804. SHA256
  805. ),
  806. (
  807. "sample",
  808. "94ED910D1A099DAD3254E9242AE85ABDE4BA15168EAF0CA87A555FD56D10FBCA2907E3E83BA95368623B8C4686915CF9",
  809. "94EDBB92A5ECB8AAD4736E56C691916B3F88140666CE9FA73D64C4EA95AD133C81A648152E44ACF96E36DD1E80FABE46",
  810. "99EF4AEB15F178CEA1FE40DB2603138F130E740A19624526203B6351D0A3A94FA329C145786E679E7B82C71A38628AC8",
  811. SHA384
  812. ),
  813. (
  814. "sample",
  815. "92FC3C7183A883E24216D1141F1A8976C5B0DD797DFA597E3D7B32198BD35331A4E966532593A52980D0E3AAA5E10EC3",
  816. "ED0959D5880AB2D869AE7F6C2915C6D60F96507F9CB3E047C0046861DA4A799CFE30F35CC900056D7C99CD7882433709",
  817. "512C8CCEEE3890A84058CE1E22DBC2198F42323CE8ACA9135329F03C068E5112DC7CC3EF3446DEFCEB01A45C2667FDD5",
  818. SHA512
  819. ),
  820. (
  821. "test",
  822. "66CC2C8F4D303FC962E5FF6A27BD79F84EC812DDAE58CF5243B64A4AD8094D47EC3727F3A3C186C15054492E30698497",
  823. "4BC35D3A50EF4E30576F58CD96CE6BF638025EE624004A1F7789A8B8E43D0678ACD9D29876DAF46638645F7F404B11C7",
  824. "D5A6326C494ED3FF614703878961C0FDE7B2C278F9A65FD8C4B7186201A2991695BA1C84541327E966FA7B50F7382282",
  825. SHA1
  826. ),
  827. (
  828. "test",
  829. "18FA39DB95AA5F561F30FA3591DC59C0FA3653A80DAFFA0B48D1A4C6DFCBFF6E3D33BE4DC5EB8886A8ECD093F2935726",
  830. "E8C9D0B6EA72A0E7837FEA1D14A1A9557F29FAA45D3E7EE888FC5BF954B5E62464A9A817C47FF78B8C11066B24080E72",
  831. "07041D4A7A0379AC7232FF72E6F77B6DDB8F09B16CCE0EC3286B2BD43FA8C6141C53EA5ABEF0D8231077A04540A96B66",
  832. SHA224
  833. ),
  834. (
  835. "test",
  836. "0CFAC37587532347DC3389FDC98286BBA8C73807285B184C83E62E26C401C0FAA48DD070BA79921A3457ABFF2D630AD7",
  837. "6D6DEFAC9AB64DABAFE36C6BF510352A4CC27001263638E5B16D9BB51D451559F918EEDAF2293BE5B475CC8F0188636B",
  838. "2D46F3BECBCC523D5F1A1256BF0C9B024D879BA9E838144C8BA6BAEB4B53B47D51AB373F9845C0514EEFB14024787265",
  839. SHA256
  840. ),
  841. (
  842. "test",
  843. "015EE46A5BF88773ED9123A5AB0807962D193719503C527B031B4C2D225092ADA71F4A459BC0DA98ADB95837DB8312EA",
  844. "8203B63D3C853E8D77227FB377BCF7B7B772E97892A80F36AB775D509D7A5FEB0542A7F0812998DA8F1DD3CA3CF023DB",
  845. "DDD0760448D42D8A43AF45AF836FCE4DE8BE06B485E9B61B827C2F13173923E06A739F040649A667BF3B828246BAA5A5",
  846. SHA384
  847. ),
  848. (
  849. "test",
  850. "3780C4F67CB15518B6ACAE34C9F83568D2E12E47DEAB6C50A4E4EE5319D1E8CE0E2CC8A136036DC4B9C00E6888F66B6C",
  851. "A0D5D090C9980FAF3C2CE57B7AE951D31977DD11C775D314AF55F76C676447D06FB6495CD21B4B6E340FC236584FB277",
  852. "976984E59B4C77B0E8E4460DCA3D9F20E07B9BB1F63BEEFAF576F6B2E8B224634A2092CD3792E0159AD9CEE37659C736",
  853. SHA512
  854. ),
  855. )
  856. signatures_p521_ = (
  857. (
  858. "sample",
  859. "0089C071B419E1C2820962321787258469511958E80582E95D8378E0C2CCDB3CB42BEDE42F50E3FA3C71F5A76724281D31D9C89F0F91FC1BE4918DB1C03A5838D0F9",
  860. "00343B6EC45728975EA5CBA6659BBB6062A5FF89EEA58BE3C80B619F322C87910FE092F7D45BB0F8EEE01ED3F20BABEC079D202AE677B243AB40B5431D497C55D75D",
  861. "00E7B0E675A9B24413D448B8CC119D2BF7B2D2DF032741C096634D6D65D0DBE3D5694625FB9E8104D3B842C1B0E2D0B98BEA19341E8676AEF66AE4EBA3D5475D5D16",
  862. SHA1
  863. ),
  864. (
  865. "sample",
  866. "0121415EC2CD7726330A61F7F3FA5DE14BE9436019C4DB8CB4041F3B54CF31BE0493EE3F427FB906393D895A19C9523F3A1D54BB8702BD4AA9C99DAB2597B92113F3",
  867. "01776331CFCDF927D666E032E00CF776187BC9FDD8E69D0DABB4109FFE1B5E2A30715F4CC923A4A5E94D2503E9ACFED92857B7F31D7152E0F8C00C15FF3D87E2ED2E",
  868. "0050CB5265417FE2320BBB5A122B8E1A32BD699089851128E360E620A30C7E17BA41A666AF126CE100E5799B153B60528D5300D08489CA9178FB610A2006C254B41F",
  869. SHA224
  870. ),
  871. (
  872. "sample",
  873. "00EDF38AFCAAECAB4383358B34D67C9F2216C8382AAEA44A3DAD5FDC9C32575761793FEF24EB0FC276DFC4F6E3EC476752F043CF01415387470BCBD8678ED2C7E1A0",
  874. "01511BB4D675114FE266FC4372B87682BAECC01D3CC62CF2303C92B3526012659D16876E25C7C1E57648F23B73564D67F61C6F14D527D54972810421E7D87589E1A7",
  875. "004A171143A83163D6DF460AAF61522695F207A58B95C0644D87E52AA1A347916E4F7A72930B1BC06DBE22CE3F58264AFD23704CBB63B29B931F7DE6C9D949A7ECFC",
  876. SHA256
  877. ),
  878. (
  879. "sample",
  880. "01546A108BC23A15D6F21872F7DED661FA8431DDBD922D0DCDB77CC878C8553FFAD064C95A920A750AC9137E527390D2D92F153E66196966EA554D9ADFCB109C4211",
  881. "01EA842A0E17D2DE4F92C15315C63DDF72685C18195C2BB95E572B9C5136CA4B4B576AD712A52BE9730627D16054BA40CC0B8D3FF035B12AE75168397F5D50C67451",
  882. "01F21A3CEE066E1961025FB048BD5FE2B7924D0CD797BABE0A83B66F1E35EEAF5FDE143FA85DC394A7DEE766523393784484BDF3E00114A1C857CDE1AA203DB65D61",
  883. SHA384
  884. ),
  885. (
  886. "sample",
  887. "01DAE2EA071F8110DC26882D4D5EAE0621A3256FC8847FB9022E2B7D28E6F10198B1574FDD03A9053C08A1854A168AA5A57470EC97DD5CE090124EF52A2F7ECBFFD3",
  888. "00C328FAFCBD79DD77850370C46325D987CB525569FB63C5D3BC53950E6D4C5F174E25A1EE9017B5D450606ADD152B534931D7D4E8455CC91F9B15BF05EC36E377FA",
  889. "00617CCE7CF5064806C467F678D3B4080D6F1CC50AF26CA209417308281B68AF282623EAA63E5B5C0723D8B8C37FF0777B1A20F8CCB1DCCC43997F1EE0E44DA4A67A",
  890. SHA512
  891. ),
  892. (
  893. "test",
  894. "00BB9F2BF4FE1038CCF4DABD7139A56F6FD8BB1386561BD3C6A4FC818B20DF5DDBA80795A947107A1AB9D12DAA615B1ADE4F7A9DC05E8E6311150F47F5C57CE8B222",
  895. "013BAD9F29ABE20DE37EBEB823C252CA0F63361284015A3BF430A46AAA80B87B0693F0694BD88AFE4E661FC33B094CD3B7963BED5A727ED8BD6A3A202ABE009D0367",
  896. "01E9BB81FF7944CA409AD138DBBEE228E1AFCC0C890FC78EC8604639CB0DBDC90F717A99EAD9D272855D00162EE9527567DD6A92CBD629805C0445282BBC916797FF",
  897. SHA1
  898. ),
  899. (
  900. "test",
  901. "0040D09FCF3C8A5F62CF4FB223CBBB2B9937F6B0577C27020A99602C25A01136987E452988781484EDBBCF1C47E554E7FC901BC3085E5206D9F619CFF07E73D6F706",
  902. "01C7ED902E123E6815546065A2C4AF977B22AA8EADDB68B2C1110E7EA44D42086BFE4A34B67DDC0E17E96536E358219B23A706C6A6E16BA77B65E1C595D43CAE17FB",
  903. "0177336676304FCB343CE028B38E7B4FBA76C1C1B277DA18CAD2A8478B2A9A9F5BEC0F3BA04F35DB3E4263569EC6AADE8C92746E4C82F8299AE1B8F1739F8FD519A4",
  904. SHA224
  905. ),
  906. (
  907. "test",
  908. "001DE74955EFAABC4C4F17F8E84D881D1310B5392D7700275F82F145C61E843841AF09035BF7A6210F5A431A6A9E81C9323354A9E69135D44EBD2FCAA7731B909258",
  909. "000E871C4A14F993C6C7369501900C4BC1E9C7B0B4BA44E04868B30B41D8071042EB28C4C250411D0CE08CD197E4188EA4876F279F90B3D8D74A3C76E6F1E4656AA8",
  910. "00CD52DBAA33B063C3A6CD8058A1FB0A46A4754B034FCC644766CA14DA8CA5CA9FDE00E88C1AD60CCBA759025299079D7A427EC3CC5B619BFBC828E7769BCD694E86",
  911. SHA256
  912. ),
  913. (
  914. "test",
  915. "01F1FC4A349A7DA9A9E116BFDD055DC08E78252FF8E23AC276AC88B1770AE0B5DCEB1ED14A4916B769A523CE1E90BA22846AF11DF8B300C38818F713DADD85DE0C88",
  916. "014BEE21A18B6D8B3C93FAB08D43E739707953244FDBE924FA926D76669E7AC8C89DF62ED8975C2D8397A65A49DCC09F6B0AC62272741924D479354D74FF6075578C",
  917. "0133330865C067A0EAF72362A65E2D7BC4E461E8C8995C3B6226A21BD1AA78F0ED94FE536A0DCA35534F0CD1510C41525D163FE9D74D134881E35141ED5E8E95B979",
  918. SHA384
  919. ),
  920. (
  921. "test",
  922. "016200813020EC986863BEDFC1B121F605C1215645018AEA1A7B215A564DE9EB1B38A67AA1128B80CE391C4FB71187654AAA3431027BFC7F395766CA988C964DC56D",
  923. "013E99020ABF5CEE7525D16B69B229652AB6BDF2AFFCAEF38773B4B7D08725F10CDB93482FDCC54EDCEE91ECA4166B2A7C6265EF0CE2BD7051B7CEF945BABD47EE6D",
  924. "01FBD0013C674AA79CB39849527916CE301C66EA7CE8B80682786AD60F98F7E78A19CA69EFF5C57400E3B3A0AD66CE0978214D13BAF4E9AC60752F7B155E2DE4DCE3",
  925. SHA512
  926. ),
  927. )
  928. signatures_p192 = []
  929. for a, b, c, d, e in signatures_p192_:
  930. new_tv = (tobytes(a), unhexlify(b), unhexlify(c), unhexlify(d), e)
  931. signatures_p192.append(new_tv)
  932. signatures_p224 = []
  933. for a, b, c, d, e in signatures_p224_:
  934. new_tv = (tobytes(a), unhexlify(b), unhexlify(c), unhexlify(d), e)
  935. signatures_p224.append(new_tv)
  936. signatures_p256 = []
  937. for a, b, c, d, e in signatures_p256_:
  938. new_tv = (tobytes(a), unhexlify(b), unhexlify(c), unhexlify(d), e)
  939. signatures_p256.append(new_tv)
  940. signatures_p384 = []
  941. for a, b, c, d, e in signatures_p384_:
  942. new_tv = (tobytes(a), unhexlify(b), unhexlify(c), unhexlify(d), e)
  943. signatures_p384.append(new_tv)
  944. signatures_p521 = []
  945. for a, b, c, d, e in signatures_p521_:
  946. new_tv = (tobytes(a), unhexlify(b), unhexlify(c), unhexlify(d), e)
  947. signatures_p521.append(new_tv)
  948. def shortDescription(self):
  949. return "Deterministic ECDSA Tests"
  950. def test_loopback_p192(self):
  951. hashed_msg = SHA512.new(b"test")
  952. signer = DSS.new(self.key_priv_p192, 'deterministic-rfc6979')
  953. signature = signer.sign(hashed_msg)
  954. verifier = DSS.new(self.key_pub_p192, 'deterministic-rfc6979')
  955. verifier.verify(hashed_msg, signature)
  956. def test_loopback_p224(self):
  957. hashed_msg = SHA512.new(b"test")
  958. signer = DSS.new(self.key_priv_p224, 'deterministic-rfc6979')
  959. signature = signer.sign(hashed_msg)
  960. verifier = DSS.new(self.key_pub_p224, 'deterministic-rfc6979')
  961. verifier.verify(hashed_msg, signature)
  962. def test_loopback_p256(self):
  963. hashed_msg = SHA512.new(b"test")
  964. signer = DSS.new(self.key_priv_p256, 'deterministic-rfc6979')
  965. signature = signer.sign(hashed_msg)
  966. verifier = DSS.new(self.key_pub_p256, 'deterministic-rfc6979')
  967. verifier.verify(hashed_msg, signature)
  968. def test_loopback_p384(self):
  969. hashed_msg = SHA512.new(b"test")
  970. signer = DSS.new(self.key_priv_p384, 'deterministic-rfc6979')
  971. signature = signer.sign(hashed_msg)
  972. verifier = DSS.new(self.key_pub_p384, 'deterministic-rfc6979')
  973. verifier.verify(hashed_msg, signature)
  974. def test_loopback_p521(self):
  975. hashed_msg = SHA512.new(b"test")
  976. signer = DSS.new(self.key_priv_p521, 'deterministic-rfc6979')
  977. signature = signer.sign(hashed_msg)
  978. verifier = DSS.new(self.key_pub_p521, 'deterministic-rfc6979')
  979. verifier.verify(hashed_msg, signature)
  980. def test_data_rfc6979_p192(self):
  981. signer = DSS.new(self.key_priv_p192, 'deterministic-rfc6979')
  982. for message, k, r, s, module in self.signatures_p192:
  983. hash_obj = module.new(message)
  984. result = signer.sign(hash_obj)
  985. self.assertEqual(r + s, result)
  986. def test_data_rfc6979_p224(self):
  987. signer = DSS.new(self.key_priv_p224, 'deterministic-rfc6979')
  988. for message, k, r, s, module in self.signatures_p224:
  989. hash_obj = module.new(message)
  990. result = signer.sign(hash_obj)
  991. self.assertEqual(r + s, result)
  992. def test_data_rfc6979_p256(self):
  993. signer = DSS.new(self.key_priv_p256, 'deterministic-rfc6979')
  994. for message, k, r, s, module in self.signatures_p256:
  995. hash_obj = module.new(message)
  996. result = signer.sign(hash_obj)
  997. self.assertEqual(r + s, result)
  998. def test_data_rfc6979_p384(self):
  999. signer = DSS.new(self.key_priv_p384, 'deterministic-rfc6979')
  1000. for message, k, r, s, module in self.signatures_p384:
  1001. hash_obj = module.new(message)
  1002. result = signer.sign(hash_obj)
  1003. self.assertEqual(r + s, result)
  1004. def test_data_rfc6979_p521(self):
  1005. signer = DSS.new(self.key_priv_p521, 'deterministic-rfc6979')
  1006. for message, k, r, s, module in self.signatures_p521:
  1007. hash_obj = module.new(message)
  1008. result = signer.sign(hash_obj)
  1009. self.assertEqual(r + s, result)
  1010. def get_hash_module(hash_name):
  1011. if hash_name == "SHA-512":
  1012. hash_module = SHA512
  1013. elif hash_name == "SHA-512/224":
  1014. hash_module = SHA512.new(truncate="224")
  1015. elif hash_name == "SHA-512/256":
  1016. hash_module = SHA512.new(truncate="256")
  1017. elif hash_name == "SHA-384":
  1018. hash_module = SHA384
  1019. elif hash_name == "SHA-256":
  1020. hash_module = SHA256
  1021. elif hash_name == "SHA-224":
  1022. hash_module = SHA224
  1023. elif hash_name == "SHA-1":
  1024. hash_module = SHA1
  1025. elif hash_name == "SHA3-224":
  1026. hash_module = SHA3_224
  1027. elif hash_name == "SHA3-256":
  1028. hash_module = SHA3_256
  1029. elif hash_name == "SHA3-384":
  1030. hash_module = SHA3_384
  1031. elif hash_name == "SHA3-512":
  1032. hash_module = SHA3_512
  1033. else:
  1034. raise ValueError("Unknown hash algorithm: " + hash_name)
  1035. return hash_module
  1036. class TestVectorsDSAWycheproof(unittest.TestCase):
  1037. def __init__(self, wycheproof_warnings, slow_tests):
  1038. unittest.TestCase.__init__(self)
  1039. self._wycheproof_warnings = wycheproof_warnings
  1040. self._slow_tests = slow_tests
  1041. self._id = "None"
  1042. self.tv = []
  1043. def setUp(self):
  1044. def filter_dsa(group):
  1045. return DSA.import_key(group['keyPem'])
  1046. def filter_sha(group):
  1047. return get_hash_module(group['sha'])
  1048. def filter_type(group):
  1049. sig_type = group['type']
  1050. if sig_type != 'DsaVerify':
  1051. raise ValueError("Unknown signature type " + sig_type)
  1052. return sig_type
  1053. result = load_test_vectors_wycheproof(("Signature", "wycheproof"),
  1054. "dsa_test.json",
  1055. "Wycheproof DSA signature",
  1056. group_tag={'key': filter_dsa,
  1057. 'hash_module': filter_sha,
  1058. 'sig_type': filter_type})
  1059. self.tv += result
  1060. def shortDescription(self):
  1061. return self._id
  1062. def warn(self, tv):
  1063. if tv.warning and self._wycheproof_warnings:
  1064. import warnings
  1065. warnings.warn("Wycheproof warning: %s (%s)" % (self._id, tv.comment))
  1066. def test_verify(self, tv):
  1067. self._id = "Wycheproof DSA Test #" + str(tv.id)
  1068. hashed_msg = tv.hash_module.new(tv.msg)
  1069. signer = DSS.new(tv.key, 'fips-186-3', encoding='der')
  1070. try:
  1071. signature = signer.verify(hashed_msg, tv.sig)
  1072. except ValueError as e:
  1073. if tv.warning:
  1074. return
  1075. assert not tv.valid
  1076. else:
  1077. assert tv.valid
  1078. self.warn(tv)
  1079. def runTest(self):
  1080. for tv in self.tv:
  1081. self.test_verify(tv)
  1082. class TestVectorsECDSAWycheproof(unittest.TestCase):
  1083. def __init__(self, wycheproof_warnings, slow_tests):
  1084. unittest.TestCase.__init__(self)
  1085. self._wycheproof_warnings = wycheproof_warnings
  1086. self._slow_tests = slow_tests
  1087. self._id = "None"
  1088. def add_tests(self, filename):
  1089. def filter_ecc(group):
  1090. # These are the only curves we accept to skip
  1091. if group['key']['curve'] in ('secp224k1', 'secp256k1',
  1092. 'brainpoolP224r1', 'brainpoolP224t1',
  1093. 'brainpoolP256r1', 'brainpoolP256t1',
  1094. 'brainpoolP320r1', 'brainpoolP320t1',
  1095. 'brainpoolP384r1', 'brainpoolP384t1',
  1096. 'brainpoolP512r1', 'brainpoolP512t1',
  1097. ):
  1098. return None
  1099. return ECC.import_key(group['keyPem'])
  1100. def filter_sha(group):
  1101. return get_hash_module(group['sha'])
  1102. def filter_encoding(group):
  1103. encoding_name = group['type']
  1104. if encoding_name == "EcdsaVerify":
  1105. return "der"
  1106. elif encoding_name == "EcdsaP1363Verify":
  1107. return "binary"
  1108. else:
  1109. raise ValueError("Unknown signature type " + encoding_name)
  1110. result = load_test_vectors_wycheproof(("Signature", "wycheproof"),
  1111. filename,
  1112. "Wycheproof ECDSA signature (%s)" % filename,
  1113. group_tag={'key': filter_ecc,
  1114. 'hash_module': filter_sha,
  1115. 'encoding': filter_encoding,
  1116. })
  1117. self.tv += result
  1118. def setUp(self):
  1119. self.tv = []
  1120. self.add_tests("ecdsa_secp224r1_sha224_p1363_test.json")
  1121. self.add_tests("ecdsa_secp224r1_sha224_test.json")
  1122. if self._slow_tests:
  1123. self.add_tests("ecdsa_secp224r1_sha256_p1363_test.json")
  1124. self.add_tests("ecdsa_secp224r1_sha256_test.json")
  1125. self.add_tests("ecdsa_secp224r1_sha3_224_test.json")
  1126. self.add_tests("ecdsa_secp224r1_sha3_256_test.json")
  1127. self.add_tests("ecdsa_secp224r1_sha3_512_test.json")
  1128. self.add_tests("ecdsa_secp224r1_sha512_p1363_test.json")
  1129. self.add_tests("ecdsa_secp224r1_sha512_test.json")
  1130. self.add_tests("ecdsa_secp256r1_sha256_p1363_test.json")
  1131. self.add_tests("ecdsa_secp256r1_sha256_test.json")
  1132. self.add_tests("ecdsa_secp256r1_sha3_256_test.json")
  1133. self.add_tests("ecdsa_secp256r1_sha3_512_test.json")
  1134. self.add_tests("ecdsa_secp256r1_sha512_p1363_test.json")
  1135. self.add_tests("ecdsa_secp256r1_sha512_test.json")
  1136. if self._slow_tests:
  1137. self.add_tests("ecdsa_secp384r1_sha3_384_test.json")
  1138. self.add_tests("ecdsa_secp384r1_sha3_512_test.json")
  1139. self.add_tests("ecdsa_secp384r1_sha384_p1363_test.json")
  1140. self.add_tests("ecdsa_secp384r1_sha384_test.json")
  1141. self.add_tests("ecdsa_secp384r1_sha512_p1363_test.json")
  1142. self.add_tests("ecdsa_secp384r1_sha512_test.json")
  1143. if self._slow_tests:
  1144. self.add_tests("ecdsa_secp521r1_sha3_512_test.json")
  1145. self.add_tests("ecdsa_secp521r1_sha512_p1363_test.json")
  1146. self.add_tests("ecdsa_secp521r1_sha512_test.json")
  1147. self.add_tests("ecdsa_test.json")
  1148. self.add_tests("ecdsa_webcrypto_test.json")
  1149. def shortDescription(self):
  1150. return self._id
  1151. def warn(self, tv):
  1152. if tv.warning and self._wycheproof_warnings:
  1153. import warnings
  1154. warnings.warn("Wycheproof warning: %s (%s)" % (self._id, tv.comment))
  1155. def test_verify(self, tv):
  1156. self._id = "Wycheproof ECDSA Test #%d (%s, %s)" % (tv.id, tv.comment, tv.filename)
  1157. # Skip tests with unsupported curves
  1158. if tv.key is None:
  1159. return
  1160. hashed_msg = tv.hash_module.new(tv.msg)
  1161. signer = DSS.new(tv.key, 'fips-186-3', encoding=tv.encoding)
  1162. try:
  1163. signature = signer.verify(hashed_msg, tv.sig)
  1164. except ValueError as e:
  1165. if tv.warning:
  1166. return
  1167. if tv.comment == "k*G has a large x-coordinate":
  1168. return
  1169. assert not tv.valid
  1170. else:
  1171. assert tv.valid
  1172. self.warn(tv)
  1173. def runTest(self):
  1174. for tv in self.tv:
  1175. self.test_verify(tv)
  1176. def get_tests(config={}):
  1177. wycheproof_warnings = config.get('wycheproof_warnings')
  1178. tests = []
  1179. tests += list_test_cases(FIPS_DSA_Tests)
  1180. tests += list_test_cases(FIPS_ECDSA_Tests)
  1181. tests += list_test_cases(Det_DSA_Tests)
  1182. tests += list_test_cases(Det_ECDSA_Tests)
  1183. slow_tests = config.get('slow_tests')
  1184. if slow_tests:
  1185. tests += list_test_cases(FIPS_DSA_Tests_KAT)
  1186. tests += list_test_cases(FIPS_ECDSA_Tests_KAT)
  1187. tests += [TestVectorsDSAWycheproof(wycheproof_warnings, slow_tests)]
  1188. tests += [TestVectorsECDSAWycheproof(wycheproof_warnings, slow_tests)]
  1189. return tests
  1190. if __name__ == '__main__':
  1191. def suite():
  1192. return unittest.TestSuite(get_tests())
  1193. unittest.main(defaultTest='suite')