Tryag File Manager
Home
-
Turbo Force
Current Path :
/
proc
/
self
/
root
/
usr
/
share
/
doc
/
m2crypto-0.16
/
tests
/
Upload File :
New :
File
Dir
//proc/self/root/usr/share/doc/m2crypto-0.16/tests/test_rsa.py
#!/usr/bin/python """Unit tests for M2Crypto.RSA. Copyright (c) 2000 Ng Pheng Siong. All rights reserved.""" import unittest import sha, md5 from M2Crypto import RSA, BIO, Rand, m2, EVP class RSATestCase(unittest.TestCase): errkey = 'dsa.priv.pem' privkey = 'rsa.priv.pem' privkey2 = 'rsa.priv2.pem' pubkey = 'rsa.pub.pem' data = sha.sha('The magic words are squeamish ossifrage.').digest() e_padding_ok = ('pkcs1_padding', 'pkcs1_oaep_padding') s_padding_ok = ('pkcs1_padding',) s_padding_nok = ('no_padding', 'sslv23_padding', 'pkcs1_oaep_padding') def gen_callback(self, *args): pass def gen2_callback(self): pass def pp_callback(self, *args): # The passphrase for rsa.priv2.pem is 'qwerty'. return 'qwerty' def pp2_callback(self, *args): # Misbehaving passphrase callback. pass def check_loadkey_junk(self): self.assertRaises(RSA.RSAError, RSA.load_key, self.errkey) def check_loadkey_pp(self): rsa = RSA.load_key(self.privkey2, self.pp_callback) assert len(rsa) == 512 assert rsa.e == '\000\000\000\003\001\000\001' # aka 65537 aka 0xf4 assert rsa.check_key() == 1 def check_loadkey_pp_bad_cb(self): self.assertRaises(RSA.RSAError, RSA.load_key, self.privkey2, self.pp2_callback) def check_loadkey(self): rsa = RSA.load_key(self.privkey) assert len(rsa) == 512 assert rsa.e == '\000\000\000\003\001\000\001' # aka 65537 aka 0xf4 assert rsa.check_key() == 1 def check_loadkey_bio(self): keybio = BIO.MemoryBuffer(open(self.privkey).read()) rsa = RSA.load_key_bio(keybio) assert len(rsa) == 512 assert rsa.e == '\000\000\000\003\001\000\001' # aka 65537 aka 0xf4 assert rsa.check_key() == 1 def check_keygen(self): rsa = RSA.gen_key(256, 65537, self.gen_callback) assert len(rsa) == 256 assert rsa.e == '\000\000\000\003\001\000\001' # aka 65537 aka 0xf4 assert rsa.check_key() == 1 def check_keygen_bad_cb(self): rsa = RSA.gen_key(256, 65537, self.gen2_callback) assert len(rsa) == 256 assert rsa.e == '\000\000\000\003\001\000\001' # aka 65537 aka 0xf4 assert rsa.check_key() == 1 def check_private_encrypt(self): priv = RSA.load_key(self.privkey) # pkcs1_padding for padding in self.s_padding_ok: p = getattr(RSA, padding) ctxt = priv.private_encrypt(self.data, p) ptxt = priv.public_decrypt(ctxt, p) assert ptxt == self.data # The other paddings. for padding in self.s_padding_nok: p = getattr(RSA, padding) self.assertRaises(RSA.RSAError, priv.private_encrypt, self.data, p) # Type-check the data to be encrypted. self.assertRaises(TypeError, priv.private_encrypt, self.gen_callback, RSA.pkcs1_padding) def check_public_encrypt(self): priv = RSA.load_key(self.privkey) # pkcs1_padding, pkcs1_oaep_padding for padding in self.e_padding_ok: p = getattr(RSA, padding) ctxt = priv.public_encrypt(self.data, p) ptxt = priv.private_decrypt(ctxt, p) assert ptxt == self.data # sslv23_padding ctxt = priv.public_encrypt(self.data, RSA.sslv23_padding) self.assertRaises(RSA.RSAError, priv.private_decrypt, ctxt, RSA.sslv23_padding) # no_padding self.assertRaises(RSA.RSAError, priv.public_encrypt, self.data, RSA.no_padding) # Type-check the data to be encrypted. self.assertRaises(TypeError, priv.public_encrypt, self.gen_callback, RSA.pkcs1_padding) def check_loadpub(self): rsa = RSA.load_pub_key(self.pubkey) assert len(rsa) == 512 assert rsa.e == '\000\000\000\003\001\000\001' # aka 65537 aka 0xf4 assert rsa.check_key() def check_loadpub_bad(self): self.assertRaises(RSA.RSAError, RSA.load_pub_key, self.errkey) def check_set_bn(self): rsa = RSA.load_pub_key(self.pubkey) assert m2.rsa_set_e(rsa.rsa, '\000\000\000\003\001\000\001') is None self.assertRaises(RSA.RSAError, m2.rsa_set_e, rsa.rsa, '\000\000\000\003\001') def check_newpub(self): old = RSA.load_pub_key(self.pubkey) new = RSA.new_pub_key(old.pub()) assert new.check_key() assert len(new) == 512 assert new.e == '\000\000\000\003\001\000\001' # aka 65537 aka 0xf4 def check_sign_and_verify(self): """ Testing signing and verifying digests """ algos = {'sha1':'', 'ripemd160':'', 'md5':''} if m2.OPENSSL_VERSION_NUMBER >= 0x90800F: algos['sha224'] = '' algos['sha256'] = '' algos['sha384'] = '' algos['sha512'] = '' message = "This is the message string" digest = sha.sha(message).digest() rsa = RSA.load_key(self.privkey) rsa2 = RSA.load_pub_key(self.pubkey) for algo in algos.keys(): signature = rsa.sign(digest, algo) #assert signature == algos[algo], 'mismatched signature with algorithm %s: signature=%s' % (algo, signature) verify = rsa2.verify(digest, signature, algo) assert verify == 1, 'verification failed with algorithm %s' % algo def check_sign_bad_method(self): """ Testing calling sign with an unsupported message digest algorithm """ rsa = RSA.load_key(self.privkey) message = "This is the message string" digest = md5.md5(message).digest() self.assertRaises(ValueError, rsa.sign, digest, 'bad_digest_method') def check_verify_bad_method(self): """ Testing calling verify with an unsupported message digest algorithm """ rsa = RSA.load_key(self.privkey) message = "This is the message string" digest = md5.md5(message).digest() signature = rsa.sign(digest, 'sha1') self.assertRaises(ValueError, rsa.verify, digest, signature, 'bad_digest_method') def check_verify_mismatched_algo(self): """ Testing verify to make sure it fails when we use a different message digest algorithm """ rsa = RSA.load_key(self.privkey) message = "This is the message string" digest = sha.sha(message).digest() signature = rsa.sign(digest, 'sha1') rsa2 = RSA.load_pub_key(self.pubkey) self.assertRaises(RSA.RSAError, rsa.verify, digest, signature, 'md5') def check_sign_fail(self): """ Testing sign to make sure it fails when I give it a bogus digest. Looking at the RSA sign method I discovered that with the digest methods we use it has to be longer than a certain length. """ rsa = RSA.load_key(self.privkey) digest = """This string should be long enough to warrant an error in RSA_sign""" self.assertRaises(RSA.RSAError, rsa.sign, digest) def check_verify_bad_signature(self): """ Testing verify to make sure it fails when we use a bad signature """ rsa = RSA.load_key(self.privkey) message = "This is the message string" digest = sha.sha(message).digest() otherMessage = "Abracadabra" otherDigest = sha.sha(otherMessage).digest() otherSignature = rsa.sign(otherDigest) self.assertRaises(RSA.RSAError, rsa.verify, digest, otherSignature) def suite(): return unittest.makeSuite(RSATestCase, 'check') if __name__ == '__main__': Rand.load_file('randpool.dat', -1) unittest.TextTestRunner().run(suite()) Rand.save_file('randpool.dat')