You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
116 lines
4.4 KiB
Python
116 lines
4.4 KiB
Python
import glob
|
|
import hashlib
|
|
import io
|
|
import os
|
|
|
|
import pytest
|
|
|
|
from .. import decode
|
|
from ... import util
|
|
|
|
|
|
def test_subpackets():
|
|
s = io.BytesIO(b'\x00\x05\x02\xAB\xCD\x01\xEF')
|
|
assert decode.parse_subpackets(util.Reader(s)) == [b'\xAB\xCD', b'\xEF']
|
|
|
|
|
|
def test_mpi():
|
|
s = io.BytesIO(b'\x00\x09\x01\x23')
|
|
assert decode.parse_mpi(util.Reader(s)) == 0x123
|
|
|
|
s = io.BytesIO(b'\x00\x09\x01\x23\x00\x03\x05')
|
|
assert decode.parse_mpis(util.Reader(s), n=2) == [0x123, 5]
|
|
|
|
|
|
def assert_subdict(d, s):
|
|
for k, v in s.items():
|
|
assert d[k] == v
|
|
|
|
|
|
def test_primary_nist256p1():
|
|
# pylint: disable=line-too-long
|
|
data = b'''-----BEGIN PGP PUBLIC KEY BLOCK-----
|
|
Version: GnuPG v2
|
|
|
|
mFIEV0hI1hMIKoZIzj0DAQcCAwTXY7aq01xMPSU7gTHU9B7Z2CFoCk1Y4WYb8Tiy
|
|
hurvIZ5la6+UEgAKF9HXpQo0yE+HQOgufoLlCpdE7NoEUb+HtAd0ZXN0aW5niHYE
|
|
ExMIABIFAldISNYCGwMCFQgCFgACF4AAFgkQTcCehfpEIPILZFRSRVpPUi1HUEeV
|
|
3QEApHKmBkbLVZNpsB8q9mBzKytxnOHNB3QWDuoKJu/ERi4A/1wRGZ/B0BDazHck
|
|
zpR9luXTKwMEl+mlZmwEFKZXBmir
|
|
=oyj0
|
|
-----END PGP PUBLIC KEY BLOCK-----
|
|
'''
|
|
stream = io.BytesIO(decode.remove_armor(data))
|
|
pubkey, user_id, signature = list(decode.parse_packets(stream))
|
|
expected_pubkey = {
|
|
'created': 1464355030, 'type': 'pubkey', 'tag': 6,
|
|
'version': 4, 'algo': 19, 'key_id': b'M\xc0\x9e\x85\xfaD \xf2',
|
|
'_to_hash': b'\x99\x00R\x04WHH\xd6\x13\x08*\x86H\xce=\x03\x01\x07\x02\x03\x04\xd7c\xb6\xaa\xd3\\L=%;\x811\xd4\xf4\x1e\xd9\xd8!h\nMX\xe1f\x1b\xf18\xb2\x86\xea\xef!\x9eek\xaf\x94\x12\x00\n\x17\xd1\xd7\xa5\n4\xc8O\x87@\xe8.~\x82\xe5\n\x97D\xec\xda\x04Q\xbf\x87' # nopep8
|
|
}
|
|
assert_subdict(pubkey, expected_pubkey)
|
|
point = pubkey['verifying_key'].pubkey.point
|
|
assert point.x(), point.y() == (
|
|
97423441028100245505102979561460969898742433559010922791700160771755342491425,
|
|
71644624850142103522769833619875243486871666152651730678601507641225861250951
|
|
)
|
|
assert_subdict(user_id, {
|
|
'tag': 13, 'type': 'user_id', 'value': b'testing',
|
|
'_to_hash': b'\xb4\x00\x00\x00\x07testing'
|
|
})
|
|
assert_subdict(signature, {
|
|
'pubkey_alg': 19, '_is_custom': True, 'hash_alg': 8, 'tag': 2,
|
|
'sig_type': 19, 'version': 4, 'type': 'signature', 'hash_prefix': b'\x95\xdd',
|
|
'sig': (74381873592149178031432444136130575481350858387410643140628758456112511206958,
|
|
41642995320462795718437755373080464775445470754419831653624197847615308982443),
|
|
'hashed_subpackets': [b'\x02WHH\xd6', b'\x1b\x03', b'\x15\x08', b'\x16\x00', b'\x17\x80'],
|
|
'unhashed_subpackets': [b'\x10M\xc0\x9e\x85\xfaD \xf2', b'dTREZOR-GPG'],
|
|
'_to_hash': b'\x04\x13\x13\x08\x00\x12\x05\x02WHH\xd6\x02\x1b\x03\x02\x15\x08\x02\x16\x00\x02\x17\x80\x04\xff\x00\x00\x00\x18' # nopep8
|
|
})
|
|
|
|
digest = decode.digest_packets(packets=[pubkey, user_id, signature],
|
|
hasher=hashlib.sha256())
|
|
decode.verify_digest(pubkey=pubkey, digest=digest,
|
|
signature=signature['sig'],
|
|
label='GPG primary public key')
|
|
|
|
with pytest.raises(ValueError):
|
|
bad_digest = b'\x00' * len(digest)
|
|
decode.verify_digest(pubkey=pubkey, digest=bad_digest,
|
|
signature=signature['sig'],
|
|
label='GPG primary public key')
|
|
|
|
message = b'Hello, World!\n'
|
|
signature = b'''-----BEGIN PGP SIGNATURE-----
|
|
Version: GnuPG v2
|
|
|
|
iF4EABMIAAYFAldIlfQACgkQTcCehfpEIPKOUgD9FjaeWla4wOuDZ7P6fhkT5nZp
|
|
KDQU0N5KmNwLlt2kwo4A/jQkBII2cI8tTqOVTLNRXXqIOsMf/fG4jKM/VOFc/01c
|
|
=dC+z
|
|
-----END PGP SIGNATURE-----
|
|
'''
|
|
decode.verify(pubkey=pubkey, signature=signature, original_data=message)
|
|
|
|
pubkey = decode.load_public_key(pubkey_bytes=decode.remove_armor(data))
|
|
assert_subdict(pubkey, expected_pubkey)
|
|
assert_subdict(pubkey, {'user_id': b'testing'})
|
|
|
|
pubkey = decode.load_public_key(pubkey_bytes=decode.remove_armor(data),
|
|
use_custom=True)
|
|
assert_subdict(pubkey, expected_pubkey)
|
|
assert_subdict(pubkey, {'user_id': b'testing'})
|
|
|
|
|
|
cwd = os.path.join(os.path.dirname(__file__))
|
|
input_files = glob.glob(os.path.join(cwd, '*.gpg'))
|
|
|
|
|
|
@pytest.fixture(params=input_files)
|
|
def public_key_path(request):
|
|
return request.param
|
|
|
|
|
|
def test_gpg_files(public_key_path): # pylint: disable=redefined-outer-name
|
|
with open(public_key_path, 'rb') as f:
|
|
keys = decode.parse_public_keys(f)
|
|
assert len(keys) > 0
|