Skip to content

Commit

Permalink
Add RSA3072 tests
Browse files Browse the repository at this point in the history
  • Loading branch information
@sosthene-nitrokey
sosthene-nitrokey committed Apr 17, 2023
1 parent 2e09631 commit 0dc48b2
Show file tree
Hide file tree
Showing 5 changed files with 640 additions and 8 deletions.
3 changes: 2 additions & 1 deletion Cargo.toml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,8 @@ virt = ["std", "trussed/virt"]

rsa = ["trussed-rsa-alloc"]
rsa2048 = ["rsa"]
rsa4096 = ["rsa2048"]
rsa3072 = ["rsa2048"]
rsa4096 = ["rsa3072"]
rsa4096-gen = ["rsa4096"]

dangerous-test-real-card = []
Expand Down
307 changes: 306 additions & 1 deletion tests/crypto-gpg-import.rs
View file
Original file line number Diff line number Diff line change
Expand Up @@ -881,7 +881,308 @@ fn gpg_rsa_2048() {
],
&[
vec![r"\[GNUPG:\] CARDCTRL \d D276000124010304[A-F0-9]*"],
virt::gpg_status(virt::KeyType::RsaNoAut, 1),
virt::gpg_status(virt::KeyType::Rsa2048NoAut, 1),
vec![
r"\[GNUPG:\] GET_LINE cardedit.prompt",
r"\[GNUPG:\] GET_LINE cardedit.prompt",
r"\[GNUPG:\] GET_BOOL cardedit.factory-reset.proceed",
r"\[GNUPG:\] GET_LINE cardedit.factory-reset.really",
r"\[GNUPG:\] GET_LINE cardedit.prompt",
],
virt::gpg_inquire_pin(),
virt::gpg_status(virt::KeyType::RsaNone, 0),
vec![r"\[GNUPG:\] GET_LINE cardedit.prompt"],
]
.into_iter()
.flatten()
.collect::<Vec<&str>>(),
&[
r"gpg: OpenPGP card no. [0-9A-F]{32} detected",
r"gpg: Note: This command destroys all keys stored on the card!",
],
EditCard,
);
}

#[cfg(feature = "rsa3072")]
fn gpg_rsa_3072() {
let file_number: u32 = rand::rngs::OsRng.gen();
let tmp = format!("/tmp/opcard-tests-{file_number}.gpg");
let encrypted_file = &tmp;
let tmp = format!("/tmp/opcard-tests-{file_number}-sig.gpg");
let sign_file = &tmp;
let tmp = format!("/tmp/opcard-tests-{file_number}.toml");
let decrypted_file = &tmp;
let _dropper = FileDropper {
temp_file_name: encrypted_file,
};
let _dropper = FileDropper {
temp_file_name: sign_file,
};
let _dropper = FileDropper {
temp_file_name: decrypted_file,
};

let tmp = format!("test name{file_number}");
let temp_name = &tmp;

let tmp = format!("test{file_number}@email.com");
let temp_email = &tmp;

let custom_match = format!(
r"uid:u::::\d{{10}}::[0-9A-F]{{40}}::{temp_name} \(no comment\) <{temp_email}>::::::::::0:"
);

let custom_match2 = format!(
r"uid:u::::::::{temp_name} \(no comment\) <{temp_email}>:::.*,mdc,no-ks-modify:1,p::"
);

gnupg_test(
&[],
&[
vec![r"\[GNUPG:\] CARDCTRL \d D276000124010304[A-Z0-9]*"],
virt::gpg_status(virt::KeyType::RsaNone, 0),
]
.into_iter()
.flatten()
.collect::<Vec<&str>>(),
&[],
CardStatus,
);

gnupg_test(
&[
"1",
"3072",
"3072",
"0",
temp_name,
temp_email,
"no comment",
"",
"",
],
&[
vec![
r"\[GNUPG:\] GET_LINE keygen.algo",
r"\[GNUPG:\] GET_LINE keygen.size",
r"\[GNUPG:\] GET_LINE keygen.size",
r"\[GNUPG:\] GET_LINE keygen.valid",
r"\[GNUPG:\] GET_LINE keygen.name",
r"\[GNUPG:\] GET_LINE keygen.email",
r"\[GNUPG:\] GET_LINE keygen.comment",
],
virt::gpg_inquire_pin(),
virt::gpg_inquire_pin(),
vec![
r"pub:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:::u:::scESC:::\+:::23::0:",
r"fpr:::::::::[0-9A-F]{40}:",
r"grp:::::::::[0-9A-F]{40}:",
&custom_match,
r"sub:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}::::::e:::\+:::23:",
r"fpr:::::::::[0-9A-F]{40}:",
r"grp:::::::::[0-9A-F]{40}:",
r"\[GNUPG:\] KEY_CREATED B [A-F0-9]{40}",
],
]
.into_iter()
.flatten()
.collect::<Vec<&str>>(),
&[
r"gpg: revocation certificate stored as '.*\.rev'",
r"gpg: checking the trustdb",
r"gpg: marginals needed: \d completes needed: \d trust model: pgp",
r"gpg: depth:[ 0-9]*valid:[ 0-9]*signed:[ 0-9]*trust: \d*-, \d*q, \d*n, \d*m, \d*f, \d*u",
],
Generate,
);

println!("================ FINISHED GENERATING Rsa3072 KEYS ================");

gnupg_test(
&["key *", "keytocard", "2", DEFAULT_PW3, DEFAULT_PW3, "save"],
&[
vec![
r"sec:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0::u:::sc",
r"fpr:::::::::[0-9A-F]{40}:",
r"ssb:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0:::::e",
r"fpr:::::::::[0-9A-F]{40}:",
&custom_match2,
r"\[GNUPG:\] GET_LINE keyedit.prompt",
r"sec:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0::u:::sc",
r"fpr:::::::::[0-9A-F]{40}:",
r"ssb:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0:::::e",
r"fpr:::::::::[0-9A-F]{40}:",
&custom_match2,
r"\[GNUPG:\] GET_LINE keyedit.prompt",
r"\[GNUPG:\] CARDCTRL 3 D276000124010304[A-F0-9]*",
r"\[GNUPG:\] GET_LINE cardedit.genkeys.storekeytype",
],
virt::gpg_inquire_pin(),
virt::gpg_inquire_pin(),
vec![
r"sec:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0::u:::sc",
r"fpr:::::::::[0-9A-F]{40}:",
r"ssb:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0:::::e",
r"fpr:::::::::[0-9A-F]{40}:",
&custom_match2,
r"\[GNUPG:\] GET_LINE keyedit.prompt",
],
]
.into_iter()
.flatten()
.collect::<Vec<&str>>(),
&[],
EditKey { o: temp_email },
);

println!("================ FINISHED IMPORTING DECRYPTION KEY ================");

gnupg_test(
&["keytocard", "y", "1", DEFAULT_PW3, "save"],
&[
vec![
r"sec:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0::u:::sc",
r"fpr:::::::::[0-9A-F]{40}:",
r"ssb:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0:::::e",
r"fpr:::::::::[0-9A-F]{40}:",
&custom_match2,
r"\[GNUPG:\] GET_LINE keyedit.prompt",
r"\[GNUPG:\] GET_BOOL keyedit.keytocard.use_primary",
r"\[GNUPG:\] CARDCTRL 3 D276000124010304[A-F0-9]*",
r"\[GNUPG:\] GET_LINE cardedit.genkeys.storekeytype",
],
virt::gpg_inquire_pin(),
vec![
r"sec:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0::u:::sc",
r"fpr:::::::::[0-9A-F]{40}:",
r"ssb:u:\d*:1:[0-9A-F]{16}:[0-9A-F]{10}:0:::::e",
r"fpr:::::::::[0-9A-F]{40}:",
&custom_match2,
r"\[GNUPG:\] GET_LINE keyedit.prompt",
],
]
.into_iter()
.flatten()
.collect::<Vec<&str>>(),
&[],
EditKey { o: temp_email },
);

println!("================ FINISHED IMPORTING Rsa3072 KEYS ================");

gnupg_test(
&[],
&[
r"\[GNUPG:\] BEGIN_ENCRYPTION \d \d",
r"\[GNUPG:\] END_ENCRYPTION",
],
&[],
Encrypt {
i: "Cargo.toml",
o: encrypted_file,
r: temp_email,
},
);

println!("================ FINISHED ENCRYPTION ================");

let custom1 = format!(
r"\[GNUPG:\] USERID_HINT [a-fA-F0-9]{{16}} {temp_name} \(no comment\) <{temp_email}>"
);
let custom2 = format!(r"{temp_name} \(no comment\) <{temp_email}>");

gnupg_test(
&[DEFAULT_PW1],
&[
vec![
r"\[GNUPG:\] ENC_TO [a-fA-F0-9]{16} \d* \d*",
&custom1,
r"\[GNUPG:\] NEED_PASSPHRASE [a-fA-F0-9]{16} [a-fA-F0-9]{16} 1 0",
],
virt::gpg_inquire_pin(),
vec![
r"\[GNUPG:\] DECRYPTION_KEY [a-fA-F0-9]{40} [a-fA-F0-9]{40} u",
r"\[GNUPG:\] BEGIN_DECRYPTION",
r"\[GNUPG:\] DECRYPTION_INFO \d \d \d",
r"\[GNUPG:\] PLAINTEXT \d* \d* Cargo.toml",
r"\[GNUPG:\] PLAINTEXT_LENGTH \d*",
r"\[GNUPG:\] DECRYPTION_OKAY",
r"\[GNUPG:\] GOODMDC",
r"\[GNUPG:\] END_DECRYPTION",
],
]
.into_iter()
.flatten()
.collect::<Vec<&str>>(),
&[
r"gpg: encrypted with \d*-bit RSA key, ID [a-fA-F0-9]{16}, created \d{4}-\d\d-\d\d",
&custom2,
],
Decrypt {
i: encrypted_file,
o: decrypted_file,
},
);

println!("================ FINISHED DECRYPTION ================");

gnupg_test(
&[DEFAULT_PW1],
&[
vec![
r"\[GNUPG:\] CARDCTRL 3 D276000124010304[A-F0-9]*",
r"\[GNUPG:\] BEGIN_SIGNING H\d*",
&custom1,
r"\[GNUPG:\] NEED_PASSPHRASE [a-fA-F0-9]{16} [a-fA-F0-9]{16} 1 0",
],
virt::gpg_inquire_pin(),
vec![r"\[GNUPG:\] SIG_CREATED S 1 \d* 00 [a-fA-F0-9]{10} [a-fA-F0-9]{40}"],
]
.into_iter()
.flatten()
.collect::<Vec<&str>>(),
&[r#"gpg: using "test\d*@email.com" as default secret key for signing"#],
Sign {
i: "Cargo.toml",
o: sign_file,
s: temp_email,
},
);

println!("================ FINISHED SIGNATURE ================");

gnupg_test(
&[],
&[
r"\[GNUPG:\] NEWSIG test\d*@email.com",
r"\[GNUPG:\] SIG_ID [^ ]* \d{4}-\d\d-\d\d [a-fA-F0-9]{10}",
r"\[GNUPG:\] GOODSIG [a-fA-F0-9]{16} test name\d* \(no comment\) <test\d*@email.com>",
r"\[GNUPG:\] VALIDSIG [a-fA-F0-9]{40} \d{4}-\d\d-\d\d [a-fA-F0-9]{10} \d \d \d 1 \d* 00 [a-fA-F0-9]{40}",
r"\[GNUPG:\] TRUST_ULTIMATE 0 pgp",
],
&[
r"gpg: Signature made .*",
r"gpg: using RSA key [a-fA-F0-9]{40}",
r#"gpg: issuer "test\d*@email.com""#,
r#"pg: Good signature from "test name\d* \(no comment\) <test\d*@email.com>"#,
],
Verify { i: sign_file },
);

gnupg_test(
&[
"admin",
"factory-reset",
"y",
"yes",
"verify",
DEFAULT_PW1,
"quit",
],
&[
vec![r"\[GNUPG:\] CARDCTRL \d D276000124010304[A-F0-9]*"],
virt::gpg_status(virt::KeyType::Rsa3072NoAut, 1),
vec![
r"\[GNUPG:\] GET_LINE cardedit.prompt",
r"\[GNUPG:\] GET_LINE cardedit.prompt",
Expand Down Expand Up @@ -1210,6 +1511,8 @@ fn gpg_rsa_4096() {
fn gpg_crypto() {
#[cfg(feature = "rsa2048")]
with_vsc(gpg_rsa_2048);
#[cfg(feature = "rsa3072")]
with_vsc(gpg_rsa_3072);
#[cfg(feature = "rsa4096")]
with_vsc(gpg_rsa_4096);
with_vsc(gpg_255);
Expand All @@ -1222,6 +1525,8 @@ fn gpg_crypto() {
gpg_p256();
#[cfg(feature = "rsa2048")]
gpg_rsa_2048();
#[cfg(feature = "rsa3072")]
gpg_rsa_3072();
#[cfg(feature = "rsa4096")]
gpg_rsa_4096();
}
Loading

0 comments on commit 0dc48b2

Please sign in to comment.