tests/testpkey.py

   1 from ctypescrypto.pkey import PKey
   2 import unittest,re
   3 from base64 import b64decode, b16decode
   4 from subprocess import Popen,PIPE,CalledProcessError
   5
   6 def pem2der(s):
   7     start=s.find('-----\n')
   8     finish=s.rfind('\n-----END')
   9     data=s[start+6:finish]
  10     return b64decode(data)
  11
  12 def runopenssl(args,indata):
  13     p=Popen(['openssl']+args,stdin=PIPE,stdout=PIPE,stderr=PIPE,universal_newlines=True)
  14     (out,err)=p.communicate(indata)
  15     if p.returncode:
  16         raise CalledProcessError(p.returncode," ".join(['openssl']+args)+":"+err)
  17     return out
  18
  19
  20 class TestPKey(unittest.TestCase):
  21     rsa="""-----BEGIN PRIVATE KEY-----
  22 MIICdQIBADANBgkqhkiG9w0BAQEFAASCAl8wggJbAgEAAoGBAL9CzVZu9bczTmB8
  23 776pPUoPo6WbAfwQqqiGrj91bk2mYE+MNLo4yIQH45IcwGzkyS8+YyQJf8Bux5BC
  24 oZ2nwzXm5+JZkxkN1mtMzit2D7/hHmrZLoSbr0sxXFrD4a35RI4hXnSK9Sk01sXA
  25 Te2OgHzm5nk1sG97G6SFq7CHe3gvAgMBAAECgYAgGV8K7Y5xk7vIt88oyZCOuHc3
  26 mP9JRabOp+PgpJ3BjHXHg/lpc5Q7jHNmF0s4O2GEe0z6RFnbevwlOvmS0xAQ1hpg
  27 5TnVVkiZvcJeQaZqWIlEOaLqA12YdhSyorfB6p3tfQ7ZmQusg3SCsru5kPJV4sm0
  28 I+MuRCQZWSzIqelloQJBAPbtScJI0lXx8sktntZi69cAVvLtz5z1T7bZwFakNkNE
  29 SUCjNc/hEEI6/1LScV8Kx9kgQ0+W8smu+GyUDceyVFECQQDGSeS7cTmojkiPQxPB
  30 zb0vS+Nfpq6oYsx+gn5TBgMeWIZZrtMEaUU2o+rwsjKBP/gy6D1zC2b4W5O/A/7a
  31 1GR/AkBUQhYoKKc1UpExGtMXfrvRKrmAvatZeM/Rqi4aooAtpfCFEOw82iStJOqY
  32 /VxYPRqCuaKeVvjT31O/4SlumihxAkBahRU0NKYbuoiJThfQ23lIBB7SZadKG4A7
  33 KJs+j3oQ+lyqyFJwqxX7sazpIJBJzMgjhT24LTZenn++LbbEcz1FAkBmDmxoq7qO
  34 Ao6uTm8fnkD4C836wS4mYAPqwRBK1JvnEXEQee9irf+ip89BAg74ViTcGF9lwJwQ
  35 gOM+X5Db+3pK
  36 -----END PRIVATE KEY-----
  37 """
  38     rsaenc="""-----BEGIN RSA PRIVATE KEY-----
  39 Proc-Type: 4,ENCRYPTED
  40 DEK-Info: AES-256-CBC,7FF0E46291D60D35ACA881131C244655
  41
  42 BeJoui1lRQDvvPr+gH8xCdqkcgKCLWpZTvFZmvrqXmPqMHpm20nK0ESAd6kKm8d1
  43 zaglRIHnnO6V7aDcwgOd3IYPEOnG2TIRQniZrwZdrXIfacscJ6Ekq+5YfLuyrRgq
  44 fscGl7ntm/eGLqwrhzuv7jAXpn9QWiiAld0EWcmZCAW7nGaUQtu4rc4ULwL5SC/M
  45 MOCPwpcD3SCQv55dX3cBOtfZ3lPbpgEpTpnNnj8OtxOkkIaG8yol7luwHvoOSyL/
  46 WuXGCpfJE4LzbxnSLhbiN7q+y/Sro3cGc9aO4tXToMqTFel4zqR0YgOeFazlDRi1
  47 mPuZcGLuSIef0kJn7Mg7jt0DQk579rTVxAhIu2rylTwEozkpCp5g4kGTJON++HQr
  48 BRrApm4XlAoH2GX1jqDBoWSnXCRH49jNGQrLwy469i+994cG8uVU9Z5cqm/LDIR9
  49 kwQfTJIvMi0g28NBMVgJ2gLj40OczxDGyNvBIbhPNswHljfsvPVr4vtxDGx8fS0N
  50 lUJUOL9me+XNZ5xGHYuT5DOr7GE+H3hKEg+XfrYEete9BeI4gm9cqESvrLY9EU5Q
  51 tOtnKKL7SglTZ5LxPMAedADC0o01nzr+D3gAiOhSgoZTrnQsSZ7iTJOtm3vNXwJx
  52 AgesYmXtr5mdiBPKQ1QA/jF5LUZji+5KENd5WHNQw7tOlMLDrPFVRfLZg1AQDljx
  53 u16kdyb71Kk3f6GCOfUntGr+kzppc3DDT+RcLetXphOOEQRy6C6/wmz08WlAPlu5
  54 mFfSDijpWxoUHooQISg5mE82oR8V81aBpbLtm7KevwY=
  55 -----END RSA PRIVATE KEY-----
  56 """
  57     pkcs8crypt="""-----BEGIN ENCRYPTED PRIVATE KEY-----
  58 MIICoTAbBgkqhkiG9w0BBQMwDgQIipVEnsV/gQoCAggABIICgE1i42C4aBhykhOi
  59 EItFRE+9iBgiklGxoCJtukdp1UwDRKy/GJJ1rcS385CQy4Rs0zN8NH1faVRbf4Vt
  60 iNACHtJx30qMCdo64CR+GJYHS4g2lGaz7PFNma8SjnAbGYXwXkdm5zhwmiU++wC7
  61 W59u8oWS8Dj9dZBMzoOQGQT6xzZwQ14H65zHvC16HdKSNtRgXDWkBnD2cQzuOyuf
  62 rFLyEf7/FH6B7/yKDcwsEfu97uPPxMvuusD1UubWnltO/Hc2oCPibN+dGw1PY9mC
  63 18yGQtZkf5z30yhLosF62IVy3XY9Yf/TJYojIExoASrThGRvENzWkQ3qfnErqmng
  64 l+dy66bmLjicobF5bO3xAhpU1dL+4/1ba2QuthVNlg6Or/iII1ntNN4PFyYcEwmX
  65 e09C3dyOtV7qCq13S1bRkbZhzwi2QbLKALAzrZpF6VYmayTz8KjQOZ8BncAM+BiI
  66 CtwuZJoXLW9kT4D7UsaSZdjUvzBIak5qdCGWpKmahMfjEEsCg6ApuIYmFrCgiY9c
  67 0keYjY8DJ+4bEvqsQvTIaU9F9mFytI1E3LnR0NP1jHuOA7Jc+oNQ2adgFNj12jKQ
  68 qNt1bEGNCqQHSrw7JNCrB7s+QAFNqJtno6fIq7vVNkqadJlnBbCIgm7NlJeGg9j6
  69 a5YVNGlbs0J4dQF4Jw13302IBn3piSzthWL2gL98v/1lEwGuernEpPAjry3YhzM9
  70 VA/oVt22n3yVA6dOSVL1oUTJyawEqASmH0jHAzXNDz+QLSLmz82ARcZPqPvVc45e
  71 5h0xtqtFVkQLNbYzpNWGrx7R1hdr84nOKa8EsIxTRgEL/w9Y4Z/3xEoK2+KVBpMk
  72 oxUuxuU=
  73 -----END ENCRYPTED PRIVATE KEY-----
  74 """
  75     password="1111"
  76     rsakeytext="""Public-Key: (1024 bit)
  77 Modulus:
  78     00:bf:42:cd:56:6e:f5:b7:33:4e:60:7c:ef:be:a9:
  79     3d:4a:0f:a3:a5:9b:01:fc:10:aa:a8:86:ae:3f:75:
  80     6e:4d:a6:60:4f:8c:34:ba:38:c8:84:07:e3:92:1c:
  81     c0:6c:e4:c9:2f:3e:63:24:09:7f:c0:6e:c7:90:42:
  82     a1:9d:a7:c3:35:e6:e7:e2:59:93:19:0d:d6:6b:4c:
  83     ce:2b:76:0f:bf:e1:1e:6a:d9:2e:84:9b:af:4b:31:
  84     5c:5a:c3:e1:ad:f9:44:8e:21:5e:74:8a:f5:29:34:
  85     d6:c5:c0:4d:ed:8e:80:7c:e6:e6:79:35:b0:6f:7b:
  86     1b:a4:85:ab:b0:87:7b:78:2f
  87 Exponent: 65537 (0x10001)
  88 """
  89     ec1priv="""-----BEGIN PRIVATE KEY-----
  90 MIGEAgEAMBAGByqGSM49AgEGBSuBBAAKBG0wawIBAQQgKnG6neqZvB98EEuuxnHs
  91 fv+L/5abuNNG20wzUqRpncOhRANCAARWKXWeUZ6WiCKZ2kHx87jmJyx0G3ZB1iQC
  92 +Gp2AJYswbQPhGPigKolzIbZYfwnn7QOca6N8QDhPAn3QQK8trZI
  93 -----END PRIVATE KEY-----
  94 """
  95     ec1keytext="""Public-Key: (256 bit)
  96 pub:
  97     04:56:29:75:9e:51:9e:96:88:22:99:da:41:f1:f3:
  98     b8:e6:27:2c:74:1b:76:41:d6:24:02:f8:6a:76:00:
  99     96:2c:c1:b4:0f:84:63:e2:80:aa:25:cc:86:d9:61:
 100     fc:27:9f:b4:0e:71:ae:8d:f1:00:e1:3c:09:f7:41:
 101     02:bc:b6:b6:48
 102 ASN1 OID: secp256k1
 103 """
 104     ec1pub="""-----BEGIN PUBLIC KEY-----
 105 MFYwEAYHKoZIzj0CAQYFK4EEAAoDQgAEVil1nlGelogimdpB8fO45icsdBt2QdYk
 106 AvhqdgCWLMG0D4Rj4oCqJcyG2WH8J5+0DnGujfEA4TwJ90ECvLa2SA==
 107 -----END PUBLIC KEY-----
 108 """
 109
 110     def test_unencrypted_pem(self):
 111         key=PKey(privkey=self.rsa)
 112         self.assertTrue(key.cansign)
 113         self.assertIsNotNone(key.key)
 114         self.assertEqual(str(key),self.rsakeytext)
 115     def test_encrypted_pem(self):
 116         key=PKey(privkey=self.rsaenc,password=self.password)
 117         self.assertIsNotNone(key.key)
 118         self.assertEqual(str(key),self.rsakeytext)
 119     def test_encrypted_pem_cb(self):
 120         cb=lambda x:self.password
 121         key=PKey(privkey=self.rsaenc,password=cb)
 122         self.assertIsNotNone(key.key)
 123         self.assertEqual(str(key),self.rsakeytext)
 124     def test_encryped_pem_pkcs8(self):
 125         key=PKey(privkey=self.pkcs8crypt,password=self.password)
 126         self.assertIsNotNone(key.key)
 127         self.assertEqual(str(key),self.rsakeytext)
 128     def test_encrypted_der_pkcs8(self):
 129         pkcs8der = pem2der(self.pkcs8crypt)
 130         key=PKey(privkey=pkcs8der,password=self.password,format="DER")
 131         self.assertIsNotNone(key.key)
 132         self.assertEqual(str(key),self.rsakeytext)
 133     def test_export_priv_pem(self):
 134         key=PKey(privkey=self.ec1priv)
 135         out=key.exportpriv()
 136         self.assertEqual(self.ec1priv,out)
 137     def test_export_priv_encrypt(self):
 138         from ctypescrypto.cipher import CipherType
 139         key=PKey(privkey=self.rsa)
 140         pem=key.exportpriv(password='2222',cipher=CipherType("aes256"))
 141         self.assertEqual(runopenssl(["pkey","-text_pub","-noout","-passin","pass:2222"],
 142                                     pem),self.rsakeytext)
 143     def test_export_priv_der(self):
 144         key=PKey(privkey=self.rsa)
 145         der=key.exportpriv(format="DER")
 146         self.assertEqual(runopenssl(["pkey","-text_pub","-noout","-inform","DER"],
 147             der),self.rsakeytext)
 148     def test_export_priv_der_enc(self):
 149         from ctypescrypto.cipher import CipherType
 150         key=PKey(privkey=self.rsa)
 151         der=key.exportpriv(format="DER",password='2222',cipher=CipherType("aes256"))
 152         self.assertEqual(runopenssl(["pkcs8","-passin","pass:2222","-inform","DER"],
 153             der),self.rsa)
 154     def test_unencrypted_pem_ec(self):
 155
 156         key=PKey(privkey=self.ec1priv)
 157         self.assertIsNotNone(key.key)
 158         self.assertEqual(re.sub("pub: \n","pub:\n",str(key)),self.ec1keytext)
 159     def test_unencrypted_der_ec(self):
 160         key=PKey(privkey=pem2der(self.ec1priv),format="DER")
 161         self.assertIsNotNone(key.key)
 162         self.assertEqual(re.sub("pub: \n","pub:\n",str(key)),self.ec1keytext)
 163     def test_pubkey_pem(self):
 164         key=PKey(pubkey=self.ec1pub)
 165         self.assertIsNotNone(key.key)
 166         self.assertEqual(re.sub("pub: \n","pub:\n",str(key)),self.ec1keytext)
 167     def test_pubkey_der(self):
 168         key=PKey(pubkey=pem2der(self.ec1pub),format="DER")
 169         self.assertIsNotNone(key.key)
 170         self.assertEqual(re.sub("pub: \n","pub:\n",str(key)),self.ec1keytext)
 171     def test_compare(self):
 172         key1=PKey(privkey=self.ec1priv)
 173         self.assertIsNotNone(key1.key)
 174         key2=PKey(pubkey=self.ec1pub)
 175         self.assertIsNotNone(key2.key)
 176         self.assertEqual(key1,key2)
 177     def test_sign(self):
 178         signer=PKey(privkey=self.ec1priv)
 179         digest=b16decode("FFCA2587CFD4846E4CB975B503C9EB940F94566AA394E8BD571458B9DA5097D5")
 180         signature=signer.sign(digest)
 181         self.assertTrue(len(signature)>0)
 182         verifier=PKey(pubkey=self.ec1pub)
 183         self.assertTrue(verifier.verify(digest,signature))
 184     def test_generate(self):
 185         newkey=PKey.generate("rsa")
 186         self.assertIsNotNone(newkey.key)
 187         s=str(newkey)
 188         self.assertEqual(s[:s.find("\n")],"Public-Key: (1024 bit)")
 189     def test_generate_params(self):
 190         newkey=PKey.generate("rsa",rsa_keygen_bits=2048)
 191         self.assertIsNotNone(newkey.key)
 192         s=str(newkey)
 193         self.assertEqual(s[:s.find("\n")],"Public-Key: (2048 bit)")
 194     def test_generate_ec(self):
 195         templkey=PKey(pubkey=self.ec1pub)
 196         newkey=PKey.generate("ec",paramsfrom=templkey)
 197         self.assertIsNotNone(newkey.key)
 198         s=str(newkey)
 199         self.assertEqual(s[:s.find("\n")],"Public-Key: (256 bit)")
 200         self.assertNotEqual(str(templkey),str(newkey))
 201 if __name__ == "__main__":
 202     unittest.main()