1 from ctypescrypto.pkey import PKey
3 from base64 import b64decode, b16decode
4 from subprocess import Popen,PIPE,CalledProcessError
7 start=s.find('-----\n')
8 finish=s.rfind('\n-----END')
10 return b64decode(data)
12 def runopenssl(args,indata):
13 p=Popen(['openssl']+args,stdin=PIPE,stdout=PIPE,stderr=PIPE,universal_newlines=True)
14 (out,err)=p.communicate(indata)
16 raise CalledProcessError(p.returncode," ".join(['openssl']+args)+":"+err)
20 class TestPKey(unittest.TestCase):
21 rsa="""-----BEGIN PRIVATE KEY-----
22 MIICdQIBADANBgkqhkiG9w0BAQEFAASCAl8wggJbAgEAAoGBAL9CzVZu9bczTmB8
23 776pPUoPo6WbAfwQqqiGrj91bk2mYE+MNLo4yIQH45IcwGzkyS8+YyQJf8Bux5BC
24 oZ2nwzXm5+JZkxkN1mtMzit2D7/hHmrZLoSbr0sxXFrD4a35RI4hXnSK9Sk01sXA
25 Te2OgHzm5nk1sG97G6SFq7CHe3gvAgMBAAECgYAgGV8K7Y5xk7vIt88oyZCOuHc3
26 mP9JRabOp+PgpJ3BjHXHg/lpc5Q7jHNmF0s4O2GEe0z6RFnbevwlOvmS0xAQ1hpg
27 5TnVVkiZvcJeQaZqWIlEOaLqA12YdhSyorfB6p3tfQ7ZmQusg3SCsru5kPJV4sm0
28 I+MuRCQZWSzIqelloQJBAPbtScJI0lXx8sktntZi69cAVvLtz5z1T7bZwFakNkNE
29 SUCjNc/hEEI6/1LScV8Kx9kgQ0+W8smu+GyUDceyVFECQQDGSeS7cTmojkiPQxPB
30 zb0vS+Nfpq6oYsx+gn5TBgMeWIZZrtMEaUU2o+rwsjKBP/gy6D1zC2b4W5O/A/7a
31 1GR/AkBUQhYoKKc1UpExGtMXfrvRKrmAvatZeM/Rqi4aooAtpfCFEOw82iStJOqY
32 /VxYPRqCuaKeVvjT31O/4SlumihxAkBahRU0NKYbuoiJThfQ23lIBB7SZadKG4A7
33 KJs+j3oQ+lyqyFJwqxX7sazpIJBJzMgjhT24LTZenn++LbbEcz1FAkBmDmxoq7qO
34 Ao6uTm8fnkD4C836wS4mYAPqwRBK1JvnEXEQee9irf+ip89BAg74ViTcGF9lwJwQ
36 -----END PRIVATE KEY-----
38 rsaenc="""-----BEGIN RSA PRIVATE KEY-----
39 Proc-Type: 4,ENCRYPTED
40 DEK-Info: AES-256-CBC,7FF0E46291D60D35ACA881131C244655
42 BeJoui1lRQDvvPr+gH8xCdqkcgKCLWpZTvFZmvrqXmPqMHpm20nK0ESAd6kKm8d1
43 zaglRIHnnO6V7aDcwgOd3IYPEOnG2TIRQniZrwZdrXIfacscJ6Ekq+5YfLuyrRgq
44 fscGl7ntm/eGLqwrhzuv7jAXpn9QWiiAld0EWcmZCAW7nGaUQtu4rc4ULwL5SC/M
45 MOCPwpcD3SCQv55dX3cBOtfZ3lPbpgEpTpnNnj8OtxOkkIaG8yol7luwHvoOSyL/
46 WuXGCpfJE4LzbxnSLhbiN7q+y/Sro3cGc9aO4tXToMqTFel4zqR0YgOeFazlDRi1
47 mPuZcGLuSIef0kJn7Mg7jt0DQk579rTVxAhIu2rylTwEozkpCp5g4kGTJON++HQr
48 BRrApm4XlAoH2GX1jqDBoWSnXCRH49jNGQrLwy469i+994cG8uVU9Z5cqm/LDIR9
49 kwQfTJIvMi0g28NBMVgJ2gLj40OczxDGyNvBIbhPNswHljfsvPVr4vtxDGx8fS0N
50 lUJUOL9me+XNZ5xGHYuT5DOr7GE+H3hKEg+XfrYEete9BeI4gm9cqESvrLY9EU5Q
51 tOtnKKL7SglTZ5LxPMAedADC0o01nzr+D3gAiOhSgoZTrnQsSZ7iTJOtm3vNXwJx
52 AgesYmXtr5mdiBPKQ1QA/jF5LUZji+5KENd5WHNQw7tOlMLDrPFVRfLZg1AQDljx
53 u16kdyb71Kk3f6GCOfUntGr+kzppc3DDT+RcLetXphOOEQRy6C6/wmz08WlAPlu5
54 mFfSDijpWxoUHooQISg5mE82oR8V81aBpbLtm7KevwY=
55 -----END RSA PRIVATE KEY-----
57 pkcs8crypt="""-----BEGIN ENCRYPTED PRIVATE KEY-----
58 MIICoTAbBgkqhkiG9w0BBQMwDgQIipVEnsV/gQoCAggABIICgE1i42C4aBhykhOi
59 EItFRE+9iBgiklGxoCJtukdp1UwDRKy/GJJ1rcS385CQy4Rs0zN8NH1faVRbf4Vt
60 iNACHtJx30qMCdo64CR+GJYHS4g2lGaz7PFNma8SjnAbGYXwXkdm5zhwmiU++wC7
61 W59u8oWS8Dj9dZBMzoOQGQT6xzZwQ14H65zHvC16HdKSNtRgXDWkBnD2cQzuOyuf
62 rFLyEf7/FH6B7/yKDcwsEfu97uPPxMvuusD1UubWnltO/Hc2oCPibN+dGw1PY9mC
63 18yGQtZkf5z30yhLosF62IVy3XY9Yf/TJYojIExoASrThGRvENzWkQ3qfnErqmng
64 l+dy66bmLjicobF5bO3xAhpU1dL+4/1ba2QuthVNlg6Or/iII1ntNN4PFyYcEwmX
65 e09C3dyOtV7qCq13S1bRkbZhzwi2QbLKALAzrZpF6VYmayTz8KjQOZ8BncAM+BiI
66 CtwuZJoXLW9kT4D7UsaSZdjUvzBIak5qdCGWpKmahMfjEEsCg6ApuIYmFrCgiY9c
67 0keYjY8DJ+4bEvqsQvTIaU9F9mFytI1E3LnR0NP1jHuOA7Jc+oNQ2adgFNj12jKQ
68 qNt1bEGNCqQHSrw7JNCrB7s+QAFNqJtno6fIq7vVNkqadJlnBbCIgm7NlJeGg9j6
69 a5YVNGlbs0J4dQF4Jw13302IBn3piSzthWL2gL98v/1lEwGuernEpPAjry3YhzM9
70 VA/oVt22n3yVA6dOSVL1oUTJyawEqASmH0jHAzXNDz+QLSLmz82ARcZPqPvVc45e
71 5h0xtqtFVkQLNbYzpNWGrx7R1hdr84nOKa8EsIxTRgEL/w9Y4Z/3xEoK2+KVBpMk
73 -----END ENCRYPTED PRIVATE KEY-----
76 rsakeytext="""Public-Key: (1024 bit)
78 00:bf:42:cd:56:6e:f5:b7:33:4e:60:7c:ef:be:a9:
79 3d:4a:0f:a3:a5:9b:01:fc:10:aa:a8:86:ae:3f:75:
80 6e:4d:a6:60:4f:8c:34:ba:38:c8:84:07:e3:92:1c:
81 c0:6c:e4:c9:2f:3e:63:24:09:7f:c0:6e:c7:90:42:
82 a1:9d:a7:c3:35:e6:e7:e2:59:93:19:0d:d6:6b:4c:
83 ce:2b:76:0f:bf:e1:1e:6a:d9:2e:84:9b:af:4b:31:
84 5c:5a:c3:e1:ad:f9:44:8e:21:5e:74:8a:f5:29:34:
85 d6:c5:c0:4d:ed:8e:80:7c:e6:e6:79:35:b0:6f:7b:
86 1b:a4:85:ab:b0:87:7b:78:2f
87 Exponent: 65537 (0x10001)
89 ec1priv="""-----BEGIN PRIVATE KEY-----
90 MIGEAgEAMBAGByqGSM49AgEGBSuBBAAKBG0wawIBAQQgKnG6neqZvB98EEuuxnHs
91 fv+L/5abuNNG20wzUqRpncOhRANCAARWKXWeUZ6WiCKZ2kHx87jmJyx0G3ZB1iQC
92 +Gp2AJYswbQPhGPigKolzIbZYfwnn7QOca6N8QDhPAn3QQK8trZI
93 -----END PRIVATE KEY-----
95 ec1keytext="""Public-Key: (256 bit)
97 04:56:29:75:9e:51:9e:96:88:22:99:da:41:f1:f3:
98 b8:e6:27:2c:74:1b:76:41:d6:24:02:f8:6a:76:00:
99 96:2c:c1:b4:0f:84:63:e2:80:aa:25:cc:86:d9:61:
100 fc:27:9f:b4:0e:71:ae:8d:f1:00:e1:3c:09:f7:41:
104 ec1pub="""-----BEGIN PUBLIC KEY-----
105 MFYwEAYHKoZIzj0CAQYFK4EEAAoDQgAEVil1nlGelogimdpB8fO45icsdBt2QdYk
106 AvhqdgCWLMG0D4Rj4oCqJcyG2WH8J5+0DnGujfEA4TwJ90ECvLa2SA==
107 -----END PUBLIC KEY-----
110 def test_unencrypted_pem(self):
111 key=PKey(privkey=self.rsa)
112 self.assertTrue(key.cansign)
113 self.assertIsNotNone(key.key)
114 self.assertEqual(str(key),self.rsakeytext)
115 def test_encrypted_pem(self):
116 key=PKey(privkey=self.rsaenc,password=self.password)
117 self.assertIsNotNone(key.key)
118 self.assertEqual(str(key),self.rsakeytext)
119 def test_encrypted_pem_cb(self):
120 cb=lambda x:self.password
121 key=PKey(privkey=self.rsaenc,password=cb)
122 self.assertIsNotNone(key.key)
123 self.assertEqual(str(key),self.rsakeytext)
124 def test_encryped_pem_pkcs8(self):
125 key=PKey(privkey=self.pkcs8crypt,password=self.password)
126 self.assertIsNotNone(key.key)
127 self.assertEqual(str(key),self.rsakeytext)
128 def test_encrypted_der_pkcs8(self):
129 pkcs8der = pem2der(self.pkcs8crypt)
130 key=PKey(privkey=pkcs8der,password=self.password,format="DER")
131 self.assertIsNotNone(key.key)
132 self.assertEqual(str(key),self.rsakeytext)
133 def test_export_priv_pem(self):
134 key=PKey(privkey=self.ec1priv)
136 self.assertEqual(self.ec1priv,out)
137 def test_export_priv_encrypt(self):
138 from ctypescrypto.cipher import CipherType
139 key=PKey(privkey=self.rsa)
140 pem=key.exportpriv(password='2222',cipher=CipherType("aes256"))
141 self.assertEqual(runopenssl(["pkey","-text_pub","-noout","-passin","pass:2222"],
142 pem),self.rsakeytext)
143 def test_export_priv_der(self):
144 key=PKey(privkey=self.rsa)
145 der=key.exportpriv(format="DER")
146 self.assertEqual(runopenssl(["pkey","-text_pub","-noout","-inform","DER"],
147 der),self.rsakeytext)
148 def test_export_priv_der_enc(self):
149 from ctypescrypto.cipher import CipherType
150 key=PKey(privkey=self.rsa)
151 der=key.exportpriv(format="DER",password='2222',cipher=CipherType("aes256"))
152 self.assertEqual(runopenssl(["pkcs8","-passin","pass:2222","-inform","DER"],
154 def test_unencrypted_pem_ec(self):
156 key=PKey(privkey=self.ec1priv)
157 self.assertIsNotNone(key.key)
158 self.assertEqual(re.sub("pub: \n","pub:\n",str(key)),self.ec1keytext)
159 def test_unencrypted_der_ec(self):
160 key=PKey(privkey=pem2der(self.ec1priv),format="DER")
161 self.assertIsNotNone(key.key)
162 self.assertEqual(re.sub("pub: \n","pub:\n",str(key)),self.ec1keytext)
163 def test_pubkey_pem(self):
164 key=PKey(pubkey=self.ec1pub)
165 self.assertIsNotNone(key.key)
166 self.assertEqual(re.sub("pub: \n","pub:\n",str(key)),self.ec1keytext)
167 def test_pubkey_der(self):
168 key=PKey(pubkey=pem2der(self.ec1pub),format="DER")
169 self.assertIsNotNone(key.key)
170 self.assertEqual(re.sub("pub: \n","pub:\n",str(key)),self.ec1keytext)
171 def test_compare(self):
172 key1=PKey(privkey=self.ec1priv)
173 self.assertIsNotNone(key1.key)
174 key2=PKey(pubkey=self.ec1pub)
175 self.assertIsNotNone(key2.key)
176 self.assertEqual(key1,key2)
178 signer=PKey(privkey=self.ec1priv)
179 digest=b16decode("FFCA2587CFD4846E4CB975B503C9EB940F94566AA394E8BD571458B9DA5097D5")
180 signature=signer.sign(digest)
181 self.assertTrue(len(signature)>0)
182 verifier=PKey(pubkey=self.ec1pub)
183 self.assertTrue(verifier.verify(digest,signature))
184 def test_generate(self):
185 newkey=PKey.generate("rsa")
186 self.assertIsNotNone(newkey.key)
188 self.assertEqual(s[:s.find("\n")],"Public-Key: (1024 bit)")
189 def test_generate_params(self):
190 newkey=PKey.generate("rsa",rsa_keygen_bits=2048)
191 self.assertIsNotNone(newkey.key)
193 self.assertEqual(s[:s.find("\n")],"Public-Key: (2048 bit)")
194 def test_generate_ec(self):
195 templkey=PKey(pubkey=self.ec1pub)
196 newkey=PKey.generate("ec",paramsfrom=templkey)
197 self.assertIsNotNone(newkey.key)
199 self.assertEqual(s[:s.find("\n")],"Public-Key: (256 bit)")
200 self.assertNotEqual(str(templkey),str(newkey))
201 if __name__ == "__main__":