1 // Copyright 2019 Google Inc.
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 // http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14 //
15 ////////////////////////////////////////////////////////////////////////////////
16
17 #include "tink/signature/ed25519_sign_key_manager.h"
18
19 #include <sstream>
20 #include <string>
21
22 #include "gmock/gmock.h"
23 #include "gtest/gtest.h"
24 #include "absl/container/flat_hash_set.h"
25 #include "absl/status/status.h"
26 #include "tink/public_key_sign.h"
27 #include "tink/registry.h"
28 #include "tink/signature/ed25519_verify_key_manager.h"
29 #include "tink/subtle/ed25519_verify_boringssl.h"
30 #include "tink/util/enums.h"
31 #include "tink/util/istream_input_stream.h"
32 #include "tink/util/protobuf_helper.h"
33 #include "tink/util/status.h"
34 #include "tink/util/statusor.h"
35 #include "tink/util/test_matchers.h"
36 #include "tink/util/test_util.h"
37 #include "proto/ed25519.pb.h"
38
39 namespace crypto {
40 namespace tink {
41
42 using ::crypto::tink::test::IsOk;
43 using ::crypto::tink::util::StatusOr;
44 using ::google::crypto::tink::Ed25519KeyFormat;
45 using ::google::crypto::tink::Ed25519PrivateKey;
46 using ::google::crypto::tink::Ed25519PublicKey;
47 using ::google::crypto::tink::KeyData;
48 using ::testing::Eq;
49 using ::testing::Not;
50 using ::testing::SizeIs;
51
52 namespace {
53
TEST(Ed25519SignKeyManagerTest,Basic)54 TEST(Ed25519SignKeyManagerTest, Basic) {
55 EXPECT_THAT(Ed25519SignKeyManager().get_version(), Eq(0));
56 EXPECT_THAT(Ed25519SignKeyManager().key_material_type(),
57 Eq(KeyData::ASYMMETRIC_PRIVATE));
58 EXPECT_THAT(Ed25519SignKeyManager().get_key_type(),
59 Eq("type.googleapis.com/google.crypto.tink.Ed25519PrivateKey"));
60 }
61
TEST(Ed25519SignKeyManagerTest,ValidateKeyFormat)62 TEST(Ed25519SignKeyManagerTest, ValidateKeyFormat) {
63 EXPECT_THAT(Ed25519SignKeyManager().ValidateKeyFormat(Ed25519KeyFormat()),
64 IsOk());
65 }
66
TEST(Ed25519SignKeyManagerTest,CreateKey)67 TEST(Ed25519SignKeyManagerTest, CreateKey) {
68 StatusOr<Ed25519PrivateKey> key_or =
69 Ed25519SignKeyManager().CreateKey(Ed25519KeyFormat());
70 ASSERT_THAT(key_or, IsOk());
71 Ed25519PrivateKey key = key_or.value();
72
73 EXPECT_THAT(key.version(), Eq(0));
74
75 EXPECT_THAT(key.public_key().version(), Eq(key.version()));
76
77 EXPECT_THAT(key.key_value(), SizeIs(32));
78 EXPECT_THAT(key.public_key().key_value(), SizeIs(32));
79 }
80
TEST(Ed25519SignKeyManagerTest,CreateKeyValid)81 TEST(Ed25519SignKeyManagerTest, CreateKeyValid) {
82 StatusOr<Ed25519PrivateKey> key_or =
83 Ed25519SignKeyManager().CreateKey(Ed25519KeyFormat());
84 ASSERT_THAT(key_or, IsOk());
85 EXPECT_THAT(Ed25519SignKeyManager().ValidateKey(key_or.value()), IsOk());
86 }
87
TEST(Ed25519SignKeyManagerTest,CreateKeyAlwaysNew)88 TEST(Ed25519SignKeyManagerTest, CreateKeyAlwaysNew) {
89 absl::flat_hash_set<std::string> keys;
90 int num_tests = 100;
91 for (int i = 0; i < num_tests; ++i) {
92 StatusOr<Ed25519PrivateKey> key_or =
93 Ed25519SignKeyManager().CreateKey(Ed25519KeyFormat());
94 ASSERT_THAT(key_or, IsOk());
95 keys.insert(key_or.value().key_value());
96 }
97 EXPECT_THAT(keys, SizeIs(num_tests));
98 }
99
TEST(Ed25519SignKeyManagerTest,GetPublicKey)100 TEST(Ed25519SignKeyManagerTest, GetPublicKey) {
101 StatusOr<Ed25519PrivateKey> key_or =
102 Ed25519SignKeyManager().CreateKey(Ed25519KeyFormat());
103 ASSERT_THAT(key_or, IsOk());
104 StatusOr<Ed25519PublicKey> public_key_or =
105 Ed25519SignKeyManager().GetPublicKey(key_or.value());
106 ASSERT_THAT(public_key_or, IsOk());
107 EXPECT_THAT(public_key_or.value().version(),
108 Eq(key_or.value().public_key().version()));
109 EXPECT_THAT(public_key_or.value().key_value(),
110 Eq(key_or.value().public_key().key_value()));
111 }
112
TEST(Ed25519SignKeyManagerTest,Create)113 TEST(Ed25519SignKeyManagerTest, Create) {
114 StatusOr<Ed25519PrivateKey> key_or =
115 Ed25519SignKeyManager().CreateKey(Ed25519KeyFormat());
116 ASSERT_THAT(key_or, IsOk());
117 Ed25519PrivateKey key = key_or.value();
118
119 auto signer_or =
120 Ed25519SignKeyManager().GetPrimitive<PublicKeySign>(key);
121 ASSERT_THAT(signer_or, IsOk());
122
123 auto direct_verifier_or =
124 subtle::Ed25519VerifyBoringSsl::New(key.public_key().key_value());
125
126 ASSERT_THAT(direct_verifier_or, IsOk());
127
128 std::string message = "Some message";
129 EXPECT_THAT(direct_verifier_or.value()->Verify(
130 signer_or.value()->Sign(message).value(), message),
131 IsOk());
132 }
133
TEST(Ed25519SignKeyManagerTest,CreateDifferentKey)134 TEST(Ed25519SignKeyManagerTest, CreateDifferentKey) {
135 StatusOr<Ed25519PrivateKey> key_or =
136 Ed25519SignKeyManager().CreateKey(Ed25519KeyFormat());
137 ASSERT_THAT(key_or, IsOk());
138 Ed25519PrivateKey key = key_or.value();
139
140 auto signer_or =
141 Ed25519SignKeyManager().GetPrimitive<PublicKeySign>(key);
142 ASSERT_THAT(signer_or, IsOk());
143
144 auto direct_verifier_or =
145 subtle::Ed25519VerifyBoringSsl::New("01234567890123456789012345678901");
146
147 ASSERT_THAT(direct_verifier_or, IsOk());
148
149 std::string message = "Some message";
150 EXPECT_THAT(direct_verifier_or.value()->Verify(
151 signer_or.value()->Sign(message).value(), message),
152 Not(IsOk()));
153 }
154
TEST(Ed25519SignKeyManagerTest,DeriveKey)155 TEST(Ed25519SignKeyManagerTest, DeriveKey) {
156 Ed25519KeyFormat format;
157
158 util::IstreamInputStream input_stream{
159 absl::make_unique<std::stringstream>("0123456789abcdef0123456789abcdef")};
160
161 StatusOr<Ed25519PrivateKey> key_or =
162 Ed25519SignKeyManager().DeriveKey(format, &input_stream);
163 ASSERT_THAT(key_or, IsOk());
164 EXPECT_THAT(key_or.value().key_value(),
165 Eq("0123456789abcdef0123456789abcdef"));
166 }
167
TEST(Ed25519SignKeyManagerTest,DeriveKeySignVerify)168 TEST(Ed25519SignKeyManagerTest, DeriveKeySignVerify) {
169 Ed25519KeyFormat format;
170
171 util::IstreamInputStream input_stream{
172 absl::make_unique<std::stringstream>("0123456789abcdef0123456789abcdef")};
173
174 Ed25519PrivateKey key =
175 Ed25519SignKeyManager().DeriveKey(format, &input_stream).value();
176 auto signer_or = Ed25519SignKeyManager().GetPrimitive<PublicKeySign>(key);
177 ASSERT_THAT(signer_or, IsOk());
178
179 std::string message = "Some message";
180 auto signature = signer_or.value()->Sign(message).value();
181
182 auto verifier_or =
183 Ed25519VerifyKeyManager().GetPrimitive<PublicKeyVerify>(key.public_key());
184
185 EXPECT_THAT(verifier_or.value()->Verify(signature, message), IsOk());
186 }
187
TEST(Ed25519SignKeyManagerTest,DeriveKeyNotEnoughRandomness)188 TEST(Ed25519SignKeyManagerTest, DeriveKeyNotEnoughRandomness) {
189 Ed25519KeyFormat format;
190
191 util::IstreamInputStream input_stream{
192 absl::make_unique<std::stringstream>("tooshort")};
193
194 ASSERT_THAT(Ed25519SignKeyManager().DeriveKey(format, &input_stream).status(),
195 test::StatusIs(absl::StatusCode::kInvalidArgument));
196 }
197
198 } // namespace
199 } // namespace tink
200 } // namespace crypto
201
202