Repository navigation
Expand file tree
/
Copy pathkey_confirmation_test.go
More file actions
152 lines (136 loc) · 5.15 KB
/
Copy pathkey_confirmation_test.go
File metadata and controls
152 lines (136 loc) · 5.15 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
// Copyright 2025 Contributors to the Veraison project.
// SPDX-License-Identifier: Apache-2.0
package eat
import (
"testing"
"github.com/stretchr/testify/assert"
"github.com/veraison/go-cose"
)
var (
kty = cose.KeyTypeEC2
kid = []byte{0x31, 0x31}
crv = cose.CurveP256
x = []byte{
0xba, 0xc5, 0xb1, 0x1c, 0xad, 0x8f, 0x99, 0xf9, 0xc7, 0x2b, 0x05, 0xcf,
0x4b, 0x9e, 0x26, 0xd2, 0x44, 0xdc, 0x18, 0x9f, 0x74, 0x52, 0x28, 0x25,
0x5a, 0x21, 0x9a, 0x86, 0xd6, 0xa0, 0x9e, 0xff,
}
y = []byte{
0x20, 0x13, 0x8b, 0xf8, 0x2d, 0xc1, 0xb6, 0xd5, 0x62, 0xbe, 0x0f, 0xa5,
0x4a, 0xb7, 0x80, 0x4a, 0x3a, 0x64, 0xb6, 0xd7, 0x2c, 0xcf, 0xed, 0x6b,
0x6f, 0xb6, 0xed, 0x28, 0xbb, 0xfc, 0x11, 0x7e,
}
// d = []byte{
// 0x57, 0xc9, 0x20, 0x77, 0x66, 0x41, 0x46, 0xe8, 0x76, 0x76, 0x0c, 0x95,
// 0x20, 0xd0, 0x54, 0xaa, 0x93, 0xc3, 0xaf, 0xb0, 0x4e, 0x30, 0x67, 0x05,
// 0xdb, 0x60, 0x90, 0x30, 0x85, 0x07, 0xb4, 0xd3,
// }
keyThumbprint = []byte{
0xb7, 0x1d, 0x9f, 0xc2, 0x7e, 0xe9, 0xce, 0x61, 0xa6, 0x05, 0x60, 0xb2,
0xee, 0xee, 0xf7, 0xf6, 0x93, 0x4a, 0x6b, 0x9d, 0x57, 0xce, 0x12, 0x2b,
0x2b, 0x12, 0xe9, 0x32, 0xca, 0xcb, 0xf1, 0xd9,
}
encodedCoseKey = []byte{
0xa5, // map(5)
0x01, // kty
0x02, // EC2
0x02, // kid
0x42, 0x31, 0x31,
0x20, // crv
0x01, // P-256
0x21, // x
0x58, 0x20,
0xba, 0xc5, 0xb1, 0x1c, 0xad, 0x8f, 0x99, 0xf9, 0xc7, 0x2b, 0x05, 0xcf,
0x4b, 0x9e, 0x26, 0xd2, 0x44, 0xdc, 0x18, 0x9f, 0x74, 0x52, 0x28, 0x25,
0x5a, 0x21, 0x9a, 0x86, 0xd6, 0xa0, 0x9e, 0xff,
0x22, // y
0x58, 0x20,
0x20, 0x13, 0x8b, 0xf8, 0x2d, 0xc1, 0xb6, 0xd5, 0x62, 0xbe, 0x0f, 0xa5,
0x4a, 0xb7, 0x80, 0x4a, 0x3a, 0x64, 0xb6, 0xd7, 0x2c, 0xcf, 0xed, 0x6b,
0x6f, 0xb6, 0xed, 0x28, 0xbb, 0xfc, 0x11, 0x7e,
}
encodedKeyConfirmation = []byte{
0xa2, // map(2)
0x01, // COSE_Key
0xa5, 0x01, 0x02, 0x02, 0x42, 0x31, 0x31, 0x20, 0x01, 0x21, 0x58, 0x20,
0xba, 0xc5, 0xb1, 0x1c, 0xad, 0x8f, 0x99, 0xf9, 0xc7, 0x2b, 0x05, 0xcf,
0x4b, 0x9e, 0x26, 0xd2, 0x44, 0xdc, 0x18, 0x9f, 0x74, 0x52, 0x28, 0x25,
0x5a, 0x21, 0x9a, 0x86, 0xd6, 0xa0, 0x9e, 0xff, 0x22, 0x58, 0x20, 0x20,
0x13, 0x8b, 0xf8, 0x2d, 0xc1, 0xb6, 0xd5, 0x62, 0xbe, 0x0f, 0xa5, 0x4a,
0xb7, 0x80, 0x4a, 0x3a, 0x64, 0xb6, 0xd7, 0x2c, 0xcf, 0xed, 0x6b, 0x6f,
0xb6, 0xed, 0x28, 0xbb, 0xfc, 0x11, 0x7e,
0x05, // KeyThumbprint
0x58, 0x20, // bytes(32)
0xb7, 0x1d, 0x9f, 0xc2, 0x7e, 0xe9, 0xce, 0x61, 0xa6, 0x05, 0x60, 0xb2,
0xee, 0xee, 0xf7, 0xf6, 0x93, 0x4a, 0x6b, 0x9d, 0x57, 0xce, 0x12, 0x2b,
0x2b, 0x12, 0xe9, 0x32, 0xca, 0xcb, 0xf1, 0xd9,
}
encodedKeyConfirmationWithEncryptedKey = []byte{
0xa3, // map(3)
0x01, // COSE_Key
0xa5, 0x01, 0x02, 0x02, 0x42, 0x31, 0x31, 0x20, 0x01, 0x21, 0x58, 0x20,
0xba, 0xc5, 0xb1, 0x1c, 0xad, 0x8f, 0x99, 0xf9, 0xc7, 0x2b, 0x05, 0xcf,
0x4b, 0x9e, 0x26, 0xd2, 0x44, 0xdc, 0x18, 0x9f, 0x74, 0x52, 0x28, 0x25,
0x5a, 0x21, 0x9a, 0x86, 0xd6, 0xa0, 0x9e, 0xff, 0x22, 0x58, 0x20, 0x20,
0x13, 0x8b, 0xf8, 0x2d, 0xc1, 0xb6, 0xd5, 0x62, 0xbe, 0x0f, 0xa5, 0x4a,
0xb7, 0x80, 0x4a, 0x3a, 0x64, 0xb6, 0xd7, 0x2c, 0xcf, 0xed, 0x6b, 0x6f,
0xb6, 0xed, 0x28, 0xbb, 0xfc, 0x11, 0x7e,
0x02, // Encrypted COSE_Key (COSE_Encrypt0)
0xD8, 0x60, 0x84, 0x43, 0xA1, 0x01, 0x01, 0xA1, 0x05, 0x4C, 0x02, 0xD1,
0xF7, 0xE6, 0xF2, 0x6C, 0x43, 0xD4, 0x86, 0x8D, 0x87, 0xCE, 0x58, 0x24,
0x60, 0x97, 0x3A, 0x94, 0xBB, 0x28, 0x98, 0x00, 0x9E, 0xE5, 0x2E, 0xCF,
0xD9, 0xAB, 0x1D, 0xD2, 0x58, 0x67, 0x37, 0x4B, 0x35, 0x81, 0xF2, 0xC8,
0x00, 0x39, 0x82, 0x63, 0x50, 0xB9, 0x7A, 0xE2, 0x30, 0x0E, 0x42, 0xFC,
0x81, 0x83, 0x40, 0xA2, 0x01, 0x25, 0x04, 0x4A, 0x6F, 0x75, 0x72, 0x2D,
0x73, 0x65, 0x63, 0x72, 0x65, 0x74, 0x40,
0x05, // KeyThumbprint
0x58, 0x20, // bytes(32)
0xb7, 0x1d, 0x9f, 0xc2, 0x7e, 0xe9, 0xce, 0x61, 0xa6, 0x05, 0x60, 0xb2,
0xee, 0xee, 0xf7, 0xf6, 0x93, 0x4a, 0x6b, 0x9d, 0x57, 0xce, 0x12, 0x2b,
0x2b, 0x12, 0xe9, 0x32, 0xca, 0xcb, 0xf1, 0xd9,
}
)
func TestKeyConfirmation_CBORMarshal_OK(t *testing.T) {
// step 1: test COSEKey
key := COSEKey{
Type: kty,
ID: kid,
Crv: crv,
X: x,
Y: y,
}
encoded, err := em.Marshal(key)
assert.Nil(t, err)
assert.Equal(t, encodedCoseKey, encoded)
// step 2: test KeyConfirmation
cnf := KeyConfirmation{
Key: &key,
KeyThumbprint: &keyThumbprint,
}
encoded, err = em.Marshal(cnf)
assert.Nil(t, err)
assert.Equal(t, encodedKeyConfirmation, encoded)
}
func TestKeyConfirmation_CBORUnmarshal_OK(t *testing.T) {
var cnf KeyConfirmation
assert.Nil(t, dm.Unmarshal(encodedKeyConfirmation, &cnf))
assert.NotNil(t, cnf.Key)
assert.Equal(t, kty, cnf.Key.Type)
assert.Equal(t, kid, cnf.Key.ID)
assert.Equal(t, crv, cnf.Key.Crv)
assert.Equal(t, x, cnf.Key.X)
assert.Equal(t, y, cnf.Key.Y)
assert.Nil(t, cnf.Key.D)
assert.NotNil(t, cnf.KeyThumbprint)
assert.Equal(t, keyThumbprint, *cnf.KeyThumbprint)
cnf = KeyConfirmation{}
// the encoded data includes the EncryptedKey, but its ignored
assert.Nil(t, dm.Unmarshal(encodedKeyConfirmationWithEncryptedKey, &cnf))
assert.NotNil(t, cnf.Key)
assert.Equal(t, kty, cnf.Key.Type)
assert.Equal(t, kid, cnf.Key.ID)
assert.Equal(t, crv, cnf.Key.Crv)
assert.Equal(t, x, cnf.Key.X)
assert.Equal(t, y, cnf.Key.Y)
assert.Nil(t, cnf.Key.D)
}