1 // Copyright 2015 The Chromium Authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 #include "crypto/nss_key_util.h" 6 7 #include <keyhi.h> 8 #include <pk11pub.h> 9 #include <stdint.h> 10 11 #include <vector> 12 13 #include "crypto/nss_util.h" 14 #include "crypto/scoped_nss_types.h" 15 #include "testing/gtest/include/gtest/gtest.h" 16 17 namespace crypto { 18 19 class NSSKeyUtilTest : public testing::Test { 20 public: 21 void SetUp() override { 22 EnsureNSSInit(); 23 24 internal_slot_.reset(PK11_GetInternalSlot()); 25 ASSERT_TRUE(internal_slot_); 26 } 27 28 PK11SlotInfo* internal_slot() { return internal_slot_.get(); } 29 30 private: 31 ScopedPK11Slot internal_slot_; 32 }; 33 34 TEST_F(NSSKeyUtilTest, GenerateRSAKeyPairNSS) { 35 const int kKeySizeBits = 1024; 36 37 ScopedSECKEYPublicKey public_key; 38 ScopedSECKEYPrivateKey private_key; 39 ASSERT_TRUE(GenerateRSAKeyPairNSS(internal_slot(), kKeySizeBits, 40 false /* not permanent */, &public_key, 41 &private_key)); 42 43 EXPECT_EQ(rsaKey, SECKEY_GetPublicKeyType(public_key.get())); 44 EXPECT_EQ(rsaKey, SECKEY_GetPrivateKeyType(private_key.get())); 45 EXPECT_EQ((kKeySizeBits + 7) / 8, 46 PK11_GetPrivateModulusLen(private_key.get())); 47 } 48 49 TEST_F(NSSKeyUtilTest, FindNSSKeyFromPublicKeyInfo) { 50 // Create an NSS keypair, which will put the keys in the user's NSSDB. 51 ScopedSECKEYPublicKey public_key; 52 ScopedSECKEYPrivateKey private_key; 53 ASSERT_TRUE(GenerateRSAKeyPairNSS(internal_slot(), 512, 54 false /* not permanent */, &public_key, 55 &private_key)); 56 57 ScopedSECItem item(SECKEY_EncodeDERSubjectPublicKeyInfo(public_key.get())); 58 ASSERT_TRUE(item); 59 std::vector<uint8_t> public_key_der(item->data, item->data + item->len); 60 61 ScopedSECKEYPrivateKey private_key2 = 62 FindNSSKeyFromPublicKeyInfo(public_key_der); 63 ASSERT_TRUE(private_key2); 64 EXPECT_EQ(private_key->pkcs11ID, private_key2->pkcs11ID); 65 } 66 67 TEST_F(NSSKeyUtilTest, FailedFindNSSKeyFromPublicKeyInfo) { 68 // Create an NSS keypair, which will put the keys in the user's NSSDB. 69 ScopedSECKEYPublicKey public_key; 70 ScopedSECKEYPrivateKey private_key; 71 ASSERT_TRUE(GenerateRSAKeyPairNSS(internal_slot(), 512, 72 false /* not permanent */, &public_key, 73 &private_key)); 74 75 ScopedSECItem item(SECKEY_EncodeDERSubjectPublicKeyInfo(public_key.get())); 76 ASSERT_TRUE(item); 77 std::vector<uint8_t> public_key_der(item->data, item->data + item->len); 78 79 // Remove the keys from the DB, and make sure we can't find them again. 80 PK11_DestroyTokenObject(private_key->pkcs11Slot, private_key->pkcs11ID); 81 PK11_DestroyTokenObject(public_key->pkcs11Slot, public_key->pkcs11ID); 82 83 EXPECT_FALSE(FindNSSKeyFromPublicKeyInfo(public_key_der)); 84 } 85 86 } // namespace crypto 87
