1// Copyright 2013 The Chromium Authors. All rights reserved. 2// Use of this source code is governed by a BSD-style license that can be 3// found in the LICENSE file. 4 5#include "net/cert/jwk_serializer.h" 6 7#include "base/base64.h" 8#include "base/values.h" 9#include "testing/gtest/include/gtest/gtest.h" 10 11namespace net { 12 13// This is the ASN.1 prefix for a P-256 public key. Specifically it's: 14// SEQUENCE 15// SEQUENCE 16// OID id-ecPublicKey 17// OID prime256v1 18// BIT STRING, length 66, 0 trailing bits: 0x04 19// 20// The 0x04 in the BIT STRING is the prefix for an uncompressed, X9.62 21// public key. Following that are the two field elements as 32-byte, 22// big-endian numbers, as required by the Channel ID. 23static const unsigned char kP256SpkiPrefix[] = { 24 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, 25 0x48, 0xce, 0x3d, 0x02, 0x01, 0x06, 0x08, 0x2a, 26 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, 27 0x42, 0x00, 0x04 28}; 29static const unsigned int kEcCoordinateSize = 32U; 30 31// This is a valid P-256 public key. 32static const unsigned char kSpkiEc[] = { 33 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, 34 0x48, 0xce, 0x3d, 0x02, 0x01, 0x06, 0x08, 0x2a, 35 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, 36 0x42, 0x00, 0x04, 37 0x29, 0x5d, 0x6e, 0xfe, 0x33, 0x77, 0x26, 0xea, 38 0x5b, 0xa4, 0xe6, 0x1b, 0x34, 0x6e, 0x7b, 0xa0, 39 0xa3, 0x8f, 0x33, 0x49, 0xa0, 0x9c, 0xae, 0x98, 40 0xbd, 0x46, 0x0d, 0xf6, 0xd4, 0x5a, 0xdc, 0x8a, 41 0x1f, 0x8a, 0xb2, 0x20, 0x51, 0xb7, 0xd2, 0x87, 42 0x0d, 0x53, 0x7e, 0x5d, 0x94, 0xa3, 0xe0, 0x34, 43 0x16, 0xa1, 0xcc, 0x10, 0x48, 0xcd, 0x70, 0x9c, 44 0x05, 0xd3, 0xd2, 0xca, 0xdf, 0x44, 0x2f, 0xf4 45}; 46 47// This is a P-256 public key with a leading 0. 48static const unsigned char kSpkiEcWithLeadingZero[] = { 49 0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, 50 0x48, 0xce, 0x3d, 0x02, 0x01, 0x06, 0x08, 0x2a, 51 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, 52 0x42, 0x00, 0x04, 53 0x00, 0x8e, 0xd5, 0x49, 0x51, 0xad, 0x7d, 0xd3, 54 0x3a, 0x59, 0x86, 0xd1, 0x2c, 0xba, 0x05, 0xd3, 55 0xa6, 0x3c, 0x5d, 0x6d, 0x28, 0xde, 0x8f, 0xdd, 56 0xa5, 0x3d, 0x30, 0x18, 0x05, 0x86, 0x76, 0x9c, 57 0x7c, 0xa7, 0xba, 0x58, 0xea, 0x1a, 0x84, 0x19, 58 0x29, 0x0a, 0x15, 0x30, 0x7d, 0x6b, 0x00, 0x41, 59 0x64, 0x56, 0x84, 0x19, 0x54, 0x3e, 0x26, 0x13, 60 0xc9, 0x1e, 0x31, 0x89, 0xe2, 0x62, 0xcb, 0x3f 61}; 62 63TEST(JwkSerializerTest, ConvertSpkiFromDerToJwkEc) { 64 base::StringPiece spki; 65 base::DictionaryValue public_key_jwk; 66 67 EXPECT_FALSE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); 68 EXPECT_TRUE(public_key_jwk.empty()); 69 70 // Test the result of a "normal" point on this curve. 71 spki.set(reinterpret_cast<const char*>(kSpkiEc), sizeof(kSpkiEc)); 72 EXPECT_TRUE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); 73 74 std::string string_value; 75 EXPECT_TRUE(public_key_jwk.GetString("kty", &string_value)); 76 EXPECT_STREQ("EC", string_value.c_str()); 77 EXPECT_TRUE(public_key_jwk.GetString("crv", &string_value)); 78 EXPECT_STREQ("P-256", string_value.c_str()); 79 80 EXPECT_TRUE(public_key_jwk.GetString("x", &string_value)); 81 std::string decoded_coordinate; 82 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); 83 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); 84 EXPECT_EQ(0, 85 memcmp(decoded_coordinate.data(), 86 kSpkiEc + sizeof(kP256SpkiPrefix), 87 kEcCoordinateSize)); 88 89 EXPECT_TRUE(public_key_jwk.GetString("y", &string_value)); 90 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); 91 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); 92 EXPECT_EQ(0, 93 memcmp(decoded_coordinate.data(), 94 kSpkiEc + sizeof(kP256SpkiPrefix) + kEcCoordinateSize, 95 kEcCoordinateSize)); 96 97 // Test the result of a corner case: leading 0s in the x, y coordinates are 98 // not trimmed, but the point is fixed-length encoded. 99 spki.set(reinterpret_cast<const char*>(kSpkiEcWithLeadingZero), 100 sizeof(kSpkiEcWithLeadingZero)); 101 EXPECT_TRUE(JwkSerializer::ConvertSpkiFromDerToJwk(spki, &public_key_jwk)); 102 103 EXPECT_TRUE(public_key_jwk.GetString("kty", &string_value)); 104 EXPECT_STREQ("EC", string_value.c_str()); 105 EXPECT_TRUE(public_key_jwk.GetString("crv", &string_value)); 106 EXPECT_STREQ("P-256", string_value.c_str()); 107 108 EXPECT_TRUE(public_key_jwk.GetString("x", &string_value)); 109 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); 110 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); 111 EXPECT_EQ(0, 112 memcmp(decoded_coordinate.data(), 113 kSpkiEcWithLeadingZero + sizeof(kP256SpkiPrefix), 114 kEcCoordinateSize)); 115 116 EXPECT_TRUE(public_key_jwk.GetString("y", &string_value)); 117 EXPECT_TRUE(base::Base64Decode(string_value, &decoded_coordinate)); 118 EXPECT_EQ(kEcCoordinateSize, decoded_coordinate.size()); 119 EXPECT_EQ(0, memcmp( 120 decoded_coordinate.data(), 121 kSpkiEcWithLeadingZero + sizeof(kP256SpkiPrefix) + kEcCoordinateSize, 122 kEcCoordinateSize)); 123} 124 125} // namespace net 126