1 // Copyright 2015 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 #include "crypto/nss_key_util.h"
13 #include "crypto/nss_util.h"
14 #include "crypto/scoped_nss_types.h"
15 #include "testing/gtest/include/gtest/gtest.h"
19 class NSSKeyUtilTest : public testing::Test {
21 void SetUp() override {
24 internal_slot_.reset(PK11_GetInternalSlot());
25 ASSERT_TRUE(internal_slot_);
28 PK11SlotInfo* internal_slot() { return internal_slot_.get(); }
31 ScopedPK11Slot internal_slot_;
34 TEST_F(NSSKeyUtilTest, GenerateRSAKeyPairNSS) {
35 const int kKeySizeBits = 1024;
37 ScopedSECKEYPublicKey public_key;
38 ScopedSECKEYPrivateKey private_key;
39 ASSERT_TRUE(GenerateRSAKeyPairNSS(internal_slot(), kKeySizeBits,
40 false /* not permanent */, &public_key,
43 EXPECT_EQ(rsaKey, SECKEY_GetPublicKeyType(public_key.get()));
44 EXPECT_EQ(rsaKey, SECKEY_GetPrivateKeyType(private_key.get()));
45 EXPECT_EQ((kKeySizeBits + 7) / 8,
46 PK11_GetPrivateModulusLen(private_key.get()));
49 TEST_F(NSSKeyUtilTest, FindNSSKeyFromPublicKeyInfo) {
50 // Create an NSS keypair, which will put the keys in the user's NSSDB.
51 ScopedSECKEYPublicKey public_key;
52 ScopedSECKEYPrivateKey private_key;
53 ASSERT_TRUE(GenerateRSAKeyPairNSS(internal_slot(), 512,
54 false /* not permanent */, &public_key,
57 ScopedSECItem item(SECKEY_EncodeDERSubjectPublicKeyInfo(public_key.get()));
59 std::vector<uint8_t> public_key_der(item->data, item->data + item->len);
61 ScopedSECKEYPrivateKey private_key2 =
62 FindNSSKeyFromPublicKeyInfo(public_key_der);
63 ASSERT_TRUE(private_key2);
64 EXPECT_EQ(private_key->pkcs11ID, private_key2->pkcs11ID);
67 TEST_F(NSSKeyUtilTest, FailedFindNSSKeyFromPublicKeyInfo) {
68 // Create an NSS keypair, which will put the keys in the user's NSSDB.
69 ScopedSECKEYPublicKey public_key;
70 ScopedSECKEYPrivateKey private_key;
71 ASSERT_TRUE(GenerateRSAKeyPairNSS(internal_slot(), 512,
72 false /* not permanent */, &public_key,
75 ScopedSECItem item(SECKEY_EncodeDERSubjectPublicKeyInfo(public_key.get()));
77 std::vector<uint8_t> public_key_der(item->data, item->data + item->len);
79 // Remove the keys from the DB, and make sure we can't find them again.
80 PK11_DestroyTokenObject(private_key->pkcs11Slot, private_key->pkcs11ID);
81 PK11_DestroyTokenObject(public_key->pkcs11Slot, public_key->pkcs11ID);
83 EXPECT_FALSE(FindNSSKeyFromPublicKeyInfo(public_key_der));