firefox-main/testing/web-platform/tests/WebCryptoAPI/import_export/okp_fixed_length.https.any.js (file symbol)

Source code

Revision control

Copy as Markdown

Other Tools

Test Info:

// META: title=WebCryptoAPI: OKP imports preserve fixed-length key material
const message = bytes("010203");
const peer = {
pkcs8: bytes("302e020100300506032b656e0422042038adaddfe94506a579a2cabcc9a50794b464689e065ed3e86b76e1ef1011f01a"),
spki: bytes("302a300506032b656e032100a1d178cd56e2528f7b8d82ba2e3772b219c944f0e8fbfb0d1ca3951d0ce00b13"),
};
const vectors = [
{
algorithm: "Ed25519",
name: "a leading-zero private key",
pkcs8: "302e020100300506032b6570042204200007070707070707070707070707070707070707070707070707070707070707",
raw: "ff812f84e53570c36ae9479aad71e649c3cc4a04a6768632150febdd66a238a8",
signature: "94ff57055f3b90728d704bfbf19a3e4b49806f98a10384ae01ed5c700e6d482a12dd5f6372ce160f5cf94e8cd53555a7b525658d8f4126d463fa4200578d710e",
spki: "302a300506032b6570032100ff812f84e53570c36ae9479aad71e649c3cc4a04a6768632150febdd66a238a8",
},
{
algorithm: "Ed25519",
name: "an all-zero private key",
pkcs8: "302e020100300506032b6570042204200000000000000000000000000000000000000000000000000000000000000000",
raw: "3b6a27bcceb6a42d62a3a8d02a6f0d73653215771de243a63ac048a18b59da29",
signature: "2a26779ba6cbb5e54292257f725af112b273c38728329682d99ed81ba6d7670350ae4cc53c5456fa437128d19298a5d949ab46e3d41ab3dbcfb0b35c895e9304",
spki: "302a300506032b65700321003b6a27bcceb6a42d62a3a8d02a6f0d73653215771de243a63ac048a18b59da29",
},
{
algorithm: "Ed25519",
name: "a leading-zero public key",
pkcs8: "302e020100300506032b6570042204204dca5ad94292a81e64a2c780e98d5469f53523107d9b00a63e37b5097786481f",
raw: "00009314998a59a276e35cac5d39d9cf642b5add8fc428baca5d18a7b30cda40",
signature: "b6a45af39f7545b0fb894a583c5156e027a97cb09e46a999ffb269aec6fc0d0af76169c7771d09431c08ee22cb99c8966fa261097c843855cd2005678c88710a",
spki: "302a300506032b657003210000009314998a59a276e35cac5d39d9cf642b5add8fc428baca5d18a7b30cda40",
},
{
algorithm: "X25519",
name: "a leading-zero private key",
pkcs8: "302e020100300506032b656e042204200007070707070707070707070707070707070707070707070707070707070707",
raw: "13be4feaeaf204c7fd3358fc9c00721881d174278128227ec674f37f7fe97b6d",
secret: "51eafdc7ed3371472837de1aca43bee0b198aa02d1f619eb26ed1d1045bcd936",
spki: "302a300506032b656e03210013be4feaeaf204c7fd3358fc9c00721881d174278128227ec674f37f7fe97b6d",
},
{
algorithm: "X25519",
name: "an all-zero private key",
pkcs8: "302e020100300506032b656e042204200000000000000000000000000000000000000000000000000000000000000000",
raw: "2fe57da347cd62431528daac5fbb290730fff684afc4cfc2ed90995f58cb3b74",
secret: "caa5f83ef211ee3ce3ae25b011f85ba0c55384769049a04bfc19770373c6df30",
spki: "302a300506032b656e0321002fe57da347cd62431528daac5fbb290730fff684afc4cfc2ed90995f58cb3b74",
},
{
algorithm: "X25519",
name: "a leading-zero public key",
pkcs8: "302e020100300506032b656e0422042031821845335f559760a05a2e1d3b0fd6e603b6a2640d969cd29e28ea9c5dddd7",
raw: "00a3785afdc7bb07fa13a4b075f00576cba6946a70cd6ad20b25c949eae6f636",
secret: "83b1b1eafc349edfc4401760c9949bc2fa95fceebd51cd7d87c2fd4a6ac85d21",
spki: "302a300506032b656e03210000a3785afdc7bb07fa13a4b075f00576cba6946a70cd6ad20b25c949eae6f636",
},
];
function bytes(hex) {
return new Uint8Array(hex.match(/../g).map(value => Number.parseInt(value, 16)));
}
function base64url(value) {
return btoa(String.fromCharCode(...value)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
}
function privateBytes(pkcs8) {
return pkcs8.slice(-32);
}
for (const vector of vectors) {
promise_test(async () => {
const pkcs8 = bytes(vector.pkcs8);
const privateUsages = vector.algorithm === "Ed25519" ? ["sign"] : ["deriveBits"];
const privateKey = await crypto.subtle.importKey("pkcs8", pkcs8, vector.algorithm, true, privateUsages);
assert_array_equals(
new Uint8Array(await crypto.subtle.exportKey("pkcs8", privateKey)),
pkcs8,
"PKCS#8 round trip",
);
const jwk = await crypto.subtle.exportKey("jwk", privateKey);
assert_equals(jwk.d, base64url(privateBytes(pkcs8)), "JWK private key bytes");
assert_equals(jwk.x, base64url(bytes(vector.raw)), "JWK public key bytes");
const spki = bytes(vector.spki);
const publicUsages = vector.algorithm === "Ed25519" ? ["verify"] : [];
const publicKey = await crypto.subtle.importKey("spki", spki, vector.algorithm, true, publicUsages);
assert_array_equals(
new Uint8Array(await crypto.subtle.exportKey("spki", publicKey)),
spki,
"SPKI round trip",
);
assert_array_equals(
new Uint8Array(await crypto.subtle.exportKey("raw", publicKey)),
bytes(vector.raw),
"raw public key",
);
if (vector.algorithm === "Ed25519") {
const signature = new Uint8Array(await crypto.subtle.sign("Ed25519", privateKey, message));
assert_true(
await crypto.subtle.verify("Ed25519", publicKey, signature, message),
"generated signature verifies",
);
assert_true(
await crypto.subtle.verify("Ed25519", publicKey, bytes(vector.signature), message),
"independent reference signature verifies",
);
return;
}
const peerPublic = await crypto.subtle.importKey("spki", peer.spki, "X25519", false, []);
assert_array_equals(
new Uint8Array(await crypto.subtle.deriveBits({name: "X25519", public: peerPublic}, privateKey, 256)),
bytes(vector.secret),
"independent reference shared secret",
);
const peerPrivate = await crypto.subtle.importKey("pkcs8", peer.pkcs8, "X25519", false, ["deriveBits"]);
assert_array_equals(
new Uint8Array(await crypto.subtle.deriveBits({name: "X25519", public: publicKey}, peerPrivate, 256)),
bytes(vector.secret),
"imported public key shared secret",
);
}, `${vector.algorithm} preserves ${vector.name}`);
}