Open-source aspects of GOST Cryptography
 help / color / mirror / Atom feed
* [oss-gost-crypto] Тестовые вектора для  gost-engine
  @ 2019-01-21  4:04                   ` Vitaly Chikunov
  2019-01-21  5:41                     ` Vitaly Chikunov
  0 siblings, 1 reply; 2+ messages in thread
From: Vitaly Chikunov @ 2019-01-21  4:04 UTC (permalink / raw)
  To: oss-gost-crypto

Hi,

JFYI. Я пока предварительно сделал тесты параметров для gost-engine:

  https://github.com/vt-alt/gost-engine/commit/e66833fdbb09e029a3eeb9155f0

Все тестовые вектора которые выдало КриптоПро (с пометкой cp) проходят тесты
на проверку подписи успешно.

Тестовые сертификаты, которые выдал Инфотекс (с пометкой it) пока не тестирую,
но половина их них даже не загружается (запарывается на X509_get0_pubkey), что,
в общем, ожидаемо.


ps. Пока тест выглядит так:

  ~/src/gost-engine/1.1.2-dev (test_params)$ bin/test_params
  Test id-GostR3410-2001-CryptoPro-A-ParamSet (cp):
    EVP_PKEY_verify API   correct
    EVP_Verify API        correct
  Test id-GostR3410-2001-CryptoPro-B-ParamSet (cp):
    EVP_PKEY_verify API   correct
    EVP_Verify API        correct
  Test id-GostR3410-2001-CryptoPro-C-ParamSet (cp):
    EVP_PKEY_verify API   correct
    EVP_Verify API        correct
  Test id-tc26-gost-3410-2012-256-paramSetA (cp):
    EVP_PKEY_verify API   correct
    EVP_Verify API        correct
  Test id-tc26-gost-3410-2012-512-paramSetA (cp):
    EVP_PKEY_verify API   correct
    EVP_Verify API        correct
  Test id-tc26-gost-3410-2012-512-paramSetB (cp):
    EVP_PKEY_verify API   correct
    EVP_Verify API        correct
  Test id-tc26-gost-3410-2012-512-paramSetC (cp):
    EVP_PKEY_verify API   correct
    EVP_Verify API        correct
  Test short_cp_a_cer (it):
	  algo gost2012_256
	  curve id-GostR3410-2001-CryptoPro-A-ParamSet
  Test short_cp_b_cer (it):
	  algo gost2012_256
	  curve id-GostR3410-2001-CryptoPro-B-ParamSet
  Test short_cp_c_cer (it):
	  algo gost2012_256
	  curve id-GostR3410-2001-CryptoPro-C-ParamSet
  Test short_tc_a_cer (it):
	  algo gost2012_256
	  curve id-tc26-gost-3410-2012-256-paramSetA
  140161183687936:error:0D078079:asn1 encoding routines:asn1_item_embed_d2i:field missing:crypto/asn1/tasn_dec.c:406:Field=hash_params, Type=GOST_KEY_PARAMS
  140161183687936:error:80064065:lib(128):decode_gost_algor_params:bad pkey parameters format:/home/vt/src/gost-engine/gost_ameth.c:158:
  140161183687936:error:0B09407D:x509 certificate routines:x509_pubkey_decode:public key decode error:crypto/x509/x_pubkey.c:124:
  Error at /home/vt/src/gost-engine/test_params.c:909 pk = X509_get0_pubkey(x)
  Test short_tc_b_cer (it):
	  algo gost2012_256
	  curve id-tc26-gost-3410-2012-256-paramSetB
  140161183687936:error:0D078079:asn1 encoding routines:asn1_item_embed_d2i:field missing:crypto/asn1/tasn_dec.c:406:Field=hash_params, Type=GOST_KEY_PARAMS
  140161183687936:error:80064065:lib(128):decode_gost_algor_params:bad pkey parameters format:/home/vt/src/gost-engine/gost_ameth.c:158:
  140161183687936:error:0B09407D:x509 certificate routines:x509_pubkey_decode:public key decode error:crypto/x509/x_pubkey.c:124:
  Error at /home/vt/src/gost-engine/test_params.c:909 pk = X509_get0_pubkey(x)
  Test short_tc_c_cer (it):
	  algo gost2012_256
	  curve id-tc26-gost-3410-2012-256-paramSetC
  140161183687936:error:0D078079:asn1 encoding routines:asn1_item_embed_d2i:field missing:crypto/asn1/tasn_dec.c:406:Field=hash_params, Type=GOST_KEY_PARAMS
  140161183687936:error:80064065:lib(128):decode_gost_algor_params:bad pkey parameters format:/home/vt/src/gost-engine/gost_ameth.c:158:
  140161183687936:error:0B09407D:x509 certificate routines:x509_pubkey_decode:public key decode error:crypto/x509/x_pubkey.c:124:
  Error at /home/vt/src/gost-engine/test_params.c:909 pk = X509_get0_pubkey(x)
  Test short_tc_d_cer (it):
	  algo gost2012_256
	  curve id-tc26-gost-3410-2012-256-paramSetD
  140161183687936:error:0D078079:asn1 encoding routines:asn1_item_embed_d2i:field missing:crypto/asn1/tasn_dec.c:406:Field=hash_params, Type=GOST_KEY_PARAMS
  140161183687936:error:80064065:lib(128):decode_gost_algor_params:bad pkey parameters format:/home/vt/src/gost-engine/gost_ameth.c:158:
  140161183687936:error:0B09407D:x509 certificate routines:x509_pubkey_decode:public key decode error:crypto/x509/x_pubkey.c:124:
  Error at /home/vt/src/gost-engine/test_params.c:909 pk = X509_get0_pubkey(x)
  Test long_tc_a_cer (it):
	  algo gost2012_512
	  curve id-tc26-gost-3410-2012-512-paramSetA
  140161183687936:error:0D078079:asn1 encoding routines:asn1_item_embed_d2i:field missing:crypto/asn1/tasn_dec.c:406:Field=hash_params, Type=GOST_KEY_PARAMS
  140161183687936:error:80064065:lib(128):decode_gost_algor_params:bad pkey parameters format:/home/vt/src/gost-engine/gost_ameth.c:158:
  140161183687936:error:0B09407D:x509 certificate routines:x509_pubkey_decode:public key decode error:crypto/x509/x_pubkey.c:124:
  Error at /home/vt/src/gost-engine/test_params.c:909 pk = X509_get0_pubkey(x)
  Test long_tc_b_cer (it):
	  algo gost2012_512
	  curve id-tc26-gost-3410-2012-512-paramSetB
  140161183687936:error:0D078079:asn1 encoding routines:asn1_item_embed_d2i:field missing:crypto/asn1/tasn_dec.c:406:Field=hash_params, Type=GOST_KEY_PARAMS
  140161183687936:error:80064065:lib(128):decode_gost_algor_params:bad pkey parameters format:/home/vt/src/gost-engine/gost_ameth.c:158:
  140161183687936:error:0B09407D:x509 certificate routines:x509_pubkey_decode:public key decode error:crypto/x509/x_pubkey.c:124:
  Error at /home/vt/src/gost-engine/test_params.c:909 pk = X509_get0_pubkey(x)
  Test long_tc_c_cer (it):
	  algo gost2012_512
	  curve id-tc26-gost-3410-2012-512-paramSetC
  140161183687936:error:0D078079:asn1 encoding routines:asn1_item_embed_d2i:field missing:crypto/asn1/tasn_dec.c:406:Field=hash_params, Type=GOST_KEY_PARAMS
  140161183687936:error:80064065:lib(128):decode_gost_algor_params:bad pkey parameters format:/home/vt/src/gost-engine/gost_ameth.c:158:
  140161183687936:error:0B09407D:x509 certificate routines:x509_pubkey_decode:public key decode error:crypto/x509/x_pubkey.c:124:
  Error at /home/vt/src/gost-engine/test_params.c:909 pk = X509_get0_pubkey(x)



^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [oss-gost-crypto] Тестовые вектора для gost-engine
  2019-01-21  4:04                   ` [oss-gost-crypto] Тестовые вектора для gost-engine Vitaly Chikunov
@ 2019-01-21  5:41                     ` Vitaly Chikunov
  0 siblings, 0 replies; 2+ messages in thread
From: Vitaly Chikunov @ 2019-01-21  5:41 UTC (permalink / raw)
  To: oss-gost-crypto

On Mon, Jan 21, 2019 at 07:04:38AM +0300, Vitaly Chikunov wrote:
> Hi,
> 
> JFYI. Я пока предварительно сделал тесты параметров для gost-engine:
> 
>   https://github.com/vt-alt/gost-engine/commit/e66833fdbb09e029a3eeb9155f0
> 
> Все тестовые вектора которые выдало КриптоПро (с пометкой cp) проходят тесты
> на проверку подписи успешно.
> 
> Тестовые сертификаты, которые выдал Инфотекс (с пометкой it) пока не тестирую,
> но половина их них даже не загружается (запарывается на X509_get0_pubkey), что,
> в общем, ожидаемо.

Quick follow-up: я допилил gost-engine, чтоб все серты загружались и тесты
проходили.

ps. Продолжение о ранее не проходивших тестах на сертах Инфотекса:

  Test short_cp_a_cer (it):
   (algo gost2012_256) (curve id-GostR3410-2001-CryptoPro-A-ParamSet)
    X509_verify API       correct
  Test short_cp_b_cer (it):
   (algo gost2012_256) (curve id-GostR3410-2001-CryptoPro-B-ParamSet)
    X509_verify API       correct
  Test short_cp_c_cer (it):
   (algo gost2012_256) (curve id-GostR3410-2001-CryptoPro-C-ParamSet)
    X509_verify API       correct
  Test short_tc_a_cer (it):
   (algo gost2012_256) (curve id-tc26-gost-3410-2012-256-paramSetA)
    X509_verify API       correct
  Test short_tc_b_cer (it):
   (algo gost2012_256) (curve id-tc26-gost-3410-2012-256-paramSetB)
    X509_verify API       correct
  Test short_tc_c_cer (it):
   (algo gost2012_256) (curve id-tc26-gost-3410-2012-256-paramSetC)
    X509_verify API       correct
  Test short_tc_d_cer (it):
   (algo gost2012_256) (curve id-tc26-gost-3410-2012-256-paramSetD)
    X509_verify API       correct
  Test long_tc_a_cer (it):
   (algo gost2012_512) (curve id-tc26-gost-3410-2012-512-paramSetA)
    X509_verify API       correct
  Test long_tc_b_cer (it):
   (algo gost2012_512) (curve id-tc26-gost-3410-2012-512-paramSetB)
    X509_verify API       correct
  Test long_tc_c_cer (it):
   (algo gost2012_512) (curve id-tc26-gost-3410-2012-512-paramSetC)
    X509_verify API       correct



^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2019-01-21  5:41 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-01-21  4:04                   ` [oss-gost-crypto] Тестовые вектора для gost-engine Vitaly Chikunov
2019-01-21  5:41                     ` Vitaly Chikunov

Open-source aspects of GOST Cryptography

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/oss-gost-crypto/0 oss-gost-crypto/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 oss-gost-crypto oss-gost-crypto/ http://lore.altlinux.org/oss-gost-crypto \
		oss-gost-crypto@lists.altlinux.org oss-gost-crypto@lists.altlinux.ru oss-gost-crypto@lists.altlinux.com
	public-inbox-index oss-gost-crypto

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.oss-gost-crypto


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git