From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <vt@altlinux.org>
Date: Mon, 21 Jan 2019 08:41:22 +0300
From: Vitaly Chikunov <vt@altlinux.org>
To: oss-gost-crypto@lists.altlinux.org
Message-ID: <20190121054122.nx6kqss3dt7dpxfa@altlinux.org>
References: <CADqLbzKoUp1Qoz1M-HpxPeGwfktHv6WfVjV0TqOg0k1pom-smw@mail.gmail.com>
 <20181219235211.26jiecqkbrjdv7ts@sole.flsd.net>
 <CADqLbzJqG+2CCw0EGkUQFSfBocctPZJtrp+j6DtjdARHZwwPUw@mail.gmail.com>
 <20181225122119.eolh4vjhgvxc2mvd@sole.flsd.net>
 <CADqLbzJozyE=hi==YWftJsbHiATM0EW7w27kkQApHjyBB6HHhw@mail.gmail.com>
 <20190117143403.cl6kgjy7aep4lls3@altlinux.org>
 <CADqLbzLUsG4Wq87eG89Ef5N733vs01Bk-HYM7+RsSMxHc2uBoA@mail.gmail.com>
 <20190118185415.62wouqzrb2rbo7gq@altlinux.org>
 <CADqLbzL0GS6sok0QgPZGp1msWz9iwV+h6fOH8YULY0fTe7fj9Q@mail.gmail.com>
 <20190121040438.4ms55vuz3f3mmjzr@altlinux.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <20190121040438.4ms55vuz3f3mmjzr@altlinux.org>
User-Agent: NeoMutt/20171215-106-ac61c7
Subject: Re: [oss-gost-crypto]
 =?koi8-r?b?9MXT1M/X2cUg18XL1M/SwSDEzNEgZ29zdC1l?=
 =?koi8-r?b?bmdpbmU=?=
X-BeenThere: oss-gost-crypto@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Open-source aspects of GOST Cryptography
 <oss-gost-crypto@lists.altlinux.org>
List-Id: Open-source aspects of GOST Cryptography
 <oss-gost-crypto.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/oss-gost-crypto>, 
 <mailto:oss-gost-crypto-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/oss-gost-crypto>
List-Post: <mailto:oss-gost-crypto@lists.altlinux.org>
List-Help: <mailto:oss-gost-crypto-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/oss-gost-crypto>, 
 <mailto:oss-gost-crypto-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Jan 2019 05:41:22 -0000
Archived-At: <http://lore.altlinux.org/oss-gost-crypto/20190121054122.nx6kqss3dt7dpxfa@altlinux.org/>
List-Archive: <http://lore.altlinux.org/oss-gost-crypto/>

On Mon, Jan 21, 2019 at 07:04:38AM +0300, Vitaly Chikunov wrote:
> Hi,
> 
> JFYI. Я пока предварительно сделал тесты параметров для gost-engine:
> 
>   https://github.com/vt-alt/gost-engine/commit/e66833fdbb09e029a3eeb9155f0
> 
> Все тестовые вектора которые выдало КриптоПро (с пометкой cp) проходят тесты
> на проверку подписи успешно.
> 
> Тестовые сертификаты, которые выдал Инфотекс (с пометкой it) пока не тестирую,
> но половина их них даже не загружается (запарывается на X509_get0_pubkey), что,
> в общем, ожидаемо.

Quick follow-up: я допилил gost-engine, чтоб все серты загружались и тесты
проходили.

ps. Продолжение о ранее не проходивших тестах на сертах Инфотекса:

  Test short_cp_a_cer (it):
   (algo gost2012_256) (curve id-GostR3410-2001-CryptoPro-A-ParamSet)
    X509_verify API       correct
  Test short_cp_b_cer (it):
   (algo gost2012_256) (curve id-GostR3410-2001-CryptoPro-B-ParamSet)
    X509_verify API       correct
  Test short_cp_c_cer (it):
   (algo gost2012_256) (curve id-GostR3410-2001-CryptoPro-C-ParamSet)
    X509_verify API       correct
  Test short_tc_a_cer (it):
   (algo gost2012_256) (curve id-tc26-gost-3410-2012-256-paramSetA)
    X509_verify API       correct
  Test short_tc_b_cer (it):
   (algo gost2012_256) (curve id-tc26-gost-3410-2012-256-paramSetB)
    X509_verify API       correct
  Test short_tc_c_cer (it):
   (algo gost2012_256) (curve id-tc26-gost-3410-2012-256-paramSetC)
    X509_verify API       correct
  Test short_tc_d_cer (it):
   (algo gost2012_256) (curve id-tc26-gost-3410-2012-256-paramSetD)
    X509_verify API       correct
  Test long_tc_a_cer (it):
   (algo gost2012_512) (curve id-tc26-gost-3410-2012-512-paramSetA)
    X509_verify API       correct
  Test long_tc_b_cer (it):
   (algo gost2012_512) (curve id-tc26-gost-3410-2012-512-paramSetB)
    X509_verify API       correct
  Test long_tc_c_cer (it):
   (algo gost2012_512) (curve id-tc26-gost-3410-2012-512-paramSetC)
    X509_verify API       correct