[jackhill/guix/guix.git] / tests / pk-crypto.scm

;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2013 Ludovic Courtès <ludo@gnu.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (test-pk-crypto)
  #:use-module (guix pk-crypto)
  #:use-module (guix utils)
  #:use-module (guix hash)
  #:use-module (srfi srfi-1)
  #:use-module (srfi srfi-64)
  #:use-module (rnrs bytevectors)
  #:use-module (rnrs io ports)
  #:use-module (ice-9 match))

;; Test the (guix pk-crypto) module.

(define %key-pair
  ;; Key pair that was generated with:
  ;;   (generate-key (string->gcry-sexp "(genkey (rsa (nbits 4:1024)))"))
  ;; which takes a bit of time.
  "(key-data
    (public-key
     (rsa
      (n #00C1F764069F54FFE93A126B02328903E984E4AE3AF6DF402B5B6B3907911B88C385F1BA76A002EC9DEA109A5228EF0E62EE31A06D1A5861CAB474F6C857AC66EB65A1905F25BBA1869579E73A3B7FED13AF5A1667326F88CDFC2FF24B03C14FD1384AA7E73CA89572880B606E3A974E15347963FC7B6378574936A47580DBCB45#)
      (e #010001#)))
    (private-key
     (rsa
      (n #00C1F764069F54FFE93A126B02328903E984E4AE3AF6DF402B5B6B3907911B88C385F1BA76A002EC9DEA109A5228EF0E62EE31A06D1A5861CAB474F6C857AC66EB65A1905F25BBA1869579E73A3B7FED13AF5A1667326F88CDFC2FF24B03C14FD1384AA7E73CA89572880B606E3A974E15347963FC7B6378574936A47580DBCB45#)
      (e #010001#)
      (d #58CAD84653D0046A8EC3F9AA82D9C829B145422109FC3F12DA01A694B92FA296E70D366FB166454D30E632CEE3A033B4C41781BA10325F69FCDC0250CA19C8EEB352FA085992494098DB133E682ED38A931701F0DED1A1E508F4341A4FB446A04F019427C7CB3C44F251EEA9D386100DA80F125E0FD5CE1B0DFEC6D21516EACD#)
      (p #00D47F185147EC39393CCDA4E7323FFC20FC8B8073E2A54DD63BA392A66975E4204CA48572496A9DFD7522436B852C07472A5AB25B7706F7C14E6F33FBC420FF3B#)
      (q #00E9AD22F158060BC9AE3601DA623AFC60FFF3058795802CA92371C00097335CF9A23D7782DE353C9DBA93D7BB99E6A24A411107605E722481C5C191F80D7EB77F#)
      (u #59B45B95AE01A7A7370FAFDB08FE73A4793CE37F228961B09B1B1E7DDAD9F8D3E28F5C5E8B4B067E6B8E0BBF3F690B42991A79E46108DDCDA2514323A66964DE#))))")

(test-begin "pk-crypto")

(let ((sexps '("(foo bar)" "#C0FFEE#"
               "(genkey \n (rsa \n  (nbits \"1024\")\n  )\n )")))
  (test-equal "string->gcry-sexp->string"
    sexps
    (let ((sexps (map string->gcry-sexp sexps)))
      (and (every gcry-sexp? sexps)
           (map (compose string-trim-both gcry-sexp->string) sexps)))))

(gc)                                              ; stress test!

(let ((sexps `(("(foo bar)" foo -> "(foo bar)")
               ("(foo (bar (baz 3:123)))" baz -> "(baz \"123\")")
               ("(foo (bar 3:123))" baz -> #f))))
  (test-equal "find-sexp-token"
    (map (match-lambda
          ((_ _ '-> expected)
           expected))
         sexps)
    (map (match-lambda
          ((input token '-> _)
           (let ((sexp (find-sexp-token (string->gcry-sexp input) token)))
             (and sexp
                  (string-trim-both (gcry-sexp->string sexp))))))
         sexps)))

(gc)

;; XXX: The test below is typically too long as it needs to gather enough entropy.

;; (test-assert "generate-key"
;;   (let ((key (generate-key (string->gcry-sexp
;;                             "(genkey (rsa (nbits 3:128)))"))))
;;     (and (gcry-sexp? key)
;;          (find-sexp-token key 'key-data)
;;          (find-sexp-token key 'public-key)
;;          (find-sexp-token key 'private-key))))

(test-assert "sign + verify"
  (let* ((pair   (string->gcry-sexp %key-pair))
         (secret (find-sexp-token pair 'private-key))
         (public (find-sexp-token pair 'public-key))
         (data   (bytevector->hash-data
                  (sha256 (string->utf8 "Hello, world."))))
         (sig    (sign data secret)))
    (and (verify sig data public)
         (not (verify sig
                      (bytevector->hash-data
                       (sha256 (string->utf8 "Hi!")))
                      public)))))

(gc)

(test-end)

\f
(exit (= (test-runner-fail-count (test-runner-current)) 0))
Commit	Line	Data
3476ded9 LC	1	;;; GNU Guix --- Functional package management for GNU
	2	;;; Copyright © 2013 Ludovic Courtès <ludo@gnu.org>
	3	;;;
	4	;;; This file is part of GNU Guix.
	5	;;;
	6	;;; GNU Guix is free software; you can redistribute it and/or modify it
	7	;;; under the terms of the GNU General Public License as published by
	8	;;; the Free Software Foundation; either version 3 of the License, or (at
	9	;;; your option) any later version.
	10	;;;
	11	;;; GNU Guix is distributed in the hope that it will be useful, but
	12	;;; WITHOUT ANY WARRANTY; without even the implied warranty of
	13	;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	14	;;; GNU General Public License for more details.
	15	;;;
	16	;;; You should have received a copy of the GNU General Public License
	17	;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
	18
	19	(define-module (test-pk-crypto)
	20	#:use-module (guix pk-crypto)
	21	#:use-module (guix utils)
	22	#:use-module (guix hash)
	23	#:use-module (srfi srfi-1)
	24	#:use-module (srfi srfi-64)
	25	#:use-module (rnrs bytevectors)
	26	#:use-module (rnrs io ports)
	27	#:use-module (ice-9 match))
	28
	29	;; Test the (guix pk-crypto) module.
	30
	31	(define %key-pair
	32	;; Key pair that was generated with:
	33	;; (generate-key (string->gcry-sexp "(genkey (rsa (nbits 4:1024)))"))
	34	;; which takes a bit of time.
	35	"(key-data
	36	(public-key
	37	(rsa
	38	(n #00C1F764069F54FFE93A126B02328903E984E4AE3AF6DF402B5B6B3907911B88C385F1BA76A002EC9DEA109A5228EF0E62EE31A06D1A5861CAB474F6C857AC66EB65A1905F25BBA1869579E73A3B7FED13AF5A1667326F88CDFC2FF24B03C14FD1384AA7E73CA89572880B606E3A974E15347963FC7B6378574936A47580DBCB45#)
	39	(e #010001#)))
	40	(private-key
	41	(rsa
	42	(n #00C1F764069F54FFE93A126B02328903E984E4AE3AF6DF402B5B6B3907911B88C385F1BA76A002EC9DEA109A5228EF0E62EE31A06D1A5861CAB474F6C857AC66EB65A1905F25BBA1869579E73A3B7FED13AF5A1667326F88CDFC2FF24B03C14FD1384AA7E73CA89572880B606E3A974E15347963FC7B6378574936A47580DBCB45#)
	43	(e #010001#)
	44	(d #58CAD84653D0046A8EC3F9AA82D9C829B145422109FC3F12DA01A694B92FA296E70D366FB166454D30E632CEE3A033B4C41781BA10325F69FCDC0250CA19C8EEB352FA085992494098DB133E682ED38A931701F0DED1A1E508F4341A4FB446A04F019427C7CB3C44F251EEA9D386100DA80F125E0FD5CE1B0DFEC6D21516EACD#)
	45	(p #00D47F185147EC39393CCDA4E7323FFC20FC8B8073E2A54DD63BA392A66975E4204CA48572496A9DFD7522436B852C07472A5AB25B7706F7C14E6F33FBC420FF3B#)
	46	(q #00E9AD22F158060BC9AE3601DA623AFC60FFF3058795802CA92371C00097335CF9A23D7782DE353C9DBA93D7BB99E6A24A411107605E722481C5C191F80D7EB77F#)
	47	(u #59B45B95AE01A7A7370FAFDB08FE73A4793CE37F228961B09B1B1E7DDAD9F8D3E28F5C5E8B4B067E6B8E0BBF3F690B42991A79E46108DDCDA2514323A66964DE#))))")
	48
	49	(test-begin "pk-crypto")
	50
	51	(let ((sexps '("(foo bar)" "#C0FFEE#"
	52	"(genkey \n (rsa \n (nbits \"1024\")\n )\n )")))
	53	(test-equal "string->gcry-sexp->string"
	54	sexps
	55	(let ((sexps (map string->gcry-sexp sexps)))
	56	(and (every gcry-sexp? sexps)
	57	(map (compose string-trim-both gcry-sexp->string) sexps)))))
	58
	59	(gc) ; stress test!
	60
	61	(let ((sexps `(("(foo bar)" foo -> "(foo bar)")
	62	("(foo (bar (baz 3:123)))" baz -> "(baz \"123\")")
	63	("(foo (bar 3:123))" baz -> #f))))
	64	(test-equal "find-sexp-token"
65	(map (match-lambda
66	((_ _ '-> expected)
67	expected))
68	sexps)
69	(map (match-lambda
70	((input token '-> _)
71	(let ((sexp (find-sexp-token (string->gcry-sexp input) token)))
72	(and sexp
73	(string-trim-both (gcry-sexp->string sexp))))))
74	sexps)))
75
76	(gc)
77
78	;; XXX: The test below is typically too long as it needs to gather enough entropy.
79
80	;; (test-assert "generate-key"
81	;; (let ((key (generate-key (string->gcry-sexp
82	;; "(genkey (rsa (nbits 3:128)))"))))
83	;; (and (gcry-sexp? key)
84	;; (find-sexp-token key 'key-data)
85	;; (find-sexp-token key 'public-key)
86	;; (find-sexp-token key 'private-key))))
87
88	(test-assert "sign + verify"
89	(let* ((pair (string->gcry-sexp %key-pair))
90	(secret (find-sexp-token pair 'private-key))
91	(public (find-sexp-token pair 'public-key))
92	(data (bytevector->hash-data
93	(sha256 (string->utf8 "Hello, world."))))
94	(sig (sign data secret)))
95	(and (verify sig data public)
96	(not (verify sig
97	(bytevector->hash-data
98	(sha256 (string->utf8 "Hi!")))
99	public)))))
100
101	(gc)
102
103	(test-end)
104
105	\f
106	(exit (= (test-runner-fail-count (test-runner-current)) 0))