unit-tests: perform signing/validation with keys ECDSA keys generated or loaded

diff --git a/src/libstrongswan/tests/test_ecdsa.c b/src/libstrongswan/tests/test_ecdsa.c
index d317ff5b9b89da619ea555866d98baa7e93945df..7e673a7dac989503813d1788ef80928df2a5330c 100644 (file)
--- a/src/libstrongswan/tests/test_ecdsa.c
+++ b/src/libstrongswan/tests/test_ecdsa.c
@@ -15,6 +15,47 @@
 
 #include "test_suite.h"
 
+/**
+ * Signature schemes to test
+ */
+static struct {
+       /* key size for scheme, 0 for any */
+       int key_size;
+       signature_scheme_t scheme;
+} schemes[] = {
+       { 0, SIGN_ECDSA_WITH_SHA1_DER },
+       { 0, SIGN_ECDSA_WITH_SHA256_DER },
+       { 0, SIGN_ECDSA_WITH_SHA384_DER },
+       { 0, SIGN_ECDSA_WITH_SHA512_DER },
+       { 0, SIGN_ECDSA_WITH_NULL },
+       { 256, SIGN_ECDSA_256 },
+       { 384, SIGN_ECDSA_384 },
+       { 521, SIGN_ECDSA_521 },
+};
+
+/**
+ * Perform a signature verification "good" test having a keypair
+ */
+static void test_good_sig(private_key_t *privkey, public_key_t *pubkey)
+{
+       chunk_t sig, data = chunk_from_chars(0x01,0x02,0x03,0xFD,0xFE,0xFF);
+       int i;
+
+       for (i = 0; i < countof(schemes); i++)
+       {
+               if (schemes[i].key_size != 0 &&
+                       schemes[i].scheme != privkey->get_keysize(privkey))
+               {
+                       continue;
+               }
+               fail_unless(privkey->sign(privkey, schemes[i].scheme, data, &sig),
+                                       "sign %N", signature_scheme_names, schemes[i].scheme);
+               fail_unless(pubkey->verify(pubkey, schemes[i].scheme, data, sig),
+                                       "verify %N", signature_scheme_names, schemes[i].scheme);
+               free(sig.ptr);
+       }
+}
+
 /**
  * ECDSA key sizes to test
  */
@@ -32,6 +73,9 @@ START_TEST(test_gen)
        ck_assert(privkey != NULL);
        pubkey = privkey->get_public_key(privkey);
        ck_assert(pubkey != NULL);
+
+       test_good_sig(privkey, pubkey);
+
        pubkey->destroy(pubkey);
        privkey->destroy(privkey);
 }
@@ -89,6 +133,9 @@ START_TEST(test_load)
        ck_assert(privkey != NULL);
        pubkey = privkey->get_public_key(privkey);
        ck_assert(pubkey != NULL);
+
+       test_good_sig(privkey, pubkey);
+
        pubkey->destroy(pubkey);
        privkey->destroy(privkey);
 }