PGPainless/pgpainless
PGPainless/pgpainless
1
0
Fork 0
mirror of https://github.com/pgpainless/pgpainless.git synced 2024-11-12 15:32:06 +01:00
Code Issues Releases Wiki Activity

Add test for key using SHA-1 self sigs

Browse source
This commit is contained in:
Paul Schaub 2024-02-27 17:16:52 +01:00
parent 1aeab82c2d
commit 20002efbf6
Signed by: vanitasvitae
GPG key ID: 62BEE9264BF17311
1 changed files with 42 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
pgpainless-core/src/test/kotlin/org/pgpainless/key/KeyWithInacceptableSelfSignatureTest.kt Normal file
View file

@ -0,0 +1,42 @@
// SPDX-FileCopyrightText: 2024 Paul Schaub <vanitasvitae@fsfe.org>
//
// SPDX-License-Identifier: Apache-2.0
package org.pgpainless.key
import org.junit.jupiter.api.Assertions.assertEquals
import org.junit.jupiter.api.Assertions.assertFalse
import org.junit.jupiter.api.Test
import org.pgpainless.PGPainless
import org.pgpainless.algorithm.HashAlgorithm
import org.pgpainless.algorithm.KeyFlag
import org.pgpainless.bouncycastle.extensions.directKeySignatures
import org.pgpainless.key.generation.OpenPgpKeyGenerator
import org.pgpainless.key.generation.type.KeyType
import org.pgpainless.key.generation.type.eddsa.EdDSACurve
import org.pgpainless.key.generation.type.xdh.XDHSpec
import org.pgpainless.policy.Policy
class KeyWithInacceptableSelfSignatureTest {
@Test
fun `key with inacceptable self-signature is not usable`() {
val genPolicy = Policy().apply {
certificationSignatureHashAlgorithmPolicy = Policy.HashAlgorithmPolicy(
HashAlgorithm.SHA1, listOf(HashAlgorithm.SHA1))
}
val key = OpenPgpKeyGenerator.buildV4Key(genPolicy)
.setPrimaryKey(KeyType.EDDSA(EdDSACurve._Ed25519), listOf(KeyFlag.CERTIFY_OTHER, KeyFlag.SIGN_DATA))
.addEncryptionSubkey(KeyType.XDH(XDHSpec._X25519))
.build()
assertEquals(HashAlgorithm.SHA1,
key.publicKey.directKeySignatures.single().hashAlgorithm
.let { HashAlgorithm.requireFromId(it) })
val info = PGPainless.inspectKeyRing(key)
assertFalse(info.isUsableForSigning)
assertFalse(info.isUsableForEncryption)
}
}