159 lines
7.5 KiB
Java
159 lines
7.5 KiB
Java
// SPDX-FileCopyrightText: 2021 Paul Schaub <vanitasvitae@fsfe.org>
|
|
//
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package org.pgpainless.example;
|
|
|
|
import static org.junit.jupiter.api.Assertions.assertArrayEquals;
|
|
import static org.junit.jupiter.api.Assertions.assertTrue;
|
|
|
|
import java.io.BufferedInputStream;
|
|
import java.io.ByteArrayInputStream;
|
|
import java.io.ByteArrayOutputStream;
|
|
import java.io.IOException;
|
|
import java.nio.charset.StandardCharsets;
|
|
|
|
import org.bouncycastle.openpgp.PGPException;
|
|
import org.bouncycastle.openpgp.PGPPublicKeyRing;
|
|
import org.bouncycastle.openpgp.PGPSecretKeyRing;
|
|
import org.bouncycastle.util.io.Streams;
|
|
import org.junit.jupiter.api.BeforeAll;
|
|
import org.junit.jupiter.api.Test;
|
|
import org.pgpainless.PGPainless;
|
|
import org.pgpainless.algorithm.DocumentSignatureType;
|
|
import org.pgpainless.decryption_verification.ConsumerOptions;
|
|
import org.pgpainless.decryption_verification.DecryptionStream;
|
|
import org.pgpainless.decryption_verification.OpenPgpMetadata;
|
|
import org.pgpainless.decryption_verification.cleartext_signatures.InMemoryMultiPassStrategy;
|
|
import org.pgpainless.encryption_signing.EncryptionStream;
|
|
import org.pgpainless.encryption_signing.ProducerOptions;
|
|
import org.pgpainless.encryption_signing.SigningOptions;
|
|
import org.pgpainless.exception.WrongConsumingMethodException;
|
|
import org.pgpainless.key.protection.SecretKeyRingProtector;
|
|
|
|
public class DecryptOrVerify {
|
|
|
|
private static final String KEY = "-----BEGIN PGP PRIVATE KEY BLOCK-----\n" +
|
|
"Version: PGPainless\n" +
|
|
"Comment: AA21 9149 3B35 E679 8876 DE43 B0D7 8185 F639 B6C9\n" +
|
|
"Comment: Signora <signora@pgpainless.org>\n" +
|
|
"\n" +
|
|
"lFgEYVGUbRYJKwYBBAHaRw8BAQdAki59UUbUouvfd+4hoSAQ79He7cdmTyYTu3Su\n" +
|
|
"9Ww0isQAAQCvyi79y6YNzxdQpN8HLPmBd+zq6o/RNK4cBeN+RJrxiBHbtCBTaWdu\n" +
|
|
"b3JhIDxzaWdub3JhQHBncGFpbmxlc3Mub3JnPoh4BBMWCgAgBQJhUZRtAhsBBRYC\n" +
|
|
"AwEABRUKCQgLBAsJCAcCHgECGQEACgkQsNeBhfY5tskOqgEA3fDHE1n081xiseTl\n" +
|
|
"aXV1A/6aXvsnxVo+Lj35Mn7CarwBAO4PVjHvvUydTla3D5JHhZ0p4P5hSG7kPPrB\n" +
|
|
"d3nmbH0InF0EYVGUbRIKKwYBBAGXVQEFAQEHQFzDN2Tuaxim9YFRRXeRZyDC42KF\n" +
|
|
"9DSohUXEJ/TrM7MlAwEIBwAA/3h1IaQBIGlNZ6TSsuuryW8KtwdxI4Sd1JDzsVML\n" +
|
|
"2SGQEFKIdQQYFgoAHQUCYVGUbQIbDAUWAgMBAAUVCgkICwQLCQgHAh4BAAoJELDX\n" +
|
|
"gYX2ObbJBzwBAM4RYBuRsRTmEFTrc7FyAqqSrCVpyLkrnYqPTZriySX0AP9K+N1d\n" +
|
|
"LIDRkHW7EbK2ITRu6nemFu00+H1bInTCUVxtAZxYBGFRlG0WCSsGAQQB2kcPAQEH\n" +
|
|
"QOzydmmSnNw/NoWi0b0pODLNbT2VUFNFurxBoWj8T2oLAAD+Nbk5mZVQ91pDV6Bp\n" +
|
|
"SAjCP9/e7odHtipsdlG9lszzC98RcIjVBBgWCgB9BQJhUZRtAhsCBRYCAwEABRUK\n" +
|
|
"CQgLBAsJCAcCHgFfIAQZFgoABgUCYVGUbQAKCRBaxbg/GlrWhx43AP40HxpvHNL5\n" +
|
|
"m953hWBxZvzIpt98E8+bfR4rCyHY6A5rzQEA8BUI6oqsEPKlGiETYntk7fFhOIyJ\n" +
|
|
"bRH+a/LsdaxjpQwACgkQsNeBhfY5tskKHQEA+aanF6ZnSatjDdiKEehYmbqr4BTc\n" +
|
|
"UDnu37YkbgLlqPIBAJrPT5XS9oVa5xMsK+c3shnmPVQuK9r/AGwlligJprYH\n" +
|
|
"=JHMt\n" +
|
|
"-----END PGP PRIVATE KEY BLOCK-----\n";
|
|
|
|
private static final String INBAND_SIGNED = "-----BEGIN PGP MESSAGE-----\n" +
|
|
"Version: PGPainless\n" +
|
|
"\n" +
|
|
"owGbwMvMyCUWdXSHvVTUtXbG0yJJDCDgkZqTk6+jEJ5flJOiyNVRysIoxsXAxsqU\n" +
|
|
"GDiVjUGRUwCmQUyRRWnOn9Z/PIseF3Yz6cCEL05nZDj1OClo75WVTjNmJPemW6qV\n" +
|
|
"6ki//1K1++2s0qTP+0N11O4z/BVLDDdxnmQryS+5VXjBX7/0Hxnm/eqeX6Zum35r\n" +
|
|
"M8e7ufwA\n" +
|
|
"=RDiy\n" +
|
|
"-----END PGP MESSAGE-----";
|
|
private static final String CLEARTEXT_SIGNED = "-----BEGIN PGP SIGNED MESSAGE-----\n" +
|
|
"Hash: SHA512\n" +
|
|
"\n" +
|
|
"Hello, World!\n" +
|
|
"\n" +
|
|
"-----BEGIN PGP SIGNATURE-----\n" +
|
|
"Version: PGPainless\n" +
|
|
"\n" +
|
|
"iHUEARYKAAYFAmFR1WIAIQkQWsW4Pxpa1ocWIQQinPyF/gyi43GLAixaxbg/GlrW\n" +
|
|
"h7qwAP9Vq0PfDdGpM+n4wfR162XBvvVU8KNl+vJI3u7Ghlj0zwEA1VMgwNnCRb9b\n" +
|
|
"QUibivG5Slahz8l7PWnGkxbB2naQxgw=\n" +
|
|
"=oNIK\n" +
|
|
"-----END PGP SIGNATURE-----";
|
|
|
|
private static PGPSecretKeyRing secretKey;
|
|
private static PGPPublicKeyRing certificate;
|
|
|
|
@BeforeAll
|
|
public static void prepare() throws IOException {
|
|
secretKey = PGPainless.readKeyRing().secretKeyRing(KEY);
|
|
certificate = PGPainless.extractCertificate(secretKey);
|
|
}
|
|
|
|
@Test
|
|
public void verifySignatures() throws PGPException, IOException {
|
|
ConsumerOptions options = new ConsumerOptions()
|
|
.addVerificationCert(certificate);
|
|
|
|
for (String signed : new String[] {INBAND_SIGNED, CLEARTEXT_SIGNED}) {
|
|
ByteArrayOutputStream out = new ByteArrayOutputStream();
|
|
ByteArrayInputStream in = new ByteArrayInputStream(signed.getBytes(StandardCharsets.UTF_8));
|
|
BufferedInputStream bufIn = new BufferedInputStream(in);
|
|
bufIn.mark(512);
|
|
DecryptionStream verificationStream;
|
|
try {
|
|
verificationStream = PGPainless.decryptAndOrVerify()
|
|
.onInputStream(bufIn)
|
|
.withOptions(options);
|
|
} catch (WrongConsumingMethodException e) {
|
|
bufIn.reset();
|
|
// Cleartext Signed Message
|
|
verificationStream = PGPainless.verifyCleartextSignedMessage()
|
|
.onInputStream(bufIn)
|
|
.withStrategy(new InMemoryMultiPassStrategy())
|
|
.withOptions(options)
|
|
.getVerificationStream();
|
|
}
|
|
|
|
Streams.pipeAll(verificationStream, out);
|
|
verificationStream.close();
|
|
|
|
OpenPgpMetadata metadata = verificationStream.getResult();
|
|
assertTrue(metadata.isVerified());
|
|
assertArrayEquals("Hello, World!\n".getBytes(StandardCharsets.UTF_8), out.toByteArray());
|
|
}
|
|
}
|
|
|
|
|
|
@Test
|
|
public void createVerifyCleartextSignedMessage() throws PGPException, IOException {
|
|
for (String msg : new String[] {"Hello World!", "- Hello - World -", "Hello, World!\n", "Hello\nWorld!"}) {
|
|
ByteArrayInputStream in = new ByteArrayInputStream(msg.getBytes(StandardCharsets.UTF_8));
|
|
ByteArrayOutputStream out = new ByteArrayOutputStream();
|
|
EncryptionStream signingStream = PGPainless.encryptAndOrSign()
|
|
.onOutputStream(out)
|
|
.withOptions(ProducerOptions.sign(SigningOptions.get()
|
|
.addDetachedSignature(SecretKeyRingProtector.unprotectedKeys(), secretKey, DocumentSignatureType.CANONICAL_TEXT_DOCUMENT)
|
|
).setCleartextSigned());
|
|
|
|
Streams.pipeAll(in, signingStream);
|
|
signingStream.close();
|
|
|
|
ByteArrayInputStream signedIn = new ByteArrayInputStream(out.toByteArray());
|
|
|
|
DecryptionStream verificationStream = PGPainless.verifyCleartextSignedMessage()
|
|
.onInputStream(signedIn)
|
|
.withStrategy(new InMemoryMultiPassStrategy())
|
|
.withOptions(new ConsumerOptions().addVerificationCert(certificate))
|
|
.getVerificationStream();
|
|
|
|
ByteArrayOutputStream plain = new ByteArrayOutputStream();
|
|
Streams.pipeAll(verificationStream, plain);
|
|
verificationStream.close();
|
|
|
|
OpenPgpMetadata metadata = verificationStream.getResult();
|
|
assertTrue(metadata.isVerified());
|
|
assertArrayEquals(msg.getBytes(StandardCharsets.UTF_8), plain.toByteArray());
|
|
}
|
|
}
|
|
}
|