post-e-voting/source-code/scytl-cryptolib/cryptolib-js/spec/asymmetric.signer.spec.js

/*
 * Copyright 2018 Scytl Secure Electronic Voting SA
 *
 * All rights reserved
 *
 * See our extended copyright notice in *file 'Copyright.txt' which is part of this source code package
 */
describe('Signers: ', function() {
  'use strict';
  describe(' from the Forge provider ..', function() {
    describe('should be able to ..', function() {
      var _plaintext = 'Ox2fUJq1gAbX';
      var _privateKeyPem =
          '-----BEGIN RSA PRIVATE KEY-----MIIEowIBAAKCAQEAglypZU45bnf2opnRI+Y51VqouBpvDT33xIB/OtbwKzwVpi+JrjBFtfk33tE9t/dSRs79CK94HRhCWcOiLa2qWPrjeZ9SBiEyScrhIvRZVBF41zBgwQNuRvJCsKmAqlZaFNJDZxEP4repmlBn1CfVFmfrXmOKqwP5F7l9ZtucveRzsfmF1yVPFkW8TMuB3YqMiyymyqHlS8ujCsu5I8tpgPbwuxdMOY94fNhSXrYkY8IuX1g1zdq/Z1jluOaR/UqK4UpnbuJaH/F0VgDNiWh6cTD0DFGEk0b70i5wU4Q3L/S6XZQRvSuADoCbhwBKuFL5pW5n865oLVb5S3wuVdWaGwIDAQABAoIBAC/tn34Wf3kE9BGeGc1oFLVDaqqdVVz5/oEpeR2J7q0GnzMFYUpAhzC7WvY52cYsUPyll1Q9Jx0TUTmteo/uvKWQQFfz4nVMeS+2PoXabolBDzuWlsv/1eiRo0FOYHa/3siu8YcQN9X0DpAkpbfTmT1uoZOHZ3EuucMmOFu7vGn38Grw8bSxpR0uvTtnb8ygC+aB51y38RMyhzQQanrM8FMeAfDAy6IB0Yo7b0c50Cxa6Ax4nqn9LXyGakr5WeAMkgTIOA/GId9SZD4e5eRpq+628pOeR4O9datFltgl6r1+A4ii2VrJsDqeatGtODlX6KRKqwFHoGIa2TjgSZLuorECgYEAxeSZDOOgFsI5mB7RkRzZaQ9znJ15sgdyZiAFZAOUah4hSGdAXNAnZTlrdacduXEu3EfkpuPToX7xZSv5FRYwfBwMwCLeytlGLPjQzWejZGbo4+KqgzWb9fECDYVtDPlJ/+yLih9nt67BHweJKxYydl18rVigdVyy22X86NijSykCgYEAqKPUrXZAo+TJvmTw4tgsibJgvXBYBhmsej8mGNQw+Nyp2gV28sgm61ifIeXKS8teq+MFwGA6cHQedbsCqhMHokdhESZmlbWxhSFLihQcewBxwvrBwbaxI23yXRzwMewznZFL032PpcbqrmwFmcSSEZ3nmbvTH6ShqLW+pzDNp6MCgYBQLzdgxJ7qedqSa/JohTMG4e7rh9d2rpPJE7J7ewPZF8pOpx+qO+Gqn2COdJ+Ts2vUcAETKn9nEaPIZc/wnmQY9dioxbhWo0FPGaaphBPtq9Ez/XUv4zoFppk5V1X/isdUPsmvttf00oeIBiqrXbwmv+yz5JRn2Z7TTXjz9Ev+OQKBgQCUuoCMRzl1EgcXIqEL/0kwW6BUEqufHa9u1Ri9Vw6lvL8T6DPipMEmWK9nzuid9gtVns/ovTVtDgv7GuabplLaPQePf4WDzY11c0rSyS/hDyBFrK+LL5uEOqhAlJAGB2HyOj1clWVF+GvrTpuV5LZKUS/79pmZU7G7QCaX/0Ow7wKBgC/kDH7cmWQnWvvJ5izrx/7PogQVPOLELeUIGLu/hjsSdDKiFCxCUZ948+9NuG+DnpXDWzw//r8mPBRRGGsqFws5Aipp7yjQ3kRDCCzGelPCVhHyfmKqA+8ewXPulKS3/wIyHIvaXmsuAtTfurHtpRyzjKmCBK1Y6WQ3trIXvo7s-----END RSA PRIVATE KEY-----';
      var _publicKeyPem =
          '-----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglypZU45bnf2opnRI+Y51VqouBpvDT33xIB/OtbwKzwVpi+JrjBFtfk33tE9t/dSRs79CK94HRhCWcOiLa2qWPrjeZ9SBiEyScrhIvRZVBF41zBgwQNuRvJCsKmAqlZaFNJDZxEP4repmlBn1CfVFmfrXmOKqwP5F7l9ZtucveRzsfmF1yVPFkW8TMuB3YqMiyymyqHlS8ujCsu5I8tpgPbwuxdMOY94fNhSXrYkY8IuX1g1zdq/Z1jluOaR/UqK4UpnbuJaH/F0VgDNiWh6cTD0DFGEk0b70i5wU4Q3L/S6XZQRvSuADoCbhwBKuFL5pW5n865oLVb5S3wuVdWaGwIDAQAB-----END PUBLIC KEY-----';

      it('generate a signature for some data and verify the signature when SHA256withRSA is used',
         function() {
           cryptolib('asymmetric.signer', 'commons.utils', function() {

             var f = function(box) {

               var signerFactory =
                   new box.asymmetric.signer.factory.SignerFactory();
               var converters = new box.commons.utils.Converters();

               var cryptoForgeSigner = signerFactory.getCryptoSigner();

               var dataB64 = converters.base64Encode(_plaintext);

               var arrayDataBase64 = [dataB64];

               var signatureBase64 =
                   cryptoForgeSigner.sign(_privateKeyPem, arrayDataBase64);

               // Check whether digital signature can be verified.
               var verified = cryptoForgeSigner.verify(
                   signatureBase64, _publicKeyPem, arrayDataBase64);

               // Verify that digital signature was successfully verified.
               expect(verified).toBeTruthy();
             };

             f.policies = {
               asymmetric: {
                 signer: {
                   algorithm: 'RSA',
                   provider: 'Forge',
                   hash: 'SHA256',
                   publicExponent: 65537,
                   secureRandom: {provider: 'Scytl'}
                 }
               }
             };

             cryptolib('asymmetric.signer', 'commons.utils', f);
           });
         });

      it('generate a signature for some data and verify the signature when SHA256withRSA/PSS is used',
         function() {
           cryptolib('asymmetric.signer', 'commons.utils', function() {
             var f = function(box) {

               var signerFactory =
                   new box.asymmetric.signer.factory.SignerFactory();
               var converters = new box.commons.utils.Converters();

               var cryptoForgeSigner = signerFactory.getCryptoSigner();

               var dataB64 = converters.base64Encode(_plaintext);

               var arrayDataBase64 = [dataB64];
               var signatureBase64 =
                   cryptoForgeSigner.sign(_privateKeyPem, arrayDataBase64);

               // Check whether digital signature can be verified.
               var verified = cryptoForgeSigner.verify(
                   signatureBase64, _publicKeyPem, arrayDataBase64);

               // Verify that digital signature was successfully verified.
               expect(verified).toBeTruthy();
             };

             f.policies = {
               asymmetric: {
                 signer: {
                   algorithm: 'RSA',
                   provider: 'Forge',
                   hash: 'SHA256',
                   padding: {
                     PSS: {
                       name: 'PSS',
                       hash: 'SHA256',
                       mask: {MGF1: {name: 'MGF1', hash: 'SHA256'}},
                       saltLengthBytes: 32
                     }
                   },
                   publicExponent: 65537,
                   secureRandom: {provider: 'Scytl'}
                 }
               }
             };

             cryptolib('asymmetric.signer', 'commons.utils', f);
           });
         });

      it('generate a signature for an empty data and verify the signature when SHA256withRSA is used',
         function() {
           cryptolib('asymmetric.signer', 'commons.utils', function() {
             var f = function(box) {
               var signerFactory =
                   new box.asymmetric.signer.factory.SignerFactory();
               var converters = new box.commons.utils.Converters();

               var cryptoForgeSigner = signerFactory.getCryptoSigner();

               var dataB64 = converters.base64Encode('');

               var arrayDataBase64 = [dataB64];

               var signatureBase64 =
                   cryptoForgeSigner.sign(_privateKeyPem, arrayDataBase64);

               // Check whether digital signature can be verified.
               var verified = cryptoForgeSigner.verify(
                   signatureBase64, _publicKeyPem, arrayDataBase64);

               // Verify that digital signature was successfully verified.
               expect(verified).toBeTruthy();
             };

             f.policies = {
               asymmetric: {
                 signer: {
                   algorithm: 'RSA',
                   provider: 'Forge',
                   hash: 'SHA256',
                   publicExponent: 65537,
                   secureRandom: {provider: 'Scytl'}
                 }
               }
             };

             cryptolib('asymmetric.signer', 'commons.utils', f);
           });
         });

      it('detect a null element in data when signing', function() {
        cryptolib('asymmetric.signer', 'commons.utils', function() {
          var f = function(box) {
            var signerFactory =
                new box.asymmetric.signer.factory.SignerFactory();
            var converters = new box.commons.utils.Converters();

            var cryptoForgeSigner = signerFactory.getCryptoSigner();

            var dataElement1 = 'dataElement1';
            var dataElement2 = 'dataElement2';
            var dataElement3 = null;
            var dataElement4 = 'dataElement4';

            var dataElement1B64 = converters.base64Encode(dataElement1);
            var dataElement2B64 = converters.base64Encode(dataElement2);
            var dataElement4B64 = converters.base64Encode(dataElement4);

            var arrayDataBase64 = [
              dataElement1B64, dataElement2B64, dataElement3, dataElement4B64
            ];

            var call = function() {
              cryptoForgeSigner.sign(_privateKeyPem, arrayDataBase64);
            };
            expect(call).toThrow();
          };

          f.policies = {
            asymmetric: {
              signer: {
                algorithm: 'RSA',
                provider: 'Forge',
                hash: 'SHA256',
                publicExponent: 65537,
                secureRandom: {provider: 'Scytl'}
              }
            }
          };

          cryptolib('asymmetric.signer', 'commons.utils', f);
        });
      });

      it('detect that a signature is false when SHA256withRSA is used',
         function() {
           cryptolib('asymmetric.signer', 'commons.utils', function() {
             var f = function(box) {

               var signerFactory =
                   new box.asymmetric.signer.factory.SignerFactory();
               var converters = new box.commons.utils.Converters();

               var cryptoForgeSigner = signerFactory.getCryptoSigner();

               var dataB64 = converters.base64Encode(_plaintext);
               var dataB64Different =
                   converters.base64Encode('Some other string.');

               var arrayDataBase64 = [dataB64];
               var arrayDataBase64Different = [dataB64Different];

               var signatureBase64 =
                   cryptoForgeSigner.sign(_privateKeyPem, arrayDataBase64);

               // Check whether digital signature can be verified.
               var verified = cryptoForgeSigner.verify(
                   signatureBase64, _publicKeyPem, arrayDataBase64Different);

               // Verify that digital signature was successfully verified.
               expect(!verified).toBeTruthy();
             };


             f.policies = {
               asymmetric: {
                 signer: {
                   algorithm: 'RSA',
                   provider: 'Forge',
                   hash: 'SHA256',
                   publicExponent: 65537,
                   secureRandom: {provider: 'Scytl'}
                 }
               }
             };

             cryptolib('asymmetric.signer', 'commons.utils', f);
           });
         });

      it('detect that a signature is false when SHA256withRSA/PSS is used',
         function() {
           cryptolib('asymmetric.signer', 'commons.utils', function() {
             var f = function(box) {

               var signerFactory =
                   new box.asymmetric.signer.factory.SignerFactory();
               var converters = new box.commons.utils.Converters();

               var cryptoForgeSigner = signerFactory.getCryptoSigner();

               var dataB64 = converters.base64Encode(_plaintext);
               var dataB64Different =
                   converters.base64Encode('Some other string.');

               var arrayDataBase64 = [dataB64];
               var arrayDataBase64Different = [dataB64Different];

               var signatureBase64 =
                   cryptoForgeSigner.sign(_privateKeyPem, arrayDataBase64);

               // Check whether digital signature can be verified.
               var verified = cryptoForgeSigner.verify(
                   signatureBase64, _publicKeyPem, arrayDataBase64Different);

               // Verify that digital signature was successfully verified.
               expect(!verified).toBeTruthy();
             };


             f.policies = {
               asymmetric: {
                 signer: {
                   algorithm: 'RSA',
                   provider: 'Forge',
                   hash: 'SHA256',
                   padding: {
                     PSS: {
                       name: 'PSS',
                       hash: 'SHA256',
                       mask: {MGF1: {name: 'MGF1', hash: 'SHA256'}},
                       saltLengthBytes: 32
                     }
                   },
                   publicExponent: 65537,
                   secureRandom: {provider: 'Scytl'}
                 }
               }
             };

             cryptolib('asymmetric.signer', 'commons.utils', f);
           });
         });

      it('verify a RSA signature that was generated in Java', function() {
        cryptolib('asymmetric.signer', 'commons.utils', function() {
          var f = function(box) {

            var signerFactory =
                new box.asymmetric.signer.factory.SignerFactory();
            var converters = new box.commons.utils.Converters();

            var cryptoForgeSigner = signerFactory.getCryptoSigner();

            var signedData = 'This is a string from Java.';
            var signedDataB64 = converters.base64Encode(signedData);
            var arraySignedDataB64 = [signedDataB64];

            // this is a signature generated in Java (using RSA)
            var signatureFromJavaRsa =
                'KuQPmBRE/JpNQ5mvh1Y1LvW3Jr/ZYlYqOgdbgXLVZp+gjVtXHDgFZzIrC8+S+VdTs9WINjxN8aIZlbiemZ+YvXZ7fDOoJsZJRboyrFN9VGz6sWWVXAv28Xj1a2lPNlys8dO3uY0s5R77kDCvBHV4nJh0Hq2Ry+JRjRcrlPsIiDWzm9iTY7V6XzkVGCo58qWyQtloC0s73i8UM6V2nYu1oGDuHqUcvDbstElGAJrn7u4QtP2Kgzd1GSkvbSKhsjR2RniiJ7cD278i27NAEPXY+qqmWQ4c+zt3BKG4Aj4EtKa/4AyARmLC78KjZpfiGPTUzQZbMQudAMmKgSTQhx7ONg==';

            // Check whether digital signature can be verified.
            var verified = cryptoForgeSigner.verify(
                signatureFromJavaRsa, _publicKeyPem, arraySignedDataB64);

            // Verify that digital signature was successfully verified.
            expect(verified).toBeTruthy();
          };

          f.policies = {
            asymmetric: {
              signer: {
                algorithm: 'RSA',
                provider: 'Forge',
                hash: 'SHA256',
                publicExponent: 65537,
                secureRandom: {provider: 'Scytl'}
              }
            }
          };

          cryptolib('asymmetric.signer', 'commons.utils', f);
        });
      });


      it('verify a RSA/PSS signature that was generated in Java', function() {
        cryptolib('asymmetric.signer', 'commons.utils', function() {
          var f = function(box) {
            var signerFactory =
                new box.asymmetric.signer.factory.SignerFactory();
            var converters = new box.commons.utils.Converters();

            var cryptoForgeSigner = signerFactory.getCryptoSigner();

            var signedData = 'This is a string from Java.';
            var signedDataB64 = converters.base64Encode(signedData);
            var arraySignedDataB64 = [signedDataB64];

            // This is a signature generated in Java (using RSA/PSS)
            var signatureFromJavaRsa =
                'JSYZ0i3Yz3L8J3bUOLOP/Kk83qkhoZ9NqBm9eUpaFoZY8gD42XHJxXyPmDYMnDFMr+J5GypfS9vheYtgn2hag8n3DcG86I80UCNuEZLEhyXpIsN4mv3rDb/xjMXlnDLWiK6MTBTDVImKfwpX6x/xw9YtcG9ADACRefH4++H9fhpg8yXUfT9OacOPHgjoW/y4hJmaKVk+IVDgLAKfToNWwVm2xU0SnFryQ9PUJeR8KHttBLR+gpZZpn+bQMcEvikw8bzAYGX4yXxGB9UgoIsz6xNyxY6P6UyJSal/JajURLuSwW7JpxjtthbyKS6SUXtH+NEg36ZpMhd8QC6EPzwrlQ==';

            // Check whether digital signature can be verified.
            var verified = cryptoForgeSigner.verify(
                signatureFromJavaRsa, _publicKeyPem, arraySignedDataB64);

            // Verify that digital signature was successfully verified.
            expect(verified).toBeTruthy();
          };

          f.policies = {
            asymmetric: {
              signer: {
                algorithm: 'RSA',
                provider: 'Forge',
                hash: 'SHA256',
                padding: {
                  PSS: {
                    name: 'PSS',
                    hash: 'SHA256',
                    mask: {MGF1: {name: 'MGF1', hash: 'SHA256'}},
                    saltLengthBytes: 32
                  }
                },
                publicExponent: 65537,
                secureRandom: {provider: 'Scytl'}
              }
            }
          };

          cryptolib('asymmetric.signer', 'commons.utils', f);
        });
      });

      it('generate a RSA digital signature for some data and verify the signature.',
         function() {
           cryptolib('asymmetric.signer', 'commons.utils', function(box) {
             var signerFactory =
                 new box.asymmetric.signer.factory.SignerFactory();
             var converters = new box.commons.utils.Converters();

             var cryptoForgeSigner = signerFactory.getCryptoSigner();

             var dataB64 = converters.base64Encode(_plaintext);

             var arrayDataBase64 = [dataB64];

             var signatureBase64 =
                 cryptoForgeSigner.sign(_privateKeyPem, arrayDataBase64);

             // Check whether digital signature can be verified.
             var verified = cryptoForgeSigner.verify(
                 signatureBase64, _publicKeyPem, arrayDataBase64);

             // Verify that digital signature was successfully verified.
             expect(verified).toBeTruthy();
           });
         });

      it('throw an error when the array of data is null.', function() {
        cryptolib('asymmetric.signer', function(box) {
          var signerFactory = new box.asymmetric.signer.factory.SignerFactory();

          var cryptoForgeSigner = signerFactory.getCryptoSigner();

          expect(function() {
            cryptoForgeSigner.sign(_privateKeyPem, null);
          }).toThrow();
        });
      });

      it('throw an error when the array of data contains less than one element.',
         function() {
           cryptolib('asymmetric.signer', function(box) {
             var signerFactory =
                 new box.asymmetric.signer.factory.SignerFactory();

             var cryptoForgeSigner = signerFactory.getCryptoSigner();

             var arrayDataBase64 = [];

             expect(function() {
               cryptoForgeSigner.sign(_privateKeyPem, arrayDataBase64);
             }).toThrow();
           });
         });

      it('throw an error when the given algorithm is wrong.', function() {

        var f = function(box) {
          var signerFactory = new box.asymmetric.signer.factory.SignerFactory();
          expect(function() {
            signerFactory.getCryptoSigner();
          }).toThrow();
        };
        f.policies = {
          asymmetric: {
            signer: {
              algorithm: 'WRONG',
              provider: 'Forge',
              secureRandom: {provider: 'Scytl'}
            }
          }
        };
        cryptolib('asymmetric.signer', f);
      });

      it('throw an error when the given provider is wrong.', function() {
        var f = function(box) {
          var signerFactory = new box.asymmetric.signer.factory.SignerFactory();
          expect(function() {
            signerFactory.getCryptoSigner();
          }).toThrow();
        };
        f.policies = {
          asymmetric: {
            signer: {
              algorithm: 'CORRECT',
              provider: 'WRONG',
              secureRandom: {provider: 'Scytl'}
            }
          }
        };
        cryptolib('asymmetric.signer', f);
      });

      it('throw an error when the given hash algorithm is wrong.', function() {
        var f = function(box) {
          var signerFactory = new box.asymmetric.signer.factory.SignerFactory();
          expect(function() {
            signerFactory.getCryptoSigner();
          }).toThrow();
        };
        f.policies = {
          asymmetric: {
            signer: {
              algorithm: 'RSA',
              hash: 'WRONG',
              provider: 'Forge',
              secureRandom: {provider: 'Scytl'}
            }
          }
        };
        cryptolib('asymmetric.signer', f);
      });
    });
  });
});