jdk-24/test/jdk/sun/security/pkcs11/Signature/KeyAndParamCheckForPSS.java

/*
 * Copyright (c) 2019, 2023, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */
import java.security.*;
import java.security.interfaces.*;
import java.security.spec.*;

import jtreg.SkippedException;

/**
 * @test
 * @bug 8080462 8226651 8242332
 * @summary Ensure that PSS key and params check are implemented properly
 *         regardless of call sequence
 * @library /test/lib ..
 * @modules jdk.crypto.cryptoki
 * @run main KeyAndParamCheckForPSS
 */
public class KeyAndParamCheckForPSS extends PKCS11Test {

    private static final String SIGALG = "RSASSA-PSS";

    public static void main(String[] args) throws Exception {
        main(new KeyAndParamCheckForPSS(), args);
    }

    private static boolean skipTest = true;

    @Override
    public void main(Provider p) throws Exception {
        if (!PSSUtil.isSignatureSupported(p)) {
            throw new SkippedException("Skip due to no support for " +
                    SIGALG);
        }

        // NOTE: key length >= (digest length + 2) in bytes
        // otherwise, even salt length = 0 would not work
        runTest(p, 1024, "SHA-256", "SHA-256");
        runTest(p, 1024, "SHA-256", "SHA-384");
        runTest(p, 1024, "SHA-256", "SHA-512");
        runTest(p, 1024, "SHA-384", "SHA-256");
        runTest(p, 1024, "SHA-384", "SHA-384");
        runTest(p, 1024, "SHA-384", "SHA-512");
        runTest(p, 1040, "SHA-512", "SHA-256");
        runTest(p, 1040, "SHA-512", "SHA-384");
        runTest(p, 1040, "SHA-512", "SHA-512");
        runTest(p, 1024, "SHA3-256", "SHA3-256");
        runTest(p, 1024, "SHA3-256", "SHA3-384");
        runTest(p, 1024, "SHA3-256", "SHA3-512");
        runTest(p, 1024, "SHA3-384", "SHA3-256");
        runTest(p, 1024, "SHA3-384", "SHA3-384");
        runTest(p, 1024, "SHA3-384", "SHA3-512");
        runTest(p, 1040, "SHA3-512", "SHA3-256");
        runTest(p, 1040, "SHA3-512", "SHA3-384");
        runTest(p, 1040, "SHA3-512", "SHA3-512");

        if (skipTest) {
            throw new SkippedException("Test Skipped");
        }
    }

    private static void runTest(Provider p, int keySize, String hashAlg,
            String mgfHashAlg) throws Exception {

        System.out.println("Testing " + hashAlg + " and MGF1" + mgfHashAlg);
        PSSUtil.AlgoSupport s = PSSUtil.isHashSupported(p, hashAlg, mgfHashAlg);
        if (s == PSSUtil.AlgoSupport.NO) {
            System.out.println("=> Skip; no support");
            return;
        }

        Signature sig = Signature.getInstance(SIGALG, p);

        // create a key pair with the supplied size
        KeyPair kp = PSSUtil.generateKeys(p, keySize);

        int bigSaltLen = keySize/8 - 14;
        AlgorithmParameterSpec paramsBad = new PSSParameterSpec(hashAlg,
            "MGF1", new MGF1ParameterSpec(mgfHashAlg), bigSaltLen, 1);
        AlgorithmParameterSpec paramsGood = new PSSParameterSpec(hashAlg,
            "MGF1", new MGF1ParameterSpec(mgfHashAlg), 0, 1);

        PrivateKey priv = kp.getPrivate();
        PublicKey pub = kp.getPublic();

        // test#1 - setParameter then initSign
        sig = Signature.getInstance(SIGALG, p);
        try {
            sig.setParameter(paramsGood);
            sig.initSign(priv);
            // algorithm support confirmed
            skipTest = false;
        } catch (Exception ex) {
            if (s == PSSUtil.AlgoSupport.MAYBE) {
                // confirmed to be unsupported; skip the rest of the test
                System.out.println("=> Skip; no PSS support");
                return;
            } else {
                throw new RuntimeException("Unexpected Exception", ex);
            }
        }

        sig = Signature.getInstance(SIGALG, p);
        try {
            sig.setParameter(paramsBad);
            sig.initSign(priv);
            throw new RuntimeException("Expected IKE not thrown");
        } catch (InvalidKeyException ike) {
            // expected
        }

        // test#2 - setParameter then initVerify
        sig = Signature.getInstance(SIGALG, p);
        sig.setParameter(paramsGood);
        sig.initVerify(pub);

        sig = Signature.getInstance(SIGALG, p);
        try {
            sig.setParameter(paramsBad);
            sig.initVerify(pub);
            throw new RuntimeException("Expected IKE not thrown");
        } catch (InvalidKeyException ike) {
            // expected
        }

        // test#3 - initSign, then setParameter
        sig = Signature.getInstance(SIGALG, p);
        sig.initSign(priv);
        sig.setParameter(paramsGood);

        sig = Signature.getInstance(SIGALG, p);
        try {
            sig.initSign(priv);
            sig.setParameter(paramsBad);
            throw new RuntimeException("Expected IAPE not thrown");
        } catch (InvalidAlgorithmParameterException iape) {
            // expected
        }

        // test#4 - initVerify, then setParameter
        sig = Signature.getInstance(SIGALG, p);
        sig.setParameter(paramsGood);
        sig.initVerify(pub);

        sig = Signature.getInstance(SIGALG, p);
        try {
            sig.initVerify(pub);
            sig.setParameter(paramsBad);
            throw new RuntimeException("Expected IAPE not thrown");
        } catch (InvalidAlgorithmParameterException iape) {
            // expected
        }
    }
}