commonware_cryptography/secp256r1/
scheme.rs

1use crate::{Array, Signer as CommonwareSigner, Specification, Verifier as CommonwareVerifier};
2use bytes::{Buf, BufMut};
3use commonware_codec::{Error as CodecError, FixedSize, Read, ReadExt, Write};
4use commonware_utils::{hex, union_unique};
5use p256::{
6    ecdsa::{
7        signature::{Signer, Verifier},
8        SigningKey, VerifyingKey,
9    },
10    elliptic_curve::scalar::IsHigh,
11};
12use rand::{CryptoRng, Rng};
13use std::{
14    borrow::Cow,
15    fmt::{Debug, Display},
16    hash::{Hash, Hasher},
17    ops::Deref,
18};
19use zeroize::{Zeroize, ZeroizeOnDrop};
20
21const CURVE_NAME: &str = "secp256r1";
22const PRIVATE_KEY_LENGTH: usize = 32;
23const PUBLIC_KEY_LENGTH: usize = 33; // Y-Parity || X
24const SIGNATURE_LENGTH: usize = 64; // R || S
25
26/// Secp256r1 Signer.
27#[derive(Clone)]
28pub struct Secp256r1 {
29    signer: SigningKey,
30    verifier: VerifyingKey,
31}
32
33impl Specification for Secp256r1 {
34    type PublicKey = PublicKey;
35    type Signature = Signature;
36}
37
38impl CommonwareVerifier for Secp256r1 {
39    fn verify(
40        namespace: Option<&[u8]>,
41        message: &[u8],
42        public_key: &PublicKey,
43        signature: &Signature,
44    ) -> bool {
45        let payload = match namespace {
46            Some(namespace) => Cow::Owned(union_unique(namespace, message)),
47            None => Cow::Borrowed(message),
48        };
49        public_key
50            .key
51            .verify(&payload, &signature.signature)
52            .is_ok()
53    }
54}
55
56impl CommonwareSigner for Secp256r1 {
57    type PrivateKey = PrivateKey;
58
59    fn new<R: CryptoRng + Rng>(r: &mut R) -> Self {
60        let signer = SigningKey::random(r);
61        let verifier = signer.verifying_key().to_owned();
62        Self { signer, verifier }
63    }
64
65    fn from(private_key: PrivateKey) -> Option<Self> {
66        let signer = private_key.key.clone();
67        let verifier = signer.verifying_key().to_owned();
68        Some(Self { signer, verifier })
69    }
70
71    fn private_key(&self) -> PrivateKey {
72        PrivateKey::from(self.signer.clone())
73    }
74
75    fn public_key(&self) -> PublicKey {
76        PublicKey::from(self.verifier)
77    }
78
79    fn sign(&mut self, namespace: Option<&[u8]>, message: &[u8]) -> Signature {
80        let signature: p256::ecdsa::Signature = match namespace {
81            Some(namespace) => self.signer.sign(&union_unique(namespace, message)),
82            None => self.signer.sign(message),
83        };
84        let signature = match signature.normalize_s() {
85            Some(normalized) => normalized,
86            None => signature,
87        };
88        Signature::from(signature)
89    }
90}
91
92/// Secp256r1 Private Key.
93#[derive(Clone, Eq, PartialEq, Zeroize, ZeroizeOnDrop)]
94pub struct PrivateKey {
95    raw: [u8; PRIVATE_KEY_LENGTH],
96    // `ZeroizeOnDrop` is implemented for `SigningKey` and can't be called directly.
97    //
98    // Reference: https://github.com/RustCrypto/signatures/blob/a83c494216b6f3dacba5d4e4376785e2ea142044/ecdsa/src/signing.rs#L487-L493
99    #[zeroize(skip)]
100    key: SigningKey,
101}
102
103impl Write for PrivateKey {
104    fn write(&self, buf: &mut impl BufMut) {
105        self.raw.write(buf);
106    }
107}
108
109impl Read for PrivateKey {
110    type Cfg = ();
111
112    fn read_cfg(buf: &mut impl Buf, _: &()) -> Result<Self, CodecError> {
113        let raw = <[u8; Self::SIZE]>::read(buf)?;
114        let key =
115            SigningKey::from_slice(&raw).map_err(|e| CodecError::Wrapped(CURVE_NAME, e.into()))?;
116        Ok(Self { raw, key })
117    }
118}
119
120impl FixedSize for PrivateKey {
121    const SIZE: usize = PRIVATE_KEY_LENGTH;
122}
123
124impl Array for PrivateKey {}
125
126impl Hash for PrivateKey {
127    fn hash<H: Hasher>(&self, state: &mut H) {
128        self.raw.hash(state);
129    }
130}
131
132impl Ord for PrivateKey {
133    fn cmp(&self, other: &Self) -> std::cmp::Ordering {
134        self.raw.cmp(&other.raw)
135    }
136}
137
138impl PartialOrd for PrivateKey {
139    fn partial_cmp(&self, other: &Self) -> Option<std::cmp::Ordering> {
140        Some(self.cmp(other))
141    }
142}
143
144impl AsRef<[u8]> for PrivateKey {
145    fn as_ref(&self) -> &[u8] {
146        &self.raw
147    }
148}
149
150impl Deref for PrivateKey {
151    type Target = [u8];
152    fn deref(&self) -> &[u8] {
153        &self.raw
154    }
155}
156
157impl From<SigningKey> for PrivateKey {
158    fn from(signer: SigningKey) -> Self {
159        let raw = signer.to_bytes().into();
160        Self { raw, key: signer }
161    }
162}
163
164impl Debug for PrivateKey {
165    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
166        write!(f, "{}", hex(&self.raw))
167    }
168}
169
170impl Display for PrivateKey {
171    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
172        write!(f, "{}", hex(&self.raw))
173    }
174}
175
176/// Secp256r1 Public Key.
177#[derive(Clone, Eq, PartialEq, Ord, PartialOrd)]
178pub struct PublicKey {
179    raw: [u8; PUBLIC_KEY_LENGTH],
180    key: VerifyingKey,
181}
182
183impl Write for PublicKey {
184    fn write(&self, buf: &mut impl BufMut) {
185        self.raw.write(buf);
186    }
187}
188
189impl Read for PublicKey {
190    type Cfg = ();
191
192    fn read_cfg(buf: &mut impl Buf, _: &()) -> Result<Self, CodecError> {
193        let raw = <[u8; PUBLIC_KEY_LENGTH]>::read(buf)?;
194        let key = VerifyingKey::from_sec1_bytes(&raw)
195            .map_err(|_| CodecError::Invalid(CURVE_NAME, "Invalid PublicKey"))?;
196        Ok(Self { raw, key })
197    }
198}
199
200impl FixedSize for PublicKey {
201    const SIZE: usize = PUBLIC_KEY_LENGTH;
202}
203
204impl Array for PublicKey {}
205
206impl Hash for PublicKey {
207    fn hash<H: Hasher>(&self, state: &mut H) {
208        self.raw.hash(state);
209    }
210}
211
212impl AsRef<[u8]> for PublicKey {
213    fn as_ref(&self) -> &[u8] {
214        &self.raw
215    }
216}
217
218impl Deref for PublicKey {
219    type Target = [u8];
220    fn deref(&self) -> &[u8] {
221        &self.raw
222    }
223}
224
225impl From<VerifyingKey> for PublicKey {
226    fn from(verifier: VerifyingKey) -> Self {
227        let encoded = verifier.to_encoded_point(true);
228        let raw: [u8; PUBLIC_KEY_LENGTH] = encoded.as_bytes().try_into().unwrap();
229        Self { raw, key: verifier }
230    }
231}
232
233impl Debug for PublicKey {
234    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
235        write!(f, "{}", hex(&self.raw))
236    }
237}
238
239impl Display for PublicKey {
240    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
241        write!(f, "{}", hex(&self.raw))
242    }
243}
244
245/// Secp256r1 Signature.
246#[derive(Clone, Eq, PartialEq)]
247pub struct Signature {
248    raw: [u8; SIGNATURE_LENGTH],
249    signature: p256::ecdsa::Signature,
250}
251
252impl Write for Signature {
253    fn write(&self, buf: &mut impl BufMut) {
254        self.raw.write(buf);
255    }
256}
257
258impl Read for Signature {
259    type Cfg = ();
260
261    fn read_cfg(buf: &mut impl Buf, _: &()) -> Result<Self, CodecError> {
262        let raw = <[u8; Self::SIZE]>::read(buf)?;
263        let signature = p256::ecdsa::Signature::from_slice(&raw)
264            .map_err(|e| CodecError::Wrapped(CURVE_NAME, e.into()))?;
265        if signature.s().is_high().into() {
266            // Reject any signatures with a `s` value in the upper half of the curve order.
267            return Err(CodecError::Invalid(CURVE_NAME, "Signature S is high"));
268        }
269        Ok(Self { raw, signature })
270    }
271}
272
273impl FixedSize for Signature {
274    const SIZE: usize = SIGNATURE_LENGTH;
275}
276
277impl Array for Signature {}
278
279impl Hash for Signature {
280    fn hash<H: Hasher>(&self, state: &mut H) {
281        self.raw.hash(state);
282    }
283}
284
285impl Ord for Signature {
286    fn cmp(&self, other: &Self) -> std::cmp::Ordering {
287        self.raw.cmp(&other.raw)
288    }
289}
290
291impl PartialOrd for Signature {
292    fn partial_cmp(&self, other: &Self) -> Option<std::cmp::Ordering> {
293        Some(self.cmp(other))
294    }
295}
296
297impl AsRef<[u8]> for Signature {
298    fn as_ref(&self) -> &[u8] {
299        &self.raw
300    }
301}
302
303impl Deref for Signature {
304    type Target = [u8];
305    fn deref(&self) -> &[u8] {
306        &self.raw
307    }
308}
309
310impl From<p256::ecdsa::Signature> for Signature {
311    fn from(signature: p256::ecdsa::Signature) -> Self {
312        let raw = signature.to_bytes().into();
313        Self { raw, signature }
314    }
315}
316
317impl Debug for Signature {
318    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
319        write!(f, "{}", hex(&self.raw))
320    }
321}
322
323impl Display for Signature {
324    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
325        write!(f, "{}", hex(&self.raw))
326    }
327}
328
329/// Test vectors sourced from (FIPS 186-4)
330/// https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/digital-signatures.
331#[cfg(test)]
332mod tests {
333    use super::*;
334    use bytes::Bytes;
335    use commonware_codec::{DecodeExt, Encode};
336
337    fn create_private_key() -> PrivateKey {
338        const HEX: &str = "519b423d715f8b581f4fa8ee59f4771a5b44c8130b4e3eacca54a56dda72b464";
339        PrivateKey::decode(commonware_utils::from_hex_formatted(HEX).unwrap().as_ref()).unwrap()
340    }
341
342    fn parse_vector_keypair(private_key: &str, qx: &str, qy: &str) -> (PrivateKey, PublicKey) {
343        let public_key = parse_public_key_as_compressed(qx, qy);
344        (
345            PrivateKey::decode(
346                commonware_utils::from_hex_formatted(private_key)
347                    .unwrap()
348                    .as_ref(),
349            )
350            .unwrap(),
351            public_key,
352        )
353    }
354
355    fn parse_vector_sig_verification(
356        qx: &str,
357        qy: &str,
358        r: &str,
359        s: &str,
360        m: &str,
361    ) -> (PublicKey, Vec<u8>, Vec<u8>) {
362        let public_key = parse_public_key_as_compressed(qx, qy);
363        let signature = parse_signature(r, s);
364        let message = commonware_utils::from_hex_formatted(m).unwrap();
365        (public_key, signature, message)
366    }
367
368    fn parse_signature(r: &str, s: &str) -> Vec<u8> {
369        let vec_r = commonware_utils::from_hex_formatted(r).unwrap();
370        let vec_s = commonware_utils::from_hex_formatted(s).unwrap();
371        let f1 = p256::FieldBytes::from_slice(&vec_r);
372        let f2 = p256::FieldBytes::from_slice(&vec_s);
373        let s = p256::ecdsa::Signature::from_scalars(*f1, *f2).unwrap();
374        s.to_vec()
375    }
376
377    fn parse_public_key_as_compressed(qx: &str, qy: &str) -> PublicKey {
378        PublicKey::decode(parse_public_key_as_compressed_vector(qx, qy).as_ref()).unwrap()
379    }
380
381    fn parse_public_key_as_compressed_vector(qx: &str, qy: &str) -> Vec<u8> {
382        let qx = commonware_utils::from_hex_formatted(&padding_odd_length_hex(qx)).unwrap();
383        let qy = commonware_utils::from_hex_formatted(&padding_odd_length_hex(qy)).unwrap();
384        let mut compressed = Vec::with_capacity(qx.len() + 1);
385        if qy.last().unwrap() % 2 == 0 {
386            compressed.push(0x02);
387        } else {
388            compressed.push(0x03);
389        }
390        compressed.extend_from_slice(&qx);
391        compressed
392    }
393
394    fn parse_public_key_as_uncompressed_vector(qx: &str, qy: &str) -> Vec<u8> {
395        let qx = commonware_utils::from_hex_formatted(qx).unwrap();
396        let qy = commonware_utils::from_hex_formatted(qy).unwrap();
397        let mut uncompressed_public_key = Vec::with_capacity(65);
398        uncompressed_public_key.push(0x04);
399        uncompressed_public_key.extend_from_slice(&qx);
400        uncompressed_public_key.extend_from_slice(&qy);
401        uncompressed_public_key
402    }
403
404    fn padding_odd_length_hex(value: &str) -> String {
405        if value.len() % 2 != 0 {
406            return format!("0{}", value);
407        }
408        value.to_string()
409    }
410
411    #[test]
412    fn test_codec_private_key() {
413        let original: PrivateKey = create_private_key();
414        let encoded = original.encode();
415        assert_eq!(encoded.len(), PRIVATE_KEY_LENGTH);
416
417        let decoded = PrivateKey::decode(encoded).unwrap();
418        assert_eq!(original, decoded);
419    }
420
421    #[test]
422    fn test_codec_public_key() {
423        let private_key = create_private_key();
424        let signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
425        let original: PublicKey = signer.public_key();
426
427        let encoded = original.encode();
428        assert_eq!(encoded.len(), PUBLIC_KEY_LENGTH);
429
430        let decoded = PublicKey::decode(encoded).unwrap();
431        assert_eq!(original, decoded);
432    }
433
434    #[test]
435    fn test_codec_signature() {
436        let private_key = create_private_key();
437        let mut signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
438        let original = signer.sign(None, "Hello World".as_bytes());
439
440        let encoded = original.encode();
441        assert_eq!(encoded.len(), SIGNATURE_LENGTH);
442
443        let decoded = Signature::decode(encoded).unwrap();
444        assert_eq!(original, decoded);
445    }
446
447    #[test]
448    fn test_codec_signature_invalid() {
449        let (_, sig, ..) = vector_sig_verification_5();
450        let result = Signature::decode(Bytes::from(sig));
451        assert!(result.is_err());
452    }
453
454    #[test]
455    fn test_scheme_sign() {
456        let private_key: PrivateKey = PrivateKey::decode(
457            commonware_utils::from_hex_formatted(
458                "519b423d715f8b581f4fa8ee59f4771a5b44c8130b4e3eacca54a56dda72b464",
459            )
460            .unwrap()
461            .as_ref(),
462        )
463        .unwrap();
464        let message = commonware_utils::from_hex_formatted(
465            "5905238877c77421f73e43ee3da6f2d9e2ccad5fc942dcec0cbd25482935faaf416983fe165b1a045e
466            e2bcd2e6dca3bdf46c4310a7461f9a37960ca672d3feb5473e253605fb1ddfd28065b53cb5858a8ad28175bf
467            9bd386a5e471ea7a65c17cc934a9d791e91491eb3754d03799790fe2d308d16146d5c9b0d0debd97d79ce8",
468        )
469        .unwrap();
470        let mut signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
471        let signature = signer.sign(None, &message);
472        assert_eq!(SIGNATURE_LENGTH, signature.len());
473        assert!(Secp256r1::verify(
474            None,
475            &message,
476            &signer.public_key(),
477            &signature
478        ));
479    }
480
481    #[test]
482    fn test_scheme_private_key() {
483        let private_key_hex = "519b423d715f8b581f4fa8ee59f4771a5b44c8130b4e3eacca54a56dda72b464";
484        let private_key: PrivateKey = PrivateKey::decode(
485            commonware_utils::from_hex_formatted(private_key_hex)
486                .unwrap()
487                .as_ref(),
488        )
489        .unwrap();
490        let signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
491        let exported_private_key = signer.private_key();
492        assert_eq!(
493            private_key_hex,
494            commonware_utils::hex(&exported_private_key).as_str(),
495        );
496    }
497
498    #[test]
499    fn test_decode_zero_signature_fails() {
500        let result = Signature::decode(vec![0u8; SIGNATURE_LENGTH].as_ref());
501        assert!(result.is_err());
502    }
503
504    #[test]
505    fn test_decode_high_s_signature_fails() {
506        let (private_key, _) = vector_keypair_1();
507        let message = b"edge";
508        let mut signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
509        let signature = signer.sign(None, message);
510        let mut bad_signature = signature.to_vec();
511        bad_signature[32] |= 0x80; // force S into upper range
512        assert!(Signature::decode(bad_signature.as_ref()).is_err());
513    }
514
515    #[test]
516    fn test_decode_zero_r_signature_fails() {
517        let (private_key, _) = vector_keypair_1();
518        let message = b"edge";
519        let mut signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
520        let signature = signer.sign(None, message);
521        let mut bad_signature = signature.to_vec();
522        for b in bad_signature.iter_mut().take(32) {
523            *b = 0x00;
524        }
525        // ensure S component is non-zero
526        bad_signature[32] = 1;
527        assert!(Signature::decode(bad_signature.as_ref()).is_err());
528    }
529
530    // Ensure RFC6979 compliance (should also be tested by underlying library)
531    #[test]
532    fn test_rfc6979() {
533        let private_key: PrivateKey = PrivateKey::decode(
534            commonware_utils::from_hex_formatted(
535                "c9afa9d845ba75166b5c215767b1d6934e50c3db36e89b127b8a622b120f6721",
536            )
537            .unwrap()
538            .as_ref(),
539        )
540        .unwrap();
541
542        let (message, exp_sig) = (
543            b"sample",
544            p256::ecdsa::Signature::from_slice(
545                &commonware_utils::from_hex_formatted(
546                    "efd48b2aacb6a8fd1140dd9cd45e81d69d2c877b56aaf991c34d0ea84eaf3716
547                    f7cb1c942d657c41d436c7a1b6e29f65f3e900dbb9aff4064dc4ab2f843acda8",
548                )
549                .unwrap(),
550            )
551            .unwrap(),
552        );
553        let mut signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
554        let signature = signer.sign(None, message);
555        assert_eq!(signature.to_vec(), exp_sig.normalize_s().unwrap().to_vec());
556
557        let (message, exp_sig) = (
558            b"test",
559            p256::ecdsa::Signature::from_slice(
560                &commonware_utils::from_hex_formatted(
561                    "f1abb023518351cd71d881567b1ea663ed3efcf6c5132b354f28d3b0b7d38367
562                    019f4113742a2b14bd25926b49c649155f267e60d3814b4c0cc84250e46f0083",
563                )
564                .unwrap(),
565            )
566            .unwrap(),
567        );
568
569        let signature = signer.sign(None, message);
570        assert_eq!(signature.to_vec(), exp_sig.to_vec());
571    }
572
573    #[test]
574    fn test_scheme_validate_public_key_too_long() {
575        let qx_hex = "d0720dc691aa80096ba32fed1cb97c2b620690d06de0317b8618d5ce65eb728f";
576        let qy_hex = "d0720dc691aa80096ba32fed1cb97c2b620690d06de0317b8618d5ce65eb728f";
577
578        // Invalid
579        let uncompressed_public_key = parse_public_key_as_uncompressed_vector(qx_hex, qy_hex);
580        let public_key =
581            <Secp256r1 as Specification>::PublicKey::decode(uncompressed_public_key.as_ref());
582        assert!(matches!(public_key, Err(CodecError::Invalid(_, _))));
583
584        // Too long
585        let mut compressed_public_key = parse_public_key_as_compressed_vector(qx_hex, qy_hex);
586        compressed_public_key.push(0u8);
587        let public_key =
588            <Secp256r1 as Specification>::PublicKey::decode(compressed_public_key.as_ref());
589        assert!(matches!(public_key, Err(CodecError::ExtraData(1))));
590
591        // Valid
592        let compressed_public_key = parse_public_key_as_compressed_vector(qx_hex, qy_hex);
593        let public_key =
594            <Secp256r1 as Specification>::PublicKey::decode(compressed_public_key.as_ref());
595        assert!(public_key.is_ok());
596    }
597
598    #[test]
599    fn test_scheme_verify_signature_r0() {
600        // Generate bad signature
601        let private_key: PrivateKey = PrivateKey::decode(
602            commonware_utils::from_hex_formatted(
603                "c9806898a0334916c860748880a541f093b579a9b1f32934d86c363c39800357",
604            )
605            .unwrap()
606            .as_ref(),
607        )
608        .unwrap();
609        let message = b"sample";
610        let mut signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
611        let signature = signer.sign(None, message);
612        let (_, s) = signature.split_at(32);
613        let mut signature: Vec<u8> = vec![0x00; 32];
614        signature.extend_from_slice(s);
615
616        // Try to parse signature
617        assert!(Signature::decode(signature.as_ref()).is_err());
618    }
619
620    #[test]
621    fn test_scheme_verify_signature_s0() {
622        // Generate bad signature
623        let private_key: PrivateKey = PrivateKey::decode(
624            commonware_utils::from_hex_formatted(
625                "c9806898a0334916c860748880a541f093b579a9b1f32934d86c363c39800357",
626            )
627            .unwrap()
628            .as_ref(),
629        )
630        .unwrap();
631        let message = b"sample";
632        let mut signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
633        let signature = signer.sign(None, message);
634        let (r, _) = signature.split_at(32);
635        let s: Vec<u8> = vec![0x00; 32];
636        let mut signature = r.to_vec();
637        signature.extend(s);
638
639        // Try to parse signature
640        assert!(Signature::decode(signature.as_ref()).is_err());
641    }
642
643    #[test]
644    fn test_keypairs() {
645        let cases = [
646            vector_keypair_1(),
647            vector_keypair_2(),
648            vector_keypair_3(),
649            vector_keypair_4(),
650            vector_keypair_5(),
651            vector_keypair_6(),
652            vector_keypair_7(),
653            vector_keypair_8(),
654            vector_keypair_9(),
655            vector_keypair_10(),
656        ];
657
658        for (index, test) in cases.into_iter().enumerate() {
659            let (private_key, exp_public_key) = test;
660            let signer = <Secp256r1 as CommonwareSigner>::from(private_key).unwrap();
661            assert_eq!(
662                exp_public_key,
663                signer.public_key(),
664                "vector_keypair_{}",
665                index + 1
666            );
667            assert!(signer.public_key().len() == PUBLIC_KEY_LENGTH);
668        }
669    }
670
671    #[test]
672    fn test_public_key_validation() {
673        // We use SEC 1-encoded public keys (only include y-parity) whereas vectors
674        // assume public keys are uncompressed (both x and y packed in encoding).
675        //
676        // For this reason, test vector 2 (y out of range) and 11 (y not on curve) are skipped.
677        let cases = [
678            (1, vector_public_key_validation_1()),
679            (3, vector_public_key_validation_3()),
680            (4, vector_public_key_validation_4()),
681            (5, vector_public_key_validation_5()),
682            (6, vector_public_key_validation_6()),
683            (7, vector_public_key_validation_7()),
684            (8, vector_public_key_validation_8()),
685            (9, vector_public_key_validation_9()),
686            (10, vector_public_key_validation_10()),
687            (12, vector_public_key_validation_12()),
688        ];
689
690        for (n, test) in cases.iter() {
691            let (public_key, exp_valid) = test;
692            let res = <Secp256r1 as Specification>::PublicKey::decode(public_key.as_ref());
693            assert_eq!(
694                *exp_valid,
695                res.is_ok(),
696                "vector_public_key_validation_{}",
697                n
698            );
699        }
700    }
701
702    #[test]
703    fn test_signature_verification() {
704        let cases = [
705            vector_sig_verification_1(),
706            vector_sig_verification_2(),
707            vector_sig_verification_3(),
708            vector_sig_verification_4(),
709            vector_sig_verification_5(),
710            vector_sig_verification_6(),
711            vector_sig_verification_7(),
712            vector_sig_verification_8(),
713            vector_sig_verification_9(),
714            vector_sig_verification_10(),
715            vector_sig_verification_11(),
716            vector_sig_verification_12(),
717            vector_sig_verification_13(),
718            vector_sig_verification_14(),
719            vector_sig_verification_15(),
720        ];
721
722        for (index, test) in cases.into_iter().enumerate() {
723            let (public_key, sig, message, expected) = test;
724            let expected = if expected {
725                let mut ecdsa_signature = p256::ecdsa::Signature::from_slice(&sig).unwrap();
726                if ecdsa_signature.s().is_high().into() {
727                    // Valid signatures not normalized must be considered invalid.
728                    assert!(Signature::decode(sig.as_ref()).is_err());
729                    assert!(Signature::decode(Bytes::from(sig)).is_err());
730
731                    // Normalizing sig to test its validity.
732                    if let Some(normalized_sig) = ecdsa_signature.normalize_s() {
733                        ecdsa_signature = normalized_sig;
734                    }
735                }
736                let signature = Signature::from(ecdsa_signature);
737                Secp256r1::verify(None, &message, &public_key, &signature)
738            } else {
739                let tf_res = Signature::decode(sig.as_ref());
740                let dc_res = Signature::decode(Bytes::from(sig));
741                if tf_res.is_err() && dc_res.is_err() {
742                    // The parsing should fail
743                    true
744                } else {
745                    // Or the validation should fail
746                    let f1 = !Secp256r1::verify(None, &message, &public_key, &tf_res.unwrap());
747                    let f2 = !Secp256r1::verify(None, &message, &public_key, &dc_res.unwrap());
748                    f1 && f2
749                }
750            };
751            assert!(expected, "vector_signature_verification_{}", index + 1);
752        }
753    }
754
755    fn vector_keypair_1() -> (PrivateKey, PublicKey) {
756        parse_vector_keypair(
757            "c9806898a0334916c860748880a541f093b579a9b1f32934d86c363c39800357",
758            "d0720dc691aa80096ba32fed1cb97c2b620690d06de0317b8618d5ce65eb728f",
759            "9681b517b1cda17d0d83d335d9c4a8a9a9b0b1b3c7106d8f3c72bc5093dc275f",
760        )
761    }
762
763    fn vector_keypair_2() -> (PrivateKey, PublicKey) {
764        parse_vector_keypair(
765            "710735c8388f48c684a97bd66751cc5f5a122d6b9a96a2dbe73662f78217446d",
766            "f6836a8add91cb182d8d258dda6680690eb724a66dc3bb60d2322565c39e4ab9",
767            "1f837aa32864870cb8e8d0ac2ff31f824e7beddc4bb7ad72c173ad974b289dc2",
768        )
769    }
770
771    fn vector_keypair_3() -> (PrivateKey, PublicKey) {
772        parse_vector_keypair(
773            "78d5d8b7b3e2c16b3e37e7e63becd8ceff61e2ce618757f514620ada8a11f6e4",
774            "76711126cbb2af4f6a5fe5665dad4c88d27b6cb018879e03e54f779f203a854e",
775            "a26df39960ab5248fd3620fd018398e788bd89a3cea509b352452b69811e6856",
776        )
777    }
778
779    fn vector_keypair_4() -> (PrivateKey, PublicKey) {
780        parse_vector_keypair(
781            "2a61a0703860585fe17420c244e1de5a6ac8c25146b208ef88ad51ae34c8cb8c",
782            "e1aa7196ceeac088aaddeeba037abb18f67e1b55c0a5c4e71ec70ad666fcddc8",
783            "d7d35bdce6dedc5de98a7ecb27a9cd066a08f586a733b59f5a2cdb54f971d5c8",
784        )
785    }
786
787    fn vector_keypair_5() -> (PrivateKey, PublicKey) {
788        parse_vector_keypair(
789            "01b965b45ff386f28c121c077f1d7b2710acc6b0cb58d8662d549391dcf5a883",
790            "1f038c5422e88eec9e88b815e8f6b3e50852333fc423134348fc7d79ef8e8a10",
791            "43a047cb20e94b4ffb361ef68952b004c0700b2962e0c0635a70269bc789b849",
792        )
793    }
794
795    fn vector_keypair_6() -> (PrivateKey, PublicKey) {
796        parse_vector_keypair(
797            "fac92c13d374c53a085376fe4101618e1e181b5a63816a84a0648f3bdc24e519",
798            "7258f2ab96fc84ef6ccb33e308cd392d8b568ea635730ceb4ebd72fa870583b9",
799            "489807ca55bdc29ca5c8fe69b94f227b0345cccdbe89975e75d385cc2f6bb1e2",
800        )
801    }
802
803    fn vector_keypair_7() -> (PrivateKey, PublicKey) {
804        parse_vector_keypair(
805            "f257a192dde44227b3568008ff73bcf599a5c45b32ab523b5b21ca582fef5a0a",
806            "d2e01411817b5512b79bbbe14d606040a4c90deb09e827d25b9f2fc068997872",
807            "503f138f8bab1df2c4507ff663a1fdf7f710e7adb8e7841eaa902703e314e793",
808        )
809    }
810
811    fn vector_keypair_8() -> (PrivateKey, PublicKey) {
812        parse_vector_keypair(
813            "add67e57c42a3d28708f0235eb86885a4ea68e0d8cfd76eb46134c596522abfd",
814            "55bed2d9c029b7f230bde934c7124ed52b1330856f13cbac65a746f9175f85d7",
815            "32805e311d583b4e007c40668185e85323948e21912b6b0d2cda8557389ae7b0",
816        )
817    }
818
819    fn vector_keypair_9() -> (PrivateKey, PublicKey) {
820        parse_vector_keypair(
821            "4494860fd2c805c5c0d277e58f802cff6d731f76314eb1554142a637a9bc5538",
822            "5190277a0c14d8a3d289292f8a544ce6ea9183200e51aec08440e0c1a463a4e4",
823            "ecd98514821bd5aaf3419ab79b71780569470e4fed3da3c1353b28fe137f36eb",
824        )
825    }
826
827    fn vector_keypair_10() -> (PrivateKey, PublicKey) {
828        parse_vector_keypair(
829            "d40b07b1ea7b86d4709ef9dc634c61229feb71abd63dc7fc85ef46711a87b210",
830            "fbcea7c2827e0e8085d7707b23a3728823ea6f4878b24747fb4fd2842d406c73",
831            "2393c85f1f710c5afc115a39ba7e18abe03f19c9d4bb3d47d19468b818efa535",
832        )
833    }
834
835    fn vector_public_key_validation_1() -> (Vec<u8>, bool) {
836        (
837            parse_public_key_as_compressed_vector(
838                "e0f7449c5588f24492c338f2bc8f7865f755b958d48edb0f2d0056e50c3fd5b7",
839                "86d7e9255d0f4b6f44fa2cd6f8ba3c0aa828321d6d8cc430ca6284ce1d5b43a0",
840            ),
841            true,
842        )
843    }
844
845    fn vector_public_key_validation_3() -> (Vec<u8>, bool) {
846        (
847            parse_public_key_as_compressed_vector(
848                "17875397ae87369365656d490e8ce956911bd97607f2aff41b56f6f3a61989826",
849                "980a3c4f61b9692633fbba5ef04c9cb546dd05cdec9fa8428b8849670e2fba92",
850            ),
851            false, // x out of range
852        )
853    }
854
855    fn vector_public_key_validation_4() -> (Vec<u8>, bool) {
856        (
857            parse_public_key_as_compressed_vector(
858                "f2d1c0dc0852c3d8a2a2500a23a44813ccce1ac4e58444175b440469ffc12273",
859                "32bfe992831b305d8c37b9672df5d29fcb5c29b4a40534683e3ace23d24647dd",
860            ),
861            false, // point not on the curve
862        )
863    }
864
865    fn vector_public_key_validation_5() -> (Vec<u8>, bool) {
866        (
867            parse_public_key_as_compressed_vector(
868                "10b0ca230fff7c04768f4b3d5c75fa9f6c539bea644dffbec5dc796a213061b58",
869                "f5edf37c11052b75f771b7f9fa050e353e464221fec916684ed45b6fead38205",
870            ),
871            false, // x out of range
872        )
873    }
874
875    fn vector_public_key_validation_6() -> (Vec<u8>, bool) {
876        (
877            parse_public_key_as_compressed_vector(
878                "2c1052f25360a15062d204a056274e93cbe8fc4c4e9b9561134ad5c15ce525da",
879                "ced9783713a8a2a09eff366987639c625753295d9a85d0f5325e32dedbcada0b",
880            ),
881            true,
882        )
883    }
884
885    fn vector_public_key_validation_7() -> (Vec<u8>, bool) {
886        (
887            parse_public_key_as_compressed_vector(
888                "a40d077a87dae157d93dcccf3fe3aca9c6479a75aa2669509d2ef05c7de6782f",
889                "503d86b87d743ba20804fd7e7884aa017414a7b5b5963e0d46e3a9611419ddf3",
890            ),
891            false, // point not on the curve
892        )
893    }
894
895    fn vector_public_key_validation_8() -> (Vec<u8>, bool) {
896        (
897            parse_public_key_as_compressed_vector(
898                "2633d398a3807b1895548adbb0ea2495ef4b930f91054891030817df87d4ac0a",
899                "d6b2f738e3873cc8364a2d364038ce7d0798bb092e3dd77cbdae7c263ba618d2",
900            ),
901            true,
902        )
903    }
904
905    fn vector_public_key_validation_9() -> (Vec<u8>, bool) {
906        (
907            parse_public_key_as_compressed_vector(
908                "14bf57f76c260b51ec6bbc72dbd49f02a56eaed070b774dc4bad75a54653c3d56",
909                "7a231a23bf8b3aa31d9600d888a0678677a30e573decd3dc56b33f365cc11236",
910            ),
911            false, // x out of range
912        )
913    }
914
915    fn vector_public_key_validation_10() -> (Vec<u8>, bool) {
916        (
917            parse_public_key_as_compressed_vector(
918                "2fa74931ae816b426f484180e517f5050c92decfc8daf756cd91f54d51b302f1",
919                "5b994346137988c58c14ae2152ac2f6ad96d97decb33099bd8a0210114cd1141",
920            ),
921            true,
922        )
923    }
924
925    fn vector_public_key_validation_12() -> (Vec<u8>, bool) {
926        (
927            parse_public_key_as_compressed_vector(
928                "7a81a7e0b015252928d8b36e4ca37e92fdc328eb25c774b4f872693028c4be38",
929                "08862f7335147261e7b1c3d055f9a316e4cab7daf99cc09d1c647f5dd6e7d5bb",
930            ),
931            false, // point not on the curve
932        )
933    }
934
935    fn vector_sig_verification_1() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
936        let (public_key, sig, message) = parse_vector_sig_verification(
937            "87f8f2b218f49845f6f10eec3877136269f5c1a54736dbdf69f89940cad41555",
938            "e15f369036f49842fac7a86c8a2b0557609776814448b8f5e84aa9f4395205e9",
939            "d19ff48b324915576416097d2544f7cbdf8768b1454ad20e0baac50e211f23b0",
940            "a3e81e59311cdfff2d4784949f7a2cb50ba6c3a91fa54710568e61aca3e847c6",
941            "e4796db5f785f207aa30d311693b3702821dff1168fd2e04c0836825aefd850d9aa60326d88cde1a23c7
942            745351392ca2288d632c264f197d05cd424a30336c19fd09bb229654f0222fcb881a4b35c290a093ac159ce1
943            3409111ff0358411133c24f5b8e2090d6db6558afc36f06ca1f6ef779785adba68db27a409859fc4c4a0",
944        );
945        (public_key, sig, message, false)
946    }
947
948    fn vector_sig_verification_2() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
949        let (public_key, sig, message) = parse_vector_sig_verification(
950            "5cf02a00d205bdfee2016f7421807fc38ae69e6b7ccd064ee689fc1a94a9f7d2",
951            "ec530ce3cc5c9d1af463f264d685afe2b4db4b5828d7e61b748930f3ce622a85",
952            "dc23d130c6117fb5751201455e99f36f59aba1a6a21cf2d0e7481a97451d6693",
953            "d6ce7708c18dbf35d4f8aa7240922dc6823f2e7058cbc1484fcad1599db5018c",
954            "069a6e6b93dfee6df6ef6997cd80dd2182c36653cef10c655d524585655462d683877f95ecc6d6c81623
955            d8fac4e900ed0019964094e7de91f1481989ae1873004565789cbf5dc56c62aedc63f62f3b894c9c6f7788c8
956            ecaadc9bd0e81ad91b2b3569ea12260e93924fdddd3972af5273198f5efda0746219475017557616170e",
957        );
958        (public_key, sig, message, false)
959    }
960
961    fn vector_sig_verification_3() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
962        let (public_key, sig, message) = parse_vector_sig_verification(
963            "2ddfd145767883ffbb0ac003ab4a44346d08fa2570b3120dcce94562422244cb",
964            "5f70c7d11ac2b7a435ccfbbae02c3df1ea6b532cc0e9db74f93fffca7c6f9a64",
965            "9913111cff6f20c5bf453a99cd2c2019a4e749a49724a08774d14e4c113edda8",
966            "9467cd4cd21ecb56b0cab0a9a453b43386845459127a952421f5c6382866c5cc",
967            "df04a346cf4d0e331a6db78cca2d456d31b0a000aa51441defdb97bbeb20b94d8d746429a393ba88840d
968            661615e07def615a342abedfa4ce912e562af714959896858af817317a840dcff85a057bb91a3c2bf9010550
969            0362754a6dd321cdd86128cfc5f04667b57aa78c112411e42da304f1012d48cd6a7052d7de44ebcc01de",
970        );
971        (public_key, sig, message, false)
972    }
973
974    fn vector_sig_verification_4() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
975        let (public_key, sig, message) = parse_vector_sig_verification(
976            "e424dc61d4bb3cb7ef4344a7f8957a0c5134e16f7a67c074f82e6e12f49abf3c",
977            "970eed7aa2bc48651545949de1dddaf0127e5965ac85d1243d6f60e7dfaee927",
978            "bf96b99aa49c705c910be33142017c642ff540c76349b9dab72f981fd9347f4f",
979            "17c55095819089c2e03b9cd415abdf12444e323075d98f31920b9e0f57ec871c",
980            "e1130af6a38ccb412a9c8d13e15dbfc9e69a16385af3c3f1e5da954fd5e7c45fd75e2b8c36699228e928
981            40c0562fbf3772f07e17f1add56588dd45f7450e1217ad239922dd9c32695dc71ff2424ca0dec1321aa47064
982            a044b7fe3c2b97d03ce470a592304c5ef21eed9f93da56bb232d1eeb0035f9bf0dfafdcc4606272b20a3",
983        );
984        (public_key, sig, message, true)
985    }
986
987    fn vector_sig_verification_5() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
988        let (public_key, sig, message) = parse_vector_sig_verification(
989            "e0fc6a6f50e1c57475673ee54e3a57f9a49f3328e743bf52f335e3eeaa3d2864",
990            "7f59d689c91e463607d9194d99faf316e25432870816dde63f5d4b373f12f22a",
991            "1d75830cd36f4c9aa181b2c4221e87f176b7f05b7c87824e82e396c88315c407",
992            "cb2acb01dac96efc53a32d4a0d85d0c2e48955214783ecf50a4f0414a319c05a",
993            "73c5f6a67456ae48209b5f85d1e7de7758bf235300c6ae2bdceb1dcb27a7730fb68c950b7fcada0ecc46
994            61d3578230f225a875e69aaa17f1e71c6be5c831f22663bac63d0c7a9635edb0043ff8c6f26470f02a7bc565
995            56f1437f06dfa27b487a6c4290d8bad38d4879b334e341ba092dde4e4ae694a9c09302e2dbf443581c08",
996        );
997        // Valid vector we switch to invalid as the signature is not normalized.
998        (public_key, sig, message, true)
999    }
1000
1001    fn vector_sig_verification_6() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1002        let (public_key, sig, message) = parse_vector_sig_verification(
1003            "a849bef575cac3c6920fbce675c3b787136209f855de19ffe2e8d29b31a5ad86",
1004            "bf5fe4f7858f9b805bd8dcc05ad5e7fb889de2f822f3d8b41694e6c55c16b471",
1005            "25acc3aa9d9e84c7abf08f73fa4195acc506491d6fc37cb9074528a7db87b9d6",
1006            "9b21d5b5259ed3f2ef07dfec6cc90d3a37855d1ce122a85ba6a333f307d31537",
1007            "666036d9b4a2426ed6585a4e0fd931a8761451d29ab04bd7dc6d0c5b9e38e6c2b263ff6cb837bd04399d
1008            e3d757c6c7005f6d7a987063cf6d7e8cb38a4bf0d74a282572bd01d0f41e3fd066e3021575f0fa04f27b700d
1009            5b7ddddf50965993c3f9c7118ed78888da7cb221849b3260592b8e632d7c51e935a0ceae15207bedd548",
1010        );
1011        (public_key, sig, message, false)
1012    }
1013
1014    fn vector_sig_verification_7() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1015        let (public_key, sig, message) = parse_vector_sig_verification(
1016            "3dfb6f40f2471b29b77fdccba72d37c21bba019efa40c1c8f91ec405d7dcc5df",
1017            "f22f953f1e395a52ead7f3ae3fc47451b438117b1e04d613bc8555b7d6e6d1bb",
1018            "548886278e5ec26bed811dbb72db1e154b6f17be70deb1b210107decb1ec2a5a",
1019            "e93bfebd2f14f3d827ca32b464be6e69187f5edbd52def4f96599c37d58eee75",
1020            "7e80436bce57339ce8da1b5660149a20240b146d108deef3ec5da4ae256f8f894edcbbc57b34ce37089c
1021            0daa17f0c46cd82b5a1599314fd79d2fd2f446bd5a25b8e32fcf05b76d644573a6df4ad1dfea707b479d9723
1022            7a346f1ec632ea5660efb57e8717a8628d7f82af50a4e84b11f21bdff6839196a880ae20b2a0918d58cd",
1023        );
1024        (public_key, sig, message, false)
1025    }
1026
1027    fn vector_sig_verification_8() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1028        let (public_key, sig, message) = parse_vector_sig_verification(
1029            "69b7667056e1e11d6caf6e45643f8b21e7a4bebda463c7fdbc13bc98efbd0214",
1030            "d3f9b12eb46c7c6fda0da3fc85bc1fd831557f9abc902a3be3cb3e8be7d1aa2f",
1031            "288f7a1cd391842cce21f00e6f15471c04dc182fe4b14d92dc18910879799790",
1032            "247b3c4e89a3bcadfea73c7bfd361def43715fa382b8c3edf4ae15d6e55e9979",
1033            "1669bfb657fdc62c3ddd63269787fc1c969f1850fb04c933dda063ef74a56ce13e3a649700820f0061ef
1034            abf849a85d474326c8a541d99830eea8131eaea584f22d88c353965dabcdc4bf6b55949fd529507dfb803ab6
1035            b480cd73ca0ba00ca19c438849e2cea262a1c57d8f81cd257fb58e19dec7904da97d8386e87b84948169",
1036        );
1037        (public_key, sig, message, false)
1038    }
1039
1040    fn vector_sig_verification_9() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1041        let (public_key, sig, message) = parse_vector_sig_verification(
1042            "bf02cbcf6d8cc26e91766d8af0b164fc5968535e84c158eb3bc4e2d79c3cc682",
1043            "069ba6cb06b49d60812066afa16ecf7b51352f2c03bd93ec220822b1f3dfba03",
1044            "f5acb06c59c2b4927fb852faa07faf4b1852bbb5d06840935e849c4d293d1bad",
1045            "049dab79c89cc02f1484c437f523e080a75f134917fda752f2d5ca397addfe5d",
1046            "3fe60dd9ad6caccf5a6f583b3ae65953563446c4510b70da115ffaa0ba04c076115c7043ab8733403cd6
1047            9c7d14c212c655c07b43a7c71b9a4cffe22c2684788ec6870dc2013f269172c822256f9e7cc674791bf2d848
1048            6c0f5684283e1649576efc982ede17c7b74b214754d70402fb4bb45ad086cf2cf76b3d63f7fce39ac970",
1049        );
1050        (public_key, sig, message, false)
1051    }
1052
1053    fn vector_sig_verification_10() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1054        let (public_key, sig, message) = parse_vector_sig_verification(
1055            "224a4d65b958f6d6afb2904863efd2a734b31798884801fcab5a590f4d6da9de",
1056            "178d51fddada62806f097aa615d33b8f2404e6b1479f5fd4859d595734d6d2b9",
1057            "87b93ee2fecfda54deb8dff8e426f3c72c8864991f8ec2b3205bb3b416de93d2",
1058            "4044a24df85be0cc76f21a4430b75b8e77b932a87f51e4eccbc45c263ebf8f66",
1059            "983a71b9994d95e876d84d28946a041f8f0a3f544cfcc055496580f1dfd4e312a2ad418fe69dbc61db23
1060            0cc0c0ed97e360abab7d6ff4b81ee970a7e97466acfd9644f828ffec538abc383d0e92326d1c88c55e1f46a6
1061            68a039beaa1be631a89129938c00a81a3ae46d4aecbf9707f764dbaccea3ef7665e4c4307fa0b0a3075c",
1062        );
1063        (public_key, sig, message, false)
1064    }
1065
1066    fn vector_sig_verification_11() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1067        let (public_key, sig, message) = parse_vector_sig_verification(
1068            "43691c7795a57ead8c5c68536fe934538d46f12889680a9cb6d055a066228369",
1069            "f8790110b3c3b281aa1eae037d4f1234aff587d903d93ba3af225c27ddc9ccac",
1070            "8acd62e8c262fa50dd9840480969f4ef70f218ebf8ef9584f199031132c6b1ce",
1071            "cfca7ed3d4347fb2a29e526b43c348ae1ce6c60d44f3191b6d8ea3a2d9c92154",
1072            "4a8c071ac4fd0d52faa407b0fe5dab759f7394a5832127f2a3498f34aac287339e043b4ffa79528faf19
1073            9dc917f7b066ad65505dab0e11e6948515052ce20cfdb892ffb8aa9bf3f1aa5be30a5bbe85823bddf70b39fd
1074            7ebd4a93a2f75472c1d4f606247a9821f1a8c45a6cb80545de2e0c6c0174e2392088c754e9c8443eb5af",
1075        );
1076        (public_key, sig, message, false)
1077    }
1078
1079    fn vector_sig_verification_12() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1080        let (public_key, sig, message) = parse_vector_sig_verification(
1081            "9157dbfcf8cf385f5bb1568ad5c6e2a8652ba6dfc63bc1753edf5268cb7eb596",
1082            "972570f4313d47fc96f7c02d5594d77d46f91e949808825b3d31f029e8296405",
1083            "dfaea6f297fa320b707866125c2a7d5d515b51a503bee817de9faa343cc48eeb",
1084            "8f780ad713f9c3e5a4f7fa4c519833dfefc6a7432389b1e4af463961f09764f2",
1085            "0a3a12c3084c865daf1d302c78215d39bfe0b8bf28272b3c0b74beb4b7409db0718239de700785581514
1086            321c6440a4bbaea4c76fa47401e151e68cb6c29017f0bce4631290af5ea5e2bf3ed742ae110b04ade83a5dbd
1087            7358f29a85938e23d87ac8233072b79c94670ff0959f9c7f4517862ff829452096c78f5f2e9a7e4e9216",
1088        );
1089        (public_key, sig, message, false)
1090    }
1091
1092    fn vector_sig_verification_13() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1093        let (public_key, sig, message) = parse_vector_sig_verification(
1094            "072b10c081a4c1713a294f248aef850e297991aca47fa96a7470abe3b8acfdda",
1095            "9581145cca04a0fb94cedce752c8f0370861916d2a94e7c647c5373ce6a4c8f5",
1096            "09f5483eccec80f9d104815a1be9cc1a8e5b12b6eb482a65c6907b7480cf4f19",
1097            "a4f90e560c5e4eb8696cb276e5165b6a9d486345dedfb094a76e8442d026378d",
1098            "785d07a3c54f63dca11f5d1a5f496ee2c2f9288e55007e666c78b007d95cc28581dce51f490b30fa73dc
1099            9e2d45d075d7e3a95fb8a9e1465ad191904124160b7c60fa720ef4ef1c5d2998f40570ae2a870ef3e894c2bc
1100            617d8a1dc85c3c55774928c38789b4e661349d3f84d2441a3b856a76949b9f1f80bc161648a1cad5588e",
1101        );
1102        (public_key, sig, message, false)
1103    }
1104
1105    fn vector_sig_verification_14() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1106        let (public_key, sig, message) = parse_vector_sig_verification(
1107            "09308ea5bfad6e5adf408634b3d5ce9240d35442f7fe116452aaec0d25be8c24",
1108            "f40c93e023ef494b1c3079b2d10ef67f3170740495ce2cc57f8ee4b0618b8ee5",
1109            "5cc8aa7c35743ec0c23dde88dabd5e4fcd0192d2116f6926fef788cddb754e73",
1110            "9c9c045ebaa1b828c32f82ace0d18daebf5e156eb7cbfdc1eff4399a8a900ae7",
1111            "76f987ec5448dd72219bd30bf6b66b0775c80b394851a43ff1f537f140a6e7229ef8cd72ad58b1d2d202
1112            98539d6347dd5598812bc65323aceaf05228f738b5ad3e8d9fe4100fd767c2f098c77cb99c2992843ba3eed9
1113            1d32444f3b6db6cd212dd4e5609548f4bb62812a920f6e2bf1581be1ebeebdd06ec4e971862cc42055ca",
1114        );
1115        (public_key, sig, message, false)
1116    }
1117
1118    fn vector_sig_verification_15() -> (PublicKey, Vec<u8>, Vec<u8>, bool) {
1119        let (public_key, sig, message) = parse_vector_sig_verification(
1120            "2d98ea01f754d34bbc3003df5050200abf445ec728556d7ed7d5c54c55552b6d",
1121            "9b52672742d637a32add056dfd6d8792f2a33c2e69dafabea09b960bc61e230a",
1122            "06108e525f845d0155bf60193222b3219c98e3d49424c2fb2a0987f825c17959",
1123            "62b5cdd591e5b507e560167ba8f6f7cda74673eb315680cb89ccbc4eec477dce",
1124            "60cd64b2cd2be6c33859b94875120361a24085f3765cb8b2bf11e026fa9d8855dbe435acf7882e84f3c7
1125            857f96e2baab4d9afe4588e4a82e17a78827bfdb5ddbd1c211fbc2e6d884cddd7cb9d90d5bf4a7311b83f352
1126            508033812c776a0e00c003c7e0d628e50736c7512df0acfa9f2320bd102229f46495ae6d0857cc452a84",
1127        );
1128        (public_key, sig, message, true)
1129    }
1130}
commonware_cryptography/secp256r1/scheme.rs

commonware_cryptography/secp256r1/
scheme.rs
