dsa 0.7.0

Pure Rust implementation of the Digital Signature Algorithm (DSA) as specified in FIPS 186-4 (Digital Signature Standard), providing RFC6979 deterministic signatures as well as support for added entropy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

//! Property-based tests.

#![cfg(all(feature = "hazmat", feature = "pkcs8"))]

use chacha20::{ChaCha8Rng, rand_core::SeedableRng};
use der::{Decode, Encode, Sequence, asn1::Uint};
use dsa::{Components, KeySize, Signature, SigningKey, VerifyingKey, signature::Verifier};
use pkcs8::DecodePublicKey;
use proptest::prelude::*;

#[derive(Sequence)]
struct MockSignature {
    r: Uint,
    s: Uint,
}

const OPENSSL_PEM_PUBLIC_KEY: &str = include_str!("pems/public.pem");

prop_compose! {
    fn private_key()(seed in any::<[u8; 32]>()) -> SigningKey {
        let mut rng = ChaCha8Rng::from_seed(seed);
        #[allow(deprecated)]
        let components = Components::try_generate_from_rng_with_key_size(&mut rng, KeySize::DSA_1024_160).unwrap();
        SigningKey::try_generate_from_rng_with_components(&mut rng, components).unwrap()
    }
}

proptest! {
    #[test]
    fn dsa_signature_verification( r in any::<Vec<u8>>(), s in any::<Vec<u8>>(),) {
        let verifying_key = VerifyingKey::from_public_key_pem(OPENSSL_PEM_PUBLIC_KEY)
            .expect("Failed to decode PEM encoded OpenSSL public key");

        let asn1 = MockSignature {
            r: Uint::new(&r).unwrap(),
            s: Uint::new(&s).unwrap(),
        }
        .to_der()
        .expect("Failed to serialize signature");

        let Ok(signature) = Signature::from_der(&asn1) else {
            return Ok(());
        };

        prop_assert!(verifying_key.verify(&[], &signature).is_err());
    }
}