sshcerts 0.12.1

A library for parsing, verifying, and creating SSH Certificates
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123

use sshcerts::ssh::Reader;
use sshcerts::error::Error;


#[test]
fn rfc4251_mpint_test_vector_one() {
    let test_vector = [0, 0, 0, 0];
    let mut reader = Reader::new(&test_vector);
    let num = reader.read_positive_mpint();
    assert_eq!(num.unwrap(), vec![]);
}

#[test]
fn rfc4251_mpint_test_vector_two() {
    let test_vector =[0x00, 0x00, 0x00, 0x08, 0x09, 0xa3, 0x78, 0xf9, 0xb2, 0xe3, 0x32, 0xa7];
    let mut reader = Reader::new(&test_vector);
    let num = reader.read_positive_mpint();
    assert_eq!(num.unwrap(), vec![0x09, 0xa3, 0x78, 0xf9, 0xb2, 0xe3, 0x32, 0xa7]);
}

#[test]
fn rfc4251_mpint_test_vector_three() {
    let test_vector =[0x00, 0x00, 0x00, 0x02, 0x00, 0x80];
    let mut reader = Reader::new(&test_vector);
    let num = reader.read_positive_mpint();
    assert_eq!(num.unwrap(), vec![0x80]);
}

#[test]
fn rfc4251_mpint_test_vector_four() {
    let test_vector =[0x00, 0x00, 0x00, 0x02, 0xed, 0xcc];
    let mut reader = Reader::new(&test_vector);
    match reader.read_positive_mpint() {
        Err(Error::InvalidFormat) => (),
        Ok(n) => panic!("This should have failed to parse as it's a negative mpint but instead got {:?}", n),
        Err(other) => panic!("Got {other}, when expected InvalidFormat"),
    }
}

#[test]
fn rfc4251_mpint_test_vector_five() {
    let test_vector =[0x00, 0x00, 0x00, 0x05, 0xff, 0x21, 0x52, 0x41, 0x11];
    let mut reader = Reader::new(&test_vector);
    match reader.read_positive_mpint() {
        Err(Error::InvalidFormat) => (),
        Ok(n) => panic!("This should have failed to parse as it's a negative mpint but instead got {:?}", n),
        Err(other) => panic!("Got {other}, when expected InvalidFormat"),
    }
}

#[test]
fn malicious_mpint_wrong_zero() {
    let test_vector =[0x00, 0x00, 0x00, 0x01, 0x00];
    let mut reader = Reader::new(&test_vector);
    match reader.read_positive_mpint() {
        Err(Error::InvalidFormat) => (),
        Ok(n) => panic!("This should have failed to parse as it's a negative mpint but instead got {:?}", n),
        Err(other) => panic!("Got {other}, when expected InvalidFormat"),
    }
}

#[test]
fn malicious_mpint_unneeded_zero() {
    let test_vector =[0x00, 0x00, 0x00, 0x02, 0x00, 0x01];
    let mut reader = Reader::new(&test_vector);
    match reader.read_positive_mpint() {
        Err(Error::InvalidFormat) => (),
        Ok(n) => panic!("This should have failed to parse as it's a negative mpint but instead got {:?}", n),
        Err(other) => panic!("Got {other}, when expected InvalidFormat"),
    }
}

#[test]
fn malicious_mpint_too_many_zeros() {
    let test_vector =[0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00, 0xFF];
    let mut reader = Reader::new(&test_vector);
    match reader.read_positive_mpint() {
        Err(Error::InvalidFormat) => (),
        Ok(n) => panic!("This should have failed to parse as it's a negative mpint but instead got {:?}", n),
        Err(other) => panic!("Got {other}, when expected InvalidFormat"),
    }
}

#[test]
fn extra_good_check() {
    let test_vector =[0x00, 0x00, 0x00, 0x01, 0x7F];
    let mut reader = Reader::new(&test_vector);
    let num = reader.read_positive_mpint();
    assert_eq!(num.unwrap(), vec![0x7F]);
}

#[test]
fn extra_good_check_two() {
    let test_vector =[0x00, 0x00, 0x00, 0x02, 0x00, 0x80];
    let mut reader = Reader::new(&test_vector);
    let num = reader.read_positive_mpint();
    assert_eq!(num.unwrap(), vec![0x80]);
}

#[test]
fn read_raw_bytes() {
    let test_vector =[0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11];
    let mut reader = Reader::new(&test_vector);
    let num = reader.read_raw_bytes(10);
    assert_eq!(num.unwrap(), vec![0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11,]);
}

#[test]
fn read_raw_too_many() {
    let test_vector =[0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11];
    let mut reader = Reader::new(&test_vector);
    let num = reader.read_raw_bytes(40);
    assert_eq!(num.is_err(), true);
}

#[test]
fn read_raw_wrap() {
    let test_vector =[0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11, 0xff, 0x21, 0x52, 0x41, 0x11];
    let mut reader = Reader::new(&test_vector);
    reader.read_raw_bytes(4).unwrap();
    let num = reader.read_raw_bytes(2 ^ 64 - 1);
    assert_eq!(num.is_err(), true);
}