Function testPublicKey

fdbrpc/JsonWebKeySet.cpp:690–717

}

void testPublicKey(PrivateKey (*factory)()) {
	// stringify-deserialize public key.
	// sign some data using private key to see whether deserialized public key can verify it.
	auto& rng = *deterministicRandom();
	auto pubKeyName = Standalone<StringRef>("somePublicKey"_sr);
	auto privKey = factory();
	auto pubKey = privKey.toPublic();
	auto jwks = JsonWebKeySet{};
	jwks.keys.emplace(pubKeyName, pubKey);
	auto arena = Arena();
	auto jwksStr = jwks.toStringRef(arena).get();
	fmt::print("Test JWKS: {}\n", jwksStr.toString());
	auto jwksClone = JsonWebKeySet::parse(jwksStr, {});
	ASSERT(jwksClone.present());
	auto pubKeyClone = jwksClone.get().keys[pubKeyName].getPublic();
	auto randByteStr = [&rng, &arena](int len) {
		auto buf = new (arena) uint8_t[len];
		for (auto i = 0; i < len; i++)
			buf[i] = rng.randomUInt32() % 255u;
		return StringRef(buf, len);
	};
	auto randData = randByteStr(rng.randomUInt32() % 128 + 16);
	auto signature = privKey.sign(arena, randData, *::EVP_sha256());
	ASSERT(pubKeyClone.verify(randData, signature, *::EVP_sha256()));
	const_cast<uint8_t&>(*randData.begin())++;
	ASSERT(!pubKeyClone.verify(randData, signature, *::EVP_sha256()));
	fmt::print("TESTED OK FOR OPENSSL V{} API\n", (OPENSSL_VERSION_NUMBER >> 28));
}

void testPrivateKey(PrivateKey (*factory)()) {
	// stringify-deserialize private key.