Function test_rsa_pss_signature

tests/wycheproof/test_rsa.py:149–197

(backend, wycheproof)

    "rsa_pss_misc_test.json",
)
def test_rsa_pss_signature(backend, wycheproof):
    digest = _DIGESTS[wycheproof.testgroup["sha"]]
    mgf_digest = _DIGESTS[wycheproof.testgroup["mgfSha"]]
    if digest is None or mgf_digest is None:
        pytest.skip(
            "PSS with digest={} and MGF digest={} not supported".format(
                wycheproof.testgroup["sha"],
                wycheproof.testgroup["mgfSha"],
            )
        )
    if backend._fips_enabled and (
        isinstance(digest, hashes.SHA1)
        or isinstance(mgf_digest, hashes.SHA1)
        # FIPS 186-4 only allows salt length == digest length for PSS
        or wycheproof.testgroup["sLen"] != mgf_digest.digest_size
        # inner MGF1 hash must match outer hash
        or wycheproof.testgroup["sha"] != wycheproof.testgroup["mgfSha"]
    ):
        pytest.skip("Invalid params for FIPS")

    key = wycheproof.cache_value_to_group(
        "cached_key",
        lambda: serialization.load_der_public_key(
            binascii.unhexlify(wycheproof.testgroup["publicKeyDer"]),
        ),
    )
    assert isinstance(key, rsa.RSAPublicKey)

    if wycheproof.valid or wycheproof.acceptable:
        key.verify(
            binascii.unhexlify(wycheproof.testcase["sig"]),
            binascii.unhexlify(wycheproof.testcase["msg"]),
            padding.PSS(
                mgf=padding.MGF1(mgf_digest),
                salt_length=wycheproof.testgroup["sLen"],
            ),
            digest,
        )
    else:
        with pytest.raises(InvalidSignature):
            key.verify(
                binascii.unhexlify(wycheproof.testcase["sig"]),
                binascii.unhexlify(wycheproof.testcase["msg"]),
                padding.PSS(
                    mgf=padding.MGF1(mgf_digest),
                    salt_length=wycheproof.testgroup["sLen"],
                ),
                digest,
            )


@wycheproof_tests(