-
Notifications
You must be signed in to change notification settings - Fork 28
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
The leancrypto test data covers the validation of other provider's certificates. In addition, it provides certificates generated by it using the gen.sh script. Signed-off-by: Stephan Mueller <[email protected]>
- Loading branch information
1 parent
f5fb79d
commit 7c2731a
Showing
14 changed files
with
473 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| # Generation of X.509 CA certfificates with leancrypto | ||
|
|
||
| Use the script `gen.sh` to generate X.509 CA certificates using the leancrypto | ||
| generator. Follow the execution steps outlined in this script at the top. | ||
|
|
||
| # Validation of X.509 certificates from other providers | ||
|
|
||
| Use the script `leancrypto_check_with_ietf.sh` to validate the leancrypto | ||
| X.509 implementation with other providers. Follow the execution steps outlined | ||
| in this script at the top. |
Binary file not shown.
10 changes: 10 additions & 0 deletions
10
providers/leancrypto/compatMatrices/artifacts_certs_r4/bc_leancrypto.csv
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| key_algorithm_oid,test_result | ||
| 2.16.840.1.101.3.4.3.26,Y | ||
| 2.16.840.1.101.3.4.3.27,Y | ||
| 2.16.840.1.101.3.4.3.28,Y | ||
| 2.16.840.1.101.3.4.3.29,Y | ||
| 2.16.840.1.101.3.4.3.30,Y | ||
| 2.16.840.1.101.3.4.3.31,Y | ||
| 2.16.840.1.101.3.4.3.17,Y | ||
| 2.16.840.1.101.3.4.3.18,Y | ||
| 2.16.840.1.101.3.4.3.19,Y |
10 changes: 10 additions & 0 deletions
10
providers/leancrypto/compatMatrices/artifacts_certs_r4/carl-redhound_leancrypto.csv
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| key_algorithm_oid,test_result | ||
| 2.16.840.1.101.3.4.3.26,Y | ||
| 2.16.840.1.101.3.4.3.27,Y | ||
| 2.16.840.1.101.3.4.3.28,Y | ||
| 2.16.840.1.101.3.4.3.29,Y | ||
| 2.16.840.1.101.3.4.3.30,Y | ||
| 2.16.840.1.101.3.4.3.31,Y | ||
| 2.16.840.1.101.3.4.3.17,Y | ||
| 2.16.840.1.101.3.4.3.18,Y | ||
| 2.16.840.1.101.3.4.3.19,Y |
10 changes: 10 additions & 0 deletions
10
providers/leancrypto/compatMatrices/artifacts_certs_r4/cht_leancrypto.csv
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| key_algorithm_oid,test_result | ||
| 2.16.840.1.101.3.4.3.26,Y | ||
| 2.16.840.1.101.3.4.3.27,Y | ||
| 2.16.840.1.101.3.4.3.28,Y | ||
| 2.16.840.1.101.3.4.3.29,Y | ||
| 2.16.840.1.101.3.4.3.30,Y | ||
| 2.16.840.1.101.3.4.3.31,Y | ||
| 2.16.840.1.101.3.4.3.17,Y | ||
| 2.16.840.1.101.3.4.3.18,Y | ||
| 2.16.840.1.101.3.4.3.19,Y |
10 changes: 10 additions & 0 deletions
10
providers/leancrypto/compatMatrices/artifacts_certs_r4/corey-digicert_leancrypto.csv
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| key_algorithm_oid,test_result | ||
| 2.16.840.1.101.3.4.3.26,Y | ||
| 2.16.840.1.101.3.4.3.27,Y | ||
| 2.16.840.1.101.3.4.3.28,Y | ||
| 2.16.840.1.101.3.4.3.29,Y | ||
| 2.16.840.1.101.3.4.3.30,Y | ||
| 2.16.840.1.101.3.4.3.31,Y | ||
| 2.16.840.1.101.3.4.3.17,Y | ||
| 2.16.840.1.101.3.4.3.18,Y | ||
| 2.16.840.1.101.3.4.3.19,Y |
10 changes: 10 additions & 0 deletions
10
providers/leancrypto/compatMatrices/artifacts_certs_r4/cryptonext-cnsprovider_leancrypto.csv
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| key_algorithm_oid,test_result | ||
| 2.16.840.1.101.3.4.3.26,Y | ||
| 2.16.840.1.101.3.4.3.27,Y | ||
| 2.16.840.1.101.3.4.3.28,Y | ||
| 2.16.840.1.101.3.4.3.29,Y | ||
| 2.16.840.1.101.3.4.3.30,Y | ||
| 2.16.840.1.101.3.4.3.31,Y | ||
| 2.16.840.1.101.3.4.3.17,Y | ||
| 2.16.840.1.101.3.4.3.18,Y | ||
| 2.16.840.1.101.3.4.3.19,Y |
10 changes: 10 additions & 0 deletions
10
providers/leancrypto/compatMatrices/artifacts_certs_r4/cryptonext_leancrypto.csv
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| key_algorithm_oid,test_result | ||
| 2.16.840.1.101.3.4.3.26,Y | ||
| 2.16.840.1.101.3.4.3.27,Y | ||
| 2.16.840.1.101.3.4.3.28,Y | ||
| 2.16.840.1.101.3.4.3.29,Y | ||
| 2.16.840.1.101.3.4.3.30,Y | ||
| 2.16.840.1.101.3.4.3.31,Y | ||
| 2.16.840.1.101.3.4.3.17,Y | ||
| 2.16.840.1.101.3.4.3.18,Y | ||
| 2.16.840.1.101.3.4.3.19,Y |
10 changes: 10 additions & 0 deletions
10
providers/leancrypto/compatMatrices/artifacts_certs_r4/entrust_leancrypto.csv
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| key_algorithm_oid,test_result | ||
| 2.16.840.1.101.3.4.3.26,Y | ||
| 2.16.840.1.101.3.4.3.27,Y | ||
| 2.16.840.1.101.3.4.3.28,Y | ||
| 2.16.840.1.101.3.4.3.29,Y | ||
| 2.16.840.1.101.3.4.3.30,Y | ||
| 2.16.840.1.101.3.4.3.31,Y | ||
| 2.16.840.1.101.3.4.3.17,Y | ||
| 2.16.840.1.101.3.4.3.18,Y | ||
| 2.16.840.1.101.3.4.3.19,Y |
10 changes: 10 additions & 0 deletions
10
providers/leancrypto/compatMatrices/artifacts_certs_r4/kris_leancrypto.csv
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| key_algorithm_oid,test_result | ||
| 2.16.840.1.101.3.4.3.26,Y | ||
| 2.16.840.1.101.3.4.3.27,Y | ||
| 2.16.840.1.101.3.4.3.28,Y | ||
| 2.16.840.1.101.3.4.3.29,Y | ||
| 2.16.840.1.101.3.4.3.30,Y | ||
| 2.16.840.1.101.3.4.3.31,Y | ||
| 2.16.840.1.101.3.4.3.17,Y | ||
| 2.16.840.1.101.3.4.3.18,Y | ||
| 2.16.840.1.101.3.4.3.19,Y |
10 changes: 10 additions & 0 deletions
10
providers/leancrypto/compatMatrices/artifacts_certs_r4/seventhsense.ai_leancrypto.csv
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| key_algorithm_oid,test_result | ||
| 2.16.840.1.101.3.4.3.26,Y | ||
| 2.16.840.1.101.3.4.3.27,Y | ||
| 2.16.840.1.101.3.4.3.28,Y | ||
| 2.16.840.1.101.3.4.3.29,Y | ||
| 2.16.840.1.101.3.4.3.30,Y | ||
| 2.16.840.1.101.3.4.3.31,Y | ||
| 2.16.840.1.101.3.4.3.17,Y | ||
| 2.16.840.1.101.3.4.3.18,Y | ||
| 2.16.840.1.101.3.4.3.19,Y |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,102 @@ | ||
| #!/bin/bash | ||
| # | ||
| # Written by Stephan Mueller <[email protected]> | ||
| # | ||
| # Generate self-signed certificates with leancrypto | ||
| # | ||
| # Invoke the script with the following steps: | ||
| # | ||
| # 1. compile leancrypto with X.509 generator enabled | ||
| # 2. update variable LC_X509_GENERATOR below to point to the lc_x509_generator | ||
| # tool | ||
| # 3. execute this script - the resulting CA certificates are stored in | ||
| # $TARGETDIR (NOTE: The private keys are deleted in the gen_cert function.) | ||
| # | ||
|
|
||
| LC_X509_GENERATOR="lc_x509_generator" | ||
|
|
||
| TARGETDIR="artifacts_certs_r4" | ||
|
|
||
| CERTTYPES_ML_DSA=" | ||
| ML-DSA87:2.16.840.1.101.3.4.3.19 | ||
| ML-DSA65:2.16.840.1.101.3.4.3.18 | ||
| ML-DSA44:2.16.840.1.101.3.4.3.17" | ||
|
|
||
| CERTTYPES_SLH_DSA=" | ||
| SLH-DSA-SHAKE-256S:2.16.840.1.101.3.4.3.30 | ||
| SLH-DSA-SHAKE-256F:2.16.840.1.101.3.4.3.31 | ||
| SLH-DSA-SHAKE-192S:2.16.840.1.101.3.4.3.28 | ||
| SLH-DSA-SHAKE-192F:2.16.840.1.101.3.4.3.29 | ||
| SLH-DSA-SHAKE-128S:2.16.840.1.101.3.4.3.26 | ||
| SLH-DSA-SHAKE-128F:2.16.840.1.101.3.4.3.27" | ||
|
|
||
| # These definitions are currently disabled as there seems to be an issue in | ||
| # leancrypto | ||
| CERTTYPES_COMPOSITE_ML_DSA=" | ||
| ML-DSA65-ED25519:SHA512-2.16.840.1.114027.80.8.1.30 | ||
| ML-DSA44-ED25519:SHA512-2.16.840.1.114027.80.8.1.23" | ||
|
|
||
| CERTTYPES="$CERTTYPES_ML_DSA $CERTTYPES_SLH_DSA" | ||
|
|
||
| ################################################################################ | ||
| # No further configurations below this line | ||
| ################################################################################ | ||
|
|
||
| # Generate CA certificate | ||
| gen_cert() | ||
| { | ||
| local input=$1 | ||
|
|
||
| if [ -z "$input" ] | ||
| then | ||
| echo "Rejecting empty input" | ||
| exit 1 | ||
| fi | ||
|
|
||
| local certtype=$(echo $input | cut -d":" -f1) | ||
| local fileext=$(echo $input | cut -d":" -f2) | ||
|
|
||
| echo "Generating CA certificate for key type $certtype" | ||
|
|
||
| CA_FILENAME="${certtype}-${fileext}_ta.der" | ||
| ${LC_X509_GENERATOR} \ | ||
| --keyusage digitalSignature \ | ||
| --keyusage keyEncipherment \ | ||
| --keyusage keyCertSign \ | ||
| --keyusage critical \ | ||
| --ca \ | ||
| --valid-from 1729527728 \ | ||
| --valid-to 2044210606 \ | ||
| --subject-cn "leancrypto test CA" \ | ||
| --subject-ou "leancrypto test OU" \ | ||
| --subject-o leancrypto \ | ||
| --subject-st Saxony \ | ||
| --subject-c DE \ | ||
| --issuer-cn "leancrypto test CA" \ | ||
| --issuer-ou "leancrypto test OU" \ | ||
| --issuer-o leancrypto \ | ||
| --issuer-st Saxony \ | ||
| --issuer-c DE \ | ||
| --serial 0102030405060708 \ | ||
| -o ${TARGETDIR}/${CA_FILENAME} \ | ||
| --sk-file ${TARGETDIR}/${CA_FILENAME}.privkey \ | ||
| --create-keypair ${certtype} | ||
|
|
||
| if [ $? -eq 0 ] | ||
| then | ||
| echo "CA certificate generation successful" | ||
| else | ||
| echo "CA certificate generation failed" | ||
| exit 1 | ||
| fi | ||
|
|
||
| rm -f ${TARGETDIR}/${CA_FILENAME}.privkey | ||
| } | ||
|
|
||
| rm -rf $TARGETDIR | ||
| mkdir -p $TARGETDIR | ||
|
|
||
| for i in $CERTTYPES | ||
| do | ||
| gen_cert $i | ||
| done |
Oops, something went wrong.