aws · jmayclin · Jan 24, 2024 · Jan 4, 2024 · Jan 5, 2024 · Jan 18, 2024
diff --git a/.github/workflows/ci_rust.yml b/.github/workflows/ci_rust.yml
@@ -75,9 +75,6 @@ jobs:
       - name: generate bindings
         run: ${{env.ROOT_PATH}}/generate.sh --skip-tests
 
-      - name: generate test certs
-        run: ${{env.ROOT_PATH}}/bench/scripts/generate-certs.sh
-
       - name: bench tests
         working-directory: ${{env.ROOT_PATH}}/bench
         run: cargo test

diff --git a/bindings/rust/bench/README.md b/bindings/rust/bench/README.md
@@ -10,9 +10,6 @@ All benchmarks are run in an idealized environment, using only a single thread a
 # generate rust bindings
 ../generate.sh
 
-# set up bench crate
-./scripts/generate-certs.sh
-
 # run all benchmarks
 cargo bench
 ```

diff --git a/bindings/rust/bench/certs/ecdsa256 b/bindings/rust/bench/certs/ecdsa256
@@ -0,0 +1 @@
+../../../../tests/pems/permutations/ec_ecdsa_p256_sha256
diff --git a/bindings/rust/bench/certs/ecdsa384 b/bindings/rust/bench/certs/ecdsa384
@@ -0,0 +1 @@
+../../../../tests/pems/permutations/ec_ecdsa_p384_sha384
diff --git a/bindings/rust/bench/certs/readme.md b/bindings/rust/bench/certs/readme.md
@@ -0,0 +1,9 @@
+This folder actually just contains symlinks to the files in s2n-tls/test/pems/permutations
+
+```
+ln -s ../../../../tests/pems/permutations/ec_ecdsa_p256_sha256 ecdsa256
+ln -s ../../../../tests/pems/permutations/ec_ecdsa_p384_sha384 ecdsa384
+ln -s ../../../../tests/pems/permutations/rsae_pkcs_2048_sha256 rsa2048
+ln -s ../../../../tests/pems/permutations/rsae_pkcs_3072_sha384 rsa3072
+ln -s ../../../../tests/pems/permutations/rsae_pkcs_4096_sha384 rsa4096
+```
diff --git a/bindings/rust/bench/certs/rsa2048 b/bindings/rust/bench/certs/rsa2048
@@ -0,0 +1 @@
+../../../../tests/pems/permutations/rsae_pkcs_2048_sha256
diff --git a/bindings/rust/bench/certs/rsa3072 b/bindings/rust/bench/certs/rsa3072
@@ -0,0 +1 @@
+../../../../tests/pems/permutations/rsae_pkcs_3072_sha384
diff --git a/bindings/rust/bench/certs/rsa4096 b/bindings/rust/bench/certs/rsa4096
@@ -0,0 +1 @@
+../../../../tests/pems/permutations/rsae_pkcs_4096_sha384
diff --git a/tests/pems/permutations/README.md b/tests/pems/permutations/README.md
@@ -0,0 +1,128 @@
+All of the certs in this directory are generated using the `generate-certs.sh` script included in this directory.
+
+### PKI Structure
+```
+   ┌────root──────┐
+   │              │
+   │              │
+   ▼              │
+ branch           │
+   │              │
+   │              │
+   │              │
+   ▼              ▼
+ leaf            client
+```
+`generate-certs.sh` will generate 4 certificates for each key/length/digest selection, with the signing relationships that are indicated in the diagram above. This cert chain length was chosen because it matches the cert chain length used by public AWS services.
+
+### Cert Naming Format
+The folder `ecdsa_p521_sha256` indicates that certificates use a p521 ec key, and
+that the signature uses a SHA256 hash.
+
+`ec_ecdsa_p384_sha384`
+- public key: `secp384r1`
+- signature algorithm: `ecdsa-with-SHA384`
+```
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            41:0a:0b:67:a3:dd:fd:fe:a1:58:90:04:db:8d:0a:4e:02:49:3a:e4
+        Signature Algorithm: ecdsa-with-SHA384
+        Issuer: C = US, CN = branch
+        Validity
+            Not Before: Jan 22 22:05:48 2024 GMT
+            Not After : Jun 29 22:05:48 2203 GMT
+        Subject: C = US, CN = leaf
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:4e:2a:7f:07:b1:af:00:55:72:2a:72:da:ae:5b:
+                    dd:25:4e:d1:0d:26:a8:f1:41:6c:d6:e3:5d:2d:fc:
+                    01:23:81:ff:e7:97:ed:9f:d8:d0:67:a6:cd:0f:cf:
+                    c9:43:a8:e0:69:b8:71:72:79:51:6c:24:31:37:eb:
+                    27:a2:36:ef:b5:d6:f8:0d:80:e0:58:f2:8c:db:fa:
+                    7b:e9:ec:6e:41:9f:ec:8d:52:f8:1d:2e:7d:56:8e:
+                    03:99:46:99:e8:c8:37
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+```
+
+`rsae_pkcs_2048_sha256`
+- public key: `rsaEncryption`
+- 2048 bit modulus
+- signature algorithm: `sha256WithRSAEncryption`, (RSA PKCSv1.5)
+```
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            75:53:05:60:8a:58:f3:8a:da:3a:2d:16:df:66:21:4b:a4:71:a5:1d
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C = US, CN = branch
+        Validity
+            Not Before: Jan 22 22:05:50 2024 GMT
+            Not After : Jun 29 22:05:50 2203 GMT
+        Subject: C = US, CN = leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ae:d1:4c:b8:e6:c5:71:6d:c7:ff:f9:f5:49:ce:
+                    <SNIP>
+```
+
+`rsae_pss_4096_sha384`
+- public key: `rsaEncryption`
+- 4096 bit modulus
+- signature algorithm: `rsassaPss` with `sha384` hash
+```
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            19:49:db:2c:2a:8c:ca:e6:22:cc:a9:f9:95:85:a1:d0:85:2b:4e:12
+        Signature Algorithm: rsassaPss
+        Hash Algorithm: sha384
+        Mask Algorithm: mgf1 with sha384
+         Salt Length: 0x30
+        Trailer Field: 0x01 (default)
+        Issuer: C = US, CN = branch
+        Validity
+            Not Before: Jan 22 22:06:11 2024 GMT
+            Not After : Jun 29 22:06:11 2203 GMT
+        Subject: C = US, CN = leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:f6:8f:a5:c5:af:db:47:87:c4:12:bc:dc:43:15:
+                    76:ea:32:de:49:38:c9:7d:3f:15:57:3e:ee:fe:23:
+                    <SNIP>
+```
+
+`rsapss_pss_2048_sha256`
+- public key: `rsassaPss`
+- 2048 bit modulus
+- signature algorithm: `rsassaPss` with `sha256` hash
+```
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            4a:5d:a2:d9:f2:16:79:dc:3d:68:9e:6e:c9:8e:60:17:71:83:df:84
+        Signature Algorithm: rsassaPss
+        Hash Algorithm: sha256
+        Mask Algorithm: mgf1 with sha256
+         Salt Length: 0x20
+        Trailer Field: 0x01 (default)
+        Issuer: C = US, CN = branch
+        Validity
+            Not Before: Jan 22 22:06:12 2024 GMT
+            Not After : Jun 29 22:06:12 2203 GMT
+        Subject: C = US, CN = leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsassaPss
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a8:38:39:08:d8:8e:54:17:fb:88:7f:ea:68:a7:
+                    3d:04:d5:53:54:c2:da:49:ff:bd:63:0c:f3:9c:09:
+                    <SNIP>
+```
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha256/ca-cert.pem b/tests/pems/permutations/ec_ecdsa_p256_sha256/ca-cert.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha256/client-cert.pem b/tests/pems/permutations/ec_ecdsa_p256_sha256/client-cert.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha256/client-key.pem b/tests/pems/permutations/ec_ecdsa_p256_sha256/client-key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgPgwi4/ygq0jCpYGX
+zQSLdEwl6PK+pxJcW6+PeTFb1vShRANCAAQiEjIPjzYmWdhBwv9ccnPgx35ulOEO
+JcbavC3p3grXkwcAD/P4RlwrMjhm5O2tI5U99SU3xAPVpWQOTznvlTvd
+-----END PRIVATE KEY-----
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha256/server-chain.pem b/tests/pems/permutations/ec_ecdsa_p256_sha256/server-chain.pem
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----
+MIIBljCCATygAwIBAgIUHxKbtYzLM4Bct5v5Sagb8aZU/BcwCgYIKoZIzj0EAwIw
+HjELMAkGA1UEBhMCVVMxDzANBgNVBAMMBmJyYW5jaDAgFw0yNDAxMjMwMDU3MTha
+GA8yMjAzMDYzMDAwNTcxOFowHDELMAkGA1UEBhMCVVMxDTALBgNVBAMMBGxlYWYw
+WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASAmJKXt9P8hSz9ubntEokFn06+Rexr
+lEujwWUIq5Kl6QwvtfDCzrJN/sUmM5mssjq7pF6XVr6zFcQ6G4BfnwGio1gwVjAU
+BgNVHREEDTALgglsb2NhbGhvc3QwHQYDVR0OBBYEFNlOWJn7XfzC6xORzzjrdnqK
+UlJwMB8GA1UdIwQYMBaAFFkQhpDCJ3bAbXw1tXpmk5Fi7YIGMAoGCCqGSM49BAMC
+A0gAMEUCIB58OBwIruTJIy1f3tUgM/wXoO7fCoU25sMcioHBV9dYAiEA7Ufxa2JF
+I5LP6RGyllsjjnh0MJy1ZMXhw7X6GqFn4Rw=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha256/server-key.pem b/tests/pems/permutations/ec_ecdsa_p256_sha256/server-key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgtdsyhGtRvEB/lshV
+p3MeHGEhrn8R/i/zK4HqzUzvxiShRANCAASAmJKXt9P8hSz9ubntEokFn06+Rexr
+lEujwWUIq5Kl6QwvtfDCzrJN/sUmM5mssjq7pF6XVr6zFcQ6G4BfnwGi
+-----END PRIVATE KEY-----
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha384/ca-cert.pem b/tests/pems/permutations/ec_ecdsa_p256_sha384/ca-cert.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha384/client-cert.pem b/tests/pems/permutations/ec_ecdsa_p256_sha384/client-cert.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha384/client-key.pem b/tests/pems/permutations/ec_ecdsa_p256_sha384/client-key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgHQr/D8P7wfB0DX3t
+aD8lzxll5zDfVZFseHnXX6f5tNahRANCAAR0YSo6Oz8gPb5MsHwKjT1JDNKvmkfL
+MuA8wqpQBMFvV82oiP+wqZcUoAmzxk8I6/FrPni03/Khy+r56WHBAZhz
+-----END PRIVATE KEY-----
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha384/server-chain.pem b/tests/pems/permutations/ec_ecdsa_p256_sha384/server-chain.pem
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/pems/permutations/ec_ecdsa_p256_sha384/server-key.pem b/tests/pems/permutations/ec_ecdsa_p256_sha384/server-key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgy+WLpj8pvKJ5LF/O
+ILVZO4c0r04PxUUh0FwkcyNCAHmhRANCAARo5c8bW5ZvNTcEWtz73mgQIV4cIrf4
+o0ohle64D0AxXKAU9CtqXF3Uy9iYOYQ6RyzrPU2Y4zi3S8/0E64v7ouS
+-----END PRIVATE KEY-----
diff --git a/tests/pems/permutations/ec_ecdsa_p384_sha256/ca-cert.pem b/tests/pems/permutations/ec_ecdsa_p384_sha256/ca-cert.pem
@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----
+MIIB3TCCAWKgAwIBAgIUFyQIF1b4r1Wo8vBwCx0Yw/duyacwCgYIKoZIzj0EAwIw
+HDELMAkGA1UEBhMCVVMxDTALBgNVBAMMBHJvb3QwIBcNMjQwMTIzMDA1NzE4WhgP
+MjIwMzA2MzAwMDU3MThaMBwxCzAJBgNVBAYTAlVTMQ0wCwYDVQQDDARyb290MHYw
+EAYHKoZIzj0CAQYFK4EEACIDYgAE7586ec9JvXjU6hkdmT8kWBlEAnYfWieKnBlx
+7cKKwRY31fKbCLLPIBI0mqgxsgkjQ2upAWp923pVf493/2dSwh8tWEn/+FSa27CY
+HvTpOSxtWz7TUGFc/yPxFSOo9Rnuo2MwYTAdBgNVHQ4EFgQU+6jwSsuZrkHbndaF
+FRohJJN+U04wHwYDVR0jBBgwFoAU+6jwSsuZrkHbndaFFRohJJN+U04wDwYDVR0T
+AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAgQwCgYIKoZIzj0EAwIDaQAwZgIxAJZH
+CIfFqcXw+7MviAY/6zGvFtdHDcAGvbAwuWFPkv5d2qbX2H71kRBTDUNu7+auvgIx
+AMb9NuxIZg/g8Suvy8K4x2N9WmYB56R2LlX393lXM+F4KktbF4OBRBRnkgddfd96
+jQ==
+-----END CERTIFICATE-----
diff --git a/tests/pems/permutations/ec_ecdsa_p384_sha256/client-cert.pem b/tests/pems/permutations/ec_ecdsa_p384_sha256/client-cert.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/pems/permutations/ec_ecdsa_p384_sha256/client-key.pem b/tests/pems/permutations/ec_ecdsa_p384_sha256/client-key.pem
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDBIHi0N+94LmeOpgoRI
+/VIJuzxk6T0VqXwTTrDvYWkNr/RuXwY4pQl6/AJlPOTtvjihZANiAAQ8csTfvsbM
+07VCetjOs43cThn+p/A9Zl+w/fakHA0wPoOMOJj/gs2ipgrQQgPo78YbDMFlUqG/
+s2O4v2cBTSv4TphFW3n60oFdHlVVgmgQAl/Adb8QH5eNiCGbZpc+WuA=
+-----END PRIVATE KEY-----
diff --git a/tests/pems/permutations/ec_ecdsa_p384_sha256/server-chain.pem b/tests/pems/permutations/ec_ecdsa_p384_sha256/server-chain.pem
@@ -0,0 +1,38 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/pems/permutations/ec_ecdsa_p384_sha256/server-key.pem b/tests/pems/permutations/ec_ecdsa_p384_sha256/server-key.pem
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDB1xzNHZSmepeJCMYZ8
+uHsbTUOghnmaYUj03urauD6yb4tb6sqbikSA5qynvjv3AcqhZANiAAQaSC81VLMN
+HScH/H2pMncIMqI089dzoYZI++LxbrLS7GZ0DHljgqru2gORx0DTybpBK3LMujsw
+sy3jdO641IiqDAMHg+BZjx7omdZWnBaJvH0oozwUA7lzqQjTu9U42mM=
+-----END PRIVATE KEY-----