@@ -112,17 +112,22 @@ func TestRsaPss(t *testing.T) {
112
112
// works deterministically to auto-detect the length when
113
113
// verifying, so these tests actually pass as they should.
114
114
filesOverrideToPassZeroSLen := map [string ][]int {
115
- "rsa_pss_2048_sha1_mgf1_20_test.json" : []int {46 , 47 },
116
- "rsa_pss_2048_sha256_mgf1_0_test.json" : []int {67 , 68 },
117
- "rsa_pss_2048_sha256_mgf1_32_test.json" : []int {67 , 68 },
118
- "rsa_pss_2048_sha512_256_mgf1_28_test.json" : []int {13 , 14 , 15 },
119
- "rsa_pss_2048_sha512_256_mgf1_32_test.json" : []int {13 , 14 },
120
- "rsa_pss_3072_sha256_mgf1_32_test.json" : []int {67 , 68 },
121
- "rsa_pss_4096_sha256_mgf1_32_test.json" : []int {67 , 68 },
122
- "rsa_pss_4096_sha512_mgf1_32_test.json" : []int {136 , 137 },
115
+ "rsa_pss_2048_sha1_mgf1_20_test.json" : []int {46 , 47 },
116
+ "rsa_pss_2048_sha256_mgf1_0_test.json" : []int {67 , 68 },
117
+ "rsa_pss_2048_sha256_mgf1_32_test.json" : []int {67 , 68 },
118
+ "rsa_pss_3072_sha256_mgf1_32_test.json" : []int {67 , 68 },
119
+ "rsa_pss_4096_sha256_mgf1_32_test.json" : []int {67 , 68 },
120
+ "rsa_pss_4096_sha512_mgf1_32_test.json" : []int {136 , 137 },
123
121
// "rsa_pss_misc_test.json": nil, // TODO: This ones seems to be broken right now, but can enable later on.
124
122
}
125
123
124
+ if ! boringcryptoEnabled {
125
+ // boringcrypto doesn't support the truncated SHA-512 hashes, so only
126
+ // test them if boringcrypto isn't enabled.
127
+ filesOverrideToPassZeroSLen ["rsa_pss_2048_sha512_256_mgf1_28_test.json" ] = []int {13 , 14 , 15 }
128
+ filesOverrideToPassZeroSLen ["rsa_pss_2048_sha512_256_mgf1_32_test.json" ] = []int {13 , 14 }
129
+ }
130
+
126
131
for f := range filesOverrideToPassZeroSLen {
127
132
var root Root
128
133
readTestVector (t , f , & root )
0 commit comments