Skip to content

Add C2SP/Wycheproof RSA-PKCS1-v1.5 & JWS Test Vectors - #762

Merged
kevmoo merged 4 commits into
masterfrom
wycheproof-rsa-vectors
Sep 24, 2026
Merged

kevmoo merged 4 commits into
masterfrom
wycheproof-rsa-vectors

Conversation

@kevmoo

@kevmoo kevmoo commented Sep 23, 2026

Copy link
Copy Markdown
Collaborator

Adds Project Wycheproof test vectors to validate 's pure-Dart RSA PKCS#1 v1.5 implementation.

  • Adds generator tool .
  • Adds and logic to parse and verify RSA signatures using exact EMSA-PKCS1-v1_5 block match.
  • Exhaustive testing using Wycheproof vectors for RS256 signature verification and JSON Web Signatures.

@github-actions

github-actions Bot commented Sep 23, 2026 •

Copy link
Copy Markdown

PR Health

License Headers ✔️
// Copyright 2026 Google LLC
//
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file or at
// https://developers.google.com/open-source/licenses/bsd

Files
no missing headers

All source files should start with a license header.

This check can be disabled by tagging the PR with skip-license-check.

Breaking changes ✔️
Package Change Current Version New Version Needed Version Looking good?
googleapis_auth None 2.3.4 2.3.5-wip 2.3.5-wip ✔️

This check can be disabled by tagging the PR with skip-breaking-check.

Unused Dependencies ✔️
Package Status
googleapis_auth ✔️ All dependencies utilized correctly.

For details on how to fix these, see dependency_validator.

This check can be disabled by tagging the PR with skip-unused-dependencies-check.

API leaks ✔️

The following packages contain symbols visible in the public API, but not exported by the library. Export these symbols or remove them from your publicly visible API.

Package Leaked API symbol Leaking sources

This check can be disabled by tagging the PR with skip-leaking-check.

Changelog Entry ✔️
Package Changed Files

Changes to files need to be accounted for in their respective changelogs.

This check can be disabled by tagging the PR with skip-changelog-check.

Adds Project Wycheproof test vectors to validate package:googleapis_auth's pure-Dart RSA PKCS#1 v1.5 implementation.

- Adds generator tool .
- Adds  and  logic to parse and verify RSA signatures using exact EMSA-PKCS1-v1_5 block match.
- Exhaustive testing using Wycheproof vectors for RS256 signature verification and JSON Web Signatures.
@kevmoo
kevmoo force-pushed the wycheproof-rsa-vectors branch from 387dfee to 716b96e Compare September 23, 2026 19:57
Comment thread googleapis_auth/lib/src/crypto/rsa.dart
@kevmoo
kevmoo requested a review from brianquinlan September 24, 2026 01:17
@kevmoo
kevmoo merged commit 4748b32 into master Sep 24, 2026
40 checks passed
@kevmoo
kevmoo deleted the wycheproof-rsa-vectors branch September 24, 2026 18:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants