pi-codex-auto-review 0.1.0

package/node_modules/node-forge/tests/unit/kem.js

@@ -0,0 +1,167 @@
+var ASSERT = require('assert');
+var KEM = require('../../lib/kem');
+var MD = require('../../lib/md.all');
+var RSA = require('../../lib/rsa');
+var UTIL = require('../../lib/util');
+var JSBN = require('../../lib/jsbn');
+
+(function() {
+  function FixedSecureRandom(str) {
+    var bytes = UTIL.hexToBytes(str);
+    this.getBytesSync = function(count) {
+      // prepend zeros
+      return UTIL.fillString(String.fromCharCode(0), bytes.length - count) +
+        bytes;
+    };
+  }
+
+  describe('kem', function() {
+    it('should generate and encrypt a symmetric key and decrypt it 10x', function() {
+      for(var i = 0; i < 10; ++i) {
+        var kdf = new KEM.kdf1(MD.sha256.create());
+        var kem = KEM.rsa.create(kdf);
+
+        var pair = RSA.generateKeyPair(512);
+
+        var result = kem.encrypt(pair.publicKey, 256);
+        var key1 = result.key;
+        var key2 = kem.decrypt(pair.privateKey, result.encapsulation, 256);
+
+        ASSERT.equal(UTIL.bytesToHex(key1), UTIL.bytesToHex(key2));
+      }
+    });
+  });
+
+  /**
+   * According to section "C.6 Test vectors for RSA-KEM" from ISO-18033-2 final
+   * draft.
+   */
+  describe('C.6 Test vectors for RSA-KEM from ISO-18033-2 final', function() {
+    it('should pass test vector C.6.1', function() {
+      var n = '5888113332502691251761936431009284884966640757179802337490546478326238537107326596800820237597139824869184990638749556269785797065508097452399642780486933';
+      var e = '65537';
+      var d = '3202313555859948186315374524474173995679783580392140237044349728046479396037520308981353808895461806395564474639124525446044708705259675840210989546479265';
+
+      var C0 = '4603e5324cab9cef8365c817052d954d44447b1667099edc69942d32cd594e4ffcf268ae3836e2c35744aaa53ae201fe499806b67dedaa26bf72ecbd117a6fc0';
+      var K = '5f8de105b5e96b2e490ddecbd147dd1def7e3b8e0e6a26eb7b956ccb8b3bdc1ca975bc57c3989e8fbad31a224655d800c46954840ff32052cdf0d640562bdfadfa263cfccf3c52b29f2af4a1869959bc77f854cf15bd7a25192985a842dbff8e13efee5b7e7e55bbe4d389647c686a9a9ab3fb889b2d7767d3837eea4e0a2f04';
+
+      var kdf = new KEM.kdf1(MD.sha1.create());
+      var rnd = new FixedSecureRandom('032e45326fa859a72ec235acff929b15d1372e30b207255f0611b8f785d764374152e0ac009e509e7ba30cd2f1778e113b64e135cf4e2292c75efe5288edfda4');
+      var kem = KEM.rsa.create(kdf, {prng: rnd});
+
+      var rsaPublicKey = RSA.setPublicKey(
+        new JSBN.BigInteger(n), new JSBN.BigInteger(e));
+      var rsaPrivateKey = RSA.setPrivateKey(
+        new JSBN.BigInteger(n), null, new JSBN.BigInteger(d));
+
+      var result = kem.encrypt(rsaPublicKey, 128);
+      ASSERT.equal(UTIL.bytesToHex(result.encapsulation), C0);
+      ASSERT.equal(UTIL.bytesToHex(result.key), K);
+
+      var decryptedKey = kem.decrypt(rsaPrivateKey, result.encapsulation, 128);
+      ASSERT.equal(UTIL.bytesToHex(decryptedKey), K);
+    });
+
+    it('should pass test vector C.6.2', function() {
+      var n = '5888113332502691251761936431009284884966640757179802337490546478326238537107326596800820237597139824869184990638749556269785797065508097452399642780486933';
+      var e = '65537';
+      var d = '3202313555859948186315374524474173995679783580392140237044349728046479396037520308981353808895461806395564474639124525446044708705259675840210989546479265';
+
+      var C0 = '4603e5324cab9cef8365c817052d954d44447b1667099edc69942d32cd594e4ffcf268ae3836e2c35744aaa53ae201fe499806b67dedaa26bf72ecbd117a6fc0';
+      var K = '0e6a26eb7b956ccb8b3bdc1ca975bc57c3989e8fbad31a224655d800c46954840ff32052cdf0d640562bdfadfa263cfccf3c52b29f2af4a1869959bc77f854cf15bd7a25192985a842dbff8e13efee5b7e7e55bbe4d389647c686a9a9ab3fb889b2d7767d3837eea4e0a2f04b53ca8f50fb31225c1be2d0126c8c7a4753b0807';
+
+      var kdf = new KEM.kdf2(MD.sha1.create());
+      var rnd = new FixedSecureRandom('032e45326fa859a72ec235acff929b15d1372e30b207255f0611b8f785d764374152e0ac009e509e7ba30cd2f1778e113b64e135cf4e2292c75efe5288edfda4');
+      var kem = KEM.rsa.create(kdf, {prng: rnd});
+
+      var rsaPublicKey = RSA.setPublicKey(
+        new JSBN.BigInteger(n), new JSBN.BigInteger(e));
+      var rsaPrivateKey = RSA.setPrivateKey(
+        new JSBN.BigInteger(n), null, new JSBN.BigInteger(d));
+
+      var result = kem.encrypt(rsaPublicKey, 128);
+      ASSERT.equal(UTIL.bytesToHex(result.encapsulation), C0);
+      ASSERT.equal(UTIL.bytesToHex(result.key), K);
+
+      var decryptedKey = kem.decrypt(rsaPrivateKey, result.encapsulation, 128);
+      ASSERT.equal(UTIL.bytesToHex(decryptedKey), K);
+    });
+
+    it('should pass test vector C.6.3', function() {
+      var n = '5888113332502691251761936431009284884966640757179802337490546478326238537107326596800820237597139824869184990638749556269785797065508097452399642780486933';
+      var e = '65537';
+      var d = '3202313555859948186315374524474173995679783580392140237044349728046479396037520308981353808895461806395564474639124525446044708705259675840210989546479265';
+
+      var C0 = '4603e5324cab9cef8365c817052d954d44447b1667099edc69942d32cd594e4ffcf268ae3836e2c35744aaa53ae201fe499806b67dedaa26bf72ecbd117a6fc0';
+      var K = '09e2decf2a6e1666c2f6071ff4298305e2643fd510a2403db42a8743cb989de86e668d168cbe604611ac179f819a3d18412e9eb45668f2923c087c12fee0c5a0d2a8aa70185401fbbd99379ec76c663e875a60b4aacb1319fa11c3365a8b79a44669f26fb555c80391847b05eca1cb5cf8c2d531448d33fbaca19f6410ee1fcb';
+
+      var kdf = new KEM.kdf1(MD.sha256.create(), 20);
+      var rnd = new FixedSecureRandom('032e45326fa859a72ec235acff929b15d1372e30b207255f0611b8f785d764374152e0ac009e509e7ba30cd2f1778e113b64e135cf4e2292c75efe5288edfda4');
+      var kem = KEM.rsa.create(kdf, {prng: rnd});
+
+      var rsaPublicKey = RSA.setPublicKey(
+        new JSBN.BigInteger(n), new JSBN.BigInteger(e));
+      var rsaPrivateKey = RSA.setPrivateKey(
+        new JSBN.BigInteger(n), null, new JSBN.BigInteger(d));
+
+      var result = kem.encrypt(rsaPublicKey, 128);
+      ASSERT.equal(UTIL.bytesToHex(result.encapsulation), C0);
+      ASSERT.equal(UTIL.bytesToHex(result.key), K);
+
+      var decryptedKey = kem.decrypt(rsaPrivateKey, result.encapsulation, 128);
+      ASSERT.equal(UTIL.bytesToHex(decryptedKey), K);
+    });
+
+    it('should pass test vector C.6.4', function() {
+      var n = '5888113332502691251761936431009284884966640757179802337490546478326238537107326596800820237597139824869184990638749556269785797065508097452399642780486933';
+      var e = '65537';
+      var d = '3202313555859948186315374524474173995679783580392140237044349728046479396037520308981353808895461806395564474639124525446044708705259675840210989546479265';
+
+      var C0 = '4603e5324cab9cef8365c817052d954d44447b1667099edc69942d32cd594e4ffcf268ae3836e2c35744aaa53ae201fe499806b67dedaa26bf72ecbd117a6fc0';
+      var K = '10a2403db42a8743cb989de86e668d168cbe604611ac179f819a3d18412e9eb45668f2923c087c12fee0c5a0d2a8aa70185401fbbd99379ec76c663e875a60b4aacb1319fa11c3365a8b79a44669f26fb555c80391847b05eca1cb5cf8c2d531448d33fbaca19f6410ee1fcb260892670e0814c348664f6a7248aaf998a3acc6';
+
+      var kdf = new KEM.kdf2(MD.sha256.create(), 20);
+      var rnd = new FixedSecureRandom('00032e45326fa859a72ec235acff929b15d1372e30b207255f0611b8f785d764374152e0ac009e509e7ba30cd2f1778e113b64e135cf4e2292c75efe5288edfda4');
+      var kem = KEM.rsa.create(kdf, {prng: rnd});
+
+      var rsaPublicKey = RSA.setPublicKey(
+        new JSBN.BigInteger(n), new JSBN.BigInteger(e));
+      var rsaPrivateKey = RSA.setPrivateKey(
+        new JSBN.BigInteger(n), null, new JSBN.BigInteger(d));
+
+      var result = kem.encrypt(rsaPublicKey, 128);
+      ASSERT.equal(UTIL.bytesToHex(result.encapsulation), C0);
+      ASSERT.equal(UTIL.bytesToHex(result.key), K);
+
+      var decryptedKey = kem.decrypt(rsaPrivateKey, result.encapsulation, 128);
+      ASSERT.equal(UTIL.bytesToHex(decryptedKey), K);
+    });
+  });
+
+  describe('prepended zeros test', function() {
+    it('should pass when random has leading zeros', function() {
+      var n = '5888113332502691251761936431009284884966640757179802337490546478326238537107326596800820237597139824869184990638749556269785797065508097452399642780486933';
+      var e = '65537';
+      var d = '3202313555859948186315374524474173995679783580392140237044349728046479396037520308981353808895461806395564474639124525446044708705259675840210989546479265';
+
+      var C0 = '5f268a76c1aed04bc195a143d7ee768bee0aad308d16196274a02d9c1a72bbe10cbf718de323fc0135c5f8129f96ac8f504d9623960dc54cd87bddee94f5a0b2';
+      var K = '8bf41e59dc1b83142ee32569a347a94539e48c98347c685a29e3aa8b7a3ea714d68c1a43c4a760c9d4a45149b0ce8b681e98076bdd4393394c7832a7fa71848257772ac38a4e7fbe96e8bb383becbb7242841946e82e35d9ef1667245fc82601e7edf53b897f5ce2b6bce8e1e3212abd5a8a99a0c9b99472e22a313dac396383';
+
+      var kdf = new KEM.kdf1(MD.sha1.create());
+      var rnd = new FixedSecureRandom('000e45326fa859a72ec235acff929b15d1372e30b207255f0611b8f785d764374152e0ac009e509e7ba30cd2f1778e113b64e135cf4e2292c75efe5288edfda4');
+      var kem = KEM.rsa.create(kdf, {prng: rnd});
+
+      var rsaPublicKey = RSA.setPublicKey(
+        new JSBN.BigInteger(n), new JSBN.BigInteger(e));
+      var rsaPrivateKey = RSA.setPrivateKey(
+        new JSBN.BigInteger(n), null, new JSBN.BigInteger(d));
+
+      var result = kem.encrypt(rsaPublicKey, 128);
+      ASSERT.equal(UTIL.bytesToHex(result.encapsulation), C0);
+      ASSERT.equal(UTIL.bytesToHex(result.key), K);
+
+      var decryptedKey = kem.decrypt(rsaPrivateKey, result.encapsulation, 128);
+      ASSERT.equal(UTIL.bytesToHex(decryptedKey), K);
+    });
+  });
+})();

package/node_modules/node-forge/tests/unit/md5.js

@@ -0,0 +1,114 @@
+var ASSERT = require('assert');
+var MD5 = require('../../lib/md5');
+var UTIL = require('../../lib/util');
+
+(function() {
+  describe('md5', function() {
+    it('should have correct digest length', function() {
+      var md = MD5.create();
+      ASSERT.equal(md.digestLength, 16);
+    });
+
+    it('should digest the empty string', function() {
+      var md = MD5.create();
+      ASSERT.equal(md.digest().toHex(), 'd41d8cd98f00b204e9800998ecf8427e');
+    });
+
+    it('should digest "abc"', function() {
+      var md = MD5.create();
+      md.update('abc');
+      ASSERT.equal(md.digest().toHex(), '900150983cd24fb0d6963f7d28e17f72');
+    });
+
+    it('should digest "The quick brown fox jumps over the lazy dog"', function() {
+      var md = MD5.create();
+      md.update('The quick brown fox jumps over the lazy dog');
+      ASSERT.equal(md.digest().toHex(), '9e107d9d372bb6826bd81d3542a419d6');
+    });
+
+    it('should digest "c\'\u00e8"', function() {
+      var md = MD5.create();
+      md.update('c\'\u00e8', 'utf8');
+      ASSERT.equal(md.digest().toHex(), '8ef7c2941d78fe89f31e614437c9db59');
+    });
+
+    it('should digest "THIS IS A MESSAGE"', function() {
+      var md = MD5.create();
+      md.start();
+      md.update('THIS IS ');
+      md.update('A MESSAGE');
+      // do twice to check continuing digest
+      ASSERT.equal(md.digest().toHex(), '78eebfd9d42958e3f31244f116ab7bbe');
+      ASSERT.equal(md.digest().toHex(), '78eebfd9d42958e3f31244f116ab7bbe');
+    });
+
+    it('should digest a long message', function() {
+      var input = UTIL.hexToBytes(
+        '0100002903018d32e9c6dc423774c4c39a5a1b78f44cc2cab5f676d39' +
+        'f703d29bfa27dfeb870000002002f01000200004603014c2c1e835d39' +
+        'da71bc0857eb04c2b50fe90dbb2a8477fe7364598d6f0575999c20a6c' +
+        '7248c5174da6d03ac711888f762fc4ed54f7254b32273690de849c843' +
+        '073d002f000b0003d20003cf0003cc308203c8308202b0a0030201020' +
+        '20100300d06092a864886f70d0101050500308186310b300906035504' +
+        '0613025553311d301b060355040a13144469676974616c2042617a616' +
+        '1722c20496e632e31443042060355040b133b4269746d756e6b206c6f' +
+        '63616c686f73742d6f6e6c7920436572746966696361746573202d204' +
+        '17574686f72697a6174696f6e20766961204254503112301006035504' +
+        '0313096c6f63616c686f7374301e170d3130303231343137303931395' +
+        'a170d3230303231333137303931395a308186310b3009060355040613' +
+        '025553311d301b060355040a13144469676974616c2042617a6161722' +
+        'c20496e632e31443042060355040b133b4269746d756e6b206c6f6361' +
+        '6c686f73742d6f6e6c7920436572746966696361746573202d2041757' +
+        '4686f72697a6174696f6e207669612042545031123010060355040313' +
+        '096c6f63616c686f737430820122300d06092a864886f70d010101050' +
+        '00382010f003082010a0282010100dc436f17d6909d8a9d6186ea218e' +
+        'b5c86b848bae02219bd56a71203daf07e81bc19e7e98134136bcb0128' +
+        '81864bf03b3774652ad5eab85dba411a5114ffeac09babce75f313143' +
+        '45512cd87c91318b2e77433270a52185fc16f428c3ca412ad6e9484bc' +
+        '2fb87abb4e8fb71bf0f619e31a42340b35967f06c24a741a31c979c0b' +
+        'b8921a90a47025fbeb8adca576979e70a56830c61170c9647c18c0794' +
+        'd68c0df38f3aac5fc3b530e016ea5659715339f3f3c209cdee9dbe794' +
+        'b5af92530c5754c1d874b78974bfad994e0dfc582275e79feb522f6e4' +
+        'bcc2b2945baedfb0dbdaebb605f9483ff0bea29ecd5f4d6f2769965d1' +
+        'b3e04f8422716042680011ff676f0203010001a33f303d300c0603551' +
+        'd130101ff04023000300e0603551d0f0101ff0404030204f0301d0603' +
+        '551d250416301406082b0601050507030106082b06010505070302300' +
+        'd06092a864886f70d010105050003820101009c4562be3f2d8d8e3880' +
+        '85a697f2f106eaeff4992a43f198fe3dcf15c8229cf1043f061a38204' +
+        'f73d86f4fb6348048cc5279ed719873aa10e3773d92b629c2c3fcce04' +
+        '012c81ba3b4ec451e9644ec5191078402d845e05d02c7b4d974b45882' +
+        '76e5037aba7ef26a8bddeb21e10698c82f425e767dc401adf722fa73a' +
+        'b78cfa069bd69052d7ca6a75cc9225550e315d71c5f8764362ea4dbc6' +
+        'ecb837a8471043c5a7f826a71af145a053090bd4bccca6a2c552841cd' +
+        'b1908a8352f49283d2e641acdef667c7543af441a16f8294251e2ac37' +
+        '6fa507b53ae418dd038cd20cef1e7bfbf5ae03a7c88d93d843abaabbd' +
+        'c5f3431132f3e559d2dd414c3eda38a210b80e0000001000010201002' +
+        '6a220b7be857402819b78d81080d01a682599bbd00902985cc64edf8e' +
+        '520e4111eb0e1729a14ffa3498ca259cc9ad6fc78fa130d968ebdb78d' +
+        'c0b950c0aa44355f13ba678419185d7e4608fe178ca6b2cef33e41937' +
+        '78d1a70fe4d0dfcb110be4bbb4dbaa712177655728f914ab4c0f6c4ae' +
+        'f79a46b3d996c82b2ebe9ed1748eb5cace7dc44fb67e73f452a047f2e' +
+        'd199b3d50d5db960acf03244dc8efa4fc129faf8b65f9e52e62b55447' +
+        '22bd17d2358e817a777618a4265a3db277fc04851a82a91fe6cdcb812' +
+        '7f156e0b4a5d1f54ce2742eb70c895f5f8b85f5febe69bc73e891f928' +
+        '0826860a0c2ef94c7935e6215c3c4cd6b0e43e80cca396d913d36be');
+
+      var md = MD5.create();
+      md.update(input);
+      ASSERT.equal(md.digest().toHex(), 'd15a2da0e92c3da55dc573f885b6e653');
+    });
+
+    it('should digest multiple long messages', function() {
+      // Note: might be too slow on old browsers
+      // done multiple times to check hot loop optimizations
+      for(var loop = 0; loop < 3; ++loop) {
+        var md = MD5.create();
+        for(var i = 0; i < 10000; ++i) {
+          md.update('abc');
+        }
+        ASSERT.equal(
+          md.digest().toHex(), 'b3e98306e7367f93cd7cb870af64f7b7');
+      }
+    });
+  });
+})();

package/node_modules/node-forge/tests/unit/mgf1.js

@@ -0,0 +1,16 @@
+var ASSERT = require('assert');
+var MD = require('../../lib/md.all');
+var MGF = require('../../lib/mgf');
+var UTIL = require('../../lib/util');
+
+(function() {
+  describe('mgf1', function() {
+    it('should digest the empty string', function() {
+      var seed = UTIL.hexToBytes('032e45326fa859a72ec235acff929b15d1372e30b207255f0611b8f785d764374152e0ac009e509e7ba30cd2f1778e113b64e135cf4e2292c75efe5288edfda4');
+      var expect = UTIL.hexToBytes('5f8de105b5e96b2e490ddecbd147dd1def7e3b8e0e6a26eb7b956ccb8b3bdc1ca975bc57c3989e8fbad31a224655d800c46954840ff32052cdf0d640562bdfadfa263cfccf3c52b29f2af4a1869959bc77f854cf15bd7a25192985a842dbff8e13efee5b7e7e55bbe4d389647c686a9a9ab3fb889b2d7767d3837eea4e0a2f04');
+      var mgf = MGF.mgf1.create(MD.sha1.create());
+      var result = mgf.generate(seed, expect.length);
+      ASSERT.equal(result, expect);
+    });
+  });
+})();

package/node_modules/node-forge/tests/unit/pbkdf2.js

@@ -0,0 +1,182 @@
+var ASSERT = require('assert');
+var FORGE = require('../../lib/forge');
+var MD = require('../../lib/md.all');
+var PBKDF2 = require('../../lib/pbkdf2');
+var UTIL = require('../../lib/util');
+
+(function() {
+  describe('pbkdf2', function() {
+    it('should derive a password with hmac-sha-1 c=1', function() {
+      var dkHex = UTIL.bytesToHex(PBKDF2('password', 'salt', 1, 20));
+      ASSERT.equal(dkHex, '0c60c80f961f0e71f3a9b524af6012062fe037a6');
+    });
+
+    it('should derive a password with hmac-sha-1 c=2', function() {
+      var dkHex = UTIL.bytesToHex(PBKDF2('password', 'salt', 2, 20));
+      ASSERT.equal(dkHex, 'ea6c014dc72d6f8ccd1ed92ace1d41f0d8de8957');
+    });
+
+    it('should derive a password with hmac-sha-1 c=5 keylen=8', function() {
+      var salt = UTIL.hexToBytes('1234567878563412');
+      var dkHex = UTIL.bytesToHex(PBKDF2('password', salt, 5, 8));
+      ASSERT.equal(dkHex, 'd1daa78615f287e6');
+    });
+
+    it('should derive a utf8 password with hmac-sha-1 c=1 keylen=16', function() {
+      var dkHex = UTIL.bytesToHex(PBKDF2('中', 'salt', 1, 16));
+      ASSERT.equal(dkHex, '5f719aa196edc4df6b1556de503faaf3');
+    });
+
+    it('should derive a password with hmac-sha-1 c=4096', function() {
+      // Note: might be too slow on old browsers
+      var dkHex = UTIL.bytesToHex(PBKDF2('password', 'salt', 4096, 20));
+      ASSERT.equal(dkHex, '4b007901b765489abead49d926f721d065a429c1');
+    });
+
+    /*
+    it('should derive a password with hmac-sha-1 c=16777216', function() {
+      // Note: too slow
+      var dkHex = UTIL.bytesToHex(PBKDF2('password', 'salt', 16777216, 20));
+      ASSERT.equal(dkHex, 'eefe3d61cd4da4e4e9945b3d6ba2158c2634e984');
+    });*/
+
+    it('should derive a password with hmac-sha-256 c=1000', function() {
+      // Note: might be too slow on old browsers
+      var salt = '4bcda0d1c689fe465c5b8a817f0ddf3d';
+      var md = MD.sha256.create();
+      var dkHex = UTIL.bytesToHex(PBKDF2('password', salt, 1000, 48, md));
+      ASSERT.equal(dkHex, '9da8a5f4ae605f35e82e5beac5f362df15c4255d88f738d641466a4107f9970238e768e72af29ac89a1b16ff277b31d2');
+    });
+
+    it('should derive a password with hmac-sha-256 (passed as an algorithm identifier) c=1000', function() {
+      // Note: might be too slow on old browsers
+      var salt = '4bcda0d1c689fe465c5b8a817f0ddf3d';
+      var dkHex = UTIL.bytesToHex(PBKDF2('password', salt, 1000, 48, 'sha256'));
+      ASSERT.equal(dkHex, '9da8a5f4ae605f35e82e5beac5f362df15c4255d88f738d641466a4107f9970238e768e72af29ac89a1b16ff277b31d2');
+    });
+
+    it('should derive a password with hmac-sha-512 c=1000', function() {
+      // Note: might be too slow on old browsers
+      var salt = '4bcda0d1c689fe465c5b8a817f0ddf3d';
+      var md = MD.sha512.create();
+      var dkHex = UTIL.bytesToHex(PBKDF2('password', salt, 1000, 48, md));
+      ASSERT.equal(dkHex, '975725960aa736f721182962677291a9085c75421c38636098d904f5a96f11a485f767082b710a69f8a46bcf9eba29f3');
+    });
+
+    it('should derive a password with hmac-sha-512 (passed as an algorithm identifier) c=1000', function() {
+      // Note: might be too slow on old browsers
+      var salt = '4bcda0d1c689fe465c5b8a817f0ddf3d';
+      var dkHex = UTIL.bytesToHex(PBKDF2('password', salt, 1000, 48, 'sha512'));
+      ASSERT.equal(dkHex, '975725960aa736f721182962677291a9085c75421c38636098d904f5a96f11a485f767082b710a69f8a46bcf9eba29f3');
+    });
+
+    it('should asynchronously derive a password with hmac-sha-1 c=1', function(done) {
+      PBKDF2('password', 'salt', 1, 20, function(err, dk) {
+        ASSERT.ifError(err);
+        var dkHex = UTIL.bytesToHex(dk);
+        ASSERT.equal(dkHex, '0c60c80f961f0e71f3a9b524af6012062fe037a6');
+        done();
+      });
+    });
+
+    it('should asynchronously derive a password with hmac-sha-1 c=2', function(done) {
+      PBKDF2('password', 'salt', 2, 20, function(err, dk) {
+        ASSERT.ifError(err);
+        var dkHex = UTIL.bytesToHex(dk);
+        ASSERT.equal(dkHex, 'ea6c014dc72d6f8ccd1ed92ace1d41f0d8de8957');
+        done();
+      });
+    });
+
+    it('should asynchronously derive a password with hmac-sha-1 c=5 keylen=8', function(done) {
+      var salt = UTIL.hexToBytes('1234567878563412');
+      PBKDF2('password', salt, 5, 8, function(err, dk) {
+        ASSERT.ifError(err);
+        var dkHex = UTIL.bytesToHex(dk);
+        ASSERT.equal(dkHex, 'd1daa78615f287e6');
+        done();
+      });
+    });
+
+    it('should asynchronously derive a password with hmac-sha-1 c=4096', function(done) {
+      // Note: might be too slow on old browsers
+      PBKDF2('password', 'salt', 4096, 20, function(err, dk) {
+        ASSERT.ifError(err);
+        var dkHex = UTIL.bytesToHex(dk);
+        ASSERT.equal(dkHex, '4b007901b765489abead49d926f721d065a429c1');
+        done();
+      });
+    });
+
+    /*
+    it('should asynchronously derive a password with hmac-sha-1 c=16777216', function(done) {
+      // Note: too slow
+      PBKDF2('password', 'salt', 16777216, 20, function(err, dk) {
+        ASSERT.ifError(err);
+        var dkHex = UTIL.bytesToHex(dk);
+        ASSERT.equal(dkHex, 'eefe3d61cd4da4e4e9945b3d6ba2158c2634e984');
+        done();
+      });
+    });*/
+
+    it('should asynchronously derive a password with hmac-sha-256 c=1000', function(done) {
+      // Note: might be too slow on old browsers
+      var salt = '4bcda0d1c689fe465c5b8a817f0ddf3d';
+      var md = MD.sha256.create();
+      PBKDF2('password', salt, 1000, 48, md, function(err, dk) {
+        ASSERT.ifError(err);
+        var dkHex = UTIL.bytesToHex(dk);
+        ASSERT.equal(dkHex, '9da8a5f4ae605f35e82e5beac5f362df15c4255d88f738d641466a4107f9970238e768e72af29ac89a1b16ff277b31d2');
+        done();
+      });
+    });
+
+    it('should asynchronously derive a password with hmac-sha-256 (passed as an algorithm identifier) c=1000', function(done) {
+      // Note: might be too slow on old browsers
+      var salt = '4bcda0d1c689fe465c5b8a817f0ddf3d';
+      PBKDF2('password', salt, 1000, 48, 'sha256', function(err, dk) {
+        ASSERT.ifError(err);
+        var dkHex = UTIL.bytesToHex(dk);
+        ASSERT.equal(dkHex, '9da8a5f4ae605f35e82e5beac5f362df15c4255d88f738d641466a4107f9970238e768e72af29ac89a1b16ff277b31d2');
+        done();
+      });
+    });
+
+    it('should asynchronously derive a password with hmac-sha-512 c=1000', function(done) {
+      // Note: might be too slow on old browsers
+      var salt = '4bcda0d1c689fe465c5b8a817f0ddf3d';
+      var md = MD.sha512.create();
+      PBKDF2('password', salt, 1000, 48, md, function(err, dk) {
+        var dkHex = UTIL.bytesToHex(dk);
+        ASSERT.equal(dkHex, '975725960aa736f721182962677291a9085c75421c38636098d904f5a96f11a485f767082b710a69f8a46bcf9eba29f3');
+        done();
+      });
+    });
+
+    it('should asynchronously derive a password with hmac-sha-512 (passed as an algorithm identifier) c=1000', function(done) {
+      // Note: might be too slow on old browsers
+      var salt = '4bcda0d1c689fe465c5b8a817f0ddf3d';
+      PBKDF2('password', salt, 1000, 48, 'sha512', function(err, dk) {
+        var dkHex = UTIL.bytesToHex(dk);
+        ASSERT.equal(dkHex, '975725960aa736f721182962677291a9085c75421c38636098d904f5a96f11a485f767082b710a69f8a46bcf9eba29f3');
+        done();
+      });
+    });
+
+    it('should derive a password with "usePureJavaScript"', function() {
+      // save
+      var purejs = FORGE.options.usePureJavaScript;
+      // test possible native mode
+      FORGE.options.usePureJavaScript = false;
+      var dkHex0 = UTIL.bytesToHex(PBKDF2('password', 'salt', 1024, 20));
+      // test pure mode
+      FORGE.options.usePureJavaScript = true;
+      var dkHex1 = UTIL.bytesToHex(PBKDF2('password', 'salt', 1024, 20));
+      // check
+      ASSERT.equal(dkHex0, 'f9d39c571d66a03c2a71a81535b0c2d0396b500a');
+      ASSERT.equal(dkHex0, dkHex1);
+      // restore
+      FORGE.options.usePureJavaScript = purejs;
+    });
+  });
+})();

package/node_modules/node-forge/tests/unit/pem.js

@@ -0,0 +1,159 @@
+var ASSERT = require('assert');
+var PEM = require('../../lib/pem');
+
+(function() {
+  var _input = '-----BEGIN PRIVACY-ENHANCED MESSAGE-----\r\n' +
+    'Proc-Type: 4,ENCRYPTED\r\n' +
+    'Content-Domain: RFC822\r\n' +
+    'DEK-Info: DES-CBC,F8143EDE5960C597\r\n' +
+    'Originator-ID-Symmetric: linn@zendia.enet.dec.com,,\r\n' +
+    'Recipient-ID-Symmetric: linn@zendia.enet.dec.com,ptf-kmc,3\r\n' +
+    'Key-Info: DES-ECB,RSA-MD2,9FD3AAD2F2691B9A,\r\n' +
+    ' B70665BB9BF7CBCDA60195DB94F727D3\r\n' +
+    'Recipient-ID-Symmetric: pem-dev@tis.com,ptf-kmc,4\r\n' +
+    'Key-Info: DES-ECB,RSA-MD2,161A3F75DC82EF26,\r\n' +
+    ' E2EF532C65CBCFF79F83A2658132DB47\r\n' +
+    '\r\n' +
+    'LLrHB0eJzyhP+/fSStdW8okeEnv47jxe7SJ/iN72ohNcUk2jHEUSoH1nvNSIWL9M\r\n' +
+    '8tEjmF/zxB+bATMtPjCUWbz8Lr9wloXIkjHUlBLpvXR0UrUzYbkNpk0agV2IzUpk\r\n' +
+    'J6UiRRGcDSvzrsoK+oNvqu6z7Xs5Xfz5rDqUcMlK1Z6720dcBWGGsDLpTpSCnpot\r\n' +
+    'dXd/H5LMDWnonNvPCwQUHg==\r\n' +
+    '-----END PRIVACY-ENHANCED MESSAGE-----\r\n' +
+    '-----BEGIN PRIVACY-ENHANCED MESSAGE-----\r\n' +
+    'Proc-Type: 4,ENCRYPTED\r\n' +
+    'Content-Domain: RFC822\r\n' +
+    'DEK-Info: DES-CBC,BFF968AA74691AC1\r\n' +
+    'Originator-Certificate:\r\n' +
+    ' MIIBlTCCAScCAWUwDQYJKoZIhvcNAQECBQAwUTELMAkGA1UEBhMCVVMxIDAeBgNV\r\n' +
+    ' BAoTF1JTQSBEYXRhIFNlY3VyaXR5LCBJbmMuMQ8wDQYDVQQLEwZCZXRhIDExDzAN\r\n' +
+    ' BgNVBAsTBk5PVEFSWTAeFw05MTA5MDQxODM4MTdaFw05MzA5MDMxODM4MTZaMEUx\r\n' +
+    ' CzAJBgNVBAYTAlVTMSAwHgYDVQQKExdSU0EgRGF0YSBTZWN1cml0eSwgSW5jLjEU\r\n' +
+    ' MBIGA1UEAxMLVGVzdCBVc2VyIDEwWTAKBgRVCAEBAgICAANLADBIAkEAwHZHl7i+\r\n' +
+    ' yJcqDtjJCowzTdBJrdAiLAnSC+CnnjOJELyuQiBgkGrgIh3j8/x0fM+YrsyF1u3F\r\n' +
+    ' LZPVtzlndhYFJQIDAQABMA0GCSqGSIb3DQEBAgUAA1kACKr0PqphJYw1j+YPtcIq\r\n' +
+    ' iWlFPuN5jJ79Khfg7ASFxskYkEMjRNZV/HZDZQEhtVaU7Jxfzs2wfX5byMp2X3U/\r\n' +
+    ' 5XUXGx7qusDgHQGs7Jk9W8CW1fuSWUgN4w==\r\n' +
+    'Key-Info: RSA,\r\n' +
+    ' I3rRIGXUGWAF8js5wCzRTkdhO34PTHdRZY9Tuvm03M+NM7fx6qc5udixps2Lng0+\r\n' +
+    ' wGrtiUm/ovtKdinz6ZQ/aQ==\r\n' +
+    'Issuer-Certificate:\r\n' +
+    ' MIIB3DCCAUgCAQowDQYJKoZIhvcNAQECBQAwTzELMAkGA1UEBhMCVVMxIDAeBgNV\r\n' +
+    ' BAoTF1JTQSBEYXRhIFNlY3VyaXR5LCBJbmMuMQ8wDQYDVQQLEwZCZXRhIDExDTAL\r\n' +
+    ' BgNVBAsTBFRMQ0EwHhcNOTEwOTAxMDgwMDAwWhcNOTIwOTAxMDc1OTU5WjBRMQsw\r\n' +
+    ' CQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIERhdGEgU2VjdXJpdHksIEluYy4xDzAN\r\n' +
+    ' BgNVBAsTBkJldGEgMTEPMA0GA1UECxMGTk9UQVJZMHAwCgYEVQgBAQICArwDYgAw\r\n' +
+    ' XwJYCsnp6lQCxYykNlODwutF/jMJ3kL+3PjYyHOwk+/9rLg6X65B/LD4bJHtO5XW\r\n' +
+    ' cqAz/7R7XhjYCm0PcqbdzoACZtIlETrKrcJiDYoP+DkZ8k1gCk7hQHpbIwIDAQAB\r\n' +
+    ' MA0GCSqGSIb3DQEBAgUAA38AAICPv4f9Gx/tY4+p+4DB7MV+tKZnvBoy8zgoMGOx\r\n' +
+    ' dD2jMZ/3HsyWKWgSF0eH/AJB3qr9zosG47pyMnTf3aSy2nBO7CMxpUWRBcXUpE+x\r\n' +
+    ' EREZd9++32ofGBIXaialnOgVUn0OzSYgugiQ077nJLDUj0hQehCizEs5wUJ35a5h\r\n' +
+    'MIC-Info: RSA-MD5,RSA,\r\n' +
+    ' UdFJR8u/TIGhfH65ieewe2lOW4tooa3vZCvVNGBZirf/7nrgzWDABz8w9NsXSexv\r\n' +
+    ' AjRFbHoNPzBuxwmOAFeA0HJszL4yBvhG\r\n' +
+    'Recipient-ID-Asymmetric:\r\n' +
+    ' MFExCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdSU0EgRGF0YSBTZWN1cml0eSwgSW5j\r\n' +
+    ' LjEPMA0GA1UECxMGQmV0YSAxMQ8wDQYDVQQLEwZOT1RBUlk=,66\r\n' +
+    'Key-Info: RSA,\r\n' +
+    ' O6BS1ww9CTyHPtS3bMLD+L0hejdvX6Qv1HK2ds2sQPEaXhX8EhvVphHYTjwekdWv\r\n' +
+    ' 7x0Z3Jx2vTAhOYHMcqqCjA==\r\n' +
+    '\r\n' +
+    'qeWlj/YJ2Uf5ng9yznPbtD0mYloSwIuV9FRYx+gzY+8iXd/NQrXHfi6/MhPfPF3d\r\n' +
+    'jIqCJAxvld2xgqQimUzoS1a4r7kQQ5c/Iua4LqKeq3ciFzEv/MbZhA==\r\n' +
+    '-----END PRIVACY-ENHANCED MESSAGE-----\r\n' +
+    '-----BEGIN RSA PRIVATE KEY-----\r\n' +
+    'MIIBPAIBAAJBALjXU+IdHkSkdBscgXf+EBoa55ruAIsU50uDFjFBkp+rWFt5AOGF\r\n' +
+    '9xL1/HNIby5M64BCw021nJTZKEOmXKdmzYsCAwEAAQJBAApyYRNOgf9vLAC8Q7T8\r\n' +
+    'bvyKuLxQ50b1D319EywFgLv1Yn0s/F9F+Rew6c04Q0pIqmuOGUM7z94ul/y5OlNJ\r\n' +
+    '2cECIQDveEW1ib2+787l7Y0tMeDzf/HQl4MAWdcxXWOeUFK+7QIhAMWZsukutEn9\r\n' +
+    '9/yqFMt8bL/dclfNn1IAgUL4+dMJ7zdXAiEAhaxGhVKxN28XuCOFhe/s2R/XdQ/O\r\n' +
+    'UZjU1bqCzDGcLvUCIGYmxu71Tg7SVFkyM/3eHPozKOFrU2m5CRnuTHhlMl2RAiEA\r\n' +
+    '0vhM5TEmmNWz0anPVabqDj9TA0z5MsDJQcn5NmO9xnw=\r\n' +
+    '-----END RSA PRIVATE KEY-----\r\n';
+
+  var _csrWithNew = '-----BEGIN NEW CERTIFICATE REQUEST-----\r\n' +
+    'MIIE9jCCAt4CAQAwfjELMAkGA1UEBhMCVVMxETAPBgNVBAgMCFZpcmdpbmlhMRMw\r\n' +
+    'EQYDVQQHDApCbGFja3NidXJnMR0wGwYDVQQKDBREaWdpdGFsIEJhemFhciwgSW5j\r\n' +
+    'LjEMMAoGA1UECwwDT1NTMRowGAYDVQQDDBFkaWdpdGFsYmF6YWFyLmNvbTCCAiIw\r\n' +
+    'DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKbqOZ0oC5L+GFnuvwuWnq5J/wxQ\r\n' +
+    '6upw5qvA+zfHZYkqdC170OYKsfC67/W6591631xGhVden26/BdxilpeSX1hFVqPF\r\n' +
+    'IND7KJvo039QdFQzmzBgqcY5cr11OT9jYjoQMPCehRmbmv6RNaKqTdITMrGZMFzk\r\n' +
+    'HFWfshuY71A0+wlz2pOzi79qL7tdcm5s6Whge3/0AAZi19Ze148vCH+HHnbQ7jMH\r\n' +
+    'bGJlFZhvGYd2D/clCVnG4w4mCX6scMBZXtf4k1qZAuyhEpTJl8vxCExQs2iCN8lw\r\n' +
+    '4tEJH979MQsTDCNf5EZOBzMa4tJtybvQcmFQT2Xjb/8qYT0GyBP+XyJ6nmY3S0R2\r\n' +
+    'xZtIsuKlayTw1GG/cYg3OC73G1lbVFLYLh1R+nEs14XX5Dj3J0zTxLeWewFIL7FP\r\n' +
+    'D77oRqTHoHNIWz3SJ3S0OTqCYr+5h4vjUOCyXdjCZMZSFOWfCjcMIqcUsysj05gL\r\n' +
+    'YBw5z+ZUn17zEEKBuq1tjS1UInbLPBbDMYc1P0NAO5UltdpOs0FPXWgHtzpVoYgZ\r\n' +
+    '7W2mXSTgP3xfVicWK6SBP0ejJmcgt4eB5gKidfg0t1BbB/4TgHLrDgGZapVA4DrX\r\n' +
+    'agUxalhOrvV0Pm3zWdn6DNGNQbtm0xOebzEFL2bDRangK3OnA4EtOMj39cK2f4bY\r\n' +
+    '6ENG38DrC/ctvFmHAgMBAAGgMzAxBgkqhkiG9w0BCQ4xJDAiMAsGA1UdDwQEAwIE\r\n' +
+    'MDATBgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAGXNXqKmv\r\n' +
+    'Dzkvm+ZTTmwsjf8zlCp1M+QtPSvCMGGUJtqwIFarIKc1H5ZIyfh3p+ws1xDFw0ZK\r\n' +
+    'xPyIleeCqMVPAL9me4l8oaQ2IoQ917rmcsdfbPh3/8JkU5rotoRBW0JtsMTx5A6U\r\n' +
+    '7FluYFeKVTM1GZo3TpMhG7NZFePtIJfP/hPwtNnIrBkMOLmvyfN68UO1uhazx5/a\r\n' +
+    'Uanp1JF9+05hwNSIL/R6TC/RQdeA5b3fycDPfhHhot7Bs/FczgF6I7Qrmyb4pzmR\r\n' +
+    'e0knYlOucs0CsV/qj2K2Iouu0lWA0nZQQsbBtvN8dExYZpGPl4LJqNGYF4rLsoep\r\n' +
+    'VyDD79rwCM6oqYbQ6GXQJdzXnQoAJTTFyg8bGmj9osBaSb8WKfz1VspnHzsbryxT\r\n' +
+    'LPCI9Drg9kB28f7PGN0KWZnmWgD2qV/UuVPjxNhHTC8nEHCQP0gPeHrRgCyhDT4n\r\n' +
+    'WPluKuX1B+xO5aOXOSmKcHNufDrN1l/ErhOvYeAimPq1Ag74Z946s27fO0M00kHK\r\n' +
+    '+ex8zj29okA0QSsJuCVbOA1tFlyoRd7apN/z1mpcvpb+TDZgdH/HFyrMK1bH2J5u\r\n' +
+    'I1iuhuP3g2HSdjLC0wuUA4u73WcbcH7X9tnAHymFgGa5pNUlRPllbIRWvCM+7UaY\r\n' +
+    'x6n+naGYblpSHXiboXRsuGWUtTjvqNVdOxA=\r\n' +
+    '-----END NEW CERTIFICATE REQUEST-----\r\n';
+
+  var _csrWithoutNew = '-----BEGIN CERTIFICATE REQUEST-----\r\n' +
+    'MIIE9jCCAt4CAQAwfjELMAkGA1UEBhMCVVMxETAPBgNVBAgMCFZpcmdpbmlhMRMw\r\n' +
+    'EQYDVQQHDApCbGFja3NidXJnMR0wGwYDVQQKDBREaWdpdGFsIEJhemFhciwgSW5j\r\n' +
+    'LjEMMAoGA1UECwwDT1NTMRowGAYDVQQDDBFkaWdpdGFsYmF6YWFyLmNvbTCCAiIw\r\n' +
+    'DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKbqOZ0oC5L+GFnuvwuWnq5J/wxQ\r\n' +
+    '6upw5qvA+zfHZYkqdC170OYKsfC67/W6591631xGhVden26/BdxilpeSX1hFVqPF\r\n' +
+    'IND7KJvo039QdFQzmzBgqcY5cr11OT9jYjoQMPCehRmbmv6RNaKqTdITMrGZMFzk\r\n' +
+    'HFWfshuY71A0+wlz2pOzi79qL7tdcm5s6Whge3/0AAZi19Ze148vCH+HHnbQ7jMH\r\n' +
+    'bGJlFZhvGYd2D/clCVnG4w4mCX6scMBZXtf4k1qZAuyhEpTJl8vxCExQs2iCN8lw\r\n' +
+    '4tEJH979MQsTDCNf5EZOBzMa4tJtybvQcmFQT2Xjb/8qYT0GyBP+XyJ6nmY3S0R2\r\n' +
+    'xZtIsuKlayTw1GG/cYg3OC73G1lbVFLYLh1R+nEs14XX5Dj3J0zTxLeWewFIL7FP\r\n' +
+    'D77oRqTHoHNIWz3SJ3S0OTqCYr+5h4vjUOCyXdjCZMZSFOWfCjcMIqcUsysj05gL\r\n' +
+    'YBw5z+ZUn17zEEKBuq1tjS1UInbLPBbDMYc1P0NAO5UltdpOs0FPXWgHtzpVoYgZ\r\n' +
+    '7W2mXSTgP3xfVicWK6SBP0ejJmcgt4eB5gKidfg0t1BbB/4TgHLrDgGZapVA4DrX\r\n' +
+    'agUxalhOrvV0Pm3zWdn6DNGNQbtm0xOebzEFL2bDRangK3OnA4EtOMj39cK2f4bY\r\n' +
+    '6ENG38DrC/ctvFmHAgMBAAGgMzAxBgkqhkiG9w0BCQ4xJDAiMAsGA1UdDwQEAwIE\r\n' +
+    'MDATBgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAGXNXqKmv\r\n' +
+    'Dzkvm+ZTTmwsjf8zlCp1M+QtPSvCMGGUJtqwIFarIKc1H5ZIyfh3p+ws1xDFw0ZK\r\n' +
+    'xPyIleeCqMVPAL9me4l8oaQ2IoQ917rmcsdfbPh3/8JkU5rotoRBW0JtsMTx5A6U\r\n' +
+    '7FluYFeKVTM1GZo3TpMhG7NZFePtIJfP/hPwtNnIrBkMOLmvyfN68UO1uhazx5/a\r\n' +
+    'Uanp1JF9+05hwNSIL/R6TC/RQdeA5b3fycDPfhHhot7Bs/FczgF6I7Qrmyb4pzmR\r\n' +
+    'e0knYlOucs0CsV/qj2K2Iouu0lWA0nZQQsbBtvN8dExYZpGPl4LJqNGYF4rLsoep\r\n' +
+    'VyDD79rwCM6oqYbQ6GXQJdzXnQoAJTTFyg8bGmj9osBaSb8WKfz1VspnHzsbryxT\r\n' +
+    'LPCI9Drg9kB28f7PGN0KWZnmWgD2qV/UuVPjxNhHTC8nEHCQP0gPeHrRgCyhDT4n\r\n' +
+    'WPluKuX1B+xO5aOXOSmKcHNufDrN1l/ErhOvYeAimPq1Ag74Z946s27fO0M00kHK\r\n' +
+    '+ex8zj29okA0QSsJuCVbOA1tFlyoRd7apN/z1mpcvpb+TDZgdH/HFyrMK1bH2J5u\r\n' +
+    'I1iuhuP3g2HSdjLC0wuUA4u73WcbcH7X9tnAHymFgGa5pNUlRPllbIRWvCM+7UaY\r\n' +
+    'x6n+naGYblpSHXiboXRsuGWUtTjvqNVdOxA=\r\n' +
+    '-----END CERTIFICATE REQUEST-----\r\n';
+
+  describe('pem', function() {
+    it('should decode and re-encode PEM messages', function() {
+      var msgs = PEM.decode(_input);
+
+      var output = '';
+      for(var i = 0; i < msgs.length; ++i) {
+        output += PEM.encode(msgs[i]);
+      }
+
+      ASSERT.equal(output, _input);
+    });
+
+    it('should decode a CSR from PEM with NEW in the labels', function() {
+      var csrs = PEM.decode(_csrWithNew);
+      for(var i = 0; i < csrs.length; ++i) {
+        ASSERT.equal(csrs[i].type, 'CERTIFICATE REQUEST');
+      }
+    });
+
+    it('should decode a CSR from PEM without NEW in the labels', function() {
+      var csrs = PEM.decode(_csrWithoutNew);
+      for(var i = 0; i < csrs.length; ++i) {
+        ASSERT.equal(csrs[i].type, 'CERTIFICATE REQUEST');
+      }
+    });
+  });
+})();