Use HMAC DRNG for RSA PGP keys

This commit is contained in:
thePR0M3TH3AN
2025-08-03 09:24:50 -04:00
parent 4f09ad5c26
commit aad41929bf
2 changed files with 32 additions and 4 deletions

View File

@@ -39,3 +39,21 @@ def test_pgp_key_determinism():
entry = data["entries"][str(idx)]
assert entry["key_type"] == "ed25519"
assert entry["user_id"] == "Test"
def test_pgp_rsa_key_determinism():
"""RSA PGP keys should be derived deterministically."""
with TemporaryDirectory() as tmpdir:
tmp_path = Path(tmpdir)
vault, enc_mgr = create_vault(tmp_path, TEST_SEED, TEST_PASSWORD)
cfg_mgr = ConfigManager(vault, tmp_path)
backup_mgr = BackupManager(tmp_path, cfg_mgr)
entry_mgr = EntryManager(vault, backup_mgr)
idx = entry_mgr.add_pgp_key("pgp", TEST_SEED, key_type="rsa", user_id="Test")
key1, fp1 = entry_mgr.get_pgp_key(idx, TEST_SEED)
key2, fp2 = entry_mgr.get_pgp_key(idx, TEST_SEED)
assert fp1 == fp2
assert key1 == key2