minitest.py

import ssl
import sys
import urllib.request
import json
import os
import oqs

# Example code testing oqs signature functionality. See more example code at
# https://github.com/open-quantum-safe/liboqs-python/tree/main/examples

message = b"This is the message to sign"

# create signer and verifier with sample signature mechanisms
sigalg = "Dilithium2"
with oqs.Signature(sigalg) as signer:
    with oqs.Signature(sigalg) as verifier:
        signer_public_key = signer.generate_keypair()
        signature = signer.sign(message)
        is_valid = verifier.verify(message, signature, signer_public_key)

if not is_valid:
    print("Failed to validate signature. Exiting.")
    sys.exit(1)
else:
    print("Validated signature for OQS algorithm %s" % (sigalg))

# Example code iterating over all supported OQS algorithms integrated into TLS

sslContext = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
sslContext.verify_mode = ssl.CERT_REQUIRED
# Trust LetsEncrypt root CA:
sslContext.load_verify_locations(cafile="isrgrootx1.pem")

# Retrieve interop test server root CA
with urllib.request.urlopen(
    "https://test.openquantumsafe.org/CA.crt", context=sslContext
) as response:
    data = response.read()
    with open("CA.crt", "w+b") as f:
        f.write(data)

# Retrieve JSON structure of all alg/port combinations:
with urllib.request.urlopen(
    "https://test.openquantumsafe.org/assignments.json", context=sslContext
) as response:
    assignments = json.loads(response.read())

# Trust test.openquantumsafe.org root CA:
sslContext.load_verify_locations(cafile="CA.crt")

# Iterate over all algorithm/port combinations:
for sigs, kexs in assignments.items():
    for kex, port in kexs.items():
        if kex != "*":  # '*' denoting any classic KEX alg
            # Enable use of the specific QSC KEX algorithm
            os.environ["TLS_DEFAULT_GROUPS"] = kex
        try:
            with urllib.request.urlopen(
                "https://test.openquantumsafe.org:" + str(port), context=sslContext
            ) as response:
                if response.getcode() != 200:
                    print("Failed to test %s successfully" % (kex))
                else:
                    print("Success testing %s at port %d" % (kex, port))
        except:
            print(
                "Test of algorithm combination SIG %s/KEX %s failed. "
                "Are all algorithms supported by current OQS library?" % (sigs, kex)
            )

    if "SHORT_TEST" in os.environ:
        sys.exit(0)