INNER CODE UNIT · Rust

subject_fingerprints_are_domain_separated

AChep/keyguard-app · commonAgent/src/lib.rs:289

    fn subject_fingerprints_are_domain_separated() {
        let first = SubjectFingerprint::derive(b"macos-signing-v1", b"same evidence")
            .expect("valid subject fingerprint");
        let second = SubjectFingerprint::derive(b"windows-signing-v1", b"same evidence")
            .expect("valid subject fingerprint");

        assert_ne!(first, second);
    }

    #[test]
    fn subject_fingerprint_rejects_ambiguous_empty_inputs() {
        assert!(matches!(
            SubjectFingerprint::derive(b"", b"evidence"),
            Err(IdentityError::EmptyEvidenceDomain)
        ));
        assert!(matches!(
            SubjectFingerprint::derive(b"macos-signing-v1", b""),
            Err(IdentityError::EmptyCanonicalEvidence)

View source record →