We need to add some negative tests. Ideally the test spec for these should come through GlueCOSE, same as we do with the positive test cases. So I have started by drafting a small document that isolates requirement language from the COSE RFC and identifies test conditions (see the Negative conditions sub-sections) that are relevant in the context of Sign1.
@shizhMSFT, @SteveLasker, @qmuntal: Please see here for a human-friendly read-out, and this one to add your comments / discuss further.
Based on your feedback I'll start writing the GlueCOSE test vectors we need.
We need to add some negative tests. Ideally the test spec for these should come through GlueCOSE, same as we do with the positive test cases. So I have started by drafting a small document that isolates requirement language from the COSE RFC and identifies test conditions (see the Negative conditions sub-sections) that are relevant in the context of Sign1.
@shizhMSFT, @SteveLasker, @qmuntal: Please see here for a human-friendly read-out, and this one to add your comments / discuss further.
Based on your feedback I'll start writing the GlueCOSE test vectors we need.