From 9425d2376b3601e625556d7d3f07e8ba1cd2800a Mon Sep 17 00:00:00 2001
From: Paul Kehrer <paul.l.kehrer@gmail.com>
Date: Sun, 23 Apr 2023 15:22:50 -0500
Subject: [PATCH] add one more RSA PSS invalid test vector (#8798)

---
 docs/development/test-vectors.rst                 |   2 ++
 .../custom/rsa_pss_cert_unsupported_mgf_hash.der  | Bin 0 -> 891 bytes
 2 files changed, 2 insertions(+)
 create mode 100644 vectors/cryptography_vectors/x509/custom/rsa_pss_cert_unsupported_mgf_hash.der

diff --git a/docs/development/test-vectors.rst b/docs/development/test-vectors.rst
index e86f27afd..1916c57c4 100644
--- a/docs/development/test-vectors.rst
+++ b/docs/development/test-vectors.rst
@@ -483,6 +483,8 @@ Custom X.509 Vectors
   signature algorithm.
 * ``rsa_pss_cert_no_sig_params.der`` - A self-signed certificate with an invalid
   RSA PSS signature algorithm that is missing signature parameters for PSS.
+* ``rsa_pss_cert_unsupported_mgf_hash.der`` - A self-signed certificate with an
+  unsupported MGF1 hash algorithm in the signature algorithm.
 * ``long-form-name-attribute.pem`` - A certificate with ``subject`` and ``issuer``
   names containing attributes whose value's tag is encoded in long-form.
 * ``mismatch_inner_outer_sig_algorithm.der`` - A leaf certificate derived from
diff --git a/vectors/cryptography_vectors/x509/custom/rsa_pss_cert_unsupported_mgf_hash.der b/vectors/cryptography_vectors/x509/custom/rsa_pss_cert_unsupported_mgf_hash.der
new file mode 100644
index 0000000000000000000000000000000000000000..d6276d09886695d703095a9102a18fe52db41bec
GIT binary patch
literal 891
zcmXqLVlFpmVlr63%*4pVBx2w2|Jioo@6~q`k{@nZ{;zfWnm;oPoY*+E+C196^D;7W
z8JI5MH{fOCOlb39Ol4+aVq|4lC}SXnP{DyFyNHE}iQ%4sl%a%y7#nja3o{RYa#3YL
zNq%}!VnIfwUS__5oH(zMk%5V^fsui+p`k^TIIpp>fr%kd49vx=w~0}~fE!^u7jqLM
zKZ8LNBNtN>BO}B1h?jY-8fLQ`Ls!oERbY3<<7r?01KTaGTz}SAiq|CV)%>iRHZ9{+
z>=D)2gXcre2``$#8n@ungvRSf=6HwC+q7{XS3vrf`BG^u-WpFQPHA#Dq15=rgoR<F
zzP5K-vB`AqH5*qO_BFdP=43zI)t>O)m_v2m(SJYJvnu6X-Tipx+^;Knyceqa3A<gq
zx=$%6$<e3CX9kO$&E#N_-)=vazByjhd2_}=r453v`E0Arei_tf?B6OVR9(4Av;2|T
zvB;Y~cZCbHP99lsIJ)rD()#q1n--gj?b7fl=NFdT_C`%mE+i&E;Q!%pgIzKOC+@gr
zuFp81_=x4TM`Aj&b+6}yjfd{7WnyMzU|bw*5NIF^40~BV7BLo){1E1kj2upN&J3Fv
zc9|SzwAL{_VjvHaR%QXlQ3G}b{2&FwjEw(TSPhtglz|OWpd098CJHeF5rhg319moM
zEoK&021s%M#u6igzJ}=2<9=_;vg2E>oSz>zch>|D@3}u7PPEwiagy*P?GE1Xi@TR-
z@=g7{#xo}CUPh0}p+CBckL=x@3JPUQ9~3yRvaY!FQ}x7^l@dzDP40)Czt^Z1*Bk7a
zu+D#{_$8my58tJ5$knhg^u1tuU2m%um32I=l#54=VMnskIUA{BO=bK1;N)E{mON|$
zfo17WR3jd?{63j9;c#@soF{Kz9=oj3p_|K4cxHBov2kdV=;MV2#)S-$`5~7t&s)jY
zvLJ0XOB6eM{yuMos<#tQ2nSwRX!N*4>}*5rU-Q+s?n!=NS+zp@kKZ%xn~bx#ip)eq
Zc6#6ZHNDAqLf|W#(|K(>weK++0{~X}ONRge

literal 0
HcmV?d00001