TLS: Some work on GOST support (RFC 9189)

2 files changed, 7 insertions, 2 deletions

diff --git a/crypto/test/src/tls/crypto/test/BcTlsCryptoTest.cs b/crypto/test/src/tls/crypto/test/BcTlsCryptoTest.cs
index 16e53b60b..1438c0585 100644
--- a/crypto/test/src/tls/crypto/test/BcTlsCryptoTest.cs
+++ b/crypto/test/src/tls/crypto/test/BcTlsCryptoTest.cs
@@ -119,7 +119,7 @@ namespace Org.BouncyCastle.Tls.Crypto.Tests
             case SignatureAlgorithm.rsa_pss_rsae_sha512:
                 return LoadCredentialedSigner(cryptoParams, "rsa-sign", signatureAndHashAlgorithm);
 
-            // TODO[draft-smyshlyaev-tls12-gost-suites-10] Add test resources for these
+            // TODO[RFC 9189] Add test resources for these
             case SignatureAlgorithm.gostr34102012_256:
             case SignatureAlgorithm.gostr34102012_512:
 
@@ -402,7 +402,7 @@ namespace Org.BouncyCastle.Tls.Crypto.Tests
         {
             int[] hashes = new int[] { CryptoHashAlgorithm.md5, CryptoHashAlgorithm.sha1, CryptoHashAlgorithm.sha224,
                 CryptoHashAlgorithm.sha256, CryptoHashAlgorithm.sha384, CryptoHashAlgorithm.sha512,
-                CryptoHashAlgorithm.sm3 };
+                CryptoHashAlgorithm.sm3, CryptoHashAlgorithm.gostr3411_2012_256 };
 
             for (int i = 0; i < hashes.Length; ++i)
             {
diff --git a/crypto/test/src/tls/test/TlsTestUtilities.cs b/crypto/test/src/tls/test/TlsTestUtilities.cs
index 789a5b513..72d09c808 100644
--- a/crypto/test/src/tls/test/TlsTestUtilities.cs
+++ b/crypto/test/src/tls/test/TlsTestUtilities.cs
@@ -159,6 +159,11 @@ namespace Org.BouncyCastle.Tls.Tests
                 return "rsa_pss_384";
             case SignatureAlgorithm.rsa_pss_pss_sha512:
                 return "rsa_pss_512";
+
+            // TODO[RFC 9189] Choose names here and apply reverse mappings in GetCACertResource(String)
+            case SignatureAlgorithm.gostr34102012_256:
+            case SignatureAlgorithm.gostr34102012_512:
+
             default:
                 throw new TlsFatalAlert(AlertDescription.internal_error);
             }