1 files changed, 582 insertions, 0 deletions
diff --git a/rust/vendor/der-parser-6.0.1/tests/der_parser.rs b/rust/vendor/der-parser-6.0.1/tests/der_parser.rs
new file mode 100644
index 0000000..33665f3
--- /dev/null
+++ b/rust/vendor/der-parser-6.0.1/tests/der_parser.rs
@@ -0,0 +1,582 @@
+#![allow(deprecated)]
+
+use der_parser::ber::*;
+use der_parser::der::*;
+use der_parser::error::*;
+use der_parser::oid::*;
+use der_parser::*;
+use hex_literal::hex;
+use nom::branch::alt;
+use nom::combinator::map;
+use nom::error::ErrorKind;
+use nom::sequence::tuple;
+use nom::Err;
+use pretty_assertions::assert_eq;
+use test_case::test_case;
+
+#[test]
+fn test_der_bool() {
+    let empty = &b""[..];
+    let b_true = DerObject::from_obj(BerObjectContent::Boolean(true));
+    let b_false = DerObject::from_obj(BerObjectContent::Boolean(false));
+    assert_eq!(parse_der_bool(&[0x01, 0x01, 0x00]), Ok((empty, b_false)));
+    assert_eq!(parse_der_bool(&[0x01, 0x01, 0xff]), Ok((empty, b_true)));
+    assert_eq!(
+        parse_der_bool(&[0x01, 0x01, 0x7f]),
+        Err(Err::Error(BerError::DerConstraintFailed))
+    );
+}
+
+#[test]
+fn test_der_int() {
+    let empty = &b""[..];
+    let bytes = hex!("02 03 01 00 01");
+    let expected = DerObject::from_obj(BerObjectContent::Integer(b"\x01\x00\x01"));
+    assert_eq!(parse_der_integer(&bytes), Ok((empty, expected)));
+    let res = parse_der_u64(&bytes);
+    assert_eq!(res.expect("integer").1, 0x10001);
+    // wrong tag
+    let bytes = hex!("04 03 41 41 41");
+    let res = parse_der_integer(&bytes);
+    assert!(res.is_err());
+    let res = parse_der_u64(&bytes);
+    assert!(res.is_err());
+    // very long integer
+    let bytes = hex!("02 0b 40 41 02 03 04 05 06 07 08 09 0a");
+    let res = parse_der_integer(&bytes);
+    assert!(res.is_ok());
+    let res = parse_der_u64(&bytes);
+    assert!(res.is_err());
+}
+
+#[test]
+fn test_der_bitstring_primitive() {
+    let empty = &b""[..];
+    //
+    // correct DER encoding
+    //
+    let bytes = &[0x03, 0x04, 0x06, 0x6e, 0x5d, 0xc0];
+    let expected = DerObject::from_obj(BerObjectContent::BitString(
+        6,
+        BitStringObject { data: &bytes[3..] },
+    ));
+    assert_eq!(parse_der_bitstring(bytes), Ok((empty, expected)));
+    //
+    // correct encoding, but wrong padding bits (not all set to 0)
+    //
+    let bytes = &[0x03, 0x04, 0x06, 0x6e, 0x5d, 0xe0];
+    assert_eq!(
+        parse_der_bitstring(bytes),
+        Err(Err::Error(BerError::DerConstraintFailed))
+    );
+    //
+    // long form of length (invalid, < 127)
+    //
+    let bytes = &[0x03, 0x81, 0x04, 0x06, 0x6e, 0x5d, 0xc0];
+    assert_eq!(
+        parse_der_bitstring(bytes),
+        Err(Err::Error(BerError::DerConstraintFailed))
+    );
+}
+
+#[test]
+fn test_der_bitstring_constructed() {
+    let bytes = &hex!("23 81 0c 03 03 00 0a 3b 03 05 04 5f 29 1c d0");
+    assert_eq!(
+        parse_der_bitstring(bytes),
+        Err(Err::Error(BerError::DerConstraintFailed))
+    );
+}
+
+#[test]
+fn test_der_indefinite_length() {
+    let bytes = &hex!("23 80 03 03 00 0a 3b 03 05 04 5f 29 1c d0 00 00");
+    assert_eq!(
+        parse_der_bitstring(bytes),
+        Err(Err::Error(BerError::DerConstraintFailed))
+    );
+}
+
+#[test]
+fn test_der_octetstring_primitive() {
+    let empty = &b""[..];
+    let bytes = [0x04, 0x05, 0x41, 0x41, 0x41, 0x41, 0x41];
+    let expected = DerObject::from_obj(BerObjectContent::OctetString(b"AAAAA"));
+    assert_eq!(parse_der_octetstring(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_null() {
+    let empty = &b""[..];
+    let expected = DerObject::from_obj(BerObjectContent::Null);
+    assert_eq!(parse_der_null(&[0x05, 0x00]), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_oid() {
+    let empty = &b""[..];
+    let bytes = [
+        0x06, 0x09, 0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x05,
+    ];
+    let expected = DerObject::from_obj(BerObjectContent::OID(
+        Oid::from(&[1, 2, 840, 113_549, 1, 1, 5]).unwrap(),
+    ));
+    assert_eq!(parse_der_oid(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_enum() {
+    let empty = &b""[..];
+    let expected = DerObject::from_obj(BerObjectContent::Enum(2));
+    assert_eq!(parse_der_enum(&[0x0a, 0x01, 0x02]), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_utf8string() {
+    let empty = &b""[..];
+    let bytes = [
+        0x0c, 0x0a, 0x53, 0x6f, 0x6d, 0x65, 0x2d, 0x53, 0x74, 0x61, 0x74, 0x65,
+    ];
+    let expected = DerObject::from_obj(BerObjectContent::UTF8String("Some-State"));
+    assert_eq!(parse_der_utf8string(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_relativeoid() {
+    let empty = &b""[..];
+    let bytes = [0x0d, 0x04, 0xc2, 0x7b, 0x03, 0x02];
+    let expected = DerObject::from_obj(BerObjectContent::RelativeOID(
+        Oid::from_relative(&[8571, 3, 2]).unwrap(),
+    ));
+    assert_eq!(parse_der_relative_oid(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_seq() {
+    let empty = &b""[..];
+    let bytes = [0x30, 0x05, 0x02, 0x03, 0x01, 0x00, 0x01];
+    let expected = DerObject::from_seq(vec![DerObject::from_int_slice(b"\x01\x00\x01")]);
+    assert_eq!(parse_der_sequence(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_set() {
+    let empty = &b""[..];
+    let bytes = [0x31, 0x05, 0x02, 0x03, 0x01, 0x00, 0x01];
+    let expected = DerObject::from_set(vec![DerObject::from_int_slice(b"\x01\x00\x01")]);
+    assert_eq!(parse_der_set(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_seq_defined() {
+    let empty = &b""[..];
+    let bytes = [
+        0x30, 0x0a, 0x02, 0x03, 0x01, 0x00, 0x01, 0x02, 0x03, 0x01, 0x00, 0x00,
+    ];
+    let expected = DerObject::from_seq(vec![
+        DerObject::from_int_slice(b"\x01\x00\x01"),
+        DerObject::from_int_slice(b"\x01\x00\x00"),
+    ]);
+    fn parser(i: &[u8]) -> DerResult {
+        parse_der_sequence_defined(
+            // the nom `tuple` combinator returns a tuple, so we have to map it
+            // to a list
+            map(tuple((parse_der_integer, parse_der_integer)), |(a, b)| {
+                vec![a, b]
+            }),
+        )(i)
+    }
+    assert_eq!(parser(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_set_defined() {
+    let empty = &b""[..];
+    let bytes = [
+        0x31, 0x0a, 0x02, 0x03, 0x01, 0x00, 0x01, 0x02, 0x03, 0x01, 0x00, 0x00,
+    ];
+    let expected = DerObject::from_set(vec![
+        DerObject::from_int_slice(b"\x01\x00\x01"),
+        DerObject::from_int_slice(b"\x01\x00\x00"),
+    ]);
+    fn parser(i: &[u8]) -> DerResult {
+        parse_der_set_defined(
+            // the nom `tuple` combinator returns a tuple, so we have to map it
+            // to a list
+            map(tuple((parse_der_integer, parse_der_integer)), |(a, b)| {
+                vec![a, b]
+            }),
+        )(i)
+    }
+    assert_eq!(parser(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_seq_of() {
+    let empty = &b""[..];
+    let bytes = [
+        0x30, 0x0a, 0x02, 0x03, 0x01, 0x00, 0x01, 0x02, 0x03, 0x01, 0x00, 0x00,
+    ];
+    let expected = DerObject::from_seq(vec![
+        DerObject::from_int_slice(b"\x01\x00\x01"),
+        DerObject::from_int_slice(b"\x01\x00\x00"),
+    ]);
+    fn parser(i: &[u8]) -> DerResult {
+        parse_der_sequence_of(parse_der_integer)(i)
+    }
+    assert_eq!(parser(&bytes), Ok((empty, expected.clone())));
+    //
+    fn parser2(i: &[u8]) -> BerResult {
+        parse_ber_sequence_of(parse_der_integer)(i)
+    }
+    assert_eq!(parser2(&bytes), Ok((empty, expected)));
+}
+
+// extra bytes are simply ignored
+#[test]
+fn test_der_seq_of_incomplete() {
+    let bytes = [0x30, 0x07, 0x02, 0x03, 0x01, 0x00, 0x01, 0x00, 0x00];
+    fn parser(i: &[u8]) -> DerResult {
+        parse_der_sequence_of(parse_der_integer)(i)
+    }
+    assert_eq!(parser(&bytes), Err(Err::Failure(BerError::InvalidTag)));
+    //
+    fn parser2(i: &[u8]) -> BerResult<Vec<BerObject>> {
+        parse_ber_sequence_of_v(parse_der_integer)(i)
+    }
+    // eprintln!("trailing data");
+    assert_eq!(parser2(&bytes), Err(Err::Failure(BerError::InvalidTag)));
+    let h = &hex!("30 06 02 03 01 00 01 02");
+    // eprintln!("remaining 02 at end (incomplete)");
+    assert_eq!(
+        parser2(h),
+        Err(Err::Error(BerError::NomError(ErrorKind::Eof)))
+    );
+}
+
+#[test]
+fn test_der_set_of() {
+    let empty = &b""[..];
+    let bytes = [
+        0x31, 0x0a, 0x02, 0x03, 0x01, 0x00, 0x01, 0x02, 0x03, 0x01, 0x00, 0x00,
+    ];
+    let expected = DerObject::from_set(vec![
+        DerObject::from_int_slice(b"\x01\x00\x01"),
+        DerObject::from_int_slice(b"\x01\x00\x00"),
+    ]);
+    fn parser(i: &[u8]) -> DerResult {
+        parse_der_set_of(parse_der_integer)(i)
+    }
+    assert_eq!(parser(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_utctime() {
+    let bytes = hex!("17 0D 30 32 31 32 31 33 31 34 32 39 32 33 5A FF");
+    let expected = DerObject::from_obj(BerObjectContent::UTCTime(
+        std::str::from_utf8(&bytes[2..(2 + 0x0d)]).unwrap(),
+    ));
+    assert_eq!(parse_der_utctime(&bytes), Ok((&[0xff][..], expected)));
+    let bytes = hex!("17 0c 30 32 31 32 31 33 31 34 32 39 32 33");
+    parse_der_utctime(&bytes).err().expect("expected error");
+}
+
+#[test]
+fn test_der_generalizedtime() {
+    let empty = &b""[..];
+    let bytes = [
+        0x18, 0x0D, 0x30, 0x32, 0x31, 0x32, 0x31, 0x33, 0x31, 0x34, 0x32, 0x39, 0x32, 0x33, 0x5A,
+    ];
+    let expected = DerObject::from_obj(BerObjectContent::GeneralizedTime(
+        std::str::from_utf8(&bytes[2..]).unwrap(),
+    ));
+    assert_eq!(parse_der_generalizedtime(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_generalstring() {
+    let empty = &b""[..];
+    let bytes = [0x1b, 0x04, 0x63, 0x69, 0x66, 0x73];
+    let expected = DerObject::from_obj(BerObjectContent::GeneralString(b"cifs"));
+    assert_eq!(parse_der_generalstring(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_contextspecific() {
+    let bytes = [0xa0, 0x03, 0x02, 0x01, 0x02];
+    let empty = &b""[..];
+    let expected = DerObject {
+        header: BerObjectHeader::new(BerClass::ContextSpecific, 1, BerTag(0), 3)
+            .with_raw_tag(Some(&[0xa0])),
+        content: BerObjectContent::Unknown(BerClass::ContextSpecific, BerTag(0), &bytes[2..]),
+    };
+    assert_eq!(parse_der(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_explicit_optional() {
+    let empty = &b""[..];
+    let bytes = [0xa0, 0x03, 0x02, 0x01, 0x02];
+    let header = BerObjectHeader::new(BerClass::ContextSpecific, 1, BerTag(0), 3)
+        .with_raw_tag(Some(&[0xa0]));
+    let expected = DerObject {
+        header: header.clone(),
+        content: BerObjectContent::Optional(Some(Box::new(BerObject::from_header_and_content(
+            header,
+            BerObjectContent::Tagged(
+                BerClass::ContextSpecific,
+                BerTag(0),
+                Box::new(DerObject::from_int_slice(b"\x02")),
+            ),
+        )))),
+    };
+    assert_eq!(
+        parse_der_explicit_optional(&bytes, BerTag(0), parse_der_integer),
+        Ok((empty, expected))
+    );
+    let expected2 = DerObject::from_obj(BerObjectContent::Optional(None));
+    assert_eq!(
+        parse_der_explicit_optional(&bytes, BerTag(1), parse_der_integer),
+        Ok((&bytes[..], expected2))
+    );
+}
+
+#[test]
+fn test_der_implicit() {
+    let empty = &b""[..];
+    let bytes = [0x81, 0x04, 0x70, 0x61, 0x73, 0x73];
+    let expected = DerObject {
+        header: BerObjectHeader::new(BerClass::ContextSpecific, 0, BerTag(1), 4)
+            .with_raw_tag(Some(&[0x81])),
+        content: BerObjectContent::IA5String("pass"),
+    };
+    fn der_read_ia5string_content<'a>(
+        i: &'a [u8],
+        hdr: &BerObjectHeader,
+        depth: usize,
+    ) -> BerResult<'a, BerObjectContent<'a>> {
+        ber_read_element_content_as(i, DerTag::Ia5String, hdr.len, hdr.is_constructed(), depth)
+    }
+    assert_eq!(
+        parse_der_implicit(&bytes, BerTag(1), der_read_ia5string_content),
+        Ok((empty, expected))
+    );
+    assert_eq!(
+        parse_der_implicit(&bytes, BerTag(2), der_read_ia5string_content),
+        Err(Err::Error(BerError::InvalidTag))
+    );
+}
+
+#[test]
+fn test_der_implicit_long_tag() {
+    let empty = &b""[..];
+    let bytes = [0x5f, 0x52, 0x04, 0x70, 0x61, 0x73, 0x73];
+    let expected = DerObject {
+        header: BerObjectHeader::new(BerClass::Application, 0, BerTag(0x52), 4)
+            .with_raw_tag(Some(&[0x5f, 0x52])),
+        content: BerObjectContent::IA5String("pass"),
+    };
+    fn der_read_ia5string_content<'a>(
+        i: &'a [u8],
+        hdr: &BerObjectHeader,
+        depth: usize,
+    ) -> BerResult<'a, BerObjectContent<'a>> {
+        ber_read_element_content_as(i, DerTag::Ia5String, hdr.len, hdr.is_constructed(), depth)
+    }
+    assert_eq!(
+        parse_der_implicit(&bytes, BerTag(0x52), der_read_ia5string_content),
+        Ok((empty, expected))
+    );
+    assert_eq!(
+        parse_der_implicit(&bytes, BerTag(2), der_read_ia5string_content),
+        Err(Err::Error(BerError::InvalidTag))
+    );
+}
+
+#[test]
+fn test_der_optional() {
+    let empty = &b""[..];
+    let bytes1 = [
+        0x30, 0x0a, 0x0a, 0x03, 0x00, 0x00, 0x01, 0x02, 0x03, 0x01, 0x00, 0x01,
+    ];
+    let bytes2 = [0x30, 0x05, 0x02, 0x03, 0x01, 0x00, 0x01];
+    let expected1 = DerObject::from_seq(vec![
+        DerObject::from_obj(BerObjectContent::Optional(Some(Box::new(
+            DerObject::from_obj(BerObjectContent::Enum(1)),
+        )))),
+        DerObject::from_int_slice(b"\x01\x00\x01"),
+    ]);
+    let expected2 = DerObject::from_seq(vec![
+        DerObject::from_obj(BerObjectContent::Optional(None)),
+        DerObject::from_int_slice(b"\x01\x00\x01"),
+    ]);
+    fn parse_optional_enum(i: &[u8]) -> DerResult {
+        parse_ber_optional(parse_der_enum)(i)
+    }
+    fn parser(i: &[u8]) -> DerResult {
+        parse_der_sequence_defined(
+            // the nom `tuple` combinator returns a tuple, so we have to map it
+            // to a list
+            map(tuple((parse_optional_enum, parse_der_integer)), |(a, b)| {
+                vec![a, b]
+            }),
+        )(i)
+    }
+    assert_eq!(parser(&bytes1), Ok((empty, expected1)));
+    assert_eq!(parser(&bytes2), Ok((empty, expected2)));
+}
+
+#[test]
+fn test_der_seq_dn() {
+    let empty = &b""[..];
+    let bytes = [
+        0x30, 0x45, 0x31, 0x0b, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13, 0x02, 0x46, 0x52,
+        0x31, 0x13, 0x30, 0x11, 0x06, 0x03, 0x55, 0x04, 0x08, 0x0c, 0x0a, 0x53, 0x6f, 0x6d, 0x65,
+        0x2d, 0x53, 0x74, 0x61, 0x74, 0x65, 0x31, 0x21, 0x30, 0x1f, 0x06, 0x03, 0x55, 0x04, 0x0a,
+        0x0c, 0x18, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x6e, 0x65, 0x74, 0x20, 0x57, 0x69, 0x64, 0x67,
+        0x69, 0x74, 0x73, 0x20, 0x50, 0x74, 0x79, 0x20, 0x4c, 0x74, 0x64,
+    ];
+    let expected = DerObject::from_seq(vec![
+        DerObject::from_set(vec![DerObject::from_seq(vec![
+            DerObject::from_obj(BerObjectContent::OID(Oid::from(&[2, 5, 4, 6]).unwrap())), // countryName
+            DerObject::from_obj(BerObjectContent::PrintableString("FR")),
+        ])]),
+        DerObject::from_set(vec![DerObject::from_seq(vec![
+            DerObject::from_obj(BerObjectContent::OID(Oid::from(&[2, 5, 4, 8]).unwrap())), // stateOrProvinceName
+            DerObject::from_obj(BerObjectContent::UTF8String("Some-State")),
+        ])]),
+        DerObject::from_set(vec![DerObject::from_seq(vec![
+            DerObject::from_obj(BerObjectContent::OID(Oid::from(&[2, 5, 4, 10]).unwrap())), // organizationName
+            DerObject::from_obj(BerObjectContent::UTF8String("Internet Widgits Pty Ltd")),
+        ])]),
+    ]);
+    assert_eq!(parse_der(&bytes), Ok((empty, expected)));
+}
+
+#[test]
+fn test_der_seq_dn_defined() {
+    let empty = &b""[..];
+    let bytes = [
+        0x30, 0x45, 0x31, 0x0b, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13, 0x02, 0x46, 0x52,
+        0x31, 0x13, 0x30, 0x11, 0x06, 0x03, 0x55, 0x04, 0x08, 0x0c, 0x0a, 0x53, 0x6f, 0x6d, 0x65,
+        0x2d, 0x53, 0x74, 0x61, 0x74, 0x65, 0x31, 0x21, 0x30, 0x1f, 0x06, 0x03, 0x55, 0x04, 0x0a,
+        0x0c, 0x18, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x6e, 0x65, 0x74, 0x20, 0x57, 0x69, 0x64, 0x67,
+        0x69, 0x74, 0x73, 0x20, 0x50, 0x74, 0x79, 0x20, 0x4c, 0x74, 0x64,
+    ];
+    let expected = DerObject::from_seq(vec![
+        DerObject::from_set(vec![DerObject::from_seq(vec![
+            DerObject::from_obj(BerObjectContent::OID(Oid::from(&[2, 5, 4, 6]).unwrap())), // countryName
+            DerObject::from_obj(BerObjectContent::PrintableString("FR")),
+        ])]),
+        DerObject::from_set(vec![DerObject::from_seq(vec![
+            DerObject::from_obj(BerObjectContent::OID(Oid::from(&[2, 5, 4, 8]).unwrap())), // stateOrProvinceName
+            DerObject::from_obj(BerObjectContent::UTF8String("Some-State")),
+        ])]),
+        DerObject::from_set(vec![DerObject::from_seq(vec![
+            DerObject::from_obj(BerObjectContent::OID(Oid::from(&[2, 5, 4, 10]).unwrap())), // organizationName
+            DerObject::from_obj(BerObjectContent::UTF8String("Internet Widgits Pty Ltd")),
+        ])]),
+    ]);
+    #[inline]
+    fn parse_directory_string(i: &[u8]) -> DerResult {
+        alt((
+            parse_der_utf8string,
+            parse_der_printablestring,
+            parse_der_ia5string,
+        ))(i)
+    }
+    #[inline]
+    fn parse_attr_type_and_value(i: &[u8]) -> DerResult {
+        parse_der_sequence_defined(
+            // the nom `tuple` combinator returns a tuple, so we have to map it
+            // to a list
+            map(tuple((parse_der_oid, parse_directory_string)), |(a, b)| {
+                vec![a, b]
+            }),
+        )(i)
+    }
+    #[inline]
+    fn parse_rdn(i: &[u8]) -> DerResult {
+        parse_der_set_of(parse_attr_type_and_value)(i)
+    }
+    #[inline]
+    fn parse_name(i: &[u8]) -> DerResult {
+        parse_der_sequence_of(parse_rdn)(i)
+    }
+    assert_eq!(parse_name(&bytes), Ok((empty, expected)));
+}
+
+#[test_case(&hex!("02 01 01"), Ok(1) ; "u32-1")]
+#[test_case(&hex!("02 01 ff"), Err(BerError::IntegerNegative) ; "negative integer")]
+#[test_case(&hex!("02 02 00 ff"), Ok(255) ; "u32-255")]
+#[test_case(&hex!("02 02 01 23"), Ok(0x123) ; "u32-0x123")]
+#[test_case(&hex!("02 04 01 23 45 67"), Ok(0x0123_4567) ; "u32-long-ok")]
+#[test_case(&hex!("02 04 ff ff ff ff"), Err(BerError::IntegerNegative) ; "u32-long2-neg")]
+#[test_case(&hex!("02 06 00 00 01 23 45 67"), Err(BerError::DerConstraintFailed) ; "u32-long-leading-zeros")]
+#[test_case(&hex!("02 05 01 23 45 67 01"), Err(BerError::IntegerTooLarge) ; "u32 too large")]
+#[test_case(&hex!("02 09 01 23 45 67 01 23 45 67 ab"), Err(BerError::IntegerTooLarge) ; "u32 too large 2")]
+#[test_case(&hex!("03 03 01 00 01"), Err(BerError::InvalidTag) ; "invalid tag")]
+fn tc_der_u32(i: &[u8], out: Result<u32, BerError>) {
+    let res = parse_der_u32(i);
+    match out {
+        Ok(expected) => {
+            pretty_assertions::assert_eq!(res, Ok((&b""[..], expected)));
+        }
+        Err(e) => {
+            pretty_assertions::assert_eq!(res, Err(Err::Error(e)));
+        }
+    }
+}
+
+#[test_case(&hex!("02 01 01"), Ok(1) ; "i32-1")]
+#[test_case(&hex!("02 01 ff"), Ok(-1) ; "i32-neg1")]
+#[test_case(&hex!("02 01 80"), Ok(-128) ; "i32-neg128")]
+#[test_case(&hex!("02 02 ff 7f"), Ok(-129) ; "i32-neg129")]
+#[test_case(&hex!("02 02 00 ff"), Ok(255) ; "i32-255")]
+fn tc_der_i32(i: &[u8], out: Result<i32, BerError>) {
+    let res = parse_der_i32(i);
+    match out {
+        Ok(expected) => {
+            pretty_assertions::assert_eq!(res, Ok((&b""[..], expected)));
+        }
+        Err(e) => {
+            pretty_assertions::assert_eq!(res, Err(Err::Error(e)));
+        }
+    }
+}
+
+#[test_case(&hex!("02 01 01"), Ok(1) ; "u64-1")]
+#[test_case(&hex!("02 02 00 ff"), Ok(255) ; "u64-255")]
+#[test_case(&hex!("02 02 01 23"), Ok(0x123) ; "u64-0x123")]
+#[test_case(&hex!("02 08 01 23 45 67 01 23 45 67"), Ok(0x0123_4567_0123_4567) ; "u64-long-ok")]
+#[test_case(&hex!("02 09 00 ff ff ff ff ff ff ff ff"), Ok(0xffff_ffff_ffff_ffff) ; "u64-long2-ok")]
+#[test_case(&hex!("02 09 01 23 45 67 01 23 45 67 ab"), Err(BerError::IntegerTooLarge) ; "u64 too large")]
+#[test_case(&hex!("03 03 01 00 01"), Err(BerError::InvalidTag) ; "invalid tag")]
+fn tc_der_u64(i: &[u8], out: Result<u64, BerError>) {
+    let res = parse_der_u64(i);
+    match out {
+        Ok(expected) => {
+            pretty_assertions::assert_eq!(res, Ok((&b""[..], expected)));
+        }
+        Err(e) => {
+            pretty_assertions::assert_eq!(res, Err(Err::Error(e)));
+        }
+    }
+}
+
+#[test_case(&hex!("02 01 01"), Ok(&[1]) ; "slice 1")]
+#[test_case(&hex!("02 01 ff"), Ok(&[255]) ; "slice 2")]
+#[test_case(&hex!("02 09 01 23 45 67 01 23 45 67 ab"), Ok(&hex!("01 23 45 67 01 23 45 67 ab")) ; "slice 3")]
+#[test_case(&hex!("22 80 02 01 01 00 00"), Err(BerError::DerConstraintFailed) ; "constructed slice")]
+#[test_case(&hex!("03 03 01 00 01"), Err(BerError::InvalidTag) ; "invalid tag")]
+fn tc_der_slice(i: &[u8], out: Result<&[u8], BerError>) {
+    let res = parse_der_slice(i, 2);
+    match out {
+        Ok(expected) => {
+            pretty_assertions::assert_eq!(res, Ok((&b""[..], expected)));
+        }
+        Err(e) => {
+            pretty_assertions::assert_eq!(res, Err(Err::Error(e)));
+        }
+    }
+}