// Throwaway RSA-2048 keypair for tests ONLY. Committed deliberately so the suite is hermetic —
// no openssl at test time, no gitignored fixtures. This key signs nothing real and must never be
// used for an actor. (It lives in a .js file rather than .pem partly so the repo's blanket
// `*.pem` ignore can stay strict.)
export const TEST_PRIVATE_KEY = `-----BEGIN RSA PRIVATE KEY-----
MIIEpAIBAAKCAQEAst1JB9MUuURIGIhMCVob1K+R56rA8Ar1Gff8u7zN+mQxtho/
Nu2aY5fhVUC0msYHqNgyZWNMs4RTQwUx55b81kE5rhloxsMGNmWnnadBuZwMq8wD
5okNr/rsK5cQzKpX6mcek4B/F2Dn9qgA7jJQCdaghK24F+yKc1hP7UAGPE8B+RRd
TMJOopQ9K4VmWXRLZirfckIufntnFGaG5XQXwmKhUeJ9E2RLYaK5b1kHsMq0W7Qj
SUUvA6td7oLQDbtdhesXIfHSbZZu7soqfKevj/JxbAQjK3Oct5RimZcksLcltZJt
1x0rStgmINUYFOWp7r7BcvIGrmEfz3WkLhjPvQIDAQABAoIBAAuR7jlyrrJ/95Hu
ryHOZw0jq50qxH7tQTGZgwsPNDEa7hmeKlypPgVskQeXaey2cU8QvSHQgej9iaKa
NsIzrXib5i6cN3+JT2Dmw9LvkNGAMKmkRtRQz/Eu8BFZx50Vn8jqkWXFOB4RB1rt
6dwpUQLHPsGWYy7Y/ukQhgsOIIPMv397bCC4wY3V6WHpqVQ+e77VWgn/8ZiWQSwH
ZjhG6mouJ4YST41xzGgscZXqH7ApN8dV9Ldn+XuAhx3+fOmpW/BzdDB9dHwnqmUM
UzwqunIpWsbNNpUsxokt3ws32PGUep0OtJyYQNSO1Fkn5nizA5bH6Y0jegrG9woE
W5nqmMECgYEA4m3I8jZQB2C9XWSxzo1DJSFKPgFCJjnphQNfnkv1ImzJB/YuqkSE
OgreMQHQR/RoyCo1ORIXu+eKR1ZKrphFo5yD7VZhPxjVxsMKDKyvUqUWHGc7LVQx
KR+zOtWWukTnYyrSGzzguGT+XXus/u0XnxpiyLckbLTAJAikQ3NWcKUCgYEAyjlG
ILj+pBiwEo1vranStIBP+LgtWMq33F9+0mWTPy6D9Usqm2NDy6d5Q+MlIninfe8L
xi7XuigLg0y4IuYqYzUqLJOMFphqwO06CmDcTnOMXQ+TIeZa0zViVFiKKyFJ7lSQ
oxR8xoE5/FZRECRLEOFu1R9Wz0Lgrr6FWo2y3zkCgYAQUkGN1ARow7xiowN+FAin
AINNfOG7x6jhgaC+1FLTLGxBOqmadF3joSzq82qEBUYYR5KWjotPbB03jyzK8Qb0
CDAqR3OzDKM8NIrg5wGsP2IcogRN/CefAz30G7lFq/nR2CBU/kpkgEMlkeiiZ4yw
V0KPnUPu4giHkGfmxMWSUQKBgQCLPIwwk6+gxO7Wl1PBuyA87+wgUI/Ihyu5LHdh
3lZYNmrdRff8LYjMfG9ectNqvLB2YVU2C6K1pkTnDrfqL5gX3s8/Cgh2tlMqqyw/
YRnPWnfWy5Z+zODUc/lUIfJgZ/dDhi5gWwbelrOaLsR53MNiyBVL4NwgsOeK6dtf
0hjK4QKBgQCCKrl6o/xA+3LeI3T14V1LYM1wZBVtaGhzcVufBPiMBP4GBvYSWMvi
e4AVaAjQ6U5wCsgALYzw2vo7TG2RfKTrVQVoDqR13zVCfcHyJeMjEzn0lC7ztWqX
eRGkF1arZc0Fk1M4c/I7ExOO6U2Laarty3IVoBvOsemcjZx7qr5D2A==
-----END RSA PRIVATE KEY-----
`
export const TEST_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst1JB9MUuURIGIhMCVob
1K+R56rA8Ar1Gff8u7zN+mQxtho/Nu2aY5fhVUC0msYHqNgyZWNMs4RTQwUx55b8
1kE5rhloxsMGNmWnnadBuZwMq8wD5okNr/rsK5cQzKpX6mcek4B/F2Dn9qgA7jJQ
CdaghK24F+yKc1hP7UAGPE8B+RRdTMJOopQ9K4VmWXRLZirfckIufntnFGaG5XQX
wmKhUeJ9E2RLYaK5b1kHsMq0W7QjSUUvA6td7oLQDbtdhesXIfHSbZZu7soqfKev
j/JxbAQjK3Oct5RimZcksLcltZJt1x0rStgmINUYFOWp7r7BcvIGrmEfz3WkLhjP
vQIDAQAB
-----END PUBLIC KEY-----
`
// A SECOND, genuinely unrelated public key — different modulus, not a mutated copy of the first.
// Mutating a base64 char inside the SPKI header only corrupts the algorithm OID region, leaving
// the modulus intact, so the signature still verifies and the negative test passes for the wrong
// reason. Wrong-key rejection has to be tested with a real different key.
export const OTHER_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cXmwUrQF5DrFdq7BSw/
aH4LbI/iWFHfhAd9Y7pqXjdCowsYPcnO9ZRvF9hIraGnp2JgwbqcjBEbNvcFm8xj
nYHQPsiyhM+fUq1GkYjnR2+3/Qgm/vFXMeMQ1Gmyd+Me9LlgRVp626gcA0Im2IQp
p+j2sI4XleW+XObjP11L5VQ2FI0OKwRzOV+HmPvHDeWqn8XaRKA0aS21IEEbvQd3
1VYn4NqpzW7WkUKlFYL1baOitlGmH3a6eqRsAqCTvfdvgPeY0oOp332yucBQbY/M
U+DIN9tiwxiXfS2Ntr+b0psG4gXc7c3pnLnQWtRY8Blmyp6JfbZyJy5gy1Z7M/xQ
+wIDAQAB
-----END PUBLIC KEY-----
`