| OLD | NEW |
| (Empty) |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "base/stl_util.h" | |
| 6 #include "content/child/webcrypto/algorithm_dispatch.h" | |
| 7 #include "content/child/webcrypto/crypto_data.h" | |
| 8 #include "content/child/webcrypto/status.h" | |
| 9 #include "content/child/webcrypto/test/test_helpers.h" | |
| 10 #include "content/child/webcrypto/webcrypto_util.h" | |
| 11 #include "third_party/WebKit/public/platform/WebCryptoAlgorithmParams.h" | |
| 12 #include "third_party/WebKit/public/platform/WebCryptoKeyAlgorithm.h" | |
| 13 | |
| 14 namespace content { | |
| 15 | |
| 16 namespace webcrypto { | |
| 17 | |
| 18 namespace { | |
| 19 | |
| 20 bool SupportsAesCtr() { | |
| 21 #if defined(USE_OPENSSL) | |
| 22 return true; | |
| 23 #else | |
| 24 return false; | |
| 25 #endif | |
| 26 } | |
| 27 | |
| 28 // Creates an AES-CTR algorithm for encryption/decryption. | |
| 29 blink::WebCryptoAlgorithm CreateAesCtrAlgorithm( | |
| 30 const std::vector<uint8_t>& counter, | |
| 31 uint8_t length_bits) { | |
| 32 return blink::WebCryptoAlgorithm::adoptParamsAndCreate( | |
| 33 blink::WebCryptoAlgorithmIdAesCtr, | |
| 34 new blink::WebCryptoAesCtrParams(length_bits, vector_as_array(&counter), | |
| 35 counter.size())); | |
| 36 } | |
| 37 | |
| 38 TEST(WebCryptoAesCtrTest, EncryptDecryptKnownAnswer) { | |
| 39 if (!SupportsAesCtr()) { | |
| 40 LOG(WARNING) << "Skipping test because AES-CTR is not supported"; | |
| 41 return; | |
| 42 } | |
| 43 | |
| 44 scoped_ptr<base::ListValue> tests; | |
| 45 ASSERT_TRUE(ReadJsonTestFileToList("aes_ctr.json", &tests)); | |
| 46 | |
| 47 for (size_t test_index = 0; test_index < tests->GetSize(); ++test_index) { | |
| 48 SCOPED_TRACE(test_index); | |
| 49 base::DictionaryValue* test; | |
| 50 ASSERT_TRUE(tests->GetDictionary(test_index, &test)); | |
| 51 | |
| 52 std::vector<uint8_t> test_key = GetBytesFromHexString(test, "key"); | |
| 53 std::vector<uint8_t> test_counter = GetBytesFromHexString(test, "counter"); | |
| 54 int counter_length_bits = 0; | |
| 55 ASSERT_TRUE(test->GetInteger("length", &counter_length_bits)); | |
| 56 | |
| 57 std::vector<uint8_t> test_plain_text = | |
| 58 GetBytesFromHexString(test, "plain_text"); | |
| 59 std::vector<uint8_t> test_cipher_text = | |
| 60 GetBytesFromHexString(test, "cipher_text"); | |
| 61 | |
| 62 blink::WebCryptoKey key = ImportSecretKeyFromRaw( | |
| 63 test_key, CreateAlgorithm(blink::WebCryptoAlgorithmIdAesCtr), | |
| 64 blink::WebCryptoKeyUsageEncrypt | blink::WebCryptoKeyUsageDecrypt); | |
| 65 | |
| 66 EXPECT_EQ(test_key.size() * 8, key.algorithm().aesParams()->lengthBits()); | |
| 67 | |
| 68 std::vector<uint8_t> output; | |
| 69 | |
| 70 // Test encryption. | |
| 71 EXPECT_EQ(Status::Success(), | |
| 72 Encrypt(CreateAesCtrAlgorithm(test_counter, counter_length_bits), | |
| 73 key, CryptoData(test_plain_text), &output)); | |
| 74 EXPECT_BYTES_EQ(test_cipher_text, output); | |
| 75 | |
| 76 // Test decryption. | |
| 77 EXPECT_EQ(Status::Success(), | |
| 78 Decrypt(CreateAesCtrAlgorithm(test_counter, counter_length_bits), | |
| 79 key, CryptoData(test_cipher_text), &output)); | |
| 80 EXPECT_BYTES_EQ(test_plain_text, output); | |
| 81 } | |
| 82 } | |
| 83 | |
| 84 // The counter block must be exactly 16 bytes. | |
| 85 TEST(WebCryptoAesCtrTest, InvalidCounterBlockLength) { | |
| 86 if (!SupportsAesCtr()) { | |
| 87 LOG(WARNING) << "Skipping test because AES-CTR is not supported"; | |
| 88 return; | |
| 89 } | |
| 90 | |
| 91 const unsigned int kBadCounterBlockLengthBytes[] = {0, 15, 17}; | |
| 92 | |
| 93 blink::WebCryptoKey key = ImportSecretKeyFromRaw( | |
| 94 std::vector<uint8>(16), // 128-bit key of all zeros. | |
| 95 CreateAlgorithm(blink::WebCryptoAlgorithmIdAesCtr), | |
| 96 blink::WebCryptoKeyUsageEncrypt | blink::WebCryptoKeyUsageDecrypt); | |
| 97 | |
| 98 std::vector<uint8_t> input(32); | |
| 99 std::vector<uint8_t> output; | |
| 100 | |
| 101 for (size_t i = 0; i < arraysize(kBadCounterBlockLengthBytes); ++i) { | |
| 102 std::vector<uint8_t> bad_counter(kBadCounterBlockLengthBytes[i]); | |
| 103 | |
| 104 EXPECT_EQ(Status::ErrorIncorrectSizeAesCtrCounter(), | |
| 105 Encrypt(CreateAesCtrAlgorithm(bad_counter, 128), key, | |
| 106 CryptoData(input), &output)); | |
| 107 | |
| 108 EXPECT_EQ(Status::ErrorIncorrectSizeAesCtrCounter(), | |
| 109 Decrypt(CreateAesCtrAlgorithm(bad_counter, 128), key, | |
| 110 CryptoData(input), &output)); | |
| 111 } | |
| 112 } | |
| 113 | |
| 114 // The counter length cannot be less than 1 or greater than 128. | |
| 115 TEST(WebCryptoAesCtrTest, InvalidCounterLength) { | |
| 116 if (!SupportsAesCtr()) { | |
| 117 LOG(WARNING) << "Skipping test because AES-CTR is not supported"; | |
| 118 return; | |
| 119 } | |
| 120 | |
| 121 const uint8_t kBadCounterLengthBits[] = {0, 129}; | |
| 122 | |
| 123 blink::WebCryptoKey key = ImportSecretKeyFromRaw( | |
| 124 std::vector<uint8>(16), // 128-bit key of all zeros. | |
| 125 CreateAlgorithm(blink::WebCryptoAlgorithmIdAesCtr), | |
| 126 blink::WebCryptoKeyUsageEncrypt | blink::WebCryptoKeyUsageDecrypt); | |
| 127 | |
| 128 std::vector<uint8_t> counter(16); | |
| 129 std::vector<uint8_t> input(32); | |
| 130 std::vector<uint8_t> output; | |
| 131 | |
| 132 for (size_t i = 0; i < arraysize(kBadCounterLengthBits); ++i) { | |
| 133 uint8_t bad_counter_length_bits = kBadCounterLengthBits[i]; | |
| 134 | |
| 135 EXPECT_EQ(Status::ErrorInvalidAesCtrCounterLength(), | |
| 136 Encrypt(CreateAesCtrAlgorithm(counter, bad_counter_length_bits), | |
| 137 key, CryptoData(input), &output)); | |
| 138 | |
| 139 EXPECT_EQ(Status::ErrorInvalidAesCtrCounterLength(), | |
| 140 Decrypt(CreateAesCtrAlgorithm(counter, bad_counter_length_bits), | |
| 141 key, CryptoData(input), &output)); | |
| 142 } | |
| 143 } | |
| 144 | |
| 145 // Tests wrap-around using a 4-bit counter. | |
| 146 // | |
| 147 // Wrap-around is allowed, however if the counter repeats itself an error should | |
| 148 // be thrown. | |
| 149 // | |
| 150 // Using a 4-bit counter it is possible to encrypt 16 blocks. However the 17th | |
| 151 // block would end up wrapping back to the starting value. | |
| 152 TEST(WebCryptoAesCtrTest, OverflowAndRepeatCounter) { | |
| 153 if (!SupportsAesCtr()) { | |
| 154 LOG(WARNING) << "Skipping test because AES-CTR is not supported"; | |
| 155 return; | |
| 156 } | |
| 157 | |
| 158 const uint8_t kCounterLengthBits = 4; | |
| 159 const uint8_t kStartCounter[] = {0, 1, 15}; | |
| 160 | |
| 161 blink::WebCryptoKey key = ImportSecretKeyFromRaw( | |
| 162 std::vector<uint8>(16), // 128-bit key of all zeros. | |
| 163 CreateAlgorithm(blink::WebCryptoAlgorithmIdAesCtr), | |
| 164 blink::WebCryptoKeyUsageEncrypt | blink::WebCryptoKeyUsageDecrypt); | |
| 165 | |
| 166 std::vector<uint8_t> buffer(272); | |
| 167 | |
| 168 // 16 and 17 AES blocks worth of data respectively (AES blocks are 16 bytes | |
| 169 // long). | |
| 170 CryptoData input_16(vector_as_array(&buffer), 256); | |
| 171 CryptoData input_17(vector_as_array(&buffer), 272); | |
| 172 | |
| 173 std::vector<uint8_t> output; | |
| 174 | |
| 175 for (size_t i = 0; i < arraysize(kStartCounter); ++i) { | |
| 176 std::vector<uint8_t> counter(16); | |
| 177 counter[15] = kStartCounter[i]; | |
| 178 | |
| 179 // Baseline test: Encrypting 16 blocks should work (don't bother to check | |
| 180 // output, the known answer tests already do that). | |
| 181 EXPECT_EQ(Status::Success(), | |
| 182 Encrypt(CreateAesCtrAlgorithm(counter, kCounterLengthBits), key, | |
| 183 input_16, &output)); | |
| 184 | |
| 185 // Encrypting/Decrypting 17 however should fail. | |
| 186 EXPECT_EQ(Status::ErrorAesCtrInputTooLongCounterRepeated(), | |
| 187 Encrypt(CreateAesCtrAlgorithm(counter, kCounterLengthBits), key, | |
| 188 input_17, &output)); | |
| 189 EXPECT_EQ(Status::ErrorAesCtrInputTooLongCounterRepeated(), | |
| 190 Decrypt(CreateAesCtrAlgorithm(counter, kCounterLengthBits), key, | |
| 191 input_17, &output)); | |
| 192 } | |
| 193 } | |
| 194 | |
| 195 } // namespace | |
| 196 | |
| 197 } // namespace webcrypto | |
| 198 | |
| 199 } // namespace content | |
| OLD | NEW |