OLD | NEW |
| (Empty) |
1 <!DOCTYPE html> | |
2 <html> | |
3 <head> | |
4 <script src="../resources/js-test.js"></script> | |
5 <script src="resources/common.js"></script> | |
6 </head> | |
7 <body> | |
8 <p id="description"></p> | |
9 <div id="console"></div> | |
10 | |
11 <script> | |
12 description("Tests wrapping and unwrapping of AES-CBC keys using AES-KW and raw
format"); | |
13 | |
14 jsTestIsAsync = true; | |
15 | |
16 var kWrappingTestCases = [ | |
17 // AES-KW test vectors from http://www.ietf.org/rfc/rfc3394.txt | |
18 // 4.1 Wrap 128 bits of Key Data with a 128-bit KEK | |
19 { | |
20 "wrappingKey": "000102030405060708090A0B0C0D0E0F", | |
21 "key": "00112233445566778899AABBCCDDEEFF", | |
22 "ciphertext": "1FA68B0A8112B447AEF34BD8FB5A7B829D3E862371D2CFE5" | |
23 }, | |
24 // 4.3 Wrap 128 bits of Key Data with a 256-bit KEK | |
25 { | |
26 "wrappingKey": "000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D
1E1F", | |
27 "key": "00112233445566778899AABBCCDDEEFF", | |
28 "ciphertext": "64E8C3F9CE0F5BA263E9777905818A2A93C8191E7D6E8AE7" | |
29 }, | |
30 // 4.5 Wrap 192 bits of Key Data with a 256-bit KEK | |
31 { | |
32 "wrappingKey": "000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D
1E1F", | |
33 "key": "00112233445566778899AABBCCDDEEFF0001020304050607", | |
34 "ciphertext": "A8F9BC1612C68B3FF6E6F4FBE30E71E4769C8B80A32CB8958CD5D17D6B254
DA1" | |
35 }, | |
36 // 4.6 Wrap 256 bits of Key Data with a 256-bit KEK | |
37 { | |
38 "wrappingKey": "000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D
1E1F", | |
39 "key": "00112233445566778899AABBCCDDEEFF000102030405060708090A0B0C0D0E0F", | |
40 "ciphertext": "28C9F404C4B810F4CBCCB35CFB87F8263F5786E2D80ED326CBC7F0E71A99F
43BFB988B9B7A02DD21" | |
41 } | |
42 ] | |
43 | |
44 function runTestCase(testCase) | |
45 { | |
46 var wrappingKey = null; | |
47 var key = null; | |
48 | |
49 return Promise.resolve(null).then(function(result) { | |
50 // Import the wrapping key | |
51 var importAlgorithm = {name: 'aes-kw'}; | |
52 var keyData = hexStringToUint8Array(testCase.wrappingKey); | |
53 var usages = ['wrapKey', 'unwrapKey']; | |
54 var extractable = false; | |
55 | |
56 return crypto.subtle.importKey('raw', keyData, importAlgorithm, extracta
ble, usages); | |
57 }).then(function(result) { | |
58 wrappingKey = result; | |
59 | |
60 // Import the key to be wrapped. | |
61 var importAlgorithm = {name: 'HMAC', hash: {name: 'sha-1'}}; | |
62 var keyData = hexStringToUint8Array(testCase.key); | |
63 var usages = ['sign', 'verify']; | |
64 var extractable = true; | |
65 | |
66 return crypto.subtle.importKey('raw', keyData, importAlgorithm, extracta
ble, usages); | |
67 }).then(function(result) { | |
68 key = result; | |
69 | |
70 // Wrap the key. | |
71 var wrapAlgorithm = {name: 'aes-kw'}; | |
72 return crypto.subtle.wrapKey('raw', key, wrappingKey, wrapAlgorithm); | |
73 }).then(function(result) { | |
74 bytesShouldMatchHexString("Wrapped key data", testCase.ciphertext, resul
t); | |
75 | |
76 // Unwrap the key. | |
77 var wrappedKeyData = hexStringToUint8Array(testCase.ciphertext); | |
78 var unwrapAlgorithm = {name: 'aes-kw'}; | |
79 var unwrappedKeyAlgorithm = {name: 'HMAC', hash: {name: 'sha-1'}}; | |
80 var extractable = true; | |
81 var usages = ['sign']; | |
82 return crypto.subtle.unwrapKey('raw', wrappedKeyData, wrappingKey, unwra
pAlgorithm, unwrappedKeyAlgorithm, extractable, usages); | |
83 }).then(function(result) { | |
84 unwrappedKey = result; | |
85 | |
86 shouldEvaluateAs("unwrappedKey.algorithm.name", "HMAC"); | |
87 shouldEvaluateAs("unwrappedKey.algorithm.hash.name", "SHA-1"); | |
88 shouldEvaluateAs("unwrappedKey.algorithm.length", testCase.key.length *
4); | |
89 shouldEvaluateAs("unwrappedKey.extractable", true); | |
90 shouldEvaluateAs("unwrappedKey.usages.join(',')", "sign"); | |
91 | |
92 return crypto.subtle.exportKey('raw', unwrappedKey); | |
93 }).then(function(result) { | |
94 bytesShouldMatchHexString("Unwrapped key data", testCase.key, result); | |
95 }); | |
96 } | |
97 | |
98 var lastPromise = Promise.resolve(null); | |
99 | |
100 kWrappingTestCases.forEach(function(test) { | |
101 lastPromise = lastPromise.then(runTestCase.bind(null, test)); | |
102 }); | |
103 | |
104 lastPromise.then(finishJSTest, failAndFinishJSTest); | |
105 | |
106 </script> | |
107 | |
108 </body> | |
109 </html> | |
OLD | NEW |