| OLD | NEW |
| (Empty) |
| 1 <!DOCTYPE html> | |
| 2 <html> | |
| 3 <head> | |
| 4 <script src="../resources/js-test.js"></script> | |
| 5 <script src="resources/common.js"></script> | |
| 6 </head> | |
| 7 <body> | |
| 8 <p id="description"></p> | |
| 9 <div id="console"></div> | |
| 10 | |
| 11 <script> | |
| 12 description("Tests sign() and verify() for HMAC"); | |
| 13 | |
| 14 jsTestIsAsync = true; | |
| 15 | |
| 16 // ------------------------------------------------- | |
| 17 // Successful sign/verify for HMAC | |
| 18 // ------------------------------------------------- | |
| 19 | |
| 20 // The "key", "message", and "mac" are written as hex encoded strings. | |
| 21 // | |
| 22 // Unless indicated otherwise, the data comes from: | |
| 23 // http://csrc.nist.gov/groups/STM/cavp/index.html#07 | |
| 24 // Which can be downloaded from: | |
| 25 // http://csrc.nist.gov/groups/STM/cavp/documents/mac/hmactestvectors.zip | |
| 26 var kHmacTestVectors = [ | |
| 27 // Empty sets. Result generated via OpenSSL commandline tool. These | |
| 28 // particular results are also posted on the Wikipedia page examples: | |
| 29 // http://en.wikipedia.org/wiki/Hash-based_message_authentication_code | |
| 30 { | |
| 31 hash: "SHA-1", | |
| 32 key: "00", | |
| 33 message: "", | |
| 34 // openssl dgst -sha1 -hmac "" < /dev/null | |
| 35 mac: "fbdb1d1b18aa6c08324b7d64b71fb76370690e1d", | |
| 36 }, | |
| 37 { | |
| 38 hash: "SHA-256", | |
| 39 key: "00", | |
| 40 message: "", | |
| 41 // openssl dgst -sha256 -hmac "" < /dev/null | |
| 42 mac: "b613679a0814d9ec772f95d778c35fc5ff1697c493715653c6c712144292c5ad", | |
| 43 }, | |
| 44 // L=20 set 45 | |
| 45 { | |
| 46 hash: "SHA-1", | |
| 47 key: "59785928d72516e31272", | |
| 48 message: "a3ce8899df1022e8d2d539b47bf0e309c66f84095e21438ec355bf119ce5fdcb4e
73a619cdf36f25b369d8c38ff419997f0c59830108223606e31223483fd39edeaa4d3f0d21198862
d239c9fd26074130ff6c86493f5227ab895c8f244bd42c7afce5d147a20a590798c68e708e964902
d124dadecdbda9dbd0051ed710e9bf", | |
| 49 mac: "3c8162589aafaee024fc9a5ca50dd2336fe3eb28", | |
| 50 }, | |
| 51 // L=20 set 299 | |
| 52 { | |
| 53 hash: "SHA-1", | |
| 54 key: "ceb9aedf8d6efcf0ae52bea0fa99a9e26ae81bacea0cff4d5eecf201e3bca3c3577480
621b818fd717ba99d6ff958ea3d59b2527b019c343bb199e648090225867d994607962f5866aa629
30d75b58f6", | |
| 55 message: "99958aa459604657c7bf6e4cdfcc8785f0abf06ffe636b5b64ecd931bd8a456305
592421fc28dbcccb8a82acea2be8e54161d7a78e0399a6067ebaca3f2510274dc9f92f2c8ae4265e
ec13d7d42e9f8612d7bc258f913ecb5a3a5c610339b49fb90e9037b02d684fc60da835657cb24eab
352750c8b463b1a8494660d36c3ab2", | |
| 56 mac: "4ac41ab89f625c60125ed65ffa958c6b490ea670", | |
| 57 }, | |
| 58 // L=32, set 30 | |
| 59 { | |
| 60 hash: "SHA-256", | |
| 61 key: "9779d9120642797f1747025d5b22b7ac607cab08e1758f2f3a46c8be1e25c53b8c6a8f
58ffefa176", | |
| 62 message: "b1689c2591eaf3c9e66070f8a77954ffb81749f1b00346f9dfe0b2ee905dcc288b
af4a92de3f4001dd9f44c468c3d07d6c6ee82faceafc97c2fc0fc0601719d2dcd0aa2aec92d1b0ae
933c65eb06a03c9c935c2bad0459810241347ab87e9f11adb30415424c6c7f5f22a003b8ab8de54f
6ded0e3ab9245fa79568451dfa258e", | |
| 63 mac: "769f00d3e6a6cc1fb426a14a4f76c6462e6149726e0dee0ec0cf97a16605ac8b", | |
| 64 }, | |
| 65 // L=32, set 224 | |
| 66 { | |
| 67 hash: "SHA-256", | |
| 68 key: "4b7ab133efe99e02fc89a28409ee187d579e774f4cba6fc223e13504e3511bef8d4f63
8b9aca55d4a43b8fbd64cf9d74dcc8c9e8d52034898c70264ea911a3fd70813fa73b083371289b", | |
| 69 message: "138efc832c64513d11b9873c6fd4d8a65dbf367092a826ddd587d141b401580b79
8c69025ad510cff05fcfbceb6cf0bb03201aaa32e423d5200925bddfadd418d8e30e18050eb4f061
8eb9959d9f78c1157d4b3e02cd5961f138afd57459939917d9144c95d8e6a94c8f6d4eef3418c17b
1ef0b46c2a7188305d9811dccb3d99", | |
| 70 mac: "4f1ee7cb36c58803a8721d4ac8c4cf8cae5d8832392eed2a96dc59694252801b", | |
| 71 } | |
| 72 ]; | |
| 73 | |
| 74 function hexStringToBufferSource(str, generateArrayBuffer) { | |
| 75 var data = hexStringToUint8Array(str); | |
| 76 if (generateArrayBuffer) { | |
| 77 return data = data.buffer; | |
| 78 } | |
| 79 return data; | |
| 80 } | |
| 81 | |
| 82 function runTest(testCase, useArrayBufferForSignature, useArrayBufferForData) | |
| 83 { | |
| 84 var importAlgorithm = {name: 'HMAC', hash: {name: testCase.hash}}; | |
| 85 var algorithm = {name: 'HMAC'}; | |
| 86 | |
| 87 var key = null; | |
| 88 var keyData = hexStringToUint8Array(testCase.key); | |
| 89 var usages = ['sign', 'verify']; | |
| 90 var extractable = false; | |
| 91 | |
| 92 // (1) Import the key | |
| 93 return crypto.subtle.importKey('raw', keyData, importAlgorithm, extractable,
usages).then(function(result) { | |
| 94 key = result; | |
| 95 | |
| 96 // shouldBe() can only resolve variables in global context. | |
| 97 tmpKey = key; | |
| 98 shouldEvaluateAs("tmpKey.type", "secret"); | |
| 99 shouldEvaluateAs("tmpKey.extractable", false); | |
| 100 shouldEvaluateAs("tmpKey.algorithm.name", "HMAC"); | |
| 101 shouldEvaluateAs("tmpKey.algorithm.hash.name", testCase.hash); | |
| 102 shouldEvaluateAs("tmpKey.algorithm.length", keyData.length * 8); | |
| 103 shouldEvaluateAs("tmpKey.usages.join(',')", "sign,verify"); | |
| 104 | |
| 105 // (2) Sign. | |
| 106 return crypto.subtle.sign(algorithm, key, hexStringToUint8Array(testCase
.message)); | |
| 107 }).then(function(result) { | |
| 108 bytesShouldMatchHexString("Mac", testCase.mac, result); | |
| 109 | |
| 110 // (3) Verify | |
| 111 return crypto.subtle.verify(algorithm, key, hexStringToBufferSource(test
Case.mac, useArrayBufferForSignature), hexStringToBufferSource(testCase.message,
useArrayBufferForData)); | |
| 112 }).then(function(result) { | |
| 113 verifyResult = result; | |
| 114 shouldBe("verifyResult", "true"); | |
| 115 | |
| 116 // (4) Verify truncated mac (by stripping 1 byte off of it). | |
| 117 var expectedMac = hexStringToUint8Array(testCase.mac); | |
| 118 return crypto.subtle.verify(algorithm, key, expectedMac.subarray(0, expe
ctedMac.byteLength - 1), hexStringToUint8Array(testCase.message)); | |
| 119 }).then(function(result) { | |
| 120 verifyResult = result; | |
| 121 shouldBe("verifyResult", "false"); | |
| 122 }); | |
| 123 } | |
| 124 | |
| 125 var lastPromise = Promise.resolve(null); | |
| 126 | |
| 127 kHmacTestVectors.forEach(function(testCase) { | |
| 128 [true, false].forEach(function(useArrayBufferForSignature) { | |
| 129 [true, false].forEach(function(useArrayBufferForData) { | |
| 130 lastPromise = lastPromise.then(runTest.bind(null, testCase, useArray
BufferForSignature, useArrayBufferForData)); | |
| 131 }) | |
| 132 }) | |
| 133 }); | |
| 134 | |
| 135 lastPromise.then(finishJSTest, failAndFinishJSTest); | |
| 136 | |
| 137 </script> | |
| 138 | |
| 139 </body> | |
| 140 </html> | |
| OLD | NEW |