| /* |
| * |
| * Copyright 2018 gRPC authors. |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| * |
| */ |
| |
| package conn |
| |
| import ( |
| "bytes" |
| "encoding/hex" |
| "testing" |
| ) |
| |
| // cryptoTestVector is struct for a rekey test vector |
| type rekeyAEADTestVector struct { |
| desc string |
| key, nonce, plaintext, aad, ciphertext []byte |
| } |
| |
| // Test encrypt and decrypt using (adapted) test vectors for AES-GCM. |
| func TestAES128GCMRekeyEncrypt(t *testing.T) { |
| for _, test := range []rekeyAEADTestVector{ |
| // NIST vectors from: |
| // http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-revised-spec.pdf |
| // |
| // IEEE vectors from: |
| // http://www.ieee802.org/1/files/public/docs2011/bn-randall-test-vectors-0511-v1.pdf |
| // |
| // Key expanded by setting |
| // expandedKey = (key || |
| // key ^ {0x01,..,0x01} || |
| // key ^ {0x02,..,0x02})[0:44]. |
| { |
| desc: "Derived from NIST test vector 1", |
| key: dehex("0000000000000000000000000000000001010101010101010101010101010101020202020202020202020202"), |
| nonce: dehex("000000000000000000000000"), |
| aad: dehex(""), |
| plaintext: dehex(""), |
| ciphertext: dehex("85e873e002f6ebdc4060954eb8675508"), |
| }, |
| { |
| desc: "Derived from NIST test vector 2", |
| key: dehex("0000000000000000000000000000000001010101010101010101010101010101020202020202020202020202"), |
| nonce: dehex("000000000000000000000000"), |
| aad: dehex(""), |
| plaintext: dehex("00000000000000000000000000000000"), |
| ciphertext: dehex("51e9a8cb23ca2512c8256afff8e72d681aca19a1148ac115e83df4888cc00d11"), |
| }, |
| { |
| desc: "Derived from NIST test vector 3", |
| key: dehex("feffe9928665731c6d6a8f9467308308fffee8938764721d6c6b8e9566318209fcfdeb908467711e6f688d96"), |
| nonce: dehex("cafebabefacedbaddecaf888"), |
| aad: dehex(""), |
| plaintext: dehex("d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b391aafd255"), |
| ciphertext: dehex("1018ed5a1402a86516d6576d70b2ffccca261b94df88b58f53b64dfba435d18b2f6e3b7869f9353d4ac8cf09afb1663daa7b4017e6fc2c177c0c087c0df1162129952213cee1bc6e9c8495dd705e1f3d"), |
| }, |
| { |
| desc: "Derived from NIST test vector 4", |
| key: dehex("feffe9928665731c6d6a8f9467308308fffee8938764721d6c6b8e9566318209fcfdeb908467711e6f688d96"), |
| nonce: dehex("cafebabefacedbaddecaf888"), |
| aad: dehex("feedfacedeadbeeffeedfacedeadbeefabaddad2"), |
| plaintext: dehex("d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39"), |
| ciphertext: dehex("1018ed5a1402a86516d6576d70b2ffccca261b94df88b58f53b64dfba435d18b2f6e3b7869f9353d4ac8cf09afb1663daa7b4017e6fc2c177c0c087c4764565d077e9124001ddb27fc0848c5"), |
| }, |
| { |
| desc: "Derived from adapted NIST test vector 4 for KDF counter boundary (flip nonce bit 15)", |
| key: dehex("feffe9928665731c6d6a8f9467308308fffee8938764721d6c6b8e9566318209fcfdeb908467711e6f688d96"), |
| nonce: dehex("ca7ebabefacedbaddecaf888"), |
| aad: dehex("feedfacedeadbeeffeedfacedeadbeefabaddad2"), |
| plaintext: dehex("d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39"), |
| ciphertext: dehex("e650d3c0fb879327f2d03287fa93cd07342b136215adbca00c3bd5099ec41832b1d18e0423ed26bb12c6cd09debb29230a94c0cee15903656f85edb6fc509b1b28216382172ecbcc31e1e9b1"), |
| }, |
| { |
| desc: "Derived from adapted NIST test vector 4 for KDF counter boundary (flip nonce bit 16)", |
| key: dehex("feffe9928665731c6d6a8f9467308308fffee8938764721d6c6b8e9566318209fcfdeb908467711e6f688d96"), |
| nonce: dehex("cafebbbefacedbaddecaf888"), |
| aad: dehex("feedfacedeadbeeffeedfacedeadbeefabaddad2"), |
| plaintext: dehex("d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39"), |
| ciphertext: dehex("c0121e6c954d0767f96630c33450999791b2da2ad05c4190169ccad9ac86ff1c721e3d82f2ad22ab463bab4a0754b7dd68ca4de7ea2531b625eda01f89312b2ab957d5c7f8568dd95fcdcd1f"), |
| }, |
| { |
| desc: "Derived from adapted NIST test vector 4 for KDF counter boundary (flip nonce bit 63)", |
| key: dehex("feffe9928665731c6d6a8f9467308308fffee8938764721d6c6b8e9566318209fcfdeb908467711e6f688d96"), |
| nonce: dehex("cafebabefacedb2ddecaf888"), |
| aad: dehex("feedfacedeadbeeffeedfacedeadbeefabaddad2"), |
| plaintext: dehex("d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39"), |
| ciphertext: dehex("8af37ea5684a4d81d4fd817261fd9743099e7e6a025eaacf8e54b124fb5743149e05cb89f4a49467fe2e5e5965f29a19f99416b0016b54585d12553783ba59e9f782e82e097c336bf7989f08"), |
| }, |
| { |
| desc: "Derived from adapted NIST test vector 4 for KDF counter boundary (flip nonce bit 64)", |
| key: dehex("feffe9928665731c6d6a8f9467308308fffee8938764721d6c6b8e9566318209fcfdeb908467711e6f688d96"), |
| nonce: dehex("cafebabefacedbaddfcaf888"), |
| aad: dehex("feedfacedeadbeeffeedfacedeadbeefabaddad2"), |
| plaintext: dehex("d9313225f88406e5a55909c5aff5269a86a7a9531534f7da2e4c303d8a318a721c3c0c95956809532fcf0e2449a6b525b16aedf5aa0de657ba637b39"), |
| ciphertext: dehex("fbd528448d0346bfa878634864d407a35a039de9db2f1feb8e965b3ae9356ce6289441d77f8f0df294891f37ea438b223e3bf2bdc53d4c5a74fb680bb312a8dec6f7252cbcd7f5799750ad78"), |
| }, |
| { |
| desc: "Derived from IEEE 2.1.1 54-byte auth", |
| key: dehex("ad7a2bd03eac835a6f620fdcb506b345ac7b2ad13fad825b6e630eddb407b244af7829d23cae81586d600dde"), |
| nonce: dehex("12153524c0895e81b2c28465"), |
| aad: dehex("d609b1f056637a0d46df998d88e5222ab2c2846512153524c0895e8108000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f30313233340001"), |
| plaintext: dehex(""), |
| ciphertext: dehex("3ea0b584f3c85e93f9320ea591699efb"), |
| }, |
| { |
| desc: "Derived from IEEE 2.1.2 54-byte auth", |
| key: dehex("e3c08a8f06c6e3ad95a70557b23f75483ce33021a9c72b7025666204c69c0b72e1c2888d04c4e1af97a50755"), |
| nonce: dehex("12153524c0895e81b2c28465"), |
| aad: dehex("d609b1f056637a0d46df998d88e5222ab2c2846512153524c0895e8108000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f30313233340001"), |
| plaintext: dehex(""), |
| ciphertext: dehex("294e028bf1fe6f14c4e8f7305c933eb5"), |
| }, |
| { |
| desc: "Derived from IEEE 2.2.1 60-byte crypt", |
| key: dehex("ad7a2bd03eac835a6f620fdcb506b345ac7b2ad13fad825b6e630eddb407b244af7829d23cae81586d600dde"), |
| nonce: dehex("12153524c0895e81b2c28465"), |
| aad: dehex("d609b1f056637a0d46df998d88e52e00b2c2846512153524c0895e81"), |
| plaintext: dehex("08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a0002"), |
| ciphertext: dehex("db3d25719c6b0a3ca6145c159d5c6ed9aff9c6e0b79f17019ea923b8665ddf52137ad611f0d1bf417a7ca85e45afe106ff9c7569d335d086ae6c03f00987ccd6"), |
| }, |
| { |
| desc: "Derived from IEEE 2.2.2 60-byte crypt", |
| key: dehex("e3c08a8f06c6e3ad95a70557b23f75483ce33021a9c72b7025666204c69c0b72e1c2888d04c4e1af97a50755"), |
| nonce: dehex("12153524c0895e81b2c28465"), |
| aad: dehex("d609b1f056637a0d46df998d88e52e00b2c2846512153524c0895e81"), |
| plaintext: dehex("08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a0002"), |
| ciphertext: dehex("1641f28ec13afcc8f7903389787201051644914933e9202bb9d06aa020c2a67ef51dfe7bc00a856c55b8f8133e77f659132502bad63f5713d57d0c11e0f871ed"), |
| }, |
| { |
| desc: "Derived from IEEE 2.3.1 60-byte auth", |
| key: dehex("071b113b0ca743fecccf3d051f737382061a103a0da642ffcdce3c041e727283051913390ea541fccecd3f07"), |
| nonce: dehex("f0761e8dcd3d000176d457ed"), |
| aad: dehex("e20106d7cd0df0761e8dcd3d88e5400076d457ed08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a0003"), |
| plaintext: dehex(""), |
| ciphertext: dehex("58837a10562b0f1f8edbe58ca55811d3"), |
| }, |
| { |
| desc: "Derived from IEEE 2.3.2 60-byte auth", |
| key: dehex("691d3ee909d7f54167fd1ca0b5d769081f2bde1aee655fdbab80bd5295ae6be76b1f3ceb0bd5f74365ff1ea2"), |
| nonce: dehex("f0761e8dcd3d000176d457ed"), |
| aad: dehex("e20106d7cd0df0761e8dcd3d88e5400076d457ed08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a0003"), |
| plaintext: dehex(""), |
| ciphertext: dehex("c2722ff6ca29a257718a529d1f0c6a3b"), |
| }, |
| { |
| desc: "Derived from IEEE 2.4.1 54-byte crypt", |
| key: dehex("071b113b0ca743fecccf3d051f737382061a103a0da642ffcdce3c041e727283051913390ea541fccecd3f07"), |
| nonce: dehex("f0761e8dcd3d000176d457ed"), |
| aad: dehex("e20106d7cd0df0761e8dcd3d88e54c2a76d457ed"), |
| plaintext: dehex("08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f30313233340004"), |
| ciphertext: dehex("fd96b715b93a13346af51e8acdf792cdc7b2686f8574c70e6b0cbf16291ded427ad73fec48cd298e0528a1f4c644a949fc31dc9279706ddba33f"), |
| }, |
| { |
| desc: "Derived from IEEE 2.4.2 54-byte crypt", |
| key: dehex("691d3ee909d7f54167fd1ca0b5d769081f2bde1aee655fdbab80bd5295ae6be76b1f3ceb0bd5f74365ff1ea2"), |
| nonce: dehex("f0761e8dcd3d000176d457ed"), |
| aad: dehex("e20106d7cd0df0761e8dcd3d88e54c2a76d457ed"), |
| plaintext: dehex("08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f30313233340004"), |
| ciphertext: dehex("b68f6300c2e9ae833bdc070e24021a3477118e78ccf84e11a485d861476c300f175353d5cdf92008a4f878e6cc3577768085c50a0e98fda6cbb8"), |
| }, |
| { |
| desc: "Derived from IEEE 2.5.1 65-byte auth", |
| key: dehex("013fe00b5f11be7f866d0cbbc55a7a90003ee10a5e10bf7e876c0dbac45b7b91033de2095d13bc7d846f0eb9"), |
| nonce: dehex("7cfde9f9e33724c68932d612"), |
| aad: dehex("84c5d513d2aaf6e5bbd2727788e523008932d6127cfde9f9e33724c608000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f0005"), |
| plaintext: dehex(""), |
| ciphertext: dehex("cca20eecda6283f09bb3543dd99edb9b"), |
| }, |
| { |
| desc: "Derived from IEEE 2.5.2 65-byte auth", |
| key: dehex("83c093b58de7ffe1c0da926ac43fb3609ac1c80fee1b624497ef942e2f79a82381c291b78fe5fde3c2d89068"), |
| nonce: dehex("7cfde9f9e33724c68932d612"), |
| aad: dehex("84c5d513d2aaf6e5bbd2727788e523008932d6127cfde9f9e33724c608000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f0005"), |
| plaintext: dehex(""), |
| ciphertext: dehex("b232cc1da5117bf15003734fa599d271"), |
| }, |
| { |
| desc: "Derived from IEEE 2.6.1 61-byte crypt", |
| key: dehex("013fe00b5f11be7f866d0cbbc55a7a90003ee10a5e10bf7e876c0dbac45b7b91033de2095d13bc7d846f0eb9"), |
| nonce: dehex("7cfde9f9e33724c68932d612"), |
| aad: dehex("84c5d513d2aaf6e5bbd2727788e52f008932d6127cfde9f9e33724c6"), |
| plaintext: dehex("08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b0006"), |
| ciphertext: dehex("ff1910d35ad7e5657890c7c560146fd038707f204b66edbc3d161f8ace244b985921023c436e3a1c3532ecd5d09a056d70be583f0d10829d9387d07d33d872e490"), |
| }, |
| { |
| desc: "Derived from IEEE 2.6.2 61-byte crypt", |
| key: dehex("83c093b58de7ffe1c0da926ac43fb3609ac1c80fee1b624497ef942e2f79a82381c291b78fe5fde3c2d89068"), |
| nonce: dehex("7cfde9f9e33724c68932d612"), |
| aad: dehex("84c5d513d2aaf6e5bbd2727788e52f008932d6127cfde9f9e33724c6"), |
| plaintext: dehex("08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b0006"), |
| ciphertext: dehex("0db4cf956b5f97eca4eab82a6955307f9ae02a32dd7d93f83d66ad04e1cfdc5182ad12abdea5bbb619a1bd5fb9a573590fba908e9c7a46c1f7ba0905d1b55ffda4"), |
| }, |
| { |
| desc: "Derived from IEEE 2.7.1 79-byte crypt", |
| key: dehex("88ee087fd95da9fbf6725aa9d757b0cd89ef097ed85ca8faf7735ba8d656b1cc8aec0a7ddb5fabf9f47058ab"), |
| nonce: dehex("7ae8e2ca4ec500012e58495c"), |
| aad: dehex("68f2e77696ce7ae8e2ca4ec588e541002e58495c08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d0007"), |
| plaintext: dehex(""), |
| ciphertext: dehex("813f0e630f96fb2d030f58d83f5cdfd0"), |
| }, |
| { |
| desc: "Derived from IEEE 2.7.2 79-byte crypt", |
| key: dehex("4c973dbc7364621674f8b5b89e5c15511fced9216490fb1c1a2caa0ffe0407e54e953fbe7166601476fab7ba"), |
| nonce: dehex("7ae8e2ca4ec500012e58495c"), |
| aad: dehex("68f2e77696ce7ae8e2ca4ec588e541002e58495c08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d0007"), |
| plaintext: dehex(""), |
| ciphertext: dehex("77e5a44c21eb07188aacbd74d1980e97"), |
| }, |
| { |
| desc: "Derived from IEEE 2.8.1 61-byte crypt", |
| key: dehex("88ee087fd95da9fbf6725aa9d757b0cd89ef097ed85ca8faf7735ba8d656b1cc8aec0a7ddb5fabf9f47058ab"), |
| nonce: dehex("7ae8e2ca4ec500012e58495c"), |
| aad: dehex("68f2e77696ce7ae8e2ca4ec588e54d002e58495c"), |
| plaintext: dehex("08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748490008"), |
| ciphertext: dehex("958ec3f6d60afeda99efd888f175e5fcd4c87b9bcc5c2f5426253a8b506296c8c43309ab2adb5939462541d95e80811e04e706b1498f2c407c7fb234f8cc01a647550ee6b557b35a7e3945381821f4"), |
| }, |
| { |
| desc: "Derived from IEEE 2.8.2 61-byte crypt", |
| key: dehex("4c973dbc7364621674f8b5b89e5c15511fced9216490fb1c1a2caa0ffe0407e54e953fbe7166601476fab7ba"), |
| nonce: dehex("7ae8e2ca4ec500012e58495c"), |
| aad: dehex("68f2e77696ce7ae8e2ca4ec588e54d002e58495c"), |
| plaintext: dehex("08000f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748490008"), |
| ciphertext: dehex("b44d072011cd36d272a9b7a98db9aa90cbc5c67b93ddce67c854503214e2e896ec7e9db649ed4bcf6f850aac0223d0cf92c83db80795c3a17ecc1248bb00591712b1ae71e268164196252162810b00"), |
| }} { |
| aead, err := newRekeyAEAD(test.key) |
| if err != nil { |
| t.Fatal("unexpected failure in newRekeyAEAD: ", err.Error()) |
| } |
| if got := aead.Seal(nil, test.nonce, test.plaintext, test.aad); !bytes.Equal(got, test.ciphertext) { |
| t.Errorf("Unexpected ciphertext for test vector '%s':\nciphertext=%s\nwant= %s", |
| test.desc, hex.EncodeToString(got), hex.EncodeToString(test.ciphertext)) |
| } |
| if got, err := aead.Open(nil, test.nonce, test.ciphertext, test.aad); err != nil || !bytes.Equal(got, test.plaintext) { |
| t.Errorf("Unexpected plaintext for test vector '%s':\nplaintext=%s (err=%v)\nwant= %s", |
| test.desc, hex.EncodeToString(got), err, hex.EncodeToString(test.plaintext)) |
| } |
| |
| } |
| } |
| |
| func dehex(s string) []byte { |
| if len(s) == 0 { |
| return make([]byte, 0) |
| } |
| b, err := hex.DecodeString(s) |
| if err != nil { |
| panic(err) |
| } |
| return b |
| } |
