| <!doctype html> |
| <html> |
| <head> |
| <meta charset="utf-8"> |
| <title>SFrame test vector</title> |
| <script src="../resources/testharness.js"></script> |
| <script src="../resources/testharnessreport.js"></script> |
| </head> |
| <body> |
| <script> |
| // Tests taken from https://github.com/eomara/sframe/blob/master/test-vectors.json and updated to cope with key/counter length difference. |
| // Test suite 1 is AES_CM_128_HMAC_SHA256_4, test suite 2 is AES_CM_128_HMAC_SHA256_8. |
| // Test suites 3 and 4 are GCM and not yet added here since not supported. |
| const tests = [ |
| { |
| "cipher_suite": 1, |
| "base_key": "101112131415161718191a1b1c1d1e1f", |
| "key": "343d3290f5c0b936415bea9a43c6f5a2", |
| "salt": "42d662fbad5cd81eb3aad79a", |
| "plaintext": "46726f6d2068656176656e6c79206861726d6f6e79202f2f205468697320756e6976657273616c206672616d6520626567616e", |
| "encryptions": [ |
| { |
| "kid": "7", |
| "ctr": "0", |
| "header": "0700", |
| "nonce": "42d662fbad5cd81eb3aad79a", |
| "ciphertext": "070065c67c6fb784631a7db1b589ffb62d75b78e28b0899e632fbbee3b944747a6382d75b6bd3788dc7b71b9295c7fb90b5098f7ad92befabb" |
| }, |
| { |
| "kid": "7", |
| "ctr": "1", |
| "header": "0701", |
| "nonce": "42d662fbad5cd81eb3aad79b", |
| "ciphertext": "0701ec742e98d667be810f153ff0d4dad7969f69b310aa7c6b9cb911e83af09b0f0a6d74772d8195c8c9dae3878fd1cb10edb4176dd4a56026" |
| }, |
| { |
| "kid": "7", |
| "ctr": "2", |
| "header": "0702", |
| "nonce": "42d662fbad5cd81eb3aad798", |
| "ciphertext": "0702ac9b495d37a1e48c712ade5cba72df0bf90f24aa022a454cfb92d8b87cd54335fb6b9eeded6a5aa4e2643d7a09946646001d0afd6a2d5f" |
| }, |
| { |
| "kid": "15", |
| "ctr": "170", |
| "header": "080faa", |
| "nonce": "42d662fbad5cd81eb3aad730", |
| "ciphertext": "080faaeaa5adc70cae0d6ebd36805fa87d2351dd02c55c751cd351a7fdb7f0927b474eae3e800033e08100a440002da17579678b36dcafb808b3" |
| }, |
| { |
| "kid": "511", |
| "ctr": "170", |
| "header": "0901ffaa", |
| "nonce": "42d662fbad5cd81eb3aad730", |
| "ciphertext": "0901ffaaeaa5adc70cae0d6ebd36805fa87d2351dd02c55c751cd351a7fdb7f0927b474eae3e800033e08100a440002da17579678b36dcc0a409c5" |
| }, |
| { |
| "kid": "511", |
| "ctr": "543690", |
| "header": "2901ff084bca", |
| "nonce": "42d662fbad5cd81eb3a29c50", |
| "ciphertext": "2901ff084bca99362198463c4739ebe78d4c1158fc7b7e118e8d035130a583744af343a370ab964a76d31aba68939336187bd251a7f63e9ec25a2bed97" |
| }, |
| { |
| "kid": "72057594037927935", |
| "ctr": "72057594037927935", |
| "header": "6effffffffffffffffffffffffffff", |
| "nonce": "42d662fbada327e14c552865", |
| "ciphertext": "6effffffffffffffffffffffffffffdca3655d5117bc838d6f4382ca468a4f992ff77bfd1d2f4391be6b33e8fb638dc48aa82f57fd91430c714def0b2089c8bfb2ac6a36e584" |
| }, |
| { |
| "kid": "92057594037927935", |
| "ctr": "8", |
| "header": "0f01470de4df81ffff08", |
| "nonce": "42d662fbad5cd81eb3aad792", |
| "ciphertext": "0f01470de4df81ffff084db66f48555956af80a014f06670d7771071afc72ad7452fbb835d353d07d16e771b2ca3593a6a87b643e39370b404a2eb898de8114fb9" |
| } |
| ] |
| }, |
| { |
| "cipher_suite": 2, |
| "base_key": "202122232425262728292a2b2c2d2e2f", |
| "key": "3fce747d505e46ec9b92d9f58ee7a5d4", |
| "salt": "77fbf5f1d82c73f6d2b353c9", |
| "plaintext": "46726f6d2068656176656e6c79206861726d6f6e79202f2f205468697320756e6976657273616c206672616d6520626567616e", |
| "encryptions": [ |
| { |
| "kid": "7", |
| "ctr": "0", |
| "header": "0700", |
| "nonce": "77fbf5f1d82c73f6d2b353c900000000", |
| "ciphertext": "0700647513fce71aab7fed1e904fd9240343d77092c831f0d58fde0985a0f3e5ba4020e87a7b9c870b5f8f7f628d27690cc1e571e4e8b90ec99c582cfa" |
| }, |
| { |
| "kid": "7", |
| "ctr": "1", |
| "header": "0701", |
| "nonce": "77fbf5f1d82c73f6d2b353c8", |
| "ciphertext": "07019e1bdf713b0d4c02f3dbf50a72ea773286e7da38f3872cc734f3e1b1448aab5009b424e05495214f96d02e4e8f8da975cc808fe931237a6ab700e8" |
| }, |
| { |
| "kid": "7", |
| "ctr": "2", |
| "header": "0702", |
| "nonce": "77fbf5f1d82c73f6d2b353cb", |
| "ciphertext": "070220ad36fd9191453ace2d36a175ad8a69c1f16b8613d14b4f7ef30c68bc5609e349df38155cc1544d7dbfa079e3faae3c7883b479fccb144b0c78a5" |
| }, |
| { |
| "kid": "15", |
| "ctr": "170", |
| "header": "080faa", |
| "nonce": "77fbf5f1d82c73f6d2b35363", |
| "ciphertext": "080faadab9b284a4b9e3aea36b9cdcae4a58e141d3f0f52f240ef80a93dbb8d809ede01b05b2cace18a22fb39c032724481c5baa181d081e260067ccd683" |
| }, |
| { |
| "kid": "511", |
| "ctr": "170", |
| "header": "0901ffaa", |
| "nonce": "77fbf5f1d82c73f6d2b35363", |
| "ciphertext": "0901ffaadab9b284a4b9e3aea36b9cdcae4a58e141d3f0f52f240ef80a93dbb8d809ede01b05b2cace18a22fb39c032724481c5baa181dc24facba5e9f7ea5" |
| }, |
| { |
| "kid": "511", |
| "ctr": "43690", |
| "header": "1901ffaaaa", |
| "nonce": "77fbf5f1d82c73f6d2b3f963", |
| "ciphertext": "1901ffaaaae0f2384e4dc472cb92238b5b722159205c4481665484de66985f155071655ca4e9d1c998781f8c7d439f8d1eb6f6071cd80fd2af2cd093aa260618" |
| }, |
| { |
| "kid": "72057594037927935", |
| "ctr": "72057594037927935", |
| "header": "6effffffffffffffffffffffffffff", |
| "nonce": "77fbf5f1d8d38c092d4cac36", |
| "ciphertext": "6effffffffffffffffffffffffffff4b8c7429d7ee83eec5e53808b80555b1f80b1df9d97877575fa1c7fa35b6119c68ed6543020075959dcc4ca6900a7f9cf1d9366dfcb086029e8966" |
| }, |
| { |
| "kid": "92057594037927935", |
| "ctr": "8", |
| "header": "0f01470de4df81ffff08", |
| "nonce": "77fbf5f1d82c73f6d2b353c1", |
| "ciphertext": "0f01470de4df81ffff08aaf4ea538ad99858a76f87b673dd548459dfbf98906fe82ce159ec738363b2af84d39c34418e2c56609d185ef66a3d7ce8d30547c1c9725439ac12" |
| } |
| ] |
| } |
| ]; |
| |
| function hexaDecodeToUint8Array(encoded) |
| { |
| return new Uint8Array(encoded.match(/[\da-f]{2}/gi).map(function (h) { |
| return parseInt(h, 16) |
| })); |
| } |
| |
| function hexaEncodeUint8Array(buffer) |
| { |
| return Array.prototype.map.call(new Uint8Array(buffer), x => { |
| return ('00' + x.toString(16)).slice(-2) |
| }).join(''); |
| } |
| |
| function numberOrBigIntFromString(string) |
| { |
| const value = parseInt(string); |
| if ((''+ value) === string) |
| return string; |
| return BigInt(string); |
| } |
| |
| async function doAESCMTest(testSuite, authenticationSize) |
| { |
| let testCounter = 0; |
| const key = await crypto.subtle.importKey("raw", hexaDecodeToUint8Array(testSuite.base_key), "HKDF", false, ["deriveBits", "deriveKey"]); |
| |
| for (const encryption of testSuite.encryptions) { |
| testCounter++; |
| |
| promise_test(async () => { |
| const transform = new SFrameTransform({ role : 'decrypt', authenticationSize : authenticationSize }); |
| transform.setEncryptionKey(key, numberOrBigIntFromString(encryption.kid)); |
| const reader = transform.readable.getReader(); |
| const writer = transform.writable.getWriter(); |
| |
| const encryptedData = hexaDecodeToUint8Array(encryption.ciphertext); |
| writer.write(encryptedData.buffer); |
| const decrypted = await reader.read(); |
| |
| const text = hexaEncodeUint8Array(new Uint8Array(decrypted.value)); |
| assert_equals(text, testSuite.plaintext); |
| }, "Decryption test " + testCounter + " for ciphersuite " + testSuite.cipher_suite); |
| |
| const plaintextData = hexaDecodeToUint8Array(testSuite.plaintext); |
| promise_test(async () => { |
| const transform1 = new SFrameTransform({ role : 'encrypt', authenticationSize : authenticationSize }); |
| const transform2 = new SFrameTransform({ role : 'decrypt', authenticationSize : authenticationSize }); |
| transform1.setEncryptionKey(key, numberOrBigIntFromString(encryption.kid)); |
| transform2.setEncryptionKey(key, numberOrBigIntFromString(encryption.kid)); |
| const reader = transform2.readable.getReader(); |
| const writer = transform1.writable.getWriter(); |
| transform1.readable.pipeTo(transform2.writable); |
| |
| if (window.internals) |
| internals.setSFrameCounter(transform1, encryption.ctr); |
| else { |
| const counter = numberOrBigIntFromString(encryption.ctr); |
| if (typeof counter === "bigint") |
| return; |
| for (let i = 0; i < counter; ++i) { |
| await writer.write(new ArrayBuffer()); |
| await reader.read(); |
| } |
| } |
| |
| writer.write(plaintextData.buffer); |
| const decrypted = await reader.read(); |
| |
| const text = hexaEncodeUint8Array(new Uint8Array(decrypted.value)); |
| assert_equals(text, testSuite.plaintext); |
| }, "Encryption/Decryption test " + testCounter + " for ciphersuite " + testSuite.cipher_suite); |
| } |
| } |
| doAESCMTest(tests[0], 4); |
| doAESCMTest(tests[1], 8); |
| </script> |
| </body> |
| </html> |
