Ken Van Hoeylandt
dfaeb9a2d9
- Moved cryptography code out of Tactility project and into a kernel module. - Converted C++ code to C style interface - Hardened security
102 lines
3.1 KiB
C++
102 lines
3.1 KiB
C++
#include "doctest.h"
|
|
#include <tactility/crypt.h>
|
|
#include <cstring>
|
|
|
|
TEST_CASE("crypt_encrypt followed by crypt_decrypt returns the original data") {
|
|
uint8_t iv[16];
|
|
crypt_get_iv("test-seed", 9, iv);
|
|
|
|
uint8_t plaintext[16];
|
|
memcpy(plaintext, "0123456789abcdef", sizeof(plaintext));
|
|
|
|
uint8_t encrypted[16];
|
|
CHECK_EQ(crypt_encrypt(iv, plaintext, encrypted, sizeof(encrypted)), 0);
|
|
|
|
// Re-derive the same IV, as a real caller would when decrypting later
|
|
uint8_t iv2[16];
|
|
crypt_get_iv("test-seed", 9, iv2);
|
|
|
|
uint8_t decrypted[16];
|
|
CHECK_EQ(crypt_decrypt(iv2, encrypted, decrypted, sizeof(decrypted)), 0);
|
|
|
|
CHECK_EQ(memcmp(plaintext, decrypted, sizeof(plaintext)), 0);
|
|
}
|
|
|
|
TEST_CASE("crypt_encrypt with a length that isn't a multiple of 16 fails without crashing") {
|
|
uint8_t iv[16] = {};
|
|
uint8_t plaintext[15] = {};
|
|
uint8_t encrypted[15] = {};
|
|
CHECK_NE(crypt_encrypt(iv, plaintext, encrypted, sizeof(plaintext)), 0);
|
|
}
|
|
|
|
TEST_CASE("crypt_decrypt with a length that isn't a multiple of 16 fails without crashing") {
|
|
uint8_t iv[16] = {};
|
|
uint8_t ciphertext[15] = {};
|
|
uint8_t decrypted[15] = {};
|
|
CHECK_NE(crypt_decrypt(iv, ciphertext, decrypted, sizeof(ciphertext)), 0);
|
|
}
|
|
|
|
TEST_CASE("crypt_encrypt with a zero length fails without crashing") {
|
|
uint8_t iv[16] = {};
|
|
uint8_t plaintext[1] = {};
|
|
uint8_t encrypted[1] = {};
|
|
CHECK_NE(crypt_encrypt(iv, plaintext, encrypted, 0), 0);
|
|
}
|
|
|
|
TEST_CASE("crypt_get_iv is deterministic for the same input") {
|
|
uint8_t iv1[16];
|
|
uint8_t iv2[16];
|
|
crypt_get_iv("same-input", 10, iv1);
|
|
crypt_get_iv("same-input", 10, iv2);
|
|
CHECK_EQ(memcmp(iv1, iv2, sizeof(iv1)), 0);
|
|
}
|
|
|
|
TEST_CASE("crypt_get_iv derives a non-zero IV from non-trivial input") {
|
|
uint8_t iv[16];
|
|
crypt_get_iv("test-seed", 9, iv);
|
|
|
|
uint8_t zero[16] = {};
|
|
CHECK_NE(memcmp(iv, zero, sizeof(iv)), 0);
|
|
}
|
|
|
|
TEST_CASE("crypt_get_iv derives different IVs from different input") {
|
|
uint8_t iv1[16];
|
|
uint8_t iv2[16];
|
|
crypt_get_iv("input-one", 9, iv1);
|
|
crypt_get_iv("input-two", 9, iv2);
|
|
CHECK_NE(memcmp(iv1, iv2, sizeof(iv1)), 0);
|
|
}
|
|
|
|
TEST_CASE("crypt_generate_iv produces a non-zero IV") {
|
|
uint8_t iv[16];
|
|
crypt_generate_iv(iv);
|
|
|
|
uint8_t zero[16] = {};
|
|
CHECK_NE(memcmp(iv, zero, sizeof(iv)), 0);
|
|
}
|
|
|
|
TEST_CASE("crypt_generate_iv is not deterministic across calls") {
|
|
uint8_t iv1[16];
|
|
uint8_t iv2[16];
|
|
crypt_generate_iv(iv1);
|
|
crypt_generate_iv(iv2);
|
|
CHECK_NE(memcmp(iv1, iv2, sizeof(iv1)), 0);
|
|
}
|
|
|
|
TEST_CASE("crypt_encrypt followed by crypt_decrypt works with a randomly generated IV") {
|
|
uint8_t iv[16];
|
|
crypt_generate_iv(iv);
|
|
|
|
uint8_t plaintext[16];
|
|
memcpy(plaintext, "0123456789abcdef", sizeof(plaintext));
|
|
|
|
uint8_t encrypted[16];
|
|
CHECK_EQ(crypt_encrypt(iv, plaintext, encrypted, sizeof(encrypted)), 0);
|
|
|
|
// A random IV must be stored/transmitted alongside the ciphertext and reused as-is for decryption
|
|
uint8_t decrypted[16];
|
|
CHECK_EQ(crypt_decrypt(iv, encrypted, decrypted, sizeof(decrypted)), 0);
|
|
|
|
CHECK_EQ(memcmp(plaintext, decrypted, sizeof(plaintext)), 0);
|
|
}
|