github.com/huandu/go@v0.0.0-20151114150818-04e615e41150/src/crypto/cipher/gcm_test.go (about)

     1  // Copyright 2013 The Go Authors. All rights reserved.
     2  // Use of this source code is governed by a BSD-style
     3  // license that can be found in the LICENSE file.
     4  
     5  package cipher_test
     6  
     7  import (
     8  	"bytes"
     9  	"crypto/aes"
    10  	"crypto/cipher"
    11  	"encoding/hex"
    12  	"testing"
    13  )
    14  
    15  // AES-GCM test vectors taken from gcmEncryptExtIV128.rsp from
    16  // http://csrc.nist.gov/groups/STM/cavp/index.html.
    17  var aesGCMTests = []struct {
    18  	key, nonce, plaintext, ad, result string
    19  }{
    20  	{
    21  		"11754cd72aec309bf52f7687212e8957",
    22  		"3c819d9a9bed087615030b65",
    23  		"",
    24  		"",
    25  		"250327c674aaf477aef2675748cf6971",
    26  	},
    27  	{
    28  		"ca47248ac0b6f8372a97ac43508308ed",
    29  		"ffd2b598feabc9019262d2be",
    30  		"",
    31  		"",
    32  		"60d20404af527d248d893ae495707d1a",
    33  	},
    34  	{
    35  		"77be63708971c4e240d1cb79e8d77feb",
    36  		"e0e00f19fed7ba0136a797f3",
    37  		"",
    38  		"7a43ec1d9c0a5a78a0b16533a6213cab",
    39  		"209fcc8d3675ed938e9c7166709dd946",
    40  	},
    41  	{
    42  		"7680c5d3ca6154758e510f4d25b98820",
    43  		"f8f105f9c3df4965780321f8",
    44  		"",
    45  		"c94c410194c765e3dcc7964379758ed3",
    46  		"94dca8edfcf90bb74b153c8d48a17930",
    47  	},
    48  	{
    49  		"7fddb57453c241d03efbed3ac44e371c",
    50  		"ee283a3fc75575e33efd4887",
    51  		"d5de42b461646c255c87bd2962d3b9a2",
    52  		"",
    53  		"2ccda4a5415cb91e135c2a0f78c9b2fdb36d1df9b9d5e596f83e8b7f52971cb3",
    54  	},
    55  	{
    56  		"ab72c77b97cb5fe9a382d9fe81ffdbed",
    57  		"54cc7dc2c37ec006bcc6d1da",
    58  		"007c5e5b3e59df24a7c355584fc1518d",
    59  		"",
    60  		"0e1bde206a07a9c2c1b65300f8c649972b4401346697138c7a4891ee59867d0c",
    61  	},
    62  	{
    63  		"fe47fcce5fc32665d2ae399e4eec72ba",
    64  		"5adb9609dbaeb58cbd6e7275",
    65  		"7c0e88c88899a779228465074797cd4c2e1498d259b54390b85e3eef1c02df60e743f1b840382c4bccaf3bafb4ca8429bea063",
    66  		"88319d6e1d3ffa5f987199166c8a9b56c2aeba5a",
    67  		"98f4826f05a265e6dd2be82db241c0fbbbf9ffb1c173aa83964b7cf5393043736365253ddbc5db8778371495da76d269e5db3e291ef1982e4defedaa2249f898556b47",
    68  	},
    69  	{
    70  		"ec0c2ba17aa95cd6afffe949da9cc3a8",
    71  		"296bce5b50b7d66096d627ef",
    72  		"b85b3753535b825cbe5f632c0b843c741351f18aa484281aebec2f45bb9eea2d79d987b764b9611f6c0f8641843d5d58f3a242",
    73  		"f8d00f05d22bf68599bcdeb131292ad6e2df5d14",
    74  		"a7443d31c26bdf2a1c945e29ee4bd344a99cfaf3aa71f8b3f191f83c2adfc7a07162995506fde6309ffc19e716eddf1a828c5a890147971946b627c40016da1ecf3e77",
    75  	},
    76  	{
    77  		"2c1f21cf0f6fb3661943155c3e3d8492",
    78  		"23cb5ff362e22426984d1907",
    79  		"42f758836986954db44bf37c6ef5e4ac0adaf38f27252a1b82d02ea949c8a1a2dbc0d68b5615ba7c1220ff6510e259f06655d8",
    80  		"5d3624879d35e46849953e45a32a624d6a6c536ed9857c613b572b0333e701557a713e3f010ecdf9a6bd6c9e3e44b065208645aff4aabee611b391528514170084ccf587177f4488f33cfb5e979e42b6e1cfc0a60238982a7aec",
    81  		"81824f0e0d523db30d3da369fdc0d60894c7a0a20646dd015073ad2732bd989b14a222b6ad57af43e1895df9dca2a5344a62cc57a3ee28136e94c74838997ae9823f3a",
    82  	},
    83  	{
    84  		"d9f7d2411091f947b4d6f1e2d1f0fb2e",
    85  		"e1934f5db57cc983e6b180e7",
    86  		"73ed042327f70fe9c572a61545eda8b2a0c6e1d6c291ef19248e973aee6c312012f490c2c6f6166f4a59431e182663fcaea05a",
    87  		"0a8a18a7150e940c3d87b38e73baee9a5c049ee21795663e264b694a949822b639092d0e67015e86363583fcf0ca645af9f43375f05fdb4ce84f411dcbca73c2220dea03a20115d2e51398344b16bee1ed7c499b353d6c597af8",
    88  		"aaadbd5c92e9151ce3db7210b8714126b73e43436d242677afa50384f2149b831f1d573c7891c2a91fbc48db29967ec9542b2321b51ca862cb637cdd03b99a0f93b134",
    89  	},
    90  	{
    91  		"fe9bb47deb3a61e423c2231841cfd1fb",
    92  		"4d328eb776f500a2f7fb47aa",
    93  		"f1cc3818e421876bb6b8bbd6c9",
    94  		"",
    95  		"b88c5c1977b35b517b0aeae96743fd4727fe5cdb4b5b42818dea7ef8c9",
    96  	},
    97  	{
    98  		"6703df3701a7f54911ca72e24dca046a",
    99  		"12823ab601c350ea4bc2488c",
   100  		"793cd125b0b84a043e3ac67717",
   101  		"",
   102  		"b2051c80014f42f08735a7b0cd38e6bcd29962e5f2c13626b85a877101",
   103  	},
   104  	// These cases test non-standard nonce sizes.
   105  	{
   106  		"1672c3537afa82004c6b8a46f6f0d026",
   107  		"05",
   108  		"",
   109  		"",
   110  		"8e2ad721f9455f74d8b53d3141f27e8e",
   111  	},
   112  	{
   113  		"9a4fea86a621a91ab371e492457796c0",
   114  		"75",
   115  		"ca6131faf0ff210e4e693d6c31c109fc5b6f54224eb120f37de31dc59ec669b6",
   116  		"4f6e2585c161f05a9ae1f2f894e9f0ab52b45d0f",
   117  		"5698c0a384241d30004290aac56bb3ece6fe8eacc5c4be98954deb9c3ff6aebf5d50e1af100509e1fba2a5e8a0af9670",
   118  	},
   119  	{
   120  		"d0f1f4defa1e8c08b4b26d576392027c",
   121  		"42b4f01eb9f5a1ea5b1eb73b0fb0baed54f387ecaa0393c7d7dffc6af50146ecc021abf7eb9038d4303d91f8d741a11743166c0860208bcc02c6258fd9511a2fa626f96d60b72fcff773af4e88e7a923506e4916ecbd814651e9f445adef4ad6a6b6c7290cc13b956130eef5b837c939fcac0cbbcc9656cd75b13823ee5acdac",
   122  		"",
   123  		"",
   124  		"7ab49b57ddf5f62c427950111c5c4f0d",
   125  	},
   126  	{
   127  		"4a0c00a3d284dea9d4bf8b8dde86685e",
   128  		"f8cbe82588e784bcacbe092cd9089b51e01527297f635bf294b3aa787d91057ef23869789698ac960707857f163ecb242135a228ad93964f5dc4a4d7f88fd7b3b07dd0a5b37f9768fb05a523639f108c34c661498a56879e501a2321c8a4a94d7e1b89db255ac1f685e185263368e99735ebe62a7f2931b47282be8eb165e4d7",
   129  		"6d4bf87640a6a48a50d28797b7",
   130  		"8d8c7ffc55086d539b5a8f0d1232654c",
   131  		"0d803ec309482f35b8e6226f2b56303239298e06b281c2d51aaba3c125",
   132  	},
   133  }
   134  
   135  func TestAESGCM(t *testing.T) {
   136  	for i, test := range aesGCMTests {
   137  		key, _ := hex.DecodeString(test.key)
   138  		aes, err := aes.NewCipher(key)
   139  		if err != nil {
   140  			t.Fatal(err)
   141  		}
   142  
   143  		nonce, _ := hex.DecodeString(test.nonce)
   144  		plaintext, _ := hex.DecodeString(test.plaintext)
   145  		ad, _ := hex.DecodeString(test.ad)
   146  		aesgcm, err := cipher.NewGCMWithNonceSize(aes, len(nonce))
   147  		if err != nil {
   148  			t.Fatal(err)
   149  		}
   150  
   151  		ct := aesgcm.Seal(nil, nonce, plaintext, ad)
   152  		if ctHex := hex.EncodeToString(ct); ctHex != test.result {
   153  			t.Errorf("#%d: got %s, want %s", i, ctHex, test.result)
   154  			continue
   155  		}
   156  
   157  		plaintext2, err := aesgcm.Open(nil, nonce, ct, ad)
   158  		if err != nil {
   159  			t.Errorf("#%d: Open failed", i)
   160  			continue
   161  		}
   162  
   163  		if !bytes.Equal(plaintext, plaintext2) {
   164  			t.Errorf("#%d: plaintext's don't match: got %x vs %x", i, plaintext2, plaintext)
   165  			continue
   166  		}
   167  
   168  		if len(ad) > 0 {
   169  			ad[0] ^= 0x80
   170  			if _, err := aesgcm.Open(nil, nonce, ct, ad); err == nil {
   171  				t.Errorf("#%d: Open was successful after altering additional data", i)
   172  			}
   173  			ad[0] ^= 0x80
   174  		}
   175  
   176  		nonce[0] ^= 0x80
   177  		if _, err := aesgcm.Open(nil, nonce, ct, ad); err == nil {
   178  			t.Errorf("#%d: Open was successful after altering nonce", i)
   179  		}
   180  		nonce[0] ^= 0x80
   181  
   182  		ct[0] ^= 0x80
   183  		if _, err := aesgcm.Open(nil, nonce, ct, ad); err == nil {
   184  			t.Errorf("#%d: Open was successful after altering ciphertext", i)
   185  		}
   186  		ct[0] ^= 0x80
   187  	}
   188  }