/* Copyright (c) 2020, Google Inc. * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ #include <openssl/hpke.h> #include <cstdint> #include <limits> #include <string> #include <vector> #include <gtest/gtest.h> #include <openssl/base.h> #include <openssl/curve25519.h> #include <openssl/digest.h> #include <openssl/err.h> #include <openssl/evp.h> #include <openssl/rand.h> #include <openssl/sha.h> #include <openssl/span.h> #include "../test/file_test.h" #include "../test/test_util.h" BSSL_NAMESPACE_BEGIN namespace { const decltype(&EVP_hpke_x25519_hkdf_sha256) kAllKEMs[] = …; const decltype(&EVP_hpke_aes_128_gcm) kAllAEADs[] = …; const decltype(&EVP_hpke_hkdf_sha256) kAllKDFs[] = …; // HPKETestVector corresponds to one array member in the published // test-vectors.json. class HPKETestVector { … }; // Match FileTest's naming scheme for duplicated attribute names. std::string BuildAttrName(const std::string &name, int iter) { … } // Parses |s| as an unsigned integer of type T and writes the value to |out|. // Returns true on success. If the integer value exceeds the maximum T value, // returns false. template <typename T> bool ParseIntSafe(T *out, const std::string &s) { … } // Read the |key| attribute from |file_test| and convert it to an integer. template <typename T> bool FileTestReadInt(FileTest *file_test, T *out, const std::string &key) { … } bool HPKETestVector::ReadFromFileTest(FileTest *t) { … } } // namespace TEST(HPKETest, VerifyTestVectors) { … } // The test vectors used fixed sender ephemeral keys, while HPKE itself // generates new keys for each context. Test this codepath by checking we can // decrypt our own messages. TEST(HPKETest, RoundTrip) { … } // Verify that the DH operations inside Encap() and Decap() both fail when the // public key is on a small-order point in the curve. TEST(HPKETest, X25519EncapSmallOrderPoint) { … } // Test that Seal() fails when the context has been initialized as a recipient. TEST(HPKETest, RecipientInvalidSeal) { … } // Test that Open() fails when the context has been initialized as a sender. TEST(HPKETest, SenderInvalidOpen) { … } TEST(HPKETest, SetupSenderBufferTooSmall) { … } TEST(HPKETest, SetupSenderBufferTooLarge) { … } TEST(HPKETest, SetupRecipientWrongLengthEnc) { … } TEST(HPKETest, SetupSenderWrongLengthPeerPublicValue) { … } TEST(HPKETest, InvalidRecipientKey) { … } TEST(HPKETest, InvalidP256PrivateKey) { … } TEST(HPKETest, InternalParseIntSafe) { … } BSSL_NAMESPACE_END