<!DOCTYPE html>
<html>
<head>
<script src="../../../resources/js-test.js"></script>
<script src="../resources/common.js"></script>
</head>
<body>
<p id="description"></p>
<div id="console"></div>
<script>
description("Tests wrapping and unwrapping of AES-CBC keys using AES-KW and raw format");
jsTestIsAsync = true;
var kWrappingTestCases = [
// AES-KW test vectors from http://www.ietf.org/rfc/rfc3394.txt
// 4.1 Wrap 128 bits of Key Data with a 128-bit KEK
{
"wrappingKey": "000102030405060708090A0B0C0D0E0F",
"key": "00112233445566778899AABBCCDDEEFF",
"ciphertext": "1FA68B0A8112B447AEF34BD8FB5A7B829D3E862371D2CFE5"
},
// 4.3 Wrap 128 bits of Key Data with a 256-bit KEK
{
"wrappingKey": "000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F",
"key": "00112233445566778899AABBCCDDEEFF",
"ciphertext": "64E8C3F9CE0F5BA263E9777905818A2A93C8191E7D6E8AE7"
},
// 4.5 Wrap 192 bits of Key Data with a 256-bit KEK
{
"wrappingKey": "000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F",
"key": "00112233445566778899AABBCCDDEEFF0001020304050607",
"ciphertext": "A8F9BC1612C68B3FF6E6F4FBE30E71E4769C8B80A32CB8958CD5D17D6B254DA1"
},
// 4.6 Wrap 256 bits of Key Data with a 256-bit KEK
{
"wrappingKey": "000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F",
"key": "00112233445566778899AABBCCDDEEFF000102030405060708090A0B0C0D0E0F",
"ciphertext": "28C9F404C4B810F4CBCCB35CFB87F8263F5786E2D80ED326CBC7F0E71A99F43BFB988B9B7A02DD21"
}
]
function runTestCase(testCase)
{
var wrappingKey = null;
var key = null;
return Promise.resolve(null).then(function(result) {
// Import the wrapping key
var importAlgorithm = {name: 'aes-kw'};
var keyData = hexStringToUint8Array(testCase.wrappingKey);
var usages = ['wrapKey', 'unwrapKey'];
var extractable = false;
return crypto.subtle.importKey('raw', keyData, importAlgorithm, extractable, usages);
}).then(function(result) {
wrappingKey = result;
// Import the key to be wrapped.
var importAlgorithm = {name: 'HMAC', hash: {name: 'sha-1'}};
var keyData = hexStringToUint8Array(testCase.key);
var usages = ['sign', 'verify'];
var extractable = true;
return crypto.subtle.importKey('raw', keyData, importAlgorithm, extractable, usages);
}).then(function(result) {
key = result;
// Wrap the key.
var wrapAlgorithm = {name: 'aes-kw'};
return crypto.subtle.wrapKey('raw', key, wrappingKey, wrapAlgorithm);
}).then(function(result) {
bytesShouldMatchHexString("Wrapped key data", testCase.ciphertext, result);
// Unwrap the key.
var wrappedKeyData = hexStringToUint8Array(testCase.ciphertext);
var unwrapAlgorithm = {name: 'aes-kw'};
var unwrappedKeyAlgorithm = {name: 'HMAC', hash: {name: 'sha-1'}};
var extractable = true;
var usages = ['sign'];
return crypto.subtle.unwrapKey('raw', wrappedKeyData, wrappingKey, unwrapAlgorithm, unwrappedKeyAlgorithm, extractable, usages);
}).then(function(result) {
unwrappedKey = result;
shouldEvaluateAs("unwrappedKey.algorithm.name", "HMAC");
shouldEvaluateAs("unwrappedKey.algorithm.hash.name", "SHA-1");
shouldEvaluateAs("unwrappedKey.algorithm.length", testCase.key.length * 4);
shouldEvaluateAs("unwrappedKey.extractable", true);
shouldEvaluateAs("unwrappedKey.usages.join(',')", "sign");
return crypto.subtle.exportKey('raw', unwrappedKey);
}).then(function(result) {
bytesShouldMatchHexString("Unwrapped key data", testCase.key, result);
});
}
var lastPromise = Promise.resolve(null);
kWrappingTestCases.forEach(function(test) {
lastPromise = lastPromise.then(runTestCase.bind(null, test));
});
lastPromise.then(finishJSTest, failAndFinishJSTest);
</script>
</body>
</html>