mod shared; use shared::{ JsonValueExt, ResultExt }; use crypto_api_chachapoly::ChachaPolyIetf; use json::JsonValue; /// The test vectors const TEST_VECTORS: &str = include_str!("chachapoly_ietf.json"); /// A crypto test vector #[derive(Debug)] struct CryptoTestVector { name: String, key: Vec, nonce: Vec, ad: Vec, plaintext: Vec, ciphertext: Vec } impl CryptoTestVector { /// Loads the test vectors pub fn load() -> Vec { let json = json::parse(TEST_VECTORS).unwrap(); let mut vecs = Vec::new(); for vec in json["crypto"].checked_array_iter() { vecs.push(Self { name: vec["name"].checked_string(), key: vec["key"].checked_bytes(), nonce: vec["nonce"].checked_bytes(), ad: vec["ad"].checked_bytes(), plaintext: vec["plaintext"].checked_bytes(), ciphertext: vec["ciphertext"].checked_bytes(), }); } vecs } /// Tests the encryption pub fn test_encryption(&self) -> &Self { // Encrypt in place let mut buf = self.plaintext.clone(); buf.extend_from_slice(&[0; 16]); ChachaPolyIetf::aead_cipher() .seal(&mut buf, self.plaintext.len(), &self.ad, &self.key, &self.nonce) .unwrap(); assert_eq!(buf, self.ciphertext, "Test vector: \"{}\"", self.name); // Encrypt to buffer let mut buf = vec![0; self.ciphertext.len()]; ChachaPolyIetf::aead_cipher() .seal_to(&mut buf, &self.plaintext, &self.ad, &self.key, &self.nonce) .unwrap(); assert_eq!(buf, self.ciphertext, "Test vector: \"{}\"", self.name); self } /// Tests the decryption pub fn test_decryption(&self) -> &Self { // Decrypt in place let mut buf = self.ciphertext.clone(); let len = ChachaPolyIetf::aead_cipher() .open(&mut buf, self.ciphertext.len(), &self.ad, &self.key, &self.nonce) .unwrap(); assert_eq!(&buf[..len], self.plaintext.as_slice(), "Test vector: \"{}\"", self.name); // Decrypt to buffer let mut buf = vec![0; self.plaintext.len()]; ChachaPolyIetf::aead_cipher() .open_to(&mut buf, &self.ciphertext, &self.ad, &self.key, &self.nonce) .unwrap(); assert_eq!(buf, self.plaintext, "Test vector: \"{}\"", self.name); self } } #[test] fn test_crypto() { for vec in CryptoTestVector::load() { vec.test_encryption().test_decryption(); } } /// A MAC-error test vector #[derive(Debug)] struct ErrorTestVector { name: String, key: Vec, nonce: Vec, ad: Vec, ciphertext: Vec } impl ErrorTestVector { /// Loads the test vectors pub fn load() -> Vec { let json = json::parse(TEST_VECTORS).unwrap(); let mut vecs = Vec::new(); for vec in json["error"].checked_array_iter() { vecs.push(Self { name: vec["name"].checked_string(), key: vec["key"].checked_bytes(), nonce: vec["nonce"].checked_bytes(), ad: vec["ad"].checked_bytes(), ciphertext: vec["ciphertext"].checked_bytes(), }); } vecs } /// Tests the decryption pub fn test_decryption(&self) -> &Self { // Decrypt in place let mut buf = self.ciphertext.clone(); let error = ChachaPolyIetf::aead_cipher() .open(&mut buf, self.ciphertext.len(), &self.ad, &self.key, &self.nonce) .error_or(format!("Test vector: \"{}\"", self.name)); assert_eq!(error.to_string(), "InvalidData", "Test vector: \"{}\"", self.name); // Decrypt to buffer let mut buf = vec![0; self.ciphertext.len()]; let error = ChachaPolyIetf::aead_cipher() .open_to(&mut buf, &self.ciphertext, &self.ad, &self.key, &self.nonce) .error_or(format!("Test vector: \"{}\"", self.name)); assert_eq!(error.to_string(), "InvalidData", "Test vector: \"{}\"", self.name); self } } #[test] fn test_error() { for vec in ErrorTestVector::load() { vec.test_decryption(); } } /// An API test vector #[derive(Default, Clone, Debug)] pub struct ApiTestVector { name: String, key_len: usize, nonce_len: usize, ad_len: usize, enc_input_len: usize, enc_buf_len: usize, dec_input_len: usize, dec_buf_len: usize, error: String } impl ApiTestVector { /// Loads the test vectors pub fn load() -> Vec { // Load the JSON and create the default struct let json = json::parse(TEST_VECTORS).unwrap(); let mut defaults = Self::default(); defaults.load_json(&json["api"]["defaults"]); // Load the test vectors let mut vecs = Vec::new(); for vec in json["api"]["tests"].members() { let mut this = defaults.clone(); this.load_json(vec); vecs.push(this); } vecs } /// Tests the encryption pub fn test_encryption(&self) -> &Self { // Prepare fake inputs let key = vec![0; self.key_len]; let nonce = vec![0; self.nonce_len]; let ad = vec![0; self.ad_len]; let input = vec![0; self.enc_input_len]; let mut buf = vec![0; self.enc_buf_len]; // Encrypt in place let error = ChachaPolyIetf::aead_cipher() .seal(&mut buf, input.len(), &ad, &key, &nonce) .error_or(format!("Test vector: \"{}\"", self.name)); assert_eq!(error.to_string(), self.error, "Test vector: \"{}\"", self.name); // Encrypt in buffer let error = ChachaPolyIetf::aead_cipher() .seal_to(&mut buf, &input, &ad, &key, &nonce) .error_or(format!("Test vector: \"{}\"", self.name)); assert_eq!(error.to_string(), self.error, "Test vector: \"{}\"", self.name); self } /// Tests the decryption pub fn test_decryption(&self) -> &Self { // Prepare fake inputs let key = vec![0; self.key_len]; let nonce = vec![0; self.nonce_len]; let ad = vec![0; self.ad_len]; let input = vec![0; self.dec_input_len]; let mut buf = vec![0; self.dec_buf_len]; // Decrypt in place let error = ChachaPolyIetf::aead_cipher() .open(&mut buf, input.len(), &ad, &key, &nonce) .error_or(format!("Test vector: \"{}\"", self.name)); assert_eq!(error.to_string(), self.error, "Test vector: \"{}\"", self.name); // Decrypt in buffer let error = ChachaPolyIetf::aead_cipher() .open_to(&mut buf, &input, &ad, &key, &nonce) .error_or(format!("Test vector: \"{}\"", self.name)); assert_eq!(error.to_string(), self.error, "Test vector: \"{}\"", self.name); self } /// Loads all existing/non-null fields from `j` into `self` fn load_json(&mut self, j: &JsonValue) { self.name = j["name"].optional_string(&self.name); self.key_len = j["key_len"].optional_usize(self.key_len); self.nonce_len = j["nonce_len"].optional_usize(self.nonce_len); self.ad_len = j["ad_len"].optional_usize(self.ad_len); self.enc_input_len = j["enc_input_len"].optional_usize(self.enc_input_len); self.enc_buf_len = j["enc_buf_len"].optional_usize(self.enc_buf_len); self.dec_input_len = j["dec_input_len"].optional_usize(self.dec_input_len); self.dec_buf_len = j["dec_buf_len"].optional_usize(self.dec_buf_len); self.error = j["error"].optional_string(&self.error); } } #[test] fn test_api() { for vec in ApiTestVector::load() { vec.test_encryption().test_decryption(); } }