slitheen/relay_station/tests/test_partial_aes.c

/** test_partial_aes.c
 *
 * Unit tests for testing the AES-GCM partial enc/dec
 * functionality for small/misorded packets
 */

#include <check.h>
#include <stdlib.h>

#include "../flow.h"
#include "../crypto.h"
#include "../cryptothread.h"
#include "../packet.h"
#include "../util.h"
#include "test_util.h"

static void initialize_ciphers(flow *f){

    uint8_t *data;

    f->hs_md_ctx = EVP_MD_CTX_create();
    const EVP_MD *md = EVP_sha256();
    EVP_DigestInit_ex(f->hs_md_ctx, md, NULL);

    f->cipher = NULL;
    f->clnt_read_ctx = NULL;
    f->clnt_write_ctx = NULL;
    f->srvr_read_ctx = NULL;
    f->srvr_write_ctx = NULL;
    f->gcm_ctx_out = NULL;
    f->gcm_ctx_iv = NULL;
    f->gcm_ctx_key = NULL;

    memset(f->read_seq, 0, 8);
    memset(f->write_seq, 0, 8);

    //skipping Finished message, so up counters
    f->read_seq[7] = 1;
    f->write_seq[7] = 1;

    /* Cipher initialization */
    if(!read_file("data/ctx.dat", &data)){
        ck_abort();
    }

    memcpy(f->master_secret, data, SSL3_MASTER_SECRET_SIZE);
    memcpy(f->client_random, data+SSL3_MASTER_SECRET_SIZE, SSL3_RANDOM_SIZE);
    memcpy(f->server_random, data+SSL3_MASTER_SECRET_SIZE+SSL3_RANDOM_SIZE, SSL3_RANDOM_SIZE);

    f->cipher = EVP_aes_128_gcm();
    f->message_digest = EVP_sha256();

    int result = init_ciphers(f);
    ck_assert_int_eq(result, 0);

    free(data);
}

START_TEST(full_decrypt){

    uint8_t *data;
    int32_t len;
    flow *f = NULL;

    /* Flow initialization */
    f = smalloc(sizeof(flow));
    initialize_ciphers(f);

    /* Application Data */
    if(!(read_file_len("data/ciphertext.dat", &data, &len))){
        ck_abort();
    }

    int n = encrypt(f, data, data, len, 1, 0x17, 0, 0);
    ck_assert_int_eq(n, len - (EVP_GCM_TLS_TAG_LEN + EVP_GCM_TLS_EXPLICIT_IV_LEN));

    free(data);

}
END_TEST

START_TEST(full_encrypt){

    uint8_t *data;
    int len;
    flow *f = NULL;

    /* Flow initialization */
    f = smalloc(sizeof(flow));
    initialize_ciphers(f);

    /* Application Data */
    if(!(read_file_len("data/plaintext.dat", &data, &len))){
        ck_abort();
    }

    int n = encrypt(f, data, data, len-EVP_GCM_TLS_TAG_LEN, 1, 0x17, 1, 0);
    ck_assert_int_eq(n, len);

    free(data);

}
END_TEST

START_TEST(partial_decrypt){

    uint8_t *data;
    uint8_t *data2;
    int len;
    flow *f = NULL;

    /* Flow initialization */
    f = smalloc(sizeof(flow));
    initialize_ciphers(f);

    /* Application Data */
    if(!(read_file_len("data/ciphertext.dat", &data, &len))){
        ck_abort();
    }

    if(!(read_file("data/ciphertext.dat", &data2))){
        ck_abort();
    }

    int n = encrypt(f, data, data, len, 1, 0x17, 0, 0);
    ck_assert_int_gt(n, 0);


    f->partial_record = data2;
    n = partial_aes_gcm_tls_cipher(f, data2, data2, len/2, 0, 0);
    ck_assert_int_eq(n, len/2 - EVP_GCM_TLS_EXPLICIT_IV_LEN);

    ck_assert_int_eq(memcmp(data + EVP_GCM_TLS_EXPLICIT_IV_LEN, data2 +
                EVP_GCM_TLS_EXPLICIT_IV_LEN, n), 0);
    free(data2);

    if(!(read_file("data/ciphertext.dat", &data2))){
        ck_abort();
    }

    f->partial_record = data2;
    f->partial_record_len = 100;
    n = partial_aes_gcm_tls_cipher(f, data2+100, data2+100, 300, 100, 0);
    ck_assert_int_eq(n, 300);

    printf("partial bytes:\n");
    for(int i=0; i< 300; i++){
        printf("%02x ", data[100+i]);
    }
    printf("\n");
    printf("partial bytes:\n");
    for(int i=0; i< 300; i++){
        printf("%02x ", data2[100+i]);
    }
    printf("\n");


    ck_assert_int_eq(memcmp(data + 100, data2 + 100, 300), 0);
    free(data2);


    free(data);

}
END_TEST

START_TEST(partial_encrypt){

    uint8_t *data;
    uint8_t *data2;
    int len;
    flow *f = NULL;

    /* Flow initialization */
    f = smalloc(sizeof(flow));
    initialize_ciphers(f);

    /* Application Data */
    if(!(read_file_len("data/plaintext.dat", &data, &len))){
        ck_abort();
    }

    if(!(read_file("data/plaintext.dat", &data2))){
        ck_abort();
    }
    printf("%s\n", data2+EVP_GCM_TLS_EXPLICIT_IV_LEN);
    fflush(stdout);

    //skipping decrypt, so up counters
    f->read_seq[7] = 2;
    f->write_seq[7] = 2;

    f->partial_record_dec = data;
    int n = partial_aes_gcm_tls_cipher(f, data, data, len/2 + EVP_GCM_TLS_EXPLICIT_IV_LEN, 0, 1);
    ck_assert_int_gt(n, 0);

    f->partial_record_dec = data2;
    n = partial_aes_gcm_tls_cipher(f, data2, data2, len - EVP_GCM_TLS_TAG_LEN, 0, 1);
    ck_assert_int_eq(n, len - EVP_GCM_TLS_TAG_LEN - EVP_GCM_TLS_EXPLICIT_IV_LEN);

    ck_assert_int_eq(memcmp(data, data2, n/2), 0);

    //compute the tag
    partial_aes_gcm_tls_tag(f, data2 + n + EVP_GCM_TLS_EXPLICIT_IV_LEN, n);

    //decrypt to check tag
    initialize_ciphers(f);
    n = encrypt(f, data2, data2, len, 1, 0x17, 0, 0);
    printf("%s\n", data2+EVP_GCM_TLS_EXPLICIT_IV_LEN);
    fflush(stdout);
    ck_assert_int_eq(n, len - (EVP_GCM_TLS_TAG_LEN + EVP_GCM_TLS_EXPLICIT_IV_LEN));

    free(data);
    free(data2);

}
END_TEST

START_TEST(future_decrypt){

}
END_TEST

START_TEST(future_encrypt){

}
END_TEST

Suite *tag_suite(void) {
    Suite *s;
    TCase *tc_core;

    s = suite_create("Partial AES");

    tc_core = tcase_create("Core");
    tcase_add_test(tc_core, full_decrypt);
    tcase_add_test(tc_core, full_encrypt);
    tcase_add_test(tc_core, partial_decrypt);
    tcase_add_test(tc_core, partial_encrypt);
    tcase_add_test(tc_core, future_decrypt);
    tcase_add_test(tc_core, future_encrypt);

    suite_add_tcase(s, tc_core);

    return s;
}


int main(void){

    int number_failed;
    Suite *s;
    SRunner *sr;

    //initialize Slitheen structures
    if(init_tables()){
        exit(1);
    }
    if(init_session_cache()){
        exit(1);
    }
    init_crypto_locks();


    s = tag_suite();
    sr = srunner_create(s);

    srunner_set_fork_status(sr, CK_NOFORK);

    srunner_run_all(sr, CK_NORMAL);
    number_failed = srunner_ntests_failed(sr);
    srunner_free(sr);

    crypto_locks_cleanup();

    return (number_failed == 0) ? EXIT_SUCCESS : EXIT_FAILURE;
}