ciphern 0.2.1

Enterprise-grade cryptographic library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

// Copyright (c) 2025 Kirky.X
//
// Licensed under the MIT License
// See LICENSE file in the project root for full license information.

use crate::key::Key;
use crate::{Algorithm, Cipher};
use serde::Deserialize;
use std::fs;

#[derive(Debug, Deserialize)]
pub struct CavpTestVector {
    pub algorithm: String,
    pub key: String,
    pub iv: String,
    pub pt: String,
    pub aad: String,
    pub ct: String,
    pub tag: String,
}

#[derive(Debug, Deserialize)]
pub struct CavpTestSuite {
    pub name: String,
    pub vectors: Vec<CavpTestVector>,
}

pub fn run_aes_gcm_cavp_tests(file_path: &str) -> Result<(), Box<dyn std::error::Error>> {
    let content = fs::read_to_string(file_path)?;
    let suite: CavpTestSuite = serde_json::from_str(&content)?;

    println!("Running CAVP Test Suite: {}", suite.name);

    for (i, v) in suite.vectors.iter().enumerate() {
        let algo = match v.algorithm.as_str() {
            "AES-128-GCM" => Algorithm::AES128GCM,
            "AES-192-GCM" => Algorithm::AES192GCM,
            "AES-256-GCM" => Algorithm::AES256GCM,
            _ => continue,
        };

        let key_bytes = hex::decode(&v.key)?;
        let iv_bytes = hex::decode(&v.iv)?;
        let pt_bytes = hex::decode(&v.pt)?;
        let aad_bytes = hex::decode(&v.aad)?;
        let expected_ct = hex::decode(&v.ct)?;
        let expected_tag = hex::decode(&v.tag)?;

        // Create a key for testing
        let key = Key::new_active(algo, key_bytes).map_err(|e| e.to_string())?;
        let cipher = Cipher::new(algo).map_err(|e| e.to_string())?;
        let cipher_impl = cipher.get_implementation();

        // 验证加密
        let nonce = iv_bytes.clone();
        let ct_with_tag = cipher_impl
            .encrypt_with_nonce(&key, &pt_bytes, &nonce, Some(&aad_bytes))
            .map_err(|e| e.to_string())?;

        // For empty plaintext, the result should just be the tag
        if pt_bytes.is_empty() {
            assert_eq!(
                ct_with_tag.len(),
                16,
                "Empty plaintext should produce 16-byte tag"
            );
            assert_eq!(
                ct_with_tag, expected_tag,
                "Tag mismatch for empty plaintext at vector {}",
                i
            );
        } else {
            // Split CT and Tag (GCM tag is 16 bytes)
            let (ct, tag) = ct_with_tag.split_at(ct_with_tag.len() - 16);

            assert_eq!(ct, expected_ct, "Ciphertext mismatch at vector {}", i);
            assert_eq!(tag, expected_tag, "Tag mismatch at vector {}", i);
        }

        // 验证解密 - combine nonce, ciphertext and tag for decryption
        let mut combined_input = iv_bytes.clone(); // Prepend nonce
        combined_input.extend_from_slice(&expected_ct);
        combined_input.extend_from_slice(&expected_tag);

        let decrypted = cipher_impl
            .decrypt(&key, &combined_input, Some(&aad_bytes))
            .map_err(|e| e.to_string())?;
        assert_eq!(decrypted, pt_bytes, "Decryption mismatch at vector {}", i);
    }

    Ok(())
}