ggstd 0.1.0

// Copyright 2023 The rust-ggstd authors. All rights reserved.
// Copyright 2009 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

use super::common_test::{COMMON_INPUT, COMMON_IV, COMMON_KEY128, COMMON_KEY192, COMMON_KEY256};
use crate::crypto::aes;
use crate::crypto::cipher::{self, BlockMode};
use crate::encoding::hex;

// CBC AES test vectors.

// See U.S. National Institute of Standards and Technology (NIST)
// Special Publication 800-38A, ``Recommendation for Block Cipher
// Modes of Operation,'' 2001 Edition, pp. 24-29.

struct TestCase {
    name: &'static str,
    key: &'static [u8],
    iv: &'static [u8],
    input: &'static [u8],
    out: &'static [u8],
}

impl TestCase {
    const fn new(
        name: &'static str,
        key: &'static [u8],
        iv: &'static [u8],
        input: &'static [u8],
        out: &'static [u8],
    ) -> Self {
        Self {
            name,
            key,
            iv,
            input,
            out,
        }
    }
}

const CBC_AES_TESTS: &[TestCase] = &[
    // NIST SP 800-38A pp 27-29
    TestCase::new(
        "CBC-AES128",
        COMMON_KEY128,
        COMMON_IV,
        COMMON_INPUT,
        &[
            0x76, 0x49, 0xab, 0xac, 0x81, 0x19, 0xb2, 0x46, 0xce, 0xe9, 0x8e, 0x9b, 0x12, 0xe9,
            0x19, 0x7d, 0x50, 0x86, 0xcb, 0x9b, 0x50, 0x72, 0x19, 0xee, 0x95, 0xdb, 0x11, 0x3a,
            0x91, 0x76, 0x78, 0xb2, 0x73, 0xbe, 0xd6, 0xb8, 0xe3, 0xc1, 0x74, 0x3b, 0x71, 0x16,
            0xe6, 0x9e, 0x22, 0x22, 0x95, 0x16, 0x3f, 0xf1, 0xca, 0xa1, 0x68, 0x1f, 0xac, 0x09,
            0x12, 0x0e, 0xca, 0x30, 0x75, 0x86, 0xe1, 0xa7,
        ],
    ),
    TestCase::new(
        "CBC-AES192",
        COMMON_KEY192,
        COMMON_IV,
        COMMON_INPUT,
        &[
            0x4f, 0x02, 0x1d, 0xb2, 0x43, 0xbc, 0x63, 0x3d, 0x71, 0x78, 0x18, 0x3a, 0x9f, 0xa0,
            0x71, 0xe8, 0xb4, 0xd9, 0xad, 0xa9, 0xad, 0x7d, 0xed, 0xf4, 0xe5, 0xe7, 0x38, 0x76,
            0x3f, 0x69, 0x14, 0x5a, 0x57, 0x1b, 0x24, 0x20, 0x12, 0xfb, 0x7a, 0xe0, 0x7f, 0xa9,
            0xba, 0xac, 0x3d, 0xf1, 0x02, 0xe0, 0x08, 0xb0, 0xe2, 0x79, 0x88, 0x59, 0x88, 0x81,
            0xd9, 0x20, 0xa9, 0xe6, 0x4f, 0x56, 0x15, 0xcd,
        ],
    ),
    TestCase::new(
        "CBC-AES256",
        COMMON_KEY256,
        COMMON_IV,
        COMMON_INPUT,
        &[
            0xf5, 0x8c, 0x4c, 0x04, 0xd6, 0xe5, 0xf1, 0xba, 0x77, 0x9e, 0xab, 0xfb, 0x5f, 0x7b,
            0xfb, 0xd6, 0x9c, 0xfc, 0x4e, 0x96, 0x7e, 0xdb, 0x80, 0x8d, 0x67, 0x9f, 0x77, 0x7b,
            0xc6, 0x70, 0x2c, 0x7d, 0x39, 0xf2, 0x33, 0x69, 0xa9, 0xd9, 0xba, 0xcf, 0xa5, 0x30,
            0xe2, 0x63, 0x04, 0x23, 0x14, 0x61, 0xb2, 0xeb, 0x05, 0xe2, 0xc3, 0x9b, 0xe9, 0xfc,
            0xda, 0x6c, 0x19, 0x07, 0x8c, 0x6a, 0x9d, 0x1b,
        ],
    ),
];

#[test]
fn test_cbcencrypter_aes() {
    for test in CBC_AES_TESTS {
        let c = aes::Cipher::new(test.key).unwrap();
        let mut encrypter = cipher::CBCEncrypter::new(&c, test.iv);
        // from one buffer to another
        let mut data = vec![0; test.input.len()];
        encrypter.crypt_blocks(&mut data, test.input);
        assert_eq!(
            test.out, &data,
            "{}: CBCEncrypter\nhave {:?}\nwant {:?}",
            test.name, data, test.out
        );

        // in place
        encrypter.set_iv(test.iv);
        let mut data = test.input.to_vec();
        encrypter.crypt_blocks_inplace(&mut data);
        assert_eq!(
            test.out, &data,
            "{}: CBCEncrypter inplace\nhave {:?}\nwant {:?}",
            test.name, data, test.out
        );
    }
}

#[test]
fn test_cbcdecrypter_aes() {
    for test in CBC_AES_TESTS {
        let c = aes::Cipher::new(test.key).unwrap();

        let mut decrypter = cipher::CBCDecrypter::new(&c, test.iv);

        // from one buffer to another
        let mut data = vec![0; test.out.len()];
        decrypter.crypt_blocks(&mut data, test.out);
        assert_eq!(
            test.input, &data,
            "{}: CBCDecrypter\nhave {:?}\nwant {:?}",
            test.name, data, test.input
        );

        // in place
        decrypter.set_iv(test.iv);
        let mut data = test.out.to_vec();
        decrypter.crypt_blocks_inplace(&mut data);
        assert_eq!(
            test.input, &data,
            "{}: CBCDecrypter\nhave {:?}\nwant {:?}",
            test.name, data, test.input
        );
    }
}

#[test]
fn test_single_block() {
    // testing the crash on a single block encryption
    let key = b"0123456789abcdef";
    let plaintext = b"hello world.....";
    let iv = [0; 16];
    let block = aes::Cipher::new(key).unwrap();
    let mut mode = cipher::CBCEncrypter::new(&block, &iv);
    let mut ciphertext = vec![0; plaintext.len()];

    mode.crypt_blocks(&mut ciphertext, plaintext);
    assert_eq!(
        &hex::decode_string("e0864df37bebc97bd5026baeef64d77c").0,
        &ciphertext
    );

    // different output for the same input becase it is CBC
    mode.crypt_blocks(&mut ciphertext, plaintext);
    assert_eq!(
        &hex::decode_string("7fe25d86e7761e2e54260c25d0e7dbe8").0,
        &ciphertext
    );
}