1 // Copyright 2017 Google LLC
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 // http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14 //
15 ////////////////////////////////////////////////////////////////////////////////
16
17 #include "tink/hybrid/ecies_aead_hkdf_private_key_manager.h"
18
19 #include "gtest/gtest.h"
20 #include "absl/status/status.h"
21 #include "tink/aead/aead_key_templates.h"
22 #include "tink/aead/aes_ctr_hmac_aead_key_manager.h"
23 #include "tink/aead/aes_gcm_key_manager.h"
24 #include "tink/hybrid/ecies_aead_hkdf_public_key_manager.h"
25 #include "tink/hybrid/hybrid_key_templates.h"
26 #include "tink/hybrid_decrypt.h"
27 #include "tink/registry.h"
28 #include "tink/subtle/hybrid_test_util.h"
29 #include "tink/util/status.h"
30 #include "tink/util/statusor.h"
31 #include "tink/util/test_matchers.h"
32 #include "tink/util/test_util.h"
33 #include "proto/aes_eax.pb.h"
34 #include "proto/common.pb.h"
35 #include "proto/ecies_aead_hkdf.pb.h"
36 #include "proto/tink.pb.h"
37
38 namespace crypto {
39 namespace tink {
40
41 using ::crypto::tink::test::IsOk;
42 using ::crypto::tink::test::StatusIs;
43 using ::google::crypto::tink::EciesAeadHkdfKeyFormat;
44 using ::google::crypto::tink::EciesAeadHkdfPrivateKey;
45 using ::google::crypto::tink::EciesAeadHkdfPublicKey;
46 using ::google::crypto::tink::EcPointFormat;
47 using ::google::crypto::tink::EllipticCurveType;
48 using ::google::crypto::tink::HashType;
49 using ::google::crypto::tink::KeyData;
50 using ::testing::Eq;
51 using ::testing::IsEmpty;
52 using ::testing::Not;
53
54 namespace {
55
TEST(EciesAeadHkdfPrivateKeyManagerTest,Basics)56 TEST(EciesAeadHkdfPrivateKeyManagerTest, Basics) {
57 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().get_version(), Eq(0));
58 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().key_material_type(),
59 Eq(KeyData::ASYMMETRIC_PRIVATE));
60 EXPECT_THAT(
61 EciesAeadHkdfPrivateKeyManager().get_key_type(),
62 Eq("type.googleapis.com/google.crypto.tink.EciesAeadHkdfPrivateKey"));
63 }
64
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateEmptyKey)65 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateEmptyKey) {
66 EXPECT_THAT(
67 EciesAeadHkdfPrivateKeyManager().ValidateKey(EciesAeadHkdfPrivateKey()),
68 StatusIs(absl::StatusCode::kInvalidArgument));
69 }
70
CreateValidKeyFormat()71 EciesAeadHkdfKeyFormat CreateValidKeyFormat() {
72 EciesAeadHkdfKeyFormat key_format;
73 key_format.mutable_params()->set_ec_point_format(EcPointFormat::UNCOMPRESSED);
74 auto dem_params = key_format.mutable_params()->mutable_dem_params();
75 *(dem_params->mutable_aead_dem()) = AeadKeyTemplates::Aes128Gcm();
76 auto kem_params = key_format.mutable_params()->mutable_kem_params();
77 kem_params->set_curve_type(EllipticCurveType::NIST_P256);
78 kem_params->set_hkdf_hash_type(HashType::SHA256);
79 kem_params->set_hkdf_salt("");
80 return key_format;
81 }
82
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyFormat)83 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyFormat) {
84 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKeyFormat(
85 CreateValidKeyFormat()),
86 IsOk());
87 }
88
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyFormatNoPoint)89 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyFormatNoPoint) {
90 EciesAeadHkdfKeyFormat key_format = CreateValidKeyFormat();
91 key_format.mutable_params()->set_ec_point_format(
92 EcPointFormat::UNKNOWN_FORMAT);
93 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKeyFormat(key_format),
94 StatusIs(absl::StatusCode::kInvalidArgument));
95 }
96
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyFormatNoDem)97 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyFormatNoDem) {
98 EciesAeadHkdfKeyFormat key_format = CreateValidKeyFormat();
99 key_format.mutable_params()->mutable_dem_params()->clear_aead_dem();
100 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKeyFormat(key_format),
101 StatusIs(absl::StatusCode::kInvalidArgument));
102 }
103
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyFormatNoKemCurve)104 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyFormatNoKemCurve) {
105 EciesAeadHkdfKeyFormat key_format = CreateValidKeyFormat();
106 key_format.mutable_params()->mutable_kem_params()->set_curve_type(
107 EllipticCurveType::UNKNOWN_CURVE);
108 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKeyFormat(key_format),
109 StatusIs(absl::StatusCode::kInvalidArgument));
110 }
111
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyFormatNoKemHash)112 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyFormatNoKemHash) {
113 EciesAeadHkdfKeyFormat key_format = CreateValidKeyFormat();
114 key_format.mutable_params()->mutable_kem_params()->set_hkdf_hash_type(
115 HashType::UNKNOWN_HASH);
116 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKeyFormat(key_format),
117 StatusIs(absl::StatusCode::kInvalidArgument));
118 }
119
TEST(EciesAeadHkdfPrivateKeyManagerTest,CreateKey)120 TEST(EciesAeadHkdfPrivateKeyManagerTest, CreateKey) {
121 EciesAeadHkdfKeyFormat key_format = CreateValidKeyFormat();
122 ASSERT_THAT(EciesAeadHkdfPrivateKeyManager().CreateKey(key_format).status(),
123 IsOk());
124 EciesAeadHkdfPrivateKey key =
125 EciesAeadHkdfPrivateKeyManager().CreateKey(key_format).value();
126 EXPECT_THAT(key.public_key().params().kem_params().curve_type(),
127 Eq(key_format.params().kem_params().curve_type()));
128 EXPECT_THAT(key.public_key().params().kem_params().hkdf_hash_type(),
129 Eq(key_format.params().kem_params().hkdf_hash_type()));
130 EXPECT_THAT(key.public_key().params().dem_params().aead_dem().type_url(),
131 Eq(key_format.params().dem_params().aead_dem().type_url()));
132 EXPECT_THAT(key.public_key().params().dem_params().aead_dem().value(),
133 Eq(key_format.params().dem_params().aead_dem().value()));
134 EXPECT_THAT(
135 key.public_key().params().dem_params().aead_dem().output_prefix_type(),
136 Eq(key_format.params().dem_params().aead_dem().output_prefix_type()));
137
138 EXPECT_THAT(key.public_key().x(), Not(IsEmpty()));
139 EXPECT_THAT(key.public_key().y(), Not(IsEmpty()));
140 EXPECT_THAT(key.key_value(), Not(IsEmpty()));
141 }
142
CreateValidKey()143 EciesAeadHkdfPrivateKey CreateValidKey() {
144 return EciesAeadHkdfPrivateKeyManager()
145 .CreateKey(CreateValidKeyFormat())
146 .value();
147 }
148
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyEmpty)149 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyEmpty) {
150 EXPECT_THAT(
151 EciesAeadHkdfPrivateKeyManager().ValidateKey(EciesAeadHkdfPrivateKey()),
152 StatusIs(absl::StatusCode::kInvalidArgument));
153 }
154
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKey)155 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKey) {
156 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKey(CreateValidKey()),
157 IsOk());
158 }
159
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyWrongVersion)160 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyWrongVersion) {
161 EciesAeadHkdfPrivateKey key = CreateValidKey();
162 key.set_version(1);
163 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKey(key),
164 StatusIs(absl::StatusCode::kInvalidArgument));
165 }
166
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyNoPoint)167 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyNoPoint) {
168 EciesAeadHkdfPrivateKey key = CreateValidKey();
169 key.mutable_public_key()->mutable_params()->set_ec_point_format(
170 EcPointFormat::UNKNOWN_FORMAT);
171 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKey(key),
172 StatusIs(absl::StatusCode::kInvalidArgument));
173 }
174
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyNoDem)175 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyNoDem) {
176 EciesAeadHkdfPrivateKey key = CreateValidKey();
177 key.mutable_public_key()
178 ->mutable_params()
179 ->mutable_dem_params()
180 ->clear_aead_dem();
181 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKey(key),
182 StatusIs(absl::StatusCode::kInvalidArgument));
183 }
184
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyNoKemCurve)185 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyNoKemCurve) {
186 EciesAeadHkdfPrivateKey key = CreateValidKey();
187 key.mutable_public_key()
188 ->mutable_params()
189 ->mutable_kem_params()
190 ->set_curve_type(EllipticCurveType::UNKNOWN_CURVE);
191 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKey(key),
192 StatusIs(absl::StatusCode::kInvalidArgument));
193 }
194
TEST(EciesAeadHkdfPrivateKeyManagerTest,ValidateKeyNoKemHash)195 TEST(EciesAeadHkdfPrivateKeyManagerTest, ValidateKeyNoKemHash) {
196 EciesAeadHkdfPrivateKey key = CreateValidKey();
197 key.mutable_public_key()
198 ->mutable_params()
199 ->mutable_kem_params()
200 ->set_hkdf_hash_type(HashType::UNKNOWN_HASH);
201 EXPECT_THAT(EciesAeadHkdfPrivateKeyManager().ValidateKey(key),
202 StatusIs(absl::StatusCode::kInvalidArgument));
203 }
204
TEST(EciesAeadHkdfPrivateKeyManagerTest,GetPublicKey)205 TEST(EciesAeadHkdfPrivateKeyManagerTest, GetPublicKey) {
206 EciesAeadHkdfPrivateKey key = CreateValidKey();
207 ASSERT_THAT(EciesAeadHkdfPrivateKeyManager().GetPublicKey(key).status(),
208 IsOk());
209 EciesAeadHkdfPublicKey public_key =
210 EciesAeadHkdfPrivateKeyManager().GetPublicKey(key).value();
211 EXPECT_THAT(public_key.params().kem_params().curve_type(),
212 Eq(key.public_key().params().kem_params().curve_type()));
213 EXPECT_THAT(public_key.params().kem_params().hkdf_hash_type(),
214 Eq(key.public_key().params().kem_params().hkdf_hash_type()));
215 EXPECT_THAT(public_key.params().dem_params().aead_dem().type_url(),
216 Eq(key.public_key().params().dem_params().aead_dem().type_url()));
217 EXPECT_THAT(public_key.params().dem_params().aead_dem().value(),
218 Eq(key.public_key().params().dem_params().aead_dem().value()));
219 EXPECT_THAT(public_key.params().dem_params().aead_dem().output_prefix_type(),
220 Eq(key.public_key()
221 .params()
222 .dem_params()
223 .aead_dem()
224 .output_prefix_type()));
225
226 EXPECT_THAT(public_key.x(), Not(IsEmpty()));
227 EXPECT_THAT(public_key.y(), Not(IsEmpty()));
228 }
229
TEST(EciesAeadHkdfPrivateKeyManagerTest,Create)230 TEST(EciesAeadHkdfPrivateKeyManagerTest, Create) {
231 ASSERT_THAT(Registry::RegisterKeyTypeManager(
232 absl::make_unique<AesGcmKeyManager>(), true), IsOk());
233
234 EciesAeadHkdfPrivateKey private_key = CreateValidKey();
235 EciesAeadHkdfPublicKey public_key =
236 EciesAeadHkdfPrivateKeyManager().GetPublicKey(private_key).value();
237
238 auto decrypt_or =
239 EciesAeadHkdfPrivateKeyManager().GetPrimitive<HybridDecrypt>(private_key);
240 ASSERT_THAT(decrypt_or, IsOk());
241 auto encrypt_or = EciesAeadHkdfHybridEncrypt::New(public_key);
242 ASSERT_THAT(encrypt_or, IsOk());
243
244 ASSERT_THAT(HybridEncryptThenDecrypt(encrypt_or.value().get(),
245 decrypt_or.value().get(), "some text",
246 "some aad"),
247 IsOk());
248 }
249
TEST(EciesAeadHkdfPrivateKeyManagerTest,CreateDifferentKey)250 TEST(EciesAeadHkdfPrivateKeyManagerTest, CreateDifferentKey) {
251 ASSERT_THAT(Registry::RegisterKeyTypeManager(
252 absl::make_unique<AesGcmKeyManager>(), true), IsOk());
253
254 EciesAeadHkdfPrivateKey private_key = CreateValidKey();
255 // Note: we create a new private key in the next line.
256 EciesAeadHkdfPublicKey public_key =
257 EciesAeadHkdfPrivateKeyManager().GetPublicKey(CreateValidKey()).value();
258
259 auto decrypt_or =
260 EciesAeadHkdfPrivateKeyManager().GetPrimitive<HybridDecrypt>(private_key);
261 ASSERT_THAT(decrypt_or, IsOk());
262 auto encrypt_or = EciesAeadHkdfHybridEncrypt::New(public_key);
263 ASSERT_THAT(encrypt_or, IsOk());
264
265 ASSERT_THAT(HybridEncryptThenDecrypt(encrypt_or.value().get(),
266 decrypt_or.value().get(), "some text",
267 "some aad"),
268 Not(IsOk()));
269 }
270
271 } // namespace
272 } // namespace tink
273 } // namespace crypto
274