c846a862ee
Added Provider constructor which uses version String and use sun.security.util.PROVIDER_VER Reviewed-by: weijun
245 lines
8.6 KiB
Java
245 lines
8.6 KiB
Java
/*
|
|
* Copyright (c) 2016, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/* @test
|
|
* @bug 8051408 8157308 8130181
|
|
* @modules java.base/sun.security.provider
|
|
* @build java.base/sun.security.provider.S
|
|
* @run main SpecTest
|
|
* @summary check the AbstractDrbg API etc
|
|
*/
|
|
|
|
import java.security.*;
|
|
import sun.security.provider.S;
|
|
import static java.security.DrbgParameters.Capability.*;
|
|
|
|
/**
|
|
* This test makes sure the AbstractDrbg API works as specified. It also
|
|
* checks the SecureRandom API.
|
|
*
|
|
* The implementations must be patched into java.base/sun.security.provider
|
|
* because AbstractDrbg is not a public interface.
|
|
*/
|
|
public class SpecTest {
|
|
|
|
public static void main(String args[]) throws Exception {
|
|
|
|
// getInstance from a provider.
|
|
|
|
Provider p = new All("A", "0", "");
|
|
byte[] bytes = new byte[100];
|
|
|
|
// A non-DRBG
|
|
iae(() -> SecureRandom.getInstance("S1", null, p));
|
|
nsae(() -> SecureRandom.getInstance("S1",
|
|
new SecureRandomParameters() {}, p));
|
|
|
|
SecureRandom s1 = SecureRandom.getInstance("S1", p);
|
|
if (s1.getParameters() != null) {
|
|
throw new Exception();
|
|
}
|
|
|
|
iae(() -> s1.nextBytes(bytes, null));
|
|
uoe(() -> s1.nextBytes(bytes, new SecureRandomParameters() {}));
|
|
uoe(() -> s1.reseed());
|
|
iae(() -> s1.reseed(null));
|
|
uoe(() -> s1.reseed(new SecureRandomParameters() {}));
|
|
|
|
// A weak DRBG
|
|
iae(() -> SecureRandom.getInstance("S2", null, p));
|
|
nsae(() -> SecureRandom.getInstance("S2",
|
|
new SecureRandomParameters() {}, p));
|
|
nsae(() -> SecureRandom.getInstance("S2",
|
|
DrbgParameters.instantiation(256, NONE, null), p));
|
|
nsae(() -> SecureRandom.getInstance("S2",
|
|
DrbgParameters.instantiation(-1, PR_AND_RESEED, null), p));
|
|
nsae(() -> SecureRandom.getInstance("S2",
|
|
DrbgParameters.instantiation(-1, RESEED_ONLY, null), p));
|
|
|
|
SecureRandom s2 = SecureRandom.getInstance("S2",
|
|
DrbgParameters.instantiation(-1, NONE, null), p);
|
|
equals(s2, "S2,SQUEEZE,128,none");
|
|
equals(s2.getParameters(), "128,none,null");
|
|
|
|
npe(() -> s2.nextBytes(null));
|
|
iae(() -> s2.nextBytes(bytes, null));
|
|
iae(() -> s2.nextBytes(bytes, new SecureRandomParameters() {}));
|
|
uoe(() -> s2.reseed());
|
|
iae(() -> s2.reseed(null));
|
|
|
|
iae(() -> s2.nextBytes(bytes,
|
|
DrbgParameters.nextBytes(-1, false, new byte[101])));
|
|
s2.nextBytes(new byte[101],
|
|
DrbgParameters.nextBytes(-1, false, new byte[100]));
|
|
s2.nextBytes(bytes,
|
|
DrbgParameters.nextBytes(-1, false, new byte[100]));
|
|
|
|
// A strong DRBG
|
|
iae(() -> SecureRandom.getInstance("S3", null, p));
|
|
nsae(() -> SecureRandom.getInstance("S3",
|
|
new SecureRandomParameters() {}, p));
|
|
SecureRandom.getInstance("S3",
|
|
DrbgParameters.instantiation(192, PR_AND_RESEED, null), p);
|
|
|
|
SecureRandom s3 = SecureRandom.getInstance("S3", p);
|
|
equals(s3, "S3,SQUEEZE,128,reseed_only");
|
|
equals(s3.getParameters(), "128,reseed_only,null");
|
|
|
|
iae(() -> s3.nextBytes(bytes,
|
|
DrbgParameters.nextBytes(192, false, null)));
|
|
iae(() -> s3.nextBytes(bytes,
|
|
DrbgParameters.nextBytes(112, true, null)));
|
|
iae(() -> s3.reseed(new SecureRandomParameters() {}));
|
|
|
|
SecureRandom s32 = SecureRandom.getInstance(
|
|
"S3", DrbgParameters.instantiation(192, PR_AND_RESEED, null), p);
|
|
equals(s32, "S3,SQUEEZE,192,pr_and_reseed");
|
|
equals(s32.getParameters(), "192,pr_and_reseed,null");
|
|
|
|
s32.nextBytes(bytes, DrbgParameters.nextBytes(192, false, null));
|
|
s32.nextBytes(bytes, DrbgParameters.nextBytes(112, true, null));
|
|
s32.reseed();
|
|
s32.reseed(DrbgParameters.reseed(true, new byte[100]));
|
|
|
|
// getInstance from competitive providers.
|
|
|
|
Provider l = new Legacy("L", "0", "");
|
|
Provider w = new Weak("W", "0", "");
|
|
Provider s = new Strong("S", "0", "");
|
|
|
|
Security.addProvider(l);
|
|
Security.addProvider(w);
|
|
Security.addProvider(s);
|
|
|
|
SecureRandom s4;
|
|
|
|
try {
|
|
s4 = SecureRandom.getInstance("S");
|
|
if (s4.getProvider() != l) {
|
|
throw new Exception();
|
|
}
|
|
|
|
nsae(() -> SecureRandom.getInstance(
|
|
"S", DrbgParameters.instantiation(256, NONE, null)));
|
|
|
|
s4 = SecureRandom.getInstance(
|
|
"S", DrbgParameters.instantiation(192, NONE, null));
|
|
if (s4.getProvider() != s) {
|
|
throw new Exception();
|
|
}
|
|
|
|
s4 = SecureRandom.getInstance(
|
|
"S", DrbgParameters.instantiation(128, PR_AND_RESEED, null));
|
|
if (s4.getProvider() != s) {
|
|
throw new Exception();
|
|
}
|
|
|
|
s4 = SecureRandom.getInstance(
|
|
"S", DrbgParameters.instantiation(128, RESEED_ONLY, null));
|
|
if (s4.getProvider() != s) {
|
|
throw new Exception();
|
|
}
|
|
|
|
s4 = SecureRandom.getInstance(
|
|
"S", DrbgParameters.instantiation(128, NONE, null));
|
|
if (s4.getProvider() != w) {
|
|
throw new Exception();
|
|
}
|
|
} finally {
|
|
Security.removeProvider("L");
|
|
Security.removeProvider("W");
|
|
Security.removeProvider("S");
|
|
}
|
|
}
|
|
|
|
public static class All extends Provider {
|
|
protected All(String name, String version, String info) {
|
|
super(name, version, info);
|
|
put("SecureRandom.S1", S.S1.class.getName());
|
|
put("SecureRandom.S2", S.S2.class.getName());
|
|
put("SecureRandom.S3", S.S3.class.getName());
|
|
}
|
|
}
|
|
|
|
// Providing S with no params support
|
|
public static class Legacy extends Provider {
|
|
protected Legacy(String name, String version, String info) {
|
|
super(name, version, info);
|
|
put("SecureRandom.S", S.S1.class.getName());
|
|
}
|
|
}
|
|
|
|
public static class Weak extends Provider {
|
|
protected Weak(String name, String version, String info) {
|
|
super(name, version, info);
|
|
put("SecureRandom.S", S.S2.class.getName());
|
|
}
|
|
}
|
|
|
|
public static class Strong extends Provider {
|
|
protected Strong(String name, String version, String info) {
|
|
super(name, version, info);
|
|
put("SecureRandom.S", S.S3.class.getName());
|
|
}
|
|
}
|
|
|
|
static void nsae(RunnableWithException r) throws Exception {
|
|
checkException(r, NoSuchAlgorithmException.class);
|
|
}
|
|
|
|
static void iae(RunnableWithException r) throws Exception {
|
|
checkException(r, IllegalArgumentException.class);
|
|
}
|
|
|
|
static void uoe(RunnableWithException r) throws Exception {
|
|
checkException(r, UnsupportedOperationException.class);
|
|
}
|
|
|
|
static void npe(RunnableWithException r) throws Exception {
|
|
checkException(r, NullPointerException.class);
|
|
}
|
|
|
|
interface RunnableWithException {
|
|
void run() throws Exception;
|
|
}
|
|
|
|
static void checkException(RunnableWithException r, Class ex)
|
|
throws Exception {
|
|
try {
|
|
r.run();
|
|
} catch (Exception e) {
|
|
if (ex.isAssignableFrom(e.getClass())) {
|
|
return;
|
|
}
|
|
throw e;
|
|
}
|
|
throw new Exception("No exception thrown");
|
|
}
|
|
|
|
static void equals(Object o, String s) throws Exception {
|
|
if (!o.toString().equals(s)) {
|
|
throw new Exception(o.toString() + " is not " + s);
|
|
}
|
|
}
|
|
}
|