180 lines
7.4 KiB
Java
180 lines
7.4 KiB
Java
/*
|
|
* Copyright (c) 2016, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
import sun.security.provider.MoreDrbgParameters;
|
|
|
|
import java.security.DrbgParameters;
|
|
import java.security.NoSuchAlgorithmException;
|
|
import java.security.SecureRandom;
|
|
import java.security.SecureRandomParameters;
|
|
import java.security.Security;
|
|
import java.util.ArrayList;
|
|
import java.util.Arrays;
|
|
import java.util.Collections;
|
|
import java.util.List;
|
|
import java.util.stream.Collectors;
|
|
|
|
import static java.security.DrbgParameters.Capability.*;
|
|
|
|
/**
|
|
* @test
|
|
* @bug 8051408
|
|
* @modules java.base/sun.security.provider
|
|
* @summary make sure DRBG alg can be defined and instantiated freely
|
|
*/
|
|
public class DRBGAlg {
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
|
|
check(null, "Hash_DRBG", "SHA-256", "reseed_only", ",128");
|
|
check("", "Hash_DRBG", "SHA-256", "reseed_only", ",128");
|
|
check("sha-256", "Hash_DRBG", "SHA-256", "reseed_only", ",128");
|
|
check("SHA-3");
|
|
check("hash_drbg", "Hash_DRBG", "SHA-256", "reseed_only", ",128");
|
|
check("hmac_drbg", "HMAC_DRBG", "SHA-256", "reseed_only", ",128");
|
|
check("ctr_drbg", "CTR_DRBG", "AES-", "reseed_only", ",128", "use_df");
|
|
|
|
// trying all permutations
|
|
checkPermutations(
|
|
Collections.emptyList(),
|
|
Arrays.asList("hash_drbg","sha-512","Pr_and_Reseed","192"),
|
|
"Hash_DRBG", "SHA-512", "pr_and_reseed", ",192");
|
|
|
|
check("Hash_DRBG,Hmac_DRBG");
|
|
check("SHA-224,SHA-256");
|
|
check("128,256");
|
|
check("none,reseed_only");
|
|
check("use_df,no_df");
|
|
check("Hash_DRBG,,SHA-256");
|
|
|
|
check(null, DrbgParameters.instantiation(112, PR_AND_RESEED, null),
|
|
"Hash_DRBG", "SHA-256", "pr_and_reseed", ",112");
|
|
check(null, DrbgParameters.instantiation(256, PR_AND_RESEED, null),
|
|
"Hash_DRBG", "SHA-256", "pr_and_reseed", ",256");
|
|
check(null, DrbgParameters.instantiation(384, PR_AND_RESEED, null));
|
|
check("sha-224", DrbgParameters.instantiation(112, PR_AND_RESEED, null),
|
|
"Hash_DRBG", "SHA-224", "pr_and_reseed", ",112");
|
|
check("sha-224", DrbgParameters.instantiation(256, PR_AND_RESEED, null));
|
|
check("hash_drbg,sha-512,Pr_and_Reseed,192",
|
|
DrbgParameters.instantiation(112, NONE, null),
|
|
"Hash_DRBG", "SHA-512", "reseed_only", ",112");
|
|
check("hash_drbg,sha-512,Pr_and_Reseed,192",
|
|
DrbgParameters.instantiation(-1, NONE, null),
|
|
"Hash_DRBG", "SHA-512", "reseed_only", ",192");
|
|
// getInstance params can be stronger than definition
|
|
check("hash_drbg,sha-256,None,112",
|
|
DrbgParameters.instantiation(192, PR_AND_RESEED, null),
|
|
"Hash_DRBG", "SHA-256", "pr_and_reseed", ",192");
|
|
|
|
check("hash_drbg,sha-224", new MoreDrbgParameters(
|
|
null, null, "sha-512", null, false,
|
|
DrbgParameters.instantiation(-1, NONE, null)),
|
|
"Hash_DRBG", "SHA-512");
|
|
check("hash_drbg,sha-224", new MoreDrbgParameters(
|
|
null, null, null, null, false,
|
|
DrbgParameters.instantiation(-1, NONE, null)),
|
|
"Hash_DRBG", "SHA-224");
|
|
check("hash_drbg", new MoreDrbgParameters(
|
|
null, "hmac_drbg", null, null, false,
|
|
DrbgParameters.instantiation(-1, NONE, null)),
|
|
"HMAC_DRBG", "SHA-256");
|
|
|
|
check("hash_drbg,sha-224", new MoreDrbgParameters(
|
|
null, null, "sha-3", null, false,
|
|
DrbgParameters.instantiation(-1, NONE, null)));
|
|
check("hash_drbg,sha-224", new MoreDrbgParameters(
|
|
null, "Unknown_DRBG", null, null, false,
|
|
DrbgParameters.instantiation(-1, NONE, null)));
|
|
}
|
|
|
|
/**
|
|
* Checks all permutatins of a config. This is a recursive method and
|
|
* should be called with checkPermutations(empty,config,expected).
|
|
*
|
|
* @param current the current chosen aspects
|
|
* @param remains the remaining
|
|
* @param expected the expected effective config
|
|
* @throws Exception when check fails
|
|
*/
|
|
private static void checkPermutations(List<String> current,
|
|
List<String> remains, String... expected) throws Exception {
|
|
if (remains.isEmpty()) {
|
|
check(current.stream().collect(Collectors.joining(",")), expected);
|
|
} else {
|
|
for (String r : remains) {
|
|
List<String> newCurrent = new ArrayList<>(current);
|
|
newCurrent.add(r);
|
|
List<String> newRemains = new ArrayList<>(remains);
|
|
newRemains.remove(r);
|
|
checkPermutations(newCurrent, newRemains, expected);
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Checks DRBG definition for getInstance(alg, params).
|
|
*
|
|
* @param define DRBG
|
|
* @param params getInstance request (null if none)
|
|
* @param expected expected actual instantiate params, empty if should fail
|
|
*/
|
|
static void check(String define, SecureRandomParameters params,
|
|
String... expected) throws Exception {
|
|
System.out.println("Testing " + define + " with " + params + "...");
|
|
String old = Security.getProperty("securerandom.drbg.config");
|
|
if (define != null) {
|
|
Security.setProperty("securerandom.drbg.config", define);
|
|
}
|
|
try {
|
|
String result = params != null ?
|
|
SecureRandom.getInstance("DRBG", params).toString() :
|
|
SecureRandom.getInstance("DRBG").toString();
|
|
System.out.println("Result " + result);
|
|
if (expected.length == 0) {
|
|
throw new Exception("should fail");
|
|
}
|
|
for (String s : expected) {
|
|
if (!result.contains(s)) {
|
|
throw new Exception(result);
|
|
}
|
|
}
|
|
} catch (NoSuchAlgorithmException e) {
|
|
System.out.println("Result NSAE");
|
|
if (expected.length > 0) {
|
|
throw e;
|
|
}
|
|
} finally {
|
|
Security.setProperty("securerandom.drbg.config", old);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Checks DRBG definition for getInstance(alg).
|
|
*
|
|
* @param define DRBG
|
|
* @param expected expected actual instantiate params, empty if should fail
|
|
*/
|
|
static void check(String define, String... expected) throws Exception {
|
|
check(define, null, expected);
|
|
}
|
|
}
|