1 /*

     2  * Copyright (c) 2005, 2017, Oracle and/or its affiliates. All rights reserved.

     3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

     4  *

     5  * This code is free software; you can redistribute it and/or modify it

     6  * under the terms of the GNU General Public License version 2 only, as

     7  * published by the Free Software Foundation.

     8  *

     9  * This code is distributed in the hope that it will be useful, but WITHOUT

    10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

    11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

    12  * version 2 for more details (a copy is included in the LICENSE file that

    13  * accompanied this code).

    14  *

    15  * You should have received a copy of the GNU General Public License version

    16  * 2 along with this work; if not, write to the Free Software Foundation,

    17  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

    18  *

    19  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

    20  * or visit www.oracle.com if you need additional information or have any

    21  * questions.

    22  */

    23 

    24 /*

    25  * @test

    26  * @bug 6316539 6345251

    27  * @summary Basic known-answer-test for TlsPrf

    28  * @author Andreas Sterbenz

    29  * @library ..

    30  * @modules java.base/sun.security.internal.spec

    31  *          jdk.crypto.cryptoki

    32  * @run main/othervm TestPRF

    33  * @run main/othervm TestPRF sm policy

    34  */

    35 

    36 import java.io.BufferedReader;

    37 import java.nio.file.Files;

    38 import java.nio.file.Paths;

    39 import java.security.Provider;

    40 import java.util.Arrays;

    41 import javax.crypto.KeyGenerator;

    42 import javax.crypto.SecretKey;

    43 import javax.crypto.spec.SecretKeySpec;

    44 import sun.security.internal.spec.TlsPrfParameterSpec;

    45 

    46 public class TestPRF extends PKCS11Test {

    47 

    48     private static final int PREFIX_LENGTH = "prf-output: ".length();

    49 

    50     public static void main(String[] args) throws Exception {

    51         main(new TestPRF(), args);

    52     }

    53 

    54     @Override

    55     public void main(Provider provider) throws Exception {

    56         if (provider.getService("KeyGenerator", "SunTlsPrf") == null) {

    57             System.out.println("Provider does not support algorithm, skipping");

    58             return;

    59         }

    60 

    61         try (BufferedReader reader = Files.newBufferedReader(

    62                 Paths.get(BASE, "prfdata.txt"))) {

    63 

    64             int n = 0;

    65             int lineNumber = 0;

    66 

    67             byte[] secret = null;

    68             String label = null;

    69             byte[] seed = null;

    70             int length = 0;

    71             byte[] output = null;

    72 

    73             while (true) {

    74                 String line = reader.readLine();

    75                 lineNumber++;

    76                 if (line == null) {

    77                     break;

    78                 }

    79                 if (line.startsWith("prf-") == false) {

    80                     continue;

    81                 }

    82 

    83                 String data = line.substring(PREFIX_LENGTH);

    84                 if (line.startsWith("prf-secret:")) {

    85                     secret = parse(data);

    86                 } else if (line.startsWith("prf-label:")) {

    87                     label = data;

    88                 } else if (line.startsWith("prf-seed:")) {

    89                     seed = parse(data);

    90                 } else if (line.startsWith("prf-length:")) {

    91                     length = Integer.parseInt(data);

    92                 } else if (line.startsWith("prf-output:")) {

    93                     output = parse(data);

    94 

    95                     System.out.print(".");

    96                     n++;

    97 

    98                     KeyGenerator kg =

    99                         KeyGenerator.getInstance("SunTlsPrf", provider);

   100                     SecretKey inKey;

   101                     if (secret == null) {

   102                         inKey = null;

   103                     } else {

   104                         inKey = new SecretKeySpec(secret, "Generic");

   105                     }

   106                     TlsPrfParameterSpec spec =

   107                         new TlsPrfParameterSpec(inKey, label, seed, length,

   108                             null, -1, -1);

   109                     SecretKey key;

   110                     try {

   111                         kg.init(spec);

   112                         key = kg.generateKey();

   113                     } catch (Exception e) {

   114                         if (secret == null) {

   115                             // This fails on Solaris, but since we never call this

   116                             // API for this case in JSSE, ignore the failure.

   117                             // (SunJSSE uses the CKM_TLS_KEY_AND_MAC_DERIVE

   118                             // mechanism)

   119                             System.out.print("X");

   120                             continue;

   121                         }

   122                         System.out.println();

   123                         throw new Exception("Error on line: " + lineNumber, e);

   124                     }

   125                     byte[] enc = key.getEncoded();

   126                     if (Arrays.equals(output, enc) == false) {

   127                         System.out.println();

   128                         System.out.println("expected: " + toString(output));

   129                         System.out.println("actual:   " + toString(enc));

   130                         throw new Exception("mismatch line: " + lineNumber);

   131                     }

   132                 } else {

   133                     throw new Exception("Unknown line: " + line);

   134                 }

   135             }

   136             if (n == 0) {

   137                 throw new Exception("no tests");

   138             }

   139             System.out.println();

   140             System.out.println("OK: " + n + " tests");

   141         }

   142     }

   143 

   144 }