1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
|
/*
* SPDX-License-Identifier: GPL-3.0-or-later
* SPDX-FileCopyrightText: 2020 Johan Ouwerkerk <jm.ouwerkerk@gmail.com>
*/
#include "secrets/secrets.h"
#include <QTest>
#include <QtDebug>
#include <string.h>
class EncryptionDecryptionRoundTripTest : public QObject
{
Q_OBJECT
private Q_SLOTS:
void testEncryptionDecryptionRoundTrip(void);
void testDecryptionOfCorruptInputs(void);
};
void EncryptionDecryptionRoundTripTest::testEncryptionDecryptionRoundTrip(void)
{
QScopedPointer<secrets::SecureMemory> passwd(secrets::SecureMemory::allocate(13ULL));
QVERIFY2(passwd, "password memory should be allocated");
memcpy(passwd->data(), "Hello, world!", passwd->size());
std::optional<secrets::KeyDerivationParameters> defaults = secrets::KeyDerivationParameters::create();
QVERIFY2(defaults, "defaults should yield a valid key parameters object");
QScopedPointer<secrets::SecureMasterKey> masterKey(secrets::SecureMasterKey::derive(passwd.data(), *defaults));
QVERIFY2(masterKey, "key derivation should succeed");
QScopedPointer<secrets::SecureMemory> payload(secrets::SecureMemory::allocate(42ULL));
QVERIFY2(payload, "allocating the secure memory input buffer should succeed");
memset(payload->data(), 'B', 42ULL);
std::optional<secrets::EncryptedSecret> encrypted = masterKey->encrypt(payload.data());
QVERIFY2(encrypted, "encryption of the payload should succeed");
QScopedPointer<secrets::SecureMemory> decrypted(masterKey->decrypt(*encrypted));
QVERIFY2(decrypted, "decryption should succeed");
QCOMPARE(decrypted->size(), 42ULL);
QByteArray copyOfDecrypted;
copyOfDecrypted.append(reinterpret_cast<const char *>(decrypted->constData()), 42ULL);
QByteArray expected(42, 'B');
QCOMPARE(copyOfDecrypted, expected);
}
void EncryptionDecryptionRoundTripTest::testDecryptionOfCorruptInputs(void)
{
QScopedPointer<secrets::SecureMemory> passwd(secrets::SecureMemory::allocate(13ULL));
QVERIFY2(passwd, "password memory should be allocated");
memcpy(passwd->data(), "Hello, world!", passwd->size());
std::optional<secrets::KeyDerivationParameters> defaults = secrets::KeyDerivationParameters::create();
QVERIFY2(defaults, "defaults should yield a valid key parameters object");
QScopedPointer<secrets::SecureMasterKey> masterKey(secrets::SecureMasterKey::derive(passwd.data(), *defaults));
QVERIFY2(masterKey, "key derivation should succeed");
QScopedPointer<secrets::SecureMemory> payload(secrets::SecureMemory::allocate(42ULL));
QVERIFY2(payload, "allocating the secure memory input buffer should succeed");
memset(payload->data(), 'B', 42ULL);
std::optional<secrets::EncryptedSecret> encrypted = masterKey->encrypt(payload.data());
QVERIFY2(encrypted, "encryption of the payload should succeed");
QByteArray brokenTag(encrypted->cryptText());
brokenTag[0] = brokenTag[0] ^ ((char)0xFF);
std::optional<secrets::EncryptedSecret> fakedTag = secrets::EncryptedSecret::from(brokenTag, encrypted->nonce());
QVERIFY2(fakedTag, "should be able to construct the 'fake' encrypted input (tag)");
QScopedPointer<secrets::SecureMemory> decryptedUsingFakeTag(masterKey->decrypt(*fakedTag));
QVERIFY2(!decryptedUsingFakeTag, "decryption should fail when the authentication tag has been tampered with");
QByteArray brokenPayload(encrypted->cryptText());
brokenPayload[brokenPayload.size() - 1] = brokenPayload[brokenPayload.size() - 1] ^ ((char)0xFF);
std::optional<secrets::EncryptedSecret> fakedPayload = secrets::EncryptedSecret::from(brokenPayload, encrypted->nonce());
QVERIFY2(fakedPayload, "should be able to construct the 'fake' encrypted input (payload)");
QScopedPointer<secrets::SecureMemory> decryptedUsingFakePayload(masterKey->decrypt(*fakedPayload));
QVERIFY2(!decryptedUsingFakePayload, "decryption should fail when the payload has been tampered with");
QByteArray brokenNonce(encrypted->nonce());
brokenNonce[0] = brokenNonce[0] ^ ((char)0xFF);
std::optional<secrets::EncryptedSecret> fakedNonce = secrets::EncryptedSecret::from(encrypted->cryptText(), brokenNonce);
QVERIFY2(fakedNonce, "should be able to construct the 'fake' encrypted input (nonce)");
QScopedPointer<secrets::SecureMemory> decryptedUsingFakeNonce(masterKey->decrypt(*fakedNonce));
QVERIFY2(!decryptedUsingFakeNonce, "decryption should fail when the nonce has been tampered with");
}
QTEST_APPLESS_MAIN(EncryptionDecryptionRoundTripTest)
#include "encrypt-decrypt-rt.moc"
|
