1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
#!/usr/bin/env python
"""
Unit tests for M2Crypto.BIO.
Copyright (c) 1999-2003 Ng Pheng Siong. All rights reserved.
Copyright (c) 2006 Open Source Applications Foundation
Author: Heikki Toivonen
"""
import logging
from M2Crypto import BIO, Rand, m2
from tests import unittest
from tests.fips import fips_mode
log = logging.getLogger("test_bio")
ciphers = [
"des_ede_ecb",
"des_ede_cbc",
"des_ede_cfb",
"des_ede_ofb",
"des_ede3_ecb",
"des_ede3_cbc",
"des_ede3_cfb",
"des_ede3_ofb",
"aes_128_ecb",
"aes_128_cbc",
"aes_128_cfb",
"aes_128_ofb",
"aes_192_ecb",
"aes_192_cbc",
"aes_192_cfb",
"aes_192_ofb",
"aes_256_ecb",
"aes_256_cbc",
"aes_256_cfb",
"aes_256_ofb",
]
nonfips_ciphers = [
"bf_ecb",
"bf_cbc",
"bf_cfb",
"bf_ofb",
# 'idea_ecb', 'idea_cbc', 'idea_cfb', 'idea_ofb',
"cast5_ecb",
"cast5_cbc",
"cast5_cfb",
"cast5_ofb",
# 'rc5_ecb', 'rc5_cbc', 'rc5_cfb', 'rc5_ofb',
"des_ecb",
"des_cbc",
"des_cfb",
"des_ofb",
"rc4",
"rc2_40_cbc",
]
if not fips_mode and m2.OPENSSL_VERSION_NUMBER < 0x30000000: # Forbidden ciphers
ciphers += nonfips_ciphers
class CipherStreamTestCase(unittest.TestCase):
def try_algo(self, algo):
data = b"123456789012345678901234"
my_key = 3 * 15 * b"key"
my_IV = 3 * 16 * b"IV"
# Encrypt.
mem = BIO.MemoryBuffer()
cf = BIO.CipherStream(mem)
cf.set_cipher(algo, my_key, my_IV, 1)
cf.write(data)
cf.flush()
cf.write_close()
cf.close()
ciphertext = mem.read()
# Decrypt.
mem = BIO.MemoryBuffer(ciphertext)
cf = BIO.CipherStream(mem)
cf.set_cipher(algo, my_key, my_IV, 0)
cf.write_close()
data2 = cf.read()
cf.close()
self.assertFalse(cf.readable())
with self.assertRaises(IOError):
cf.read()
with self.assertRaises(IOError):
cf.readline()
with self.assertRaises(IOError):
cf.readlines()
self.assertEqual(data, data2, "%s algorithm cipher test failed" % algo)
def test_algo(self):
for algo in ciphers:
with self.subTest(algo=algo):
self.try_algo(algo)
def test_nosuchalgo(self):
with self.assertRaises(ValueError):
self.try_algo("nosuchalgo4567")
def suite():
return unittest.TestLoader().loadTestsFromTestCase(CipherStreamTestCase)
if __name__ == "__main__":
Rand.load_file("randpool.dat", -1)
unittest.TextTestRunner().run(suite())
Rand.save_file("randpool.dat")
|
