1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
/*
* Copyright (c) 2014, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/*
* @test
* @bug 8035986
* @summary KerberosKey algorithm names are not specified
* @modules java.security.jgss/sun.security.krb5
*/
import sun.security.krb5.EncryptedData;
import javax.crypto.Cipher;
import javax.security.auth.kerberos.KerberosKey;
import javax.security.auth.kerberos.KerberosPrincipal;
import java.util.Locale;
public class StandardNames {
static KerberosPrincipal kp = new KerberosPrincipal("user@REALM");
static char[] pass = "secret".toCharArray();
static byte[] keyBytes = new byte[1];
public static void main(String[] args) throws Exception {
for (EncType e: EncType.values()) {
if (e == EncType.e18) {
if (Cipher.getMaxAllowedKeyLength("AES") < 256) {
System.out.println("Skipping aes256-cts-hmac-sha1-96");
continue;
}
}
checkByName(e.name, e);
checkByName(e.name.toUpperCase(Locale.US), e);
for (String n: e.oldnames) {
checkByName(n, e);
if (n != null) {
checkByName(n.toLowerCase(Locale.US), e);
}
}
checkByEType(e.etype, e.name);
}
checkByEType(100, "unknown");
checkByEType(-1, "private");
try {
System.out.println("unsupported");
new KerberosKey(kp, pass, "unsupported");
throw new Exception("unsupported");
} catch (IllegalArgumentException iae) {
// Expected
}
}
private static void checkByName(String n, EncType e) throws Exception {
System.out.println("CheckByName " + n);
KerberosKey k = new KerberosKey(kp, pass, n);
if (!k.getAlgorithm().equals(e.name)) throw new Exception(n);
if (k.getKeyType() != e.etype) throw new Exception(n);
if (k.getVersionNumber() != 0) throw new Exception(n);
}
private static void checkByEType(int i, String n) throws Exception {
System.out.println("CheckByInt " + i);
KerberosKey k = new KerberosKey(kp, keyBytes, i, 13);
if (!k.getAlgorithm().equals(n)) throw new Exception("" + i);
if (k.getKeyType() != i) throw new Exception("" + i);
if (k.getVersionNumber() != 13) throw new Exception("" + i);
}
}
enum EncType {
e0("none", EncryptedData.ETYPE_NULL),
e1("des-cbc-crc", EncryptedData.ETYPE_DES_CBC_CRC),
e3("des-cbc-md5", EncryptedData.ETYPE_DES_CBC_MD5, "DES", null),
e16("des3-cbc-sha1-kd", EncryptedData.ETYPE_DES3_CBC_HMAC_SHA1_KD, "DESede"),
e17("aes128-cts-hmac-sha1-96", EncryptedData.ETYPE_AES128_CTS_HMAC_SHA1_96, "AES128"),
e18("aes256-cts-hmac-sha1-96", EncryptedData.ETYPE_AES256_CTS_HMAC_SHA1_96, "AES256"),
e23("rc4-hmac", EncryptedData.ETYPE_ARCFOUR_HMAC, "ArcFourHmac"),
;
final String name;
final int etype;
final String[] oldnames;
EncType(String name, int etype, String... oldnames) {
this.name = name;
this.etype = etype;
this.oldnames = oldnames;
}
}
|
