1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
|
#include <array>
#include <numeric>
#include "gtest/gtest.h"
#if defined(SRT_ENABLE_ENCRYPTION) && defined(ENABLE_AEAD_API_PREVIEW)
#include "crypto.h"
#include "hcrypt.h" // Imports the CRYSPR_HAS_AESGCM definition.
#include "socketconfig.h"
namespace srt
{
class Crypto
: public ::testing::Test
{
protected:
Crypto()
: m_crypt(0)
{
// initialization code here
}
virtual ~Crypto()
{
// cleanup any pending stuff, but no exceptions allowed
}
protected:
// SetUp() is run immediately before a test starts.
void SetUp() override
{
CSrtConfig cfg;
memset(&cfg.CryptoSecret, 0, sizeof(cfg.CryptoSecret));
cfg.CryptoSecret.typ = HAICRYPT_SECTYP_PASSPHRASE;
cfg.CryptoSecret.len = (m_pwd.size() <= (int)sizeof(cfg.CryptoSecret.str) ? m_pwd.size() : (int)sizeof(cfg.CryptoSecret.str));
memcpy((cfg.CryptoSecret.str), m_pwd.c_str(), m_pwd.size());
m_crypt.setCryptoSecret(cfg.CryptoSecret);
// 2 = 128, 3 = 192, 4 = 256
cfg.iSndCryptoKeyLen = SrtHSRequest::SRT_PBKEYLEN_BITS::wrap(4);
m_crypt.setCryptoKeylen(cfg.iSndCryptoKeyLen);
cfg.iCryptoMode = CSrtConfig::CIPHER_MODE_AES_GCM;
EXPECT_TRUE(m_crypt.init(HSD_INITIATOR, cfg, true, HaiCrypt_IsAESGCM_Supported()));
const unsigned char* kmmsg = m_crypt.getKmMsg_data(0);
const size_t km_len = m_crypt.getKmMsg_size(0);
uint32_t kmout[72];
size_t kmout_len = 72;
std::array<uint32_t, 72> km_nworder;
NtoHLA(km_nworder.data(), reinterpret_cast<const uint32_t*>(kmmsg), km_len);
m_crypt.processSrtMsg_KMREQ(km_nworder.data(), km_len, 5, SrtVersion(1, 5, 3), kmout, kmout_len);
}
void TearDown() override
{
}
protected:
srt::CCryptoControl m_crypt;
const std::string m_pwd = "abcdefghijk";
};
// Check that destroying the buffer also frees memory units.
TEST_F(Crypto, GCM)
{
if (HaiCrypt_IsAESGCM_Supported() == 0)
GTEST_SKIP() << "The crypto service provider does not support AES GCM.";
const size_t mtu_size = 1500;
const size_t pld_size = 1316;
const size_t tag_len = 16;
CPacket pkt;
pkt.allocate(mtu_size);
const int seqno = 1;
const int msgno = 1;
const int inorder = 1;
const int kflg = m_crypt.getSndCryptoFlags();
pkt.set_seqno(seqno);
pkt.set_msgflags(msgno | inorder | PacketBoundaryBits(PB_SOLO) | MSGNO_ENCKEYSPEC::wrap(kflg));
pkt.set_timestamp(356);
std::iota(pkt.data(), pkt.data() + pld_size, '0');
pkt.setLength(pld_size);
EXPECT_EQ(m_crypt.encrypt(pkt), ENCS_CLEAR);
EXPECT_EQ(pkt.getLength(), pld_size + tag_len);
auto pkt_enc = std::unique_ptr<CPacket>(pkt.clone());
EXPECT_EQ(m_crypt.decrypt(pkt), ENCS_CLEAR);
EXPECT_EQ(pkt.getLength(), pld_size);
// Modify the payload and expect auth to fail.
pkt_enc->data()[10] = '5';
EXPECT_EQ(m_crypt.decrypt(*pkt_enc.get()), ENCS_FAILED);
}
} // namespace srt
#endif //SRT_ENABLE_ENCRYPTION && ENABLE_AEAD_API_PREVIEW
|
