third_party/WebKit/LayoutTests/crypto/subtle/hmac/sign-verify.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script src="../../../resources/js-test.js"></script>
   5 <script src="../resources/common.js"></script>
   6 </head>
   7 <body>
   8 <p id="description"></p>
   9 <div id="console"></div>
  10
  11 <script>
  12 description("Tests sign() and verify() for HMAC");
  13
  14 jsTestIsAsync = true;
  15
  16 // -------------------------------------------------
  17 // Successful sign/verify for HMAC
  18 // -------------------------------------------------
  19
  20 // The "key", "message", and "mac" are written as hex encoded strings.
  21 //
  22 // Unless indicated otherwise, the data comes from:
  23 //   http://csrc.nist.gov/groups/STM/cavp/index.html#07
  24 // Which can be downloaded from:
  25 //   http://csrc.nist.gov/groups/STM/cavp/documents/mac/hmactestvectors.zip
  26 var kHmacTestVectors = [
  27   // Empty sets.  Result generated via OpenSSL commandline tool.  These
  28   // particular results are also posted on the Wikipedia page examples:
  29   // http://en.wikipedia.org/wiki/Hash-based_message_authentication_code
  30   {
  31     hash: "SHA-1",
  32     key: "00",
  33     message: "",
  34     // openssl dgst -sha1 -hmac "" < /dev/null
  35     mac: "fbdb1d1b18aa6c08324b7d64b71fb76370690e1d",
  36   },
  37   {
  38     hash: "SHA-256",
  39     key: "00",
  40     message: "",
  41     // openssl dgst -sha256 -hmac "" < /dev/null
  42     mac: "b613679a0814d9ec772f95d778c35fc5ff1697c493715653c6c712144292c5ad",
  43   },
  44   // L=20 set 45
  45   {
  46     hash: "SHA-1",
  47     key: "59785928d72516e31272",
  48     message: "a3ce8899df1022e8d2d539b47bf0e309c66f84095e21438ec355bf119ce5fdcb4e73a619cdf36f25b369d8c38ff419997f0c59830108223606e31223483fd39edeaa4d3f0d21198862d239c9fd26074130ff6c86493f5227ab895c8f244bd42c7afce5d147a20a590798c68e708e964902d124dadecdbda9dbd0051ed710e9bf",
  49     mac: "3c8162589aafaee024fc9a5ca50dd2336fe3eb28",
  50   },
  51   // L=20 set 299
  52   {
  53     hash: "SHA-1",
  54     key: "ceb9aedf8d6efcf0ae52bea0fa99a9e26ae81bacea0cff4d5eecf201e3bca3c3577480621b818fd717ba99d6ff958ea3d59b2527b019c343bb199e648090225867d994607962f5866aa62930d75b58f6",
  55     message: "99958aa459604657c7bf6e4cdfcc8785f0abf06ffe636b5b64ecd931bd8a456305592421fc28dbcccb8a82acea2be8e54161d7a78e0399a6067ebaca3f2510274dc9f92f2c8ae4265eec13d7d42e9f8612d7bc258f913ecb5a3a5c610339b49fb90e9037b02d684fc60da835657cb24eab352750c8b463b1a8494660d36c3ab2",
  56     mac: "4ac41ab89f625c60125ed65ffa958c6b490ea670",
  57   },
  58   // L=32, set 30
  59   {
  60     hash: "SHA-256",
  61     key: "9779d9120642797f1747025d5b22b7ac607cab08e1758f2f3a46c8be1e25c53b8c6a8f58ffefa176",
  62     message: "b1689c2591eaf3c9e66070f8a77954ffb81749f1b00346f9dfe0b2ee905dcc288baf4a92de3f4001dd9f44c468c3d07d6c6ee82faceafc97c2fc0fc0601719d2dcd0aa2aec92d1b0ae933c65eb06a03c9c935c2bad0459810241347ab87e9f11adb30415424c6c7f5f22a003b8ab8de54f6ded0e3ab9245fa79568451dfa258e",
  63     mac: "769f00d3e6a6cc1fb426a14a4f76c6462e6149726e0dee0ec0cf97a16605ac8b",
  64   },
  65   // L=32, set 224
  66   {
  67     hash: "SHA-256",
  68     key: "4b7ab133efe99e02fc89a28409ee187d579e774f4cba6fc223e13504e3511bef8d4f638b9aca55d4a43b8fbd64cf9d74dcc8c9e8d52034898c70264ea911a3fd70813fa73b083371289b",
  69     message: "138efc832c64513d11b9873c6fd4d8a65dbf367092a826ddd587d141b401580b798c69025ad510cff05fcfbceb6cf0bb03201aaa32e423d5200925bddfadd418d8e30e18050eb4f0618eb9959d9f78c1157d4b3e02cd5961f138afd57459939917d9144c95d8e6a94c8f6d4eef3418c17b1ef0b46c2a7188305d9811dccb3d99",
  70     mac: "4f1ee7cb36c58803a8721d4ac8c4cf8cae5d8832392eed2a96dc59694252801b",
  71   }
  72 ];
  73
  74 function hexStringToBufferSource(str, generateArrayBuffer) {
  75   var data = hexStringToUint8Array(str);
  76   if (generateArrayBuffer) {
  77     return data = data.buffer;
  78   }
  79   return data;
  80 }
  81
  82 function runTest(testCase, useArrayBufferForSignature, useArrayBufferForData)
  83 {
  84     var importAlgorithm = {name: 'HMAC', hash: {name: testCase.hash}};
  85     var algorithm = {name: 'HMAC'};
  86
  87     var key = null;
  88     var keyData = hexStringToUint8Array(testCase.key);
  89     var usages = ['sign', 'verify'];
  90     var extractable = false;
  91
  92     // (1) Import the key
  93     return crypto.subtle.importKey('raw', keyData, importAlgorithm, extractable, usages).then(function(result) {
  94         key = result;
  95
  96         // shouldBe() can only resolve variables in global context.
  97         tmpKey = key;
  98         shouldEvaluateAs("tmpKey.type", "secret");
  99         shouldEvaluateAs("tmpKey.extractable", false);
 100         shouldEvaluateAs("tmpKey.algorithm.name", "HMAC");
 101         shouldEvaluateAs("tmpKey.algorithm.hash.name", testCase.hash);
 102         shouldEvaluateAs("tmpKey.algorithm.length", keyData.length * 8);
 103         shouldEvaluateAs("tmpKey.usages.join(',')", "sign,verify");
 104
 105         // (2) Sign.
 106         return crypto.subtle.sign(algorithm, key, hexStringToUint8Array(testCase.message));
 107     }).then(function(result) {
 108         bytesShouldMatchHexString("Mac", testCase.mac, result);
 109
 110         // (3) Verify
 111         return crypto.subtle.verify(algorithm, key, hexStringToBufferSource(testCase.mac, useArrayBufferForSignature), hexStringToBufferSource(testCase.message, useArrayBufferForData));
 112     }).then(function(result) {
 113         verifyResult = result;
 114         shouldBe("verifyResult", "true");
 115
 116         // (4) Verify truncated mac (by stripping 1 byte off of it).
 117         var expectedMac = hexStringToUint8Array(testCase.mac);
 118         return crypto.subtle.verify(algorithm, key, expectedMac.subarray(0, expectedMac.byteLength - 1), hexStringToUint8Array(testCase.message));
 119     }).then(function(result) {
 120         verifyResult = result;
 121         shouldBe("verifyResult", "false");
 122     });
 123 }
 124
 125 var lastPromise = Promise.resolve(null);
 126
 127 kHmacTestVectors.forEach(function(testCase) {
 128     [true, false].forEach(function(useArrayBufferForSignature) {
 129         [true, false].forEach(function(useArrayBufferForData) {
 130             lastPromise = lastPromise.then(runTest.bind(null, testCase, useArrayBufferForSignature, useArrayBufferForData));
 131         })
 132     })
 133 });
 134
 135 lastPromise.then(finishJSTest, failAndFinishJSTest);
 136
 137 </script>
 138
 139 </body>
 140 </html>