12a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Copyright (c) 2013 The Chromium Authors. All rights reserved.
22a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be
32a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// found in the LICENSE file.
42a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
52a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "crypto/hkdf.h"
62a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
72a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include <string>
82a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
92a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/strings/string_number_conversions.h"
102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gtest/include/gtest/gtest.h"
112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using crypto::HKDF;
132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace test {
152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace {
162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)struct HKDFTest {
182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)  const char* key_hex;
192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)  const char* salt_hex;
202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)  const char* info_hex;
212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)  const char* output_hex;
222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)};
232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// These test cases are taken from
252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// https://tools.ietf.org/html/rfc5869#appendix-A.
262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)static const HKDFTest kHKDFTests[] = {{
272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "000102030405060708090a0b0c",
292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "f0f1f2f3f4f5f6f7f8f9",
302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5"
312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "b887185865",
322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)  }, {
332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f2021222324"
342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "25262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40414243444546474849"
352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "4a4b4c4d4e4f",
362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f8081828384"
372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "85868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9"
382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "aaabacadaeaf",
392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4"
402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9"
412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "fafbfcfdfeff",
422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99ca"
432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "c7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c"
442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "01d5c1f3434f1d87",
452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)  }, {
462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "",
482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "",
492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395fa"
502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    "a4b61a96c8",
512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)  },
522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)};
532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)TEST(HKDFTest, HKDF) {
552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)  for (size_t i = 0; i < arraysize(kHKDFTests); i++) {
562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    const HKDFTest& test(kHKDFTests[i]);
572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    SCOPED_TRACE(i);
582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    std::vector<uint8> data;
602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    ASSERT_TRUE(base::HexStringToBytes(test.key_hex, &data));
612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    const std::string key(reinterpret_cast<char*>(&data[0]), data.size());
622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    data.clear();
642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    // |salt_hex| is optional and may be empty.
652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    std::string salt(test.salt_hex);
662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    if (!salt.empty()) {
672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)      ASSERT_TRUE(base::HexStringToBytes(salt, &data));
682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)      salt.assign(reinterpret_cast<char*>(&data[0]), data.size());
692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    }
702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    data.clear();
722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    // |info_hex| is optional and may be empty.
732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    std::string info(test.info_hex);
742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    if (!info.empty()) {
752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)      ASSERT_TRUE(base::HexStringToBytes(info, &data));
762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)      info.assign(reinterpret_cast<char*>(&data[0]), data.size());
772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    }
782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    data.clear();
802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    ASSERT_TRUE(base::HexStringToBytes(test.output_hex, &data));
812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    const std::string expected(reinterpret_cast<char*>(&data[0]), data.size());
822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    // We set the key_length to the length of the expected output and then take
842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    // the result from the first key, which is the client write key.
852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    HKDF hkdf(key, salt, info, expected.size(), 0);
862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    ASSERT_EQ(expected.size(), hkdf.client_write_key().size());
882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)    EXPECT_EQ(0, memcmp(expected.data(), hkdf.client_write_key().data(),
892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)                        expected.size()));
902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)  }
912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)}
922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)
932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)}  // namespace
942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)}  // namespace test
95