1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
// -*- mode:C++; tab-width:8; c-basic-offset:2; indent-tabs-mode:t -*-
// vim: ts=8 sw=2 smarttab
#include "test/librbd/test_fixture.h"
#include "librbd/crypto/openssl/DataCryptor.h"
namespace librbd {
namespace crypto {
namespace openssl {
const char* TEST_CIPHER_NAME = "aes-256-xts";
const unsigned char TEST_KEY[64] = {1};
const unsigned char TEST_IV[16] = {2};
const unsigned char TEST_IV_2[16] = {3};
const unsigned char TEST_DATA[4096] = {4};
struct TestCryptoOpensslDataCryptor : public TestFixture {
DataCryptor *cryptor;
void SetUp() override {
TestFixture::SetUp();
cryptor = new DataCryptor(reinterpret_cast<CephContext*>(m_ioctx.cct()));
ASSERT_EQ(0,
cryptor->init(TEST_CIPHER_NAME, TEST_KEY, sizeof(TEST_KEY)));
}
void TearDown() override {
delete cryptor;
TestFixture::TearDown();
}
};
TEST_F(TestCryptoOpensslDataCryptor, InvalidCipherName) {
EXPECT_EQ(-EINVAL, cryptor->init(nullptr, TEST_KEY, sizeof(TEST_KEY)));
EXPECT_EQ(-EINVAL, cryptor->init("", TEST_KEY, sizeof(TEST_KEY)));
EXPECT_EQ(-EINVAL, cryptor->init("Invalid", TEST_KEY, sizeof(TEST_KEY)));
}
TEST_F(TestCryptoOpensslDataCryptor, InvalidKey) {
EXPECT_EQ(-EINVAL, cryptor->init(TEST_CIPHER_NAME, nullptr, 0));
EXPECT_EQ(-EINVAL, cryptor->init(TEST_CIPHER_NAME, nullptr,
sizeof(TEST_KEY)));
EXPECT_EQ(-EINVAL, cryptor->init(TEST_CIPHER_NAME, TEST_KEY, 1));
}
TEST_F(TestCryptoOpensslDataCryptor, GetContextInvalidMode) {
EXPECT_EQ(nullptr, cryptor->get_context(static_cast<CipherMode>(-1)));
}
TEST_F(TestCryptoOpensslDataCryptor, ReturnNullContext) {
cryptor->return_context(nullptr, static_cast<CipherMode>(-1));
}
TEST_F(TestCryptoOpensslDataCryptor, ReturnContextInvalidMode) {
auto ctx = cryptor->get_context(CipherMode::CIPHER_MODE_ENC);
ASSERT_NE(ctx, nullptr);
cryptor->return_context(ctx, CipherMode::CIPHER_MODE_DEC);
ctx = cryptor->get_context(CipherMode::CIPHER_MODE_ENC);
ASSERT_NE(ctx, nullptr);
cryptor->return_context(ctx, static_cast<CipherMode>(-1));
}
TEST_F(TestCryptoOpensslDataCryptor, EncryptDecrypt) {
auto ctx = cryptor->get_context(CipherMode::CIPHER_MODE_ENC);
ASSERT_NE(ctx, nullptr);
cryptor->init_context(ctx, TEST_IV, sizeof(TEST_IV));
unsigned char out[sizeof(TEST_DATA)];
ASSERT_EQ(sizeof(TEST_DATA),
cryptor->update_context(ctx, TEST_DATA, out, sizeof(TEST_DATA)));
cryptor->return_context(ctx, CipherMode::CIPHER_MODE_ENC);
ctx = cryptor->get_context(CipherMode::CIPHER_MODE_DEC);
ASSERT_NE(ctx, nullptr);
ASSERT_EQ(0, cryptor->init_context(ctx, TEST_IV, sizeof(TEST_IV)));
ASSERT_EQ(sizeof(TEST_DATA),
cryptor->update_context(ctx, out, out, sizeof(TEST_DATA)));
ASSERT_EQ(0, memcmp(out, TEST_DATA, sizeof(TEST_DATA)));
cryptor->return_context(ctx, CipherMode::CIPHER_MODE_DEC);
}
TEST_F(TestCryptoOpensslDataCryptor, ReuseContext) {
auto ctx = cryptor->get_context(CipherMode::CIPHER_MODE_ENC);
ASSERT_NE(ctx, nullptr);
ASSERT_EQ(0, cryptor->init_context(ctx, TEST_IV, sizeof(TEST_IV)));
unsigned char out[sizeof(TEST_DATA)];
ASSERT_EQ(sizeof(TEST_DATA),
cryptor->update_context(ctx, TEST_DATA, out, sizeof(TEST_DATA)));
ASSERT_EQ(0, cryptor->init_context(ctx, TEST_IV_2, sizeof(TEST_IV_2)));
ASSERT_EQ(sizeof(TEST_DATA),
cryptor->update_context(ctx, TEST_DATA, out, sizeof(TEST_DATA)));
auto ctx2 = cryptor->get_context(CipherMode::CIPHER_MODE_ENC);
ASSERT_NE(ctx2, nullptr);
ASSERT_EQ(0, cryptor->init_context(ctx2, TEST_IV_2, sizeof(TEST_IV_2)));
unsigned char out2[sizeof(TEST_DATA)];
ASSERT_EQ(sizeof(TEST_DATA),
cryptor->update_context(ctx2, TEST_DATA, out2, sizeof(TEST_DATA)));
ASSERT_EQ(0, memcmp(out, out2, sizeof(TEST_DATA)));
cryptor->return_context(ctx, CipherMode::CIPHER_MODE_ENC);
cryptor->return_context(ctx2, CipherMode::CIPHER_MODE_ENC);
}
TEST_F(TestCryptoOpensslDataCryptor, InvalidIVLength) {
auto ctx = cryptor->get_context(CipherMode::CIPHER_MODE_ENC);
ASSERT_NE(ctx, nullptr);
ASSERT_EQ(-EINVAL, cryptor->init_context(ctx, TEST_IV, 1));
cryptor->return_context(ctx, CipherMode::CIPHER_MODE_ENC);
}
} // namespace openssl
} // namespace crypto
} // namespace librbd
|
