1 // Copyright 2021 Google LLC
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 // http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14 //
15 ////////////////////////////////////////////////////////////////////////////////
16
17 #include "tink/experimental/pqcrypto/kem/cecpq2_aead_hkdf_private_key_manager.h"
18
19 #include <string>
20
21 #include "gtest/gtest.h"
22 #include "absl/status/status.h"
23 #include "tink/aead/aead_key_templates.h"
24 #include "tink/aead/aes_ctr_hmac_aead_key_manager.h"
25 #include "tink/aead/aes_gcm_key_manager.h"
26 #include "tink/experimental/pqcrypto/kem/cecpq2_aead_hkdf_public_key_manager.h"
27 #include "tink/hybrid_decrypt.h"
28 #include "tink/registry.h"
29 #include "tink/util/status.h"
30 #include "tink/util/statusor.h"
31 #include "tink/util/test_matchers.h"
32 #include "tink/util/test_util.h"
33 #include "proto/aes_eax.pb.h"
34 #include "proto/common.pb.h"
35 #include "proto/experimental/pqcrypto/cecpq2_aead_hkdf.pb.h"
36 #include "proto/tink.pb.h"
37
38 namespace crypto {
39 namespace tink {
40
41 using ::crypto::tink::test::IsOk;
42 using ::crypto::tink::test::StatusIs;
43 using ::google::crypto::tink::Cecpq2AeadHkdfKeyFormat;
44 using ::google::crypto::tink::Cecpq2AeadHkdfPrivateKey;
45 using ::google::crypto::tink::Cecpq2AeadHkdfPublicKey;
46 using ::google::crypto::tink::EcPointFormat;
47 using ::google::crypto::tink::EllipticCurveType;
48 using ::google::crypto::tink::HashType;
49 using ::google::crypto::tink::KeyData;
50 using ::testing::Eq;
51 using ::testing::IsEmpty;
52 using ::testing::Not;
53
54 namespace {
55
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,Basics)56 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, Basics) {
57 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().get_version(), Eq(0));
58 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().key_material_type(),
59 Eq(KeyData::ASYMMETRIC_PRIVATE));
60 EXPECT_THAT(
61 Cecpq2AeadHkdfPrivateKeyManager().get_key_type(),
62 Eq("type.googleapis.com/google.crypto.tink.Cecpq2AeadHkdfPrivateKey"));
63 }
64
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateEmptyKey)65 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateEmptyKey) {
66 EXPECT_THAT(
67 Cecpq2AeadHkdfPrivateKeyManager().ValidateKey(Cecpq2AeadHkdfPrivateKey()),
68 StatusIs(absl::StatusCode::kInvalidArgument));
69 }
70
CreateValidKeyFormat()71 Cecpq2AeadHkdfKeyFormat CreateValidKeyFormat() {
72 Cecpq2AeadHkdfKeyFormat key_format;
73 auto dem_params = key_format.mutable_params()->mutable_dem_params();
74 *(dem_params->mutable_aead_dem()) = AeadKeyTemplates::Aes256Gcm();
75 auto kem_params = key_format.mutable_params()->mutable_kem_params();
76 kem_params->set_curve_type(EllipticCurveType::CURVE25519);
77 kem_params->set_hkdf_hash_type(HashType::SHA256);
78 kem_params->set_hkdf_salt("");
79 kem_params->set_ec_point_format(EcPointFormat::COMPRESSED);
80 return key_format;
81 }
82
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyFormat)83 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyFormat) {
84 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKeyFormat(
85 CreateValidKeyFormat()),
86 IsOk());
87 }
88
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyFormatNoPoint)89 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyFormatNoPoint) {
90 Cecpq2AeadHkdfKeyFormat key_format = CreateValidKeyFormat();
91 auto kem_params = key_format.mutable_params()->mutable_kem_params();
92 kem_params->set_ec_point_format(EcPointFormat::UNKNOWN_FORMAT);
93 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKeyFormat(key_format),
94 StatusIs(absl::StatusCode::kInvalidArgument));
95 }
96
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyFormatNoDem)97 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyFormatNoDem) {
98 Cecpq2AeadHkdfKeyFormat key_format = CreateValidKeyFormat();
99 key_format.mutable_params()->mutable_dem_params()->clear_aead_dem();
100 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKeyFormat(key_format),
101 StatusIs(absl::StatusCode::kInvalidArgument));
102 }
103
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyFormatNoKemCurve)104 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyFormatNoKemCurve) {
105 Cecpq2AeadHkdfKeyFormat key_format = CreateValidKeyFormat();
106 key_format.mutable_params()->mutable_kem_params()->set_curve_type(
107 EllipticCurveType::UNKNOWN_CURVE);
108 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKeyFormat(key_format),
109 StatusIs(absl::StatusCode::kInvalidArgument));
110 }
111
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyFormatNoKemHash)112 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyFormatNoKemHash) {
113 Cecpq2AeadHkdfKeyFormat key_format = CreateValidKeyFormat();
114 key_format.mutable_params()->mutable_kem_params()->set_hkdf_hash_type(
115 HashType::UNKNOWN_HASH);
116 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKeyFormat(key_format),
117 StatusIs(absl::StatusCode::kInvalidArgument));
118 }
119
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,CreateKey)120 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, CreateKey) {
121 Cecpq2AeadHkdfKeyFormat key_format = CreateValidKeyFormat();
122 ASSERT_THAT(Cecpq2AeadHkdfPrivateKeyManager().CreateKey(key_format).status(),
123 IsOk());
124 Cecpq2AeadHkdfPrivateKey key =
125 Cecpq2AeadHkdfPrivateKeyManager().CreateKey(key_format).value();
126 EXPECT_THAT(key.public_key().params().kem_params().curve_type(),
127 Eq(key_format.params().kem_params().curve_type()));
128 EXPECT_THAT(key.public_key().params().kem_params().hkdf_hash_type(),
129 Eq(key_format.params().kem_params().hkdf_hash_type()));
130 EXPECT_THAT(key.public_key().params().dem_params().aead_dem().type_url(),
131 Eq(key_format.params().dem_params().aead_dem().type_url()));
132 EXPECT_THAT(key.public_key().params().dem_params().aead_dem().value(),
133 Eq(key_format.params().dem_params().aead_dem().value()));
134 EXPECT_THAT(
135 key.public_key().params().dem_params().aead_dem().output_prefix_type(),
136 Eq(key_format.params().dem_params().aead_dem().output_prefix_type()));
137
138 // X25519 uses compressed points based on the "x" coordinate only. Therefore,
139 // we only validate that the "x" coordinate is not empty here
140 EXPECT_THAT(key.public_key().x25519_public_key_x(), Not(IsEmpty()));
141
142 EXPECT_THAT(key.x25519_private_key(), Not(IsEmpty()));
143 }
144
CreateValidKey()145 Cecpq2AeadHkdfPrivateKey CreateValidKey() {
146 return Cecpq2AeadHkdfPrivateKeyManager()
147 .CreateKey(CreateValidKeyFormat())
148 .value();
149 }
150
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyEmpty)151 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyEmpty) {
152 EXPECT_THAT(
153 Cecpq2AeadHkdfPrivateKeyManager().ValidateKey(Cecpq2AeadHkdfPrivateKey()),
154 StatusIs(absl::StatusCode::kInvalidArgument));
155 }
156
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKey)157 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKey) {
158 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKey(CreateValidKey()),
159 IsOk());
160 }
161
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyWrongVersion)162 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyWrongVersion) {
163 Cecpq2AeadHkdfPrivateKey key = CreateValidKey();
164 key.set_version(1);
165 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKey(key),
166 StatusIs(absl::StatusCode::kInvalidArgument));
167 }
168
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyNoPoint)169 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyNoPoint) {
170 Cecpq2AeadHkdfPrivateKey key = CreateValidKey();
171 key.mutable_public_key()
172 ->mutable_params()
173 ->mutable_kem_params()
174 ->set_ec_point_format(EcPointFormat::UNKNOWN_FORMAT);
175 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKey(key),
176 StatusIs(absl::StatusCode::kInvalidArgument));
177 }
178
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyNoDem)179 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyNoDem) {
180 Cecpq2AeadHkdfPrivateKey key = CreateValidKey();
181 key.mutable_public_key()
182 ->mutable_params()
183 ->mutable_dem_params()
184 ->clear_aead_dem();
185 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKey(key),
186 StatusIs(absl::StatusCode::kInvalidArgument));
187 }
188
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyNoKemCurve)189 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyNoKemCurve) {
190 Cecpq2AeadHkdfPrivateKey key = CreateValidKey();
191 key.mutable_public_key()
192 ->mutable_params()
193 ->mutable_kem_params()
194 ->set_curve_type(EllipticCurveType::UNKNOWN_CURVE);
195 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKey(key),
196 StatusIs(absl::StatusCode::kInvalidArgument));
197 }
198
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidateKeyNoKemHash)199 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidateKeyNoKemHash) {
200 Cecpq2AeadHkdfPrivateKey key = CreateValidKey();
201 key.mutable_public_key()
202 ->mutable_params()
203 ->mutable_kem_params()
204 ->set_hkdf_hash_type(HashType::UNKNOWN_HASH);
205 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKey(key),
206 StatusIs(absl::StatusCode::kInvalidArgument));
207 }
208
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,GetPublicKey)209 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, GetPublicKey) {
210 Cecpq2AeadHkdfPrivateKey key = CreateValidKey();
211 ASSERT_THAT(Cecpq2AeadHkdfPrivateKeyManager().GetPublicKey(key).status(),
212 IsOk());
213 Cecpq2AeadHkdfPublicKey public_key =
214 Cecpq2AeadHkdfPrivateKeyManager().GetPublicKey(key).value();
215 EXPECT_THAT(public_key.params().kem_params().curve_type(),
216 Eq(key.public_key().params().kem_params().curve_type()));
217 EXPECT_THAT(public_key.params().kem_params().hkdf_hash_type(),
218 Eq(key.public_key().params().kem_params().hkdf_hash_type()));
219 EXPECT_THAT(public_key.params().dem_params().aead_dem().type_url(),
220 Eq(key.public_key().params().dem_params().aead_dem().type_url()));
221 EXPECT_THAT(public_key.params().dem_params().aead_dem().value(),
222 Eq(key.public_key().params().dem_params().aead_dem().value()));
223 EXPECT_THAT(public_key.params().dem_params().aead_dem().output_prefix_type(),
224 Eq(key.public_key()
225 .params()
226 .dem_params()
227 .aead_dem()
228 .output_prefix_type()));
229
230 EXPECT_THAT(public_key.x25519_public_key_x(), Not(IsEmpty()));
231 }
232
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,Create)233 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, Create) {
234 ASSERT_THAT(Registry::RegisterKeyTypeManager(
235 absl::make_unique<AesGcmKeyManager>(), true),
236 IsOk());
237
238 Cecpq2AeadHkdfPrivateKey private_key = CreateValidKey();
239 Cecpq2AeadHkdfPublicKey public_key =
240 Cecpq2AeadHkdfPrivateKeyManager().GetPublicKey(private_key).value();
241
242 auto decrypt_or =
243 Cecpq2AeadHkdfPrivateKeyManager().GetPrimitive<HybridDecrypt>(
244 private_key);
245 ASSERT_THAT(decrypt_or, IsOk());
246 auto encrypt_or = Cecpq2AeadHkdfHybridEncrypt::New(public_key);
247 ASSERT_THAT(encrypt_or, IsOk());
248
249 std::string plaintext = "some text";
250 std::string context_info = "some aad";
251 auto ciphertext = encrypt_or.value()->Encrypt(plaintext, context_info);
252 ASSERT_THAT(ciphertext, IsOk());
253 auto decryption =
254 decrypt_or.value()->Decrypt(ciphertext.value(), context_info);
255 ASSERT_THAT(decryption, IsOk());
256 ASSERT_EQ(decryption.value(), plaintext);
257 }
258
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,CreateDifferentKey)259 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, CreateDifferentKey) {
260 ASSERT_THAT(Registry::RegisterKeyTypeManager(
261 absl::make_unique<AesGcmKeyManager>(), true),
262 IsOk());
263
264 Cecpq2AeadHkdfPrivateKey private_key = CreateValidKey();
265 // Note: we create a new private key in the next line.
266 Cecpq2AeadHkdfPublicKey public_key =
267 Cecpq2AeadHkdfPrivateKeyManager().GetPublicKey(CreateValidKey()).value();
268
269 auto decrypt_or =
270 Cecpq2AeadHkdfPrivateKeyManager().GetPrimitive<HybridDecrypt>(
271 private_key);
272 ASSERT_THAT(decrypt_or, IsOk());
273 auto encrypt_or = Cecpq2AeadHkdfHybridEncrypt::New(public_key);
274 ASSERT_THAT(encrypt_or, IsOk());
275
276 std::string plaintext = "some text";
277 std::string context_info = "some aad";
278 auto ciphertext = encrypt_or.value()->Encrypt(plaintext, context_info);
279 ASSERT_THAT(ciphertext, IsOk());
280 auto decryption =
281 decrypt_or.value()->Decrypt(ciphertext.value(), context_info);
282 ASSERT_THAT(decryption, Not(IsOk()));
283 }
284
TEST(Cecpq2AeadHkdfPrivateKeyManagerTest,ValidatePrivateKeyVersion)285 TEST(Cecpq2AeadHkdfPrivateKeyManagerTest, ValidatePrivateKeyVersion) {
286 Cecpq2AeadHkdfPrivateKey sk = CreateValidKey();
287 sk.set_version(1);
288 EXPECT_THAT(Cecpq2AeadHkdfPrivateKeyManager().ValidateKey(sk), Not(IsOk()));
289 }
290
291 } // namespace
292 } // namespace tink
293 } // namespace crypto
294