You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
109 lines
4.1 KiB
109 lines
4.1 KiB
/* |
|
* test_dm.c — тест криптографии прямого чата (dm_crypto) |
|
* |
|
* Проверяет: |
|
* - детерминированность и симметричность conv_id (одинаков на обеих сторонах); |
|
* - симметричность content_key (ECDH: обе стороны выводят одинаковый ключ); |
|
* - round-trip шифрования AES-256-CCM и детекцию неверного ключа. |
|
*/ |
|
|
|
#include "../src/dm/dm_crypto.h" |
|
#include "../src/transport_layer/secure_channel.h" |
|
#include "../lib/debug_config.h" |
|
|
|
#include <string.h> |
|
#include <stdio.h> |
|
|
|
int main(void) { |
|
debug_config_init(); |
|
debug_set_level(DEBUG_LEVEL_ERROR); |
|
|
|
int failures = 0; |
|
|
|
/* ── 1. conv_id: симметричность и уникальность ── */ |
|
uint64_t a = 0x1122334455667788ULL; |
|
uint64_t b = 0x8877665544332211ULL; |
|
uint64_t id_ab = dm_derive_conv_id(a, b); |
|
uint64_t id_ba = dm_derive_conv_id(b, a); |
|
if (id_ab == 0 || id_ab != id_ba) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "conv_id not symmetric: ab=%llu ba=%llu", |
|
(unsigned long long)id_ab, (unsigned long long)id_ba); |
|
failures++; |
|
} else { |
|
DEBUG_INFO(DEBUG_CATEGORY_DM, "conv_id symmetric: %llu == %llu", |
|
(unsigned long long)id_ab, (unsigned long long)id_ba); |
|
} |
|
|
|
uint64_t c = 0xDEADBEEF00000001ULL; |
|
if (dm_derive_conv_id(a, c) == id_ab) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "conv_id collision for different pairs"); |
|
failures++; |
|
} |
|
|
|
/* ── 2. content_key: симметричность ECDH ── */ |
|
struct SC_MYKEYS k1, k2; |
|
if (sc_generate_keypair(&k1) != SC_OK || sc_generate_keypair(&k2) != SC_OK) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "keypair generation failed"); |
|
return 1; |
|
} |
|
uint8_t key1[DM_CONTENT_KEY_SIZE], key2[DM_CONTENT_KEY_SIZE]; |
|
if (dm_derive_content_key(k1.private_key, k2.public_key, key1) != 0 |
|
|| dm_derive_content_key(k2.private_key, k1.public_key, key2) != 0) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "content_key derive failed"); |
|
failures++; |
|
} else if (memcmp(key1, key2, DM_CONTENT_KEY_SIZE) != 0) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "content_key not symmetric (ECDH mismatch)"); |
|
failures++; |
|
} else { |
|
DEBUG_INFO(DEBUG_CATEGORY_DM, "content_key symmetric (ECDH ok)"); |
|
} |
|
|
|
/* ── 3. AES-256-CCM round-trip ── */ |
|
const char* text = "hello, direct chat!"; |
|
size_t text_len = strlen(text); |
|
uint8_t nonce[DM_NONCE_SIZE]; |
|
dm_build_nonce(id_ab, a, 42, nonce); |
|
|
|
uint8_t enc[256]; |
|
size_t enc_len = 0; |
|
if (dm_encrypt(key1, nonce, (const uint8_t*)text, text_len, enc, &enc_len) != 0) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "encrypt failed"); |
|
failures++; |
|
} else if (enc_len != text_len + DM_TAG_SIZE) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "encrypt length mismatch: %zu", enc_len); |
|
failures++; |
|
} else { |
|
uint8_t dec[256]; |
|
size_t dec_len = 0; |
|
if (dm_decrypt(key2, nonce, enc, enc_len, dec, &dec_len) != 0) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "decrypt failed"); |
|
failures++; |
|
} else if (dec_len != text_len || memcmp(dec, text, text_len) != 0) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "decrypt content mismatch"); |
|
failures++; |
|
} else { |
|
DEBUG_INFO(DEBUG_CATEGORY_DM, "AES-256-CCM round-trip ok"); |
|
} |
|
} |
|
|
|
/* ── 4. детекция неверного ключа ── */ |
|
{ |
|
uint8_t wrong[DM_CONTENT_KEY_SIZE]; |
|
memset(wrong, 0x5A, sizeof(wrong)); |
|
uint8_t dec[256]; |
|
size_t dec_len = 0; |
|
if (enc_len > 0 && dm_decrypt(wrong, nonce, enc, enc_len, dec, &dec_len) == 0) { |
|
DEBUG_ERROR(DEBUG_CATEGORY_DM, "decrypt with wrong key should fail"); |
|
failures++; |
|
} else { |
|
DEBUG_INFO(DEBUG_CATEGORY_DM, "wrong-key tamper detection ok"); |
|
} |
|
} |
|
|
|
if (failures == 0) { |
|
printf("TEST PASSED\n"); |
|
return 0; |
|
} |
|
printf("TEST FAILED (%d failures)\n", failures); |
|
return 1; |
|
}
|
|
|