Mirrors/libwebsockets
1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-16 00:00:07 +01:00
Code Issues Releases Wiki Activity
libwebsockets/minimal-examples/api-tests/api-test-jose/jwe.c
Andy Green eda102e397 jwe
2018-12-27 06:45:32 +08:00

2000 lines
69 KiB
C
Raw Blame History

/*
* lws-api-test-jose - RFC7516 jwe tests
*
* Copyright (C) 2018 Andy Green <andy@warmcat.com>
*
* This file is made available under the Creative Commons CC0 1.0
* Universal Public Domain Dedication.
*/
#include <libwebsockets.h>
/*
* These are the inputs and outputs from the worked example in RFC7516
* Appendix A.1 {"alg":"RSA-OAEP","enc":"A256GCM"}
*/
static char
*ex_a1_ptext =
"The true sign of intelligence is not knowledge but imagination.",
*ex_a1_compact =
"eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00ifQ."
"OKOawDo13gRp2ojaHV7LFpZcgV7T6DVZKTyKOMTYUmKoTCVJRgckCL9kiMT03JGe"
"ipsEdY3mx_etLbbWSrFr05kLzcSr4qKAq7YN7e9jwQRb23nfa6c9d-StnImGyFDb"
"Sv04uVuxIp5Zms1gNxKKK2Da14B8S4rzVRltdYwam_lDp5XnZAYpQdb76FdIKLaV"
"mqgfwX7XWRxv2322i-vDxRfqNzo_tETKzpVLzfiwQyeyPGLBIO56YJ7eObdv0je8"
"1860ppamavo35UgoRdbYaBcoh9QcfylQr66oc6vFWXRcZ_ZT2LawVCWTIy3brGPi"
"6UklfCpIMfIjf7iGdXKHzg."
"48V1_ALb6US04U3b."
"5eym8TW_c8SuK0ltJ3rpYIzOeDQz7TALvtu6UG9oMo4vpzs9tX_EFShS8iB7j6ji"
"SdiwkIr3ajwQzaBtQD_A."
"XFBoMYUZodetZdvTiFvSkQ",
*ex_a1_jwk_json =
"{\"kty\":\"RSA\","
"\"n\":\"oahUIoWw0K0usKNuOR6H4wkf4oBUXHTxRvgb48E-BVvxkeDNjbC4he8rUW"
"cJoZmds2h7M70imEVhRU5djINXtqllXI4DFqcI1DgjT9LewND8MW2Krf3S"
"psk_ZkoFnilakGygTwpZ3uesH-PFABNIUYpOiN15dsQRkgr0vEhxN92i2a"
"sbOenSZeyaxziK72UwxrrKoExv6kc5twXTq4h-QChLOln0_mtUZwfsRaMS"
"tPs6mS6XrgxnxbWhojf663tuEQueGC-FCMfra36C9knDFGzKsNa7LZK2dj"
"YgyD3JR_MB_4NUJW_TqOQtwHYbxevoJArm-L5StowjzGy-_bq6Gw\","
"\"e\":\"AQAB\","
"\"d\":\"kLdtIj6GbDks_ApCSTYQtelcNttlKiOyPzMrXHeI-yk1F7-kpDxY4-WY5N"
"WV5KntaEeXS1j82E375xxhWMHXyvjYecPT9fpwR_M9gV8n9Hrh2anTpTD9"
"3Dt62ypW3yDsJzBnTnrYu1iwWRgBKrEYY46qAZIrA2xAwnm2X7uGR1hghk"
"qDp0Vqj3kbSCz1XyfCs6_LehBwtxHIyh8Ripy40p24moOAbgxVw3rxT_vl"
"t3UVe4WO3JkJOzlpUf-KTVI2Ptgm-dARxTEtE-id-4OJr0h-K-VFs3VSnd"
"VTIznSxfyrj8ILL6MG_Uv8YAu7VILSB3lOW085-4qE3DzgrTjgyQ\","
"\"p\":\"1r52Xk46c-LsfB5P442p7atdPUrxQSy4mti_tZI3Mgf2EuFVbUoDBvaRQ-"
"SWxkbkmoEzL7JXroSBjSrK3YIQgYdMgyAEPTPjXv_hI2_1eTSPVZfzL0lf"
"fNn03IXqWF5MDFuoUYE0hzb2vhrlN_rKrbfDIwUbTrjjgieRbwC6Cl0\","
"\"q\":\"wLb35x7hmQWZsWJmB_vle87ihgZ19S8lBEROLIsZG4ayZVe9Hi9gDVCOBm"
"UDdaDYVTSNx_8Fyw1YYa9XGrGnDew00J28cRUoeBB_jKI1oma0Orv1T9aX"
"IWxKwd4gvxFImOWr3QRL9KEBRzk2RatUBnmDZJTIAfwTs0g68UZHvtc\","
"\"dp\":\"ZK-YwE7diUh0qR1tR7w8WHtolDx3MZ_OTowiFvgfeQ3SiresXjm9gZ5KL"
"hMXvo-uz-KUJWDxS5pFQ_M0evdo1dKiRTjVw_x4NyqyXPM5nULPkcpU827"
"rnpZzAJKpdhWAgqrXGKAECQH0Xt4taznjnd_zVpAmZZq60WPMBMfKcuE\","
"\"dq\":\"Dq0gfgJ1DdFGXiLvQEZnuKEN0UUmsJBxkjydc3j4ZYdBiMRAy86x0vHCj"
"ywcMlYYg4yoC4YZa9hNVcsjqA3FeiL19rk8g6Qn29Tt0cj8qqyFpz9vNDB"
"UfCAiJVeESOjJDZPYHdHY8v1b-o-Z2X5tvLx-TCekf7oxyeKDUqKWjis\","
"\"qi\":\"VIMpMYbPf47dT1w_zDUXfPimsSegnMOA1zTaX7aGk_8urY6R8-ZW1FxU7"
"AlWAyLWybqq6t16VFd7hQd0y6flUK4SlOydB61gwanOsXGOAOv82cHq0E3"
"eL4HrtZkUuKvnPrMnsUUFlfUdybVzxyjz9JF_XyaY14ardLSjf4L_FNY\""
"}"
;
static int
test_jwe_a1(struct lws_context *context)
{
struct lws_jose jose;
struct lws_jws jws;
struct lws_jwk jwk;
char temp[2048], compact[2048];
int n, ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
if (lws_jwk_import(&jwk, NULL, NULL, ex_a1_jwk_json,
strlen(ex_a1_jwk_json)) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
/* converts a compact serialization to jws b64 + decoded maps */
if (lws_jws_compact_decode(ex_a1_compact, strlen(ex_a1_compact),
&jws.map, &jws.map_b64, temp, &temp_len) != 5) {
lwsl_err("%s: lws_jws_compact_decode failed\n", __func__);
goto bail;
}
n = lws_jwe_auth_and_decrypt(&jose, &jws);
lws_jwk_destroy(&jwk);
if (n < 0) {
lwsl_err("%s: lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < strlen(ex_a1_ptext) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT], ex_a1_ptext,
strlen(ex_a1_ptext))) {
lwsl_err("%s: plaintext AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(ex_a1_ptext, strlen(ex_a1_ptext));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail;
}
/*
* Canned decrypt worked properly... let's also try encoding the
* plaintext ourselves and decoding that...
*/
lws_jws_destroy(&jws);
lws_jose_destroy(&jose);
temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
if (lws_jwk_import(&jwk, NULL, NULL, ex_a1_jwk_json,
strlen(ex_a1_jwk_json)) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
if (lws_gencrypto_jwe_alg_to_definition("RSA-OAEP", &jose.alg)) {
lwsl_err("Unknown cipher alg \"RSA-OAEP\"\n");
goto bail1;
}
if (lws_gencrypto_jwe_enc_to_definition("A256GCM", &jose.enc_alg)) {
lwsl_err("Unknown payload enc alg \"A256GCM\"\n");
goto bail1;
}
/* we require a JOSE-formatted header to do the encryption */
if (temp_len < 256)
goto bail1;
jws.map.buf[LJWS_JOSE] = temp;
jws.map.len[LJWS_JOSE] = lws_snprintf(temp, temp_len,
"{\"alg\":\"%s\",\"enc\":\"%s\"}", "RSA-OAEP", "A256GCM");
temp_len -= jws.map.len[LJWS_JOSE];
/*
* dup the plaintext into the ciphertext element, it will be
* encrypted in-place to a ciphertext of the same length
*/
if (lws_jws_dup_element(&jws.map, LJWE_CTXT,
lws_concat_temp(temp, temp_len), &temp_len,
ex_a1_ptext, strlen(ex_a1_ptext), 0)) {
lwsl_notice("%s: Not enough temp space for ptext\n", __func__);
goto bail;
}
/* CEK size is determined by hash / hmac size */
n = lws_gencrypto_bits_to_bytes(jose.enc_alg->keybits_fixed);
if (lws_jws_randomize_element(context, &jws.map, LJWE_EKEY,
lws_concat_temp(temp, temp_len),
&temp_len, n,
LWS_JWE_LIMIT_KEY_ELEMENT_BYTES)) {
lwsl_err("Problem getting random\n");
goto bail1;
}
n = lws_jwe_encrypt(&jose, &jws, lws_concat_temp(temp, temp_len),
&temp_len);
if (n < 0) {
lwsl_err("%s: lws_jwe_encrypt failed\n", __func__);
goto bail1;
}
n = lws_jwe_write_compact(&jose, &jws, compact, sizeof(compact));
if (n < 0) {
lwsl_err("%s: lws_jwe_write_compact failed: %d\n",
__func__, n);
goto bail1;
}
// puts(compact);
/*
* Okay... what happens when we try to decode what we created?
*/
lws_jws_destroy(&jws);
lws_jws_init(&jws, &jwk, context);
temp_len = sizeof(temp);
/* converts a compact serialization to jws b64 + decoded maps */
if (lws_jws_compact_decode(compact, strlen(compact),
&jws.map, &jws.map_b64, temp, &temp_len) != 5) {
lwsl_err("%s: lws_jws_compact_decode failed\n", __func__);
goto bail;
}
n = lws_jwe_auth_and_decrypt(&jose, &jws);
lws_jwk_destroy(&jwk);
if (n < 0) {
lwsl_err("%s: generated lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail;
}
ret = 0;
bail1:
lws_jwk_destroy(&jwk);
bail:
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
/* A.2. Example JWE using RSAES-PKCS1-v1_5 and AES_128_CBC_HMAC_SHA_256
*
* This example encrypts the plaintext "Live long and prosper." to the
* recipient using RSAES-PKCS1-v1_5 for key encryption and
* AES_128_CBC_HMAC_SHA_256 for content encryption.
*/
/* "Live long and prosper." */
static uint8_t
ex_a2_ptext[] = {
76, 105, 118, 101, 32, 108, 111, 110,
103, 32, 97, 110, 100, 32, 112, 114,
111, 115, 112, 101, 114, 46
}, *lws_jwe_ex_a2_jwk_json = (uint8_t *)
"{"
"\"kty\":\"RSA\","
"\"n\":\"sXchDaQebHnPiGvyDOAT4saGEUetSyo9MKLOoWFsueri23bOdgWp4Dy1Wl"
"UzewbgBHod5pcM9H95GQRV3JDXboIRROSBigeC5yjU1hGzHHyXss8UDpre"
"cbAYxknTcQkhslANGRUZmdTOQ5qTRsLAt6BTYuyvVRdhS8exSZEy_c4gs_"
"7svlJJQ4H9_NxsiIoLwAEk7-Q3UXERGYw_75IDrGA84-lA_-Ct4eTlXHBI"
"Y2EaV7t7LjJaynVJCpkv4LKjTTAumiGUIuQhrNhZLuF_RJLqHpM2kgWFLU"
"7-VTdL1VbC2tejvcI2BlMkEpk1BzBZI0KQB0GaDWFLN-aEAw3vRw\","
"\"e\":\"AQAB\","
"\"d\":\"VFCWOqXr8nvZNyaaJLXdnNPXZKRaWCjkU5Q2egQQpTBMwhprMzWzpR8Sxq"
"1OPThh_J6MUD8Z35wky9b8eEO0pwNS8xlh1lOFRRBoNqDIKVOku0aZb-ry"
"nq8cxjDTLZQ6Fz7jSjR1Klop-YKaUHc9GsEofQqYruPhzSA-QgajZGPbE_"
"0ZaVDJHfyd7UUBUKunFMScbflYAAOYJqVIVwaYR5zWEEceUjNnTNo_CVSj"
"-VvXLO5VZfCUAVLgW4dpf1SrtZjSt34YLsRarSb127reG_DUwg9Ch-Kyvj"
"T1SkHgUWRVGcyly7uvVGRSDwsXypdrNinPA4jlhoNdizK2zF2CWQ\","
"\"p\":\"9gY2w6I6S6L0juEKsbeDAwpd9WMfgqFoeA9vEyEUuk4kLwBKcoe1x4HG68"
"ik918hdDSE9vDQSccA3xXHOAFOPJ8R9EeIAbTi1VwBYnbTp87X-xcPWlEP"
"krdoUKW60tgs1aNd_Nnc9LEVVPMS390zbFxt8TN_biaBgelNgbC95sM\","
"\"q\":\"uKlCKvKv_ZJMVcdIs5vVSU_6cPtYI1ljWytExV_skstvRSNi9r66jdd9-y"
"BhVfuG4shsp2j7rGnIio901RBeHo6TPKWVVykPu1iYhQXw1jIABfw-MVsN"
"-3bQ76WLdt2SDxsHs7q7zPyUyHXmps7ycZ5c72wGkUwNOjYelmkiNS0\","
"\"dp\":\"w0kZbV63cVRvVX6yk3C8cMxo2qCM4Y8nsq1lmMSYhG4EcL6FWbX5h9yuv"
"ngs4iLEFk6eALoUS4vIWEwcL4txw9LsWH_zKI-hwoReoP77cOdSL4AVcra"
"Hawlkpyd2TWjE5evgbhWtOxnZee3cXJBkAi64Ik6jZxbvk-RR3pEhnCs\","
"\"dq\":\"o_8V14SezckO6CNLKs_btPdFiO9_kC1DsuUTd2LAfIIVeMZ7jn1Gus_Ff"
"7B7IVx3p5KuBGOVF8L-qifLb6nQnLysgHDh132NDioZkhH7mI7hPG-PYE_"
"odApKdnqECHWw0J-F0JWnUd6D2B_1TvF9mXA2Qx-iGYn8OVV1Bsmp6qU\","
"\"qi\":\"eNho5yRBEBxhGBtQRww9QirZsB66TrfFReG_CcteI1aCneT0ELGhYlRlC"
"tUkTRclIfuEPmNsNDPbLoLqqCVznFbvdB7x-Tl-m0l_eFTj2KiqwGqE9PZ"
"B9nNTwMVvH3VRRSLWACvPnSiwP8N5Usy-WRXS-V7TbpxIhvepTfE0NNo\""
"}",
*ex_a2_compact = (uint8_t *)
"eyJhbGciOiJSU0ExXzUiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0"
"."
"UGhIOguC7IuEvf_NPVaXsGMoLOmwvc1GyqlIKOK1nN94nHPoltGRhWhw7Zx0-kFm"
"1NJn8LE9XShH59_i8J0PH5ZZyNfGy2xGdULU7sHNF6Gp2vPLgNZ__deLKxGHZ7Pc"
"HALUzoOegEI-8E66jX2E4zyJKx-YxzZIItRzC5hlRirb6Y5Cl_p-ko3YvkkysZIF"
"NPccxRU7qve1WYPxqbb2Yw8kZqa2rMWI5ng8OtvzlV7elprCbuPhcCdZ6XDP0_F8"
"rkXds2vE4X-ncOIM8hAYHHi29NX0mcKiRaD0-D-ljQTP-cFPgwCp6X-nZZd9OHBv"
"-B3oWh2TbqmScqXMR4gp_A"
"."
"AxY8DCtDaGlsbGljb3RoZQ"
"."
"KDlTtXchhZTGufMYmOYGS4HffxPSUrfmqCHXaI9wOGY"
"."
"9hH0vgRfYgPnAHOd8stkvw"
;
static int
test_jwe_a2(struct lws_context *context)
{
struct lws_jose jose;
struct lws_jws jws;
struct lws_jwk jwk;
char temp[2048];
int n, ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
if (lws_jwk_import(&jwk, NULL, NULL, (char *)lws_jwe_ex_a2_jwk_json,
strlen((char *)lws_jwe_ex_a2_jwk_json)) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
/* converts a compact serialization to jws b64 + decoded maps */
if (lws_jws_compact_decode((const char *)ex_a2_compact,
strlen((char *)ex_a2_compact),
&jws.map, &jws.map_b64,
(char *)temp, &temp_len) != 5) {
lwsl_err("%s: lws_jws_compact_decode failed\n", __func__);
goto bail;
}
n = lws_jwe_auth_and_decrypt(&jose, &jws);
lws_jwk_destroy(&jwk);
if (n < 0) {
lwsl_err("%s: lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < sizeof(ex_a2_ptext) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT], ex_a2_ptext,
sizeof(ex_a2_ptext))) {
lwsl_err("%s: plaintext AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(ex_a2_ptext, sizeof(ex_a2_ptext));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail;
}
ret = 0;
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
/* JWE creation using RSAES-PKCS1-v1_5 and AES_128_CBC_HMAC_SHA_256
*
* This example encrypts a different, larger plaintext using the jwk key from
* the test above, and AES_128_CBC_HMAC_SHA_256 for content encryption.
*/
static const char *rsa256a128_jose =
"{ \"alg\":\"RSA1_5\",\"enc\":\"A128CBC-HS256\"}";
static uint8_t
/* plaintext is 1024 bytes from /dev/urandom */
ra_ptext_1024[] = {
0xfe, 0xc6, 0x4f, 0x3e, 0x4a, 0x19, 0xe9, 0xd7,
0xc2, 0x13, 0xe7, 0xc5, 0x78, 0x6e, 0x71, 0xf6,
0x6e, 0xdd, 0x04, 0xaf, 0xaa, 0x4e, 0xa8, 0xad,
0xd8, 0xe0, 0xb3, 0x32, 0x97, 0x43, 0x7c, 0xd8,
0xd1, 0x5f, 0x56, 0xac, 0x70, 0xaf, 0x7d, 0x0b,
0x40, 0xa1, 0x96, 0x71, 0x7c, 0xc4, 0x4a, 0x37,
0x0b, 0xa6, 0x06, 0xb3, 0x8c, 0x87, 0xee, 0xb6,
0x15, 0xfe, 0xaa, 0x60, 0x7e, 0x7f, 0xdc, 0xb0,
0xff, 0x96, 0x4b, 0x30, 0x60, 0xcf, 0xc6, 0x5d,
0x09, 0x6a, 0x6f, 0x66, 0x0c, 0x5f, 0xb0, 0x6f,
0x61, 0xa6, 0x26, 0x02, 0xbd, 0x46, 0xda, 0xa3,
0x73, 0x19, 0x17, 0xff, 0xe0, 0x5f, 0x30, 0x72,
0x7d, 0x17, 0xd8, 0xb2, 0xbe, 0x84, 0x3e, 0x4d,
0x76, 0xbd, 0x62, 0x5d, 0x63, 0xfe, 0x11, 0x32,
0x11, 0x41, 0xdc, 0xed, 0x96, 0xfd, 0x31, 0x38,
0x6a, 0x84, 0x55, 0x7a, 0x33, 0x3f, 0x37, 0xc3,
0x37, 0x7b, 0xc1, 0xb7, 0x89, 0x00, 0x39, 0xa6,
0x94, 0x91, 0xb7, 0x19, 0x6b, 0x1d, 0x99, 0xeb,
0xf6, 0x10, 0xb9, 0xd2, 0xcd, 0x15, 0x0d, 0xbc,
0x24, 0x34, 0x9a, 0x52, 0x64, 0x21, 0x72, 0x1e,
0x9a, 0x00, 0xf2, 0xcf, 0xf1, 0x7d, 0x1a, 0x12,
0x8d, 0x39, 0xbc, 0xf9, 0x09, 0xfd, 0xd9, 0x22,
0x27, 0x28, 0xe1, 0x3a, 0x0b, 0x82, 0xba, 0x9a,
0xe5, 0x9d, 0xa8, 0x12, 0x6e, 0xf5, 0x4b, 0xc7,
0x2b, 0x9c, 0xdc, 0xfe, 0xf3, 0xe8, 0x74, 0x65,
0x3d, 0xe0, 0xaa, 0x64, 0xf3, 0x43, 0xa4, 0x88,
0xa8, 0xbe, 0x60, 0xdb, 0xfd, 0x2d, 0x3b, 0x84,
0x82, 0x8f, 0x4d, 0xbb, 0xe4, 0xa9, 0x59, 0xe3,
0x6c, 0x52, 0x45, 0xe4, 0x34, 0xdb, 0x28, 0x0e,
0x4a, 0x44, 0xb6, 0x9a, 0x25, 0x9b, 0x3b, 0xae,
0xe1, 0x12, 0x1d, 0x1c, 0x66, 0x7d, 0xb9, 0x5b,
0x5f, 0xc2, 0x4a, 0xaa, 0xd2, 0xe9, 0x65, 0xe2,
0x85, 0x6f, 0xf6, 0x67, 0x66, 0x8e, 0x0b, 0xd2,
0x60, 0xf8, 0x43, 0x60, 0x04, 0x9b, 0xa9, 0x3a,
0x6a, 0x3c, 0x02, 0x3c, 0x08, 0x9d, 0x60, 0x1c,
0xc4, 0x27, 0x3e, 0xff, 0xd0, 0x70, 0x94, 0x43,
0x3e, 0x9e, 0x69, 0x19, 0x22, 0xf0, 0xec, 0x26,
0x2d, 0xa5, 0x71, 0xf3, 0x92, 0x61, 0x95, 0xce,
0xc3, 0xc0, 0xa0, 0xc3, 0x98, 0x22, 0xdd, 0x32,
0x3c, 0x48, 0xcb, 0xd1, 0x61, 0xa0, 0xaa, 0x9a,
0x7e, 0x5a, 0xfa, 0x26, 0x46, 0x49, 0xfc, 0x9c,
0xaa, 0x21, 0x06, 0x45, 0xf1, 0xa0, 0xc9, 0xef,
0x6b, 0x89, 0xf2, 0x01, 0x20, 0x54, 0xfa, 0x0a,
0x23, 0xff, 0xbd, 0x64, 0x35, 0x94, 0xfd, 0x35,
0x70, 0x52, 0x94, 0x66, 0xc5, 0xd0, 0x27, 0xc1,
0x8f, 0x6d, 0xc4, 0xa3, 0x34, 0xc2, 0xea, 0xf0,
0xb3, 0x0d, 0x6c, 0x13, 0xb5, 0xc9, 0x6e, 0x5c,
0xeb, 0x8b, 0x7b, 0xf5, 0x21, 0x4c, 0xe3, 0xb7,
0x73, 0x6d, 0x07, 0xaa, 0x44, 0xc4, 0xba, 0xc5,
0xa5, 0x0e, 0x75, 0x28, 0xb7, 0x50, 0x22, 0x54,
0xa7, 0xe1, 0x2e, 0xfd, 0x20, 0xcd, 0xa4, 0x31,
0xa3, 0xb2, 0x73, 0x98, 0x7c, 0x3c, 0x8f, 0xa3,
0x40, 0x8a, 0xaf, 0x31, 0xfa, 0xf9, 0x70, 0x4d,
0x83, 0x10, 0xc4, 0xa0, 0x9c, 0xd6, 0xa3, 0xd5,
0x07, 0xaf, 0xaf, 0x35, 0x15, 0xd0, 0x84, 0x09,
0x20, 0x36, 0x88, 0xac, 0x6f, 0x16, 0x5e, 0x03,
0xa9, 0xfc, 0xb3, 0x2d, 0x01, 0x57, 0xb3, 0xed,
0x4b, 0x55, 0x2b, 0xbc, 0x92, 0x87, 0x3e, 0x27,
0xc4, 0x2c, 0x44, 0xac, 0x05, 0x5f, 0x26, 0xe7,
0xe9, 0xb0, 0x2d, 0x6b, 0x3c, 0x8c, 0xd2, 0xb4,
0x3c, 0xb4, 0x86, 0xfe, 0x68, 0x99, 0x2a, 0x42,
0xac, 0xa4, 0xb3, 0x89, 0x61, 0xb3, 0xd1, 0xdf,
0x9b, 0x58, 0xc7, 0x81, 0x62, 0x87, 0x26, 0x52,
0x51, 0xe7, 0x7d, 0x7c, 0x37, 0x14, 0xe5, 0x19,
0x28, 0x34, 0x3e, 0x95, 0x17, 0x36, 0x12, 0xf9,
0x5e, 0xc1, 0x3c, 0x9c, 0x28, 0x70, 0x06, 0xdf,
0xc4, 0x6d, 0x25, 0x04, 0x46, 0xe0, 0x95, 0xf0,
0xc8, 0x57, 0x48, 0x27, 0x26, 0xf3, 0xf7, 0x19,
0xbe, 0xea, 0xb4, 0xd4, 0x64, 0xaf, 0x67, 0x7c,
0xf5, 0xa9, 0xfb, 0x85, 0x4a, 0x43, 0x9c, 0x62,
0x06, 0x5e, 0x28, 0x2a, 0x7b, 0x1e, 0xb3, 0x07,
0xe7, 0x19, 0x32, 0xa4, 0x4e, 0xb4, 0xce, 0xe0,
0x92, 0x56, 0xf5, 0x10, 0xcb, 0x56, 0x34, 0x4b,
0x0d, 0xe1, 0xd3, 0x6d, 0xfe, 0xf0, 0x44, 0xf7,
0x22, 0x1d, 0x5e, 0x6b, 0xa7, 0xa5, 0x83, 0x2e,
0xeb, 0x14, 0xf2, 0xd7, 0x27, 0x5a, 0x2a, 0xd2,
0x55, 0x35, 0xe6, 0x7e, 0xd9, 0x3b, 0xac, 0x4e,
0x5a, 0x22, 0x46, 0xd5, 0x7b, 0x57, 0x9c, 0x58,
0xfe, 0xd0, 0xda, 0xbf, 0x7d, 0xe9, 0x8c, 0xb7,
0xba, 0x88, 0xf1, 0xc3, 0x82, 0x53, 0xc3, 0x66,
0x20, 0x51, 0x12, 0xd3, 0xf9, 0xaf, 0xe9, 0xcb,
0xc1, 0x7a, 0xe6, 0x22, 0x44, 0xa5, 0xdf, 0x18,
0xb3, 0x6e, 0x6c, 0xba, 0xf3, 0xc6, 0x24, 0x5a,
0x1c, 0x67, 0xa6, 0xa5, 0xb4, 0xb1, 0x35, 0xdf,
0x5a, 0x60, 0x5c, 0x0b, 0x66, 0xd3, 0x1f, 0x4e,
0x7c, 0xcb, 0x93, 0x7e, 0x2f, 0x6d, 0xbd, 0xce,
0x26, 0x52, 0x44, 0xee, 0xbb, 0xd8, 0x8f, 0xf2,
0x67, 0x38, 0x0d, 0x3b, 0xaa, 0x21, 0x73, 0xf8,
0x3b, 0x54, 0x9d, 0x4e, 0x5e, 0xf1, 0xa2, 0x18,
0x5a, 0xf1, 0x6c, 0x32, 0xbf, 0x0a, 0x73, 0x14,
0x48, 0x4f, 0x56, 0xc0, 0x87, 0x6d, 0x3b, 0x16,
0xcc, 0x3f, 0x44, 0x19, 0x85, 0x22, 0x43, 0x5f,
0x8c, 0x29, 0xbd, 0xa0, 0xce, 0x84, 0xd9, 0x4a,
0xcf, 0x00, 0x6b, 0x37, 0x35, 0xe0, 0xb3, 0xc9,
0xd1, 0x58, 0xd1, 0x1b, 0xc3, 0x6f, 0xe3, 0x50,
0xdb, 0xa6, 0x5e, 0x03, 0x18, 0xe5, 0xe2, 0xc1,
0x97, 0xd5, 0xf8, 0x42, 0x6f, 0xe6, 0x61, 0x80,
0xc9, 0x7c, 0xc6, 0x83, 0xf0, 0xad, 0x70, 0x13,
0x0e, 0x26, 0x75, 0xc0, 0x12, 0x23, 0x14, 0xef,
0x1f, 0xdf, 0xfd, 0x47, 0x99, 0x9f, 0x22, 0xf3,
0x57, 0x21, 0xdc, 0x38, 0xe4, 0x79, 0x87, 0x5b,
0x67, 0x66, 0xdd, 0x0b, 0xe0, 0xae, 0xb5, 0x97,
0xd8, 0xa6, 0x5d, 0x02, 0xcf, 0x6b, 0x84, 0x19,
0xc1, 0xbb, 0x25, 0xd2, 0x10, 0xb9, 0x63, 0xeb,
0x4b, 0x27, 0x8d, 0x05, 0x31, 0xce, 0x3b, 0x0c,
0x5f, 0xd4, 0x83, 0x47, 0xa4, 0x8b, 0xc4, 0x76,
0x33, 0x74, 0x1a, 0x07, 0xf8, 0x18, 0x82, 0x1c,
0x8e, 0x01, 0x75, 0x78, 0xea, 0xd9, 0x72, 0x61,
0x71, 0xa9, 0x09, 0x44, 0x7b, 0x0f, 0x12, 0xcf,
0x4c, 0x76, 0x7b, 0x69, 0xc8, 0x64, 0x98, 0x60,
0x45, 0xb6, 0xc7, 0x6b, 0xd8, 0x43, 0x99, 0x08,
0xc9, 0xd3, 0x6f, 0x01, 0x4f, 0x57, 0x6f, 0x49,
0x4f, 0x4f, 0x72, 0xa4, 0xa2, 0x45, 0xe1, 0x0e,
0xf2, 0x08, 0x3e, 0x67, 0xc3, 0x83, 0x5b, 0xb1,
0x24, 0xc0, 0xe0, 0x3a, 0xf5, 0x1f, 0xf2, 0x06,
0x4b, 0xa7, 0x6f, 0xd2, 0xb2, 0x81, 0x96, 0x91,
0x42, 0xb1, 0x53, 0x65, 0x3a, 0x12, 0xcd, 0x33,
0xb3, 0x7e, 0x79, 0xc0, 0x46, 0xf6, 0xd8, 0x4a,
0x22, 0x35, 0xb8, 0x3f, 0xe4, 0x08, 0x88, 0x49,
0x3c, 0x73, 0x9a, 0x44, 0xe3, 0x3b, 0xcc, 0xc4,
0xae, 0x7c, 0xbe, 0xfd, 0xa6, 0x4a, 0xd4, 0x26,
0x52, 0x58, 0x81, 0x30, 0x66, 0x44, 0x54, 0xc8,
0xe4, 0x7c, 0x5b, 0x63, 0x06, 0x60, 0x94, 0x62,
0xe5, 0x47, 0x45, 0xfb, 0x58, 0xf5, 0x6a, 0x7c,
0xb2, 0x35, 0x08, 0x03, 0x15, 0x68, 0xb3, 0x13,
0xa5, 0xbd, 0xf2, 0x1e, 0x2e, 0x1c, 0x8f, 0xc6,
0xc7, 0xd1, 0xa9, 0x64, 0x37, 0x2b, 0x23, 0xfa,
0x7e, 0x56, 0x22, 0xf0, 0x8a, 0xbd, 0xeb, 0x04
},
r256a128_cek[] = {
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f
}
;
static int
test_jwe_ra_ptext_1024(struct lws_context *context, char *jwk_txt, int jwk_len)
{
struct lws_jose jose, dec_jose;
char temp[4096], compact[4096];
struct lws_jws jws;
struct lws_jwk jwk;
int n, ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jose_init(&dec_jose);
lws_jws_init(&jws, &jwk, context);
/* reuse the rsa private key from the JWE Appendix 2 test above */
if (lws_jwk_import(&jwk, NULL, NULL, jwk_txt, jwk_len) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
/* dup the plaintext, it will be replaced in-situ by the ciphertext */
if (lws_jws_dup_element(&jws.map, LJWE_CTXT,
lws_concat_temp(temp, temp_len), &temp_len,
ra_ptext_1024, sizeof(ra_ptext_1024), 0)) {
lwsl_notice("%s: Not enough temp space for ptext\n", __func__);
goto bail;
}
/* dup the cek, since it will be replaced by the encrypted key */
if (lws_jws_dup_element(&jws.map, LJWE_EKEY,
lws_concat_temp(temp, temp_len), &temp_len,
r256a128_cek, sizeof(r256a128_cek),
LWS_JWE_LIMIT_KEY_ELEMENT_BYTES)) {
lwsl_notice("%s: Not enough temp space for EKEY\n", __func__);
goto bail;
}
jws.map.buf[LJWE_JOSE] = rsa256a128_jose;
jws.map.len[LJWE_JOSE] = strlen(rsa256a128_jose);
n = lws_jwe_parse_jose(&jose, jws.map.buf[LJWE_JOSE],
jws.map.len[LJWE_JOSE],
lws_concat_temp(temp, temp_len), &temp_len);
if (n < 0) {
lwsl_err("%s: JOSE parse failed\n", __func__);
goto bail1;
}
n = lws_jwe_encrypt(&jose, &jws, lws_concat_temp(temp, temp_len),
&temp_len);
if (n < 0) {
lwsl_err("%s: lws_jwe_encrypt failed\n", __func__);
goto bail1;
}
n = lws_jwe_write_compact(&jose, &jws, compact, sizeof(compact));
if (n < 0) {
lwsl_err("%s: lws_jwe_write_compact failed: %d\n", __func__, n);
goto bail1;
}
// puts(compact);
lws_jws_destroy(&jws);
lws_jws_init(&jws, &jwk, context);
temp_len = sizeof(temp);
/* now we created the encrypted version, see if we can decrypt it */
if (lws_jws_compact_decode(compact, n, &jws.map, &jws.map_b64,
temp, &temp_len) != 5) {
lwsl_err("%s: failed to parse generated compact\n", __func__);
goto bail1;
}
n = lws_jwe_auth_and_decrypt(&dec_jose, &jws);
if (n < 0) {
lwsl_err("%s: lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail1;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < sizeof(ra_ptext_1024) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT], ra_ptext_1024,
sizeof(ra_ptext_1024))) {
lwsl_err("%s: plaintext AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(ra_ptext_1024, sizeof(ra_ptext_1024));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail1;
}
ret = 0;
bail1:
lws_jwk_destroy(&jwk);
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&dec_jose);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
static const char *rsa256a192_jose =
"{ \"alg\":\"RSA1_5\",\"enc\":\"A192CBC-HS384\"}";
static const uint8_t r256a192_cek[] = {
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f
}
;
static int
test_jwe_r256a192_ptext(struct lws_context *context, char *jwk_txt, int jwk_len)
{
struct lws_jose jose, dec_jose;
struct lws_jws jws;
struct lws_jwk jwk;
char temp[4096], compact[4096];
int n, ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jose_init(&dec_jose);
lws_jws_init(&jws, &jwk, context);
/* reuse the rsa private key from the JWE Appendix 2 test above */
if (lws_jwk_import(&jwk, NULL, NULL, jwk_txt, jwk_len) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
/*
* dup the plaintext into the ciphertext element, it will be
* encrypted in-place to a ciphertext of the same length
*/
if (lws_jws_dup_element(&jws.map, LJWE_CTXT,
lws_concat_temp(temp, temp_len), &temp_len,
ra_ptext_1024, sizeof(ra_ptext_1024), 0)) {
lwsl_notice("%s: Not enough temp space for ptext\n", __func__);
goto bail;
}
/* copy the cek, since it will be replaced by the encrypted key */
if (lws_jws_dup_element(&jws.map, LJWE_EKEY,
lws_concat_temp(temp, temp_len), &temp_len,
r256a192_cek, sizeof(r256a192_cek),
LWS_JWE_LIMIT_KEY_ELEMENT_BYTES)) {
lwsl_err("Problem getting random\n");
goto bail1;
}
jws.map.buf[LJWE_JOSE] = rsa256a192_jose;
jws.map.len[LJWE_JOSE] = strlen(rsa256a192_jose);
n = lws_jwe_parse_jose(&jose, jws.map.buf[LJWE_JOSE],
jws.map.len[LJWE_JOSE],
lws_concat_temp(temp, temp_len), &temp_len);
if (n < 0) {
lwsl_err("%s: JOSE parse failed\n", __func__);
goto bail1;
}
n = lws_jwe_encrypt(&jose, &jws, lws_concat_temp(temp, temp_len),
&temp_len);
if (n < 0) {
lwsl_err("%s: lws_jwe_encrypt failed\n", __func__);
goto bail1;
}
n = lws_jwe_write_compact(&jose, &jws, compact, sizeof(compact));
if (n < 0) {
lwsl_err("%s: lws_jwe_write_compact failed: %d\n", __func__, n);
goto bail1;
}
// puts(compact);
/* now we created the encrypted version, see if we can decrypt it */
n = lws_jwe_auth_and_decrypt(&dec_jose, &jws);
if (n < 0) {
lwsl_err("%s: lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail1;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < sizeof(ra_ptext_1024) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT], ra_ptext_1024,
sizeof(ra_ptext_1024))) {
lwsl_err("%s: plaintext AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(ra_ptext_1024, sizeof(ra_ptext_1024));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail1;
}
ret = 0;
bail1:
lws_jwk_destroy(&jwk);
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&dec_jose);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
static const char *rsa256a256_jose =
"{ \"alg\":\"RSA1_5\",\"enc\":\"A256CBC-HS512\"}";
static const uint8_t r256a256_cek[] = {
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f
}
;
static int
test_jwe_r256a256_ptext(struct lws_context *context, char *jwk_txt, int jwk_len)
{
struct lws_jose jose, dec_jose;
struct lws_jws jws;
struct lws_jwk jwk;
char temp[4096], compact[4096];
int n, ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jose_init(&dec_jose);
lws_jws_init(&jws, &jwk, context);
/* reuse the rsa private key from the JWE Appendix 2 test above */
if (lws_jwk_import(&jwk, NULL, NULL, jwk_txt, jwk_len) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
/*
* dup the plaintext into the ciphertext element, it will be
* encrypted in-place to a ciphertext of the same length
*/
if (lws_jws_dup_element(&jws.map, LJWE_CTXT,
lws_concat_temp(temp, temp_len), &temp_len,
ra_ptext_1024, sizeof(ra_ptext_1024), 0)) {
lwsl_notice("%s: Not enough temp space for ptext\n", __func__);
goto bail;
}
/* copy the cek, since it will be replaced by the encrypted key */
if (lws_jws_dup_element(&jws.map, LJWE_EKEY,
lws_concat_temp(temp, temp_len), &temp_len,
r256a256_cek, sizeof(r256a256_cek),
LWS_JWE_LIMIT_KEY_ELEMENT_BYTES)) {
lwsl_err("Problem getting random\n");
goto bail1;
}
jws.map.buf[LJWE_JOSE] = rsa256a256_jose;
jws.map.len[LJWE_JOSE] = strlen(rsa256a256_jose);
n = lws_jwe_parse_jose(&jose, rsa256a256_jose, strlen(rsa256a256_jose),
lws_concat_temp(temp, temp_len), &temp_len);
if (n < 0) {
lwsl_err("%s: JOSE parse failed\n", __func__);
goto bail1;
}
n = lws_jwe_encrypt(&jose, &jws, lws_concat_temp(temp, temp_len),
&temp_len);
if (n < 0) {
lwsl_err("%s: lws_jwe_encrypt failed\n", __func__);
goto bail1;
}
n = lws_jwe_write_compact(&jose, &jws, compact, sizeof(compact));
if (n < 0) {
lwsl_err("%s: lws_jwe_write_compact failed: %d\n", __func__, n);
goto bail1;
}
// puts(compact);
/* now we created the encrypted version, see if we can decrypt it */
n = lws_jwe_auth_and_decrypt(&dec_jose, &jws);
if (n < 0) {
lwsl_err("%s: lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail1;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < sizeof(ra_ptext_1024) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT], ra_ptext_1024,
sizeof(ra_ptext_1024))) {
lwsl_err("%s: plaintext AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(ra_ptext_1024, sizeof(ra_ptext_1024));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail1;
}
ret = 0;
bail1:
lws_jwk_destroy(&jwk);
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&dec_jose);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
/* produced by running the minimal example `lws-crypto-jwk -t RSA -b 2048 -c` */
static const char *rsa_key_2048 =
"{"
"\"e\":\"AQAB\","
"\"kty\":\"RSA\","
"\"n\":\"lBJdvUq-9_8hlcduIWuBjRb0tGzzAvS4foqoNCO7g-rOXMdeAcmq"
"aSzWTbkaGIc3L1I4-Q3TOZtxn2UhuDlShZRIhM6JCQuUVNVAF3TD7oXxHtZ"
"LJ7y_BqCUlrAmW31lu-nVmhY2G3xW26yXWUsDbCxz0hfLbVnXRSvVKLzYWm"
"_yyrFyEWfxB8peDocvKGh879z_aPCKE3PDOEl2AsgzYfpnWCLytkgnrTeL6"
"qY8HXxvvV-Jw-XMaRiwH0VldpIjs4DaoN35Kj1Ex7QOZznTkbYtMIqse8bR"
"LoR8Irkxbc5ncUAuX1KSV6lpPtelsA3RtEjJ4NHV-5eEABiYh8_CFQ\","
"\"d\":\"DDpguQ9RVQFMoJC5z2hlkvq91kvsXPv2Y9Dcki256xYlg55H7Pre"
"p__hahrABR2Jg6QVJhArt5ABjUnDQ_JL69HH6VvLD6RVVBTQ-FRBZ_3HYKY"
"Oynx5BA7tJm1BRatF5FkBCvq27i8nAc4vfjAb22o9CFvEW3FLaKAgOCncQ3"
"Tnbz9CddH89n7DXw4kBFI8q5ugF_aRIg5-i42W_hQinLaBhZ_zhAuE-nvlt"
"ZnhDal8cX3T60lNoUrDOlirqEOXKO3gXCHpm3csZ6nabHYD1UCyHOmi2RsR"
"pzjaiqjXdPbwPzQoh2DcYpavNrf1mtHiqTwLZDTJIRHWHufJzHf-sw\","
"\"p\":\"ySeC3FtvzduDEL-FX4JqbRN06PdBhUmosCkymmbBjriuLNpkGkG-"
"1ex7r-M8neUBZbctmDdih6cpLZ8hjZv3eEDZ4b5Z2LqZnja4QvVoWLUs4Fb"
"NN_PxJCR5H28uUfT6ThxqT0Nb2enb8Dyp0Qxvd7eJUeYz6jOt7pEK-ErTB4"
"M\","
"\"q\":\"vHG2Pd6QUH7vFZjJtXwmlVnrz5tdJvUPQvz7ggeM69cqhf4vLajz"
"sqP9GhJr7bEkp6vKVdZGmfEdiFRD8cssIZq651oAO5Wr7zZd2mR_hG9jZx7"
"8Davfuxr4SZNN-bmoxO6dbDi-X2c7fvMI2YeJwL4groNKyiosdUYILTrYRI"
"c\","
"\"dp\":\"h5Gqf2rcokgEQGBjuigCJDtNuskRjoxDNV6-rRL99nt_X9lcR9n"
"xjOnRvowOyXeTBoN7JjCFpllBxm6ORYtNMO28KomIsimo6NmGPBJ7XfXVJe"
"k6bDBrX-l4_HeJJ1FM9SHvgDYsjGQxh-rKpIqWAYBf-yOD758e5T85vndnX"
"JM\","
"\"dq\":\"K9LiB-dfdmjenw4mMp-JtYfw8Bn4gtvQzcpZjzbETgB-8iRXwm2"
"dJvk-HjcUhHWCyb-I0YeAacKKFK9MEconHDWIq87haPn4vyvMjcJ7aUgiPN"
"QW1_MVl8TA4xNvudi0Z__5-jYEB9nRG0fX0gbUQU-19_-uf-9o4WkE88fQj"
"bc\","
"\"qi\":\"LEkTRqmomn9UiASeRfAKw-Z5q7cye9CSL4luSexFvA3Du7Oin-s"
"L9a7F3nJN4CuYzhtNMxQ0hM7k6ExzhDhXDlNRHxnNEDt81-CFRV98v7GVWV"
"SH1KnaKf9wgegxSSm-x536ki2SI8EN4k4qkqRF0iLVHZK7CgnWMbtt6tnpp"
"3k\""
"}";
/* produced by running the minimal example `lws-crypto-jwk -t RSA -b 4096 -c` */
static const char *rsa_key_4096 =
"{"
"\"e\":\"AQAB\","
"\"kty\":\"RSA\","
"\"n\":\"uiLBz1SUgd4eQ0okg6tlPdk9QUhTsqXmiJXygWVFgzT45E5_Rfkq"
"vZ2fwAqQ8DvxkDTUWiKpeXMpPRNWG5GxuBuq9n7xdA1vn1eQi8LoekB28dg"
"3MwMfozVSKCzyxG1f81xPE5x3EMVhCcx6hshhlMEHkzNNhE07d-oRO87ZC0"
"z_5L3Vh03uJBXaDKVlsgHAazoHLhn6G4odqv-ro54T6Nx1eEtyTnMmFY5ND"
"V4rN0SjQvSefbZZtsrtby8Z0JmeyvynmDwOINj7FpmPmpFLoWGXntc2yxPP"
"8SHnqfT9ESh94fxCMxRhDNohgpegRHyiYwj3M5ZYY6reCZYfOQONSWmc8yp"
"NBMJqj4LuJ2bTMGAFS17ZP4ZZWm5RP9ax100Dgk0yxP1UrybG5dCfJRQvHC"
"ncxG_aL6cSQu2o4fXqlJsNHxk3FjHtV_CMZ3tqvGTvwrs4yxvKwKv6r3fRh"
"KL01bGOePzp9THkHW2-lzVj6kUwnxBdHGZE6fcAnczOdp8ZIEdV1w6ThimC"
"m3Bw_TIyl3tkuxRWXpc_d6Q4iiSVKGKCvUvfAlESpTA4tIhQkij-T9FEoj2"
"WE2H1D35AKmjcfLCh6yszu8cmDNedn862pwnawE2RvRFAyuI113fLQeCbCz"
"tQ1JHuD8cnQt0hpGzReTa5UJ8OEOGIlyXNdWZyTpk\","
"\"d\":\"G2ZW582AT-6xvz-IiP5fuJ9EMloygeuEeEo0aMJO3X3cfoUknJkN"
"ZtyvYa5cgBSe3la8hKkyD9_5K9WvGP9VLTAbdk4g_m-k5QyXiU9PeAGJ0Nd"
"-Zqq4y0Zj2eil8u7Tz0fhFxay-zvG6VGZnsIcBTD2C7_jUwyoaqJA17A_CH"
"gU-ifMqS56VgMGdlKZmf7Cg7ZGzM1DoS6vZ9bbfgoczaw4OZVHlg9Cxa0NI"
"CDi1S-sJcTLGN_RLISKN5H0J54ZfzF6fUEn5kNykLTZrAvj2XV7g4UUOogn"
"1cvjJYRcBVzTzQKcfxbqo2DvymDGFZbQM6pj80rYJ5HFPh2EapjggPN8hXp"
"NlTNDEvC84QFv0lo2E-0nVWQqcyHtXd431O1JH2h5X822zKjXxkaztQSCj9"
"YP7AdAeoxIaWOa3aO1vcwURH2WWaNV-_KXVkPJNzfo9-bGYwblMw_RIqIkN"
"BDayTb8rBuQHTCE_tSEHgoSnkityGpr8j_vgA-Fa-SqmdqUlbklVpwA_Mq_"
"UH7RCaqe91dWxRhS_7c85tFMRFCKOcaRXkwxEpP2LD1AYe8yvVQlr0Se8_d"
"RefuQcC-BECwMW-TCgR3VxAuL7ExNTYe4bhBD8WYXsHP7wDXWX2Q4v7IRzj"
"cfVIdpTNYuWEd69PvXBCuy75hmDniSmS3Xps3ItGU\","
"\"p\":\"961BtLSIZkHO7Vu1KfaA3urcwGpISKJiTSB5Nh6npxJr9mSjzv_f"
"e8VoxCX6CWGY0SEeQNUQ6ceTnAAxkSHtZJQGed598jBtxIexAWEE7oc9s9d"
"b0cWu4QWIVZYXrcOTEWmK1kWN4PXmnnQknrWQF49adn81BaOXqoL-tahe7f"
"faXzXe0RXuohK543ZKbuuHQ2TxqFG7CZpXiH_qn1Syao32u0V3iDFpmmCUV"
"h9O2JCzfo8sAosTrnQwC0pXz3Nvr_9Cnk6bMluJoMrwB1Ywg_DPQ1WvpYHO"
"URezEOqVC8Y3zrko199TMX2COKGNFgutVpnzxs2_h0PyINUmwrY4zQ\","
"\"q\":\"wGQRaxy_gBafbrVJy4f32O0a2FQHzmS--WgHhoteDoF6ZAajLcV0"
"GEvb-AVmFER1Wii62BFaFJOYQIegELvnBFFzD6oHJRX7bM4m36G8J_TC1o9"
"T1IFnxOpaoFDf4JWf2k7DCXClGg_zueyOD8fj8F6j2nqpOfytuLmikHcWMc"
"dGTHTCRtQmvOk3pm0uk2qR0cQb5L3Ocv45tCKr55tMc6Zx3DKkMt1kmUwd2"
"HFfk_0WM6R7q4LNGIjwl8dwiERppLKA8xao9i3jOOdFEfAD-Zqv8H-32cyH"
"Mg6Guo4tPNAYSzcsz8nbEYPtKVVm-PDuM2cx0iaKnS8BIK2XTbzc_Q\","
"\"dp\":\"ZXLWIwp_hEMYWyjhP9r0VlqlKTtfeEDrOuQ-Qei0iz6EclwurK8"
"p_yyRCSb1D7qmOaLzHWMollllINUDeIsJDdWEAY8cz4L-sy1RV1tCBeHnaC"
"6iMX5jb1Aw072y3T3qk4tDjxjWUHroh6bTCR8dckkJqNfaBAFKMlGNuyLIH"
"3kSPUV3ivUM1d4NvhnJyz02HmjOgz9W-Uv65rJei_zJR9P2aCbAG00CEHXW"
"zJ_uT86VdxV11WTaHu8Abt94sER8Tv6jbuyLrUjJSs9VGew32xNcEhya4ZQ"
"VyimG8zri6fu7CDXXgPS8wtzB5ihl_c2ypnJQ4_GKrgEqwEAOrFqvUQ\","
"\"dq\":\"uzlmngcm8R6S3qi7fL7_2fG7uyPjSN5P3uR21l8QFCu6kFbJO8S"
"4muBP20hds4F_dlLGqXgRYo7TjpCtmztQsKoWv_ql41hGCfeAawa41WViqm"
"xmlxmrgzzRHsw1YhgZrNgTAz_E290EQT3Mbd0HnCZtbDMMNisIYAj_A3lwd"
"tbHOaYyXb0dSZ_nkSUVO05tQ2aGAo8Xtl5ih0NqaQR_XNhwW2pI0lsTB__D"
"15tU-O5FSdJaq2ip8KNrBzmF8IYrDKTNykKWAKRdSEX_uFoLdD8t0mxn3SM"
"luffa8vdjXJfh3GiASmHUt3HcPOooQEAufoWBPVJWeGqCvWtRH8yYfQ\","
"\"qi\":\"h-e9es5J49OUF48gSXUI8cynZ8ydv5cThXc1deV3mil_7_7Hg8E"
"jV3gAErO4l-irHJplFmHFZvU1ud4zs1gtBt5TA-EeeepYOHMSssWDvDK3WI"
"zsM6C3vcNTSkT-ihaSFmPWHCVwJ1R3auWfeI2In3at0jd4t-OK-cCcGZXb7"
"90-EnyyDcdFTU9WfwVSOJffRGjoUYX8DexavClv7CBzPhpdUzGoeyarNaG4"
"z9MI8Q8txHyHgc_D70lZUum1cj0bZwgEj6yDzOPzSgUmICFJiLDDj93oPaI"
"v-5CQ_Ckju7icexc_kuuYTKBOLTj_vfaURnV3KCHul2UljUYOxkfeNQ\""
"}";
static const char *rsa_key_4096_no_optional =
"{"
"\"e\":\"AQAB\","
"\"kty\":\"RSA\","
"\"n\":\"uiLBz1SUgd4eQ0okg6tlPdk9QUhTsqXmiJXygWVFgzT45E5_Rfkq"
"vZ2fwAqQ8DvxkDTUWiKpeXMpPRNWG5GxuBuq9n7xdA1vn1eQi8LoekB28dg"
"3MwMfozVSKCzyxG1f81xPE5x3EMVhCcx6hshhlMEHkzNNhE07d-oRO87ZC0"
"z_5L3Vh03uJBXaDKVlsgHAazoHLhn6G4odqv-ro54T6Nx1eEtyTnMmFY5ND"
"V4rN0SjQvSefbZZtsrtby8Z0JmeyvynmDwOINj7FpmPmpFLoWGXntc2yxPP"
"8SHnqfT9ESh94fxCMxRhDNohgpegRHyiYwj3M5ZYY6reCZYfOQONSWmc8yp"
"NBMJqj4LuJ2bTMGAFS17ZP4ZZWm5RP9ax100Dgk0yxP1UrybG5dCfJRQvHC"
"ncxG_aL6cSQu2o4fXqlJsNHxk3FjHtV_CMZ3tqvGTvwrs4yxvKwKv6r3fRh"
"KL01bGOePzp9THkHW2-lzVj6kUwnxBdHGZE6fcAnczOdp8ZIEdV1w6ThimC"
"m3Bw_TIyl3tkuxRWXpc_d6Q4iiSVKGKCvUvfAlESpTA4tIhQkij-T9FEoj2"
"WE2H1D35AKmjcfLCh6yszu8cmDNedn862pwnawE2RvRFAyuI113fLQeCbCz"
"tQ1JHuD8cnQt0hpGzReTa5UJ8OEOGIlyXNdWZyTpk\","
"\"d\":\"G2ZW582AT-6xvz-IiP5fuJ9EMloygeuEeEo0aMJO3X3cfoUknJkN"
"ZtyvYa5cgBSe3la8hKkyD9_5K9WvGP9VLTAbdk4g_m-k5QyXiU9PeAGJ0Nd"
"-Zqq4y0Zj2eil8u7Tz0fhFxay-zvG6VGZnsIcBTD2C7_jUwyoaqJA17A_CH"
"gU-ifMqS56VgMGdlKZmf7Cg7ZGzM1DoS6vZ9bbfgoczaw4OZVHlg9Cxa0NI"
"CDi1S-sJcTLGN_RLISKN5H0J54ZfzF6fUEn5kNykLTZrAvj2XV7g4UUOogn"
"1cvjJYRcBVzTzQKcfxbqo2DvymDGFZbQM6pj80rYJ5HFPh2EapjggPN8hXp"
"NlTNDEvC84QFv0lo2E-0nVWQqcyHtXd431O1JH2h5X822zKjXxkaztQSCj9"
"YP7AdAeoxIaWOa3aO1vcwURH2WWaNV-_KXVkPJNzfo9-bGYwblMw_RIqIkN"
"BDayTb8rBuQHTCE_tSEHgoSnkityGpr8j_vgA-Fa-SqmdqUlbklVpwA_Mq_"
"UH7RCaqe91dWxRhS_7c85tFMRFCKOcaRXkwxEpP2LD1AYe8yvVQlr0Se8_d"
"RefuQcC-BECwMW-TCgR3VxAuL7ExNTYe4bhBD8WYXsHP7wDXWX2Q4v7IRzj"
"cfVIdpTNYuWEd69PvXBCuy75hmDniSmS3Xps3ItGU\","
"\"p\":\"961BtLSIZkHO7Vu1KfaA3urcwGpISKJiTSB5Nh6npxJr9mSjzv_f"
"e8VoxCX6CWGY0SEeQNUQ6ceTnAAxkSHtZJQGed598jBtxIexAWEE7oc9s9d"
"b0cWu4QWIVZYXrcOTEWmK1kWN4PXmnnQknrWQF49adn81BaOXqoL-tahe7f"
"faXzXe0RXuohK543ZKbuuHQ2TxqFG7CZpXiH_qn1Syao32u0V3iDFpmmCUV"
"h9O2JCzfo8sAosTrnQwC0pXz3Nvr_9Cnk6bMluJoMrwB1Ywg_DPQ1WvpYHO"
"URezEOqVC8Y3zrko199TMX2COKGNFgutVpnzxs2_h0PyINUmwrY4zQ\","
"\"q\":\"wGQRaxy_gBafbrVJy4f32O0a2FQHzmS--WgHhoteDoF6ZAajLcV0"
"GEvb-AVmFER1Wii62BFaFJOYQIegELvnBFFzD6oHJRX7bM4m36G8J_TC1o9"
"T1IFnxOpaoFDf4JWf2k7DCXClGg_zueyOD8fj8F6j2nqpOfytuLmikHcWMc"
"dGTHTCRtQmvOk3pm0uk2qR0cQb5L3Ocv45tCKr55tMc6Zx3DKkMt1kmUwd2"
"HFfk_0WM6R7q4LNGIjwl8dwiERppLKA8xao9i3jOOdFEfAD-Zqv8H-32cyH"
"Mg6Guo4tPNAYSzcsz8nbEYPtKVVm-PDuM2cx0iaKnS8BIK2XTbzc_Q\""
"}";
/* This is a compact JWE containing the plaintext ra_ptext_1024 for the key
* lws_jwe_ex_a2_jwk_json... produced by test test above running on OpenSSL.
*/
static char *jwe_compact_rsa_cbc_openssl =
"eyAiYWxnIjoiUlNBMV81IiwiZW5jIjoiQTEyOENCQy1IUzI1NiJ9"
"."
"mWXwMv4hxwgKbUAyMFAuHxiKjg62Z5owkFYLgxho5FNT3Hm5ZGiF8plS5W3NwUTmv8t6C"
"I0kV5cOOJXE_PXPaOptsie2aoQR-_Bs6gAFixa7aZNsnsMF4lMAiIy7VkrvP2qh0s04y2"
"2poOLfmS93tB9AyWdlnQ6Z-U1wzrM9kncqO9GpPol9M4WnAss1ZtTE-9Tbc7dMHURHbZb"
"vHn2h625pBD8oD_s0osRav8YEw7jNeQjW_ch4pI6HRox-hf0dyLtk9yFCtBjxbCvysadW"
"SlZPJBj0HYv0BVqCK0fETi7URx4MCJ3zgCJnpAuQo2yq1yQzXwOYcFoLIvY0jIm44A"
"."
"WINMABhU_GQKJarmmTP_-g"
"."
"V9kHAh9ajE558EPj_zX6p_C903MevMPJLcMU4MWhfhwe1cFW_0io-LvZfcF_Xj7aNoIZd"
"vPXJ0On_jHPFsnwe4dus6kuh8RrSKFFV0sGIv-FFXrKB99FFRY_8BTPsYFrcqt_8EV2Af"
"p7toaVOO15WXOEH6Ym81a3aOWCVGdj_akMN46Qx_JrQaql-Xs_fL2HdpaEWHHTV2ac9aY"
"ah7o0Ojl9UnzkHyXieRgrjXymvCcT0te3D4OQJhrv7TzH_hfKu621O-Frmkr-NvQGSNcl"
"fVgRkte2ks34j5HPqEbJQWWKG3IDfkPRvWmDZzEXW_JTrK_1r1FM-aYtY79tLnir8Zw7I"
"WCczD-XmtlOJNYA2Ss5dbjoJDtevbqaZWVl-sDSwO1xdf-DUfiemep7S7IFoFAdl0vXLT"
"YtuNBxuFw-cP2Kwi8RyF__uENo4vD003cI4htqSYIYXeyAVqWIkmsP1BFpT7MGixfvhAu"
"VCj_ToJmowGY3bOHiMuzyT9M7wtCCiCySEBARVU-EdQBXj8X-quSj-0OnBtxXChUS4QXw"
"q2pNn3UKSMsxqvHR25HQq_6U2AbvNHxKhup3luzn0T27uy0l3XeWSz_48SwJZKRnbYPtC"
"n5Jd5mRdr5GxihpNwupaO4BWnHZo_fHUTI9-Z18lpj_4QB-c3dzDL15xFN4HEZ5lv2iO5"
"zMiRI_NlVVDdA9lqGpn4IyO44osHQieBraUjWF8X5cSXDoqktXDVymAdrxe0fYZQca6Bq"
"CsBqFTYae4CG01SpG46ysfwAXmsTEKPzj7uiOguFCRB4hClTd-Q8R2axj9JNT1jU_Vb7U"
"GKFBGeDJt5PDXJyvW5rHyiQDewykf0Lpvdp39yITT8qARmJl2SwCrDCPADZ4TwwobT42B"
"J_Cq5IKgEOeuS3S7NOdOfXxmAcNfN0yujKbmfiOxnXhwnepQ-TnpgTV0nv8snBRITN7mS"
"EgflqQlKAZus_0mDbHmBmw1nY-0q4qMWI03IEwMC57-p4JLshnWgIAupnFCGp9nyi4E_s"
"GVyQlGCxzC5VSH1Hba3rvbulQGxx_kGk0j56NGhGsQEzqvSuI4xgIsGMPo1Ii7xUh68dd"
"BzJRzaov9oDTgnWM5-hoEQQoazW7hDKAFPYccC6zqX0fnI7vBIIBZsjUsol6-5bdujpb4"
"l3LRGCjULXlSPbnNGzyk5R-mIwQC8aM9wcIiZZdcdHdr4meMNr3HmpG_B5xtBmENAJAvU"
"K3DO6pro2xhypuNKYtOAdH0Xyl8QBPIJ0EFVH6_1V-H_gHs2MLMIqGfUmFCuRev60APcw"
"Pbf-GZxLeXLutPq2DOl1HD0XLNtYL1dB1aw2j4L8OJREOC_N-KpIH3g"
"."
"n4QRlTzW2urRnNiJlwQkZw"
;
static int
test_jwe_r256a128_jwe_openssl(struct lws_context *context)
{
struct lws_jose jose;
struct lws_jws jws;
struct lws_jwk jwk;
char temp[2048];
int n, ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
if (lws_jwk_import(&jwk, NULL, NULL, (char *)lws_jwe_ex_a2_jwk_json,
strlen((char *)lws_jwe_ex_a2_jwk_json)) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
/* converts a compact serialization to jws b64 + decoded maps */
if (lws_jws_compact_decode((const char *)jwe_compact_rsa_cbc_openssl,
strlen((char *)jwe_compact_rsa_cbc_openssl),
&jws.map, &jws.map_b64,
temp, &temp_len) != 5) {
lwsl_err("%s: lws_jws_compact_decode failed\n", __func__);
goto bail;
}
n = lws_jwe_auth_and_decrypt(&jose, &jws);
lws_jwk_destroy(&jwk);
if (n < 0) {
lwsl_err("%s: lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < sizeof(ra_ptext_1024) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT], ra_ptext_1024,
sizeof(ra_ptext_1024))) {
lwsl_err("%s: plaintext RSA/AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(ra_ptext_1024, sizeof(ra_ptext_1024));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail;
}
ret = 0;
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
/* This is a compact JWE containing the plaintext ra_ptext_1024 for the key
* lws_jwe_ex_a2_jwk_json... produced by test test above running on mbedTLS.
*/
static char
*jwe_compact_rsa_cbc_mbedtls =
"eyAiYWxnIjoiUlNBMV81IiwiZW5jIjoiQTEyOENCQy1IUzI1NiJ9.oBqKJ06UJs2oryPLWZKyI8743GC0geUt_xaKLMaPtApp__swG2w0IhNtmkIBKA9LeeGyiCWKpGGzOlQUR5YSxrT99PnincHXw_pkCprOvi4j3oxThJ2pFRx-CBc9ZgPJ3Kje1QifOueT3vQt_65iiyXmqyc5PDxzuV0L_KtrA_jEsm2m1JVBMOX--qzXjYyqx_dc87d43TXY_4kuTmAtqVpQe7ixKJlUViPVSzuASyeLEUTIaNlALuEWial1wP-ICF37OQzOcZRH3OVZObrcZi1aWkDOLxF4qO4I_GtpuAgZT732a7gnobR-T2oyBpimcqCVEk88Wa7cYyBXZvAOUA.fNLEFh1mjdlyc3WKw0I2Kg.e8X-11K9yXK0KkK-8ikplEWFViruqduaKPDOA7x6lKpBk8l3RFX1aqC4s0WVc1eN0qd-fB__EoO_AIG1xsfw1ie2IDWV0p18ZaRkQRN9Th5UU-W9C9XyPFQUxcl7ShKRE-yKJU-VdZDk6L2-07FH3s-voVKx0oqLIYqkkXp9a2jvnzrZ0Psujs4PSCHOZEgcS8PNdMmdsjDHLsb0NDMifOSlXk2Mp6V2SizXRIPJtOkVJGKwuBc7FbdO02GnzzVXldiLC7GI0zoRsnSJndF8yc3pMrMQhoVRktkBClAcIujD_OxJwHG-i3OJqUg1uVfci86RoQrnULoygvB7apX_WMxF7eXXJdXbG8sPLLCf0SW4sgvuSclOHL2UXzGi6Tp_l1XjxFQTzVEfUaj7i0gD2wM74Ru79RX8yO0m-5qOOwkySU1lEXqbLTuxjJXD9WLcTQQmF0Nm5myTUyNOl7xKpeDpnNt5A0L8o6SW6iJ3DwZEzhMxk3JWQOYtQP1J2sgwAKEDM6SkGzTy9QXpCEoraKp2UEzunux9S6-roYpzgEFT2RZrq3Hg_JyequTtrcNaoiEKd5szJvE6pUc25WEjDzgg79v_n40gQm688mO62kiVBThVmc88u2JVlNpzVQFUfKt-bu2Xxiqn5lRfEMK93EEPZRd8n12vBq5aJKvvEpPN1AC4HaMepf78Ob0GNTYGR-70zSS0ErecCeIgUJ1CttE2Nn0qEOfbQcO48SjeIltecl9DRzeLT3tPN3Z4BqbzSX8kKU5LStUX5YC-obM_0Ss7swXJM19I1O-QH8VbHZl-9TADR6BLzmrsJQ9_BL_uTB6uPdLhYfqWw6VUf0eMLaqvsY92vV5-JVQqyv7s70FNLT1-8P94k79ZGiLvNdDNZgGsmRQOwA2Vk6snHI0oUYGj7NeEK4O64ZfNRZJgPfWnxtQ-LIhSYCJvxFGL7ZMoA_ijKl9_v_bRqd03_7o8YQisw2luDYqLa87Dh9u9tacOoraGAzcEBIAh-BOcnIrQEt5KoSbly5xNAkfqj7QDvL0vPHArZ5E3Gb_k3VbKjsqCzvisNMEjm887Z-Dc6tW4Y2OceYf-rfUDvJ3EXZ66CWSQ7yKhPVcP1RRtNUFEqLoIAkA4aEAAS2ZPKVHIJQwyMzbbNFAuvY_7piNYprAI5lySFcA1cz_hKl6s9xmqbAkH2XGZZduw5Nv-aY_LMXujjhmblqE2Ocej91xTdgMe74Ftr1b3y9FvPPVSqNjpTSfujCi5L57LOpjT78do8eSrDz6coG0zeRUybjWeTszoiYbif_NlyAcMScO5OMZHNkre6L8u-AVeYSKTGsdpK7em_iLN8cGSEjZABNAr_A9Lfg.6Qb_Qf-ktX0DRHWUHAJxDQ"
;
static int
test_jwe_r256a128_jwe_mbedtls(struct lws_context *context)
{
struct lws_jose jose;
struct lws_jws jws;
struct lws_jwk jwk;
char temp[2048];
int n, ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
if (lws_jwk_import(&jwk, NULL, NULL, (char *)lws_jwe_ex_a2_jwk_json,
strlen((char *)lws_jwe_ex_a2_jwk_json)) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
/* converts a compact serialization to jws b64 + decoded maps */
if (lws_jws_compact_decode((const char *)jwe_compact_rsa_cbc_mbedtls,
strlen((char *)jwe_compact_rsa_cbc_mbedtls),
&jws.map, &jws.map_b64, temp, &temp_len) != 5) {
lwsl_err("%s: lws_jws_compact_decode failed\n", __func__);
goto bail;
}
n = lws_jwe_auth_and_decrypt(&jose, &jws);
lws_jwk_destroy(&jwk);
if (n < 0) {
lwsl_err("%s: lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < sizeof(ra_ptext_1024) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT], ra_ptext_1024,
sizeof(ra_ptext_1024))) {
lwsl_err("%s: plaintext RSA/AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(ra_ptext_1024, sizeof(ra_ptext_1024));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail;
}
ret = 0;
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
/* A.3. Example JWE Using AES Key Wrap and AES_128_CBC_HMAC_SHA_256
*
* This example encrypts the plaintext "Live long and prosper." to the
* recipient using AES Key Wrap for key encryption and
* AES_128_CBC_HMAC_SHA_256 for content encryption.
*/
/* "Live long and prosper." */
static uint8_t
ex_a3_ptext[] = {
76, 105, 118, 101, 32, 108, 111, 110,
103, 32, 97, 110, 100, 32, 112, 114,
111, 115, 112, 101, 114, 46
},
*ex_a3_compact = (uint8_t *)
"eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0"
"."
"6KB707dM9YTIgHtLvtgWQ8mKwboJW3of9locizkDTHzBC2IlrT1oOQ"
"."
"AxY8DCtDaGlsbGljb3RoZQ"
"."
"KDlTtXchhZTGufMYmOYGS4HffxPSUrfmqCHXaI9wOGY"
"."
"U0m_YmjN04DJvceFICbCVQ",
*ex_a3_key = (uint8_t *)
"{\"kty\":\"oct\","
"\"k\":\"GawgguFyGrWKav7AX4VKUg\""
"}"
;
static int
test_jwe_a3(struct lws_context *context)
{
struct lws_jose jose;
struct lws_jws jws;
struct lws_jwk jwk;
char temp[2048];
int n, ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
if (lws_jwk_import(&jwk, NULL, NULL, (char *)ex_a3_key,
strlen((char *)ex_a3_key)) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
/* converts a compact serialization to jws b64 + decoded maps */
if (lws_jws_compact_decode((const char *)ex_a3_compact,
strlen((char *)ex_a3_compact),
&jws.map, &jws.map_b64, temp, &temp_len) != 5) {
lwsl_err("%s: lws_jws_compact_decode failed\n", __func__);
goto bail;
}
n = lws_jwe_auth_and_decrypt(&jose, &jws);
lws_jwk_destroy(&jwk);
if (n < 0) {
lwsl_err("%s: lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < sizeof(ex_a3_ptext) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT], ex_a3_ptext,
sizeof(ex_a3_ptext))) {
lwsl_err("%s: plaintext AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(ex_a3_ptext, sizeof(ex_a3_ptext));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail;
}
ret = 0;
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
/* JWA B.2. Test Cases for AES_192_CBC_HMAC_SHA_384
*
* Unfortunately JWA just gives this test case as hex literals, not
* inside a JWE. So we have to prepare the inputs "by hand".
*/
static uint8_t
jwa_b2_ptext[] = {
0x41, 0x20, 0x63, 0x69, 0x70, 0x68, 0x65, 0x72,
0x20, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x20,
0x6d, 0x75, 0x73, 0x74, 0x20, 0x6e, 0x6f, 0x74,
0x20, 0x62, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75,
0x69, 0x72, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20,
0x62, 0x65, 0x20, 0x73, 0x65, 0x63, 0x72, 0x65,
0x74, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x69,
0x74, 0x20, 0x6d, 0x75, 0x73, 0x74, 0x20, 0x62,
0x65, 0x20, 0x61, 0x62, 0x6c, 0x65, 0x20, 0x74,
0x6f, 0x20, 0x66, 0x61, 0x6c, 0x6c, 0x20, 0x69,
0x6e, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20,
0x68, 0x61, 0x6e, 0x64, 0x73, 0x20, 0x6f, 0x66,
0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x6e, 0x65,
0x6d, 0x79, 0x20, 0x77, 0x69, 0x74, 0x68, 0x6f,
0x75, 0x74, 0x20, 0x69, 0x6e, 0x63, 0x6f, 0x6e,
0x76, 0x65, 0x6e, 0x69, 0x65, 0x6e, 0x63, 0x65
},
jwa_b2_rawkey[] = {
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
},
jwa_b2_iv[] = {
0x1a, 0xf3, 0x8c, 0x2d, 0xc2, 0xb9, 0x6f, 0xfd,
0xd8, 0x66, 0x94, 0x09, 0x23, 0x41, 0xbc, 0x04
},
jwa_b2_e[] = {
0xea, 0x65, 0xda, 0x6b, 0x59, 0xe6, 0x1e, 0xdb,
0x41, 0x9b, 0xe6, 0x2d, 0x19, 0x71, 0x2a, 0xe5,
0xd3, 0x03, 0xee, 0xb5, 0x00, 0x52, 0xd0, 0xdf,
0xd6, 0x69, 0x7f, 0x77, 0x22, 0x4c, 0x8e, 0xdb,
0x00, 0x0d, 0x27, 0x9b, 0xdc, 0x14, 0xc1, 0x07,
0x26, 0x54, 0xbd, 0x30, 0x94, 0x42, 0x30, 0xc6,
0x57, 0xbe, 0xd4, 0xca, 0x0c, 0x9f, 0x4a, 0x84,
0x66, 0xf2, 0x2b, 0x22, 0x6d, 0x17, 0x46, 0x21,
0x4b, 0xf8, 0xcf, 0xc2, 0x40, 0x0a, 0xdd, 0x9f,
0x51, 0x26, 0xe4, 0x79, 0x66, 0x3f, 0xc9, 0x0b,
0x3b, 0xed, 0x78, 0x7a, 0x2f, 0x0f, 0xfc, 0xbf,
0x39, 0x04, 0xbe, 0x2a, 0x64, 0x1d, 0x5c, 0x21,
0x05, 0xbf, 0xe5, 0x91, 0xba, 0xe2, 0x3b, 0x1d,
0x74, 0x49, 0xe5, 0x32, 0xee, 0xf6, 0x0a, 0x9a,
0xc8, 0xbb, 0x6c, 0x6b, 0x01, 0xd3, 0x5d, 0x49,
0x78, 0x7b, 0xcd, 0x57, 0xef, 0x48, 0x49, 0x27,
0xf2, 0x80, 0xad, 0xc9, 0x1a, 0xc0, 0xc4, 0xe7,
0x9c, 0x7b, 0x11, 0xef, 0xc6, 0x00, 0x54, 0xe3
},
jwa_b2_a[] = { /* "The second principle of Auguste Kerckhoffs" */
0x54, 0x68, 0x65, 0x20, 0x73, 0x65, 0x63, 0x6f,
0x6e, 0x64, 0x20, 0x70, 0x72, 0x69, 0x6e, 0x63,
0x69, 0x70, 0x6c, 0x65, 0x20, 0x6f, 0x66, 0x20,
0x41, 0x75, 0x67, 0x75, 0x73, 0x74, 0x65, 0x20,
0x4b, 0x65, 0x72, 0x63, 0x6b, 0x68, 0x6f, 0x66,
0x66, 0x73
},
jwa_b2_tag[] = {
0x84, 0x90, 0xac, 0x0e, 0x58, 0x94, 0x9b, 0xfe,
0x51, 0x87, 0x5d, 0x73, 0x3f, 0x93, 0xac, 0x20,
0x75, 0x16, 0x80, 0x39, 0xcc, 0xc7, 0x33, 0xd7
}
;
static int
test_jwa_b2(struct lws_context *context)
{
struct lws_jose jose;
struct lws_jws jws;
struct lws_jwk jwk;
int n, ret = -1;
char buf[2048];
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
/*
* normally all this is interpreted from the JWE blob. But we don't
* have JWE test vectors for AES_256_CBC_HMAC_SHA_512, just a standalone
* one. So we have to create it all by hand.
*
* See test_jwe_a3 above for a more normal usage pattern.
*/
memset(&jwk, 0, sizeof(jwk));
jwk.kty = LWS_GENCRYPTO_KTY_OCT;
jwk.e[LWS_GENCRYPTO_OCT_KEYEL_K].buf = (uint8_t *)jwa_b2_rawkey;
jwk.e[LWS_GENCRYPTO_OCT_KEYEL_K].len = sizeof(jwa_b2_rawkey);
memcpy(buf, jwa_b2_e, sizeof(jwa_b2_e));
jws.map.buf[LJWE_IV] = (char *)jwa_b2_iv;
jws.map.len[LJWE_IV] = sizeof(jwa_b2_iv);
jws.map.buf[LJWE_CTXT] = buf;
jws.map.len[LJWE_CTXT] = sizeof(jwa_b2_e);
jws.map.buf[LJWE_ATAG] = (char *)jwa_b2_tag;
jws.map.len[LJWE_ATAG] = sizeof(jwa_b2_tag);
/*
* Normally this comes from the JOSE header. But this test vector
* doesn't have one... so...
*/
if (lws_gencrypto_jwe_alg_to_definition("A128KW", &jose.alg))
goto bail;
if (lws_gencrypto_jwe_enc_to_definition("A192CBC-HS384", &jose.enc_alg))
goto bail;
n = lws_jwe_auth_and_decrypt_cbc_hs(&jose, &jws, jwa_b2_rawkey,
jwa_b2_a, sizeof(jwa_b2_a));
if (n < 0) {
lwsl_err("%s: lws_jwe_a_cbc_hs_decrypt failed\n", __func__);
goto bail;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < sizeof(jwa_b2_ptext) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT],jwa_b2_ptext,
sizeof(jwa_b2_ptext))) {
lwsl_err("%s: plaintext AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(jwa_b2_ptext, sizeof(jwa_b2_ptext));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail;
}
ret = 0;
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
/* JWA B.3. Test Cases for AES_256_CBC_HMAC_SHA_512
*
* Unfortunately JWA just gives this test case as hex literals, not
* inside a JWE. So we have to prepare the inputs "by hand".
*/
static uint8_t
jwa_b3_ptext[] = {
0x41, 0x20, 0x63, 0x69, 0x70, 0x68, 0x65, 0x72,
0x20, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x20,
0x6d, 0x75, 0x73, 0x74, 0x20, 0x6e, 0x6f, 0x74,
0x20, 0x62, 0x65, 0x20, 0x72, 0x65, 0x71, 0x75,
0x69, 0x72, 0x65, 0x64, 0x20, 0x74, 0x6f, 0x20,
0x62, 0x65, 0x20, 0x73, 0x65, 0x63, 0x72, 0x65,
0x74, 0x2c, 0x20, 0x61, 0x6e, 0x64, 0x20, 0x69,
0x74, 0x20, 0x6d, 0x75, 0x73, 0x74, 0x20, 0x62,
0x65, 0x20, 0x61, 0x62, 0x6c, 0x65, 0x20, 0x74,
0x6f, 0x20, 0x66, 0x61, 0x6c, 0x6c, 0x20, 0x69,
0x6e, 0x74, 0x6f, 0x20, 0x74, 0x68, 0x65, 0x20,
0x68, 0x61, 0x6e, 0x64, 0x73, 0x20, 0x6f, 0x66,
0x20, 0x74, 0x68, 0x65, 0x20, 0x65, 0x6e, 0x65,
0x6d, 0x79, 0x20, 0x77, 0x69, 0x74, 0x68, 0x6f,
0x75, 0x74, 0x20, 0x69, 0x6e, 0x63, 0x6f, 0x6e,
0x76, 0x65, 0x6e, 0x69, 0x65, 0x6e, 0x63, 0x65
},
jwa_b3_rawkey[] = {
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f
},
jwa_b3_iv[] = {
0x1a, 0xf3, 0x8c, 0x2d, 0xc2, 0xb9, 0x6f, 0xfd,
0xd8, 0x66, 0x94, 0x09, 0x23, 0x41, 0xbc, 0x04
},
jwa_b3_e[] = {
0x4a, 0xff, 0xaa, 0xad, 0xb7, 0x8c, 0x31, 0xc5,
0xda, 0x4b, 0x1b, 0x59, 0x0d, 0x10, 0xff, 0xbd,
0x3d, 0xd8, 0xd5, 0xd3, 0x02, 0x42, 0x35, 0x26,
0x91, 0x2d, 0xa0, 0x37, 0xec, 0xbc, 0xc7, 0xbd,
0x82, 0x2c, 0x30, 0x1d, 0xd6, 0x7c, 0x37, 0x3b,
0xcc, 0xb5, 0x84, 0xad, 0x3e, 0x92, 0x79, 0xc2,
0xe6, 0xd1, 0x2a, 0x13, 0x74, 0xb7, 0x7f, 0x07,
0x75, 0x53, 0xdf, 0x82, 0x94, 0x10, 0x44, 0x6b,
0x36, 0xeb, 0xd9, 0x70, 0x66, 0x29, 0x6a, 0xe6,
0x42, 0x7e, 0xa7, 0x5c, 0x2e, 0x08, 0x46, 0xa1,
0x1a, 0x09, 0xcc, 0xf5, 0x37, 0x0d, 0xc8, 0x0b,
0xfe, 0xcb, 0xad, 0x28, 0xc7, 0x3f, 0x09, 0xb3,
0xa3, 0xb7, 0x5e, 0x66, 0x2a, 0x25, 0x94, 0x41,
0x0a, 0xe4, 0x96, 0xb2, 0xe2, 0xe6, 0x60, 0x9e,
0x31, 0xe6, 0xe0, 0x2c, 0xc8, 0x37, 0xf0, 0x53,
0xd2, 0x1f, 0x37, 0xff, 0x4f, 0x51, 0x95, 0x0b,
0xbe, 0x26, 0x38, 0xd0, 0x9d, 0xd7, 0xa4, 0x93,
0x09, 0x30, 0x80, 0x6d, 0x07, 0x03, 0xb1, 0xf6,
},
jwa_b3_a[] = { /* "The second principle of Auguste Kerckhoffs" */
0x54, 0x68, 0x65, 0x20, 0x73, 0x65, 0x63, 0x6f,
0x6e, 0x64, 0x20, 0x70, 0x72, 0x69, 0x6e, 0x63,
0x69, 0x70, 0x6c, 0x65, 0x20, 0x6f, 0x66, 0x20,
0x41, 0x75, 0x67, 0x75, 0x73, 0x74, 0x65, 0x20,
0x4b, 0x65, 0x72, 0x63, 0x6b, 0x68, 0x6f, 0x66,
0x66, 0x73
},
jws_b3_tag[] = {
0x4d, 0xd3, 0xb4, 0xc0, 0x88, 0xa7, 0xf4, 0x5c,
0x21, 0x68, 0x39, 0x64, 0x5b, 0x20, 0x12, 0xbf,
0x2e, 0x62, 0x69, 0xa8, 0xc5, 0x6a, 0x81, 0x6d,
0xbc, 0x1b, 0x26, 0x77, 0x61, 0x95, 0x5b, 0xc5
}
;
static int
test_jwa_b3(struct lws_context *context)
{
struct lws_jose jose;
struct lws_jws jws;
struct lws_jwk jwk;
char buf[2048];
int n, ret = -1;
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
/*
* normally all this is interpreted from the JWE blob. But we don't
* have JWE test vectors for AES_256_CBC_HMAC_SHA_512, just a standalone
* one. So we have to create it all by hand.
*
* See test_jwe_a3 above for a more normal usage pattern.
*/
memset(&jwk, 0, sizeof(jwk));
jwk.kty = LWS_GENCRYPTO_KTY_OCT;
jwk.e[LWS_GENCRYPTO_OCT_KEYEL_K].buf = (uint8_t *)jwa_b3_rawkey;
jwk.e[LWS_GENCRYPTO_OCT_KEYEL_K].len = sizeof(jwa_b3_rawkey);
memcpy(buf, jwa_b3_e, sizeof(jwa_b3_e));
jws.map.buf[LJWE_IV] = (char *)jwa_b3_iv;
jws.map.len[LJWE_IV] = sizeof(jwa_b3_iv);
jws.map.buf[LJWE_CTXT] = buf;
jws.map.len[LJWE_CTXT] = sizeof(jwa_b3_e);
jws.map.buf[LJWE_ATAG] = (char *)jws_b3_tag;
jws.map.len[LJWE_ATAG] = sizeof(jws_b3_tag);
/*
* Normally this comes from the JOSE header. But this test vector
* doesn't feature one...
*/
if (lws_gencrypto_jwe_alg_to_definition("A128KW", &jose.alg))
goto bail;
if (lws_gencrypto_jwe_enc_to_definition("A256CBC-HS512", &jose.enc_alg))
goto bail;
n = lws_jwe_auth_and_decrypt_cbc_hs(&jose, &jws, jwa_b3_rawkey,
jwa_b3_a, sizeof(jwa_b3_a));
if (n < 0) {
lwsl_err("%s: lws_jwe_a_cbc_hs_decrypt failed\n", __func__);
goto bail;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < sizeof(jwa_b3_ptext) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT],jwa_b3_ptext,
sizeof(jwa_b3_ptext))) {
lwsl_err("%s: plaintext AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(jwa_b3_ptext, sizeof(jwa_b3_ptext));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail;
}
ret = 0;
bail:
if (ret)
lwsl_err("%s: selftest failed ++++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
lws_jws_destroy(&jws);
return ret;
}
/* JWA C. Example ECDH-ES Key Agreement Computation
*
* This example uses ECDH-ES Key Agreement and the Concat KDF to derive
* the CEK in the manner described in Section 4.6. In this example, the
* ECDH-ES Direct Key Agreement mode ("alg" value "ECDH-ES") is used to
* produce an agreed-upon key for AES GCM with a 128-bit key ("enc"
* value "A128GCM").
*
* In this example, a producer Alice is encrypting content to a consumer
* Bob. The producer (Alice) generates an ephemeral key for the key
* agreement computation.
*
* JWA Appendix C where this comes from ONLY goes as far as to confirm the
* direct derived key, it doesn't do any AES128-GCM.
*/
static const char
*ex_jwa_c_jose =
"{\"alg\":\"ECDH-ES\","
"\"enc\":\"A128GCM\","
"\"apu\":\"QWxpY2U\"," /* b64u("Alice") */
"\"apv\":\"Qm9i\"," /* b64u("Bob") */
"\"epk\":" /* public part of A's ephemeral key */
"{\"kty\":\"EC\","
"\"crv\":\"P-256\","
"\"x\":\"gI0GAILBdu7T53akrFmMyGcsF3n5dO7MmwNBHKW5SV0\","
"\"y\":\"SLW_xSffzlPWrHEVI30DHM_4egVwt3NQqeUD7nMFpps\""
"}"
"}"
;
static uint8_t
ex_jwa_c_z[] = {
158, 86, 217, 29, 129, 113, 53, 211,
114, 131, 66, 131, 191, 132, 38, 156,
251, 49, 110, 163, 218, 128, 106, 72,
246, 218, 167, 121, 140, 254, 144, 196
},
ex_jwa_c_derived_key[] = {
86, 170, 141, 234, 248, 35, 109, 32,
92, 34, 40, 205, 113, 167, 16, 26
};
static int
test_jwa_c(struct lws_context *context)
{
struct lws_jose jose;
struct lws_jws jws;
char temp[2048], *p;
int ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jws_init(&jws, NULL, context);
/*
* again the JWA Appendix C test vectors are not in the form of a
* complete JWE, but just the JWE JOSE header, so we must fake up the
* pieces and perform just the (normally internal) key agreement step
* for this test.
*
* See test_jwe_a3 above for a more normal usage pattern.
*/
if (lws_jwe_parse_jose(&jose, ex_jwa_c_jose, strlen(ex_jwa_c_jose),
temp, &temp_len) < 0) {
lwsl_err("%s: JOSE parse failed\n", __func__);
goto bail;
}
/*
* The ephemeral key has been parsed into a jwk "jose.jwk_ephemeral"
*
* In this example, the ECDH-ES Direct Key Agreement mode ("alg" value
* "ECDH-ES") is used to produce an agreed-upon key for AES GCM with a
* 128-bit key ("enc" value "A128GCM").
*/
p = lws_concat_temp(temp, temp_len);
if (lws_jwa_concat_kdf(&jose, &jws, 1, (uint8_t *)p,
ex_jwa_c_z, sizeof(ex_jwa_c_z))) {
lwsl_err("%s: JOSE parse failed\n", __func__);
goto bail;
}
/* allowing for trailing padding, confirm the plaintext */
if (lws_timingsafe_bcmp(lws_concat_temp(temp, temp_len), ex_jwa_c_derived_key,
sizeof(ex_jwa_c_derived_key))) {
lwsl_err("%s: ECDH-ES direct derived key wrong\n", __func__);
lwsl_hexdump_notice(ex_jwa_c_derived_key,
sizeof(ex_jwa_c_derived_key));
lwsl_hexdump_notice(p, sizeof(ex_jwa_c_derived_key));
goto bail;
}
ret = 0;
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest failed +++++++++++++++++++\n", __func__);
else
lwsl_notice("%s: selftest OK\n", __func__);
return ret;
}
/* AES Key Wrap and AES_XXX_CBC_HMAC_SHA_YYY variations
*
* These were created by, eg
*
* echo -n "plaintext0123456" | \
* ./lws-crypto-jwe -e "A192KW A256CBC-HS512" -k aes192.key
*/
/* "Live long and prosper." */
static const char
*akw_ptext = "plaintext0123456",
*akw_ct_128_128 = "eyJhbGciOiJBMTI4S1ciLCAiZW5jIjoiQTEyOENCQy1IUzI1NiJ9.zbTfhhWePf1UrCRDxJD_-8eAQr2AoWAL51_nNOv0L4nV3P0e4_9ARA.qWehIhy4j4_gh_h5MF9ZEw.GD40YH6NeNOEkhhxC9ryZA.PEuU6V3rhYXeoxENrAzDgw",
*akw_ct_128_192 = "eyJhbGciOiJBMTI4S1ciLCAiZW5jIjoiQTE5MkNCQy1IUzM4NCJ9.zpkr45xH_kSJ5eTBv5dGo5PN_A6YdC4JoJSOw3_VTqcOeAYyCkCAXeGWugqIVLzMzBKgtXdabO8.O28MVhkgfketu5sxQK4Ffw.j25N7luxh251kQwpAoYURQ.Pm_NOj0KZzUq2fV9ARpHxT3Iach9feLK",
*akw_ct_128_256 = "eyJhbGciOiJBMTI4S1ciLCAiZW5jIjoiQTI1NkNCQy1IUzUxMiJ9.VvFmi121jliyh_UKzsBv7HR3TVY7-yALpcdlasHqdzmfISd8LFU5oc2fEhfn3_TKfCbgRycm5M3103NEMbVSiNULZWvJAPFe.7uLHGFO1g-PgD9YkjPbvoA.AlPwQPWSqGaB_em4qEEyjw.0LgTLld5pSffZnzGG6IRWEwXg7HhClmwP4m_p1yKnHw",
*akw_ct_192_128 = "eyJhbGciOiJBMTkyS1ciLCAiZW5jIjoiQTEyOENCQy1IUzI1NiJ9.kxlmi-xn0JN-ZlnSfkVDP-fXvricJ-L63WP2bWddWEiVK4m-os2trw.iarAWaeV873kh5s7HjoZ4Q.nFHEpnnIxvbCiYfFfsLj7Q.karz-h-R93dJgwN_YZyPmw",
*akw_ct_192_192 = "eyJhbGciOiJBMTkyS1ciLCAiZW5jIjoiQTE5MkNCQy1IUzM4NCJ9.D869MEk-JERZU_4MgFuL_6Pg24LUEbXlTvGj-t_JUnNFsJ0p8fk5L-iOATqPmx2g7AyVWgcUqU0.RrxzDsy6Bne1pzx99PBGsA.C-ZWmMwd1uswYkvhKX2_jg.bIFY0TmGuohI2APxDZyFUYpa6s1Mx2j1",
*akw_ct_192_256 = "eyJhbGciOiJBMTkyS1ciLCAiZW5jIjoiQTI1NkNCQy1IUzUxMiJ9.XNOBw0Dy1paAX2_XGkZYm2Zm455i8InAVMqM3aOrVDpXYBAADuZ_Ke_dlo3Fc8J5b9m_KNCUtVUU8f3KV0sY-yESsqyZTSXk.n3wEIV1-tL50JAp4H19Y1w.ODPd-oxmpCai9CzqaO0P3Q.b9z08hJTySSVSOw-4qp5lrTEcUur46L-RRB-SEcqPpk",
*akw_ct_256_128 = "eyJhbGciOiJBMjU2S1ciLCAiZW5jIjoiQTEyOENCQy1IUzI1NiJ9.THaIbHUOHkr7McMeiQqIO_gBcm61F0BKx79JXkzQVVSF7m0u7Z6uhA.RAU8Yx_a9rbWeqr_0YyLZA.zzfdv55bM-qblTxaR5pNzQ.cySMIOTOcEoFkcVn0D6RKQ",
*akw_ct_256_192 = "eyJhbGciOiJBMjU2S1ciLCAiZW5jIjoiQTE5MkNCQy1IUzM4NCJ9.gFcfX6fVrpmDJWN5jPqSWEvpOOoNuV4Yn2KO47p1wGsdw5qIw3r5AO5U8zOEtoGNVX68IC8vkpo.9w3tBsve4e-77lI-S9cFog.Vj3L009JDipPJlHY0tS4Iw.WYGgCedW4SmxleDF3P6Hx26BUXxnizxl",
*akw_ct_256_256 = "eyJhbGciOiJBMjU2S1ciLCAiZW5jIjoiQTI1NkNCQy1IUzUxMiJ9.ldhqlMf2LJrZ7EDl-oZvaqi0b_KPGy4cMRx2QDpKtTg92tTSWF7ALVHPPCyT4qccIybP4rygajKfdC_Q_UE16KFyUvXhBgaj.S9OCmKpY0zDkArLF5XsrJw.zvJ1X-zuHsrwLXGJJbglPA.WaRKb7Le2ZQ30pGQAV3sfp-YY1563KXxPURHQ8ntdPc",
*akw_key_128 = "{\"k\":\"JjVJVh8JsXvKf9qgHHWWBA\",\"kty\":\"oct\"}",
*akw_key_192 = "{\"k\":\"BYF6urCMDRMKFXXRxXrDSVtW71AUZghj\",\"kty\":\"oct\"}",
*akw_key_256 = "{\"k\":\"cSHyZXGEfnlgKud21cM6tAxRyXnK6xbWRTsyLUegTMk\",\"kty\":\"oct\"}"
;
static int
test_akw_decrypt(struct lws_context *context, const char *test_name,
const char *ciphertext, const char *key)
{
struct lws_jose jose;
struct lws_jws jws;
struct lws_jwk jwk;
char temp[2048];
int n, ret = -1, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
if (lws_jwk_import(&jwk, NULL, NULL, key, strlen(key)) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
/* converts a compact serialization to jws b64 + decoded maps */
if (lws_jws_compact_decode(ciphertext, strlen(ciphertext),
&jws.map, &jws.map_b64,
temp, &temp_len) != 5) {
lwsl_err("%s: lws_jws_compact_decode failed\n", __func__);
goto bail1;
}
n = lws_jwe_auth_and_decrypt(&jose, &jws);
lws_jwk_destroy(&jwk);
if (n < 0) {
lwsl_err("%s: lws_jwe_auth_and_decrypt failed\n",
__func__);
goto bail1;
}
/* allowing for trailing padding, confirm the plaintext */
if (jws.map.len[LJWE_CTXT] < strlen(akw_ptext) ||
lws_timingsafe_bcmp(jws.map.buf[LJWE_CTXT], akw_ptext,
strlen(akw_ptext))) {
lwsl_err("%s: plaintext AES decrypt wrong\n", __func__);
lwsl_hexdump_notice(akw_ptext, strlen(akw_ptext));
lwsl_hexdump_notice(jws.map.buf[LJWE_CTXT],
jws.map.len[LJWE_CTXT]);
goto bail1;
}
ret = 0;
bail1:
lws_jwk_destroy(&jwk);
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest %s failed +++++++++++++++++++\n",
__func__, test_name);
else
lwsl_notice("%s: selftest %s OK\n", __func__, test_name);
return ret;
}
static int
test_akw_encrypt(struct lws_context *context, const char *test_name,
const char *alg, const char *enc,
const char *ciphertext, const char *key,
char *compact, int compact_len)
{
struct lws_jose jose;
struct lws_jws jws;
struct lws_jwk jwk;
char temp[4096];
int ret = -1, n, temp_len = sizeof(temp);
lws_jose_init(&jose);
lws_jws_init(&jws, &jwk, context);
if (lws_jwk_import(&jwk, NULL, NULL, key, strlen(key)) < 0) {
lwsl_notice("%s: Failed to decode JWK test key\n", __func__);
goto bail;
}
if (lws_gencrypto_jwe_alg_to_definition(alg, &jose.alg)) {
lwsl_err("Unknown cipher alg %s\n", alg);
goto bail1;
}
if (lws_gencrypto_jwe_enc_to_definition(enc, &jose.enc_alg)) {
lwsl_err("Unknown payload enc alg %s\n", enc);
goto bail1;
}
/* we require a JOSE-formatted header to do the encryption */
if (temp_len < 256)
goto bail1;
jws.map.buf[LJWS_JOSE] = temp;
jws.map.len[LJWS_JOSE] = lws_snprintf(temp, temp_len,
"{\"alg\":\"%s\", \"enc\":\"%s\"}", alg, enc);
temp_len -= jws.map.len[LJWS_JOSE];
/*
* dup the plaintext into the ciphertext element, it will be
* encrypted in-place to a ciphertext of the same length
*/
if (lws_jws_dup_element(&jws.map, LJWE_CTXT,
lws_concat_temp(temp, temp_len), &temp_len,
akw_ptext, strlen(akw_ptext), 0)) {
lwsl_notice("%s: Not enough temp space for ptext\n", __func__);
goto bail;
}
/* CEK size is determined by hash / hmac size */
n = lws_gencrypto_bits_to_bytes(jose.enc_alg->keybits_fixed);
if (lws_jws_randomize_element(context, &jws.map, LJWE_EKEY,
lws_concat_temp(temp, temp_len),
&temp_len, n,
LWS_JWE_LIMIT_KEY_ELEMENT_BYTES)) {
lwsl_err("Problem getting random\n");
goto bail1;
}
n = lws_jwe_encrypt(&jose, &jws, lws_concat_temp(temp, temp_len),
&temp_len);
if (n < 0) {
lwsl_err("%s: lws_jwe_encrypt failed\n", __func__);
goto bail1;
}
n = lws_jwe_write_compact(&jose, &jws, compact, compact_len);
if (n < 0) {
lwsl_err("%s: lws_jwe_write_compact failed: %d\n",
__func__, n);
goto bail1;
}
ret = 0;
bail1:
lws_jwk_destroy(&jwk);
bail:
lws_jws_destroy(&jws);
lws_jose_destroy(&jose);
if (ret)
lwsl_err("%s: selftest %s failed +++++++++++++++++++\n",
__func__, test_name);
else
lwsl_notice("%s: selftest %s OK\n", __func__, test_name);
return ret;
}
#if 0
static char *complete =
"{"
"\"protected\":"
"\"eyJlbmMiOiJBMTI4Q0JDLUhTMjU2In0\","
"\"unprotected\":"
"{\"jku\":\"https://server.example.com/keys.jwks\"},"
"\"recipients\":["
"{\"header\":"
"{\"alg\":\"RSA1_5\",\"kid\":\"2011-04-29\"},"
"\"encrypted_key\":"
"\"UGhIOguC7IuEvf_NPVaXsGMoLOmwvc1GyqlIKOK1nN94nHPoltGRhWhw7Zx0-"
"kFm1NJn8LE9XShH59_i8J0PH5ZZyNfGy2xGdULU7sHNF6Gp2vPLgNZ__deLKx"
"GHZ7PcHALUzoOegEI-8E66jX2E4zyJKx-YxzZIItRzC5hlRirb6Y5Cl_p-ko3"
"YvkkysZIFNPccxRU7qve1WYPxqbb2Yw8kZqa2rMWI5ng8OtvzlV7elprCbuPh"
"cCdZ6XDP0_F8rkXds2vE4X-ncOIM8hAYHHi29NX0mcKiRaD0-D-ljQTP-cFPg"
"wCp6X-nZZd9OHBv-B3oWh2TbqmScqXMR4gp_A\"},"
"{\"header\":"
"{\"alg\":\"A128KW\",\"kid\":\"7\"},"
"\"encrypted_key\":"
"\"6KB707dM9YTIgHtLvtgWQ8mKwboJW3of9locizkDTHzBC2IlrT1oOQ\"}],"
"\"iv\":"
"\"AxY8DCtDaGlsbGljb3RoZQ\","
"\"ciphertext\":"
"\"KDlTtXchhZTGufMYmOYGS4HffxPSUrfmqCHXaI9wOGY\","
"\"tag\":"
"\"Mz-VPPyU4RlcuYv1IwIvzw\""
"}\""
;
#endif
int
test_jwe(struct lws_context *context)
{
char compact[4096];
int n = 0;
n |= test_jwe_a1(context);
n |= test_jwe_a2(context);
n |= test_jwe_ra_ptext_1024(context, (char *)lws_jwe_ex_a2_jwk_json,
strlen((char *)lws_jwe_ex_a2_jwk_json));
n |= test_jwe_r256a192_ptext(context, (char *)lws_jwe_ex_a2_jwk_json,
strlen((char *)lws_jwe_ex_a2_jwk_json));
n |= test_jwe_r256a256_ptext(context, (char *)lws_jwe_ex_a2_jwk_json,
strlen((char *)lws_jwe_ex_a2_jwk_json));
n |= test_jwe_ra_ptext_1024(context, (char *)rsa_key_2048,
strlen((char *)rsa_key_2048));
n |= test_jwe_r256a192_ptext(context, (char *)rsa_key_2048,
strlen((char *)rsa_key_2048));
n |= test_jwe_r256a256_ptext(context, (char *)rsa_key_2048,
strlen((char *)rsa_key_2048));
n |= test_jwe_ra_ptext_1024(context, (char *)rsa_key_4096,
strlen((char *)rsa_key_4096));
n |= test_jwe_r256a192_ptext(context, (char *)rsa_key_4096,
strlen((char *)rsa_key_4096));
n |= test_jwe_r256a256_ptext(context, (char *)rsa_key_4096,
strlen((char *)rsa_key_4096));
n |= test_jwe_ra_ptext_1024(context, (char *)rsa_key_4096_no_optional,
strlen((char *)rsa_key_4096_no_optional));
n |= test_jwe_r256a192_ptext(context, (char *)rsa_key_4096_no_optional,
strlen((char *)rsa_key_4096_no_optional));
n |= test_jwe_r256a256_ptext(context, (char *)rsa_key_4096_no_optional,
strlen((char *)rsa_key_4096_no_optional));
/* AESKW decrypt all variations */
n |= test_akw_decrypt(context, "d-a128kw_128", akw_ct_128_128, akw_key_128);
n |= test_akw_decrypt(context, "d-a128kw_192", akw_ct_128_192, akw_key_128);
n |= test_akw_decrypt(context, "d-a128kw_256", akw_ct_128_256, akw_key_128);
n |= test_akw_decrypt(context, "d-a192kw_128", akw_ct_192_128, akw_key_192);
n |= test_akw_decrypt(context, "d-a192kw_192", akw_ct_192_192, akw_key_192);
n |= test_akw_decrypt(context, "d-a192kw_256", akw_ct_192_256, akw_key_192);
n |= test_akw_decrypt(context, "d-a256kw_128", akw_ct_256_128, akw_key_256);
n |= test_akw_decrypt(context, "d-a256kw_192", akw_ct_256_192, akw_key_256);
n |= test_akw_decrypt(context, "d-a256kw_256", akw_ct_256_256, akw_key_256);
/* AESKW encrypt then confirm decrypt */
if (!test_akw_encrypt(context, "ed-128kw_128", "A128KW", "A128CBC-HS256",
akw_ptext, akw_key_128, compact, sizeof(compact)))
n |= test_akw_decrypt(context, "ed-128kw_128", compact, akw_key_128);
else
n = -1;
if (!test_akw_encrypt(context, "ed-128kw_192", "A128KW", "A192CBC-HS384",
akw_ptext, akw_key_128, compact, sizeof(compact)))
n |= test_akw_decrypt(context, "ed-128kw_192", compact, akw_key_128);
else
n = -1;
if (!test_akw_encrypt(context, "ed-128kw_256", "A128KW", "A256CBC-HS512",
akw_ptext, akw_key_128, compact, sizeof(compact)))
n |= test_akw_decrypt(context, "ed-128kw_256", compact, akw_key_128);
else
n = -1;
if (!test_akw_encrypt(context, "ed-192kw_128", "A192KW", "A128CBC-HS256",
akw_ptext, akw_key_192, compact, sizeof(compact)))
n |= test_akw_decrypt(context, "ed-192kw_128", compact, akw_key_192);
else
n = -1;
if (!test_akw_encrypt(context, "ed-192kw_192", "A192KW", "A192CBC-HS384",
akw_ptext, akw_key_192, compact, sizeof(compact)))
n |= test_akw_decrypt(context, "ed-192kw_192", compact, akw_key_192);
else
n = -1;
if (!test_akw_encrypt(context, "ed-192kw_256", "A192KW", "A256CBC-HS512",
akw_ptext, akw_key_192, compact, sizeof(compact)))
n |= test_akw_decrypt(context, "ed-192kw_256", compact, akw_key_192);
else
n = -1;
if (!test_akw_encrypt(context, "ed-256kw_128", "A256KW", "A128CBC-HS256",
akw_ptext, akw_key_256, compact, sizeof(compact)))
n |= test_akw_decrypt(context, "ed-256kw_128", compact, akw_key_256);
else
n = -1;
if (!test_akw_encrypt(context, "ed-256kw_192", "A256KW", "A192CBC-HS384",
akw_ptext, akw_key_256, compact, sizeof(compact)))
n |= test_akw_decrypt(context, "ed-256kw_192", compact, akw_key_256);
else
n = -1;
if (!test_akw_encrypt(context, "ed-256kw_256", "A256KW", "A256CBC-HS512",
akw_ptext, akw_key_256, compact, sizeof(compact)))
n |= test_akw_decrypt(context, "ed-256kw_256", compact, akw_key_256);
else
n = -1;
n |= test_jwe_r256a128_jwe_openssl(context);
n |= test_jwe_r256a128_jwe_mbedtls(context);
n |= test_jwe_a3(context);
n |= test_jwa_b2(context);
n |= test_jwa_b3(context);
n |= test_jwa_c(context);
// n |= test_jwe_json_complete(context);
return n;
}
Reference in a new issue View git blame Copy permalink