added some files
This commit is contained in:
1 parent
112b062571
commit
4897e8d307
7 files changed
+519
No files matched your search
@@ -0,0 +1,67 @@
|
||||
package encrypter
|
||||
|
||||
import (
|
||||
"crypto/aes"
|
||||
"crypto/cipher"
|
||||
"crypto/rand"
|
||||
"io"
|
||||
)
|
||||
|
||||
type AESOFBEncrypter struct {
|
||||
randomReader io.Reader
|
||||
iv []byte
|
||||
key []byte
|
||||
}
|
||||
|
||||
func NewAESOFBEncrypter() *AESOFBEncrypter {
|
||||
ret := new(AESOFBEncrypter)
|
||||
ret.randomReader = rand.Reader
|
||||
return ret
|
||||
}
|
||||
|
||||
func (this *AESOFBEncrypter) createSymetricKey(size int) ([]byte, error) {
|
||||
key := make([]byte, size)
|
||||
_, err := io.ReadFull(this.randomReader, key)
|
||||
return key, err
|
||||
}
|
||||
|
||||
func (this *AESOFBEncrypter) getCypherBlock() (cipher.Block, error) {
|
||||
var err error
|
||||
this.key, err = this.createSymetricKey(32)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return aes.NewCipher(this.key)
|
||||
}
|
||||
|
||||
func (this *AESOFBEncrypter) createIV(block cipher.Block) (iv []byte, err error) {
|
||||
return this.createSymetricKey(block.BlockSize())
|
||||
}
|
||||
|
||||
func (this *AESOFBEncrypter) createStreamMode(block cipher.Block) (stream cipher.Stream, err error) {
|
||||
this.iv, err = this.createIV(block)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return cipher.NewOFB(block, this.iv), err
|
||||
}
|
||||
|
||||
func (this *AESOFBEncrypter) createFileHandlerAndCypherBlock() (stream cipher.Stream, err error) {
|
||||
cypherBlock, err := this.getCypherBlock()
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return this.createStreamMode(cypherBlock)
|
||||
}
|
||||
|
||||
func (this *AESOFBEncrypter) EncryptReaderToWriter(clearInput io.Reader, encryptedOutput io.Writer) error {
|
||||
stream, err := this.createFileHandlerAndCypherBlock()
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
writer := &cipher.StreamWriter{S: stream, W: encryptedOutput}
|
||||
if _, err := io.Copy(writer, clearInput); err != nil {
|
||||
return err
|
||||
}
|
||||
return nil
|
||||
}
|
||||
@@ -0,0 +1,155 @@
|
||||
package encrypter
|
||||
|
||||
import (
|
||||
"crypto/aes"
|
||||
"crypto/cipher"
|
||||
"crypto/rand"
|
||||
. "github.com/didiercrunch/ecrypto/helper"
|
||||
"reflect"
|
||||
"strings"
|
||||
"testing"
|
||||
)
|
||||
|
||||
func NewMockAESOFBEncrypter() *AESOFBEncrypter {
|
||||
ret := new(AESOFBEncrypter)
|
||||
ret.randomReader = NewMockRandomReader()
|
||||
return ret
|
||||
}
|
||||
|
||||
func TestCreateSymetricKey(t *testing.T) {
|
||||
c := NewMockAESOFBEncrypter()
|
||||
key, e := c.createSymetricKey(512)
|
||||
if e != nil {
|
||||
t.Error(e)
|
||||
} else if len(key) != 512 {
|
||||
t.Error("bad key lenght")
|
||||
} else if !reflect.DeepEqual(key, NewMockRandomReader().GetRandomBytes(512)) {
|
||||
t.Fail()
|
||||
}
|
||||
}
|
||||
|
||||
func TestGetCypherBlock(t *testing.T) {
|
||||
c := NewMockAESOFBEncrypter()
|
||||
if c.key != nil {
|
||||
t.Error("expected nil key at this point")
|
||||
}
|
||||
block, err := c.getCypherBlock()
|
||||
if err != nil {
|
||||
t.Error(err)
|
||||
}
|
||||
if block.BlockSize() != 16 {
|
||||
t.Fail()
|
||||
}
|
||||
src := Range(16)
|
||||
dst := make([]byte, 16)
|
||||
expected := []byte{30, 248, 157, 9, 161, 60, 109, 82, 221, 152, 171, 167, 137,
|
||||
239, 177, 191}
|
||||
expectedKey := []byte{73, 233, 188, 33, 31, 118, 98, 81, 66, 120, 254, 85, 138, 36,
|
||||
118, 80, 38, 83, 169, 57, 27, 61, 103, 122, 37, 164, 185, 40, 112, 66, 1, 50}
|
||||
|
||||
block.Encrypt(dst, src)
|
||||
if !reflect.DeepEqual(dst, expected) {
|
||||
t.Error("bad aes encryption", dst)
|
||||
}
|
||||
if !reflect.DeepEqual(c.key, expectedKey) {
|
||||
t.Error("bad key", c.key)
|
||||
}
|
||||
}
|
||||
|
||||
func TestNewEncrypter(t *testing.T) {
|
||||
c := NewAESOFBEncrypter()
|
||||
if c.randomReader != rand.Reader {
|
||||
t.Fail()
|
||||
}
|
||||
}
|
||||
|
||||
func TestCreateIV(t *testing.T) {
|
||||
m := NewMockAESOFBEncrypter()
|
||||
b, err := aes.NewCipher([]byte("example key 1234"))
|
||||
if err != nil {
|
||||
t.Error(err)
|
||||
return
|
||||
}
|
||||
iv, err := m.createIV(b)
|
||||
if err != nil {
|
||||
t.Error(err)
|
||||
return
|
||||
}
|
||||
expt := NewMockRandomReader().GetRandomBytes(16)
|
||||
if !reflect.DeepEqual(iv, expt) {
|
||||
t.Error("bad iv", iv)
|
||||
}
|
||||
}
|
||||
|
||||
func TestCreateStreamMode(t *testing.T) {
|
||||
m := NewMockAESOFBEncrypter()
|
||||
if m.iv != nil {
|
||||
t.Error("expected nil iv at first")
|
||||
}
|
||||
b, err := aes.NewCipher([]byte("example key 1234"))
|
||||
if err != nil {
|
||||
t.Error(err)
|
||||
return
|
||||
}
|
||||
_, err = m.createStreamMode(b)
|
||||
if err != nil {
|
||||
t.Error(err)
|
||||
return
|
||||
}
|
||||
exptIv := NewMockRandomReader().GetRandomBytes(16)
|
||||
if !reflect.DeepEqual(m.iv, exptIv) {
|
||||
t.Error("bad iv", m.iv, " is not ", exptIv)
|
||||
}
|
||||
}
|
||||
|
||||
func TestCreateFileHandlerAndCypherBlock(t *testing.T) {
|
||||
m := NewMockAESOFBEncrypter()
|
||||
if m.iv != nil {
|
||||
t.Error("expected nil iv at first")
|
||||
}
|
||||
|
||||
_, err := m.createFileHandlerAndCypherBlock()
|
||||
if err != nil {
|
||||
t.Error(err)
|
||||
}
|
||||
if !reflect.DeepEqual(m.key, NewMockRandomReader().GetRandomBytes(32)) {
|
||||
t.Error("bad key", m.key)
|
||||
}
|
||||
if !reflect.DeepEqual(m.iv, NewMockRandomReader().GetRandomBytes(32 + 16)[32:32+16]) {
|
||||
t.Error("bad iv", m.iv)
|
||||
}
|
||||
}
|
||||
|
||||
func TestSimpleEncryptReaderToWriter(t *testing.T) {
|
||||
reader := strings.NewReader("some plain text")
|
||||
writer := NewMockIoWriter()
|
||||
m := NewMockAESOFBEncrypter()
|
||||
if err := m.EncryptReaderToWriter(reader, writer); err != nil {
|
||||
t.Error(err)
|
||||
}
|
||||
}
|
||||
|
||||
func decryptEncryptedTextWithAESAlgorithmAndOFBMode(key, iv, encryptedText []byte) (string, error) {
|
||||
block, err := aes.NewCipher(key)
|
||||
if err != nil {
|
||||
return "", err
|
||||
}
|
||||
stream := cipher.NewOFB(block, iv)
|
||||
ret := make([]byte, len(encryptedText))
|
||||
stream.XORKeyStream(ret, encryptedText)
|
||||
return string(ret), nil
|
||||
}
|
||||
|
||||
func TestEncryptDecrypt(t *testing.T) {
|
||||
reader := strings.NewReader("some plain text")
|
||||
writer := NewMockIoWriter()
|
||||
m := NewMockAESOFBEncrypter()
|
||||
if err := m.EncryptReaderToWriter(reader, writer); err != nil {
|
||||
t.Error(err)
|
||||
}
|
||||
if plaintext2, err := decryptEncryptedTextWithAESAlgorithmAndOFBMode(m.key, m.iv, writer.Bytes()); err != nil {
|
||||
t.Error(err)
|
||||
} else if string(plaintext2) != "some plain text" {
|
||||
t.Error("bad encryption/decryption process")
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,30 @@
|
||||
package encrypter
|
||||
|
||||
import (
|
||||
"crypto"
|
||||
"crypto/rsa"
|
||||
"crypto/sha512"
|
||||
"io"
|
||||
)
|
||||
|
||||
var _ = sha512.New
|
||||
|
||||
type RsaSha512 struct {
|
||||
PrivateKey *rsa.PrivateKey
|
||||
}
|
||||
|
||||
func (this *RsaSha512) hashIOReader(input io.Reader) ([]byte, error) {
|
||||
hashFunction := crypto.SHA512.New()
|
||||
if _, err := io.Copy(hashFunction, input); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return hashFunction.Sum(nil), nil
|
||||
}
|
||||
|
||||
func (this *RsaSha512) SignStream(input io.Reader, rand io.Reader) ([]byte, error) {
|
||||
hashed, err := this.hashIOReader(input)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return rsa.SignPSS(rand, this.PrivateKey, crypto.SHA512, hashed, nil)
|
||||
}
|
||||
@@ -0,0 +1,46 @@
|
||||
package encrypter
|
||||
|
||||
import (
|
||||
"bytes"
|
||||
"crypto"
|
||||
"crypto/rsa"
|
||||
"crypto/sha512"
|
||||
"fmt"
|
||||
"github.com/didiercrunch/ecrypto/helper"
|
||||
"testing"
|
||||
)
|
||||
|
||||
func TestHashIOReader(t *testing.T) {
|
||||
rs := new(RsaSha512)
|
||||
expt := "fabbbe22180f1f137cfdc9556d2570e775d1ae02a597ded43a72a40f9b485d500043b7b" +
|
||||
"e128fb9fcd982b83159a0d99aa855a9e7cc4240c00dc01a9bdf8218d7"
|
||||
input := bytes.NewBufferString("C is as portable as Stonehedge!!")
|
||||
if hashValue, err := rs.hashIOReader(input); err != nil {
|
||||
t.Error(err)
|
||||
} else if fmt.Sprintf("%x", hashValue) != expt {
|
||||
t.Errorf("Hash is not the same \n expected : %s\n"+
|
||||
"results : %x ", expt, hashValue)
|
||||
}
|
||||
}
|
||||
|
||||
func TestSignStream(t *testing.T) {
|
||||
toSlice := func(data [sha512.Size]byte) []byte {
|
||||
ret := make([]byte, sha512.Size)
|
||||
for i, datum := range data {
|
||||
ret[i] = datum
|
||||
}
|
||||
return ret
|
||||
}
|
||||
privateKey := helper.GetRSAPrivateKey(1024)
|
||||
rs := &RsaSha512{privateKey}
|
||||
input := bytes.NewBufferString("something to sign")
|
||||
signature, err := rs.SignStream(input, helper.NewMockRandomReader())
|
||||
if err != nil {
|
||||
t.Error(err)
|
||||
return
|
||||
}
|
||||
hashed := toSlice(sha512.Sum512([]byte("something to sign")))
|
||||
if err := rsa.VerifyPSS(&privateKey.PublicKey, crypto.SHA512, hashed, signature, nil); err != nil {
|
||||
t.Error(err)
|
||||
}
|
||||
}
|
||||
Reference in new issue
Block a user