1 /*
2 * Copyright (c) 2014, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation.
8 *
9 * This code is distributed in the hope that it will be useful, but WITHOUT
10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
12 * version 2 for more details (a copy is included in the LICENSE file that
13 * accompanied this code).
14 *
15 * You should have received a copy of the GNU General Public License version
16 * 2 along with this work; if not, write to the Free Software Foundation,
17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18 *
19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20 * or visit www.oracle.com if you need additional information or have any
21 * questions.
22 */
23
24 import java.security.InvalidAlgorithmParameterException;
25 import java.security.InvalidKeyException;
26 import java.security.NoSuchAlgorithmException;
27 import java.security.NoSuchProviderException;
28 import java.security.spec.AlgorithmParameterSpec;
29 import java.util.Random;
30 import javax.crypto.BadPaddingException;
31 import javax.crypto.Cipher;
32 import javax.crypto.IllegalBlockSizeException;
33 import javax.crypto.KeyGenerator;
34 import javax.crypto.NoSuchPaddingException;
35 import javax.crypto.SecretKey;
36 import javax.crypto.ShortBufferException;
37 import javax.crypto.spec.IvParameterSpec;
38
39 /**
40 * @test
41 * @bug 8043836
42 * @summary Test AES ciphers with different modes and padding schemes (ECB mode
43 * doesn't use IV).
44 * @author Liwen Wang
45 * @author Parag Salvi
46 */
47 public class TestAESCipher {
48
49 private static final String ALGORITHM = "AES";
50 private static final String PROVIDER = "SunJCE";
51 private static final String[] MODES = { "ECb", "CbC", "CTR", "PCBC", "OFB",
52 "OFB150", "cFB", "CFB7", "cFB8", "cFB16", "cFB24", "cFB32",
53 "Cfb40", "cfB48", "cfB56", "cfB64", "cfB72", "cfB80", "cfB88",
54 "cfB96", "cfb104", "cfB112", "cfB120", "OFB8", "OFB16", "OFB24",
55 "OFB32", "OFB40", "OFB48", "OFB56", "OFB64", "OFB72", "OFB80",
56 "OFB88", "OFB96", "OFB104", "OFB112", "OFB120", "GCM" };
57 private static final String[] PADDING = { "NoPadding", "PKCS5Padding" };
58 private static final int KEY_LENGTH = 128;
59
60 public static void main(String argv[]) throws Exception {
61 TestAESCipher test = new TestAESCipher();
62 for (String mode : MODES) {
63 int padKinds = 1;
64 if (mode.equalsIgnoreCase("ECB") || mode.equalsIgnoreCase("PCBC")
65 || mode.equalsIgnoreCase("CBC")) {
66 padKinds = PADDING.length;
67 }
68
69 for (int k = 0; k < padKinds; k++) {
70 test.runTest(ALGORITHM, mode, PADDING[k]);
71 }
72 }
73 }
74
75 public void runTest(String algo, String mo, String pad) throws Exception {
76 Cipher ci = null;
77 byte[] iv = null;
78 AlgorithmParameterSpec aps = null;
79 SecretKey key = null;
80 try {
81 // Initialization
82 Random rdm = new Random();
83 byte[] plainText = new byte[128];
84 rdm.nextBytes(plainText);
85
86 ci = Cipher.getInstance(algo + "/" + mo + "/" + pad, PROVIDER);
87 KeyGenerator kg = KeyGenerator.getInstance(algo, PROVIDER);
88 kg.init(KEY_LENGTH);
89 key = kg.generateKey();
90
91 // encrypt
92 if (!mo.equalsIgnoreCase("GCM")) {
93 ci.init(Cipher.ENCRYPT_MODE, key, aps);
94 } else {
95 ci.init(Cipher.ENCRYPT_MODE, key);
96 }
97
98 byte[] cipherText = new byte[ci.getOutputSize(plainText.length)];
99 int offset = ci.update(plainText, 0, plainText.length, cipherText,
100 0);
101 ci.doFinal(cipherText, offset);
102
103 if (!mo.equalsIgnoreCase("ECB")) {
104 iv = ci.getIV();
105 aps = new IvParameterSpec(iv);
106 } else {
107 aps = null;
108 }
109
110 if (!mo.equalsIgnoreCase("GCM")) {
111 ci.init(Cipher.DECRYPT_MODE, key, aps);
112 } else {
113 ci.init(Cipher.DECRYPT_MODE, key, ci.getParameters());
114 }
115
116 byte[] recoveredText = new byte[ci.getOutputSize(cipherText.length)];
117 int len = ci.doFinal(cipherText, 0, cipherText.length,
118 recoveredText);
119 byte[] tmp = new byte[len];
120 System.arraycopy(recoveredText, 0, tmp, 0, len);
121
122 // Comparison
123 if (!java.util.Arrays.equals(plainText, tmp)) {
124 System.out.println("Original: ");
125 dumpBytes(plainText);
126 System.out.println("Recovered: ");
127 dumpBytes(tmp);
128 throw new RuntimeException(
129 "Original text is not equal with recovered text, with mode:"
130 + mo);
131 }
132
133 } catch (NoSuchAlgorithmException e) {
134 //CFB7 and OFB150 are for negative testing
135 if (!mo.equalsIgnoreCase("CFB7") && !mo.equalsIgnoreCase("OFB150")) {
136 System.out.println("Unexpected NoSuchAlgorithmException with mode: "
137 + mo);
138 throw new RuntimeException("Test failed!");
139 }
140 } catch ( NoSuchProviderException | NoSuchPaddingException
141 | InvalidKeyException | InvalidAlgorithmParameterException
142 | ShortBufferException | IllegalBlockSizeException
143 | BadPaddingException e) {
144 System.out.println("Test failed!");
145 throw e;
146 }
147 }
148
149 private void dumpBytes(byte[] bytes) {
150 for (byte b : bytes) {
151 System.out.print(Integer.toHexString(b));
152 }
153
154 System.out.println();
155 }
156 }