public void TestValidateMacTag()
{
JPakePrimeOrderGroup pg1 = JPakePrimeOrderGroups.SUN_JCE_1024;
SecureRandom random = new SecureRandom();
IDigest digest = new Sha256Digest();
BigInteger x1 = JPakeUtilities.GenerateX1(pg1.Q, random);
BigInteger x2 = JPakeUtilities.GenerateX2(pg1.Q, random);
BigInteger x3 = JPakeUtilities.GenerateX1(pg1.Q, random);
BigInteger x4 = JPakeUtilities.GenerateX2(pg1.Q, random);
BigInteger gx1 = JPakeUtilities.CalculateGx(pg1.P, pg1.G, x1);
BigInteger gx2 = JPakeUtilities.CalculateGx(pg1.P, pg1.G, x2);
BigInteger gx3 = JPakeUtilities.CalculateGx(pg1.P, pg1.G, x3);
BigInteger gx4 = JPakeUtilities.CalculateGx(pg1.P, pg1.G, x4);
BigInteger gB = JPakeUtilities.CalculateGA(pg1.P, gx3, gx1, gx2);
BigInteger s = JPakeUtilities.CalculateS("password".ToCharArray());
BigInteger xs = JPakeUtilities.CalculateX2s(pg1.Q, x4, s);
BigInteger B = JPakeUtilities.CalculateA(pg1.P, pg1.Q, gB, xs);
BigInteger keyingMaterial = JPakeUtilities.CalculateKeyingMaterial(pg1.P, pg1.Q, gx4, x2, s, B);
BigInteger macTag = JPakeUtilities.CalculateMacTag("participantId", "partnerParticipantId", gx1, gx2, gx3, gx4, keyingMaterial, digest);
// should succeed
JPakeUtilities.ValidateMacTag("partnerParticipantId", "participantId", gx3, gx4, gx1, gx2, keyingMaterial, digest, macTag);
// validating own macTag (as opposed to the other party's mactag)
try
{
JPakeUtilities.ValidateMacTag("participantId", "partnerParticipantId", gx1, gx2, gx3, gx4, keyingMaterial, digest, macTag);
Fail("failed to throw exception on validating own macTag (calculated partner macTag)");
}
catch (CryptoException)
{
// expected
}
// participant ids switched
try
{
JPakeUtilities.ValidateMacTag("participantId", "partnerParticipantId", gx3, gx4, gx1, gx2, keyingMaterial, digest, macTag);
Fail("failed to throw exception on validating own macTag (calculated partner macTag");
}
catch (CryptoException)
{
// expected
}
}
public JPakeParticipant(string participantId, char[] password, JPakePrimeOrderGroup group, IDigest digest, SecureRandom random)
{
JPakeUtilities.ValidateNotNull(participantId, "participantId");
JPakeUtilities.ValidateNotNull(password, "password");
JPakeUtilities.ValidateNotNull(group, "p");
JPakeUtilities.ValidateNotNull(digest, "digest");
JPakeUtilities.ValidateNotNull(random, "random");
if (password.Length == 0)
{
throw new ArgumentException("Password must not be empty.");
}
this.participantId = participantId;
this.password = new char[password.Length];
Array.Copy(password, this.password, password.Length);
p = group.P;
q = group.Q;
g = group.G;
this.digest = digest;
this.random = random;
state = STATE_INITIALIZED;
}
public void TestValidateZeroKnowledgeProof()
{
JPakePrimeOrderGroup pg1 = JPakePrimeOrderGroups.SUN_JCE_1024;
SecureRandom random = new SecureRandom();
IDigest digest1 = new Sha256Digest();
BigInteger x1 = JPakeUtilities.GenerateX1(pg1.Q, random);
BigInteger gx1 = JPakeUtilities.CalculateGx(pg1.P, pg1.G, x1);
string participantId1 = "participant1";
BigInteger[] zkp1 = JPakeUtilities.CalculateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, gx1, x1, participantId1, digest1, random);
// should succeed
JPakeUtilities.ValidateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, gx1, zkp1, participantId1, digest1);
// wrong group
JPakePrimeOrderGroup pg2 = JPakePrimeOrderGroups.NIST_3072;
try
{
JPakeUtilities.ValidateZeroKnowledgeProof(pg2.P, pg2.Q, pg2.G, gx1, zkp1, participantId1, digest1);
Fail("failed to throw exception on wrong prime order group");
}
catch (CryptoException)
{
// expected
}
// wrong digest
IDigest digest2 = new Sha1Digest();
try
{
JPakeUtilities.ValidateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, gx1, zkp1, participantId1, digest2);
Fail("failed to throw exception on wrong digest");
}
catch (CryptoException)
{
// expected
}
// wrong participant
string participantId2 = "participant2";
try
{
JPakeUtilities.ValidateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, gx1, zkp1, participantId2, digest1);
Fail("failed to throw exception on wrong participant");
}
catch (CryptoException)
{
// expected
}
// wrong gx
BigInteger x2 = JPakeUtilities.GenerateX2(pg1.Q, random);
BigInteger gx2 = JPakeUtilities.CalculateGx(pg1.P, pg1.G, x2);
try
{
JPakeUtilities.ValidateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, gx2, zkp1, participantId1, digest1);
Fail("failed to throw exception on wrong gx");
}
catch (CryptoException)
{
// expected
}
// wrong zkp
BigInteger[] zkp2 = JPakeUtilities.CalculateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, gx2, x2, participantId1, digest1, random);
try
{
JPakeUtilities.ValidateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, gx1, zkp2, participantId1, digest1);
Fail("failed to throw exception on wrong zero knowledge proof");
}
catch (CryptoException)
{
// expected
}
// gx <= 0
try
{
JPakeUtilities.ValidateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, BigInteger.Zero, zkp1, participantId1, digest1);
Fail("failed to throw exception on g^x <= 0");
}
catch (CryptoException)
{
// expected
}
// gx >= p
try
{
JPakeUtilities.ValidateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, pg1.P, zkp1, participantId1, digest1);
Fail("failed to throw exception on g^x >= p");
}
catch (CryptoException)
{
// expected
}
// gx mod q == 1
try
{
JPakeUtilities.ValidateZeroKnowledgeProof(pg1.P, pg1.Q, pg1.G, pg1.Q.Add(BigInteger.One), zkp1, participantId1, digest1);
Fail("failed to throw exception on g^x mod q == 1");
}
catch (CryptoException)
{
// expected
}
}
public JPakeParticipant(string participantId, char[] password, JPakePrimeOrderGroup group)
: this(participantId, password, group, new Sha256Digest(), new SecureRandom())
{
}
public void TestConstruction()
{
JPakePrimeOrderGroup group = JPakePrimeOrderGroups.SUN_JCE_1024;
SecureRandom random = new SecureRandom();
IDigest digest = new Sha256Digest();
string participantId = "participantId";
char[] password = "******".ToCharArray();
// should succeed
new JPakeParticipant(participantId, password, group, digest, random);
// null participantId
try
{
new JPakeParticipant(null, password, group, digest, random);
Fail("failed to throw exception on null participantId");
}
catch (ArgumentNullException)
{
// expected
}
// null password
try
{
new JPakeParticipant(participantId, null, group, digest, random);
Fail("failed to throw exception on null password");
}
catch (ArgumentNullException)
{
// expected
}
// empty password
try
{
new JPakeParticipant(participantId, "".ToCharArray(), group, digest, random);
Fail("failed to throw exception on empty password");
}
catch (ArgumentException)
{
// expected
}
// null group
try
{
new JPakeParticipant(participantId, password, null, digest, random);
Fail("failed to throw exception on null group");
}
catch (ArgumentNullException)
{
// expected
}
// null digest
try
{
new JPakeParticipant(participantId, password, group, null, random);
Fail("failed to throw exception on null digest");
}
catch (ArgumentNullException)
{
// expected
}
// null random
try
{
new JPakeParticipant(participantId, password, group, digest, null);
Fail("failed to throw exception on null random");
}
catch (ArgumentNullException)
{
// expected
}
}
