public void TestDecryptPrimaryActive(String subDir)
{
var subPath = Util.TestDataPath(TEST_DATA, subDir);
using (var crypter = new Crypter(subPath))
{
var activeCiphertext = (WebBase64) File.ReadAllLines(Path.Combine(subPath, "1.out")).First();
var primaryCiphertext = (WebBase64) File.ReadAllLines(Path.Combine(subPath, "2.out")).First();
var activeDecrypted = crypter.Decrypt(activeCiphertext);
Expect(activeDecrypted, Is.EqualTo(morePlaintext));
var primaryDecrypted = crypter.Decrypt(primaryCiphertext);
Expect(primaryDecrypted, Is.EqualTo(plaintext));
}
}
public void TestCryptImport([Values("rsa")] String keyType, [Values("pem", "der")] String fileFormat)
{
using (
var keyset = ImportedKeySet.Import.X509Certificate(KeyPurpose.Encrypt,
Util.TestDataPath(TEST_DATA,
keyType + "-crypt-crt." +
fileFormat)))
using (var encrypter = new Encrypter(keyset))
using (var crypter = new Crypter(Util.TestDataPath(TEST_DATA, "rsa-crypt")))
{
var ciphertext = encrypter.Encrypt(input);
var plaintext = crypter.Decrypt(ciphertext);
Expect(plaintext, Is.EqualTo(input));
}
}
public void TestCryptImport(
[Values("rsa")] string keyType,
[Values("pem", "der")] string format)
{
using (var keystream = HelperOpenPkcsStream(keyType, format, "crypt"))
using (
var keyset = ImportedKeySet.Import.PkcsKey(KeyPurpose.DecryptAndEncrypt, keystream, () => "pass"
/* hard coding for test only!!!!*/))
using (var crypter = new Crypter(keyset))
using (var encrypter = new Encrypter(Util.TestDataPath(TEST_DATA, "rsa-crypt")))
{
var ciphertext = encrypter.Encrypt(input);
var plaintext = crypter.Decrypt(ciphertext);
Expect(plaintext, Is.EqualTo(input));
}
}
public void AESTest(
[Values(2048)] int datasize,
[Values(128, 192, 256)] int keysize,
[Values("AES", "STDNET40_AES", "C#_AES_AEAD")] string alg
)
{
KeyType type = alg;
var key = Key.Generate(type, keysize);
using (var ks = new ImportedKeySet(key, KeyPurpose.DecryptAndEncrypt, "Test"))
using (var crypter = new Crypter(ks))
{
var watchEncrypt = new System.Diagnostics.Stopwatch();
var watchDecrypt = new System.Diagnostics.Stopwatch();
for (int i = 0; i < iterations; i++)
{
var input = new byte[datasize];
watchEncrypt.Start();
var output = crypter.Encrypt(input);
watchEncrypt.Stop();
watchDecrypt.Start();
var result = crypter.Decrypt(output);
watchDecrypt.Stop();
Expect(result, Is.EqualTo(input));
}
Console.WriteLine(String.Format("{3}-{4},{2}\t\tEncryption Total:{0},\tThroughput:{1:#,##0.00} MB/S",
watchEncrypt.Elapsed,
(datasize*iterations*1000m)/
(1024m*1024m*watchEncrypt.ElapsedMilliseconds),
datasize,
alg,
keysize
));
Console.WriteLine(String.Format("{3}-{4},{2}\t\tDecryption Total:{0},\tThroughput:{1:#,##0.00} MB/S",
watchDecrypt.Elapsed,
(datasize*iterations*1000m)/
(1024m*1024m*watchDecrypt.ElapsedMilliseconds),
datasize,
alg,
keysize
));
}
}
public void TestIncompatibility()
{
var encrypter = new Encrypter(oaepReader);
var ciphertext = encrypter.Encrypt(input);
var crypter = new Crypter(pkcsReader);
Expect(() => crypter.Decrypt(ciphertext), Throws.TypeOf<InvalidCryptoDataException>());
}
public void TestOperateOnPbeKeys()
{
string result;
var pathc = Util.TestDataPath(TEST_DATA, "rsa-pbe");
if (Directory.Exists(pathc))
Directory.Delete(pathc, true);
result = Util.KeyczarTool(create: null, location: pathc, purpose: "crypt", asymmetric: null);
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgCreatedKeySet));
result = Util.KeyczarTool("cartman", "cartman", addkey: null, location: pathc, password: null,
status: "primary");
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgCreatedKey));
var pathi = Path.Combine(pathc, "out.pem");
result = Util.KeyczarTool(
"cartman",
"pass",
"pass",
export: null,
location: pathc,
password: null,
destination: pathi);
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgExportedPem));
result = Util.KeyczarTool("cartman", "pass",
importkey: null,
location: pathc,
status: "primary",
password: null,
importlocation: pathi);
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgImportedNewKey));
var pathp = Path.Combine(pathc, "export");
result = Util.KeyczarTool(
"cartman",
pubkey: null,
location: pathc,
password: null,
destination: pathp
);
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgNewPublicKeySet));
var patho = Path.Combine(pathc, "1.out");
result = Util.KeyczarTool(
"cartman",
usekey: null,
location: pathc,
password: null,
destination: patho,
additionalArgs: new[] {input}
);
using (var pks = new PbeKeySet(pathc, () => "cartman" /*hardcoding because this is a test*/))
using (var crypter = new Crypter(pks))
{
Expect(pks.Metadata.Encrypted, Is.True);
result = crypter.Decrypt((WebBase64) File.ReadAllText(patho));
Expect(result, Is.EqualTo(input));
}
Directory.Delete(pathc, true);
}
public void TestOperateOnCryptedKeys()
{
string result;
var path = Util.TestDataPath(TEST_DATA, "crypting");
var pathc = Util.TestDataPath(TEST_DATA, "rsa-crypted");
if (Directory.Exists(path))
Directory.Delete(path, true);
if (Directory.Exists(pathc))
Directory.Delete(pathc, true);
result = Util.KeyczarTool(create: null, location: path, purpose: "crypt");
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgCreatedKeySet));
result = Util.KeyczarTool(addkey: null, location: path, status: "primary");
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgCreatedKey));
result = Util.KeyczarTool(create: null, location: pathc, purpose: "crypt", asymmetric: null);
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgCreatedKeySet));
result = Util.KeyczarTool(addkey: null, location: pathc, crypter: path, status: "primary");
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgCreatedKey));
var pathi = Path.Combine(pathc, "out.pem");
result = Util.KeyczarTool(
"pass",
"pass",
export: null,
location: pathc,
crypter: path,
destination: pathi);
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgExportedPem));
result = Util.KeyczarTool("pass",
importkey: null,
location: pathc,
status: "primary",
crypter: path,
importlocation: pathi);
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgImportedNewKey));
var pathp = Path.Combine(pathc, "export");
result = Util.KeyczarTool(
pubkey: null,
location: pathc,
crypter: path,
destination: pathp
);
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgNewPublicKeySet));
var patho = Path.Combine(pathc, "1.out");
result = Util.KeyczarTool(
usekey: null,
location: pathc,
crypter: path,
destination: patho,
additionalArgs: new[] {input}
);
using (var kcrypter = new Crypter(path))
{
var eks = new EncryptedKeySet(pathc, kcrypter);
Expect(eks.Metadata.Encrypted, Is.True);
using (var crypter = new Crypter(eks))
{
result = crypter.Decrypt((WebBase64) File.ReadAllText(patho));
Expect(result, Is.EqualTo(input));
}
}
Directory.Delete(path, true);
}
public void TestEncryptCompression(string compress)
{
string result;
var subPath = Util.TestDataPath(TEST_DATA, "compress");
if (Directory.Exists(subPath))
Directory.Delete(subPath, true);
result = Util.KeyczarTool(create: null, location: subPath, purpose: "crypt");
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgCreatedKeySet));
result = Util.KeyczarTool(addkey: null, location: subPath, status: "primary");
Expect(result, Is.StringContaining(KeyczarTool.Localized.MsgCreatedKey));
var ptext = Path.Combine(subPath, "ptext");
File.WriteAllBytes(ptext, bigInput);
var ctext = Path.Combine(subPath, "ctext");
result = Util.KeyczarTool(
usekey: null,
location: subPath,
file: null,
destination: ctext,
compression: compress,
binary: null,
additionalArgs: new[] {ptext}
);
var compression = compress == "zlib" ? CompressionType.Zlib : CompressionType.Gzip;
using (var crypter = new Crypter(subPath) {Compression = compression})
{
using (var write = new MemoryStream())
using (var read = File.OpenRead(ctext))
{
crypter.Decrypt(read, write);
Expect(write.ToArray(), Is.EqualTo(bigInput));
}
Expect(new FileInfo(ctext).Length, Is.LessThan(new FileInfo(ptext).Length));
}
}
public void TestBadCipherText(string subDir, string nestedDir)
{
var subPath = Util.TestDataPath(TEST_DATA, subDir, nestedDir);
using (var crypter = new Crypter(subPath))
{
Expect(() => crypter.Decrypt(new byte[0]), Throws.TypeOf<InvalidCryptoDataException>());
byte[] ciphertext = crypter.Encrypt(inputBytes);
// Munge the key hash
ciphertext[1] ^= 44;
Expect(() => crypter.Decrypt(ciphertext), Throws.TypeOf<InvalidCryptoDataException>());
//restore
ciphertext[1] ^= 44;
// Munge the ciphertext
ciphertext[15] ^= 39;
Expect(() => crypter.Decrypt(ciphertext), Throws.TypeOf<InvalidCryptoDataException>());
}
}
private void HelperDecrypt(Crypter crypter, String subPath)
{
var activeCiphertext = (WebBase64) File.ReadAllLines(Path.Combine(subPath, "1.out")).First();
var primaryCiphertext = (WebBase64) File.ReadAllLines(Path.Combine(subPath, "2.out")).First();
var activeDecrypted = crypter.Decrypt(activeCiphertext);
Expect(activeDecrypted, Is.EqualTo(input));
var primaryDecrypted = crypter.Decrypt(primaryCiphertext);
Expect(primaryDecrypted, Is.EqualTo(input));
}
public void TestShortEncryptAndDecrypt(string subDir, string nestedDir)
{
var subPath = Util.TestDataPath(TEST_DATA, subDir, nestedDir);
using (var crypter = new Crypter(subPath))
{
for (int i = 0; i < 32; i++)
{
var letters = Enumerable.Repeat('a', i).ToArray();
var each = new String(letters);
var ciphertext = crypter.Encrypt(each);
var decrypted = crypter.Decrypt(ciphertext);
Expect(decrypted, Is.EqualTo(each), "Length:" + i);
}
}
}
public void TestRsaCryptWithPublicKey()
{
using (var encrypter = new Encrypter(Util.TestDataPath(TEST_DATA, "rsa.public")))
{
var cipher = encrypter.Encrypt(input);
var subPath = Util.TestDataPath(TEST_DATA, "rsa");
using (var crypter = new Crypter(subPath))
{
var decrypt = crypter.Decrypt(cipher);
Expect(decrypt, Is.EqualTo(input));
}
}
}
public void TestEncryptDecryptCompression(CompressionType compression)
{
var subPath = Util.TestDataPath(TEST_DATA, "aes");
using (var crypter = new Crypter(subPath) {Compression = compression})
{
var cipher = crypter.Encrypt(input);
var decrypt = crypter.Decrypt(cipher);
Expect(decrypt, Is.EqualTo(input));
using (var crypter2 = new Crypter(subPath))
{
var decrypt2 = crypter2.Decrypt(cipher);
Expect(decrypt2, Is.Not.EqualTo(input));
}
var ciphertiny = crypter.Encrypt(bigInput);
//large array of zeros will compress down a lot
Expect(ciphertiny.Length, Is.LessThan(bigInput.Length));
var big = crypter.Decrypt(ciphertiny);
Expect(big, Is.EqualTo(bigInput));
}
}
public void TestEncryptDecrypt(String subDir, string nestedDir)
{
var subPath = Util.TestDataPath(TEST_DATA, subDir, nestedDir);
using (var crypter = new Crypter(subPath))
{
var cipher = crypter.Encrypt(input);
var decrypt = crypter.Decrypt(cipher);
Expect(decrypt, Is.EqualTo(input));
}
}
