1/*
2 * Copyright (c) 2014, Oracle and/or its affiliates. All rights reserved.
3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4 *
5 * This code is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License version 2 only, as
7 * published by the Free Software Foundation.
8 *
9 * This code is distributed in the hope that it will be useful, but WITHOUT
10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
12 * version 2 for more details (a copy is included in the LICENSE file that
13 * accompanied this code).
14 *
15 * You should have received a copy of the GNU General Public License version
16 * 2 along with this work; if not, write to the Free Software Foundation,
17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
18 *
19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
20 * or visit www.oracle.com if you need additional information or have any
21 * questions.
22 */
23
24import java.security.InvalidAlgorithmParameterException;
25import java.security.InvalidKeyException;
26import java.security.NoSuchAlgorithmException;
27import java.security.NoSuchProviderException;
28import java.security.spec.AlgorithmParameterSpec;
29import java.util.Random;
30import javax.crypto.BadPaddingException;
31import javax.crypto.Cipher;
32import javax.crypto.IllegalBlockSizeException;
33import javax.crypto.KeyGenerator;
34import javax.crypto.NoSuchPaddingException;
35import javax.crypto.SecretKey;
36import javax.crypto.ShortBufferException;
37import javax.crypto.spec.IvParameterSpec;
38
39/**
40 * @test
41 * @bug 8043836
42 * @summary Test AES ciphers with different modes and padding schemes (ECB mode
43 *          doesn't use IV). The test tries 3 different read methods of
44 *          CipherInputStream.
45 * @key randomness
46 */
47public class Padding {
48
49    private static final String ALGORITHM = "AES";
50    private static final String PROVIDER = "SunJCE";
51    private static final String[] MODES = { "ECb", "CbC", "PCBC", "OFB",
52        "OFB150", "cFB", "CFB7", "cFB8", "cFB16", "cFB24", "cFB32",
53        "Cfb40", "cfB48", "cfB56", "cfB64", "cfB72", "cfB80", "cfB88",
54        "cfB96", "cfb104", "cfB112", "cfB120", "OFB8", "OFB16", "OFB24",
55        "OFB32", "OFB40", "OFB48", "OFB56", "OFB64", "OFB72", "OFB80",
56        "OFB88", "OFB96", "OFB104", "OFB112", "OFB120", "GCM" };
57    private static final String PADDING = "PKCS5Padding";
58    private static final int KEY_LENGTH = 128;
59
60    public static void main(String argv[]) throws Exception {
61        Padding test = new Padding();
62        for (String mode : MODES) {
63            test.runTest(ALGORITHM, mode, PADDING);
64        }
65    }
66
67    public void runTest(String algo, String mo, String pad) throws Exception {
68        Cipher ci = null;
69        byte[] iv = null;
70        AlgorithmParameterSpec aps = null;
71        SecretKey key = null;
72        try {
73            Random rdm = new Random();
74            byte[] plainText;
75
76            ci = Cipher.getInstance(algo + "/" + mo + "/" + pad, PROVIDER);
77            KeyGenerator kg = KeyGenerator.getInstance(algo, PROVIDER);
78            kg.init(KEY_LENGTH);
79            key = kg.generateKey();
80
81            for (int i = 0; i < 15; i++) {
82                plainText = new byte[1600 + i + 1];
83                rdm.nextBytes(plainText);
84
85                if (!mo.equalsIgnoreCase("GCM")) {
86                    ci.init(Cipher.ENCRYPT_MODE, key, aps);
87                } else {
88                    ci.init(Cipher.ENCRYPT_MODE, key);
89                }
90
91                byte[] cipherText = new byte[ci.getOutputSize(plainText.length)];
92                int offset = ci.update(plainText, 0, plainText.length,
93                        cipherText, 0);
94                ci.doFinal(cipherText, offset);
95
96                if (!mo.equalsIgnoreCase("ECB")) {
97                    iv = ci.getIV();
98                    aps = new IvParameterSpec(iv);
99                } else {
100                    aps = null;
101                }
102
103                if (!mo.equalsIgnoreCase("GCM")) {
104                    ci.init(Cipher.DECRYPT_MODE, key, aps);
105                } else {
106                    ci.init(Cipher.DECRYPT_MODE, key, ci.getParameters());
107                }
108
109                byte[] recoveredText = new byte[ci.getOutputSize(cipherText.length)];
110                int len = ci.doFinal(cipherText, 0, cipherText.length,
111                        recoveredText);
112                byte[] tmp = new byte[len];
113
114                for (int j = 0; j < len; j++) {
115                    tmp[j] = recoveredText[j];
116                }
117
118                if (!java.util.Arrays.equals(plainText, tmp)) {
119                    System.out.println("Original: ");
120                    dumpBytes(plainText);
121                    System.out.println("Recovered: ");
122                    dumpBytes(tmp);
123                    throw new RuntimeException(
124                            "Original text is not equal with recovered text, with mode:"
125                                    + mo);
126                }
127            }
128        } catch (NoSuchAlgorithmException e) {
129            //CFB7 and OFB150 are for negative testing
130            if (!mo.equalsIgnoreCase("CFB7") && !mo.equalsIgnoreCase("OFB150")) {
131                System.out
132                .println("Unexpected NoSuchAlgorithmException with mode: "
133                        + mo);
134                throw new RuntimeException("Test failed!");
135            }
136        } catch ( NoSuchProviderException | NoSuchPaddingException
137                | InvalidKeyException | InvalidAlgorithmParameterException
138                | ShortBufferException | IllegalBlockSizeException
139                | BadPaddingException e) {
140            System.out.println("Test failed!");
141            throw e;
142        }
143    }
144
145    private void dumpBytes(byte[] bytes) {
146        for (byte b : bytes) {
147            System.out.print(Integer.toHexString(b));
148        }
149
150        System.out.println();
151    }
152}
153