1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
|
// Flags: --expose-internals --no-warnings
'use strict';
const common = require('../common');
if (!common.hasCrypto)
common.skip('missing crypto');
const assert = require('assert');
const { subtle } = require('crypto').webcrypto;
const { internalBinding } = require('internal/test/binding');
// This is only a partial test. The WebCrypto Web Platform Tests
// will provide much greater coverage.
// Test ECDH bit derivation
{
async function test(namedCurve) {
const [alice, bob] = await Promise.all([
subtle.generateKey({ name: 'ECDH', namedCurve }, true, ['deriveBits']),
subtle.generateKey({ name: 'ECDH', namedCurve }, true, ['deriveBits'])
]);
const [secret1, secret2] = await Promise.all([
subtle.deriveBits({
name: 'ECDH', namedCurve, public: alice.publicKey
}, bob.privateKey, 128),
subtle.deriveBits({
name: 'ECDH', namedCurve, public: bob.publicKey
}, alice.privateKey, 128)
]);
assert.deepStrictEqual(secret1, secret2);
}
test('P-521').then(common.mustCall());
}
// Test HKDF bit derivation
{
async function test(pass, info, salt, hash, length, expected) {
const ec = new TextEncoder();
const key = await subtle.importKey(
'raw',
ec.encode(pass),
{ name: 'HKDF', hash },
false, ['deriveBits']);
const secret = await subtle.deriveBits({
name: 'HKDF',
hash,
salt: ec.encode(salt),
info: ec.encode(info)
}, key, length);
assert.strictEqual(Buffer.from(secret).toString('hex'), expected);
}
const kTests = [
['hello', 'there', 'my friend', 'SHA-256', 512,
'14d93b0ccd99d4f2cbd9fbfe9c830b5b8a43e3e45e329' +
'41ef21bdeb0fa87b6b6bfa5c54466aa5bf76cdc2685fb' +
'a4408ea5b94c049fe035649b46f92fdc519374'],
['hello', 'there', 'my friend', 'SHA-384', 128,
'e36cf2cf943d8f3a88adb80f478745c3']
];
const tests = Promise.all(kTests.map((args) => test(...args)));
tests.then(common.mustCall());
}
// Test PBKDF2 bit derivation
{
async function test(pass, salt, iterations, hash, length, expected) {
const ec = new TextEncoder();
const key = await subtle.importKey(
'raw',
ec.encode(pass),
{ name: 'PBKDF2', hash },
false, ['deriveBits']);
const secret = await subtle.deriveBits({
name: 'PBKDF2',
hash,
salt: ec.encode(salt),
iterations,
}, key, length);
assert.strictEqual(Buffer.from(secret).toString('hex'), expected);
}
const kTests = [
['hello', 'there', 10, 'SHA-256', 512,
'f72d1cf4853fffbd16a42751765d11f8dc7939498ee7b7' +
'ce7678b4cb16fad88098110a83e71f4483ce73203f7a64' +
'719d293280f780f9fafdcf46925c5c0588b3'],
['hello', 'there', 5, 'SHA-384', 128,
'201509b012c9cd2fbe7ea938f0c509b3']
];
const tests = Promise.all(kTests.map((args) => test(...args)));
tests.then(common.mustCall());
}
// Test Scrypt bit derivation
if (typeof internalBinding('crypto').ScryptJob === 'function') {
async function test(pass, salt, length, expected) {
const ec = new TextEncoder();
const key = await subtle.importKey(
'raw',
ec.encode(pass),
{ name: 'NODE-SCRYPT' },
false, ['deriveBits']);
const secret = await subtle.deriveBits({
name: 'NODE-SCRYPT',
salt: ec.encode(salt),
}, key, length);
assert.strictEqual(Buffer.from(secret).toString('hex'), expected);
}
const kTests = [
['hello', 'there', 512,
'30ddda6feabaac788eb81cc38f496cd5d9a165d320c537ea05331fe720db1061b3a27' +
'b91a8428e49d44078c1fa395cb1c6db336ba44ccb80faa6d74918769374'],
['hello', 'there', 128,
'30ddda6feabaac788eb81cc38f496cd5']
];
const tests = Promise.all(kTests.map((args) => test(...args)));
tests.then(common.mustCall());
}
|
