1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
#!/usr/bin/env python
"""
Unit tests for M2Crypto.BIO.
Copyright (c) 1999-2003 Ng Pheng Siong. All rights reserved.
Copyright (c) 2006 Open Source Applications Foundation
Author: Heikki Toivonen
"""
import unittest
from M2Crypto import BIO, Rand
from fips import fips_mode
class CipherStreamTestCase(unittest.TestCase):
def try_algo(self, algo):
enc = 1
dec = 0
data = '123456789012345678901234'
# Encrypt.
mem = BIO.MemoryBuffer()
cf = BIO.CipherStream(mem)
cf.set_cipher(algo, 'key', 'iv', 1)
cf.write(data)
cf.flush()
cf.write_close()
cf.close()
xxx = mem.read()
# Decrypt.
mem = BIO.MemoryBuffer(xxx)
cf = BIO.CipherStream(mem)
cf.set_cipher(algo, 'key', 'iv', 0)
cf.write_close()
data2 = cf.read()
cf.close()
assert not cf.readable()
self.assertRaises(IOError, cf.read)
self.assertRaises(IOError, cf.readline)
self.assertRaises(IOError, cf.readlines)
assert data == data2, '%s algorithm cipher test failed' % algo
def test_ciphers(self):
ciphers=[
'des_ede_ecb', 'des_ede_cbc', 'des_ede_cfb', 'des_ede_ofb',
'des_ede3_ecb', 'des_ede3_cbc', 'des_ede3_cfb', 'des_ede3_ofb',
'aes_128_ecb', 'aes_128_cbc', 'aes_128_cfb', 'aes_128_ofb',
'aes_192_ecb', 'aes_192_cbc', 'aes_192_cfb', 'aes_192_ofb',
'aes_256_ecb', 'aes_256_cbc', 'aes_256_cfb', 'aes_256_ofb']
nonfips_ciphers=['bf_ecb', 'bf_cbc', 'bf_cfb', 'bf_ofb',
#'idea_ecb', 'idea_cbc', 'idea_cfb', 'idea_ofb',
'cast5_ecb', 'cast5_cbc', 'cast5_cfb', 'cast5_ofb',
#'rc5_ecb', 'rc5_cbc', 'rc5_cfb', 'rc5_ofb',
'des_ecb', 'des_cbc', 'des_cfb', 'des_ofb',
'rc4', 'rc2_40_cbc']
if not fips_mode: # Forbidden ciphers
ciphers += nonfips_ciphers
for i in ciphers:
self.try_algo(i)
self.assertRaises(ValueError, self.try_algo, 'nosuchalgo4567')
def suite():
suite = unittest.TestSuite()
suite.addTest(unittest.makeSuite(CipherStreamTestCase))
return suite
if __name__ == '__main__':
Rand.load_file('randpool.dat', -1)
unittest.TextTestRunner().run(suite())
Rand.save_file('randpool.dat')
|