mirror of
https://github.com/mailscope/kumomta.git
synced 2026-08-22 12:28:16 +00:00
Dario Maiocchi
847cc21e9b
Add CBC and ecb Block mode aes encryption/decryption. To facilitate testing this better, and just to be nicer overall, adjust data-loader's KeySource::key_data variant to support loading raw binary bytes. Co-authored-by: Wez Furlong <wez@wezfurlong.org> Closes: https://github.com/KumoCorp/kumomta/pull/395
94 lines
1.9 KiB
Lua
94 lines
1.9 KiB
Lua
local kumo = require 'kumo'
|
|
local utils = require 'policy-extras.policy_utils'
|
|
|
|
-- a 256-bit (32 bytes) AES key
|
|
local hex_key_256 =
|
|
'2b7e151628aed2a6abf7158809cf4f3c2b7e151628aed2a6abf7158809cf4f3c'
|
|
-- Decode to binary
|
|
local binary_key = kumo.encode.hex_decode(hex_key_256)
|
|
|
|
--------------
|
|
-- Test 1: File-based key (CBC)
|
|
|
|
-- Test messages
|
|
local key_128 = '1234567890abcdef' -- 16 hex chars = 16 ASCII bytes = AES-128 compatible
|
|
local original_message = 'Hello, World!123'
|
|
local second_message = 'second message here!!!'
|
|
|
|
local f = kumo.crypto.aes_encrypt_block('Cbc', original_message, {
|
|
key = {
|
|
key_data = binary_key,
|
|
},
|
|
})
|
|
|
|
local b = kumo.crypto.aes_decrypt_block('Cbc', f, {
|
|
key = {
|
|
key_data = binary_key,
|
|
},
|
|
})
|
|
|
|
utils.assert_eq(b.bytes, original_message)
|
|
|
|
-- Test 2: Hex key (ECB)
|
|
|
|
local f2 = kumo.crypto.aes_encrypt_block('Ecb', second_message, {
|
|
key = {
|
|
key_data = key_128,
|
|
},
|
|
})
|
|
|
|
local dr = kumo.crypto.aes_decrypt_block('Ecb', f2, {
|
|
key = {
|
|
key_data = key_128,
|
|
},
|
|
})
|
|
|
|
utils.assert_eq(dr.bytes, second_message)
|
|
|
|
if false then
|
|
print(string.format('Hex: %s', dr.hex))
|
|
print(string.format('Base64: %s', dr.base64))
|
|
print(string.format('Base64 (no pad): %s', dr.base64_nopad))
|
|
print(string.format('Bytes length: %s', #dr.bytes))
|
|
print(string.format('Final result: %s', dr.bytes))
|
|
end
|
|
|
|
-- Test 3: Binary non-UTF-8 data
|
|
local binary_data = string.char(
|
|
0x00,
|
|
0x01,
|
|
0x02,
|
|
0x03,
|
|
0xFF,
|
|
0xFE,
|
|
0xFD,
|
|
0xFC,
|
|
0x80,
|
|
0x90,
|
|
0xA0,
|
|
0xB0,
|
|
0xC0,
|
|
0xD0,
|
|
0xE0,
|
|
0xF0
|
|
)
|
|
|
|
if false then
|
|
print('Binary data length:', #binary_data, 'bytes')
|
|
print('Binary data hex:', kumo.encode.hex_encode(binary_data))
|
|
end
|
|
|
|
local f3 = kumo.crypto.aes_encrypt_block('Ecb', binary_data, {
|
|
key = {
|
|
key_data = key_128,
|
|
},
|
|
})
|
|
|
|
local dr3 = kumo.crypto.aes_decrypt_block('Ecb', f3, {
|
|
key = {
|
|
key_data = key_128,
|
|
},
|
|
})
|
|
|
|
utils.assert_eq(dr3.bytes, binary_data)
|