DRBGAlg.java

/*
 * Copyright (c) 2016, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */
import sun.security.provider.MoreDrbgParameters;

import java.security.DrbgParameters;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.SecureRandomParameters;
import java.security.Security;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Collections;
import java.util.List;
import java.util.stream.Collectors;

import static java.security.DrbgParameters.Capability.*;

/**
 * @test
 * @bug 8051408
 * @modules java.base/sun.security.provider
 * @summary make sure DRBG alg can be defined and instantiated freely
 */
public class DRBGAlg {

    public static void main(String[] args) throws Exception {

        check(null, "Hash_DRBG", "SHA-256", "reseed_only", ",128");
        check("", "Hash_DRBG", "SHA-256", "reseed_only", ",128");
        check("sha-256", "Hash_DRBG", "SHA-256", "reseed_only", ",128");
        check("SHA-3");
        check("hash_drbg", "Hash_DRBG", "SHA-256", "reseed_only", ",128");
        check("hmac_drbg", "HMAC_DRBG", "SHA-256", "reseed_only", ",128");
        check("ctr_drbg", "CTR_DRBG", "AES-", "reseed_only", ",128", "use_df");

        // trying all permutations
        checkPermutations(
                Collections.emptyList(),
                Arrays.asList("hash_drbg","sha-512","Pr_and_Reseed","192"),
                "Hash_DRBG", "SHA-512", "pr_and_reseed", ",192");

        check("Hash_DRBG,Hmac_DRBG");
        check("SHA-224,SHA-256");
        check("128,256");
        check("none,reseed_only");
        check("use_df,no_df");
        check("Hash_DRBG,,SHA-256");

        check(null, DrbgParameters.instantiation(112, PR_AND_RESEED, null),
                "Hash_DRBG", "SHA-256", "pr_and_reseed", ",112");
        check(null, DrbgParameters.instantiation(256, PR_AND_RESEED, null),
                "Hash_DRBG", "SHA-256", "pr_and_reseed", ",256");
        check(null, DrbgParameters.instantiation(384, PR_AND_RESEED, null));
        check("sha-224", DrbgParameters.instantiation(112, PR_AND_RESEED, null),
                "Hash_DRBG", "SHA-224", "pr_and_reseed", ",112");
        check("sha-224", DrbgParameters.instantiation(256, PR_AND_RESEED, null));
        check("hash_drbg,sha-512,Pr_and_Reseed,192",
                DrbgParameters.instantiation(112, NONE, null),
                "Hash_DRBG", "SHA-512", "reseed_only", ",112");
        check("hash_drbg,sha-512,Pr_and_Reseed,192",
                DrbgParameters.instantiation(-1, NONE, null),
                "Hash_DRBG", "SHA-512", "reseed_only", ",192");
        // getInstance params can be stronger than definition
        check("hash_drbg,sha-256,None,112",
                DrbgParameters.instantiation(192, PR_AND_RESEED, null),
                "Hash_DRBG", "SHA-256", "pr_and_reseed", ",192");

        check("hash_drbg,sha-224", new MoreDrbgParameters(
                    null, null, "sha-512", null, false,
                    DrbgParameters.instantiation(-1, NONE, null)),
                "Hash_DRBG", "SHA-512");
        check("hash_drbg,sha-224", new MoreDrbgParameters(
                    null, null, null, null, false,
                    DrbgParameters.instantiation(-1, NONE, null)),
                "Hash_DRBG", "SHA-224");
        check("hash_drbg", new MoreDrbgParameters(
                    null, "hmac_drbg", null, null, false,
                    DrbgParameters.instantiation(-1, NONE, null)),
                "HMAC_DRBG", "SHA-256");

        check("hash_drbg,sha-224", new MoreDrbgParameters(
                    null, null, "sha-3", null, false,
                    DrbgParameters.instantiation(-1, NONE, null)));
        check("hash_drbg,sha-224", new MoreDrbgParameters(
                    null, "Unknown_DRBG", null, null, false,
                    DrbgParameters.instantiation(-1, NONE, null)));
    }

    /**
     * Checks all permutatins of a config. This is a recursive method and
     * should be called with checkPermutations(empty,config,expected).
     *
     * @param current the current chosen aspects
     * @param remains the remaining
     * @param expected the expected effective config
     * @throws Exception when check fails
     */
    private static void checkPermutations(List<String> current,
            List<String> remains, String... expected) throws Exception {
        if (remains.isEmpty()) {
            check(current.stream().collect(Collectors.joining(",")), expected);
        } else {
            for (String r : remains) {
                List<String> newCurrent = new ArrayList<>(current);
                newCurrent.add(r);
                List<String> newRemains = new ArrayList<>(remains);
                newRemains.remove(r);
                checkPermutations(newCurrent, newRemains, expected);
            }
        }
    }

    /**
     * Checks DRBG definition for getInstance(alg, params).
     *
     * @param define DRBG
     * @param params getInstance request (null if none)
     * @param expected expected actual instantiate params, empty if should fail
     */
    static void check(String define, SecureRandomParameters params,
                      String... expected) throws Exception {
        System.out.println("Testing " + define + " with " + params + "...");
        String old = Security.getProperty("securerandom.drbg.config");
        if (define != null) {
            Security.setProperty("securerandom.drbg.config", define);
        }
        try {
            String result = params != null ?
                    SecureRandom.getInstance("DRBG", params).toString() :
                    SecureRandom.getInstance("DRBG").toString();
            System.out.println("Result " + result);
            if (expected.length == 0) {
                throw new Exception("should fail");
            }
            for (String s : expected) {
                if (!result.contains(s)) {
                    throw new Exception(result);
                }
            }
        } catch (NoSuchAlgorithmException e) {
            System.out.println("Result NSAE");
            if (expected.length > 0) {
                throw e;
            }
        } finally {
            Security.setProperty("securerandom.drbg.config", old);
        }
    }

    /**
     * Checks DRBG definition for getInstance(alg).
     *
     * @param define DRBG
     * @param expected expected actual instantiate params, empty if should fail
     */
    static void check(String define, String... expected) throws Exception {
        check(define, null, expected);
    }
}