Start line:  
End line:  

Snippet Preview

Snippet HTML Code

Stack Overflow Questions
  package org.bouncycastle.crypto.test;
  
HKDF tests - vectors from RFC 5869, + 2 more, 101 and 102
 
 public class HKDFGeneratorTest
     extends SimpleTest
 {
 
     public HKDFGeneratorTest()
     {
     }
 
     private void compareOKM(int testbyte[] calculatedOKMbyte[] testOKM)
     {
 
         if (!areEqual(calculatedOKMtestOKM))
         {
             fail("HKDF failed generator test " + test);
         }
     }
 
     public void performTest()
     {
         {
             // === A.1. Test Case 1 - Basic test case with SHA-256 ===
 
             Digest hash = new SHA256Digest();
             byte[] ikm = Hex
                 .decode("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b");
             byte[] salt = Hex.decode("000102030405060708090a0b0c");
             byte[] info = Hex.decode("f0f1f2f3f4f5f6f7f8f9");
             int l = 42;
             byte[] okm = new byte[l];
 
             HKDFParameters params = new HKDFParameters(ikmsaltinfo);
 
             HKDFBytesGenerator hkdf = new HKDFBytesGenerator(hash);
             hkdf.init(params);
             hkdf.generateBytes(okm, 0, l);
 
             compareOKM(1, okm, Hex.decode(
                 "3cb25f25faacd57a90434f64d0362f2a" +
                     "2d2d0a90cf1a5a4c5db02d56ecc4c5bf" +
                     "34007208d5b887185865"));
         }
 
         // === A.2. Test Case 2 - Test with SHA-256 and longer inputs/outputs
         // ===
         {
             Digest hash = new SHA256Digest();
             byte[] ikm = Hex.decode("000102030405060708090a0b0c0d0e0f"
                 + "101112131415161718191a1b1c1d1e1f"
                 + "202122232425262728292a2b2c2d2e2f"
                 + "303132333435363738393a3b3c3d3e3f"
                 + "404142434445464748494a4b4c4d4e4f");
             byte[] salt = Hex.decode("606162636465666768696a6b6c6d6e6f"
                 + "707172737475767778797a7b7c7d7e7f"
                 + "808182838485868788898a8b8c8d8e8f"
                 + "909192939495969798999a9b9c9d9e9f"
                 + "a0a1a2a3a4a5a6a7a8a9aaabacadaeaf");
             byte[] info = Hex.decode("b0b1b2b3b4b5b6b7b8b9babbbcbdbebf"
                 + "c0c1c2c3c4c5c6c7c8c9cacbcccdcecf"
                 + "d0d1d2d3d4d5d6d7d8d9dadbdcdddedf"
                 + "e0e1e2e3e4e5e6e7e8e9eaebecedeeef"
                 + "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff");
             int l = 82;
             byte[] okm = new byte[l];
 
             HKDFParameters params = new HKDFParameters(ikmsaltinfo);
 
             HKDFBytesGenerator hkdf = new HKDFBytesGenerator(hash);
             hkdf.init(params);
             hkdf.generateBytes(okm, 0, l);
 
             compareOKM(2, okm, Hex.decode(
                 "b11e398dc80327a1c8e7f78c596a4934" +
                     "4f012eda2d4efad8a050cc4c19afa97c" +
                     "59045a99cac7827271cb41c65e590e09" +
                     "da3275600c2f09b8367793a9aca3db71" +
                     "cc30c58179ec3e87c14c01d5c1f3434f" +
                     "1d87"));
         }
 
         {
             // === A.3. Test Case 3 - Test with SHA-256 and zero-length
             // salt/info ===
 
             // setting salt to an empty byte array means that the salt is set to
             // HashLen zero valued bytes
             // setting info to null generates an empty byte array as info
            // structure
            Digest hash = new SHA256Digest();
            byte[] ikm = Hex
                .decode("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b");
            byte[] salt = new byte[0];
            byte[] info = null;
            int l = 42;
            byte[] okm = new byte[l];
            HKDFParameters params = new HKDFParameters(ikmsaltinfo);
            HKDFBytesGenerator hkdf = new HKDFBytesGenerator(hash);
            hkdf.init(params);
            hkdf.generateBytes(okm, 0, l);
            compareOKM(3, okm, Hex.decode(
                "8da4e775a563c18f715f802a063c5a31" +
                    "b8a11f5c5ee1879ec3454e5f3c738d2d" +
                    "9d201395faa4b61a96c8"));
        }
        {
            // === A.4. Test Case 4 - Basic test case with SHA-1 ===
            Digest hash = new SHA1Digest();
            byte[] ikm = Hex.decode("0b0b0b0b0b0b0b0b0b0b0b");
            byte[] salt = Hex.decode("000102030405060708090a0b0c");
            byte[] info = Hex.decode("f0f1f2f3f4f5f6f7f8f9");
            int l = 42;
            byte[] okm = new byte[l];
            HKDFParameters params = new HKDFParameters(ikmsaltinfo);
            HKDFBytesGenerator hkdf = new HKDFBytesGenerator(hash);
            hkdf.init(params);
            hkdf.generateBytes(okm, 0, l);
            compareOKM(4, okm, Hex.decode(
                "085a01ea1b10f36933068b56efa5ad81" +
                    "a4f14b822f5b091568a9cdd4f155fda2" +
                    "c22e422478d305f3f896"));
        }
        // === A.5. Test Case 5 - Test with SHA-1 and longer inputs/outputs ===
        {
            Digest hash = new SHA1Digest();
            byte[] ikm = Hex.decode("000102030405060708090a0b0c0d0e0f"
                + "101112131415161718191a1b1c1d1e1f"
                + "202122232425262728292a2b2c2d2e2f"
                + "303132333435363738393a3b3c3d3e3f"
                + "404142434445464748494a4b4c4d4e4f");
            byte[] salt = Hex.decode("606162636465666768696a6b6c6d6e6f"
                + "707172737475767778797a7b7c7d7e7f"
                + "808182838485868788898a8b8c8d8e8f"
                + "909192939495969798999a9b9c9d9e9f"
                + "a0a1a2a3a4a5a6a7a8a9aaabacadaeaf");
            byte[] info = Hex.decode("b0b1b2b3b4b5b6b7b8b9babbbcbdbebf"
                + "c0c1c2c3c4c5c6c7c8c9cacbcccdcecf"
                + "d0d1d2d3d4d5d6d7d8d9dadbdcdddedf"
                + "e0e1e2e3e4e5e6e7e8e9eaebecedeeef"
                + "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff");
            int l = 82;
            byte[] okm = new byte[l];
            HKDFParameters params = new HKDFParameters(ikmsaltinfo);
            HKDFBytesGenerator hkdf = new HKDFBytesGenerator(hash);
            hkdf.init(params);
            hkdf.generateBytes(okm, 0, l);
            compareOKM(5, okm, Hex.decode(
                "0bd770a74d1160f7c9f12cd5912a06eb" +
                    "ff6adcae899d92191fe4305673ba2ffe" +
                    "8fa3f1a4e5ad79f3f334b3b202b2173c" +
                    "486ea37ce3d397ed034c7f9dfeb15c5e" +
                    "927336d0441f4c4300e2cff0d0900b52" +
                    "d3b4"));
        }
        {
            // === A.6. Test Case 6 - Test with SHA-1 and zero-length salt/info
            // ===
            // setting salt to null should generate a new salt of HashLen zero
            // valued bytes
            Digest hash = new SHA1Digest();
            byte[] ikm = Hex
                .decode("0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b");
            byte[] salt = null;
            byte[] info = new byte[0];
            int l = 42;
            byte[] okm = new byte[l];
            HKDFParameters params = new HKDFParameters(ikmsaltinfo);
            HKDFBytesGenerator hkdf = new HKDFBytesGenerator(hash);
            hkdf.init(params);
            hkdf.generateBytes(okm, 0, l);
            compareOKM(6, okm, Hex.decode(
                "0ac1af7002b3d761d1e55298da9d0506" +
                    "b9ae52057220a306e07b6b87e8df21d0" +
                    "ea00033de03984d34918"));
        }
        {
            // === A.7. Test Case 7 - Test with SHA-1, salt not provided,
            // zero-length info ===
            // (salt defaults to HashLen zero octets)
            // this test is identical to test 6 in all ways bar the IKM value
            Digest hash = new SHA1Digest();
            byte[] ikm = Hex
                .decode("0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c");
            byte[] salt = null;
            byte[] info = new byte[0];
            int l = 42;
            byte[] okm = new byte[l];
            HKDFParameters params = new HKDFParameters(ikmsaltinfo);
            HKDFBytesGenerator hkdf = new HKDFBytesGenerator(hash);
            hkdf.init(params);
            hkdf.generateBytes(okm, 0, l);
            compareOKM(7, okm, Hex.decode(
                "2c91117204d745f3500d636a62f64f0a" +
                    "b3bae548aa53d423b0d1f27ebba6f5e5" +
                    "673a081d70cce7acfc48"));
        }
        {
            // === A.101. Additional Test Case - Test with SHA-1, skipping extract
            // zero-length info ===
            // (salt defaults to HashLen zero octets)
            // this test is identical to test 7 in all ways bar the IKM value
            // which is set to the PRK value
            Digest hash = new SHA1Digest();
            byte[] ikm = Hex
                .decode("2adccada18779e7c2077ad2eb19d3f3e731385dd");
            byte[] info = new byte[0];
            int l = 42;
            byte[] okm = new byte[l];
            HKDFParameters params = HKDFParameters.skipExtractParameters(ikminfo);
            HKDFBytesGenerator hkdf = new HKDFBytesGenerator(hash);
            hkdf.init(params);
            hkdf.generateBytes(okm, 0, l);
            compareOKM(101, okm, Hex.decode(
                "2c91117204d745f3500d636a62f64f0a" +
                    "b3bae548aa53d423b0d1f27ebba6f5e5" +
                    "673a081d70cce7acfc48"));
        }
        // === A.102. Additional Test Case - Test with SHA-1, maximum output ===
        // (salt defaults to HashLen zero octets)
        // this test is identical to test 7 in all ways bar the IKM value
        Digest hash = new SHA1Digest();
        byte[] ikm = Hex
            .decode("2adccada18779e7c2077ad2eb19d3f3e731385dd");
        byte[] info = new byte[0];
        int l = 255 * hash.getDigestSize();
        byte[] okm = new byte[l];
        HKDFParameters params = HKDFParameters.skipExtractParameters(ikminfo);
        HKDFBytesGenerator hkdf = new HKDFBytesGenerator(hash);
        hkdf.init(params);
        hkdf.generateBytes(okm, 0, l);
        int zeros = 0;
        for (int i = 0; i < hash.getDigestSize(); i++)
        {
            if (okm[i] == 0)
            {
                zeros++;
            }
        }
        if (zeros == hash.getDigestSize())
        {
            fail("HKDF failed generator test " + 102);
        }
    }
    public String getName()
    {
        return "HKDF";
    }
    public static void main(
        String[] args)
    {
        runTest(new HKDFGeneratorTest());
    }
New to GrepCode? Check out our FAQ X