MediaWiki REL1_33
MWCryptHKDFTest.php
Go to the documentation of this file.
1<?php
8
9 protected function setUp() {
10 parent::setUp();
11
12 $this->setMwGlobals( 'wgSecretKey', '5bf1945342e67799cb50704a7fa19ac6' );
13 }
14
18 public function testGenerate() {
19 $a = MWCryptHKDF::generateHex( 64 );
20 $b = MWCryptHKDF::generateHex( 64 );
21
22 $this->assertTrue( strlen( $a ) == 64, "MWCryptHKDF produced fewer bytes than expected" );
23 $this->assertTrue( strlen( $b ) == 64, "MWCryptHKDF produced fewer bytes than expected" );
24 $this->assertFalse( $a == $b, "Two runs of MWCryptHKDF produced the same result." );
25 }
26
30 public function testRfc5869( $hash, $ikm, $salt, $info, $L, $prk, $okm ) {
31 $ikm = hex2bin( $ikm );
32 $salt = hex2bin( $salt );
33 $info = hex2bin( $info );
34 $okm = hex2bin( $okm );
35 $result = MWCryptHKDF::HKDF( $hash, $ikm, $salt, $info, $L );
36 $this->assertEquals( $okm, $result );
37 }
38
42 public static function providerRfc5869() {
43 // phpcs:disable Generic.Files.LineLength
44 return [
45 // A.1
46 [
47 'sha256',
48 '0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b', // ikm
49 '000102030405060708090a0b0c', // salt
50 'f0f1f2f3f4f5f6f7f8f9', // context
51 42, // bytes
52 '077709362c2e32df0ddc3f0dc47bba6390b6c73bb50f9c3122ec844ad7c2b3e5', // prk
53 '3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865' // okm
54 ],
55 // A.2
56 [
57 'sha256',
58 '000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f',
59 '606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf',
60 'b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff',
61 82,
62 '06a6b88c5853361a06104c9ceb35b45cef760014904671014a193f40c15fc244',
63 'b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c01d5c1f3434f1d87'
64 ],
65 // A.3
66 [
67 'sha256',
68 '0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b', // ikm
69 '', // salt
70 '', // context
71 42, // bytes
72 '19ef24a32c717b167f33a91d6f648bdf96596776afdb6377ac434c1c293ccb04', // prk
73 '8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395faa4b61a96c8' // okm
74 ],
75 // A.4
76 [
77 'sha1',
78 '0b0b0b0b0b0b0b0b0b0b0b', // ikm
79 '000102030405060708090a0b0c', // salt
80 'f0f1f2f3f4f5f6f7f8f9', // context
81 42, // bytes
82 '9b6c18c432a7bf8f0e71c8eb88f4b30baa2ba243', // prk
83 '085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896' // okm
84 ],
85 // A.5
86 [
87 'sha1',
88 '000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f', // ikm
89 '606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf', // salt
90 'b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff', // context
91 82, // bytes
92 '8adae09a2a307059478d309b26c4115a224cfaf6', // prk
93 '0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4' // okm
94 ],
95 ];
96 // phpcs:enable
97 }
98}
and that you know you can do these things To protect your we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights These restrictions translate to certain responsibilities for you if you distribute copies of the or if you modify it For if you distribute copies of such a whether gratis or for a you must give the recipients all the rights that you have You must make sure that receive or can get the source code And you must show them these terms so they know their rights We protect your rights with two and(2) offer you this license which gives you legal permission to copy
HKDF CryptHKDF MWCryptHKDF.
static providerRfc5869()
Test vectors from Appendix A on https://tools.ietf.org/html/rfc5869.
testRfc5869( $hash, $ikm, $salt, $info, $L, $prk, $okm)
providerRfc5869
testGenerate()
Test basic usage works.
static generateHex( $chars, $context='')
Generate cryptographically random data and return it in hexadecimal string format.
static HKDF( $hash, $ikm, $salt, $info, $L)
RFC5869 defines HKDF in 2 steps, extraction and expansion.
setMwGlobals( $pairs, $value=null)
Sets a global, maintaining a stashed version of the previous global to be restored in tearDown.