57 lines
2.1 KiB
TypeScript
57 lines
2.1 KiB
TypeScript
import { describe, expect, it } from 'vitest'
|
|
import { bytesToHex, parseHex } from '../src/lib/bytes'
|
|
import { aes128Cmac, aesCmac } from '../src/lib/cmac'
|
|
|
|
describe('AES-128-CMAC RFC 4493 vectors', () => {
|
|
const key = parseHex('2B7E151628AED2A6ABF7158809CF4F3C')
|
|
const vectors = [
|
|
['', 'BB1D6929E95937287FA37D129B756746'],
|
|
['6BC1BEE22E409F96E93D7E117393172A', '070A16B46B4D4144F79BDD9DD04A287C'],
|
|
['6BC1BEE22E409F96E93D7E117393172AAE2D8A57', '7D85449EA6EA19C823A7BF78837DFADE'],
|
|
['6BC1BEE22E409F96E93D7E117393172AAE2D8A571E03AC9C9EB76FAC45AF8E5130C81C46A35CE411', 'DFA66747DE9AE63030CA32611497C827'],
|
|
]
|
|
|
|
it.each(vectors)('matches the expected tag', (message, expected) => {
|
|
expect(bytesToHex(aes128Cmac(key, parseHex(message)), '')).toBe(expected)
|
|
})
|
|
})
|
|
|
|
describe('AES-CMAC NIST SP 800-38B vectors', () => {
|
|
it.each([
|
|
{
|
|
name: 'AES-192 empty message',
|
|
key: '8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B',
|
|
message: '',
|
|
expected: 'D17DDF46ADAACDE531CAC483DE7A9367',
|
|
},
|
|
{
|
|
name: 'AES-192 one block',
|
|
key: '8E73B0F7DA0E6452C810F32B809079E562F8EAD2522C6B7B',
|
|
message: '6BC1BEE22E409F96E93D7E117393172A',
|
|
expected: '9E99A7BF31E710900662F65E617C5184',
|
|
},
|
|
{
|
|
name: 'AES-256 empty message',
|
|
key: '603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4',
|
|
message: '',
|
|
expected: '028962F61B7BF89EFC6B551F4667D983',
|
|
},
|
|
{
|
|
name: 'AES-256 one block',
|
|
key: '603DEB1015CA71BE2B73AEF0857D77811F352C073B6108D72D9810A30914DFF4',
|
|
message: '6BC1BEE22E409F96E93D7E117393172A',
|
|
expected: '28A7023F452E8F82BD4BF28D8C37C35C',
|
|
},
|
|
])('matches $name', ({ key, message, expected }) => {
|
|
expect(bytesToHex(aesCmac(parseHex(key), parseHex(message)), '')).toBe(expected)
|
|
})
|
|
|
|
it.each([0, 15, 17, 23, 25, 31, 33])('rejects a %s-byte key', (length) => {
|
|
expect(() => aesCmac(new Uint8Array(length), new Uint8Array())).toThrow('16、24 或 32 字节')
|
|
})
|
|
|
|
it('keeps the AES-128 compatibility wrapper strict', () => {
|
|
expect(() => aes128Cmac(new Uint8Array(24), new Uint8Array())).toThrow('AES-128 密钥必须是 16 字节')
|
|
})
|
|
})
|