111 lines
3.4 KiB
C
111 lines
3.4 KiB
C
/* This is a fuzz test for our message encryption and decryption functions from
|
|
* common/cryptomsg.c. The fuzz test is based on the unit test at
|
|
* common/test/run-cryptomsg.c.
|
|
*/
|
|
#include "config.h"
|
|
#include <assert.h>
|
|
#include <ccan/mem/mem.h>
|
|
#include <ccan/str/hex/hex.h>
|
|
#include <common/cryptomsg.h>
|
|
#include <common/setup.h>
|
|
#include <common/utils.h>
|
|
#include <tests/fuzz/libfuzz.h>
|
|
|
|
/* Initial crypto states for each fuzz iteration. These are constant after
|
|
* init() is called. */
|
|
static struct crypto_state init_cs_out, init_cs_in;
|
|
|
|
static struct secret secret_from_hex(const char *hex)
|
|
{
|
|
struct secret secret;
|
|
hex += 2;
|
|
if (!hex_decode(hex, strlen(hex), &secret, sizeof(secret)))
|
|
abort();
|
|
return secret;
|
|
}
|
|
|
|
void init(int *argc, char ***argv)
|
|
{
|
|
/* BOLT #8:
|
|
*
|
|
* name: transport-initiator successful handshake
|
|
*...
|
|
* # ck,temp_k3=0x919219dbb2920afa8db80f9a51787a840bcf111ed8d588caf9ab4be716e42b01,0x981a46c820fb7a241bc8184ba4bb1f01bcdfafb00dde80098cb8c38db9141520
|
|
* # encryptWithAD(0x981a46c820fb7a241bc8184ba4bb1f01bcdfafb00dde80098cb8c38db9141520, 0x000000000000000000000000, 0x5dcb5ea9b4ccc755e0e3456af3990641276e1d5dc9afd82f974d90a47c918660, <empty>)
|
|
* # t=0x8dc68b1c466263b47fdf31e560e139ba
|
|
* output: 0x00b9e3a702e93e3a9948c2ed6e5fd7590a6e1c3a0344cfc9d5b57357049aa22355361aa02e55a8fc28fef5bd6d71ad0c38228dc68b1c466263b47fdf31e560e139ba
|
|
* # HKDF(0x919219dbb2920afa8db80f9a51787a840bcf111ed8d588caf9ab4be716e42b01,zero)
|
|
* output: sk,rk=0x969ab31b4d288cedf6218839b27a3e2140827047f2c0f01bf5c04435d43511a9,0xbb9020b8965f4df047e07f955f3c4b88418984aadc5cdb35096b9ea8fa5c3442
|
|
*/
|
|
struct secret sk = secret_from_hex("0x969ab31b4d288cedf6218839b27a3e214"
|
|
"0827047f2c0f01bf5c04435d43511a9");
|
|
struct secret rk = secret_from_hex("0xbb9020b8965f4df047e07f955f3c4b884"
|
|
"18984aadc5cdb35096b9ea8fa5c3442");
|
|
struct secret ck = secret_from_hex("0x919219dbb2920afa8db80f9a51787a840"
|
|
"bcf111ed8d588caf9ab4be716e42b01");
|
|
|
|
init_cs_out.sk = sk;
|
|
init_cs_out.rk = rk;
|
|
init_cs_out.s_ck = ck;
|
|
init_cs_out.r_ck = ck;
|
|
|
|
init_cs_in.sk = rk;
|
|
init_cs_in.rk = sk;
|
|
init_cs_in.s_ck = ck;
|
|
init_cs_in.r_ck = ck;
|
|
|
|
common_setup("fuzzer");
|
|
}
|
|
|
|
/* Test that encrypting and decrypting the message does not alter it. */
|
|
static void test_encrypt_decrypt_equality(const u8 *msg)
|
|
{
|
|
struct crypto_state cs_out = init_cs_out;
|
|
struct crypto_state cs_in = init_cs_in;
|
|
u8 *dec, *enc;
|
|
u16 len;
|
|
|
|
enc = cryptomsg_encrypt_msg(msg, &cs_out, msg);
|
|
|
|
assert(cryptomsg_decrypt_header(&cs_in, enc, &len));
|
|
|
|
/* Trim header. */
|
|
memmove(enc, enc + CRYPTOMSG_HDR_SIZE,
|
|
tal_bytelen(enc) - CRYPTOMSG_HDR_SIZE);
|
|
tal_resize(&enc, tal_bytelen(enc) - CRYPTOMSG_HDR_SIZE);
|
|
|
|
dec = cryptomsg_decrypt_body(msg, &cs_in, enc);
|
|
assert(memeq(dec, tal_bytelen(dec), msg, tal_bytelen(msg)));
|
|
}
|
|
|
|
/* Test header decryption of arbitrary bytes (should always fail). */
|
|
static void test_decrypt_header(const u8 *buf)
|
|
{
|
|
struct crypto_state cs_in = init_cs_in;
|
|
u16 len;
|
|
|
|
if (tal_bytelen(buf) < CRYPTOMSG_HDR_SIZE)
|
|
return;
|
|
|
|
assert(!cryptomsg_decrypt_header(&cs_in, buf, &len));
|
|
}
|
|
|
|
/* Test body decryption of arbitrary bytes (should always fail). */
|
|
static void test_decrypt_body(const u8 *buf)
|
|
{
|
|
struct crypto_state cs_in = init_cs_in;
|
|
|
|
assert(cryptomsg_decrypt_body(buf, &cs_in, buf) == NULL);
|
|
}
|
|
|
|
void run(const u8 *data, size_t size)
|
|
{
|
|
const u8 *buf = tal_dup_arr(NULL, u8, data, size, 0);
|
|
|
|
test_encrypt_decrypt_equality(buf);
|
|
test_decrypt_header(buf);
|
|
test_decrypt_body(buf);
|
|
|
|
tal_free(buf);
|
|
}
|