require 'common' require 'net/ssh/transport/cipher_factory' module Transport class TestCipherFactory < Test::Unit::TestCase def self.if_supported?(name) yield if Net::SSH::Transport::CipherFactory.supported?(name) end def test_lengths_for_none assert_equal [0,0], factory.get_lengths("none") assert_equal [0,0], factory.get_lengths("bogus") end def test_lengths_for_blowfish_cbc assert_equal [16,8], factory.get_lengths("blowfish-cbc") end if_supported?("idea-cbc") do def test_lengths_for_idea_cbc assert_equal [16,8], factory.get_lengths("idea-cbc") end end def test_lengths_for_rijndael_cbc assert_equal [32,16], factory.get_lengths("rijndael-cbc@lysator.liu.se") end def test_lengths_for_cast128_cbc assert_equal [16,8], factory.get_lengths("cast128-cbc") end def test_lengths_for_3des_cbc assert_equal [24,8], factory.get_lengths("3des-cbc") end def test_lengths_for_aes128_cbc assert_equal [16,16], factory.get_lengths("aes128-cbc") end def test_lengths_for_aes192_cbc assert_equal [24,16], factory.get_lengths("aes192-cbc") end def test_lengths_for_aes256_cbc assert_equal [32,16], factory.get_lengths("aes256-cbc") end def test_lengths_for_arcfour assert_equal [16,8], factory.get_lengths("arcfour") end def test_lengths_for_arcfour128 assert_equal [16,8], factory.get_lengths("arcfour128") end def test_lengths_for_arcfour256 assert_equal [32,8], factory.get_lengths("arcfour256") end def test_lengths_for_arcfour512 assert_equal [64,8], factory.get_lengths("arcfour512") end if_supported?("camellia128-cbc@openssh.org") do def test_lengths_for_camellia128_cbc_openssh_org assert_equal [16,16], factory.get_lengths("camellia128-cbc@openssh.org") end end if_supported?("camellia192-cbc@openssh.org") do def test_lengths_for_camellia192_cbc_openssh_org assert_equal [24,16], factory.get_lengths("camellia192-cbc@openssh.org") end end if_supported?("camellia256-cbc@openssh.org") do def test_lengths_for_camellia256_cbc_openssh_org assert_equal [32,16], factory.get_lengths("camellia256-cbc@openssh.org") end end def test_lengths_for_3des_ctr assert_equal [24,8], factory.get_lengths("3des-ctr") end def test_lengths_for_aes128_ctr assert_equal [16,16], factory.get_lengths("aes128-ctr") end def test_lengths_for_aes192_ctr assert_equal [24,16], factory.get_lengths("aes192-ctr") end def test_lengths_for_aes256_ctr assert_equal [32,16], factory.get_lengths("aes256-ctr") end def test_lengths_for_blowfish_ctr assert_equal [16,8], factory.get_lengths("blowfish-ctr") end def test_lengths_for_cast128_ctr assert_equal [16,8], factory.get_lengths("cast128-ctr") end if_supported?("camellia128-ctr@openssh.org") do def test_lengths_for_camellia128_ctr_openssh_org assert_equal [16,16], factory.get_lengths("camellia128-ctr@openssh.org") end end if_supported?("camellia192-ctr@openssh.org") do def test_lengths_for_camellia192_ctr_openssh_org assert_equal [24,16], factory.get_lengths("camellia192-ctr@openssh.org") end end if_supported?("camellia256-ctr@openssh.org") do def test_lengths_for_camellia256_ctr_openssh_org assert_equal [32,16], factory.get_lengths("camellia256-ctr@openssh.org") end end BLOWFISH_CBC = "\210\021\200\315\240_\026$\352\204g\233\244\242x\332e\370\001\327\224Nv@9_\323\037\252kb\037\036\237\375]\343/y\037\237\312Q\f7]\347Y\005\275%\377\0010$G\272\250B\265Nd\375\342\372\025r6}+Y\213y\n\237\267\\\374^\346BdJ$\353\220Ik\023<\236&H\277=\225" def test_blowfish_cbc_for_encryption assert_equal BLOWFISH_CBC, encrypt("blowfish-cbc") end def test_blowfish_cbc_for_decryption assert_equal TEXT, decrypt("blowfish-cbc", BLOWFISH_CBC) end if_supported?("idea-cbc") do IDEA_CBC = "W\234\017G\231\b\357\370H\b\256U]\343M\031k\233]~\023C\363\263\177\262-\261\341$\022\376mv\217\322\b\2763\270H\306\035\343z\313\312\3531\351\t\201\302U\022\360\300\354ul7$z\320O]\360g\024\305\005`V\005\335A\351\312\270c\320D\232\eQH1\340\265\2118\031g*\303v" def test_idea_cbc_for_encryption assert_equal IDEA_CBC, encrypt("idea-cbc") end def test_idea_cbc_for_decryption assert_equal TEXT, decrypt("idea-cbc", IDEA_CBC) end end RIJNDAEL = "$\253\271\255\005Z\354\336&\312\324\221\233\307Mj\315\360\310Fk\241EfN\037\231\213\361{'\310\204\347I\343\271\005\240`\325;\034\346uM>#\241\231C`\374\261\vo\226;Z\302:\b\250\366T\330\\#V\330\340\226\363\374!\bm\266\232\207!\232\347\340\t\307\370\356z\236\343=v\210\206y" def test_rijndael_cbc_for_encryption assert_equal RIJNDAEL, encrypt("rijndael-cbc@lysator.liu.se") end def test_rijndael_cbc_for_decryption assert_equal TEXT, decrypt("rijndael-cbc@lysator.liu.se", RIJNDAEL) end CAST128_CBC = "qW\302\331\333P\223t[9 ~(sg\322\271\227\272\022I\223\373p\255>k\326\314\260\2003\236C_W\211\227\373\205>\351\334\322\227\223\e\236\202Ii\032!P\214\035:\017\360h7D\371v\210\264\317\236a\262w1\2772\023\036\331\227\240:\f/X\351\324I\t[x\350\323E\2301\016m" def test_cast128_cbc_for_encryption assert_equal CAST128_CBC, encrypt("cast128-cbc") end def test_cast128_cbc_for_decryption assert_equal TEXT, decrypt("cast128-cbc", CAST128_CBC) end TRIPLE_DES_CBC = "\322\252\216D\303Q\375gg\367A{\177\313\3436\272\353%\223K?\257\206|\r&\353/%\340\336 \203E8rY\206\234\004\274\267\031\233T/{\"\227/B!i?[qGaw\306T\206\223\213n \212\032\244%]@\355\250\334\312\265E\251\017\361\270\357\230\274KP&^\031r+r%\370" def test_3des_cbc_for_encryption assert_equal TRIPLE_DES_CBC, encrypt("3des-cbc") end def test_3des_cbc_for_decryption assert_equal TEXT, decrypt("3des-cbc", TRIPLE_DES_CBC) end AES128_CBC = "k\026\350B\366-k\224\313\3277}B\035\004\200\035\r\233\024$\205\261\231Q\2214r\245\250\360\315\237\266hg\262C&+\321\346Pf\267v\376I\215P\327\345-\232&HK\375\326_\030<\a\276\212\303g\342C\242O\233\260\006\001a&V\345`\\T\e\236.\207\223l\233ri^\v\252\363\245" def test_aes128_cbc_for_encryption assert_equal AES128_CBC, encrypt("aes128-cbc") end def test_aes128_cbc_for_decryption assert_equal TEXT, decrypt("aes128-cbc", AES128_CBC) end AES192_CBC = "\256\017)x\270\213\336\303L\003f\235'jQ\3231k9\225\267\242\364C4\370\224\201\302~\217I\202\374\2167='\272\037\225\223\177Y\r\212\376(\275\n\3553\377\177\252C\254\236\016MA\274Z@H\331<\rL\317\205\323[\305X8\376\237=\374\352bH9\244\0231\353\204\352p\226\326~J\242" def test_aes192_cbc_for_encryption assert_equal AES192_CBC, encrypt("aes192-cbc") end def test_aes192_cbc_for_decryption assert_equal TEXT, decrypt("aes192-cbc", AES192_CBC) end AES256_CBC = "$\253\271\255\005Z\354\336&\312\324\221\233\307Mj\315\360\310Fk\241EfN\037\231\213\361{'\310\204\347I\343\271\005\240`\325;\034\346uM>#\241\231C`\374\261\vo\226;Z\302:\b\250\366T\330\\#V\330\340\226\363\374!\bm\266\232\207!\232\347\340\t\307\370\356z\236\343=v\210\206y" def test_aes256_cbc_for_encryption assert_equal AES256_CBC, encrypt("aes256-cbc") end def test_aes256_cbc_for_decryption assert_equal TEXT, decrypt("aes256-cbc", AES256_CBC) end ARCFOUR = "\xC1.\x1AdH\xD0+%\xF1CrG\x1C\xCC\xF6\xACho\xB0\x95\\\xBC\x02P\xF9\xAF\n\xBB<\x13\xF3\xCF\xEB\n\b(iO\xFB'\t^?\xA6\xE5a\xE2\x17\f\x97\xCAs\x9E\xFC\xF2\x88\xC93\v\x84\xCA\x82\x0E\x1D\x11\xEA\xE1\x82\x8E\xB3*\xC5\xFB\x8Cmgs\xB0\xFA\xF5\x9C\\\xE2\xB0\x95\x1F>LT" def test_arcfour_for_encryption assert_equal ARCFOUR, encrypt("arcfour") end def test_arcfour_for_decryption assert_equal TEXT, decrypt("arcfour", ARCFOUR) end ARCFOUR128 = "\n\x90\xED*\xD4\xBE\xCBg5\xA5\a\xEC]\x97\xB7L\x06)6\x12FL\x90@\xF4Sqxqh\r\x11\x1Aq \xC8\xE6v\xC6\x12\xD9 "ABC", :key => "abc", :digester => OpenSSL::Digest::MD5, :shared => "1234567890123456780", :hash => '!@#$%#$^%$&^&%#$@$' } def factory Net::SSH::Transport::CipherFactory end def encrypt(type) cipher = factory.get(type, OPTIONS.merge(:encrypt => true)) padding = TEXT.length % cipher.block_size result = cipher.update(TEXT.dup) result << cipher.update(" " * (cipher.block_size - padding)) if padding > 0 result << cipher.final end def decrypt(type, data) cipher = factory.get(type, OPTIONS.merge(:decrypt => true)) result = cipher.update(data.dup) result << cipher.final result.strip end end end