services/fxaccounts/tests/xpcshell/test_credentials.js@6474c204b198
services/fxaccounts/tests/xpcshell/test_credentials.js
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 /* Any copyright is dedicated to the Public Domain.
2 * http://creativecommons.org/publicdomain/zero/1.0/ */
4 Cu.import("resource://gre/modules/Credentials.jsm");
5 Cu.import("resource://gre/modules/Promise.jsm");
6 Cu.import("resource://services-common/utils.js");
7 Cu.import("resource://services-crypto/utils.js");
9 let {hexToBytes: h2b,
10 hexAsString: h2s,
11 stringAsHex: s2h,
12 bytesAsHex: b2h} = CommonUtils;
14 // Test vectors for the "onepw" protocol:
15 // https://github.com/mozilla/fxa-auth-server/wiki/onepw-protocol#wiki-test-vectors
16 let vectors = {
17 "client stretch-KDF": {
18 email:
19 h("616e6472c3a94065 78616d706c652e6f 7267"),
20 password:
21 h("70c3a4737377c3b6 7264"),
22 quickStretchedPW:
23 h("e4e8889bd8bd61ad 6de6b95c059d56e7 b50dacdaf62bd846 44af7e2add84345d"),
24 authPW:
25 h("247b675ffb4c4631 0bc87e26d712153a be5e1c90ef00a478 4594f97ef54f2375"),
26 authSalt:
27 h("00f0000000000000 0000000000000000 0000000000000000 0000000000000000"),
28 },
29 };
31 // A simple test suite with no utf8 encoding madness.
32 add_task(function test_onepw_setup_credentials() {
33 let email = "francine@example.org";
34 let password = CommonUtils.encodeUTF8("i like pie");
36 let pbkdf2 = CryptoUtils.pbkdf2Generate;
37 let hkdf = CryptoUtils.hkdf;
39 // quickStretch the email
40 let saltyEmail = Credentials.keyWordExtended("quickStretch", email);
42 do_check_eq(b2h(saltyEmail), "6964656e746974792e6d6f7a696c6c612e636f6d2f7069636c2f76312f717569636b537472657463683a6672616e63696e65406578616d706c652e6f7267");
44 let pbkdf2Rounds = 1000;
45 let pbkdf2Len = 32;
47 let quickStretchedPW = pbkdf2(password, saltyEmail, pbkdf2Rounds, pbkdf2Len, Ci.nsICryptoHMAC.SHA256, 32);
48 let quickStretchedActual = "6b88094c1c73bbf133223f300d101ed70837af48d9d2c1b6e7d38804b20cdde4";
49 do_check_eq(b2h(quickStretchedPW), quickStretchedActual);
51 // obtain hkdf info
52 let authKeyInfo = Credentials.keyWord('authPW');
53 do_check_eq(b2h(authKeyInfo), "6964656e746974792e6d6f7a696c6c612e636f6d2f7069636c2f76312f617574685057");
55 // derive auth password
56 let hkdfSalt = h2b("00");
57 let hkdfLen = 32;
58 let authPW = hkdf(quickStretchedPW, hkdfSalt, authKeyInfo, hkdfLen);
60 do_check_eq(b2h(authPW), "4b8dec7f48e7852658163601ff766124c312f9392af6c3d4e1a247eb439be342");
62 // derive unwrap key
63 let unwrapKeyInfo = Credentials.keyWord('unwrapBkey');
64 let unwrapKey = hkdf(quickStretchedPW, hkdfSalt, unwrapKeyInfo, hkdfLen);
66 do_check_eq(b2h(unwrapKey), "8ff58975be391338e4ec5d7138b5ed7b65c7d1bfd1f3a4f93e05aa47d5b72be9");
67 });
69 add_task(function test_client_stretch_kdf() {
70 let pbkdf2 = CryptoUtils.pbkdf2Generate;
71 let hkdf = CryptoUtils.hkdf;
72 let expected = vectors["client stretch-KDF"];
74 let emailUTF8 = h2s(expected.email);
75 let passwordUTF8 = h2s(expected.password);
77 // Intermediate value from sjcl implementation in fxa-js-client
78 // The key thing is the c3a9 sequence in "andré"
79 let salt = Credentials.keyWordExtended("quickStretch", emailUTF8);
80 do_check_eq(b2h(salt), "6964656e746974792e6d6f7a696c6c612e636f6d2f7069636c2f76312f717569636b537472657463683a616e6472c3a9406578616d706c652e6f7267");
82 let options = {
83 stretchedPassLength: 32,
84 pbkdf2Rounds: 1000,
85 hmacAlgorithm: Ci.nsICryptoHMAC.SHA256,
86 hmacLength: 32,
87 hkdfSalt: h2b("00"),
88 hkdfLength: 32,
89 };
91 let results = yield Credentials.setup(emailUTF8, passwordUTF8, options);
93 do_check_eq(emailUTF8, results.emailUTF8,
94 "emailUTF8 is wrong");
96 do_check_eq(passwordUTF8, results.passwordUTF8,
97 "passwordUTF8 is wrong");
99 do_check_eq(expected.quickStretchedPW, b2h(results.quickStretchedPW),
100 "quickStretchedPW is wrong");
102 do_check_eq(expected.authPW, b2h(results.authPW),
103 "authPW is wrong");
104 });
106 // End of tests
107 // Utility functions follow
109 function run_test() {
110 run_next_test();
111 }
113 // turn formatted test vectors into normal hex strings
114 function h(hexStr) {
115 return hexStr.replace(/\s+/g, "");
116 }
