mirror of
https://github.com/nodejs/node.git
synced 2026-10-28 10:15:07 +08:00
Delete test-crypto-ecb.js, which can no longer run anywhere: Blowfish is available only from OpenSSL's legacy provider and is absent from BoringSSL. The addon and cctest version guards become OPENSSL_IS_BORINGSSL checks. Remove legacy digest-alias coverage and unreachable OpenSSL 1.x branches. JavaScript test and benchmark gates, skip reasons, and TLS error expectations that distinguished OpenSSL 1.x from provider-backed OpenSSL now distinguish BoringSSL, including PKCS12 parsing, named DH groups, private-key serialization, RSA-PSS parameters, consolidated provider caches, FIPS availability, and empty KMAC output. Keep the CCM alternate finalization error only for BoringSSL. Provider-only test skips use version-neutral terminology or state the actual minimum OpenSSL version. Signed-off-by: Filip Skokan <panva.ip@gmail.com> Assisted-by: Codex PR-URL: https://github.com/nodejs/node/pull/64777 Fixes: https://github.com/nodejs/node/issues/56733 Refs: https://github.com/nodejs/node/pull/64211 Refs: https://github.com/nodejs/node/pull/63966 Refs: https://github.com/nodejs/node/pull/53329 Refs: https://github.com/nodejs/node/pull/48950 Refs: https://github.com/nodejs/node/issues/45465 Refs: https://github.com/nodejs/node/issues/42827 Refs: https://github.com/nodejs/node/issues/47076 Refs: https://github.com/nodejs/node/pull/62862 Refs: https://github.com/nodejs/node/pull/38512 Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
161 lines
4.2 KiB
JavaScript
161 lines
4.2 KiB
JavaScript
'use strict';
|
|
|
|
const common = require('../common');
|
|
if (!common.hasCrypto)
|
|
common.skip('missing crypto');
|
|
|
|
const assert = require('assert');
|
|
const crypto = require('crypto');
|
|
const { isBoringSSL } = require('../common/crypto');
|
|
|
|
function getOutcome(fn) {
|
|
try {
|
|
return { result: fn() };
|
|
} catch (err) {
|
|
return { err };
|
|
}
|
|
}
|
|
|
|
function assertSameOutcome(actual, expected) {
|
|
if (expected.err !== undefined) {
|
|
assert(actual.err instanceof Error);
|
|
assert.strictEqual(actual.err.name, expected.err.name);
|
|
assert.strictEqual(actual.err.code, expected.err.code);
|
|
assert.strictEqual(actual.err.message, expected.err.message);
|
|
} else {
|
|
assert.deepStrictEqual(actual.result, expected.result);
|
|
}
|
|
}
|
|
|
|
function assertSameErrorOrSuccess(actual, expected) {
|
|
if (expected.err !== undefined) {
|
|
assert(actual.err instanceof Error);
|
|
assert.strictEqual(actual.err.name, expected.err.name);
|
|
assert.strictEqual(actual.err.code, expected.err.code);
|
|
assert.strictEqual(actual.err.message, expected.err.message);
|
|
} else {
|
|
assert.strictEqual(actual.err, undefined);
|
|
}
|
|
}
|
|
|
|
{
|
|
const expected = getOutcome(() =>
|
|
crypto.hkdfSync('sha256', 'key', 'salt', 'info', 0),
|
|
);
|
|
assertSameOutcome(
|
|
getOutcome(() => crypto.hkdfSync('sha256', 'key', 'salt', 'info', -0)),
|
|
expected,
|
|
);
|
|
crypto.hkdf('sha256', 'key', 'salt', 'info', -0,
|
|
common.mustCall((err, result) => {
|
|
assertSameOutcome({ err, result }, expected);
|
|
}));
|
|
}
|
|
|
|
{
|
|
assert.strictEqual(
|
|
crypto.checkPrimeSync(Buffer.from([3]), { checks: -0 }),
|
|
true,
|
|
);
|
|
crypto.checkPrime(Buffer.from([3]), { checks: -0 },
|
|
common.mustSucceed((result) => {
|
|
assert.strictEqual(result, true);
|
|
}));
|
|
}
|
|
|
|
{
|
|
assert.throws(() => crypto.createDiffieHellman(-0, 2), {
|
|
name: 'Error',
|
|
});
|
|
}
|
|
|
|
{
|
|
for (const [type, getOptions] of [
|
|
['rsa', (zero) => ({ modulusLength: zero })],
|
|
['rsa', (zero) => ({ modulusLength: 512, publicExponent: zero })],
|
|
['rsa-pss', (zero) => ({
|
|
modulusLength: 512,
|
|
publicExponent: 65537,
|
|
saltLength: zero,
|
|
})],
|
|
['dsa', (zero) => ({ modulusLength: zero })],
|
|
['dh', (zero) => ({ primeLength: zero })],
|
|
['dh', (zero) => ({ primeLength: 2, generator: zero })],
|
|
]) {
|
|
assertSameErrorOrSuccess(
|
|
getOutcome(() => crypto.generateKeyPairSync(type, getOptions(-0))),
|
|
getOutcome(() => crypto.generateKeyPairSync(type, getOptions(0))),
|
|
);
|
|
}
|
|
|
|
if (isBoringSSL) {
|
|
common.printSkipMessage(
|
|
'BoringSSL does not support DSA key pair generation');
|
|
} else {
|
|
assertSameErrorOrSuccess(
|
|
getOutcome(() => crypto.generateKeyPairSync('dsa', {
|
|
modulusLength: 512,
|
|
divisorLength: -0,
|
|
})),
|
|
getOutcome(() => crypto.generateKeyPairSync('dsa', {
|
|
modulusLength: 512,
|
|
divisorLength: 0,
|
|
})),
|
|
);
|
|
}
|
|
|
|
crypto.generateKeyPair('rsa', { modulusLength: -0 },
|
|
common.mustCall((err) => {
|
|
assert(err instanceof Error);
|
|
}));
|
|
}
|
|
|
|
if (!isBoringSSL) {
|
|
assert.strictEqual(
|
|
crypto.createHash('shake128', { outputLength: -0 }).digest('hex'),
|
|
'',
|
|
);
|
|
assert.strictEqual(
|
|
crypto.createHash('shake128', { outputLength: 5 })
|
|
.copy({ outputLength: -0 })
|
|
.digest('hex'),
|
|
'',
|
|
);
|
|
assert.strictEqual(
|
|
crypto.hash('shake128', 'data', { outputLength: -0 }),
|
|
'',
|
|
);
|
|
}
|
|
|
|
{
|
|
const key = Buffer.alloc(16);
|
|
const iv = Buffer.alloc(12);
|
|
|
|
assertSameErrorOrSuccess(
|
|
getOutcome(() => crypto.createCipheriv(
|
|
'aes-128-gcm', key, iv, { authTagLength: -0 })),
|
|
getOutcome(() => crypto.createCipheriv(
|
|
'aes-128-gcm', key, iv, { authTagLength: 0 })),
|
|
);
|
|
assertSameErrorOrSuccess(
|
|
getOutcome(() => crypto.createCipheriv(
|
|
'aes-128-gcm', key, iv).setAAD(
|
|
Buffer.alloc(0),
|
|
{ plaintextLength: -0 },
|
|
)),
|
|
getOutcome(() => crypto.createCipheriv(
|
|
'aes-128-gcm', key, iv).setAAD(
|
|
Buffer.alloc(0),
|
|
{ plaintextLength: 0 },
|
|
)),
|
|
);
|
|
assert.strictEqual(
|
|
crypto.getCipherInfo('aes-128-cbc', { keyLength: -0 }),
|
|
undefined,
|
|
);
|
|
assert.strictEqual(
|
|
crypto.getCipherInfo('aes-128-cbc', { ivLength: -0 }),
|
|
undefined,
|
|
);
|
|
}
|