d795301025
common.js needs to be loaded in all tests so that there is checking for variable leaks and possibly other things. However, it does not need to be assigned to a variable if nothing in common.js is referred to elsewhere in the test. The main tradeoff for this bit of code churn is that it gets the code base most of the way to being able to enable the no-unused-vars rule in eslint. (The non-tooling benefit is that it lessens cognitive load when reading tests as it is an immediate indication that none of the functions or properties in common.js will be used by the test.) PR-URL: https://github.com/nodejs/node/pull/4563 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
91 lines
3.8 KiB
JavaScript
91 lines
3.8 KiB
JavaScript
'use strict';
|
|
require('../common');
|
|
var assert = require('assert');
|
|
|
|
try {
|
|
var crypto = require('crypto');
|
|
} catch (e) {
|
|
console.log('1..0 # Skipped: node compiled without OpenSSL.');
|
|
return;
|
|
}
|
|
|
|
/* This test verifies padding with leading zeroes for shared
|
|
* secrets that are strictly smaller than the modulus (prime).
|
|
* See:
|
|
* RFC 4346: https://www.ietf.org/rfc/rfc4346.txt
|
|
* https://github.com/nodejs/node-v0.x-archive/issues/7906
|
|
* https://github.com/nodejs/node-v0.x-archive/issues/5239
|
|
*
|
|
* In FIPS mode OPENSSL_DH_FIPS_MIN_MODULUS_BITS = 1024, meaning we need
|
|
* a FIPS-friendly >= 1024 bit prime, we can use MODP 14 from RFC 3526:
|
|
* https://www.ietf.org/rfc/rfc3526.txt
|
|
*
|
|
* We can generate appropriate values with this code:
|
|
*
|
|
* crypto = require('crypto');
|
|
*
|
|
* for (;;) {
|
|
* var a = crypto.getDiffieHellman('modp14'),
|
|
* var b = crypto.getDiffieHellman('modp14');
|
|
*
|
|
* a.generateKeys();
|
|
* b.generateKeys();
|
|
*
|
|
* var aSecret = a.computeSecret(b.getPublicKey()).toString('hex');
|
|
* console.log("A public: " + a.getPublicKey().toString('hex'));
|
|
* console.log("A private: " + a.getPrivateKey().toString('hex'));
|
|
* console.log("B public: " + b.getPublicKey().toString('hex'));
|
|
* console.log("B private: " + b.getPrivateKey().toString('hex'));
|
|
* console.log("A secret: " + aSecret);
|
|
* console.log('-------------------------------------------------');
|
|
* if(aSecret.substring(0,2) === "00") {
|
|
* console.log("found short key!");
|
|
* return;
|
|
* }
|
|
* }
|
|
*/
|
|
|
|
var apub =
|
|
'5484455905d3eff34c70980e871f27f05448e66f5a6efbb97cbcba4e927196c2bd9ea272cded91\
|
|
10a4977afa8d9b16c9139a444ed2d954a794650e5d7cb525204f385e1af81530518563822ecd0f9\
|
|
524a958d02b3c269e79d6d69850f0968ad567a4404fbb0b19efc8bc73e267b6136b88cafb33299f\
|
|
f7c7cace3ffab1a88c2c9ee841f88b4c3679b4efc465f5c93cca11d487be57373e4c5926f634c4e\
|
|
efee6721d01db91cd66321615b2522f96368dbc818875d422140d0edf30bdb97d9721feddcb9ff6\
|
|
453741a4f687ee46fc54bf1198801f1210ac789879a5ee123f79e2d2ce1209df2445d32166bc9e4\
|
|
8f89e944ec9c3b2e16c8066cd8eebd4e33eb941';
|
|
var bpub =
|
|
'3fca64510e36bc7da8a3a901c7b74c2eabfa25deaf7cbe1d0c50235866136ad677317279e1fb0\
|
|
06e9c0a07f63e14a3363c8e016fbbde2b2c7e79fed1cc3e08e95f7459f547a8cd0523ee9dc744d\
|
|
e5a956d92b937db4448917e1f6829437f05e408ee7aea70c0362b37370c7c75d14449d8b2d2133\
|
|
04ac972302d349975e2265ca7103cfebd019d9e91234d638611abd049014f7abf706c1c5da6c88\
|
|
788a1fdc6cdf17f5fffaf024ce8711a2ebde0b52e9f1cb56224483826d6e5ac6ecfaae07b75d20\
|
|
6e8ac97f5be1a5b68f20382f2a7dac189cf169325c4cf845b26a0cd616c31fec905c5d9035e5f7\
|
|
8e9880c812374ac0f3ca3d365f06e4be526b5affd4b79';
|
|
var apriv =
|
|
'62411e34704637d99c6c958a7db32ac22fcafafbe1c33d2cfdb76e12ded41f38fc16b792b9041\
|
|
2e4c82755a3815ba52f780f0ee296ad46e348fc4d1dcd6b64f4eea1b231b2b7d95c5b1c2e26d34\
|
|
83520558b9860a6eb668f01422a54e6604aa7702b4e67511397ef3ecb912bff1a83899c5a5bfb2\
|
|
0ee29249a91b8a698e62486f7009a0e9eaebda69d77ecfa2ca6ba2db6c8aa81759c8c90c675979\
|
|
08c3b3e6fc60668f7be81cce6784482af228dd7f489005253a165e292802cfd0399924f6c56827\
|
|
7012f68255207722355634290acc7fddeefbba75650a85ece95b6a12de67eac016ba78960108dd\
|
|
5dbadfaa43cc9fed515a1f307b7d90ae0623bc7b8cefb';
|
|
var secret =
|
|
'00c37b1e06a436d6717816a40e6d72907a6f255638b93032267dcb9a5f0b4a9aa0236f3dce63b\
|
|
1c418c60978a00acd1617dfeecf1661d8a3fafb4d0d8824386750f4853313400e7e4afd22847e4\
|
|
fa56bc9713872021265111906673b38db83d10cbfa1dea3b6b4c97c8655f4ae82125281af7f234\
|
|
8916a15c6f95649367d169d587697480df4d10b381479e86d5518b520d9d8fb764084eab518224\
|
|
dc8fe984ddaf532fc1531ce43155fa0ab32532bf1ece5356b8a3447b5267798a904f16f3f4e635\
|
|
597adc0179d011132dcffc0bbcb0dd2c8700872f8663ec7ddd897c659cc2efebccc73f38f0ec96\
|
|
8612314311231f905f91c63a1aea52e0b60cead8b57df';
|
|
|
|
/* FIPS-friendly 2048 bit prime */
|
|
var p = crypto.createDiffieHellman(
|
|
crypto.getDiffieHellman('modp14').getPrime());
|
|
|
|
p.setPublicKey(apub, 'hex');
|
|
p.setPrivateKey(apriv, 'hex');
|
|
|
|
assert.equal(
|
|
p.computeSecret(bpub, 'hex', 'hex').toString('hex'),
|
|
secret
|
|
);
|