91 lines
4.1 KiB
Java
91 lines
4.1 KiB
Java
import de.maxhenkel.voicechat.voice.common.Secret;
|
|
import de.maxhenkel.voicechat.net.ProtocolChannelCompatibility;
|
|
import java.nio.ByteBuffer;
|
|
import java.security.SecureRandom;
|
|
import java.util.Arrays;
|
|
import java.util.UUID;
|
|
import javax.crypto.Cipher;
|
|
import javax.crypto.spec.IvParameterSpec;
|
|
import javax.crypto.spec.SecretKeySpec;
|
|
|
|
public class ProtocolCryptoSelfTest {
|
|
public static void main(String[] args) throws Exception {
|
|
testStateChannelCompatibility();
|
|
|
|
byte[] key = new byte[16];
|
|
for (int i = 0; i < key.length; i++) key[i] = (byte) (i * 13 + 7);
|
|
UUID legacyKey = uuidFromBytes(key);
|
|
Secret hybridSecret = Secret.fromBytes(key);
|
|
byte[] message = "SVC dual-protocol crypto self-test".getBytes("UTF-8");
|
|
|
|
hybridSecret.setLegacyProtocol(true);
|
|
for (int i = 0; i < 100; i++) {
|
|
byte[] oldClientPacket = legacyEncrypt(legacyKey, message);
|
|
if (!Arrays.equals(message, hybridSecret.decrypt(oldClientPacket))) {
|
|
throw new AssertionError("Hybrid server failed to decrypt a 2.5 CBC packet");
|
|
}
|
|
byte[] hybridServerPacket = hybridSecret.encrypt(message);
|
|
if (!Arrays.equals(message, legacyDecrypt(legacyKey, hybridServerPacket))) {
|
|
throw new AssertionError("2.5 client failed to decrypt a hybrid server CBC packet");
|
|
}
|
|
}
|
|
|
|
hybridSecret.setLegacyProtocol(false);
|
|
for (int i = 0; i < 100; i++) {
|
|
byte[] packet = hybridSecret.encrypt(message);
|
|
if (!Arrays.equals(message, hybridSecret.decrypt(packet))) {
|
|
throw new AssertionError("Hybrid server AES-GCM round-trip failed");
|
|
}
|
|
}
|
|
System.out.println("PASS: legacy state-channel mapping, 100 CBC interop cycles and 100 GCM round-trips");
|
|
}
|
|
|
|
private static void testStateChannelCompatibility() {
|
|
check("voicechat:player_state", ProtocolChannelCompatibility.outgoingChannel("voicechat:state", 18));
|
|
check("voicechat:player_states", ProtocolChannelCompatibility.outgoingChannel("voicechat:states", 18));
|
|
if (ProtocolChannelCompatibility.outgoingChannel("voicechat:remove_state", 18) != null) {
|
|
throw new AssertionError("The 2.5 client has no remove-state packet");
|
|
}
|
|
check("voicechat:state", ProtocolChannelCompatibility.outgoingChannel("voicechat:state", 20));
|
|
check("voicechat:states", ProtocolChannelCompatibility.outgoingChannel("voicechat:states", 20));
|
|
}
|
|
|
|
private static void check(String expected, String actual) {
|
|
if (!expected.equals(actual)) {
|
|
throw new AssertionError("Expected channel " + expected + ", got " + actual);
|
|
}
|
|
}
|
|
|
|
private static UUID uuidFromBytes(byte[] bytes) {
|
|
ByteBuffer buffer = ByteBuffer.wrap(bytes);
|
|
return new UUID(buffer.getLong(), buffer.getLong());
|
|
}
|
|
|
|
private static byte[] legacyEncrypt(UUID secret, byte[] data) throws Exception {
|
|
byte[] iv = new byte[16];
|
|
new SecureRandom().nextBytes(iv);
|
|
Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
|
|
cipher.init(Cipher.ENCRYPT_MODE, key(secret), new IvParameterSpec(iv));
|
|
byte[] encrypted = cipher.doFinal(data);
|
|
byte[] payload = Arrays.copyOf(iv, iv.length + encrypted.length);
|
|
System.arraycopy(encrypted, 0, payload, iv.length, encrypted.length);
|
|
return payload;
|
|
}
|
|
|
|
private static byte[] legacyDecrypt(UUID secret, byte[] payload) throws Exception {
|
|
byte[] iv = Arrays.copyOfRange(payload, 0, 16);
|
|
byte[] encrypted = Arrays.copyOfRange(payload, 16, payload.length);
|
|
Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
|
|
cipher.init(Cipher.DECRYPT_MODE, key(secret), new IvParameterSpec(iv));
|
|
return cipher.doFinal(encrypted);
|
|
}
|
|
|
|
private static SecretKeySpec key(UUID secret) {
|
|
byte[] key = ByteBuffer.allocate(16)
|
|
.putLong(secret.getMostSignificantBits())
|
|
.putLong(secret.getLeastSignificantBits())
|
|
.array();
|
|
return new SecretKeySpec(key, "AES");
|
|
}
|
|
}
|