2 // CryptoConfigTest.cs - NUnit Test Cases for CryptoConfig
5 // Sebastien Pouliot <sebastien@ximian.com>
7 // (C) 2002, 2003 Motus Technologies Inc. (http://www.motus.com)
8 // Copyright (C) 2004-2005 Novell, Inc (http://www.novell.com)
10 // Permission is hereby granted, free of charge, to any person obtaining
11 // a copy of this software and associated documentation files (the
12 // "Software"), to deal in the Software without restriction, including
13 // without limitation the rights to use, copy, modify, merge, publish,
14 // distribute, sublicense, and/or sell copies of the Software, and to
15 // permit persons to whom the Software is furnished to do so, subject to
16 // the following conditions:
18 // The above copyright notice and this permission notice shall be
19 // included in all copies or substantial portions of the Software.
21 // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
22 // EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
23 // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
24 // NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
25 // LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
26 // OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
27 // WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
30 using NUnit.Framework;
32 using System.Security.Cryptography;
34 namespace MonoTests.System.Security.Cryptography {
37 public class CryptoConfigTest {
39 void CreateFromName (string name, string objectname)
41 object o = CryptoConfig.CreateFromName (name);
42 if (objectname == null)
43 Assert.IsNull (o, name);
45 Assert.AreEqual (objectname, o.ToString (), name);
49 [ExpectedException (typeof (ArgumentNullException))]
50 public void CreateFromNameNull ()
52 object o = CryptoConfig.CreateFromName (null);
55 // validate that CryptoConfig create the exact same implementation between mono and MS
57 public void CreateFromName ()
59 CreateFromName ("SHA", "System.Security.Cryptography.SHA1CryptoServiceProvider");
60 // FIXME: We need to support the machine.config file to get exact same results
61 // with the MS .NET Framework
62 CreateFromName ("SHA1", "System.Security.Cryptography.SHA1CryptoServiceProvider");
63 CreateFromName( "System.Security.Cryptography.SHA1", "System.Security.Cryptography.SHA1CryptoServiceProvider");
64 // after installing the WSDK - changes to the machine.config file (not documented)
65 // CreateFromName ("SHA1", "System.Security.Cryptography.SHA1Managed");
66 // CreateFromName ("System.Security.Cryptography.SHA1", "System.Security.Cryptography.SHA1Managed");
67 CreateFromName ("System.Security.Cryptography.HashAlgorithm", "System.Security.Cryptography.SHA1CryptoServiceProvider");
68 CreateFromName ("System.Security.Cryptography.SHA1CryptoServiceProvider", "System.Security.Cryptography.SHA1CryptoServiceProvider");
69 CreateFromName ("MD5", "System.Security.Cryptography.MD5CryptoServiceProvider");
70 CreateFromName ("System.Security.Cryptography.MD5", "System.Security.Cryptography.MD5CryptoServiceProvider");
71 CreateFromName ("System.Security.Cryptography.MD5CryptoServiceProvider", "System.Security.Cryptography.MD5CryptoServiceProvider");
72 CreateFromName ("SHA256", "System.Security.Cryptography.SHA256Managed");
73 CreateFromName ("SHA-256", "System.Security.Cryptography.SHA256Managed");
74 CreateFromName ("System.Security.Cryptography.SHA256", "System.Security.Cryptography.SHA256Managed");
75 CreateFromName ("SHA384", "System.Security.Cryptography.SHA384Managed");
76 CreateFromName ("SHA-384", "System.Security.Cryptography.SHA384Managed");
77 CreateFromName ("System.Security.Cryptography.SHA384", "System.Security.Cryptography.SHA384Managed");
78 CreateFromName ("SHA512", "System.Security.Cryptography.SHA512Managed");
79 CreateFromName ("SHA-512", "System.Security.Cryptography.SHA512Managed");
80 CreateFromName ("System.Security.Cryptography.SHA512", "System.Security.Cryptography.SHA512Managed");
81 CreateFromName ("RSA", "System.Security.Cryptography.RSACryptoServiceProvider");
82 CreateFromName ("System.Security.Cryptography.RSA", "System.Security.Cryptography.RSACryptoServiceProvider");
83 CreateFromName ("System.Security.Cryptography.AsymmetricAlgorithm", "System.Security.Cryptography.RSACryptoServiceProvider");
84 CreateFromName ("DSA", "System.Security.Cryptography.DSACryptoServiceProvider");
85 CreateFromName ("System.Security.Cryptography.DSA", "System.Security.Cryptography.DSACryptoServiceProvider");
86 CreateFromName ("DES", "System.Security.Cryptography.DESCryptoServiceProvider");
87 CreateFromName ("System.Security.Cryptography.DES", "System.Security.Cryptography.DESCryptoServiceProvider");
88 CreateFromName ("3DES", "System.Security.Cryptography.TripleDESCryptoServiceProvider");
89 CreateFromName ("TripleDES", "System.Security.Cryptography.TripleDESCryptoServiceProvider");
90 CreateFromName ("Triple DES", "System.Security.Cryptography.TripleDESCryptoServiceProvider");
91 CreateFromName ("System.Security.Cryptography.TripleDES", "System.Security.Cryptography.TripleDESCryptoServiceProvider");
92 // LAMESPEC SymmetricAlgorithm documented as TripleDESCryptoServiceProvider
93 CreateFromName ("System.Security.Cryptography.SymmetricAlgorithm", "System.Security.Cryptography.RijndaelManaged");
94 CreateFromName ("RC2", "System.Security.Cryptography.RC2CryptoServiceProvider");
95 CreateFromName ("System.Security.Cryptography.RC2", "System.Security.Cryptography.RC2CryptoServiceProvider");
96 CreateFromName ("Rijndael", "System.Security.Cryptography.RijndaelManaged");
97 CreateFromName ("System.Security.Cryptography.Rijndael", "System.Security.Cryptography.RijndaelManaged");
98 // LAMESPEC Undocumented Names in CryptoConfig
99 CreateFromName ("RandomNumberGenerator", "System.Security.Cryptography.RNGCryptoServiceProvider");
100 CreateFromName ("System.Security.Cryptography.RandomNumberGenerator", "System.Security.Cryptography.RNGCryptoServiceProvider");
101 CreateFromName ("System.Security.Cryptography.KeyedHashAlgorithm", "System.Security.Cryptography.HMACSHA1");
102 CreateFromName ("HMACSHA1", "System.Security.Cryptography.HMACSHA1");
103 CreateFromName ("System.Security.Cryptography.HMACSHA1", "System.Security.Cryptography.HMACSHA1");
104 CreateFromName ("MACTripleDES", "System.Security.Cryptography.MACTripleDES");
105 CreateFromName ("System.Security.Cryptography.MACTripleDES", "System.Security.Cryptography.MACTripleDES");
107 // new HMAC - new base class doesn't return anything with it's short name
\r
108 Assert.IsNull (CryptoConfig.CreateFromName ("HMAC"), "HMAC");
109 CreateFromName ("System.Security.Cryptography.HMAC", "System.Security.Cryptography.HMACSHA1");
\r
110 CreateFromName ("HMACMD5", "System.Security.Cryptography.HMACMD5");
\r
111 CreateFromName ("System.Security.Cryptography.HMACMD5", "System.Security.Cryptography.HMACMD5");
\r
112 CreateFromName ("HMACRIPEMD160", "System.Security.Cryptography.HMACRIPEMD160");
\r
113 CreateFromName ("System.Security.Cryptography.HMACRIPEMD160", "System.Security.Cryptography.HMACRIPEMD160");
\r
114 CreateFromName ("HMACSHA256", "System.Security.Cryptography.HMACSHA256");
\r
115 CreateFromName ("System.Security.Cryptography.HMACSHA256", "System.Security.Cryptography.HMACSHA256");
\r
116 CreateFromName ("HMACSHA384", "System.Security.Cryptography.HMACSHA384");
\r
117 CreateFromName ("System.Security.Cryptography.HMACSHA384", "System.Security.Cryptography.HMACSHA384");
\r
118 CreateFromName ("HMACSHA512", "System.Security.Cryptography.HMACSHA512");
\r
119 CreateFromName ("System.Security.Cryptography.HMACSHA512", "System.Security.Cryptography.HMACSHA512");
\r
120 // new hash algorithm
\r
121 CreateFromName ("RIPEMD160", "System.Security.Cryptography.RIPEMD160Managed");
\r
122 CreateFromName ("RIPEMD-160", "System.Security.Cryptography.RIPEMD160Managed");
\r
123 CreateFromName ("System.Security.Cryptography.RIPEMD160", "System.Security.Cryptography.RIPEMD160Managed");
\r
125 // note: CryptoConfig can create any object !
126 CreateFromName ("System.Security.Cryptography.CryptoConfig", "System.Security.Cryptography.CryptoConfig");
127 CreateFromName ("System.IO.MemoryStream", "System.IO.MemoryStream");
128 // non existing algo should return null (without exception)
\r
129 Assert.IsNull (CryptoConfig.CreateFromName ("NonExistingAlgorithm"), "NonExistingAlgorithm");
132 // additional names (URL) used for XMLDSIG (System.Security.Cryptography.Xml)
133 // URL taken from http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/
135 public void CreateFromURL ()
137 // URL used in SignatureMethod element
138 CreateFromName ("http://www.w3.org/2000/09/xmldsig#dsa-sha1", "System.Security.Cryptography.DSASignatureDescription");
139 CreateFromName ("http://www.w3.org/2000/09/xmldsig#rsa-sha1", "System.Security.Cryptography.RSAPKCS1SHA1SignatureDescription");
140 CreateFromName ("http://www.w3.org/2000/09/xmldsig#hmac-sha1", null);
141 // URL used in DigestMethod element
142 CreateFromName ("http://www.w3.org/2000/09/xmldsig#sha1", "System.Security.Cryptography.SHA1CryptoServiceProvider");
143 // URL used in Canonicalization or Transform elements
144 CreateFromName ("http://www.w3.org/TR/2001/REC-xml-c14n-20010315", "System.Security.Cryptography.Xml.XmlDsigC14NTransform");
145 CreateFromName ("http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments", "System.Security.Cryptography.Xml.XmlDsigC14NWithCommentsTransform");
146 // URL used in Transform element
147 CreateFromName ("http://www.w3.org/2000/09/xmldsig#base64", "System.Security.Cryptography.Xml.XmlDsigBase64Transform");
148 // after installing the WSDK - changes to the machine.config file (not documented)
149 // CreateFromName ("http://www.w3.org/TR/1999/REC-xpath-19991116", "Microsoft.WSDK.Security.XmlDsigXPathTransform");
150 CreateFromName ("http://www.w3.org/TR/1999/REC-xpath-19991116", "System.Security.Cryptography.Xml.XmlDsigXPathTransform");
151 CreateFromName ("http://www.w3.org/TR/1999/REC-xslt-19991116", "System.Security.Cryptography.Xml.XmlDsigXsltTransform");
152 CreateFromName ("http://www.w3.org/2000/09/xmldsig#enveloped-signature", "System.Security.Cryptography.Xml.XmlDsigEnvelopedSignatureTransform");
153 // URL used in Reference element
154 CreateFromName ("http://www.w3.org/2000/09/xmldsig#Object", null);
155 CreateFromName ("http://www.w3.org/2000/09/xmldsig#Manifest", null);
156 CreateFromName ("http://www.w3.org/2000/09/xmldsig#SignatureProperties", null);
157 // LAMESPEC: only documentated in ".NET Framework Security" book
158 CreateFromName ("http://www.w3.org/2000/09/xmldsig# X509Data", "System.Security.Cryptography.Xml.KeyInfoX509Data");
159 CreateFromName ("http://www.w3.org/2000/09/xmldsig# KeyName", "System.Security.Cryptography.Xml.KeyInfoName");
160 CreateFromName ("http://www.w3.org/2000/09/xmldsig# KeyValue/DSAKeyValue", "System.Security.Cryptography.Xml.DSAKeyValue");
161 CreateFromName ("http://www.w3.org/2000/09/xmldsig# KeyValue/RSAKeyValue", "System.Security.Cryptography.Xml.RSAKeyValue");
162 CreateFromName ("http://www.w3.org/2000/09/xmldsig# RetrievalMethod", "System.Security.Cryptography.Xml.KeyInfoRetrievalMethod");
165 // Tests created using "A Layer Man Guide to ASN.1" from RSA, page 19-20
166 // Need to find an OID ? goto http://www.alvestrand.no/~hta/objectid/top.html
167 static byte[] oidETSI = { 0x06, 0x03, 0x04, 0x00, 0x00 };
168 static byte[] oidSHA1 = { 0x06, 0x05, 0x2B, 0x0E, 0x03, 0x02, 0x1A };
169 static byte[] oidASN1CharacterModule = { 0x06, 0x04, 0x51, 0x00, 0x00, 0x00 };
170 static byte[] oidmd5withRSAEncryption = { 0x06, 0x09, 0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x04 };
174 [ExpectedException (typeof (ArgumentNullException))]
176 [ExpectedException (typeof (NullReferenceException))]
178 public void EncodeOIDNull ()
180 byte[] o = CryptoConfig.EncodeOID (null);
184 public void EncodeOID ()
186 // OID starts with 0, 1 or 2
\r
187 Assert.AreEqual (oidETSI, CryptoConfig.EncodeOID ("0.4.0.0"), "OID starting with 0.");
\r
188 Assert.AreEqual (oidSHA1, CryptoConfig.EncodeOID ("1.3.14.3.2.26"), "OID starting with 1.");
\r
189 Assert.AreEqual (oidASN1CharacterModule, CryptoConfig.EncodeOID ("2.1.0.0.0"), "OID starting with 2.");
190 // OID numbers can span multiple bytes
\r
191 Assert.AreEqual (oidmd5withRSAEncryption, CryptoConfig.EncodeOID ("1.2.840.113549.1.1.4"), "OID with numbers spanning multiple bytes");
195 [ExpectedException (typeof (CryptographicUnexpectedOperationException))]
196 // LAMESPEC: OID greater that 0x7F (127) bytes aren't supported by the MS Framework
197 public void EncodeOID_BiggerThan127bytes ()
199 // "ms"-invalid OID - greater than 127 bytes (length encoding)
200 // OID longer than 127 bytes (so length must be encoded on multiple bytes)
201 string baseOID = "1.3.6.1.4.1.11071.0.";
202 string lastPart = "1111111111"; // must fit in int32
203 for (int i = 1; i < 30; i++) {
204 baseOID += lastPart + ".";
207 byte[] tooLongOID = CryptoConfig.EncodeOID (baseOID);
211 [ExpectedException (typeof (OverflowException))]
212 // LAMESPEC: OID with numbers > Int32 aren't supported by the MS BCL
213 public void EncodeOID_BiggerThanInt32 ()
215 // "ms"-invalid OID - where a number of the OID > Int32
216 byte[] tooLongOID = CryptoConfig.EncodeOID ("1.1.4294967295");
220 public void EncodeOID_InvalidStart ()
222 // invalid OID - must start with 0, 1 or 2
223 // however it works with MS BCL
224 byte[] oid3 = CryptoConfig.EncodeOID ("3.0");
225 byte[] res3 = { 0x06, 0x01, 0x78 };
\r
226 Assert.AreEqual (res3, oid3, "OID: 3.0");
230 [ExpectedException (typeof (CryptographicUnexpectedOperationException))]
231 public void EncodeOID_TooShort ()
233 // invalid OID - must have at least 2 parts (according to X.208)
234 byte[] tooShortOID = CryptoConfig.EncodeOID ("0");
238 public void EncodeOID_InvalidSecondPart ()
240 // invalid OID - second value < 40 for 0. and 1. (modulo 40)
241 // however it works with MS BCL
242 byte[] tooBigSecondPartOID = CryptoConfig.EncodeOID ("0.40");
243 byte[] tooBigSecondPartRes = { 0x06, 0x01, 0x28 };
\r
244 Assert.AreEqual (tooBigSecondPartRes, tooBigSecondPartOID, "OID: 0.40");
248 [ExpectedException (typeof (ArgumentNullException))]
249 public void MapNameToOIDNull ()
251 CryptoConfig.MapNameToOID (null);
254 private void MapNameToOID (string name, string oid)
256 Assert.AreEqual (oid, CryptoConfig.MapNameToOID (name), "oid(" + name + ")");
259 // LAMESPEC: doesn't support all names defined in CryptoConfig
260 // non supported names (in MSFW) are commented or null-ed
261 // LAMESPEC: undocumented but full class name is supported
263 public void MapNameToOID()
265 // MapNameToOID ("SHA", "1.3.14.3.2.26");
266 MapNameToOID ("SHA1", "1.3.14.3.2.26");
267 MapNameToOID ("System.Security.Cryptography.SHA1", "1.3.14.3.2.26");
268 // MapNameToOID ("System.Security.Cryptography.HashAlgorithm", "1.3.14.3.2.26");
269 MapNameToOID ("System.Security.Cryptography.SHA1CryptoServiceProvider", "1.3.14.3.2.26");
270 MapNameToOID ("System.Security.Cryptography.SHA1Managed", "1.3.14.3.2.26");
271 MapNameToOID ("MD5", "1.2.840.113549.2.5");
272 MapNameToOID ("System.Security.Cryptography.MD5", "1.2.840.113549.2.5");
273 MapNameToOID ("System.Security.Cryptography.MD5CryptoServiceProvider", "1.2.840.113549.2.5");
275 MapNameToOID ("SHA256", "2.16.840.1.101.3.4.2.1");
276 MapNameToOID ("System.Security.Cryptography.SHA256", "2.16.840.1.101.3.4.2.1");
277 MapNameToOID ("System.Security.Cryptography.SHA256Managed", "2.16.840.1.101.3.4.2.1");
278 MapNameToOID ("SHA384", "2.16.840.1.101.3.4.2.2");
279 MapNameToOID ("System.Security.Cryptography.SHA384", "2.16.840.1.101.3.4.2.2");
280 MapNameToOID ("System.Security.Cryptography.SHA384Managed", "2.16.840.1.101.3.4.2.2");
281 MapNameToOID ("SHA512", "2.16.840.1.101.3.4.2.3");
282 MapNameToOID ("System.Security.Cryptography.SHA512", "2.16.840.1.101.3.4.2.3");
283 MapNameToOID ("System.Security.Cryptography.SHA512Managed", "2.16.840.1.101.3.4.2.3");
285 MapNameToOID ("SHA256", "2.16.840.1.101.3.4.1");
286 // MapNameToOID ("SHA-256", "2.16.840.1.101.3.4.1");
287 MapNameToOID ("System.Security.Cryptography.SHA256", "2.16.840.1.101.3.4.1");
288 MapNameToOID ("System.Security.Cryptography.SHA256Managed", "2.16.840.1.101.3.4.1");
289 MapNameToOID ("SHA384", "2.16.840.1.101.3.4.2");
290 // MapNameToOID ("SHA-384", "2.16.840.1.101.3.4.2");
291 MapNameToOID ("System.Security.Cryptography.SHA384", "2.16.840.1.101.3.4.2");
292 MapNameToOID ("System.Security.Cryptography.SHA384Managed", "2.16.840.1.101.3.4.2");
293 MapNameToOID ("SHA512", "2.16.840.1.101.3.4.3");
294 // MapNameToOID ("SHA-512", "2.16.840.1.101.3.4.3");
295 MapNameToOID ("System.Security.Cryptography.SHA512", "2.16.840.1.101.3.4.3");
296 MapNameToOID ("System.Security.Cryptography.SHA512Managed", "2.16.840.1.101.3.4.3");
298 // LAMESPEC: only documentated in ".NET Framework Security" book
299 MapNameToOID ("TripleDESKeyWrap", "1.2.840.113549.1.9.16.3.6");
301 // new OID defined in Fx 2.0
302 // MapNameToOID ("RSA", "1.2.840.113549.1.1.1");
303 MapNameToOID ("DSA", "1.2.840.10040.4.1");
304 MapNameToOID ("DES", "1.3.14.3.2.7");
305 MapNameToOID ("3DES", "1.2.840.113549.3.7");
306 MapNameToOID ("TripleDES", "1.2.840.113549.3.7");
307 MapNameToOID ("RC2", "1.2.840.113549.3.2");
309 // no OID defined before Fx 2.0
310 MapNameToOID ("RSA", null);
311 MapNameToOID ("DSA", null);
312 MapNameToOID ("DES", null);
313 MapNameToOID ("3DES", null);
314 MapNameToOID ("TripleDES", null);
315 MapNameToOID ("RC2", null);
318 MapNameToOID ("System.Security.Cryptography.RSA", null);
319 MapNameToOID ("System.Security.Cryptography.AsymmetricAlgorithm", null);
320 MapNameToOID ("System.Security.Cryptography.DSA", null);
321 MapNameToOID ("System.Security.Cryptography.DES", null);
322 MapNameToOID ("Triple DES", null);
323 MapNameToOID ("System.Security.Cryptography.TripleDES", null);
324 MapNameToOID ("System.Security.Cryptography.RC2", null);
325 MapNameToOID ("Rijndael", null);
326 MapNameToOID ("System.Security.Cryptography.Rijndael", null);
327 MapNameToOID ("System.Security.Cryptography.SymmetricAlgorithm", null);
328 // LAMESPEC Undocumented Names in CryptoConfig
329 MapNameToOID ("RandomNumberGenerator", null);
330 MapNameToOID ("System.Security.Cryptography.RandomNumberGenerator", null);
331 MapNameToOID ("System.Security.Cryptography.KeyedHashAlgorithm", null);
333 MapNameToOID ("HMAC", null);
\r
334 MapNameToOID ("System.Security.Cryptography.HMAC", null);
\r
335 MapNameToOID ("HMACMD5", null);
\r
336 MapNameToOID ("System.Security.Cryptography.HMACMD5", null);
\r
337 MapNameToOID ("HMACRIPEMD160", null);
\r
338 MapNameToOID ("System.Security.Cryptography.HMACRIPEMD160", null);
\r
339 MapNameToOID ("HMACSHA256", null);
\r
340 MapNameToOID ("System.Security.Cryptography.HMACSHA256", null);
\r
341 MapNameToOID ("HMACSHA384", null);
\r
342 MapNameToOID ("System.Security.Cryptography.HMACSHA384", null);
\r
343 MapNameToOID ("HMACSHA512", null);
\r
344 MapNameToOID ("System.Security.Cryptography.HMACSHA512", null);
\r
346 MapNameToOID ("HMACSHA1", null);
\r
347 MapNameToOID ("System.Security.Cryptography.HMACSHA1", null);
\r
348 MapNameToOID ("MACTripleDES", null);
349 MapNameToOID ("System.Security.Cryptography.MACTripleDES", null);
350 // non existing algo should return null (without exception)
351 MapNameToOID ("NonExistingAlgorithm", null);
355 public void CCToString ()
357 // under normal circumstance there are no need to create a CryptoConfig object
358 // because all interesting stuff are in static methods
359 CryptoConfig cc = new CryptoConfig ();
360 Assert.AreEqual ("System.Security.Cryptography.CryptoConfig", cc.ToString ());