mirror of
https://github.com/reactos/reactos.git
synced 2024-11-01 04:11:30 +00:00
266 lines
8.8 KiB
C
266 lines
8.8 KiB
C
/*
|
|
* Unit test suite for crypt32.dll's CryptProtectData/CryptUnprotectData
|
|
*
|
|
* Copyright 2005 Kees Cook <kees@outflux.net>
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <stdarg.h>
|
|
#include <windef.h>
|
|
#include <winbase.h>
|
|
#include <winerror.h>
|
|
#include <wincrypt.h>
|
|
|
|
#include "wine/test.h"
|
|
|
|
static BOOL (WINAPI *pCryptProtectData)(DATA_BLOB*,LPCWSTR,DATA_BLOB*,PVOID,CRYPTPROTECT_PROMPTSTRUCT*,DWORD,DATA_BLOB*);
|
|
static BOOL (WINAPI *pCryptUnprotectData)(DATA_BLOB*,LPWSTR*,DATA_BLOB*,PVOID,CRYPTPROTECT_PROMPTSTRUCT*,DWORD,DATA_BLOB*);
|
|
|
|
static char secret[] = "I am a super secret string that no one can see!";
|
|
static char secret2[] = "I am a super secret string indescribable string";
|
|
static char key[] = "Wibble wibble wibble";
|
|
static const WCHAR desc[] = {'U','l','t','r','a',' ','s','e','c','r','e','t',' ','t','e','s','t',' ','m','e','s','s','a','g','e',0};
|
|
static BOOL protected = FALSE; /* if true, the unprotect tests can run */
|
|
static DATA_BLOB cipher;
|
|
static DATA_BLOB cipher_entropy;
|
|
static DATA_BLOB cipher_no_desc;
|
|
|
|
static void test_cryptprotectdata(void)
|
|
{
|
|
LONG r;
|
|
DATA_BLOB plain;
|
|
DATA_BLOB entropy;
|
|
|
|
plain.pbData=(void*)secret;
|
|
plain.cbData=strlen(secret)+1;
|
|
|
|
entropy.pbData=(void*)key;
|
|
entropy.cbData=strlen(key)+1;
|
|
|
|
SetLastError(0xDEADBEEF);
|
|
protected = pCryptProtectData(NULL,desc,NULL,NULL,NULL,0,&cipher);
|
|
ok(!protected, "Encrypting without plain data source.\n");
|
|
r = GetLastError();
|
|
ok(r == ERROR_INVALID_PARAMETER, "Wrong (%u) GetLastError seen\n",r);
|
|
|
|
SetLastError(0xDEADBEEF);
|
|
protected = pCryptProtectData(&plain,desc,NULL,NULL,NULL,0,NULL);
|
|
ok(!protected, "Encrypting without cipher destination.\n");
|
|
r = GetLastError();
|
|
ok(r == ERROR_INVALID_PARAMETER, "Wrong (%u) GetLastError seen\n",r);
|
|
|
|
cipher.pbData=NULL;
|
|
cipher.cbData=0;
|
|
|
|
/* without entropy */
|
|
SetLastError(0xDEADBEEF);
|
|
protected = pCryptProtectData(&plain,desc,NULL,NULL,NULL,0,&cipher);
|
|
ok(protected ||
|
|
broken(!protected), /* Win9x/NT4 */
|
|
"Encrypting without entropy.\n");
|
|
if (protected)
|
|
{
|
|
r = GetLastError();
|
|
ok(r == ERROR_SUCCESS ||
|
|
r == ERROR_IO_PENDING, /* win2k */
|
|
"Expected ERROR_SUCCESS or ERROR_IO_PENDING, got %d\n",r);
|
|
}
|
|
|
|
cipher_entropy.pbData=NULL;
|
|
cipher_entropy.cbData=0;
|
|
|
|
/* with entropy */
|
|
SetLastError(0xDEADBEEF);
|
|
protected = pCryptProtectData(&plain,desc,&entropy,NULL,NULL,0,&cipher_entropy);
|
|
ok(protected ||
|
|
broken(!protected), /* Win9x/NT4 */
|
|
"Encrypting with entropy.\n");
|
|
|
|
cipher_no_desc.pbData=NULL;
|
|
cipher_no_desc.cbData=0;
|
|
|
|
/* with entropy but no description */
|
|
plain.pbData=(void*)secret2;
|
|
plain.cbData=strlen(secret2)+1;
|
|
SetLastError(0xDEADBEEF);
|
|
protected = pCryptProtectData(&plain,NULL,&entropy,NULL,NULL,0,&cipher_no_desc);
|
|
if (!protected)
|
|
{
|
|
/* fails in win2k */
|
|
ok(GetLastError() == ERROR_INVALID_PARAMETER,
|
|
"Expected ERROR_INVALID_PARAMETER, got %d\n", GetLastError());
|
|
}
|
|
}
|
|
|
|
static void test_cryptunprotectdata(void)
|
|
{
|
|
LONG r;
|
|
DATA_BLOB plain;
|
|
DATA_BLOB entropy;
|
|
BOOL okay;
|
|
WCHAR * data_desc;
|
|
|
|
entropy.pbData=(void*)key;
|
|
entropy.cbData=strlen(key)+1;
|
|
|
|
/* fails in win2k */
|
|
if (!protected)
|
|
{
|
|
skip("CryptProtectData failed to run\n");
|
|
return;
|
|
}
|
|
|
|
plain.pbData=NULL;
|
|
plain.cbData=0;
|
|
|
|
SetLastError(0xDEADBEEF);
|
|
okay = pCryptUnprotectData(&cipher,NULL,NULL,NULL,NULL,0,NULL);
|
|
ok(!okay,"Decrypting without destination\n");
|
|
r = GetLastError();
|
|
ok(r == ERROR_INVALID_PARAMETER, "Wrong (%u) GetLastError seen\n",r);
|
|
|
|
SetLastError(0xDEADBEEF);
|
|
okay = pCryptUnprotectData(NULL,NULL,NULL,NULL,NULL,0,&plain);
|
|
ok(!okay,"Decrypting without source\n");
|
|
r = GetLastError();
|
|
ok(r == ERROR_INVALID_PARAMETER, "Wrong (%u) GetLastError seen\n",r);
|
|
|
|
plain.pbData=NULL;
|
|
plain.cbData=0;
|
|
|
|
SetLastError(0xDEADBEEF);
|
|
okay = pCryptUnprotectData(&cipher_entropy,NULL,NULL,NULL,NULL,0,&plain);
|
|
ok(!okay,"Decrypting without needed entropy\n");
|
|
r = GetLastError();
|
|
ok(r == ERROR_INVALID_DATA, "Wrong (%u) GetLastError seen\n", r);
|
|
|
|
plain.pbData=NULL;
|
|
plain.cbData=0;
|
|
data_desc=NULL;
|
|
|
|
/* without entropy */
|
|
SetLastError(0xDEADBEEF);
|
|
okay = pCryptUnprotectData(&cipher,&data_desc,NULL,NULL,NULL,0,&plain);
|
|
ok(okay,"Decrypting without entropy\n");
|
|
|
|
ok(plain.pbData!=NULL,"Plain DATA_BLOB missing data\n");
|
|
ok(plain.cbData==strlen(secret)+1,"Plain DATA_BLOB wrong length\n");
|
|
ok(!strcmp((const char*)plain.pbData,secret),"Plain does not match secret\n");
|
|
ok(data_desc!=NULL,"Description not allocated\n");
|
|
ok(!lstrcmpW(data_desc,desc),"Description does not match\n");
|
|
|
|
LocalFree(plain.pbData);
|
|
LocalFree(data_desc);
|
|
|
|
plain.pbData=NULL;
|
|
plain.cbData=0;
|
|
data_desc=NULL;
|
|
|
|
/* with wrong entropy */
|
|
SetLastError(0xDEADBEEF);
|
|
okay = pCryptUnprotectData(&cipher_entropy,&data_desc,&cipher_entropy,NULL,NULL,0,&plain);
|
|
ok(!okay,"Decrypting with wrong entropy\n");
|
|
r = GetLastError();
|
|
ok(r == ERROR_INVALID_DATA, "Wrong (%u) GetLastError seen\n",r);
|
|
|
|
/* with entropy */
|
|
SetLastError(0xDEADBEEF);
|
|
okay = pCryptUnprotectData(&cipher_entropy,&data_desc,&entropy,NULL,NULL,0,&plain);
|
|
ok(okay,"Decrypting with entropy\n");
|
|
|
|
ok(plain.pbData!=NULL,"Plain DATA_BLOB missing data\n");
|
|
ok(plain.cbData==strlen(secret)+1,"Plain DATA_BLOB wrong length\n");
|
|
ok(!strcmp((const char*)plain.pbData,secret),"Plain does not match secret\n");
|
|
ok(data_desc!=NULL,"Description not allocated\n");
|
|
ok(!lstrcmpW(data_desc,desc),"Description does not match\n");
|
|
|
|
LocalFree(plain.pbData);
|
|
LocalFree(data_desc);
|
|
|
|
plain.pbData=NULL;
|
|
plain.cbData=0;
|
|
data_desc=NULL;
|
|
|
|
/* with entropy but no description */
|
|
SetLastError(0xDEADBEEF);
|
|
okay = pCryptUnprotectData(&cipher_no_desc,&data_desc,&entropy,NULL,NULL,0,&plain);
|
|
ok(okay,"Decrypting with entropy and no description\n");
|
|
|
|
ok(plain.pbData!=NULL,"Plain DATA_BLOB missing data\n");
|
|
ok(plain.cbData==strlen(secret2)+1,"Plain DATA_BLOB wrong length\n");
|
|
ok(!strcmp((const char*)plain.pbData,secret2),"Plain does not match secret\n");
|
|
ok(data_desc!=NULL,"Description not allocated\n");
|
|
ok(data_desc[0]=='\0',"Description not empty\n");
|
|
|
|
LocalFree(data_desc);
|
|
LocalFree(plain.pbData);
|
|
|
|
plain.pbData=NULL;
|
|
plain.cbData=0;
|
|
}
|
|
|
|
static void test_simpleroundtrip(const char *plaintext)
|
|
{
|
|
DATA_BLOB input;
|
|
DATA_BLOB encrypted;
|
|
DATA_BLOB output;
|
|
int res;
|
|
WCHAR emptyW[1];
|
|
|
|
emptyW[0] = 0;
|
|
input.pbData = (unsigned char *)plaintext;
|
|
input.cbData = strlen(plaintext);
|
|
res = pCryptProtectData(&input, emptyW, NULL, NULL, NULL, 0, &encrypted);
|
|
ok(res != 0 || broken(!res), "can't protect\n");
|
|
if (!res)
|
|
{
|
|
/* Fails on Win9x, NT4 */
|
|
win_skip("CryptProtectData failed\n");
|
|
return;
|
|
}
|
|
|
|
res = pCryptUnprotectData(&encrypted, NULL, NULL, NULL, NULL, 0, &output);
|
|
ok(res != 0, "can't unprotect; last error %u\n", GetLastError());
|
|
ok(output.cbData == strlen(plaintext), "output wrong length %d for input '%s', wanted %d\n", output.cbData, plaintext, lstrlenA(plaintext));
|
|
ok(!memcmp(plaintext, (char *)output.pbData, output.cbData), "output wrong contents for input '%s'\n", plaintext);
|
|
LocalFree(output.pbData);
|
|
LocalFree(encrypted.pbData);
|
|
}
|
|
|
|
START_TEST(protectdata)
|
|
{
|
|
HMODULE hCrypt32 = GetModuleHandleA("crypt32.dll");
|
|
pCryptProtectData = (void*)GetProcAddress(hCrypt32, "CryptProtectData");
|
|
pCryptUnprotectData = (void*)GetProcAddress(hCrypt32, "CryptUnprotectData");
|
|
if (!pCryptProtectData || !pCryptUnprotectData)
|
|
{
|
|
win_skip("Crypt(Un)ProtectData() is not available\n");
|
|
return;
|
|
}
|
|
|
|
protected=FALSE;
|
|
test_cryptprotectdata();
|
|
test_cryptunprotectdata();
|
|
test_simpleroundtrip("");
|
|
test_simpleroundtrip("hello");
|
|
|
|
/* deinit globals here */
|
|
if (cipher.pbData) LocalFree(cipher.pbData);
|
|
if (cipher_entropy.pbData) LocalFree(cipher_entropy.pbData);
|
|
if (cipher_no_desc.pbData) LocalFree(cipher_no_desc.pbData);
|
|
}
|