| <!DOCTYPE html> |
| <html> |
| <head> |
| <script src="../../../resources/js-test.js"></script> |
| <script src="../resources/common.js"></script> |
| <script src="../resources/keys.js"></script> |
| </head> |
| <body> |
| <p id="description"></p> |
| <div id="console"></div> |
| |
| <script> |
| description("Decrypting truncated AES-CBC ciphertext should fail"); |
| |
| jsTestIsAsync = true; |
| |
| // 128-bit key with plaintext that is an exact multiple of block size. |
| // Derived from [1] F.2.1 (CBC-AES128.Encrypt), by adding padding block. |
| var iv = hexStringToUint8Array("000102030405060708090a0b0c0d0e0f"); |
| var keyData = hexStringToUint8Array("2b7e151628aed2a6abf7158809cf4f3c"); |
| var cipherText = hexStringToUint8Array("7649abac8119b246cee98e9b12e9197d5086cb9b507219ee95db113a917678b273bed6b8e3c1743b7116e69e222295163ff1caa1681fac09120eca307586e1a78cb82807230e1321d3fae00d18cc2012"); |
| |
| var key = null; |
| var usages = ['encrypt', 'decrypt']; |
| var extractable = false; |
| var algorithm = {name: 'aes-cbc', iv: iv}; |
| |
| function verifyDecryptionFails(newCipherTextLength) |
| { |
| var newCipherText = cipherText.subarray(0, newCipherTextLength); |
| |
| var description = "ciphertext length: " + newCipherText.byteLength; |
| return crypto.subtle.decrypt(algorithm, key, newCipherText).then(function(result) { |
| debug("FAIL: decrypting succeeded. " + description); |
| }, function(result) { |
| logError(result); |
| debug("PASS: decrypting failed. " + description); |
| }); |
| } |
| |
| crypto.subtle.importKey('raw', keyData, algorithm, extractable, usages).then(function(result) { |
| key = result; |
| |
| // Verify that decryption works with the original ciphertext. |
| return crypto.subtle.decrypt(algorithm, key, cipherText); |
| }).then(function(result) { |
| debug("PASS: Decryption succeeded"); |
| |
| // Try a number of bad ciphertexts. |
| var badLengths = [ |
| 0, |
| cipherText.byteLength - 1, |
| |
| // Stripped a whole block. This new final block will result in a |
| // padding error. |
| cipherText.byteLength - 16, |
| 1, |
| 15, |
| 16, |
| 17 |
| ]; |
| |
| var lastPromise = Promise.resolve(null); |
| badLengths.forEach(function(badLength) { |
| lastPromise = lastPromise.then(verifyDecryptionFails.bind(null, badLength)); |
| }); |
| return lastPromise; |
| }).then(finishJSTest, failAndFinishJSTest); |
| |
| </script> |
| |
| </body> |
| </html> |
