added predis and eseye back in.
This commit is contained in:
141
vendor/web-token/jwt-encryption/Tests/RFC7520/A128KWAndA128GCMEncryptionProtectedContentOnlyTest.php
vendored
Normal file
141
vendor/web-token/jwt-encryption/Tests/RFC7520/A128KWAndA128GCMEncryptionProtectedContentOnlyTest.php
vendored
Normal file
@@ -0,0 +1,141 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.12
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class A128KWAndA128GCMEncryptionProtectedContentOnlyTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryptionProtectedContentOnly(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
];
|
||||
|
||||
$header = [
|
||||
'enc' => 'A128GCM',
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
];
|
||||
|
||||
$expected_flattened_json = '{"unprotected":{"alg":"A128KW","kid":"81b20965-8332-43d9-a468-82160ad91ac8","enc":"A128GCM"},"encrypted_key":"244YHfO_W7RMpQW81UjQrZcq5LSyqiPv","iv":"YihBoVOGsR1l7jCD","ciphertext":"qtPIMMaOBRgASL10dNQhOa7Gqrk7Eal1vwht7R4TT1uq-arsVCPaIeFwQfzrSS6oEUWbBtxEasE0vC6r7sphyVziMCVJEuRJyoAHFSP3eqQPb4Ic1SDSqyXjw_L3svybhHYUGyQuTmUQEDjgjJfBOifwHIsDsRPeBz1NomqeifVPq5GTCWFo5k_MNIQURR2Wj0AHC2k7JZfu2iWjUHLF8ExFZLZ4nlmsvJu_mvifMYiikfNfsZAudISOa6O73yPZtL04k_1FI7WDfrb2w7OqKLWDXzlpcxohPVOLQwpA3mFNRKdY-bQz4Z4KX9lfz1cne31N4-8BKmojpw-OdQjKdLOGkC445Fb_K1tlDQXw2sBF","tag":"e2m0Vm7JvjK2VpCKXS-kyg"}';
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"244YHfO_W7RMpQW81UjQrZcq5LSyqiPv"}],"unprotected":{"alg":"A128KW","kid":"81b20965-8332-43d9-a468-82160ad91ac8","enc":"A128GCM"},"iv":"YihBoVOGsR1l7jCD","ciphertext":"qtPIMMaOBRgASL10dNQhOa7Gqrk7Eal1vwht7R4TT1uq-arsVCPaIeFwQfzrSS6oEUWbBtxEasE0vC6r7sphyVziMCVJEuRJyoAHFSP3eqQPb4Ic1SDSqyXjw_L3svybhHYUGyQuTmUQEDjgjJfBOifwHIsDsRPeBz1NomqeifVPq5GTCWFo5k_MNIQURR2Wj0AHC2k7JZfu2iWjUHLF8ExFZLZ4nlmsvJu_mvifMYiikfNfsZAudISOa6O73yPZtL04k_1FI7WDfrb2w7OqKLWDXzlpcxohPVOLQwpA3mFNRKdY-bQz4Z4KX9lfz1cne31N4-8BKmojpw-OdQjKdLOGkC445Fb_K1tlDQXw2sBF","tag":"e2m0Vm7JvjK2VpCKXS-kyg"}';
|
||||
$expected_iv = 'YihBoVOGsR1l7jCD';
|
||||
$expected_encrypted_key = '244YHfO_W7RMpQW81UjQrZcq5LSyqiPv';
|
||||
$expected_ciphertext = 'qtPIMMaOBRgASL10dNQhOa7Gqrk7Eal1vwht7R4TT1uq-arsVCPaIeFwQfzrSS6oEUWbBtxEasE0vC6r7sphyVziMCVJEuRJyoAHFSP3eqQPb4Ic1SDSqyXjw_L3svybhHYUGyQuTmUQEDjgjJfBOifwHIsDsRPeBz1NomqeifVPq5GTCWFo5k_MNIQURR2Wj0AHC2k7JZfu2iWjUHLF8ExFZLZ4nlmsvJu_mvifMYiikfNfsZAudISOa6O73yPZtL04k_1FI7WDfrb2w7OqKLWDXzlpcxohPVOLQwpA3mFNRKdY-bQz4Z4KX9lfz1cne31N4-8BKmojpw-OdQjKdLOGkC445Fb_K1tlDQXw2sBF';
|
||||
$expected_tag = 'e2m0Vm7JvjK2VpCKXS-kyg';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($header, $loaded_flattened_json->getSharedHeader());
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($header, $loaded_json->getSharedHeader());
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryptionProtectedContentOnlyBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
];
|
||||
|
||||
$header = [
|
||||
'enc' => 'A128GCM',
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->withSharedHeader($header)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($header, $loaded_flattened_json->getSharedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($header, $loaded_json->getSharedHeader());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
147
vendor/web-token/jwt-encryption/Tests/RFC7520/A128KWAndA128GCMEncryptionTest.php
vendored
Normal file
147
vendor/web-token/jwt-encryption/Tests/RFC7520/A128KWAndA128GCMEncryptionTest.php
vendored
Normal file
@@ -0,0 +1,147 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.8
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class A128KWAndA128GCMEncryptionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryption(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$expected_compact_json = 'eyJhbGciOiJBMTI4S1ciLCJraWQiOiI4MWIyMDk2NS04MzMyLTQzZDktYTQ2OC04MjE2MGFkOTFhYzgiLCJlbmMiOiJBMTI4R0NNIn0.CBI6oDw8MydIx1IBntf_lQcw2MmJKIQx.Qx0pmsDa8KnJc9Jo.AwliP-KmWgsZ37BvzCefNen6VTbRK3QMA4TkvRkH0tP1bTdhtFJgJxeVmJkLD61A1hnWGetdg11c9ADsnWgL56NyxwSYjU1ZEHcGkd3EkU0vjHi9gTlb90qSYFfeF0LwkcTtjbYKCsiNJQkcIp1yeM03OmuiYSoYJVSpf7ej6zaYcMv3WwdxDFl8REwOhNImk2Xld2JXq6BR53TSFkyT7PwVLuq-1GwtGHlQeg7gDT6xW0JqHDPn_H-puQsmthc9Zg0ojmJfqqFvETUxLAF-KjcBTS5dNy6egwkYtOt8EIHK-oEsKYtZRaa8Z7MOZ7UGxGIMvEmxrGCPeJa14slv2-gaqK0kEThkaSqdYw0FkQZF.ER7MWJZ1FBI_NKvn7Zb1Lw';
|
||||
$expected_flattened_json = '{"protected":"eyJhbGciOiJBMTI4S1ciLCJraWQiOiI4MWIyMDk2NS04MzMyLTQzZDktYTQ2OC04MjE2MGFkOTFhYzgiLCJlbmMiOiJBMTI4R0NNIn0","encrypted_key":"CBI6oDw8MydIx1IBntf_lQcw2MmJKIQx","iv":"Qx0pmsDa8KnJc9Jo","ciphertext":"AwliP-KmWgsZ37BvzCefNen6VTbRK3QMA4TkvRkH0tP1bTdhtFJgJxeVmJkLD61A1hnWGetdg11c9ADsnWgL56NyxwSYjU1ZEHcGkd3EkU0vjHi9gTlb90qSYFfeF0LwkcTtjbYKCsiNJQkcIp1yeM03OmuiYSoYJVSpf7ej6zaYcMv3WwdxDFl8REwOhNImk2Xld2JXq6BR53TSFkyT7PwVLuq-1GwtGHlQeg7gDT6xW0JqHDPn_H-puQsmthc9Zg0ojmJfqqFvETUxLAF-KjcBTS5dNy6egwkYtOt8EIHK-oEsKYtZRaa8Z7MOZ7UGxGIMvEmxrGCPeJa14slv2-gaqK0kEThkaSqdYw0FkQZF","tag":"ER7MWJZ1FBI_NKvn7Zb1Lw"}';
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"CBI6oDw8MydIx1IBntf_lQcw2MmJKIQx"}],"protected":"eyJhbGciOiJBMTI4S1ciLCJraWQiOiI4MWIyMDk2NS04MzMyLTQzZDktYTQ2OC04MjE2MGFkOTFhYzgiLCJlbmMiOiJBMTI4R0NNIn0","iv":"Qx0pmsDa8KnJc9Jo","ciphertext":"AwliP-KmWgsZ37BvzCefNen6VTbRK3QMA4TkvRkH0tP1bTdhtFJgJxeVmJkLD61A1hnWGetdg11c9ADsnWgL56NyxwSYjU1ZEHcGkd3EkU0vjHi9gTlb90qSYFfeF0LwkcTtjbYKCsiNJQkcIp1yeM03OmuiYSoYJVSpf7ej6zaYcMv3WwdxDFl8REwOhNImk2Xld2JXq6BR53TSFkyT7PwVLuq-1GwtGHlQeg7gDT6xW0JqHDPn_H-puQsmthc9Zg0ojmJfqqFvETUxLAF-KjcBTS5dNy6egwkYtOt8EIHK-oEsKYtZRaa8Z7MOZ7UGxGIMvEmxrGCPeJa14slv2-gaqK0kEThkaSqdYw0FkQZF","tag":"ER7MWJZ1FBI_NKvn7Zb1Lw"}';
|
||||
$expected_iv = 'Qx0pmsDa8KnJc9Jo';
|
||||
$expected_encrypted_key = 'CBI6oDw8MydIx1IBntf_lQcw2MmJKIQx';
|
||||
$expected_ciphertext = 'AwliP-KmWgsZ37BvzCefNen6VTbRK3QMA4TkvRkH0tP1bTdhtFJgJxeVmJkLD61A1hnWGetdg11c9ADsnWgL56NyxwSYjU1ZEHcGkd3EkU0vjHi9gTlb90qSYFfeF0LwkcTtjbYKCsiNJQkcIp1yeM03OmuiYSoYJVSpf7ej6zaYcMv3WwdxDFl8REwOhNImk2Xld2JXq6BR53TSFkyT7PwVLuq-1GwtGHlQeg7gDT6xW0JqHDPn_H-puQsmthc9Zg0ojmJfqqFvETUxLAF-KjcBTS5dNy6egwkYtOt8EIHK-oEsKYtZRaa8Z7MOZ7UGxGIMvEmxrGCPeJa14slv2-gaqK0kEThkaSqdYw0FkQZF';
|
||||
$expected_tag = 'ER7MWJZ1FBI_NKvn7Zb1Lw';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($expected_compact_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_compact_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_compact_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_compact_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_compact_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryptionBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_compact', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,133 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.10
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class A128KWAndA128GCMEncryptionWithAdditionalAuthenticatedDataTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryptionWithAdditionalAuthenticatedData(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$expected_flattened_json = '{"protected":"eyJhbGciOiJBMTI4S1ciLCJraWQiOiI4MWIyMDk2NS04MzMyLTQzZDktYTQ2OC04MjE2MGFkOTFhYzgiLCJlbmMiOiJBMTI4R0NNIn0","encrypted_key":"4YiiQ_ZzH76TaIkJmYfRFgOV9MIpnx4X","aad":"WyJ2Y2FyZCIsW1sidmVyc2lvbiIse30sInRleHQiLCI0LjAiXSxbImZuIix7fSwidGV4dCIsIk1lcmlhZG9jIEJyYW5keWJ1Y2siXSxbIm4iLHt9LCJ0ZXh0IixbIkJyYW5keWJ1Y2siLCJNZXJpYWRvYyIsIk1yLiIsIiJdXSxbImJkYXkiLHt9LCJ0ZXh0IiwiVEEgMjk4MiJdLFsiZ2VuZGVyIix7fSwidGV4dCIsIk0iXV1d","iv":"veCx9ece2orS7c_N","ciphertext":"Z_3cbr0k3bVM6N3oSNmHz7Lyf3iPppGf3Pj17wNZqteJ0Ui8p74SchQP8xygM1oFRWCNzeIa6s6BcEtp8qEFiqTUEyiNkOWDNoF14T_4NFqF-p2Mx8zkbKxI7oPK8KNarFbyxIDvICNqBLba-v3uzXBdB89fzOI-Lv4PjOFAQGHrgv1rjXAmKbgkft9cB4WeyZw8MldbBhc-V_KWZslrsLNygon_JJWd_ek6LQn5NRehvApqf9ZrxB4aq3FXBxOxCys35PhCdaggy2kfUfl2OkwKnWUbgXVD1C6HxLIlqHhCwXDG59weHrRDQeHyMRoBljoV3X_bUTJDnKBFOod7nLz-cj48JMx3SnCZTpbQAkFV","tag":"vOaH_Rajnpy_3hOtqvZHRA"}';
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"4YiiQ_ZzH76TaIkJmYfRFgOV9MIpnx4X"}],"protected":"eyJhbGciOiJBMTI4S1ciLCJraWQiOiI4MWIyMDk2NS04MzMyLTQzZDktYTQ2OC04MjE2MGFkOTFhYzgiLCJlbmMiOiJBMTI4R0NNIn0","iv":"veCx9ece2orS7c_N","aad":"WyJ2Y2FyZCIsW1sidmVyc2lvbiIse30sInRleHQiLCI0LjAiXSxbImZuIix7fSwidGV4dCIsIk1lcmlhZG9jIEJyYW5keWJ1Y2siXSxbIm4iLHt9LCJ0ZXh0IixbIkJyYW5keWJ1Y2siLCJNZXJpYWRvYyIsIk1yLiIsIiJdXSxbImJkYXkiLHt9LCJ0ZXh0IiwiVEEgMjk4MiJdLFsiZ2VuZGVyIix7fSwidGV4dCIsIk0iXV1d","ciphertext":"Z_3cbr0k3bVM6N3oSNmHz7Lyf3iPppGf3Pj17wNZqteJ0Ui8p74SchQP8xygM1oFRWCNzeIa6s6BcEtp8qEFiqTUEyiNkOWDNoF14T_4NFqF-p2Mx8zkbKxI7oPK8KNarFbyxIDvICNqBLba-v3uzXBdB89fzOI-Lv4PjOFAQGHrgv1rjXAmKbgkft9cB4WeyZw8MldbBhc-V_KWZslrsLNygon_JJWd_ek6LQn5NRehvApqf9ZrxB4aq3FXBxOxCys35PhCdaggy2kfUfl2OkwKnWUbgXVD1C6HxLIlqHhCwXDG59weHrRDQeHyMRoBljoV3X_bUTJDnKBFOod7nLz-cj48JMx3SnCZTpbQAkFV","tag":"vOaH_Rajnpy_3hOtqvZHRA"}';
|
||||
$expected_iv = 'veCx9ece2orS7c_N';
|
||||
$expected_aad = '["vcard",[["version",{},"text","4.0"],["fn",{},"text","Meriadoc Brandybuck"],["n",{},"text",["Brandybuck","Meriadoc","Mr.",""]],["bday",{},"text","TA 2982"],["gender",{},"text","M"]]]';
|
||||
$expected_encrypted_key = '4YiiQ_ZzH76TaIkJmYfRFgOV9MIpnx4X';
|
||||
$expected_ciphertext = 'Z_3cbr0k3bVM6N3oSNmHz7Lyf3iPppGf3Pj17wNZqteJ0Ui8p74SchQP8xygM1oFRWCNzeIa6s6BcEtp8qEFiqTUEyiNkOWDNoF14T_4NFqF-p2Mx8zkbKxI7oPK8KNarFbyxIDvICNqBLba-v3uzXBdB89fzOI-Lv4PjOFAQGHrgv1rjXAmKbgkft9cB4WeyZw8MldbBhc-V_KWZslrsLNygon_JJWd_ek6LQn5NRehvApqf9ZrxB4aq3FXBxOxCys35PhCdaggy2kfUfl2OkwKnWUbgXVD1C6HxLIlqHhCwXDG59weHrRDQeHyMRoBljoV3X_bUTJDnKBFOod7nLz-cj48JMx3SnCZTpbQAkFV';
|
||||
$expected_tag = 'vOaH_Rajnpy_3hOtqvZHRA';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
static::assertEquals($expected_aad, $loaded_flattened_json->getAAD());
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
static::assertEquals($expected_aad, $loaded_json->getAAD());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryptionWithAdditionalAuthenticatedDataBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
149
vendor/web-token/jwt-encryption/Tests/RFC7520/A128KWAndA128GCMEncryptionWithCompressionTest.php
vendored
Normal file
149
vendor/web-token/jwt-encryption/Tests/RFC7520/A128KWAndA128GCMEncryptionWithCompressionTest.php
vendored
Normal file
@@ -0,0 +1,149 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.9
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class A128KWAndA128GCMEncryptionWithCompressionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryptionWithCompression(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'enc' => 'A128GCM',
|
||||
'zip' => 'DEF',
|
||||
];
|
||||
|
||||
$expected_compact_json = 'eyJhbGciOiJBMTI4S1ciLCJraWQiOiI4MWIyMDk2NS04MzMyLTQzZDktYTQ2OC04MjE2MGFkOTFhYzgiLCJlbmMiOiJBMTI4R0NNIiwiemlwIjoiREVGIn0.5vUT2WOtQxKWcekM_IzVQwkGgzlFDwPi.p9pUq6XHY0jfEZIl.HbDtOsdai1oYziSx25KEeTxmwnh8L8jKMFNc1k3zmMI6VB8hry57tDZ61jXyezSPt0fdLVfe6Jf5y5-JaCap_JQBcb5opbmT60uWGml8blyiMQmOn9J--XhhlYg0m-BHaqfDO5iTOWxPxFMUedx7WCy8mxgDHj0aBMG6152PsM-w5E_o2B3jDbrYBKhpYA7qi3AyijnCJ7BP9rr3U8kxExCpG3mK420TjOw.VILuUwuIxaLVmh5X-T7kmA';
|
||||
$expected_flattened_json = '{"protected":"eyJhbGciOiJBMTI4S1ciLCJraWQiOiI4MWIyMDk2NS04MzMyLTQzZDktYTQ2OC04MjE2MGFkOTFhYzgiLCJlbmMiOiJBMTI4R0NNIiwiemlwIjoiREVGIn0","encrypted_key":"5vUT2WOtQxKWcekM_IzVQwkGgzlFDwPi","iv":"p9pUq6XHY0jfEZIl","ciphertext":"HbDtOsdai1oYziSx25KEeTxmwnh8L8jKMFNc1k3zmMI6VB8hry57tDZ61jXyezSPt0fdLVfe6Jf5y5-JaCap_JQBcb5opbmT60uWGml8blyiMQmOn9J--XhhlYg0m-BHaqfDO5iTOWxPxFMUedx7WCy8mxgDHj0aBMG6152PsM-w5E_o2B3jDbrYBKhpYA7qi3AyijnCJ7BP9rr3U8kxExCpG3mK420TjOw","tag":"VILuUwuIxaLVmh5X-T7kmA"}';
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"5vUT2WOtQxKWcekM_IzVQwkGgzlFDwPi"}],"protected":"eyJhbGciOiJBMTI4S1ciLCJraWQiOiI4MWIyMDk2NS04MzMyLTQzZDktYTQ2OC04MjE2MGFkOTFhYzgiLCJlbmMiOiJBMTI4R0NNIiwiemlwIjoiREVGIn0","iv":"p9pUq6XHY0jfEZIl","ciphertext":"HbDtOsdai1oYziSx25KEeTxmwnh8L8jKMFNc1k3zmMI6VB8hry57tDZ61jXyezSPt0fdLVfe6Jf5y5-JaCap_JQBcb5opbmT60uWGml8blyiMQmOn9J--XhhlYg0m-BHaqfDO5iTOWxPxFMUedx7WCy8mxgDHj0aBMG6152PsM-w5E_o2B3jDbrYBKhpYA7qi3AyijnCJ7BP9rr3U8kxExCpG3mK420TjOw","tag":"VILuUwuIxaLVmh5X-T7kmA"}';
|
||||
$expected_iv = 'p9pUq6XHY0jfEZIl';
|
||||
$expected_encrypted_key = '5vUT2WOtQxKWcekM_IzVQwkGgzlFDwPi';
|
||||
$expected_ciphertext = 'HbDtOsdai1oYziSx25KEeTxmwnh8L8jKMFNc1k3zmMI6VB8hry57tDZ61jXyezSPt0fdLVfe6Jf5y5-JaCap_JQBcb5opbmT60uWGml8blyiMQmOn9J--XhhlYg0m-BHaqfDO5iTOWxPxFMUedx7WCy8mxgDHj0aBMG6152PsM-w5E_o2B3jDbrYBKhpYA7qi3AyijnCJ7BP9rr3U8kxExCpG3mK420TjOw';
|
||||
$expected_tag = 'VILuUwuIxaLVmh5X-T7kmA';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($expected_compact_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_compact_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_compact_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_compact_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_compact_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryptionWithCompressionBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'enc' => 'A128GCM',
|
||||
'zip' => 'DEF',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_compact', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,141 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.11
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class A128KWAndA128GCMEncryptionWithSpecificProtectedHeaderValuesTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryptionWithSpecificProtectedHeaderValues(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$header = [
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
];
|
||||
|
||||
$expected_flattened_json = '{"protected":"eyJlbmMiOiJBMTI4R0NNIn0","unprotected":{"alg":"A128KW","kid":"81b20965-8332-43d9-a468-82160ad91ac8"},"encrypted_key":"jJIcM9J-hbx3wnqhf5FlkEYos0sHsF0H","iv":"WgEJsDS9bkoXQ3nR","ciphertext":"lIbCyRmRJxnB2yLQOTqjCDKV3H30ossOw3uD9DPsqLL2DM3swKkjOwQyZtWsFLYMj5YeLht_StAn21tHmQJuuNt64T8D4t6C7kC9OCCJ1IHAolUv4MyOt80MoPb8fZYbNKqplzYJgIL58g8N2v46OgyG637d6uuKPwhAnTGm_zWhqc_srOvgiLkzyFXPq1hBAURbc3-8BqeRb48iR1-_5g5UjWVD3lgiLCN_P7AW8mIiFvUNXBPJK3nOWL4teUPS8yHLbWeL83olU4UAgL48x-8dDkH23JykibVSQju-f7e-1xreHWXzWLHs1NqBbre0dEwK3HX_xM0LjUz77Krppgegoutpf5qaKg3l-_xMINmf","tag":"fNYLqpUe84KD45lvDiaBAQ"}';
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"jJIcM9J-hbx3wnqhf5FlkEYos0sHsF0H"}],"unprotected":{"alg":"A128KW","kid":"81b20965-8332-43d9-a468-82160ad91ac8"},"protected":"eyJlbmMiOiJBMTI4R0NNIn0","iv":"WgEJsDS9bkoXQ3nR","ciphertext":"lIbCyRmRJxnB2yLQOTqjCDKV3H30ossOw3uD9DPsqLL2DM3swKkjOwQyZtWsFLYMj5YeLht_StAn21tHmQJuuNt64T8D4t6C7kC9OCCJ1IHAolUv4MyOt80MoPb8fZYbNKqplzYJgIL58g8N2v46OgyG637d6uuKPwhAnTGm_zWhqc_srOvgiLkzyFXPq1hBAURbc3-8BqeRb48iR1-_5g5UjWVD3lgiLCN_P7AW8mIiFvUNXBPJK3nOWL4teUPS8yHLbWeL83olU4UAgL48x-8dDkH23JykibVSQju-f7e-1xreHWXzWLHs1NqBbre0dEwK3HX_xM0LjUz77Krppgegoutpf5qaKg3l-_xMINmf","tag":"fNYLqpUe84KD45lvDiaBAQ"}';
|
||||
$expected_iv = 'WgEJsDS9bkoXQ3nR';
|
||||
$expected_encrypted_key = 'jJIcM9J-hbx3wnqhf5FlkEYos0sHsF0H';
|
||||
$expected_ciphertext = 'lIbCyRmRJxnB2yLQOTqjCDKV3H30ossOw3uD9DPsqLL2DM3swKkjOwQyZtWsFLYMj5YeLht_StAn21tHmQJuuNt64T8D4t6C7kC9OCCJ1IHAolUv4MyOt80MoPb8fZYbNKqplzYJgIL58g8N2v46OgyG637d6uuKPwhAnTGm_zWhqc_srOvgiLkzyFXPq1hBAURbc3-8BqeRb48iR1-_5g5UjWVD3lgiLCN_P7AW8mIiFvUNXBPJK3nOWL4teUPS8yHLbWeL83olU4UAgL48x-8dDkH23JykibVSQju-f7e-1xreHWXzWLHs1NqBbre0dEwK3HX_xM0LjUz77Krppgegoutpf5qaKg3l-_xMINmf';
|
||||
$expected_tag = 'fNYLqpUe84KD45lvDiaBAQ';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($header, $loaded_flattened_json->getSharedHeader());
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($header, $loaded_json->getSharedHeader());
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a128KWAndA128GCMEncryptionWithSpecificProtectedHeaderValuesBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$header = [
|
||||
'alg' => 'A128KW',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->withSharedHeader($header)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($header, $loaded_flattened_json->getSharedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($header, $loaded_json->getSharedHeader());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
159
vendor/web-token/jwt-encryption/Tests/RFC7520/A256GCMKWAndA128CBC_HS256EncryptionTest.php
vendored
Normal file
159
vendor/web-token/jwt-encryption/Tests/RFC7520/A256GCMKWAndA128CBC_HS256EncryptionTest.php
vendored
Normal file
@@ -0,0 +1,159 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use function array_key_exists;
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.7
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class A256GCMKWAndA128CBC_HS256EncryptionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a256GCMKWAndA128CBCHS256Encryption(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A256GCMKW',
|
||||
'k' => 'qC57l_uxcm7Nm3K-ct4GFjx8tM1U8CZ0NLBvdQstiS8',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'A256GCMKW',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
'tag' => 'kfPduVQ3T3H6vnewt--ksw',
|
||||
'iv' => 'KkYT0GX_2jHlfqN_',
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$expected_compact_json = 'eyJhbGciOiJBMjU2R0NNS1ciLCJraWQiOiIxOGVjMDhlMS1iZmE5LTRkOTUtYjIwNS0yYjRkZDFkNDMyMWQiLCJ0YWciOiJrZlBkdVZRM1QzSDZ2bmV3dC0ta3N3IiwiaXYiOiJLa1lUMEdYXzJqSGxmcU5fIiwiZW5jIjoiQTEyOENCQy1IUzI1NiJ9.lJf3HbOApxMEBkCMOoTnnABxs_CvTWUmZQ2ElLvYNok.gz6NjyEFNm_vm8Gj6FwoFQ.Jf5p9-ZhJlJy_IQ_byKFmI0Ro7w7G1QiaZpI8OaiVgD8EqoDZHyFKFBupS8iaEeVIgMqWmsuJKuoVgzR3YfzoMd3GxEm3VxNhzWyWtZKX0gxKdy6HgLvqoGNbZCzLjqcpDiF8q2_62EVAbr2uSc2oaxFmFuIQHLcqAHxy51449xkjZ7ewzZaGV3eFqhpco8o4DijXaG5_7kp3h2cajRfDgymuxUbWgLqaeNQaJtvJmSMFuEOSAzw9Hdeb6yhdTynCRmu-kqtO5Dec4lT2OMZKpnxc_F1_4yDJFcqb5CiDSmA-psB2k0JtjxAj4UPI61oONK7zzFIu4gBfjJCndsZfdvG7h8wGjV98QhrKEnR7xKZ3KCr0_qR1B-gxpNk3xWU.DKW7jrb4WaRSNfbXVPlT5g';
|
||||
|
||||
/*
|
||||
* There is an error in this vector
|
||||
* In the RFC7520, the tag is 'DKW7jrb4WaRSNfbXVPlT5g' (see figure 147), but the tag from the flattened representation is 'NvBveHr_vonkvflfnUrmBQ'
|
||||
* Same goes for the protected header. The values are good, but as the order is different, the protected header value is different and the tag is not validated.
|
||||
*/
|
||||
$expected_flattened_json = '{"protected":"eyJhbGciOiJBMjU2R0NNS1ciLCJraWQiOiIxOGVjMDhlMS1iZmE5LTRkOTUtYjIwNS0yYjRkZDFkNDMyMWQiLCJ0YWciOiJrZlBkdVZRM1QzSDZ2bmV3dC0ta3N3IiwiaXYiOiJLa1lUMEdYXzJqSGxmcU5fIiwiZW5jIjoiQTEyOENCQy1IUzI1NiJ9","encrypted_key":"lJf3HbOApxMEBkCMOoTnnABxs_CvTWUmZQ2ElLvYNok","iv":"gz6NjyEFNm_vm8Gj6FwoFQ","ciphertext":"Jf5p9-ZhJlJy_IQ_byKFmI0Ro7w7G1QiaZpI8OaiVgD8EqoDZHyFKFBupS8iaEeVIgMqWmsuJKuoVgzR3YfzoMd3GxEm3VxNhzWyWtZKX0gxKdy6HgLvqoGNbZCzLjqcpDiF8q2_62EVAbr2uSc2oaxFmFuIQHLcqAHxy51449xkjZ7ewzZaGV3eFqhpco8o4DijXaG5_7kp3h2cajRfDgymuxUbWgLqaeNQaJtvJmSMFuEOSAzw9Hdeb6yhdTynCRmu-kqtO5Dec4lT2OMZKpnxc_F1_4yDJFcqb5CiDSmA-psB2k0JtjxAj4UPI61oONK7zzFIu4gBfjJCndsZfdvG7h8wGjV98QhrKEnR7xKZ3KCr0_qR1B-gxpNk3xWU","tag":"DKW7jrb4WaRSNfbXVPlT5g"}';
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"lJf3HbOApxMEBkCMOoTnnABxs_CvTWUmZQ2ElLvYNok"}],"protected":"eyJhbGciOiJBMjU2R0NNS1ciLCJraWQiOiIxOGVjMDhlMS1iZmE5LTRkOTUtYjIwNS0yYjRkZDFkNDMyMWQiLCJ0YWciOiJrZlBkdVZRM1QzSDZ2bmV3dC0ta3N3IiwiaXYiOiJLa1lUMEdYXzJqSGxmcU5fIiwiZW5jIjoiQTEyOENCQy1IUzI1NiJ9","iv":"gz6NjyEFNm_vm8Gj6FwoFQ","ciphertext":"Jf5p9-ZhJlJy_IQ_byKFmI0Ro7w7G1QiaZpI8OaiVgD8EqoDZHyFKFBupS8iaEeVIgMqWmsuJKuoVgzR3YfzoMd3GxEm3VxNhzWyWtZKX0gxKdy6HgLvqoGNbZCzLjqcpDiF8q2_62EVAbr2uSc2oaxFmFuIQHLcqAHxy51449xkjZ7ewzZaGV3eFqhpco8o4DijXaG5_7kp3h2cajRfDgymuxUbWgLqaeNQaJtvJmSMFuEOSAzw9Hdeb6yhdTynCRmu-kqtO5Dec4lT2OMZKpnxc_F1_4yDJFcqb5CiDSmA-psB2k0JtjxAj4UPI61oONK7zzFIu4gBfjJCndsZfdvG7h8wGjV98QhrKEnR7xKZ3KCr0_qR1B-gxpNk3xWU","tag":"DKW7jrb4WaRSNfbXVPlT5g"}';
|
||||
$expected_iv = 'gz6NjyEFNm_vm8Gj6FwoFQ';
|
||||
$expected_encrypted_key = 'lJf3HbOApxMEBkCMOoTnnABxs_CvTWUmZQ2ElLvYNok';
|
||||
$expected_ciphertext = 'Jf5p9-ZhJlJy_IQ_byKFmI0Ro7w7G1QiaZpI8OaiVgD8EqoDZHyFKFBupS8iaEeVIgMqWmsuJKuoVgzR3YfzoMd3GxEm3VxNhzWyWtZKX0gxKdy6HgLvqoGNbZCzLjqcpDiF8q2_62EVAbr2uSc2oaxFmFuIQHLcqAHxy51449xkjZ7ewzZaGV3eFqhpco8o4DijXaG5_7kp3h2cajRfDgymuxUbWgLqaeNQaJtvJmSMFuEOSAzw9Hdeb6yhdTynCRmu-kqtO5Dec4lT2OMZKpnxc_F1_4yDJFcqb5CiDSmA-psB2k0JtjxAj4UPI61oONK7zzFIu4gBfjJCndsZfdvG7h8wGjV98QhrKEnR7xKZ3KCr0_qR1B-gxpNk3xWU';
|
||||
$expected_tag = 'DKW7jrb4WaRSNfbXVPlT5g';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A256GCMKW'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($expected_compact_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_compact_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_compact_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_compact_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_compact_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function a256GCMKWAndA128CBCHS256EncryptionBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A256GCMKW',
|
||||
'k' => 'qC57l_uxcm7Nm3K-ct4GFjx8tM1U8CZ0NLBvdQstiS8',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'A256GCMKW',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['A256GCMKW'], ['A128CBC-HS256'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['A256GCMKW'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_compact', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertTrue(array_key_exists('iv', $loaded_compact_json->getSharedProtectedHeader()));
|
||||
static::assertTrue(array_key_exists('tag', $loaded_compact_json->getSharedProtectedHeader()));
|
||||
|
||||
static::assertTrue(array_key_exists('iv', $loaded_flattened_json->getSharedProtectedHeader()));
|
||||
static::assertTrue(array_key_exists('tag', $loaded_flattened_json->getSharedProtectedHeader()));
|
||||
|
||||
static::assertTrue(array_key_exists('iv', $loaded_json->getSharedProtectedHeader()));
|
||||
static::assertTrue(array_key_exists('tag', $loaded_json->getSharedProtectedHeader()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
127
vendor/web-token/jwt-encryption/Tests/RFC7520/DirAndA128GCMEncryptionTest.php
vendored
Normal file
127
vendor/web-token/jwt-encryption/Tests/RFC7520/DirAndA128GCMEncryptionTest.php
vendored
Normal file
@@ -0,0 +1,127 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.6
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class DirAndA128GCMEncryptionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function dirAndA128GCMEncryption(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '77c7e2b8-6e13-45cf-8672-617b5b45243a',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128GCM',
|
||||
'k' => 'XctOhJAkA-pD9Lh7ZgW_2A',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'dir',
|
||||
'kid' => '77c7e2b8-6e13-45cf-8672-617b5b45243a',
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$expected_compact_json = 'eyJhbGciOiJkaXIiLCJraWQiOiI3N2M3ZTJiOC02ZTEzLTQ1Y2YtODY3Mi02MTdiNWI0NTI0M2EiLCJlbmMiOiJBMTI4R0NNIn0..refa467QzzKx6QAB.JW_i_f52hww_ELQPGaYyeAB6HYGcR559l9TYnSovc23XJoBcW29rHP8yZOZG7YhLpT1bjFuvZPjQS-m0IFtVcXkZXdH_lr_FrdYt9HRUYkshtrMmIUAyGmUnd9zMDB2n0cRDIHAzFVeJUDxkUwVAE7_YGRPdcqMyiBoCO-FBdE-Nceb4h3-FtBP-c_BIwCPTjb9o0SbdcdREEMJMyZBH8ySWMVi1gPD9yxi-aQpGbSv_F9N4IZAxscj5g-NJsUPbjk29-s7LJAGb15wEBtXphVCgyy53CoIKLHHeJHXex45Uz9aKZSRSInZI-wjsY0yu3cT4_aQ3i1o-tiE-F8Ios61EKgyIQ4CWao8PFMj8TTnp.vbb32Xvllea2OtmHAdccRQ';
|
||||
$expected_json = '{"protected":"eyJhbGciOiJkaXIiLCJraWQiOiI3N2M3ZTJiOC02ZTEzLTQ1Y2YtODY3Mi02MTdiNWI0NTI0M2EiLCJlbmMiOiJBMTI4R0NNIn0","iv":"refa467QzzKx6QAB","ciphertext":"JW_i_f52hww_ELQPGaYyeAB6HYGcR559l9TYnSovc23XJoBcW29rHP8yZOZG7YhLpT1bjFuvZPjQS-m0IFtVcXkZXdH_lr_FrdYt9HRUYkshtrMmIUAyGmUnd9zMDB2n0cRDIHAzFVeJUDxkUwVAE7_YGRPdcqMyiBoCO-FBdE-Nceb4h3-FtBP-c_BIwCPTjb9o0SbdcdREEMJMyZBH8ySWMVi1gPD9yxi-aQpGbSv_F9N4IZAxscj5g-NJsUPbjk29-s7LJAGb15wEBtXphVCgyy53CoIKLHHeJHXex45Uz9aKZSRSInZI-wjsY0yu3cT4_aQ3i1o-tiE-F8Ios61EKgyIQ4CWao8PFMj8TTnp","tag":"vbb32Xvllea2OtmHAdccRQ"}';
|
||||
$expected_iv = 'refa467QzzKx6QAB';
|
||||
$expected_ciphertext = 'JW_i_f52hww_ELQPGaYyeAB6HYGcR559l9TYnSovc23XJoBcW29rHP8yZOZG7YhLpT1bjFuvZPjQS-m0IFtVcXkZXdH_lr_FrdYt9HRUYkshtrMmIUAyGmUnd9zMDB2n0cRDIHAzFVeJUDxkUwVAE7_YGRPdcqMyiBoCO-FBdE-Nceb4h3-FtBP-c_BIwCPTjb9o0SbdcdREEMJMyZBH8ySWMVi1gPD9yxi-aQpGbSv_F9N4IZAxscj5g-NJsUPbjk29-s7LJAGb15wEBtXphVCgyy53CoIKLHHeJHXex45Uz9aKZSRSInZI-wjsY0yu3cT4_aQ3i1o-tiE-F8Ios61EKgyIQ4CWao8PFMj8TTnp';
|
||||
$expected_tag = 'vbb32Xvllea2OtmHAdccRQ';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['dir'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($expected_compact_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_compact_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_compact_json->getIV()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_compact_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function dirAndA128GCMEncryptionBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '77c7e2b8-6e13-45cf-8672-617b5b45243a',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128GCM',
|
||||
'k' => 'XctOhJAkA-pD9Lh7ZgW_2A',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'dir',
|
||||
'kid' => '77c7e2b8-6e13-45cf-8672-617b5b45243a',
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['dir'], ['A128GCM'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['dir'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_compact', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
161
vendor/web-token/jwt-encryption/Tests/RFC7520/ECDH_ES_A128KWAndA128GCMEncryptionTest.php
vendored
Normal file
161
vendor/web-token/jwt-encryption/Tests/RFC7520/ECDH_ES_A128KWAndA128GCMEncryptionTest.php
vendored
Normal file
@@ -0,0 +1,161 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use function array_key_exists;
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.4
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class ECDH_ES_A128KWAndA128GCMEncryptionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function eCDHESA128KWAndA128GCMEncryption(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-384',
|
||||
'x' => 'YU4rRUzdmVqmRtWOs2OpDE_T5fsNIodcG8G5FWPrTPMyxpzsSOGaQLpe2FpxBmu2',
|
||||
'y' => 'A8-yxCHxkfBz3hKZfI1jUYMjUhsEveZ9THuwFjH2sCNdtksRJU7D5-SkgaFL1ETP',
|
||||
'd' => 'iTx2pk7wW-GqJkHcEkFQb2EFyYcO7RugmaW3mRrQVAOUiPommT0IdnYK2xDlZh-j',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'ECDH-ES+A128KW',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'epk' => [
|
||||
'kty' => 'EC',
|
||||
'crv' => 'P-384',
|
||||
'x' => 'uBo4kHPw6kbjx5l0xowrd_oYzBmaz-GKFZu4xAFFkbYiWgutEK6iuEDsQ6wNdNg3',
|
||||
'y' => 'sp3p5SGhZVC2faXumI-e9JU2Mo8KpoYrFDr5yPNVtW4PgEwZOyQTA-JdaY8tb7E0',
|
||||
],
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$expected_compact_json = 'eyJhbGciOiJFQ0RILUVTK0ExMjhLVyIsImtpZCI6InBlcmVncmluLnRvb2tAdHVja2Jvcm91Z2guZXhhbXBsZSIsImVwayI6eyJrdHkiOiJFQyIsImNydiI6IlAtMzg0IiwieCI6InVCbzRrSFB3Nmtiang1bDB4b3dyZF9vWXpCbWF6LUdLRlp1NHhBRkZrYllpV2d1dEVLNml1RURzUTZ3TmROZzMiLCJ5Ijoic3AzcDVTR2haVkMyZmFYdW1JLWU5SlUyTW84S3BvWXJGRHI1eVBOVnRXNFBnRXdaT3lRVEEtSmRhWTh0YjdFMCJ9LCJlbmMiOiJBMTI4R0NNIn0.0DJjBXri_kBcC46IkU5_Jk9BqaQeHdv2.mH-G2zVqgztUtnW_.tkZuOO9h95OgHJmkkrfLBisku8rGf6nzVxhRM3sVOhXgz5NJ76oID7lpnAi_cPWJRCjSpAaUZ5dOR3Spy7QuEkmKx8-3RCMhSYMzsXaEwDdXta9Mn5B7cCBoJKB0IgEnj_qfo1hIi-uEkUpOZ8aLTZGHfpl05jMwbKkTe2yK3mjF6SBAsgicQDVCkcY9BLluzx1RmC3ORXaM0JaHPB93YcdSDGgpgBWMVrNU1ErkjcMqMoT_wtCex3w03XdLkjXIuEr2hWgeP-nkUZTPU9EoGSPj6fAS-bSz87RCPrxZdj_iVyC6QWcqAu07WNhjzJEPc4jVntRJ6K53NgPQ5p99l3Z408OUqj4ioYezbS6vTPlQ.WuGzxmcreYjpHGJoa17EBg';
|
||||
$expected_flattened_json = '{"protected":"eyJhbGciOiJFQ0RILUVTK0ExMjhLVyIsImtpZCI6InBlcmVncmluLnRvb2tAdHVja2Jvcm91Z2guZXhhbXBsZSIsImVwayI6eyJrdHkiOiJFQyIsImNydiI6IlAtMzg0IiwieCI6InVCbzRrSFB3Nmtiang1bDB4b3dyZF9vWXpCbWF6LUdLRlp1NHhBRkZrYllpV2d1dEVLNml1RURzUTZ3TmROZzMiLCJ5Ijoic3AzcDVTR2haVkMyZmFYdW1JLWU5SlUyTW84S3BvWXJGRHI1eVBOVnRXNFBnRXdaT3lRVEEtSmRhWTh0YjdFMCJ9LCJlbmMiOiJBMTI4R0NNIn0","encrypted_key":"0DJjBXri_kBcC46IkU5_Jk9BqaQeHdv2","iv":"mH-G2zVqgztUtnW_","ciphertext":"tkZuOO9h95OgHJmkkrfLBisku8rGf6nzVxhRM3sVOhXgz5NJ76oID7lpnAi_cPWJRCjSpAaUZ5dOR3Spy7QuEkmKx8-3RCMhSYMzsXaEwDdXta9Mn5B7cCBoJKB0IgEnj_qfo1hIi-uEkUpOZ8aLTZGHfpl05jMwbKkTe2yK3mjF6SBAsgicQDVCkcY9BLluzx1RmC3ORXaM0JaHPB93YcdSDGgpgBWMVrNU1ErkjcMqMoT_wtCex3w03XdLkjXIuEr2hWgeP-nkUZTPU9EoGSPj6fAS-bSz87RCPrxZdj_iVyC6QWcqAu07WNhjzJEPc4jVntRJ6K53NgPQ5p99l3Z408OUqj4ioYezbS6vTPlQ","tag":"WuGzxmcreYjpHGJoa17EBg"}';
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"0DJjBXri_kBcC46IkU5_Jk9BqaQeHdv2"}],"protected":"eyJhbGciOiJFQ0RILUVTK0ExMjhLVyIsImtpZCI6InBlcmVncmluLnRvb2tAdHVja2Jvcm91Z2guZXhhbXBsZSIsImVwayI6eyJrdHkiOiJFQyIsImNydiI6IlAtMzg0IiwieCI6InVCbzRrSFB3Nmtiang1bDB4b3dyZF9vWXpCbWF6LUdLRlp1NHhBRkZrYllpV2d1dEVLNml1RURzUTZ3TmROZzMiLCJ5Ijoic3AzcDVTR2haVkMyZmFYdW1JLWU5SlUyTW84S3BvWXJGRHI1eVBOVnRXNFBnRXdaT3lRVEEtSmRhWTh0YjdFMCJ9LCJlbmMiOiJBMTI4R0NNIn0","iv":"mH-G2zVqgztUtnW_","ciphertext":"tkZuOO9h95OgHJmkkrfLBisku8rGf6nzVxhRM3sVOhXgz5NJ76oID7lpnAi_cPWJRCjSpAaUZ5dOR3Spy7QuEkmKx8-3RCMhSYMzsXaEwDdXta9Mn5B7cCBoJKB0IgEnj_qfo1hIi-uEkUpOZ8aLTZGHfpl05jMwbKkTe2yK3mjF6SBAsgicQDVCkcY9BLluzx1RmC3ORXaM0JaHPB93YcdSDGgpgBWMVrNU1ErkjcMqMoT_wtCex3w03XdLkjXIuEr2hWgeP-nkUZTPU9EoGSPj6fAS-bSz87RCPrxZdj_iVyC6QWcqAu07WNhjzJEPc4jVntRJ6K53NgPQ5p99l3Z408OUqj4ioYezbS6vTPlQ","tag":"WuGzxmcreYjpHGJoa17EBg"}';
|
||||
$expected_iv = 'mH-G2zVqgztUtnW_';
|
||||
$expected_encrypted_key = '0DJjBXri_kBcC46IkU5_Jk9BqaQeHdv2';
|
||||
$expected_ciphertext = 'tkZuOO9h95OgHJmkkrfLBisku8rGf6nzVxhRM3sVOhXgz5NJ76oID7lpnAi_cPWJRCjSpAaUZ5dOR3Spy7QuEkmKx8-3RCMhSYMzsXaEwDdXta9Mn5B7cCBoJKB0IgEnj_qfo1hIi-uEkUpOZ8aLTZGHfpl05jMwbKkTe2yK3mjF6SBAsgicQDVCkcY9BLluzx1RmC3ORXaM0JaHPB93YcdSDGgpgBWMVrNU1ErkjcMqMoT_wtCex3w03XdLkjXIuEr2hWgeP-nkUZTPU9EoGSPj6fAS-bSz87RCPrxZdj_iVyC6QWcqAu07WNhjzJEPc4jVntRJ6K53NgPQ5p99l3Z408OUqj4ioYezbS6vTPlQ';
|
||||
$expected_tag = 'WuGzxmcreYjpHGJoa17EBg';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['ECDH-ES+A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($expected_compact_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_compact_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_compact_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_compact_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_compact_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function eCDHESA128KWAndA128GCMEncryptionBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$public_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-384',
|
||||
'x' => 'YU4rRUzdmVqmRtWOs2OpDE_T5fsNIodcG8G5FWPrTPMyxpzsSOGaQLpe2FpxBmu2',
|
||||
'y' => 'A8-yxCHxkfBz3hKZfI1jUYMjUhsEveZ9THuwFjH2sCNdtksRJU7D5-SkgaFL1ETP',
|
||||
]);
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-384',
|
||||
'x' => 'YU4rRUzdmVqmRtWOs2OpDE_T5fsNIodcG8G5FWPrTPMyxpzsSOGaQLpe2FpxBmu2',
|
||||
'y' => 'A8-yxCHxkfBz3hKZfI1jUYMjUhsEveZ9THuwFjH2sCNdtksRJU7D5-SkgaFL1ETP',
|
||||
'd' => 'iTx2pk7wW-GqJkHcEkFQb2EFyYcO7RugmaW3mRrQVAOUiPommT0IdnYK2xDlZh-j',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'ECDH-ES+A128KW',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'enc' => 'A128GCM',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['ECDH-ES+A128KW'], ['A128GCM'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['ECDH-ES+A128KW'], ['A128GCM'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($public_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertTrue(array_key_exists('epk', $loaded_flattened_json->getSharedProtectedHeader()));
|
||||
|
||||
static::assertTrue(array_key_exists('epk', $loaded_json->getSharedProtectedHeader()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
142
vendor/web-token/jwt-encryption/Tests/RFC7520/ECDH_ES_AndA128CBC_HS256EncryptionTest.php
vendored
Normal file
142
vendor/web-token/jwt-encryption/Tests/RFC7520/ECDH_ES_AndA128CBC_HS256EncryptionTest.php
vendored
Normal file
@@ -0,0 +1,142 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use function array_key_exists;
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.5
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class ECDH_ES_AndA128CBC_HS256EncryptionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function eCDHESAndA128CBCHS256Encryption(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'meriadoc.brandybuck@buckland.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-256',
|
||||
'x' => 'Ze2loSV3wrroKUN_4zhwGhCqo3Xhu1td4QjeQ5wIVR0',
|
||||
'y' => 'HlLtdXARY_f55A3fnzQbPcm6hgr34Mp8p-nuzQCE0Zw',
|
||||
'd' => 'r_kHyZ-a06rmxM3yESK84r1otSg-aQcVStkRhA-iCM8',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'ECDH-ES',
|
||||
'kid' => 'meriadoc.brandybuck@buckland.example',
|
||||
'epk' => [
|
||||
'kty' => 'EC',
|
||||
'crv' => 'P-256',
|
||||
'x' => 'mPUKT_bAWGHIhg0TpjjqVsP1rXWQu_vwVOHHtNkdYoA',
|
||||
'y' => '8BQAsImGeAS46fyWw5MhYfGTT0IjBpFw2SS34Dv4Irs',
|
||||
],
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$expected_compact_json = 'eyJhbGciOiJFQ0RILUVTIiwia2lkIjoibWVyaWFkb2MuYnJhbmR5YnVja0BidWNrbGFuZC5leGFtcGxlIiwiZXBrIjp7Imt0eSI6IkVDIiwiY3J2IjoiUC0yNTYiLCJ4IjoibVBVS1RfYkFXR0hJaGcwVHBqanFWc1AxclhXUXVfdndWT0hIdE5rZFlvQSIsInkiOiI4QlFBc0ltR2VBUzQ2ZnlXdzVNaFlmR1RUMElqQnBGdzJTUzM0RHY0SXJzIn0sImVuYyI6IkExMjhDQkMtSFMyNTYifQ..yc9N8v5sYyv3iGQT926IUg.BoDlwPnTypYq-ivjmQvAYJLb5Q6l-F3LIgQomlz87yW4OPKbWE1zSTEFjDfhU9IPIOSA9Bml4m7iDFwA-1ZXvHteLDtw4R1XRGMEsDIqAYtskTTmzmzNa-_q4F_evAPUmwlO-ZG45Mnq4uhM1fm_D9rBtWolqZSF3xGNNkpOMQKF1Cl8i8wjzRli7-IXgyirlKQsbhhqRzkv8IcY6aHl24j03C-AR2le1r7URUhArM79BY8soZU0lzwI-sD5PZ3l4NDCCei9XkoIAfsXJWmySPoeRb2Ni5UZL4mYpvKDiwmyzGd65KqVw7MsFfI_K767G9C9Azp73gKZD0DyUn1mn0WW5LmyX_yJ-3AROq8p1WZBfG-ZyJ6195_JGG2m9Csg.WCCkNa-x4BeB9hIDIfFuhg';
|
||||
$expected_json = '{"protected":"eyJhbGciOiJFQ0RILUVTIiwia2lkIjoibWVyaWFkb2MuYnJhbmR5YnVja0BidWNrbGFuZC5leGFtcGxlIiwiZXBrIjp7Imt0eSI6IkVDIiwiY3J2IjoiUC0yNTYiLCJ4IjoibVBVS1RfYkFXR0hJaGcwVHBqanFWc1AxclhXUXVfdndWT0hIdE5rZFlvQSIsInkiOiI4QlFBc0ltR2VBUzQ2ZnlXdzVNaFlmR1RUMElqQnBGdzJTUzM0RHY0SXJzIn0sImVuYyI6IkExMjhDQkMtSFMyNTYifQ","iv":"yc9N8v5sYyv3iGQT926IUg","ciphertext":"BoDlwPnTypYq-ivjmQvAYJLb5Q6l-F3LIgQomlz87yW4OPKbWE1zSTEFjDfhU9IPIOSA9Bml4m7iDFwA-1ZXvHteLDtw4R1XRGMEsDIqAYtskTTmzmzNa-_q4F_evAPUmwlO-ZG45Mnq4uhM1fm_D9rBtWolqZSF3xGNNkpOMQKF1Cl8i8wjzRli7-IXgyirlKQsbhhqRzkv8IcY6aHl24j03C-AR2le1r7URUhArM79BY8soZU0lzwI-sD5PZ3l4NDCCei9XkoIAfsXJWmySPoeRb2Ni5UZL4mYpvKDiwmyzGd65KqVw7MsFfI_K767G9C9Azp73gKZD0DyUn1mn0WW5LmyX_yJ-3AROq8p1WZBfG-ZyJ6195_JGG2m9Csg","tag":"WCCkNa-x4BeB9hIDIfFuhg"}';
|
||||
$expected_iv = 'yc9N8v5sYyv3iGQT926IUg';
|
||||
$expected_ciphertext = 'BoDlwPnTypYq-ivjmQvAYJLb5Q6l-F3LIgQomlz87yW4OPKbWE1zSTEFjDfhU9IPIOSA9Bml4m7iDFwA-1ZXvHteLDtw4R1XRGMEsDIqAYtskTTmzmzNa-_q4F_evAPUmwlO-ZG45Mnq4uhM1fm_D9rBtWolqZSF3xGNNkpOMQKF1Cl8i8wjzRli7-IXgyirlKQsbhhqRzkv8IcY6aHl24j03C-AR2le1r7URUhArM79BY8soZU0lzwI-sD5PZ3l4NDCCei9XkoIAfsXJWmySPoeRb2Ni5UZL4mYpvKDiwmyzGd65KqVw7MsFfI_K767G9C9Azp73gKZD0DyUn1mn0WW5LmyX_yJ-3AROq8p1WZBfG-ZyJ6195_JGG2m9Csg';
|
||||
$expected_tag = 'WCCkNa-x4BeB9hIDIfFuhg';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['ECDH-ES'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($expected_compact_json);
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_compact_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_compact_json->getIV()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_compact_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function eCDHESAndA128CBCHS256EncryptionBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$public_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'meriadoc.brandybuck@buckland.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-256',
|
||||
'x' => 'Ze2loSV3wrroKUN_4zhwGhCqo3Xhu1td4QjeQ5wIVR0',
|
||||
'y' => 'HlLtdXARY_f55A3fnzQbPcm6hgr34Mp8p-nuzQCE0Zw',
|
||||
]);
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'meriadoc.brandybuck@buckland.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-256',
|
||||
'x' => 'Ze2loSV3wrroKUN_4zhwGhCqo3Xhu1td4QjeQ5wIVR0',
|
||||
'y' => 'HlLtdXARY_f55A3fnzQbPcm6hgr34Mp8p-nuzQCE0Zw',
|
||||
'd' => 'r_kHyZ-a06rmxM3yESK84r1otSg-aQcVStkRhA-iCM8',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'ECDH-ES',
|
||||
'kid' => 'meriadoc.brandybuck@buckland.example',
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['ECDH-ES'], ['A128CBC-HS256'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['ECDH-ES'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($public_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertTrue(array_key_exists('epk', $loaded_json->getSharedProtectedHeader()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
304
vendor/web-token/jwt-encryption/Tests/RFC7520/MultipleRecipientEncryptionTest.php
vendored
Normal file
304
vendor/web-token/jwt-encryption/Tests/RFC7520/MultipleRecipientEncryptionTest.php
vendored
Normal file
@@ -0,0 +1,304 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use function array_key_exists;
|
||||
use Base64Url\Base64Url;
|
||||
use InvalidArgumentException;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.13
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class MultipleRecipientEncryptionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function multipleRecipientEncryption(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$recipient_1_private_key = new JWK([
|
||||
'kty' => 'RSA',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
'use' => 'enc',
|
||||
'n' => 'maxhbsmBtdQ3CNrKvprUE6n9lYcregDMLYNeTAWcLj8NnPU9XIYegTHVHQjxKDSHP2l-F5jS7sppG1wgdAqZyhnWvXhYNvcM7RfgKxqNx_xAHx6f3yy7s-M9PSNCwPC2lh6UAkR4I00EhV9lrypM9Pi4lBUop9t5fS9W5UNwaAllhrd-osQGPjIeI1deHTwx-ZTHu3C60Pu_LJIl6hKn9wbwaUmA4cR5Bd2pgbaY7ASgsjCUbtYJaNIHSoHXprUdJZKUMAzV0WOKPfA6OPI4oypBadjvMZ4ZAj3BnXaSYsEZhaueTXvZB4eZOAjIyh2e_VOIKVMsnDrJYAVotGlvMQ',
|
||||
'e' => 'AQAB',
|
||||
'd' => 'Kn9tgoHfiTVi8uPu5b9TnwyHwG5dK6RE0uFdlpCGnJN7ZEi963R7wybQ1PLAHmpIbNTztfrheoAniRV1NCIqXaW_qS461xiDTp4ntEPnqcKsyO5jMAji7-CL8vhpYYowNFvIesgMoVaPRYMYT9TW63hNM0aWs7USZ_hLg6Oe1mY0vHTI3FucjSM86Nff4oIENt43r2fspgEPGRrdE6fpLc9Oaq-qeP1GFULimrRdndm-P8q8kvN3KHlNAtEgrQAgTTgz80S-3VD0FgWfgnb1PNmiuPUxO8OpI9KDIfu_acc6fg14nsNaJqXe6RESvhGPH2afjHqSy_Fd2vpzj85bQQ',
|
||||
'p' => '2DwQmZ43FoTnQ8IkUj3BmKRf5Eh2mizZA5xEJ2MinUE3sdTYKSLtaEoekX9vbBZuWxHdVhM6UnKCJ_2iNk8Z0ayLYHL0_G21aXf9-unynEpUsH7HHTklLpYAzOOx1ZgVljoxAdWNn3hiEFrjZLZGS7lOH-a3QQlDDQoJOJ2VFmU',
|
||||
'q' => 'te8LY4-W7IyaqH1ExujjMqkTAlTeRbv0VLQnfLY2xINnrWdwiQ93_VF099aP1ESeLja2nw-6iKIe-qT7mtCPozKfVtUYfz5HrJ_XY2kfexJINb9lhZHMv5p1skZpeIS-GPHCC6gRlKo1q-idn_qxyusfWv7WAxlSVfQfk8d6Et0',
|
||||
'dp' => 'UfYKcL_or492vVc0PzwLSplbg4L3-Z5wL48mwiswbpzOyIgd2xHTHQmjJpFAIZ8q-zf9RmgJXkDrFs9rkdxPtAsL1WYdeCT5c125Fkdg317JVRDo1inX7x2Kdh8ERCreW8_4zXItuTl_KiXZNU5lvMQjWbIw2eTx1lpsflo0rYU',
|
||||
'dq' => 'iEgcO-QfpepdH8FWd7mUFyrXdnOkXJBCogChY6YKuIHGc_p8Le9MbpFKESzEaLlN1Ehf3B6oGBl5Iz_ayUlZj2IoQZ82znoUrpa9fVYNot87ACfzIG7q9Mv7RiPAderZi03tkVXAdaBau_9vs5rS-7HMtxkVrxSUvJY14TkXlHE',
|
||||
'qi' => 'kC-lzZOqoFaZCr5l0tOVtREKoVqaAYhQiqIRGL-MzS4sCmRkxm5vZlXYx6RtE1n_AagjqajlkjieGlxTTThHD8Iga6foGBMaAr5uR1hGQpSc7Gl7CF1DZkBJMTQN6EshYzZfxW08mIO8M6Rzuh0beL6fG9mkDcIyPrBXx2bQ_mM',
|
||||
]);
|
||||
|
||||
$recipient_2_private_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-384',
|
||||
'x' => 'YU4rRUzdmVqmRtWOs2OpDE_T5fsNIodcG8G5FWPrTPMyxpzsSOGaQLpe2FpxBmu2',
|
||||
'y' => 'A8-yxCHxkfBz3hKZfI1jUYMjUhsEveZ9THuwFjH2sCNdtksRJU7D5-SkgaFL1ETP',
|
||||
'd' => 'iTx2pk7wW-GqJkHcEkFQb2EFyYcO7RugmaW3mRrQVAOUiPommT0IdnYK2xDlZh-j',
|
||||
]);
|
||||
|
||||
$recipient_3_private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A256GCMKW',
|
||||
'k' => 'qC57l_uxcm7Nm3K-ct4GFjx8tM1U8CZ0NLBvdQstiS8',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$header = [
|
||||
'cty' => 'text/plain',
|
||||
];
|
||||
|
||||
$recipient_1Header = [
|
||||
'alg' => 'RSA1_5',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
];
|
||||
|
||||
$recipient_2Header = [
|
||||
'alg' => 'ECDH-ES+A256KW',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'epk' => [
|
||||
'kty' => 'EC',
|
||||
'crv' => 'P-384',
|
||||
'x' => 'Uzdvk3pi5wKCRc1izp5_r0OjeqT-I68i8g2b8mva8diRhsE2xAn2DtMRb25Ma2CX',
|
||||
'y' => 'VDrRyFJh-Kwd1EjAgmj5Eo-CTHAZ53MC7PjjpLioy3ylEjI1pOMbw91fzZ84pbfm',
|
||||
], ];
|
||||
|
||||
$recipient_3Header = [
|
||||
'alg' => 'A256GCMKW',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
'tag' => '59Nqh1LlYtVIhfD3pgRGvw',
|
||||
'iv' => 'AvpeoPZ9Ncn9mkBn',
|
||||
];
|
||||
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"dYOD28kab0Vvf4ODgxVAJXgHcSZICSOp8M51zjwj4w6Y5G4XJQsNNIBiqyvUUAOcpL7S7-cFe7Pio7gV_Q06WmCSa-vhW6me4bWrBf7cHwEQJdXihidAYWVajJIaKMXMvFRMV6iDlRr076DFthg2_AV0_tSiV6xSEIFqt1xnYPpmP91tc5WJDOGb-wqjw0-b-S1laS11QVbuP78dQ7Fa0zAVzzjHX-xvyM2wxj_otxr9clN1LnZMbeYSrRicJK5xodvWgkpIdkMHo4LvdhRRvzoKzlic89jFWPlnBq_V4n5trGuExtp_-dbHcGlihqc_wGgho9fLMK8JOArYLcMDNQ","header":{"alg":"RSA1_5","kid":"frodo.baggins@hobbiton.example"}},{"encrypted_key":"ExInT0io9BqBMYF6-maw5tZlgoZXThD1zWKsHixJuw_elY4gSSId_w","header":{"alg":"ECDH-ES+A256KW","kid":"peregrin.took@tuckborough.example","epk":{"kty":"EC","crv":"P-384","x":"Uzdvk3pi5wKCRc1izp5_r0OjeqT-I68i8g2b8mva8diRhsE2xAn2DtMRb25Ma2CX","y":"VDrRyFJh-Kwd1EjAgmj5Eo-CTHAZ53MC7PjjpLioy3ylEjI1pOMbw91fzZ84pbfm"}}},{"encrypted_key":"a7CclAejo_7JSuPB8zeagxXRam8dwCfmkt9-WyTpS1E","header":{"alg":"A256GCMKW","kid":"18ec08e1-bfa9-4d95-b205-2b4dd1d4321d","tag":"59Nqh1LlYtVIhfD3pgRGvw","iv":"AvpeoPZ9Ncn9mkBn"}}],"unprotected":{"cty":"text/plain"},"protected":"eyJlbmMiOiJBMTI4Q0JDLUhTMjU2In0","iv":"VgEIHY20EnzUtZFl2RpB1g","ciphertext":"ajm2Q-OpPXCr7-MHXicknb1lsxLdXxK_yLds0KuhJzfWK04SjdxQeSw2L9mu3a_k1C55kCQ_3xlkcVKC5yr__Is48VOoK0k63_QRM9tBURMFqLByJ8vOYQX0oJW4VUHJLmGhF-tVQWB7Kz8mr8zeE7txF0MSaP6ga7-siYxStR7_G07Thd1jh-zGT0wxM5g-VRORtq0K6AXpLlwEqRp7pkt2zRM0ZAXqSpe1O6FJ7FHLDyEFnD-zDIZukLpCbzhzMDLLw2-8I14FQrgi-iEuzHgIJFIJn2wh9Tj0cg_kOZy9BqMRZbmYXMY9YQjorZ_P_JYG3ARAIF3OjDNqpdYe-K_5Q5crGJSDNyij_ygEiItR5jssQVH2ofDQdLChtazE","tag":"BESYyFN7T09KY7i8zKs5_g"}';
|
||||
$expected_iv = 'VgEIHY20EnzUtZFl2RpB1g';
|
||||
$expected_recipient_1_encrypted_key = 'dYOD28kab0Vvf4ODgxVAJXgHcSZICSOp8M51zjwj4w6Y5G4XJQsNNIBiqyvUUAOcpL7S7-cFe7Pio7gV_Q06WmCSa-vhW6me4bWrBf7cHwEQJdXihidAYWVajJIaKMXMvFRMV6iDlRr076DFthg2_AV0_tSiV6xSEIFqt1xnYPpmP91tc5WJDOGb-wqjw0-b-S1laS11QVbuP78dQ7Fa0zAVzzjHX-xvyM2wxj_otxr9clN1LnZMbeYSrRicJK5xodvWgkpIdkMHo4LvdhRRvzoKzlic89jFWPlnBq_V4n5trGuExtp_-dbHcGlihqc_wGgho9fLMK8JOArYLcMDNQ';
|
||||
$expected_recipient_2_encrypted_key = 'ExInT0io9BqBMYF6-maw5tZlgoZXThD1zWKsHixJuw_elY4gSSId_w';
|
||||
$expected_recipient_3_encrypted_key = 'a7CclAejo_7JSuPB8zeagxXRam8dwCfmkt9-WyTpS1E';
|
||||
$expected_ciphertext = 'ajm2Q-OpPXCr7-MHXicknb1lsxLdXxK_yLds0KuhJzfWK04SjdxQeSw2L9mu3a_k1C55kCQ_3xlkcVKC5yr__Is48VOoK0k63_QRM9tBURMFqLByJ8vOYQX0oJW4VUHJLmGhF-tVQWB7Kz8mr8zeE7txF0MSaP6ga7-siYxStR7_G07Thd1jh-zGT0wxM5g-VRORtq0K6AXpLlwEqRp7pkt2zRM0ZAXqSpe1O6FJ7FHLDyEFnD-zDIZukLpCbzhzMDLLw2-8I14FQrgi-iEuzHgIJFIJn2wh9Tj0cg_kOZy9BqMRZbmYXMY9YQjorZ_P_JYG3ARAIF3OjDNqpdYe-K_5Q5crGJSDNyij_ygEiItR5jssQVH2ofDQdLChtazE';
|
||||
$expected_tag = 'BESYyFN7T09KY7i8zKs5_g';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['RSA1_5', 'ECDH-ES+A256KW', 'A256GCMKW'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $recipient_1_private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $recipient_2_private_key, 1));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $recipient_3_private_key, 2));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_recipient_1_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_recipient_2_encrypted_key, Base64Url::encode($loaded_json->getRecipient(1)->getEncryptedKey()));
|
||||
static::assertEquals($expected_recipient_3_encrypted_key, Base64Url::encode($loaded_json->getRecipient(2)->getEncryptedKey()));
|
||||
static::assertEquals($recipient_1Header, $loaded_json->getRecipient(0)->getHeader());
|
||||
static::assertEquals($recipient_2Header, $loaded_json->getRecipient(1)->getHeader());
|
||||
static::assertEquals($recipient_3Header, $loaded_json->getRecipient(2)->getHeader());
|
||||
static::assertEquals($header, $loaded_json->getSharedHeader());
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function multipleRecipientEncryptionBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$recipient_1_private_key = new JWK([
|
||||
'kty' => 'RSA',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
'use' => 'enc',
|
||||
'n' => 'maxhbsmBtdQ3CNrKvprUE6n9lYcregDMLYNeTAWcLj8NnPU9XIYegTHVHQjxKDSHP2l-F5jS7sppG1wgdAqZyhnWvXhYNvcM7RfgKxqNx_xAHx6f3yy7s-M9PSNCwPC2lh6UAkR4I00EhV9lrypM9Pi4lBUop9t5fS9W5UNwaAllhrd-osQGPjIeI1deHTwx-ZTHu3C60Pu_LJIl6hKn9wbwaUmA4cR5Bd2pgbaY7ASgsjCUbtYJaNIHSoHXprUdJZKUMAzV0WOKPfA6OPI4oypBadjvMZ4ZAj3BnXaSYsEZhaueTXvZB4eZOAjIyh2e_VOIKVMsnDrJYAVotGlvMQ',
|
||||
'e' => 'AQAB',
|
||||
'd' => 'Kn9tgoHfiTVi8uPu5b9TnwyHwG5dK6RE0uFdlpCGnJN7ZEi963R7wybQ1PLAHmpIbNTztfrheoAniRV1NCIqXaW_qS461xiDTp4ntEPnqcKsyO5jMAji7-CL8vhpYYowNFvIesgMoVaPRYMYT9TW63hNM0aWs7USZ_hLg6Oe1mY0vHTI3FucjSM86Nff4oIENt43r2fspgEPGRrdE6fpLc9Oaq-qeP1GFULimrRdndm-P8q8kvN3KHlNAtEgrQAgTTgz80S-3VD0FgWfgnb1PNmiuPUxO8OpI9KDIfu_acc6fg14nsNaJqXe6RESvhGPH2afjHqSy_Fd2vpzj85bQQ',
|
||||
'p' => '2DwQmZ43FoTnQ8IkUj3BmKRf5Eh2mizZA5xEJ2MinUE3sdTYKSLtaEoekX9vbBZuWxHdVhM6UnKCJ_2iNk8Z0ayLYHL0_G21aXf9-unynEpUsH7HHTklLpYAzOOx1ZgVljoxAdWNn3hiEFrjZLZGS7lOH-a3QQlDDQoJOJ2VFmU',
|
||||
'q' => 'te8LY4-W7IyaqH1ExujjMqkTAlTeRbv0VLQnfLY2xINnrWdwiQ93_VF099aP1ESeLja2nw-6iKIe-qT7mtCPozKfVtUYfz5HrJ_XY2kfexJINb9lhZHMv5p1skZpeIS-GPHCC6gRlKo1q-idn_qxyusfWv7WAxlSVfQfk8d6Et0',
|
||||
'dp' => 'UfYKcL_or492vVc0PzwLSplbg4L3-Z5wL48mwiswbpzOyIgd2xHTHQmjJpFAIZ8q-zf9RmgJXkDrFs9rkdxPtAsL1WYdeCT5c125Fkdg317JVRDo1inX7x2Kdh8ERCreW8_4zXItuTl_KiXZNU5lvMQjWbIw2eTx1lpsflo0rYU',
|
||||
'dq' => 'iEgcO-QfpepdH8FWd7mUFyrXdnOkXJBCogChY6YKuIHGc_p8Le9MbpFKESzEaLlN1Ehf3B6oGBl5Iz_ayUlZj2IoQZ82znoUrpa9fVYNot87ACfzIG7q9Mv7RiPAderZi03tkVXAdaBau_9vs5rS-7HMtxkVrxSUvJY14TkXlHE',
|
||||
'qi' => 'kC-lzZOqoFaZCr5l0tOVtREKoVqaAYhQiqIRGL-MzS4sCmRkxm5vZlXYx6RtE1n_AagjqajlkjieGlxTTThHD8Iga6foGBMaAr5uR1hGQpSc7Gl7CF1DZkBJMTQN6EshYzZfxW08mIO8M6Rzuh0beL6fG9mkDcIyPrBXx2bQ_mM',
|
||||
]);
|
||||
|
||||
$recipient_2_public_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-384',
|
||||
'x' => 'YU4rRUzdmVqmRtWOs2OpDE_T5fsNIodcG8G5FWPrTPMyxpzsSOGaQLpe2FpxBmu2',
|
||||
'y' => 'A8-yxCHxkfBz3hKZfI1jUYMjUhsEveZ9THuwFjH2sCNdtksRJU7D5-SkgaFL1ETP',
|
||||
]);
|
||||
|
||||
$recipient_2_private_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-384',
|
||||
'x' => 'YU4rRUzdmVqmRtWOs2OpDE_T5fsNIodcG8G5FWPrTPMyxpzsSOGaQLpe2FpxBmu2',
|
||||
'y' => 'A8-yxCHxkfBz3hKZfI1jUYMjUhsEveZ9THuwFjH2sCNdtksRJU7D5-SkgaFL1ETP',
|
||||
'd' => 'iTx2pk7wW-GqJkHcEkFQb2EFyYcO7RugmaW3mRrQVAOUiPommT0IdnYK2xDlZh-j',
|
||||
]);
|
||||
|
||||
$recipient_3_private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A256GCMKW',
|
||||
'k' => 'qC57l_uxcm7Nm3K-ct4GFjx8tM1U8CZ0NLBvdQstiS8',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$header = [
|
||||
'cty' => 'text/plain',
|
||||
];
|
||||
|
||||
$recipient_1Header = [
|
||||
'alg' => 'RSA1_5',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
];
|
||||
|
||||
$recipient_2Header = [
|
||||
'alg' => 'ECDH-ES+A256KW',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
];
|
||||
|
||||
$recipient_3Header = [
|
||||
'alg' => 'A256GCMKW',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['RSA1_5', 'ECDH-ES+A256KW', 'A256GCMKW'], ['A128CBC-HS256'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['RSA1_5', 'ECDH-ES+A256KW', 'A256GCMKW'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->withSharedHeader($header)
|
||||
->addRecipient($recipient_1_private_key, $recipient_1Header)
|
||||
->addRecipient($recipient_2_public_key, $recipient_2Header)
|
||||
->addRecipient($recipient_3_private_key, $recipient_3Header)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $recipient_1_private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $recipient_2_private_key, 1));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $recipient_3_private_key, 2));
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($recipient_1Header, $loaded_json->getRecipient(0)->getHeader());
|
||||
static::assertTrue(array_key_exists('epk', $loaded_json->getRecipient(1)->getHeader()));
|
||||
static::assertTrue(array_key_exists('iv', $loaded_json->getRecipient(2)->getHeader()));
|
||||
static::assertTrue(array_key_exists('tag', $loaded_json->getRecipient(2)->getHeader()));
|
||||
static::assertEquals($header, $loaded_json->getSharedHeader());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* @test
|
||||
*/
|
||||
public function multipleRecipientEncryptionWithDifferentContentEncryptionAlgorithm(): void
|
||||
{
|
||||
$this->expectException(InvalidArgumentException::class);
|
||||
$this->expectExceptionMessage('Inconsistent content encryption algorithm');
|
||||
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$recipient_1_private_key = new JWK([
|
||||
'kty' => 'RSA',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
'use' => 'enc',
|
||||
'n' => 'maxhbsmBtdQ3CNrKvprUE6n9lYcregDMLYNeTAWcLj8NnPU9XIYegTHVHQjxKDSHP2l-F5jS7sppG1wgdAqZyhnWvXhYNvcM7RfgKxqNx_xAHx6f3yy7s-M9PSNCwPC2lh6UAkR4I00EhV9lrypM9Pi4lBUop9t5fS9W5UNwaAllhrd-osQGPjIeI1deHTwx-ZTHu3C60Pu_LJIl6hKn9wbwaUmA4cR5Bd2pgbaY7ASgsjCUbtYJaNIHSoHXprUdJZKUMAzV0WOKPfA6OPI4oypBadjvMZ4ZAj3BnXaSYsEZhaueTXvZB4eZOAjIyh2e_VOIKVMsnDrJYAVotGlvMQ',
|
||||
'e' => 'AQAB',
|
||||
'd' => 'Kn9tgoHfiTVi8uPu5b9TnwyHwG5dK6RE0uFdlpCGnJN7ZEi963R7wybQ1PLAHmpIbNTztfrheoAniRV1NCIqXaW_qS461xiDTp4ntEPnqcKsyO5jMAji7-CL8vhpYYowNFvIesgMoVaPRYMYT9TW63hNM0aWs7USZ_hLg6Oe1mY0vHTI3FucjSM86Nff4oIENt43r2fspgEPGRrdE6fpLc9Oaq-qeP1GFULimrRdndm-P8q8kvN3KHlNAtEgrQAgTTgz80S-3VD0FgWfgnb1PNmiuPUxO8OpI9KDIfu_acc6fg14nsNaJqXe6RESvhGPH2afjHqSy_Fd2vpzj85bQQ',
|
||||
'p' => '2DwQmZ43FoTnQ8IkUj3BmKRf5Eh2mizZA5xEJ2MinUE3sdTYKSLtaEoekX9vbBZuWxHdVhM6UnKCJ_2iNk8Z0ayLYHL0_G21aXf9-unynEpUsH7HHTklLpYAzOOx1ZgVljoxAdWNn3hiEFrjZLZGS7lOH-a3QQlDDQoJOJ2VFmU',
|
||||
'q' => 'te8LY4-W7IyaqH1ExujjMqkTAlTeRbv0VLQnfLY2xINnrWdwiQ93_VF099aP1ESeLja2nw-6iKIe-qT7mtCPozKfVtUYfz5HrJ_XY2kfexJINb9lhZHMv5p1skZpeIS-GPHCC6gRlKo1q-idn_qxyusfWv7WAxlSVfQfk8d6Et0',
|
||||
'dp' => 'UfYKcL_or492vVc0PzwLSplbg4L3-Z5wL48mwiswbpzOyIgd2xHTHQmjJpFAIZ8q-zf9RmgJXkDrFs9rkdxPtAsL1WYdeCT5c125Fkdg317JVRDo1inX7x2Kdh8ERCreW8_4zXItuTl_KiXZNU5lvMQjWbIw2eTx1lpsflo0rYU',
|
||||
'dq' => 'iEgcO-QfpepdH8FWd7mUFyrXdnOkXJBCogChY6YKuIHGc_p8Le9MbpFKESzEaLlN1Ehf3B6oGBl5Iz_ayUlZj2IoQZ82znoUrpa9fVYNot87ACfzIG7q9Mv7RiPAderZi03tkVXAdaBau_9vs5rS-7HMtxkVrxSUvJY14TkXlHE',
|
||||
'qi' => 'kC-lzZOqoFaZCr5l0tOVtREKoVqaAYhQiqIRGL-MzS4sCmRkxm5vZlXYx6RtE1n_AagjqajlkjieGlxTTThHD8Iga6foGBMaAr5uR1hGQpSc7Gl7CF1DZkBJMTQN6EshYzZfxW08mIO8M6Rzuh0beL6fG9mkDcIyPrBXx2bQ_mM',
|
||||
]);
|
||||
|
||||
$recipient_2_public_key = new JWK([
|
||||
'kty' => 'EC',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
'use' => 'enc',
|
||||
'crv' => 'P-384',
|
||||
'x' => 'YU4rRUzdmVqmRtWOs2OpDE_T5fsNIodcG8G5FWPrTPMyxpzsSOGaQLpe2FpxBmu2',
|
||||
'y' => 'A8-yxCHxkfBz3hKZfI1jUYMjUhsEveZ9THuwFjH2sCNdtksRJU7D5-SkgaFL1ETP',
|
||||
]);
|
||||
|
||||
$protectedHeader = [];
|
||||
|
||||
$header = [
|
||||
'cty' => 'text/plain',
|
||||
];
|
||||
|
||||
$recipient_1Header = [
|
||||
'alg' => 'RSA1_5',
|
||||
'enc' => 'A128GCM',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
];
|
||||
|
||||
$recipient_2Header = [
|
||||
'alg' => 'ECDH-ES+A256KW',
|
||||
'enc' => 'A128CBC-HS256',
|
||||
'kid' => 'peregrin.took@tuckborough.example',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['RSA1_5', 'A256GCMKW'], ['A128CBC-HS256', 'A128GCM'], ['DEF']);
|
||||
$jweBuilder
|
||||
->create()
|
||||
->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->withSharedHeader($header)
|
||||
->addRecipient($recipient_1_private_key, $recipient_1Header)
|
||||
->addRecipient($recipient_2_public_key, $recipient_2Header)
|
||||
->build()
|
||||
;
|
||||
}
|
||||
}
|
||||
182
vendor/web-token/jwt-encryption/Tests/RFC7520/PBES2_HS512_A256KWAndA128CBC_HS256EncryptionTest.php
vendored
Normal file
182
vendor/web-token/jwt-encryption/Tests/RFC7520/PBES2_HS512_A256KWAndA128CBC_HS256EncryptionTest.php
vendored
Normal file
@@ -0,0 +1,182 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use function array_key_exists;
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.3
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class PBES2_HS512_A256KWAndA128CBC_HS256EncryptionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function pBES2HS512A256KWAndA128CBCHS256Encryption(): void
|
||||
{
|
||||
$expected_payload = ['keys' => [
|
||||
[
|
||||
'kty' => 'oct',
|
||||
'kid' => '77c7e2b8-6e13-45cf-8672-617b5b45243a',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128GCM',
|
||||
'k' => 'XctOhJAkA-pD9Lh7ZgW_2A',
|
||||
], [
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
], [
|
||||
'kty' => 'oct',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A256GCMKW',
|
||||
'k' => 'qC57l_uxcm7Nm3K-ct4GFjx8tM1U8CZ0NLBvdQstiS8',
|
||||
],
|
||||
]];
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'use' => 'enc',
|
||||
'k' => Base64Url::encode("entrap_o\xe2\x80\x93peter_long\xe2\x80\x93credit_tun"),
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'PBES2-HS512+A256KW',
|
||||
'p2s' => '8Q1SzinasR3xchYz6ZZcHA',
|
||||
'p2c' => 8192,
|
||||
'cty' => 'jwk-set+json',
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$expected_compact_json = 'eyJhbGciOiJQQkVTMi1IUzUxMitBMjU2S1ciLCJwMnMiOiI4UTFTemluYXNSM3hjaFl6NlpaY0hBIiwicDJjIjo4MTkyLCJjdHkiOiJqd2stc2V0K2pzb24iLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.d3qNhUWfqheyPp4H8sjOWsDYajoej4c5Je6rlUtFPWdgtURtmeDV1g.VBiCzVHNoLiR3F4V82uoTQ.23i-Tb1AV4n0WKVSSgcQrdg6GRqsUKxjruHXYsTHAJLZ2nsnGIX86vMXqIi6IRsfywCRFzLxEcZBRnTvG3nhzPk0GDD7FMyXhUHpDjEYCNA_XOmzg8yZR9oyjo6lTF6si4q9FZ2EhzgFQCLO_6h5EVg3vR75_hkBsnuoqoM3dwejXBtIodN84PeqMb6asmas_dpSsz7H10fC5ni9xIz424givB1YLldF6exVmL93R3fOoOJbmk2GBQZL_SEGllv2cQsBgeprARsaQ7Bq99tT80coH8ItBjgV08AtzXFFsx9qKvC982KLKdPQMTlVJKkqtV4Ru5LEVpBZXBnZrtViSOgyg6AiuwaS-rCrcD_ePOGSuxvgtrokAKYPqmXUeRdjFJwafkYEkiuDCV9vWGAi1DH2xTafhJwcmywIyzi4BqRpmdn_N-zl5tuJYyuvKhjKv6ihbsV_k1hJGPGAxJ6wUpmwC4PTQ2izEm0TuSE8oMKdTw8V3kobXZ77ulMwDs4p.0HlwodAhOCILG5SQ2LQ9dg';
|
||||
$expected_flattened_json = '{"protected":"eyJhbGciOiJQQkVTMi1IUzUxMitBMjU2S1ciLCJwMnMiOiI4UTFTemluYXNSM3hjaFl6NlpaY0hBIiwicDJjIjo4MTkyLCJjdHkiOiJqd2stc2V0K2pzb24iLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0","encrypted_key":"d3qNhUWfqheyPp4H8sjOWsDYajoej4c5Je6rlUtFPWdgtURtmeDV1g","iv":"VBiCzVHNoLiR3F4V82uoTQ","ciphertext":"23i-Tb1AV4n0WKVSSgcQrdg6GRqsUKxjruHXYsTHAJLZ2nsnGIX86vMXqIi6IRsfywCRFzLxEcZBRnTvG3nhzPk0GDD7FMyXhUHpDjEYCNA_XOmzg8yZR9oyjo6lTF6si4q9FZ2EhzgFQCLO_6h5EVg3vR75_hkBsnuoqoM3dwejXBtIodN84PeqMb6asmas_dpSsz7H10fC5ni9xIz424givB1YLldF6exVmL93R3fOoOJbmk2GBQZL_SEGllv2cQsBgeprARsaQ7Bq99tT80coH8ItBjgV08AtzXFFsx9qKvC982KLKdPQMTlVJKkqtV4Ru5LEVpBZXBnZrtViSOgyg6AiuwaS-rCrcD_ePOGSuxvgtrokAKYPqmXUeRdjFJwafkYEkiuDCV9vWGAi1DH2xTafhJwcmywIyzi4BqRpmdn_N-zl5tuJYyuvKhjKv6ihbsV_k1hJGPGAxJ6wUpmwC4PTQ2izEm0TuSE8oMKdTw8V3kobXZ77ulMwDs4p","tag":"0HlwodAhOCILG5SQ2LQ9dg"}';
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"d3qNhUWfqheyPp4H8sjOWsDYajoej4c5Je6rlUtFPWdgtURtmeDV1g"}],"protected":"eyJhbGciOiJQQkVTMi1IUzUxMitBMjU2S1ciLCJwMnMiOiI4UTFTemluYXNSM3hjaFl6NlpaY0hBIiwicDJjIjo4MTkyLCJjdHkiOiJqd2stc2V0K2pzb24iLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0","iv":"VBiCzVHNoLiR3F4V82uoTQ","ciphertext":"23i-Tb1AV4n0WKVSSgcQrdg6GRqsUKxjruHXYsTHAJLZ2nsnGIX86vMXqIi6IRsfywCRFzLxEcZBRnTvG3nhzPk0GDD7FMyXhUHpDjEYCNA_XOmzg8yZR9oyjo6lTF6si4q9FZ2EhzgFQCLO_6h5EVg3vR75_hkBsnuoqoM3dwejXBtIodN84PeqMb6asmas_dpSsz7H10fC5ni9xIz424givB1YLldF6exVmL93R3fOoOJbmk2GBQZL_SEGllv2cQsBgeprARsaQ7Bq99tT80coH8ItBjgV08AtzXFFsx9qKvC982KLKdPQMTlVJKkqtV4Ru5LEVpBZXBnZrtViSOgyg6AiuwaS-rCrcD_ePOGSuxvgtrokAKYPqmXUeRdjFJwafkYEkiuDCV9vWGAi1DH2xTafhJwcmywIyzi4BqRpmdn_N-zl5tuJYyuvKhjKv6ihbsV_k1hJGPGAxJ6wUpmwC4PTQ2izEm0TuSE8oMKdTw8V3kobXZ77ulMwDs4p","tag":"0HlwodAhOCILG5SQ2LQ9dg"}';
|
||||
$expected_iv = 'VBiCzVHNoLiR3F4V82uoTQ';
|
||||
$expected_encrypted_key = 'd3qNhUWfqheyPp4H8sjOWsDYajoej4c5Je6rlUtFPWdgtURtmeDV1g';
|
||||
$expected_ciphertext = '23i-Tb1AV4n0WKVSSgcQrdg6GRqsUKxjruHXYsTHAJLZ2nsnGIX86vMXqIi6IRsfywCRFzLxEcZBRnTvG3nhzPk0GDD7FMyXhUHpDjEYCNA_XOmzg8yZR9oyjo6lTF6si4q9FZ2EhzgFQCLO_6h5EVg3vR75_hkBsnuoqoM3dwejXBtIodN84PeqMb6asmas_dpSsz7H10fC5ni9xIz424givB1YLldF6exVmL93R3fOoOJbmk2GBQZL_SEGllv2cQsBgeprARsaQ7Bq99tT80coH8ItBjgV08AtzXFFsx9qKvC982KLKdPQMTlVJKkqtV4Ru5LEVpBZXBnZrtViSOgyg6AiuwaS-rCrcD_ePOGSuxvgtrokAKYPqmXUeRdjFJwafkYEkiuDCV9vWGAi1DH2xTafhJwcmywIyzi4BqRpmdn_N-zl5tuJYyuvKhjKv6ihbsV_k1hJGPGAxJ6wUpmwC4PTQ2izEm0TuSE8oMKdTw8V3kobXZ77ulMwDs4p';
|
||||
$expected_tag = '0HlwodAhOCILG5SQ2LQ9dg';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['PBES2-HS512+A256KW'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($expected_compact_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_compact_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_compact_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_compact_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_compact_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, json_decode($loaded_compact_json->getPayload(), true));
|
||||
static::assertEquals($expected_payload, json_decode($loaded_flattened_json->getPayload(), true));
|
||||
static::assertEquals($expected_payload, json_decode($loaded_json->getPayload(), true));
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function pBES2HS512A256KWAndA128CBCHS256EncryptionBis(): void
|
||||
{
|
||||
$expected_payload = json_encode(['keys' => [
|
||||
[
|
||||
'kty' => 'oct',
|
||||
'kid' => '77c7e2b8-6e13-45cf-8672-617b5b45243a',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128GCM',
|
||||
'k' => 'XctOhJAkA-pD9Lh7ZgW_2A',
|
||||
], [
|
||||
'kty' => 'oct',
|
||||
'kid' => '81b20965-8332-43d9-a468-82160ad91ac8',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A128KW',
|
||||
'k' => 'GZy6sIZ6wl9NJOKB-jnmVQ',
|
||||
], [
|
||||
'kty' => 'oct',
|
||||
'kid' => '18ec08e1-bfa9-4d95-b205-2b4dd1d4321d',
|
||||
'use' => 'enc',
|
||||
'alg' => 'A256GCMKW',
|
||||
'k' => 'qC57l_uxcm7Nm3K-ct4GFjx8tM1U8CZ0NLBvdQstiS8',
|
||||
],
|
||||
]]);
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'oct',
|
||||
'use' => 'enc',
|
||||
'k' => Base64Url::encode("entrap_o\xe2\x80\x93peter_long\xe2\x80\x93credit_tun"),
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'PBES2-HS512+A256KW',
|
||||
'cty' => 'jwk-set+json',
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['PBES2-HS512+A256KW'], ['A128CBC-HS256'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['PBES2-HS512+A256KW'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertTrue(array_key_exists('p2s', $loaded_flattened_json->getSharedProtectedHeader()));
|
||||
static::assertTrue(array_key_exists('p2c', $loaded_flattened_json->getSharedProtectedHeader()));
|
||||
|
||||
static::assertTrue(array_key_exists('p2s', $loaded_json->getSharedProtectedHeader()));
|
||||
static::assertTrue(array_key_exists('p2c', $loaded_json->getSharedProtectedHeader()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
159
vendor/web-token/jwt-encryption/Tests/RFC7520/RSA1_5AndA128CBC_HS256EncryptionTest.php
vendored
Normal file
159
vendor/web-token/jwt-encryption/Tests/RFC7520/RSA1_5AndA128CBC_HS256EncryptionTest.php
vendored
Normal file
@@ -0,0 +1,159 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.1
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class RSA1_5AndA128CBC_HS256EncryptionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function rSA15AndA128CBCHS256Encryption(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'RSA',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
'use' => 'enc',
|
||||
'n' => 'maxhbsmBtdQ3CNrKvprUE6n9lYcregDMLYNeTAWcLj8NnPU9XIYegTHVHQjxKDSHP2l-F5jS7sppG1wgdAqZyhnWvXhYNvcM7RfgKxqNx_xAHx6f3yy7s-M9PSNCwPC2lh6UAkR4I00EhV9lrypM9Pi4lBUop9t5fS9W5UNwaAllhrd-osQGPjIeI1deHTwx-ZTHu3C60Pu_LJIl6hKn9wbwaUmA4cR5Bd2pgbaY7ASgsjCUbtYJaNIHSoHXprUdJZKUMAzV0WOKPfA6OPI4oypBadjvMZ4ZAj3BnXaSYsEZhaueTXvZB4eZOAjIyh2e_VOIKVMsnDrJYAVotGlvMQ',
|
||||
'e' => 'AQAB',
|
||||
'd' => 'Kn9tgoHfiTVi8uPu5b9TnwyHwG5dK6RE0uFdlpCGnJN7ZEi963R7wybQ1PLAHmpIbNTztfrheoAniRV1NCIqXaW_qS461xiDTp4ntEPnqcKsyO5jMAji7-CL8vhpYYowNFvIesgMoVaPRYMYT9TW63hNM0aWs7USZ_hLg6Oe1mY0vHTI3FucjSM86Nff4oIENt43r2fspgEPGRrdE6fpLc9Oaq-qeP1GFULimrRdndm-P8q8kvN3KHlNAtEgrQAgTTgz80S-3VD0FgWfgnb1PNmiuPUxO8OpI9KDIfu_acc6fg14nsNaJqXe6RESvhGPH2afjHqSy_Fd2vpzj85bQQ',
|
||||
'p' => '2DwQmZ43FoTnQ8IkUj3BmKRf5Eh2mizZA5xEJ2MinUE3sdTYKSLtaEoekX9vbBZuWxHdVhM6UnKCJ_2iNk8Z0ayLYHL0_G21aXf9-unynEpUsH7HHTklLpYAzOOx1ZgVljoxAdWNn3hiEFrjZLZGS7lOH-a3QQlDDQoJOJ2VFmU',
|
||||
'q' => 'te8LY4-W7IyaqH1ExujjMqkTAlTeRbv0VLQnfLY2xINnrWdwiQ93_VF099aP1ESeLja2nw-6iKIe-qT7mtCPozKfVtUYfz5HrJ_XY2kfexJINb9lhZHMv5p1skZpeIS-GPHCC6gRlKo1q-idn_qxyusfWv7WAxlSVfQfk8d6Et0',
|
||||
'dp' => 'UfYKcL_or492vVc0PzwLSplbg4L3-Z5wL48mwiswbpzOyIgd2xHTHQmjJpFAIZ8q-zf9RmgJXkDrFs9rkdxPtAsL1WYdeCT5c125Fkdg317JVRDo1inX7x2Kdh8ERCreW8_4zXItuTl_KiXZNU5lvMQjWbIw2eTx1lpsflo0rYU',
|
||||
'dq' => 'iEgcO-QfpepdH8FWd7mUFyrXdnOkXJBCogChY6YKuIHGc_p8Le9MbpFKESzEaLlN1Ehf3B6oGBl5Iz_ayUlZj2IoQZ82znoUrpa9fVYNot87ACfzIG7q9Mv7RiPAderZi03tkVXAdaBau_9vs5rS-7HMtxkVrxSUvJY14TkXlHE',
|
||||
'qi' => 'kC-lzZOqoFaZCr5l0tOVtREKoVqaAYhQiqIRGL-MzS4sCmRkxm5vZlXYx6RtE1n_AagjqajlkjieGlxTTThHD8Iga6foGBMaAr5uR1hGQpSc7Gl7CF1DZkBJMTQN6EshYzZfxW08mIO8M6Rzuh0beL6fG9mkDcIyPrBXx2bQ_mM',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'RSA1_5',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$expected_compact_json = 'eyJhbGciOiJSU0ExXzUiLCJraWQiOiJmcm9kby5iYWdnaW5zQGhvYmJpdG9uLmV4YW1wbGUiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.laLxI0j-nLH-_BgLOXMozKxmy9gffy2gTdvqzfTihJBuuzxg0V7yk1WClnQePFvG2K-pvSlWc9BRIazDrn50RcRai__3TDON395H3c62tIouJJ4XaRvYHFjZTZ2GXfz8YAImcc91Tfk0WXC2F5Xbb71ClQ1DDH151tlpH77f2ff7xiSxh9oSewYrcGTSLUeeCt36r1Kt3OSj7EyBQXoZlN7IxbyhMAfgIe7Mv1rOTOI5I8NQqeXXW8VlzNmoxaGMny3YnGir5Wf6Qt2nBq4qDaPdnaAuuGUGEecelIO1wx1BpyIfgvfjOhMBs9M8XL223Fg47xlGsMXdfuY-4jaqVw.bbd5sTkYwhAIqfHsx8DayA.0fys_TY_na7f8dwSfXLiYdHaA2DxUjD67ieF7fcVbIR62JhJvGZ4_FNVSiGc_raa0HnLQ6s1P2sv3Xzl1p1l_o5wR_RsSzrS8Z-wnI3Jvo0mkpEEnlDmZvDu_k8OWzJv7eZVEqiWKdyVzFhPpiyQU28GLOpRc2VbVbK4dQKPdNTjPPEmRqcaGeTWZVyeSUvf5k59yJZxRuSvWFf6KrNtmRdZ8R4mDOjHSrM_s8uwIFcqt4r5GX8TKaI0zT5CbL5Qlw3sRc7u_hg0yKVOiRytEAEs3vZkcfLkP6nbXdC_PkMdNS-ohP78T2O6_7uInMGhFeX4ctHG7VelHGiT93JfWDEQi5_V9UN1rhXNrYu-0fVMkZAKX3VWi7lzA6BP430m.kvKuFBXHe5mQr4lqgobAUg';
|
||||
$expected_flattened_json = '{"protected":"eyJhbGciOiJSU0ExXzUiLCJraWQiOiJmcm9kby5iYWdnaW5zQGhvYmJpdG9uLmV4YW1wbGUiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0","encrypted_key":"laLxI0j-nLH-_BgLOXMozKxmy9gffy2gTdvqzfTihJBuuzxg0V7yk1WClnQePFvG2K-pvSlWc9BRIazDrn50RcRai__3TDON395H3c62tIouJJ4XaRvYHFjZTZ2GXfz8YAImcc91Tfk0WXC2F5Xbb71ClQ1DDH151tlpH77f2ff7xiSxh9oSewYrcGTSLUeeCt36r1Kt3OSj7EyBQXoZlN7IxbyhMAfgIe7Mv1rOTOI5I8NQqeXXW8VlzNmoxaGMny3YnGir5Wf6Qt2nBq4qDaPdnaAuuGUGEecelIO1wx1BpyIfgvfjOhMBs9M8XL223Fg47xlGsMXdfuY-4jaqVw","iv":"bbd5sTkYwhAIqfHsx8DayA","ciphertext":"0fys_TY_na7f8dwSfXLiYdHaA2DxUjD67ieF7fcVbIR62JhJvGZ4_FNVSiGc_raa0HnLQ6s1P2sv3Xzl1p1l_o5wR_RsSzrS8Z-wnI3Jvo0mkpEEnlDmZvDu_k8OWzJv7eZVEqiWKdyVzFhPpiyQU28GLOpRc2VbVbK4dQKPdNTjPPEmRqcaGeTWZVyeSUvf5k59yJZxRuSvWFf6KrNtmRdZ8R4mDOjHSrM_s8uwIFcqt4r5GX8TKaI0zT5CbL5Qlw3sRc7u_hg0yKVOiRytEAEs3vZkcfLkP6nbXdC_PkMdNS-ohP78T2O6_7uInMGhFeX4ctHG7VelHGiT93JfWDEQi5_V9UN1rhXNrYu-0fVMkZAKX3VWi7lzA6BP430m","tag":"kvKuFBXHe5mQr4lqgobAUg"}';
|
||||
$expected_json = '{"recipients":[{"encrypted_key":"laLxI0j-nLH-_BgLOXMozKxmy9gffy2gTdvqzfTihJBuuzxg0V7yk1WClnQePFvG2K-pvSlWc9BRIazDrn50RcRai__3TDON395H3c62tIouJJ4XaRvYHFjZTZ2GXfz8YAImcc91Tfk0WXC2F5Xbb71ClQ1DDH151tlpH77f2ff7xiSxh9oSewYrcGTSLUeeCt36r1Kt3OSj7EyBQXoZlN7IxbyhMAfgIe7Mv1rOTOI5I8NQqeXXW8VlzNmoxaGMny3YnGir5Wf6Qt2nBq4qDaPdnaAuuGUGEecelIO1wx1BpyIfgvfjOhMBs9M8XL223Fg47xlGsMXdfuY-4jaqVw"}],"protected":"eyJhbGciOiJSU0ExXzUiLCJraWQiOiJmcm9kby5iYWdnaW5zQGhvYmJpdG9uLmV4YW1wbGUiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0","iv":"bbd5sTkYwhAIqfHsx8DayA","ciphertext":"0fys_TY_na7f8dwSfXLiYdHaA2DxUjD67ieF7fcVbIR62JhJvGZ4_FNVSiGc_raa0HnLQ6s1P2sv3Xzl1p1l_o5wR_RsSzrS8Z-wnI3Jvo0mkpEEnlDmZvDu_k8OWzJv7eZVEqiWKdyVzFhPpiyQU28GLOpRc2VbVbK4dQKPdNTjPPEmRqcaGeTWZVyeSUvf5k59yJZxRuSvWFf6KrNtmRdZ8R4mDOjHSrM_s8uwIFcqt4r5GX8TKaI0zT5CbL5Qlw3sRc7u_hg0yKVOiRytEAEs3vZkcfLkP6nbXdC_PkMdNS-ohP78T2O6_7uInMGhFeX4ctHG7VelHGiT93JfWDEQi5_V9UN1rhXNrYu-0fVMkZAKX3VWi7lzA6BP430m","tag":"kvKuFBXHe5mQr4lqgobAUg"}';
|
||||
$expected_iv = 'bbd5sTkYwhAIqfHsx8DayA';
|
||||
$expected_encrypted_key = 'laLxI0j-nLH-_BgLOXMozKxmy9gffy2gTdvqzfTihJBuuzxg0V7yk1WClnQePFvG2K-pvSlWc9BRIazDrn50RcRai__3TDON395H3c62tIouJJ4XaRvYHFjZTZ2GXfz8YAImcc91Tfk0WXC2F5Xbb71ClQ1DDH151tlpH77f2ff7xiSxh9oSewYrcGTSLUeeCt36r1Kt3OSj7EyBQXoZlN7IxbyhMAfgIe7Mv1rOTOI5I8NQqeXXW8VlzNmoxaGMny3YnGir5Wf6Qt2nBq4qDaPdnaAuuGUGEecelIO1wx1BpyIfgvfjOhMBs9M8XL223Fg47xlGsMXdfuY-4jaqVw';
|
||||
$expected_ciphertext = '0fys_TY_na7f8dwSfXLiYdHaA2DxUjD67ieF7fcVbIR62JhJvGZ4_FNVSiGc_raa0HnLQ6s1P2sv3Xzl1p1l_o5wR_RsSzrS8Z-wnI3Jvo0mkpEEnlDmZvDu_k8OWzJv7eZVEqiWKdyVzFhPpiyQU28GLOpRc2VbVbK4dQKPdNTjPPEmRqcaGeTWZVyeSUvf5k59yJZxRuSvWFf6KrNtmRdZ8R4mDOjHSrM_s8uwIFcqt4r5GX8TKaI0zT5CbL5Qlw3sRc7u_hg0yKVOiRytEAEs3vZkcfLkP6nbXdC_PkMdNS-ohP78T2O6_7uInMGhFeX4ctHG7VelHGiT93JfWDEQi5_V9UN1rhXNrYu-0fVMkZAKX3VWi7lzA6BP430m';
|
||||
$expected_tag = 'kvKuFBXHe5mQr4lqgobAUg';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['RSA1_5'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($expected_compact_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_compact_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_compact_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_compact_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_compact_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function rSA15AndA128CBCHS256EncryptionBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'RSA',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
'use' => 'enc',
|
||||
'n' => 'maxhbsmBtdQ3CNrKvprUE6n9lYcregDMLYNeTAWcLj8NnPU9XIYegTHVHQjxKDSHP2l-F5jS7sppG1wgdAqZyhnWvXhYNvcM7RfgKxqNx_xAHx6f3yy7s-M9PSNCwPC2lh6UAkR4I00EhV9lrypM9Pi4lBUop9t5fS9W5UNwaAllhrd-osQGPjIeI1deHTwx-ZTHu3C60Pu_LJIl6hKn9wbwaUmA4cR5Bd2pgbaY7ASgsjCUbtYJaNIHSoHXprUdJZKUMAzV0WOKPfA6OPI4oypBadjvMZ4ZAj3BnXaSYsEZhaueTXvZB4eZOAjIyh2e_VOIKVMsnDrJYAVotGlvMQ',
|
||||
'e' => 'AQAB',
|
||||
'd' => 'Kn9tgoHfiTVi8uPu5b9TnwyHwG5dK6RE0uFdlpCGnJN7ZEi963R7wybQ1PLAHmpIbNTztfrheoAniRV1NCIqXaW_qS461xiDTp4ntEPnqcKsyO5jMAji7-CL8vhpYYowNFvIesgMoVaPRYMYT9TW63hNM0aWs7USZ_hLg6Oe1mY0vHTI3FucjSM86Nff4oIENt43r2fspgEPGRrdE6fpLc9Oaq-qeP1GFULimrRdndm-P8q8kvN3KHlNAtEgrQAgTTgz80S-3VD0FgWfgnb1PNmiuPUxO8OpI9KDIfu_acc6fg14nsNaJqXe6RESvhGPH2afjHqSy_Fd2vpzj85bQQ',
|
||||
'p' => '2DwQmZ43FoTnQ8IkUj3BmKRf5Eh2mizZA5xEJ2MinUE3sdTYKSLtaEoekX9vbBZuWxHdVhM6UnKCJ_2iNk8Z0ayLYHL0_G21aXf9-unynEpUsH7HHTklLpYAzOOx1ZgVljoxAdWNn3hiEFrjZLZGS7lOH-a3QQlDDQoJOJ2VFmU',
|
||||
'q' => 'te8LY4-W7IyaqH1ExujjMqkTAlTeRbv0VLQnfLY2xINnrWdwiQ93_VF099aP1ESeLja2nw-6iKIe-qT7mtCPozKfVtUYfz5HrJ_XY2kfexJINb9lhZHMv5p1skZpeIS-GPHCC6gRlKo1q-idn_qxyusfWv7WAxlSVfQfk8d6Et0',
|
||||
'dp' => 'UfYKcL_or492vVc0PzwLSplbg4L3-Z5wL48mwiswbpzOyIgd2xHTHQmjJpFAIZ8q-zf9RmgJXkDrFs9rkdxPtAsL1WYdeCT5c125Fkdg317JVRDo1inX7x2Kdh8ERCreW8_4zXItuTl_KiXZNU5lvMQjWbIw2eTx1lpsflo0rYU',
|
||||
'dq' => 'iEgcO-QfpepdH8FWd7mUFyrXdnOkXJBCogChY6YKuIHGc_p8Le9MbpFKESzEaLlN1Ehf3B6oGBl5Iz_ayUlZj2IoQZ82znoUrpa9fVYNot87ACfzIG7q9Mv7RiPAderZi03tkVXAdaBau_9vs5rS-7HMtxkVrxSUvJY14TkXlHE',
|
||||
'qi' => 'kC-lzZOqoFaZCr5l0tOVtREKoVqaAYhQiqIRGL-MzS4sCmRkxm5vZlXYx6RtE1n_AagjqajlkjieGlxTTThHD8Iga6foGBMaAr5uR1hGQpSc7Gl7CF1DZkBJMTQN6EshYzZfxW08mIO8M6Rzuh0beL6fG9mkDcIyPrBXx2bQ_mM',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'RSA1_5',
|
||||
'kid' => 'frodo.baggins@hobbiton.example',
|
||||
'enc' => 'A128CBC-HS256',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['RSA1_5'], ['A128CBC-HS256'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['RSA1_5'], ['A128CBC-HS256'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_compact', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
161
vendor/web-token/jwt-encryption/Tests/RFC7520/RSA_OAEPAndA256GCMEncryptionTest.php
vendored
Normal file
161
vendor/web-token/jwt-encryption/Tests/RFC7520/RSA_OAEPAndA256GCMEncryptionTest.php
vendored
Normal file
@@ -0,0 +1,161 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/*
|
||||
* The MIT License (MIT)
|
||||
*
|
||||
* Copyright (c) 2014-2020 Spomky-Labs
|
||||
*
|
||||
* This software may be modified and distributed under the terms
|
||||
* of the MIT license. See the LICENSE file for details.
|
||||
*/
|
||||
|
||||
namespace Jose\Component\Encryption\Tests\RFC7520;
|
||||
|
||||
use Base64Url\Base64Url;
|
||||
use Jose\Component\Core\JWK;
|
||||
use Jose\Component\Encryption\Tests\EncryptionTest;
|
||||
|
||||
/**
|
||||
* @see https://tools.ietf.org/html/rfc7520#section-5.2
|
||||
*
|
||||
* @group RFC7520
|
||||
*
|
||||
* @internal
|
||||
*/
|
||||
class RSA_OAEPAndA256GCMEncryptionTest extends EncryptionTest
|
||||
{
|
||||
/**
|
||||
* Please note that we cannot the encryption and get the same result as the example (IV, TAG and other data are always different).
|
||||
* The output given in the RFC is used and only decrypted.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function rSAOAEPAndA256GCMEncryption(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'RSA',
|
||||
'kid' => 'samwise.gamgee@hobbiton.example',
|
||||
'use' => 'enc',
|
||||
'n' => 'wbdxI55VaanZXPY29Lg5hdmv2XhvqAhoxUkanfzf2-5zVUxa6prHRrI4pP1AhoqJRlZfYtWWd5mmHRG2pAHIlh0ySJ9wi0BioZBl1XP2e-C-FyXJGcTy0HdKQWlrfhTm42EW7Vv04r4gfao6uxjLGwfpGrZLarohiWCPnkNrg71S2CuNZSQBIPGjXfkmIy2tl_VWgGnL22GplyXj5YlBLdxXp3XeStsqo571utNfoUTU8E4qdzJ3U1DItoVkPGsMwlmmnJiwA7sXRItBCivR4M5qnZtdw-7v4WuR4779ubDuJ5nalMv2S66-RPcnFAzWSKxtBDnFJJDGIUe7Tzizjg1nms0Xq_yPub_UOlWn0ec85FCft1hACpWG8schrOBeNqHBODFskYpUc2LC5JA2TaPF2dA67dg1TTsC_FupfQ2kNGcE1LgprxKHcVWYQb86B-HozjHZcqtauBzFNV5tbTuB-TpkcvJfNcFLlH3b8mb-H_ox35FjqBSAjLKyoeqfKTpVjvXhd09knwgJf6VKq6UC418_TOljMVfFTWXUxlnfhOOnzW6HSSzD1c9WrCuVzsUMv54szidQ9wf1cYWf3g5qFDxDQKis99gcDaiCAwM3yEBIzuNeeCa5dartHDb1xEB_HcHSeYbghbMjGfasvKn0aZRsnTyC0xhWBlsolZE',
|
||||
'e' => 'AQAB',
|
||||
'alg' => 'RSA-OAEP',
|
||||
'd' => 'n7fzJc3_WG59VEOBTkayzuSMM780OJQuZjN_KbH8lOZG25ZoA7T4Bxcc0xQn5oZE5uSCIwg91oCt0JvxPcpmqzaJZg1nirjcWZ-oBtVk7gCAWq-B3qhfF3izlbkosrzjHajIcY33HBhsy4_WerrXg4MDNE4HYojy68TcxT2LYQRxUOCf5TtJXvM8olexlSGtVnQnDRutxEUCwiewfmmrfveEogLx9EA-KMgAjTiISXxqIXQhWUQX1G7v_mV_Hr2YuImYcNcHkRvp9E7ook0876DhkO8v4UOZLwA1OlUX98mkoqwc58A_Y2lBYbVx1_s5lpPsEqbbH-nqIjh1fL0gdNfihLxnclWtW7pCztLnImZAyeCWAG7ZIfv-Rn9fLIv9jZ6r7r-MSH9sqbuziHN2grGjD_jfRluMHa0l84fFKl6bcqN1JWxPVhzNZo01yDF-1LiQnqUYSepPf6X3a2SOdkqBRiquE6EvLuSYIDpJq3jDIsgoL8Mo1LoomgiJxUwL_GWEOGu28gplyzm-9Q0U0nyhEf1uhSR8aJAQWAiFImWH5W_IQT9I7-yrindr_2fWQ_i1UgMsGzA7aOGzZfPljRy6z-tY_KuBG00-28S_aWvjyUc-Alp8AUyKjBZ-7CWH32fGWK48j1t-zomrwjL_mnhsPbGs0c9WsWgRzI-K8gE',
|
||||
'p' => '7_2v3OQZzlPFcHyYfLABQ3XP85Es4hCdwCkbDeltaUXgVy9l9etKghvM4hRkOvbb01kYVuLFmxIkCDtpi-zLCYAdXKrAK3PtSbtzld_XZ9nlsYa_QZWpXB_IrtFjVfdKUdMz94pHUhFGFj7nr6NNxfpiHSHWFE1zD_AC3mY46J961Y2LRnreVwAGNw53p07Db8yD_92pDa97vqcZOdgtybH9q6uma-RFNhO1AoiJhYZj69hjmMRXx-x56HO9cnXNbmzNSCFCKnQmn4GQLmRj9sfbZRqL94bbtE4_e0Zrpo8RNo8vxRLqQNwIy85fc6BRgBJomt8QdQvIgPgWCv5HoQ',
|
||||
'q' => 'zqOHk1P6WN_rHuM7ZF1cXH0x6RuOHq67WuHiSknqQeefGBA9PWs6ZyKQCO-O6mKXtcgE8_Q_hA2kMRcKOcvHil1hqMCNSXlflM7WPRPZu2qCDcqssd_uMbP-DqYthH_EzwL9KnYoH7JQFxxmcv5An8oXUtTwk4knKjkIYGRuUwfQTus0w1NfjFAyxOOiAQ37ussIcE6C6ZSsM3n41UlbJ7TCqewzVJaPJN5cxjySPZPD3Vp01a9YgAD6a3IIaKJdIxJS1ImnfPevSJQBE79-EXe2kSwVgOzvt-gsmM29QQ8veHy4uAqca5dZzMs7hkkHtw1z0jHV90epQJJlXXnH8Q',
|
||||
'dp' => '19oDkBh1AXelMIxQFm2zZTqUhAzCIr4xNIGEPNoDt1jK83_FJA-xnx5kA7-1erdHdms_Ef67HsONNv5A60JaR7w8LHnDiBGnjdaUmmuO8XAxQJ_ia5mxjxNjS6E2yD44USo2JmHvzeeNczq25elqbTPLhUpGo1IZuG72FZQ5gTjXoTXC2-xtCDEUZfaUNh4IeAipfLugbpe0JAFlFfrTDAMUFpC3iXjxqzbEanflwPvj6V9iDSgjj8SozSM0dLtxvu0LIeIQAeEgT_yXcrKGmpKdSO08kLBx8VUjkbv_3Pn20Gyu2YEuwpFlM_H1NikuxJNKFGmnAq9LcnwwT0jvoQ',
|
||||
'dq' => 'S6p59KrlmzGzaQYQM3o0XfHCGvfqHLYjCO557HYQf72O9kLMCfd_1VBEqeD-1jjwELKDjck8kOBl5UvohK1oDfSP1DleAy-cnmL29DqWmhgwM1ip0CCNmkmsmDSlqkUXDi6sAaZuntyukyflI-qSQ3C_BafPyFaKrt1fgdyEwYa08pESKwwWisy7KnmoUvaJ3SaHmohFS78TJ25cfc10wZ9hQNOrIChZlkiOdFCtxDqdmCqNacnhgE3bZQjGp3n83ODSz9zwJcSUvODlXBPc2AycH6Ci5yjbxt4Ppox_5pjm6xnQkiPgj01GpsUssMmBN7iHVsrE7N2iznBNCeOUIQ',
|
||||
'qi' => 'FZhClBMywVVjnuUud-05qd5CYU0dK79akAgy9oX6RX6I3IIIPckCciRrokxglZn-omAY5CnCe4KdrnjFOT5YUZE7G_Pg44XgCXaarLQf4hl80oPEf6-jJ5Iy6wPRx7G2e8qLxnh9cOdf-kRqgOS3F48Ucvw3ma5V6KGMwQqWFeV31XtZ8l5cVI-I3NzBS7qltpUVgz2Ju021eyc7IlqgzR98qKONl27DuEES0aK0WE97jnsyO27Yp88Wa2RiBrEocM89QZI1seJiGDizHRUP4UZxw9zsXww46wy0P6f9grnYp7t8LkyDDk8eoI4KX6SNMNVcyVS9IWjlq8EzqZEKIA',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'RSA-OAEP',
|
||||
'kid' => 'samwise.gamgee@hobbiton.example',
|
||||
'enc' => 'A256GCM',
|
||||
];
|
||||
|
||||
$expected_compact_json = 'eyJhbGciOiJSU0EtT0FFUCIsImtpZCI6InNhbXdpc2UuZ2FtZ2VlQGhvYmJpdG9uLmV4YW1wbGUiLCJlbmMiOiJBMjU2R0NNIn0.rT99rwrBTbTI7IJM8fU3Eli7226HEB7IchCxNuh7lCiud48LxeolRdtFF4nzQibeYOl5S_PJsAXZwSXtDePz9hk-BbtsTBqC2UsPOdwjC9NhNupNNu9uHIVftDyucvI6hvALeZ6OGnhNV4v1zx2k7O1D89mAzfw-_kT3tkuorpDU-CpBENfIHX1Q58-Aad3FzMuo3Fn9buEP2yXakLXYa15BUXQsupM4A1GD4_H4Bd7V3u9h8Gkg8BpxKdUV9ScfJQTcYm6eJEBz3aSwIaK4T3-dwWpuBOhROQXBosJzS1asnuHtVMt2pKIIfux5BC6huIvmY7kzV7W7aIUrpYm_3H4zYvyMeq5pGqFmW2k8zpO878TRlZx7pZfPYDSXZyS0CfKKkMozT_qiCwZTSz4duYnt8hS4Z9sGthXn9uDqd6wycMagnQfOTs_lycTWmY-aqWVDKhjYNRf03NiwRtb5BE-tOdFwCASQj3uuAgPGrO2AWBe38UjQb0lvXn1SpyvYZ3WFc7WOJYaTa7A8DRn6MC6T-xDmMuxC0G7S2rscw5lQQU06MvZTlFOt0UvfuKBa03cxA_nIBIhLMjY2kOTxQMmpDPTr6Cbo8aKaOnx6ASE5Jx9paBpnNmOOKH35j_QlrQhDWUN6A2Gg8iFayJ69xDEdHAVCGRzN3woEI2ozDRs.-nBoKLH0YkLZPSI9.o4k2cnGN8rSSw3IDo1YuySkqeS_t2m1GXklSgqBdpACm6UJuJowOHC5ytjqYgRL-I-soPlwqMUf4UgRWWeaOGNw6vGW-xyM01lTYxrXfVzIIaRdhYtEMRBvBWbEwP7ua1DRfvaOjgZv6Ifa3brcAM64d8p5lhhNcizPersuhw5f-pGYzseva-TUaL8iWnctc-sSwy7SQmRkfhDjwbz0fz6kFovEgj64X1I5s7E6GLp5fnbYGLa1QUiML7Cc2GxgvI7zqWo0YIEc7aCflLG1-8BboVWFdZKLK9vNoycrYHumwzKluLWEbSVmaPpOslY2n525DxDfWaVFUfKQxMF56vn4B9QMpWAbnypNimbM8zVOw.UCGiqJxhBI3IFVdPalHHvA';
|
||||
$expected_flattened_json = '{"protected":"eyJhbGciOiJSU0EtT0FFUCIsImtpZCI6InNhbXdpc2UuZ2FtZ2VlQGhvYmJpdG9uLmV4YW1wbGUiLCJlbmMiOiJBMjU2R0NNIn0","encrypted_key":"rT99rwrBTbTI7IJM8fU3Eli7226HEB7IchCxNuh7lCiud48LxeolRdtFF4nzQibeYOl5S_PJsAXZwSXtDePz9hk-BbtsTBqC2UsPOdwjC9NhNupNNu9uHIVftDyucvI6hvALeZ6OGnhNV4v1zx2k7O1D89mAzfw-_kT3tkuorpDU-CpBENfIHX1Q58-Aad3FzMuo3Fn9buEP2yXakLXYa15BUXQsupM4A1GD4_H4Bd7V3u9h8Gkg8BpxKdUV9ScfJQTcYm6eJEBz3aSwIaK4T3-dwWpuBOhROQXBosJzS1asnuHtVMt2pKIIfux5BC6huIvmY7kzV7W7aIUrpYm_3H4zYvyMeq5pGqFmW2k8zpO878TRlZx7pZfPYDSXZyS0CfKKkMozT_qiCwZTSz4duYnt8hS4Z9sGthXn9uDqd6wycMagnQfOTs_lycTWmY-aqWVDKhjYNRf03NiwRtb5BE-tOdFwCASQj3uuAgPGrO2AWBe38UjQb0lvXn1SpyvYZ3WFc7WOJYaTa7A8DRn6MC6T-xDmMuxC0G7S2rscw5lQQU06MvZTlFOt0UvfuKBa03cxA_nIBIhLMjY2kOTxQMmpDPTr6Cbo8aKaOnx6ASE5Jx9paBpnNmOOKH35j_QlrQhDWUN6A2Gg8iFayJ69xDEdHAVCGRzN3woEI2ozDRs","iv":"-nBoKLH0YkLZPSI9","ciphertext":"o4k2cnGN8rSSw3IDo1YuySkqeS_t2m1GXklSgqBdpACm6UJuJowOHC5ytjqYgRL-I-soPlwqMUf4UgRWWeaOGNw6vGW-xyM01lTYxrXfVzIIaRdhYtEMRBvBWbEwP7ua1DRfvaOjgZv6Ifa3brcAM64d8p5lhhNcizPersuhw5f-pGYzseva-TUaL8iWnctc-sSwy7SQmRkfhDjwbz0fz6kFovEgj64X1I5s7E6GLp5fnbYGLa1QUiML7Cc2GxgvI7zqWo0YIEc7aCflLG1-8BboVWFdZKLK9vNoycrYHumwzKluLWEbSVmaPpOslY2n525DxDfWaVFUfKQxMF56vn4B9QMpWAbnypNimbM8zVOw","tag":"UCGiqJxhBI3IFVdPalHHvA"}';
|
||||
$expected_json = '{"recipients": [{"encrypted_key":"rT99rwrBTbTI7IJM8fU3Eli7226HEB7IchCxNuh7lCiud48LxeolRdtFF4nzQibeYOl5S_PJsAXZwSXtDePz9hk-BbtsTBqC2UsPOdwjC9NhNupNNu9uHIVftDyucvI6hvALeZ6OGnhNV4v1zx2k7O1D89mAzfw-_kT3tkuorpDU-CpBENfIHX1Q58-Aad3FzMuo3Fn9buEP2yXakLXYa15BUXQsupM4A1GD4_H4Bd7V3u9h8Gkg8BpxKdUV9ScfJQTcYm6eJEBz3aSwIaK4T3-dwWpuBOhROQXBosJzS1asnuHtVMt2pKIIfux5BC6huIvmY7kzV7W7aIUrpYm_3H4zYvyMeq5pGqFmW2k8zpO878TRlZx7pZfPYDSXZyS0CfKKkMozT_qiCwZTSz4duYnt8hS4Z9sGthXn9uDqd6wycMagnQfOTs_lycTWmY-aqWVDKhjYNRf03NiwRtb5BE-tOdFwCASQj3uuAgPGrO2AWBe38UjQb0lvXn1SpyvYZ3WFc7WOJYaTa7A8DRn6MC6T-xDmMuxC0G7S2rscw5lQQU06MvZTlFOt0UvfuKBa03cxA_nIBIhLMjY2kOTxQMmpDPTr6Cbo8aKaOnx6ASE5Jx9paBpnNmOOKH35j_QlrQhDWUN6A2Gg8iFayJ69xDEdHAVCGRzN3woEI2ozDRs"}],"protected":"eyJhbGciOiJSU0EtT0FFUCIsImtpZCI6InNhbXdpc2UuZ2FtZ2VlQGhvYmJpdG9uLmV4YW1wbGUiLCJlbmMiOiJBMjU2R0NNIn0","iv":"-nBoKLH0YkLZPSI9","ciphertext":"o4k2cnGN8rSSw3IDo1YuySkqeS_t2m1GXklSgqBdpACm6UJuJowOHC5ytjqYgRL-I-soPlwqMUf4UgRWWeaOGNw6vGW-xyM01lTYxrXfVzIIaRdhYtEMRBvBWbEwP7ua1DRfvaOjgZv6Ifa3brcAM64d8p5lhhNcizPersuhw5f-pGYzseva-TUaL8iWnctc-sSwy7SQmRkfhDjwbz0fz6kFovEgj64X1I5s7E6GLp5fnbYGLa1QUiML7Cc2GxgvI7zqWo0YIEc7aCflLG1-8BboVWFdZKLK9vNoycrYHumwzKluLWEbSVmaPpOslY2n525DxDfWaVFUfKQxMF56vn4B9QMpWAbnypNimbM8zVOw","tag":"UCGiqJxhBI3IFVdPalHHvA"}';
|
||||
$expected_iv = '-nBoKLH0YkLZPSI9';
|
||||
$expected_encrypted_key = 'rT99rwrBTbTI7IJM8fU3Eli7226HEB7IchCxNuh7lCiud48LxeolRdtFF4nzQibeYOl5S_PJsAXZwSXtDePz9hk-BbtsTBqC2UsPOdwjC9NhNupNNu9uHIVftDyucvI6hvALeZ6OGnhNV4v1zx2k7O1D89mAzfw-_kT3tkuorpDU-CpBENfIHX1Q58-Aad3FzMuo3Fn9buEP2yXakLXYa15BUXQsupM4A1GD4_H4Bd7V3u9h8Gkg8BpxKdUV9ScfJQTcYm6eJEBz3aSwIaK4T3-dwWpuBOhROQXBosJzS1asnuHtVMt2pKIIfux5BC6huIvmY7kzV7W7aIUrpYm_3H4zYvyMeq5pGqFmW2k8zpO878TRlZx7pZfPYDSXZyS0CfKKkMozT_qiCwZTSz4duYnt8hS4Z9sGthXn9uDqd6wycMagnQfOTs_lycTWmY-aqWVDKhjYNRf03NiwRtb5BE-tOdFwCASQj3uuAgPGrO2AWBe38UjQb0lvXn1SpyvYZ3WFc7WOJYaTa7A8DRn6MC6T-xDmMuxC0G7S2rscw5lQQU06MvZTlFOt0UvfuKBa03cxA_nIBIhLMjY2kOTxQMmpDPTr6Cbo8aKaOnx6ASE5Jx9paBpnNmOOKH35j_QlrQhDWUN6A2Gg8iFayJ69xDEdHAVCGRzN3woEI2ozDRs';
|
||||
$expected_ciphertext = 'o4k2cnGN8rSSw3IDo1YuySkqeS_t2m1GXklSgqBdpACm6UJuJowOHC5ytjqYgRL-I-soPlwqMUf4UgRWWeaOGNw6vGW-xyM01lTYxrXfVzIIaRdhYtEMRBvBWbEwP7ua1DRfvaOjgZv6Ifa3brcAM64d8p5lhhNcizPersuhw5f-pGYzseva-TUaL8iWnctc-sSwy7SQmRkfhDjwbz0fz6kFovEgj64X1I5s7E6GLp5fnbYGLa1QUiML7Cc2GxgvI7zqWo0YIEc7aCflLG1-8BboVWFdZKLK9vNoycrYHumwzKluLWEbSVmaPpOslY2n525DxDfWaVFUfKQxMF56vn4B9QMpWAbnypNimbM8zVOw';
|
||||
$expected_tag = 'UCGiqJxhBI3IFVdPalHHvA';
|
||||
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['RSA-OAEP'], ['A256GCM'], ['DEF']);
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($expected_compact_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($expected_flattened_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($expected_json);
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_compact_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_compact_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_compact_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_compact_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_flattened_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_flattened_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_flattened_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_flattened_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_ciphertext, Base64Url::encode($loaded_json->getCiphertext()));
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
static::assertEquals($expected_iv, Base64Url::encode($loaded_json->getIV()));
|
||||
static::assertEquals($expected_encrypted_key, Base64Url::encode($loaded_json->getRecipient(0)->getEncryptedKey()));
|
||||
static::assertEquals($expected_tag, Base64Url::encode($loaded_json->getTag()));
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
|
||||
/**
|
||||
* Same input as before, but we perform the encryption first.
|
||||
*
|
||||
* @test
|
||||
*/
|
||||
public function rSAOAEPAndA256GCMEncryptionBis(): void
|
||||
{
|
||||
$expected_payload = "You can trust us to stick with you through thick and thin\xe2\x80\x93to the bitter end. And you can trust us to keep any secret of yours\xe2\x80\x93closer than you keep it yourself. But you cannot trust us to let you face trouble alone, and go off without a word. We are your friends, Frodo.";
|
||||
|
||||
$private_key = new JWK([
|
||||
'kty' => 'RSA',
|
||||
'kid' => 'samwise.gamgee@hobbiton.example',
|
||||
'use' => 'enc',
|
||||
'n' => 'wbdxI55VaanZXPY29Lg5hdmv2XhvqAhoxUkanfzf2-5zVUxa6prHRrI4pP1AhoqJRlZfYtWWd5mmHRG2pAHIlh0ySJ9wi0BioZBl1XP2e-C-FyXJGcTy0HdKQWlrfhTm42EW7Vv04r4gfao6uxjLGwfpGrZLarohiWCPnkNrg71S2CuNZSQBIPGjXfkmIy2tl_VWgGnL22GplyXj5YlBLdxXp3XeStsqo571utNfoUTU8E4qdzJ3U1DItoVkPGsMwlmmnJiwA7sXRItBCivR4M5qnZtdw-7v4WuR4779ubDuJ5nalMv2S66-RPcnFAzWSKxtBDnFJJDGIUe7Tzizjg1nms0Xq_yPub_UOlWn0ec85FCft1hACpWG8schrOBeNqHBODFskYpUc2LC5JA2TaPF2dA67dg1TTsC_FupfQ2kNGcE1LgprxKHcVWYQb86B-HozjHZcqtauBzFNV5tbTuB-TpkcvJfNcFLlH3b8mb-H_ox35FjqBSAjLKyoeqfKTpVjvXhd09knwgJf6VKq6UC418_TOljMVfFTWXUxlnfhOOnzW6HSSzD1c9WrCuVzsUMv54szidQ9wf1cYWf3g5qFDxDQKis99gcDaiCAwM3yEBIzuNeeCa5dartHDb1xEB_HcHSeYbghbMjGfasvKn0aZRsnTyC0xhWBlsolZE',
|
||||
'e' => 'AQAB',
|
||||
'alg' => 'RSA-OAEP',
|
||||
'd' => 'n7fzJc3_WG59VEOBTkayzuSMM780OJQuZjN_KbH8lOZG25ZoA7T4Bxcc0xQn5oZE5uSCIwg91oCt0JvxPcpmqzaJZg1nirjcWZ-oBtVk7gCAWq-B3qhfF3izlbkosrzjHajIcY33HBhsy4_WerrXg4MDNE4HYojy68TcxT2LYQRxUOCf5TtJXvM8olexlSGtVnQnDRutxEUCwiewfmmrfveEogLx9EA-KMgAjTiISXxqIXQhWUQX1G7v_mV_Hr2YuImYcNcHkRvp9E7ook0876DhkO8v4UOZLwA1OlUX98mkoqwc58A_Y2lBYbVx1_s5lpPsEqbbH-nqIjh1fL0gdNfihLxnclWtW7pCztLnImZAyeCWAG7ZIfv-Rn9fLIv9jZ6r7r-MSH9sqbuziHN2grGjD_jfRluMHa0l84fFKl6bcqN1JWxPVhzNZo01yDF-1LiQnqUYSepPf6X3a2SOdkqBRiquE6EvLuSYIDpJq3jDIsgoL8Mo1LoomgiJxUwL_GWEOGu28gplyzm-9Q0U0nyhEf1uhSR8aJAQWAiFImWH5W_IQT9I7-yrindr_2fWQ_i1UgMsGzA7aOGzZfPljRy6z-tY_KuBG00-28S_aWvjyUc-Alp8AUyKjBZ-7CWH32fGWK48j1t-zomrwjL_mnhsPbGs0c9WsWgRzI-K8gE',
|
||||
'p' => '7_2v3OQZzlPFcHyYfLABQ3XP85Es4hCdwCkbDeltaUXgVy9l9etKghvM4hRkOvbb01kYVuLFmxIkCDtpi-zLCYAdXKrAK3PtSbtzld_XZ9nlsYa_QZWpXB_IrtFjVfdKUdMz94pHUhFGFj7nr6NNxfpiHSHWFE1zD_AC3mY46J961Y2LRnreVwAGNw53p07Db8yD_92pDa97vqcZOdgtybH9q6uma-RFNhO1AoiJhYZj69hjmMRXx-x56HO9cnXNbmzNSCFCKnQmn4GQLmRj9sfbZRqL94bbtE4_e0Zrpo8RNo8vxRLqQNwIy85fc6BRgBJomt8QdQvIgPgWCv5HoQ',
|
||||
'q' => 'zqOHk1P6WN_rHuM7ZF1cXH0x6RuOHq67WuHiSknqQeefGBA9PWs6ZyKQCO-O6mKXtcgE8_Q_hA2kMRcKOcvHil1hqMCNSXlflM7WPRPZu2qCDcqssd_uMbP-DqYthH_EzwL9KnYoH7JQFxxmcv5An8oXUtTwk4knKjkIYGRuUwfQTus0w1NfjFAyxOOiAQ37ussIcE6C6ZSsM3n41UlbJ7TCqewzVJaPJN5cxjySPZPD3Vp01a9YgAD6a3IIaKJdIxJS1ImnfPevSJQBE79-EXe2kSwVgOzvt-gsmM29QQ8veHy4uAqca5dZzMs7hkkHtw1z0jHV90epQJJlXXnH8Q',
|
||||
'dp' => '19oDkBh1AXelMIxQFm2zZTqUhAzCIr4xNIGEPNoDt1jK83_FJA-xnx5kA7-1erdHdms_Ef67HsONNv5A60JaR7w8LHnDiBGnjdaUmmuO8XAxQJ_ia5mxjxNjS6E2yD44USo2JmHvzeeNczq25elqbTPLhUpGo1IZuG72FZQ5gTjXoTXC2-xtCDEUZfaUNh4IeAipfLugbpe0JAFlFfrTDAMUFpC3iXjxqzbEanflwPvj6V9iDSgjj8SozSM0dLtxvu0LIeIQAeEgT_yXcrKGmpKdSO08kLBx8VUjkbv_3Pn20Gyu2YEuwpFlM_H1NikuxJNKFGmnAq9LcnwwT0jvoQ',
|
||||
'dq' => 'S6p59KrlmzGzaQYQM3o0XfHCGvfqHLYjCO557HYQf72O9kLMCfd_1VBEqeD-1jjwELKDjck8kOBl5UvohK1oDfSP1DleAy-cnmL29DqWmhgwM1ip0CCNmkmsmDSlqkUXDi6sAaZuntyukyflI-qSQ3C_BafPyFaKrt1fgdyEwYa08pESKwwWisy7KnmoUvaJ3SaHmohFS78TJ25cfc10wZ9hQNOrIChZlkiOdFCtxDqdmCqNacnhgE3bZQjGp3n83ODSz9zwJcSUvODlXBPc2AycH6Ci5yjbxt4Ppox_5pjm6xnQkiPgj01GpsUssMmBN7iHVsrE7N2iznBNCeOUIQ',
|
||||
'qi' => 'FZhClBMywVVjnuUud-05qd5CYU0dK79akAgy9oX6RX6I3IIIPckCciRrokxglZn-omAY5CnCe4KdrnjFOT5YUZE7G_Pg44XgCXaarLQf4hl80oPEf6-jJ5Iy6wPRx7G2e8qLxnh9cOdf-kRqgOS3F48Ucvw3ma5V6KGMwQqWFeV31XtZ8l5cVI-I3NzBS7qltpUVgz2Ju021eyc7IlqgzR98qKONl27DuEES0aK0WE97jnsyO27Yp88Wa2RiBrEocM89QZI1seJiGDizHRUP4UZxw9zsXww46wy0P6f9grnYp7t8LkyDDk8eoI4KX6SNMNVcyVS9IWjlq8EzqZEKIA',
|
||||
]);
|
||||
|
||||
$protectedHeader = [
|
||||
'alg' => 'RSA-OAEP',
|
||||
'kid' => 'samwise.gamgee@hobbiton.example',
|
||||
'enc' => 'A256GCM',
|
||||
];
|
||||
|
||||
$jweBuilder = $this->getJWEBuilderFactory()->create(['RSA-OAEP'], ['A256GCM'], ['DEF']);
|
||||
$jweDecrypter = $this->getJWEDecrypterFactory()->create(['RSA-OAEP'], ['A256GCM'], ['DEF']);
|
||||
|
||||
$jwe = $jweBuilder
|
||||
->create()->withPayload($expected_payload)
|
||||
->withSharedProtectedHeader($protectedHeader)
|
||||
->addRecipient($private_key)
|
||||
->build()
|
||||
;
|
||||
|
||||
$loaded_compact_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_compact', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_compact_json, $private_key, 0));
|
||||
|
||||
$loaded_flattened_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_flattened', $jwe, 0));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_flattened_json, $private_key, 0));
|
||||
|
||||
$loaded_json = $this->getJWESerializerManager()->unserialize($this->getJWESerializerManager()->serialize('jwe_json_general', $jwe));
|
||||
static::assertTrue($jweDecrypter->decryptUsingKey($loaded_json, $private_key, 0));
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_compact_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_flattened_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($protectedHeader, $loaded_json->getSharedProtectedHeader());
|
||||
|
||||
static::assertEquals($expected_payload, $loaded_compact_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_flattened_json->getPayload());
|
||||
static::assertEquals($expected_payload, $loaded_json->getPayload());
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user