1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
| 'use strict';
|
| const assert = require('assert');
| const HmacDRBG = require('../');
| const hash = require('hash.js');
|
| describe('Hmac_DRBG', () => {
| it('should support hmac-drbg-sha256', () => {
| function doDrbg(opt) {
| const drbg = HmacDRBG({
| hash: hash.sha256,
| entropy: opt.entropy,
| entropyEnc: 'utf8',
| nonce: opt.nonce,
| nonceEnc: 'utf8',
| pers: opt.pers,
| persEnc: 'utf8'
| });
| return drbg.generate(opt.size, 'hex');
| }
|
| const test = [
| {
| entropy: 'totally random0123456789',
| nonce: 'secret nonce',
| pers: 'my drbg',
| size: 32,
| res: '018ec5f8e08c41e5ac974eb129ac297c5388ee1864324fa13d9b15cf98d9a157'
| },
| {
| entropy: 'totally random0123456789',
| nonce: 'secret nonce',
| pers: null,
| size: 32,
| res: 'ed5d61ecf0ef38258e62f03bbb49f19f2cd07ba5145a840d83b134d5963b3633'
| }
| ];
| for (let i = 0; i < test.length; i++)
| assert.equal(doDrbg(test[i]), test[i].res);
| });
|
| describe('NIST vector', function() {
| require('./fixtures/hmac-drbg-nist.json').forEach(function (opt) {
| it('should not fail at ' + opt.name, function() {
| const drbg = HmacDRBG({
| hash: hash.sha256,
| entropy: opt.entropy,
| nonce: opt.nonce,
| pers: opt.pers
| });
|
| let last;
| for (let i = 0; i < opt.add.length; i++) {
| let add = opt.add[i];
| last = drbg.generate(opt.expected.length / 2, 'hex', add);
| }
| assert.equal(last, opt.expected);
| });
| });
| });
|
| describe('reseeding', function() {
| it('should reseed', function() {
| const entropy = 'totally random string with many chars that I typed ' +
| 'in agony';
| const nonce = 'nonce';
| const pers = 'pers';
|
| const original = HmacDRBG({
| hash: hash.sha256,
| entropy,
| nonce,
| pers
| });
| const reseeded = HmacDRBG({
| hash: hash.sha256,
| entropy,
| nonce,
| pers
| });
|
| assert.strictEqual(original.generate(32, 'hex'),
| reseeded.generate(32, 'hex'));
|
| reseeded.reseed('another absolutely random string');
|
| assert.notEqual(original.generate(32, 'hex'),
| reseeded.generate(32, 'hex'));
| });
| });
| });
|
|
