Inheritance diagram for HcuCuTrustedParmEncryptionTest:

Public Member Functions
	setUp ()

	test_parmecrypt_mcrypt_to_openssl_transition_with_ecb ()

	test_current_standard_openssl_encryption_mode ()

	test_parm_with_current_default_encryption_mode ()

	test_current_openssl_encryption_mode_agnostic_nature_parm ()

	tearDown ()

Detailed Description

Test parmencrypt and parmdecrypt encryption functionalities and their migration from MCRYPT to OPENSSL.

Definition at line 113 of file sharedHcuCuTrustedDetailTest.php.

Member Function Documentation

◆ test_current_openssl_encryption_mode_agnostic_nature_parm()

HcuCuTrustedParmEncryptionTest::test_current_openssl_encryption_mode_agnostic_nature_parm ( )

Test parm encryption with several popular aes 256bits key size based aes encryption modes with openssl. Our openssl encryption implementation is expected to work properly for the listed encryption modes at the least.

Definition at line 226 of file sharedHcuCuTrustedDetailTest.php.

                                                                          {
         // supported encryption modes
         $openssl_aes_256_modes = array("aes-256-ctr",
                                        "aes-256-ofb",
                                        "aes-256-cfb",
                                        "aes-256-cfb1",
                                        "aes-256-cfb8",
                                        "aes-256-ofb",
                                        "aes-256-xts",
                                        "aes-256-ecb");
         $previous_decrypted_data = "";
         foreach($openssl_aes_256_modes as $aes_cipher_mode) {
             $openssl_ciphertext = "";
             $obtained_decrypted_text = "";
 
             // encrypt with openssl with $aes_cipher_mode mode
             $openssl_ciphertext = parmencrypt($this->trusted_data,
                                                $this->key_suffix,
                                                $cipher_method=$aes_cipher_mode);
 
             // creates different ciphertext and different base64_encoded output
             // for each of the mode of operation, but they should decrypt the original
             // text just fine.
             $obtained_decrypted_text = parmdecrypt($openssl_ciphertext,
                                                     $this->key_suffix,
                                                     $cipher_method=$aes_cipher_mode);
 
             $this->assertEquals($obtained_decrypted_text, $this->trusted_data);
             // also assert the decrypted value from the previous mode
             if ($previous_decrypted_data != "") {
                 $this->assertEquals($previous_decrypted_data, $obtained_decrypted_text);
             }
             // update previous with the current decrypt
             $previous_decrypted_dat = $obtained_decrypted_text;
 
         }
 
     }

◆ test_current_standard_openssl_encryption_mode()

HcuCuTrustedParmEncryptionTest::test_current_standard_openssl_encryption_mode ( )

Verify that the current standard is maintained eg. we are upgrading from mcrypt ecb to aes-256-cbc on March, 2019. Current standard for parm encryption is therefore aes-256-cbc.

Definition at line 199 of file sharedHcuCuTrustedDetailTest.php.

                                                              {
         $this->assertEquals($this->hcu_standard_encryption_mode_for_parm, PARMENCDEC_CIPHER_MODE);
         $this->assertEquals($this->hcu_standard_auth_hash_algo, PARMENCDEC_AUTH_HASH_ALGO);
     }

◆ test_parm_with_current_default_encryption_mode()

HcuCuTrustedParmEncryptionTest::test_parm_with_current_default_encryption_mode ( )

Test parmencrypt and parmdecrypt with default arguments

Definition at line 207 of file sharedHcuCuTrustedDetailTest.php.

                                                               {
         // Note that the default encryption mode being used by the following functions
         // is determined by PARMENCDEC_CIPHER_MODE constant in cutrusted.i script.
         $openssl_ciphertext = parmencrypt($this->trusted_data,
                                           $this->key_suffix);
 
         $obtained_decrypted_text = parmdecrypt($openssl_ciphertext,
                                                $this->key_suffix);
 
         $this->assertEquals($obtained_decrypted_text, $this->trusted_data);
     }

◆ test_parmecrypt_mcrypt_to_openssl_transition_with_ecb()

HcuCuTrustedParmEncryptionTest::test_parmecrypt_mcrypt_to_openssl_transition_with_ecb ( )

We still use ECB mode of operations mainly due to vendor/interfaces requirements and specifications. Wherever possible, these must be upgraded based on the latest crypto standards and guidelines.

Definition at line 150 of file sharedHcuCuTrustedDetailTest.php.

                                                                      {
         // if the previous mcrypt based function also exists, test it
         if(function_exists("parmencrypt_mcrypt")) {
             // With [mcrypt-MCRYPT_RIJNDAEL_128 + MCRYPT_MODE_ECB] ECB mode,
             // output ciphertext is always the same for a given data when run
             // with the same secret key
             // ENCRYPTION
             $obtained_ciphertext_mcrypt = parmencrypt_mcrypt($this->trusted_data,
                                                     $this->key_suffix);
 
             $this->assertEquals($obtained_ciphertext_mcrypt,
                                 $this->expected_trusted_data_mcrypt_ecb_cipher_base64);
 
             //DECRYPTION
             $obtained_decrypted_data_mcrypt = parmdecrypt($obtained_ciphertext_mcrypt,
                                                           $this->key_suffix,
                                                           $cipher_method="aes-256-ecb");
 
             $this->assertEquals($obtained_decrypted_data_mcrypt,
                                 $this->trusted_data);
         }
 
         // test  openssl aes-256-ecb based encrypted base64 output
         // [openssl] with ECB mode, output ciphertext is always the same for a given
         // data when run with the same secret key
         // ENCRYPTION
         $obtained_ciphertext_openssl = parmencrypt($this->trusted_data,
                                           $this->key_suffix,
                                           $cipher_method="aes-256-ecb");
         $this->assertEquals($obtained_ciphertext_openssl,
                             $this->expected_trusted_data_openssl_ecb_cipher_base64);
 
         // DECRYPTION
         $obtained_decrypted_data_openssl = parmdecrypt($obtained_ciphertext_openssl,
                                                        $this->key_suffix,
                                                        $cipher_method="aes-256-ecb");
         $this->assertEquals($obtained_decrypted_data_openssl, $this->trusted_data);
 
         // also verify that the decrypted data using the both methods were same
         if(function_exists("paramencrypt_mcrypt")) {
             $this->assertEquals($obtained_decrypted_data_openssl, $obtained_decrypted_data_mcrypt);
         }
     }

The documentation for this class was generated from the following file:

app/test/unit/lib/sharedHcuCuTrustedDetailTest.php