Function TEST_F

be/src/util/openssl-util-test.cc:137–174

Test basic encryption functionality.

/// Test basic encryption functionality.
TEST_F(OpenSSLUtilTest, Encryption) {
  const int buffer_size = 1024 * 1024;
  vector<uint8_t> original(buffer_size);
  vector<uint8_t> prev_encrypted(buffer_size);
  vector<uint8_t> encrypted(buffer_size);
  vector<uint8_t> decrypted(buffer_size);
  GenerateRandomData(original.data(), buffer_size);

  // Check GCM, CTR and CFB
  AES_CIPHER_MODE modes[] = {
      AES_CIPHER_MODE::AES_256_GCM,
      AES_CIPHER_MODE::AES_256_CTR,
      AES_CIPHER_MODE::AES_256_CFB,
      AES_CIPHER_MODE::AES_128_GCM
  };
  for (auto m : modes) {
    // Iterate multiple times to ensure that key regeneration works correctly.
    EncryptionKey key;
    for (int i = 0; i < 2; ++i) {
      // Generate a new key for each iteration.
      ASSERT_OK(key.InitializeRandom(AES_BLOCK_SIZE, m));

      // Check that OpenSSL is happy with the amount of entropy we're feeding it.
      DCHECK_EQ(1, RAND_status());

      ASSERT_OK(key.Encrypt(original.data(), buffer_size, encrypted.data()));
      if (i > 0) {
        // Check that we're not somehow reusing the same key.
        ASSERT_NE(0, memcmp(encrypted.data(), prev_encrypted.data(), buffer_size));
      }
      memcpy(prev_encrypted.data(), encrypted.data(), buffer_size);

      // We should get the original data by decrypting it.
      ASSERT_OK(key.Decrypt(encrypted.data(), buffer_size, decrypted.data()));
      ASSERT_EQ(0, memcmp(original.data(), decrypted.data(), buffer_size));
    }
  }
}

/// Test to check whether key and mode are validated in InitializeFields().
TEST_F(OpenSSLUtilTest, ValidateInitialize) {