quic_test.go

package main

import (
	"encoding/hex"
	"hash/crc64"
	"math/rand"
	"net"
	"testing"
	"unsafe"

	"github.com/stretchr/testify/require"
)

func TestEncryptInitial(t *testing.T) {
	clientID, _ := hex.DecodeString("0001020304050607")
	input, _ := hex.DecodeString("060040ee010000ea0303000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000006130113021303010000bb0000001800160000136578616d706c652e756c666865696d2e6e6574000a00080006001d001700180010000b00090870696e672f312e30000d00140012040308040401050308050501080606010201003300260024001d0020358072d6365880d1aeea329adf9121383851ed21a28e3b75e965d0d2cd166254002d00020101002b00030203040039003103048000fff7040480a0000005048010000006048010000007048010000008010a09010a0a01030b01190f05635f636964")
	header, _ := hex.DecodeString("c00000000108000102030405060705635f63696400410300")

	expectedCT := "1c36a7ed78716be9711ba498b7ed868443bb2e0c514d4d848eadcc7a00d25ce9f9afa483978088de836be68c0b32a24595d7813ea5414a9199329a6d9f7f760dd8bb249bf3f53d9a77fbb7b395b8d66d7879a51fe59ef9601f79998eb3568e1fdc789f640acab3858a82ef2930fa5ce14b5b9ea0bdb29f4572da85aa3def39b7efafffa074b9267070d50b5d07842e49bba3bc787ff295d6ae3b514305f102afe5a047b3fb4c99eb92a274d244d60492c0e2e6e212cef0f9e3f62efd0955e71c768aa6bb3cd80bbb3755c8b7ebee32712f40f2245119487021b4b84e1565e3ca31967ac8604d4032170dec280aeefa095d08"
	expectedTag := "b3b7241ef6646a6c86e5c62ce08be099"

	km, _ := generateKeyMaterial(clientID)
	result, err := quicEncryptInitial(km, input, header, 0)
	require.Nil(t, err)
	require.Equal(t, expectedCT+expectedTag, hex.EncodeToString(result))
}

func TestGenerateKeyMaterial(t *testing.T) {

	input, _ := hex.DecodeString("0001020304050607")
	expectedKey := "b14b918124fda5c8d79847602fa3520b"
	expectedIV := "ddbc15dea80925a55686a7df"

	km, err := generateKeyMaterial(input)

	// t.Logf("key: %s", hex.EncodeToString(km.key))
	// t.Logf("iv: %s", hex.EncodeToString(km.iv))
	// t.Logf("hpk: %s", hex.EncodeToString(km.hpk))

	require.Nil(t, err)
	require.Equal(t, expectedKey, hex.EncodeToString(km.key))
	require.Equal(t, expectedIV, hex.EncodeToString(km.iv))
}

func DisableTestQuicTLSPayload(t *testing.T) {
	rand.Seed(1234)
	p := &quicProber{}

	expected := "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"

	hostname := "example.ulfheim.net"
	payload, err := p.buildCryptoFramePaylaod(hostname)
	require.Nil(t, err)
	require.Equal(t, expected, hex.EncodeToString(payload))
}

// func TestQuicPayload(t *testing.T) {
// 	p := &quicProber{
// 		seed: 01234,
// 	}

// 	r := rand.New(rand.NewSource(1234))
// 	expected := "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"

// 	hostname := "example.ulfheim.net"
// 	payload, err := p.buildPaylaod(hostname, r)
// 	require.Nil(t, err)
// 	require.Equal(t, 1200, len(payload))
// 	require.Equal(t, expected, hex.EncodeToString(payload))
// }

// func TestPadding(t *testing.T) {
// 	l := 10
// 	p := hex.EncodeToString(make([]byte, l))
// 	t.Logf("%s, %d", p, len(p))
// }

func TestQuicTagValidate(t *testing.T) {
	ip := net.ParseIP("127.0.0.1")
	sport := 1234
	// domain := "a.example.com"

	ipByteSlice := (*[4]byte)(unsafe.Pointer(&sport))[:] // sport to []byte
	ipByteSlice = append(ipByteSlice, ip.To16()...)      // append ip bytes

	// The ECMA polynomial, defined in ECMA 182.
	cid := crc64.Checksum(ipByteSlice, crc64.MakeTable(crc64.ECMA))

	require.Equal(t, "d204000000000000000000000000ffff7f000001", hex.EncodeToString(ipByteSlice))
	require.Equal(t, uint64(0xd45262e5f51c35c4), cid)
}