aes_kw_unwrapKey_failures.https.any.js

Enable keyboard shortcuts

This WPT test may be referenced by the following Test IDs:
- /WebCryptoAPI/wrapKey_unwrapKey/aes_kw_unwrapKey_failures.https.any.html - WPT Dashboard Interop Dashboard
- /WebCryptoAPI/wrapKey_unwrapKey/aes_kw_unwrapKey_failures.https.any.worker.html - WPT Dashboard Interop Dashboard

// META: title=WebCryptoAPI: unwrapKey() with invalid AES-KW wrapped keys

// Test vector from RFC 3394, section 4.1: wrap 128 bits of key data with a

// 128-bit KEK.

var kekBytes = new Uint8Array([0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,

    0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f]);

var keyBytes = new Uint8Array([0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77,

    0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff]);

var wrappedKeyBytes = new Uint8Array([0x1f, 0xa6, 0x8b, 0x0a, 0x81, 0x12, 0xb4, 0x47,

    0xae, 0xf3, 0x4b, 0xd8, 0xfb, 0x5a, 0x7b, 0x82, 0x9d, 0x3e, 0x86, 0x23,

    0x71, 0xd2, 0xcf, 0xe5]);

function importKek() {

    return crypto.subtle.importKey("raw", kekBytes, "AES-KW", false, ["unwrapKey"]);

function unwrapKey(kek, wrappedKey) {

    return crypto.subtle.unwrapKey("raw", wrappedKey, kek, "AES-KW", "AES-CBC", true, ["encrypt", "decrypt"]);

promise_test(async () => {

    const kek = await importKek();

    const key = await unwrapKey(kek, wrappedKeyBytes);

    const exported = new Uint8Array(await crypto.subtle.exportKey("raw", key));

    assert_array_equals(exported, keyBytes);

}, "AES-KW unwrapKey with a valid wrapped key");

promise_test(async (t) => {

    const kek = await importKek();

    const tamperedKeyBytes = wrappedKeyBytes.slice();

    tamperedKeyBytes[tamperedKeyBytes.length - 1] ^= 1;

    return promise_rejects_dom(t, "OperationError", unwrapKey(kek, tamperedKeyBytes));

}, "AES-KW unwrapKey with a tampered wrapped key");

promise_test(async (t) => {

    const kek = await importKek();

    return promise_rejects_dom(t, "OperationError", unwrapKey(kek, wrappedKeyBytes.slice(0, 16)));

}, "AES-KW unwrapKey with a wrapped key shorter than 24 bytes");