OpenGFW/analyzer/udp/internal/quic/packet_protector_test.go

package quic

import (
	"bytes"
	"crypto"
	"crypto/tls"
	"encoding/hex"
	"strings"
	"testing"
	"unicode"

	"golang.org/x/crypto/hkdf"
)

func TestInitialPacketProtector_UnProtect(t *testing.T) {
	// https://datatracker.ietf.org/doc/html/draft-ietf-quic-tls-32#name-server-initial
	protect := mustHexDecodeString(`
			c7ff0000200008f067a5502a4262b500 4075fb12ff07823a5d24534d906ce4c7
			6782a2167e3479c0f7f6395dc2c91676 302fe6d70bb7cbeb117b4ddb7d173498
			44fd61dae200b8338e1b932976b61d91 e64a02e9e0ee72e3a6f63aba4ceeeec5
			be2f24f2d86027572943533846caa13e 6f163fb257473d0eda5047360fd4a47e
			fd8142fafc0f76
		`)
	unProtect := mustHexDecodeString(`
			02000000000600405a020000560303ee fce7f7b37ba1d1632e96677825ddf739
			88cfc79825df566dc5430b9a045a1200 130100002e00330024001d00209d3c94
			0d89690b84d08a60993c144eca684d10 81287c834d5311bcf32bb9da1a002b00
			020304header.go
		`)

	connID := mustHexDecodeString(`8394c8f03e515708`)

	packet := append([]byte{}, protect...)
	hdr, offset, err := ParseInitialHeader(packet)
	if err != nil {
		t.Fatal(err)
	}

	initialSecret := hkdf.Extract(crypto.SHA256.New, connID, getSalt(hdr.Version))
	serverSecret := hkdfExpandLabel(crypto.SHA256.New, initialSecret, "server in", []byte{}, crypto.SHA256.Size())
	key, err := NewInitialProtectionKey(serverSecret, hdr.Version)
	if err != nil {
		t.Fatal(err)
	}
	pp := NewPacketProtector(key)
	got, err := pp.UnProtect(protect, offset, 1)
	if err != nil {
		t.Fatal(err)
	}
	if !bytes.Equal(got, unProtect) {
		t.Error("UnProtect returns wrong result")
	}
}

func TestPacketProtectorShortHeader_UnProtect(t *testing.T) {
	// https://datatracker.ietf.org/doc/html/draft-ietf-quic-tls-32#name-chacha20-poly1305-short-hea
	protect := mustHexDecodeString(`4cfe4189655e5cd55c41f69080575d7999c25a5bfb`)
	unProtect := mustHexDecodeString(`01`)
	hdr := mustHexDecodeString(`4200bff4`)

	secret := mustHexDecodeString(`9ac312a7f877468ebe69422748ad00a1 5443f18203a07d6060f688f30f21632b`)
	k, err := NewProtectionKey(tls.TLS_CHACHA20_POLY1305_SHA256, secret, V1)
	if err != nil {
		t.Fatal(err)
	}

	pnLen := int(hdr[0]&0x03) + 1
	offset := len(hdr) - pnLen
	pp := NewPacketProtector(k)
	got, err := pp.UnProtect(protect, int64(offset), 654360564)
	if err != nil {
		t.Fatal(err)
	}
	if !bytes.Equal(got, unProtect) {
		t.Error("UnProtect returns wrong result")
	}
}

func mustHexDecodeString(s string) []byte {
	b, err := hex.DecodeString(normalizeHex(s))
	if err != nil {
		panic(err)
	}
	return b
}

func normalizeHex(s string) string {
	return strings.Map(func(c rune) rune {
		if unicode.IsSpace(c) {
			return -1
		}
		return c
	}, s)
}