webcrypto/packages/web/test/hmac.spec.ts

import * as types from "@peculiar/webcrypto-types";
import { Convert } from "pvtsutils";
import { ITestGenerateKeyAction, testCrypto, webCrypto } from "./utils";

context("HMAC", () => {

  testCrypto(webCrypto, [
    {
      name: "HMAC",
      actions: {
        generateKey: [
          {
            name: "default length",
            algorithm: {
              name: "HMAC",
              hash: "SHA-256",
            } as types.HmacKeyGenParams,
            extractable: true,
            keyUsages: ["sign", "verify"],
          },
          ...["SHA-1", "SHA-256", "SHA-384", "SHA-512"].map((hash) => {
            return {
              name: hash,
              algorithm: {
                name: "HMAC",
                hash,
                length: 128,
              },
              extractable: true,
              keyUsages: ["sign", "verify"],
            } as ITestGenerateKeyAction;
          }),
          {
            name: "length:160",
            algorithm: {
              name: "HMAC",
              hash: "SHA-256",
              length: 160,
            },
            extractable: true,
            keyUsages: ["sign", "verify"],
          } as ITestGenerateKeyAction,
        ],
        sign: [
          {
            name: "HMAC-SHA256 with length param which is less than hash size",
            key: {
              format: "raw",
              data: new Uint8Array([1, 2, 3, 4, 5, 6, 7, 8, 9, 0, 1, 2, 3, 4, 5, 6]),
              algorithm: {
                name: "HMAC",
                hash: "SHA-256",
                length: 128,
              } as types.HmacImportParams,
              extractable: false,
              keyUsages: ["sign", "verify"],
            },
            algorithm: { name: "HMAC" },
            data: new Uint8Array([1, 2, 3, 4, 5, 6, 7, 8, 9, 0]),
            signature: Convert.FromBase64("9yMF9ReX1EhdBWTRjSR+AC21NA05H9W8vx0HZGVmgNc="),
          },
          {
            name: "HMAC-SHA256 without length param",
            key: {
              format: "raw",
              data: new Uint8Array([1, 2, 3, 4, 5, 6, 7, 8, 9, 0, 1, 2, 3, 4, 5, 6, 1, 2, 3, 4, 5, 6, 7, 8, 9, 0, 1, 2, 3, 4, 5, 6]),
              algorithm: {
                name: "HMAC",
                hash: "SHA-256",
              } as types.HmacImportParams,
              extractable: false,
              keyUsages: ["sign", "verify"],
            },
            algorithm: { name: "HMAC" },
            data: new Uint8Array([1, 2, 3, 4, 5, 6, 7, 8, 9, 0]),
            signature: Convert.FromHex("ad05febab44cd369e27433bbf00e63e6271f6a350614bec453f5d0efd6503a31"),
          },
        ],
        import: [
          { // JWK SHA-1
            name: "JWK SHA-1",
            format: "jwk",
            data: {
              alg: "HS1",
              ext: true,
              k: "AQIDBAUGBwgJAAECAwQFBg",
              key_ops: ["sign", "verify"],
              kty: "oct",
            },
            algorithm: {
              name: "HMAC",
              hash: "SHA-1",
              length: 128,
            } as types.HmacImportParams,
            extractable: true,
            keyUsages: ["sign", "verify"],
          },
          { // JWK SHA-256
            name: "JWK SHA-256",
            format: "jwk",
            data: {
              alg: "HS256",
              ext: true,
              k: "AQIDBAUGBwgJAAECAwQFBg",
              key_ops: ["sign", "verify"],
              kty: "oct",
            },
            algorithm: {
              name: "HMAC",
              hash: "SHA-256",
            } as types.HmacImportParams,
            extractable: true,
            keyUsages: ["sign", "verify"],
          },
          { // JWK SHA-384
            name: "JWK SHA-384",
            format: "jwk",
            data: {
              alg: "HS384",
              ext: true,
              k: "AQIDBAUGBwgJAAECAwQFBg",
              key_ops: ["sign", "verify"],
              kty: "oct",
            },
            algorithm: {
              name: "HMAC",
              hash: "SHA-384",
            } as types.HmacImportParams,
            extractable: true,
            keyUsages: ["sign", "verify"],
          },
          { // JWK SHA-512
            name: "JWK SHA-512",
            format: "jwk",
            data: {
              alg: "HS512",
              ext: true,
              k: "AQIDBAUGBwgJAAECAwQFBg",
              key_ops: ["sign", "verify"],
              kty: "oct",
            },
            algorithm: {
              name: "HMAC",
              hash: "SHA-512",
            } as types.HmacImportParams,
            extractable: true,
            keyUsages: ["sign", "verify"],
          },
          { // raw 128
            name: "raw 128",
            format: "raw",
            data: Convert.FromBase64Url("AQIDBAUGBwgJAAECAwQFBg"),
            algorithm: {
              name: "HMAC",
              hash: "SHA-512",
            } as types.HmacImportParams,
            extractable: true,
            keyUsages: ["sign", "verify"],
          },
          { // raw 160
            name: "raw 160",
            format: "raw",
            data: new Uint8Array(20),
            algorithm: {
              name: "HMAC",
              hash: "SHA-512",
            } as types.HmacImportParams,
            extractable: true,
            keyUsages: ["sign", "verify"],
          },
        ],
      },
    },
  ]);
});