sdm-backend/test_libsdm.py at master · askarthur/sdm-backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
"""
This code was implemented based on the examples provided in:
* AN12196: NTAG 424 DNA and NTAG 424 DNA TagTamper features and hints
"""

import binascii
import config

from libsdm import decrypt_sun_message, validate_plain_sun, InvalidMessage, EncMode


def test_sun1():
    # From AN12196 page 12
    # https://ntag.nxp.com/424?e=EF963FF7828658A599F3041510671E88&c=94EED9EE65337086
    res = decrypt_sun_message(
        sdm_meta_read_key=binascii.unhexlify('00000000000000000000000000000000'),
        sdm_file_read_key=binascii.unhexlify('00000000000000000000000000000000'),
        picc_enc_data=binascii.unhexlify("EF963FF7828658A599F3041510671E88"),
        sdmmac=binascii.unhexlify("94EED9EE65337086"))

    assert res['picc_data_tag'] == b"\xc7"
    assert res['uid'] == b"\x04\xde\x5f\x1e\xac\xc0\x40"
    assert res['read_ctr'] == 61
    assert res['file_data'] is None
    assert res['encryption_mode'] == EncMode.AES


def test_sun2():
    # FROM AN12196 page 18
    # https://www.my424dna.com/?picc_data=FD91EC264309878BE6345CBE53BADF40&enc=CEE9A53E3E463EF1F459635736738962&cmac=ECC1E7F6C6C73BF6
    original_sdmmac_param = config.SDMMAC_PARAM
    config.SDMMAC_PARAM = "cmac"
    res = decrypt_sun_message(
        sdm_meta_read_key=binascii.unhexlify('00000000000000000000000000000000'),
        sdm_file_read_key=binascii.unhexlify('00000000000000000000000000000000'),
        picc_enc_data=binascii.unhexlify("FD91EC264309878BE6345CBE53BADF40"),
        sdmmac=binascii.unhexlify("ECC1E7F6C6C73BF6"),
        enc_file_data=binascii.unhexlify("CEE9A53E3E463EF1F459635736738962"))
    config.SDMMAC_PARAM = original_sdmmac_param

    assert res['picc_data_tag'] == b'\xc7'
    assert res['uid'] == b'\x04\x95\x8C\xAA\x5C\x5E\x80'
    assert res['read_ctr'] == 8
    assert res['file_data'] == b'xxxxxxxxxxxxxxxx'
    assert res['encryption_mode'] == EncMode.AES


def test_sun3_custom():
    original_sdmmac_param = config.SDMMAC_PARAM
    config.SDMMAC_PARAM = ""
    res = decrypt_sun_message(
        sdm_meta_read_key=binascii.unhexlify('42aff114f2cb3b6141be6dc95dfc5416'),
        sdm_file_read_key=binascii.unhexlify('b62a9baf092439bd43c62aee96b970c5'),
        picc_enc_data=binascii.unhexlify('8ACADDEF0A9B62CDAE39A16B83FC14DE'),
        sdmmac=binascii.unhexlify('238B2543A8DEBAD8'),
        enc_file_data=binascii.unhexlify('B8436E11F627BB7F543FCC0C1E0D1A89'))
    config.SDMMAC_PARAM = original_sdmmac_param

    assert res['picc_data_tag'] == b'\xc7'
    assert res['uid'] == binascii.unhexlify('041d3c8a2d6b80')
    assert res['read_ctr'] == 291
    assert res['file_data'] == binascii.unhexlify('4e545858716e6f5f6f42467077792d56')
    assert res['encryption_mode'] == EncMode.AES


def test_sun2_wrong_sdmmac():
    try:
        original_sdmmac_param = config.SDMMAC_PARAM
        config.SDMMAC_PARAM = "cmac"
        decrypt_sun_message(
            sdm_meta_read_key=binascii.unhexlify('00000000000000000000000000000000'),
            sdm_file_read_key=binascii.unhexlify('00000000000000000000000000000000'),
            picc_enc_data=binascii.unhexlify("FD91EC264309878BE6345CBE53BADF40"),
            sdmmac=binascii.unhexlify("3CC1E7F6C6C33B33"),
            enc_file_data=binascii.unhexlify("CEE9A53E3E463EF1F459635736738962"))
    except InvalidMessage as e:
        # this is expected
        pass
    else:
        raise RuntimeError("InvalidSDMMAC was not thrown as expected")
    finally:
        config.SDMMAC_PARAM = original_sdmmac_param


def test_plain_sdm():
    validate_plain_sun(
        uid=binascii.unhexlify('041E3C8A2D6B80'),
        read_ctr=binascii.unhexlify('000006'),
        sdmmac=binascii.unhexlify('4B00064004B0B3D3'),
        sdm_file_read_key=binascii.unhexlify('00000000000000000000000000000000'),
        mode=EncMode.AES
    )


def test_plain_sdm_wrong():
    try:
        validate_plain_sun(
            uid=binascii.unhexlify('041E3C8A2D6B80'),
            read_ctr=binascii.unhexlify('000006'),
            sdmmac=binascii.unhexlify('AB00064004B0B3AB'),
            sdm_file_read_key=binascii.unhexlify('00000000000000000000000000000000'),
            mode=EncMode.AES
        )
    except InvalidMessage as e:
        # this is expected
        pass
    else:
        raise RuntimeError("InvalidMessage was not thrown as expected")


def test_sdm_lrp1():
    res = decrypt_sun_message(
        sdm_meta_read_key=binascii.unhexlify('00000000000000000000000000000000'),
        sdm_file_read_key=binascii.unhexlify('00000000000000000000000000000000'),
        picc_enc_data=binascii.unhexlify("07D9CA2545881D4BFDD920BE1603268C0714420DD893A497"),
        enc_file_data=binascii.unhexlify("D6E921C47DB4C17C56F979F81559BB83"),
        sdmmac=binascii.unhexlify("F9481AC7D855BDB6"))

    assert res['picc_data_tag'] == b"\xc7"
    assert res['uid'] == binascii.unhexlify("049b112a2f7080")
    assert res['read_ctr'] == 4
    assert res['file_data'] == b"NTXXb7dz3PsYYBlU"
    assert res['encryption_mode'] == EncMode.LRP


def test_sdm_lrp2():
    res = decrypt_sun_message(
        sdm_meta_read_key=binascii.unhexlify('00000000000000000000000000000000'),
        sdm_file_read_key=binascii.unhexlify('00000000000000000000000000000000'),
        picc_enc_data=binascii.unhexlify("1FCBE61B3E4CAD980CBFDD333E7A4AC4A579569BAFD22C5F"),
        sdmmac=binascii.unhexlify("4231608BA7B02BA9"))

    assert res['picc_data_tag'] == b"\xc7"
    assert res['uid'] == binascii.unhexlify("04940e2a2f7080")
    assert res['read_ctr'] == 3
    assert res['file_data'] is None
    assert res['encryption_mode'] == EncMode.LRP