Based on Nekogram. Key additions: - Rebrand to FoxiGram (app name, APK name, applicationId com.foxigram.app) - Embedded Xray (VLESS+Reality) proxy client via JNI libxray.so - Bundled hidden one-tap proxies (LTE + WiFi), read-only in UI - Auto-restore proxy on restart, rebind to active network (LTE/WiFi) - Server credentials externalized to git-ignored XrayServers.java (+ template) - libxray Go source included; compiled .so, keystore, google-services.json ignored
164 lines
5.3 KiB
C++
164 lines
5.3 KiB
C++
// Copyright 2018 The BoringSSL Authors
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// https://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
#include <openssl/base.h>
|
|
|
|
#if defined(BORINGSSL_DISPATCH_TEST) && !defined(BORINGSSL_SHARED_LIBRARY)
|
|
|
|
#include <functional>
|
|
#include <utility>
|
|
#include <vector>
|
|
|
|
#include <openssl/aead.h>
|
|
#include <openssl/aes.h>
|
|
#include <openssl/mem.h>
|
|
|
|
#include <gtest/gtest.h>
|
|
|
|
#include "internal.h"
|
|
|
|
|
|
class ImplDispatchTest : public ::testing::Test {
|
|
public:
|
|
void SetUp() override {
|
|
#if defined(OPENSSL_X86) || defined(OPENSSL_X86_64)
|
|
aesni_ = CRYPTO_is_AESNI_capable();
|
|
avx_movbe_ = CRYPTO_is_AVX_capable() && CRYPTO_is_MOVBE_capable();
|
|
ssse3_ = CRYPTO_is_SSSE3_capable();
|
|
vaes_ = CRYPTO_is_VAES_capable() && CRYPTO_is_VPCLMULQDQ_capable() &&
|
|
CRYPTO_is_AVX2_capable();
|
|
avx512_ = CRYPTO_is_AVX512BW_capable() && CRYPTO_is_AVX512VL_capable() &&
|
|
CRYPTO_is_BMI2_capable();
|
|
avoid_zmm_ = CRYPTO_cpu_avoid_zmm_registers();
|
|
is_x86_64_ =
|
|
#if defined(OPENSSL_X86_64)
|
|
true;
|
|
#else
|
|
false;
|
|
#endif
|
|
#endif // X86 || X86_64
|
|
}
|
|
|
|
protected:
|
|
// AssertFunctionsHit takes a list of pairs (flag index, boolean), and a
|
|
// function to test. It runs the given function and asserts, for each flag
|
|
// index, that the boolean reflects whether that flag index was written or
|
|
// not, and that no other flagged functions were triggered.
|
|
void AssertFunctionsHit(std::vector<std::pair<size_t, bool>> flags,
|
|
std::function<void()> f) {
|
|
OPENSSL_memset(BORINGSSL_function_hit, 0, sizeof(BORINGSSL_function_hit));
|
|
|
|
f();
|
|
|
|
for (const auto& flag : flags) {
|
|
SCOPED_TRACE(flag.first);
|
|
|
|
ASSERT_LT(flag.first, sizeof(BORINGSSL_function_hit));
|
|
EXPECT_EQ(flag.second, BORINGSSL_function_hit[flag.first] == 1);
|
|
BORINGSSL_function_hit[flag.first] = 0;
|
|
}
|
|
|
|
for (size_t i = 0; i < sizeof(BORINGSSL_function_hit); i++) {
|
|
EXPECT_EQ(0u, BORINGSSL_function_hit[i])
|
|
<< "Flag " << i << " unexpectedly hit";
|
|
}
|
|
}
|
|
|
|
#if defined(OPENSSL_X86) || defined(OPENSSL_X86_64)
|
|
bool aesni_ = false;
|
|
bool avx_movbe_ = false;
|
|
bool ssse3_ = false;
|
|
bool is_x86_64_ = false;
|
|
bool vaes_ = false;
|
|
bool avx512_ = false;
|
|
bool avoid_zmm_ = false;
|
|
#endif
|
|
};
|
|
|
|
#if !defined(OPENSSL_NO_ASM) && \
|
|
(defined(OPENSSL_X86) || defined(OPENSSL_X86_64))
|
|
|
|
constexpr size_t kFlag_aes_hw_ctr32_encrypt_blocks = 0;
|
|
constexpr size_t kFlag_aes_hw_encrypt = 1;
|
|
constexpr size_t kFlag_aesni_gcm_encrypt = 2;
|
|
constexpr size_t kFlag_aes_hw_set_encrypt_key = 3;
|
|
constexpr size_t kFlag_vpaes_encrypt = 4;
|
|
constexpr size_t kFlag_vpaes_set_encrypt_key = 5;
|
|
constexpr size_t kFlag_aes_gcm_enc_update_vaes_avx2 = 6;
|
|
constexpr size_t kFlag_aes_gcm_enc_update_vaes_avx512 = 7;
|
|
|
|
TEST_F(ImplDispatchTest, AEAD_AES_GCM) {
|
|
AssertFunctionsHit(
|
|
{
|
|
{kFlag_aes_hw_ctr32_encrypt_blocks, aesni_ && !(is_x86_64_ && vaes_)},
|
|
{kFlag_aes_hw_encrypt, aesni_},
|
|
{kFlag_aes_hw_set_encrypt_key, aesni_},
|
|
{kFlag_aesni_gcm_encrypt,
|
|
is_x86_64_ && aesni_ && avx_movbe_ && !vaes_},
|
|
{kFlag_vpaes_encrypt, ssse3_ && !aesni_},
|
|
{kFlag_vpaes_set_encrypt_key, ssse3_ && !aesni_},
|
|
{kFlag_aes_gcm_enc_update_vaes_avx2,
|
|
is_x86_64_ && vaes_ && !(avx512_ && !avoid_zmm_)},
|
|
{kFlag_aes_gcm_enc_update_vaes_avx512,
|
|
is_x86_64_ && vaes_ && avx512_ && !avoid_zmm_},
|
|
},
|
|
[] {
|
|
const uint8_t kZeros[16] = {0};
|
|
const uint8_t kPlaintext[40] = {1, 2, 3, 4, 0};
|
|
uint8_t ciphertext[sizeof(kPlaintext) + 16];
|
|
size_t ciphertext_len;
|
|
bssl::ScopedEVP_AEAD_CTX ctx;
|
|
ASSERT_TRUE(EVP_AEAD_CTX_init(ctx.get(), EVP_aead_aes_128_gcm(), kZeros,
|
|
sizeof(kZeros),
|
|
EVP_AEAD_DEFAULT_TAG_LENGTH, nullptr));
|
|
ASSERT_TRUE(EVP_AEAD_CTX_seal(
|
|
ctx.get(), ciphertext, &ciphertext_len, sizeof(ciphertext), kZeros,
|
|
EVP_AEAD_nonce_length(EVP_aead_aes_128_gcm()), kPlaintext,
|
|
sizeof(kPlaintext), nullptr, 0));
|
|
});
|
|
}
|
|
|
|
TEST_F(ImplDispatchTest, AES_set_encrypt_key) {
|
|
AssertFunctionsHit(
|
|
{
|
|
{kFlag_aes_hw_set_encrypt_key, aesni_},
|
|
{kFlag_vpaes_set_encrypt_key, ssse3_ && !aesni_},
|
|
},
|
|
[] {
|
|
AES_KEY key;
|
|
static const uint8_t kZeros[16] = {0};
|
|
AES_set_encrypt_key(kZeros, sizeof(kZeros) * 8, &key);
|
|
});
|
|
}
|
|
|
|
TEST_F(ImplDispatchTest, AES_single_block) {
|
|
AES_KEY key;
|
|
static const uint8_t kZeros[16] = {0};
|
|
AES_set_encrypt_key(kZeros, sizeof(kZeros) * 8, &key);
|
|
|
|
AssertFunctionsHit(
|
|
{
|
|
{kFlag_aes_hw_encrypt, aesni_},
|
|
{kFlag_vpaes_encrypt, ssse3_ && !aesni_},
|
|
},
|
|
[&key] {
|
|
uint8_t in[AES_BLOCK_SIZE] = {0};
|
|
uint8_t out[AES_BLOCK_SIZE];
|
|
AES_encrypt(in, out, &key);
|
|
});
|
|
}
|
|
|
|
#endif // X86 || X86_64
|
|
|
|
#endif // DISPATCH_TEST && !SHARED_LIBRARY
|