123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332 |
- /*
- * Copyright (c) 2015, Vsevolod Stakhov
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions are met:
- * * Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- * * Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in the
- * documentation and/or other materials provided with the distribution.
- *
- * THIS SOFTWARE IS PROVIDED BY AUTHOR ''AS IS'' AND ANY
- * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
- * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
- * DISCLAIMED. IN NO EVENT SHALL AUTHOR BE LIABLE FOR ANY
- * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
- * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
- * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
- * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
- * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
- * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- */
-
-
- #include "config.h"
- #include "rspamd.h"
- #include "shingles.h"
- #include "fstring.h"
- #include "ottery.h"
- #include "cryptobox.h"
-
- static const int mapping_size = 64 * 8192 + 1;
- static const int max_seg = 32;
- static const int random_fuzz_cnt = 10000;
-
- static void *
- create_mapping (int mapping_len, guchar **beg, guchar **end)
- {
- void *map;
- int psize = getpagesize ();
-
- map = mmap (NULL, mapping_len + psize * 3, PROT_READ|PROT_WRITE,
- MAP_ANON|MAP_SHARED, -1, 0);
- g_assert (map != 0);
- memset (map, 0, mapping_len + psize * 3);
- mprotect (map, psize, PROT_NONE);
- /* Misalign pointer */
- *beg = ((guchar *)map) + psize + 1;
- *end = *beg + mapping_len;
- mprotect (*beg + mapping_len - 1 + psize, psize, PROT_NONE);
-
- return map;
- }
-
- static void
- check_result (const rspamd_nm_t key, const rspamd_nonce_t nonce,
- const rspamd_sig_t mac, guchar *begin, guchar *end)
- {
- guint64 *t = (guint64 *)begin;
-
- g_assert (rspamd_cryptobox_decrypt_nm_inplace (begin, end - begin, nonce, key,
- mac));
-
- while (t < (guint64 *)end) {
- g_assert (*t == 0);
- t ++;
- }
- }
-
- static int
- create_random_split (struct rspamd_cryptobox_segment *seg, int mseg,
- guchar *begin, guchar *end)
- {
- gsize remain = end - begin;
- gint used = 0;
-
- while (remain > 0 && used < mseg - 1) {
- seg->data = begin;
- seg->len = ottery_rand_range (remain - 1) + 1;
-
- begin += seg->len;
- remain -= seg->len;
- used ++;
- seg ++;
- }
-
- if (remain > 0) {
- seg->data = begin;
- seg->len = remain;
- used ++;
- }
-
- return used;
- }
-
- static int
- create_realistic_split (struct rspamd_cryptobox_segment *seg, int mseg,
- guchar *begin, guchar *end)
- {
- gsize remain = end - begin;
- gint used = 0;
- static const int small_seg = 512, medium_seg = 2048;
-
- while (remain > 0 && used < mseg - 1) {
- seg->data = begin;
-
- if (ottery_rand_uint32 () % 2 == 0) {
- seg->len = ottery_rand_range (small_seg) + 1;
- }
- else {
- seg->len = ottery_rand_range (medium_seg) +
- small_seg;
- }
- if (seg->len > remain) {
- seg->len = remain;
- }
-
- begin += seg->len;
- remain -= seg->len;
- used ++;
- seg ++;
- }
-
- if (remain > 0) {
- seg->data = begin;
- seg->len = remain;
- used ++;
- }
-
- return used;
- }
-
- static int
- create_constrainted_split (struct rspamd_cryptobox_segment *seg, int mseg,
- int constraint,
- guchar *begin, guchar *end)
- {
- gsize remain = end - begin;
- gint used = 0;
-
- while (remain > 0 && used < mseg - 1) {
- seg->data = begin;
- seg->len = constraint;
- if (seg->len > remain) {
- seg->len = remain;
- }
- begin += seg->len;
- remain -= seg->len;
- used ++;
- seg ++;
- }
-
- if (remain > 0) {
- seg->data = begin;
- seg->len = remain;
- used ++;
- }
-
- return used;
- }
-
- void
- rspamd_cryptobox_test_func (void)
- {
- void *map;
- guchar *begin, *end;
- rspamd_nm_t key;
- rspamd_nonce_t nonce;
- rspamd_sig_t mac;
- struct rspamd_cryptobox_segment *seg;
- double t1, t2;
- gint i, cnt, ms;
-
- map = create_mapping (mapping_size, &begin, &end);
-
- ottery_rand_bytes (key, sizeof (key));
- ottery_rand_bytes (nonce, sizeof (nonce));
-
- memset (mac, 0, sizeof (mac));
- seg = g_slice_alloc0 (sizeof (*seg) * max_seg * 10);
-
- /* Test baseline */
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encrypt_nm_inplace (begin, end - begin, nonce, key, mac);
- t2 = rspamd_get_ticks ();
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("baseline encryption: %.6f", t2 - t1);
- /* A single chunk as vector */
- seg[0].data = begin;
- seg[0].len = end - begin;
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, 1, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("bulk encryption: %.6f", t2 - t1);
-
- /* Two chunks as vector */
- seg[0].data = begin;
- seg[0].len = (end - begin) / 2;
- seg[1].data = begin + seg[0].len;
- seg[1].len = (end - begin) - seg[0].len;
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, 2, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("2 equal chunks encryption: %.6f", t2 - t1);
-
- seg[0].data = begin;
- seg[0].len = 1;
- seg[1].data = begin + seg[0].len;
- seg[1].len = (end - begin) - seg[0].len;
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, 2, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("small and large chunks encryption: %.6f", t2 - t1);
-
- seg[0].data = begin;
- seg[0].len = (end - begin) - 3;
- seg[1].data = begin + seg[0].len;
- seg[1].len = (end - begin) - seg[0].len;
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, 2, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("large and small chunks encryption: %.6f", t2 - t1);
-
- /* Random two chunks as vector */
- seg[0].data = begin;
- seg[0].len = ottery_rand_range (end - begin - 1) + 1;
- seg[1].data = begin + seg[0].len;
- seg[1].len = (end - begin) - seg[0].len;
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, 2, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("random 2 chunks encryption: %.6f", t2 - t1);
-
- /* 3 specific chunks */
- seg[0].data = begin;
- seg[0].len = 2;
- seg[1].data = begin + seg[0].len;
- seg[1].len = 2049;
- seg[2].data = begin + seg[0].len + seg[1].len;
- seg[2].len = (end - begin) - seg[0].len - seg[1].len;
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, 3, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("small, medium and large chunks encryption: %.6f", t2 - t1);
-
- cnt = create_random_split (seg, max_seg, begin, end);
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, cnt, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("random split of %d chunks encryption: %.6f", cnt, t2 - t1);
-
- cnt = create_realistic_split (seg, max_seg, begin, end);
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, cnt, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("realistic split of %d chunks encryption: %.6f", cnt, t2 - t1);
-
- cnt = create_constrainted_split (seg, max_seg + 1, 32, begin, end);
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, cnt, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- msg_info ("constrainted split of %d chunks encryption: %.6f", cnt, t2 - t1);
-
- for (i = 0; i < random_fuzz_cnt; i ++) {
- ms = ottery_rand_range (i % max_seg * 2) + 1;
- cnt = create_random_split (seg, ms, begin, end);
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, cnt, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- if (i % 1000 == 0) {
- msg_info ("random fuzz iterations: %d", i);
- }
- }
- for (i = 0; i < random_fuzz_cnt; i ++) {
- ms = ottery_rand_range (i % max_seg * 2) + 1;
- cnt = create_realistic_split (seg, ms, begin, end);
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, cnt, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- if (i % 1000 == 0) {
- msg_info ("realistic fuzz iterations: %d", i);
- }
- }
- for (i = 0; i < random_fuzz_cnt; i ++) {
- ms = ottery_rand_range (i % max_seg * 10) + 1;
- cnt = create_constrainted_split (seg, ms, i, begin, end);
- t1 = rspamd_get_ticks ();
- rspamd_cryptobox_encryptv_nm_inplace (seg, cnt, nonce, key, mac);
- t2 = rspamd_get_ticks ();
-
- check_result (key, nonce, mac, begin, end);
-
- if (i % 1000 == 0) {
- msg_info ("constrainted fuzz iterations: %d", i);
- }
- }
- }
|