wbtiger
/
ByConity
mirror of https://github.com/ByConity/ByConity
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updating requirements and tests as CFB1 and CFB8 modes are no longer supported.

This commit is contained in:
Vitaliy Zakaznikov 2020-12-19 17:19:01 -05:00
parent b751144709
commit dcbf080047
9 changed files with 170 additions and 2000 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

128
tests/testflows/aes_encryption/requirements/requirements.md
View File

@ -238,54 +238,54 @@ SHALL be measured.
#### RQ.SRS008.AES.Encrypt.Function
version: 1.0
[ClickHouse] SHALL support `aes_encrypt` function to encrypt data using [AES].
[ClickHouse] SHALL support `encrypt` function to encrypt data using [AES].
#### RQ.SRS008.AES.Encrypt.Function.Syntax
version: 1.0
[ClickHouse] SHALL support the following syntax for the `aes_encrypt` function
[ClickHouse] SHALL support the following syntax for the `encrypt` function
```sql
aes_encrypt(plaintext, key, mode, [iv, aad])
encrypt(mode, plaintext, key, [iv, aad])
```
#### RQ.SRS008.AES.Encrypt.Function.NIST.TestVectors
version: 1.0
[ClickHouse] `aes_encrypt` function output SHALL produce output that matches [NIST test vectors].
[ClickHouse] `encrypt` function output SHALL produce output that matches [NIST test vectors].
#### RQ.SRS008.AES.Encrypt.Function.Parameters.PlainText
version: 1.0
[ClickHouse] SHALL support `plaintext` accepting any data type as
the first parameter to the `aes_encrypt` function that SHALL specify the data to be encrypted.
the first parameter to the `encrypt` function that SHALL specify the data to be encrypted.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.Key
version: 1.0
[ClickHouse] SHALL support `key` with `String` or `FixedString` data types
as the second parameter to the `aes_encrypt` function that SHALL specify the encryption key.
as the second parameter to the `encrypt` function that SHALL specify the encryption key.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.Mode
version: 1.0
[ClickHouse] SHALL support `mode` with `String` or `FixedString` data types as the third parameter
to the `aes_encrypt` function that SHALL specify encryption key length and block encryption mode.
to the `encrypt` function that SHALL specify encryption key length and block encryption mode.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.Mode.ValuesFormat
version: 1.0
[ClickHouse] SHALL support values of the form `aes-[key length]-[mode]` for the `mode` parameter
of the `aes_encrypt` function where
of the `encrypt` function where
the `key_length` SHALL specifies the length of the key and SHALL accept
`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption
mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB] as well as
mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB] as well as
[CTR] and [GCM] as the values. For example, `aes-256-ofb`.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.Mode.Value.Invalid
version: 1.0
[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `aes_encrypt`
[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `encrypt`
function is not valid with the exception where such a mode is supported by the underlying
[OpenSSL] implementation.
@ -293,7 +293,7 @@ function is not valid with the exception where such a mode is supported by the u
version: 1.0
[ClickHouse] SHALL support the following [AES] block encryption modes as the value for the `mode` parameter
of the `aes_encrypt` function:
of the `encrypt` function:
* `aes-128-ecb` that SHALL use [ECB] block mode encryption with 128 bit key
* `aes-192-ecb` that SHALL use [ECB] block mode encryption with 192 bit key
@ -301,12 +301,6 @@ of the `aes_encrypt` function:
* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key
* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key
* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key
* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key
* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key
* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key
* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key
* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key
* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key
* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key
@ -330,51 +324,51 @@ of the `aes_encrypt` function:
version: 1.0
[ClickHouse] SHALL support `iv` with `String` or `FixedString` data types as the optional fourth
parameter to the `aes_encrypt` function that SHALL specify the initialization vector for block modes that require
parameter to the `encrypt` function that SHALL specify the initialization vector for block modes that require
it.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.AdditionalAuthenticatedData
version: 1.0
[ClickHouse] SHALL support `aad` with `String` or `FixedString` data types as the optional fifth
parameter to the `aes_encrypt` function that SHALL specify the additional authenticated data
parameter to the `encrypt` function that SHALL specify the additional authenticated data
for block modes that require it.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.ReturnValue
version: 1.0
[ClickHouse] SHALL return the encrypted value of the data
using `String` data type as the result of `aes_encrypt` function.
using `String` data type as the result of `encrypt` function.
#### RQ.SRS008.AES.Encrypt.Function.Key.Length.InvalidLengthError
version: 1.0
[ClickHouse] SHALL return an error if the `key` length is not exact for the `aes_encrypt` function for a given block mode.
[ClickHouse] SHALL return an error if the `key` length is not exact for the `encrypt` function for a given block mode.
#### RQ.SRS008.AES.Encrypt.Function.InitializationVector.Length.InvalidLengthError
version: 1.0
[ClickHouse] SHALL return an error if the `iv` length is specified and not of the exact size for the `aes_encrypt` function for a given block mode.
[ClickHouse] SHALL return an error if the `iv` length is specified and not of the exact size for the `encrypt` function for a given block mode.
#### RQ.SRS008.AES.Encrypt.Function.InitializationVector.NotValidForMode
version: 1.0
[ClickHouse] SHALL return an error if the `iv` is specified for the `aes_encrypt` function for a mode that does not need it.
[ClickHouse] SHALL return an error if the `iv` is specified for the `encrypt` function for a mode that does not need it.
#### RQ.SRS008.AES.Encrypt.Function.AdditionalAuthenticationData.NotValidForMode
version: 1.0
[ClickHouse] SHALL return an error if the `aad` is specified for the `aes_encrypt` function for a mode that does not need it.
[ClickHouse] SHALL return an error if the `aad` is specified for the `encrypt` function for a mode that does not need it.
#### RQ.SRS008.AES.Encrypt.Function.AdditionalAuthenticationData.Length
version: 1.0
[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `aes_encrypt` function.
[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `encrypt` function.
#### RQ.SRS008.AES.Encrypt.Function.NonGCMMode.KeyAndInitializationVector.Length
version: 1.0
[ClickHouse] SHALL return an error when the `aes_encrypt` function is called with the following parameter values
[ClickHouse] SHALL return an error when the `encrypt` function is called with the following parameter values
when using non-GCM modes
* `aes-128-ecb` mode and `key` is not 16 bytes or `iv` or `aad` is specified
@ -402,59 +396,59 @@ when using non-GCM modes
#### RQ.SRS008.AES.Encrypt.Function.GCMMode.KeyAndInitializationVector.Length
version: 1.0
[ClickHouse] SHALL return an error when the `aes_encrypt` function is called with the following parameter values
[ClickHouse] SHALL return an error when the `encrypt` function is called with the following parameter values
when using GCM modes
* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified or is less than 8 bytes
* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified or is less than 8 bytes
* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified or is less than 8 bytes
* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified
* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified
* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified
#### RQ.SRS008.AES.Decrypt.Function
version: 1.0
[ClickHouse] SHALL support `aes_decrypt` function to decrypt data using [AES].
[ClickHouse] SHALL support `decrypt` function to decrypt data using [AES].
#### RQ.SRS008.AES.Decrypt.Function.Syntax
version: 1.0
[ClickHouse] SHALL support the following syntax for the `aes_decrypt` function
[ClickHouse] SHALL support the following syntax for the `decrypt` function
```sql
aes_decrypt(ciphertext, key, mode, [iv, aad])
decrypt(mode, ciphertext, key, [iv, aad])
```
#### RQ.SRS008.AES.Decrypt.Function.Parameters.CipherText
version: 1.0
[ClickHouse] SHALL support `ciphertext` accepting `FixedString` or `String` data types as
the first parameter to the `aes_decrypt` function that SHALL specify the data to be decrypted.
the first parameter to the `decrypt` function that SHALL specify the data to be decrypted.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.Key
version: 1.0
[ClickHouse] SHALL support `key` with `String` or `FixedString` data types
as the second parameter to the `aes_decrypt` function that SHALL specify the encryption key.
as the second parameter to the `decrypt` function that SHALL specify the encryption key.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.Mode
version: 1.0
[ClickHouse] SHALL support `mode` with `String` or `FixedString` data types as the third parameter
to the `aes_decrypt` function that SHALL specify encryption key length and block encryption mode.
to the `decrypt` function that SHALL specify encryption key length and block encryption mode.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.Mode.ValuesFormat
version: 1.0
[ClickHouse] SHALL support values of the form `aes-[key length]-[mode]` for the `mode` parameter
of the `aes_decrypt` function where
of the `decrypt` function where
the `key_length` SHALL specifies the length of the key and SHALL accept
`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption
mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB] as well as
mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB] as well as
[CTR] and [GCM] as the values. For example, `aes-256-ofb`.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.Mode.Value.Invalid
version: 1.0
[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `aes_decrypt`
[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `decrypt`
function is not valid with the exception where such a mode is supported by the underlying
[OpenSSL] implementation.
@ -462,7 +456,7 @@ function is not valid with the exception where such a mode is supported by the u
version: 1.0
[ClickHouse] SHALL support the following [AES] block encryption modes as the value for the `mode` parameter
of the `aes_decrypt` function:
of the `decrypt` function:
* `aes-128-ecb` that SHALL use [ECB] block mode encryption with 128 bit key
* `aes-192-ecb` that SHALL use [ECB] block mode encryption with 192 bit key
@ -470,12 +464,6 @@ of the `aes_decrypt` function:
* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key
* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key
* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key
* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key
* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key
* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key
* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key
* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key
* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key
* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key
@ -499,53 +487,53 @@ of the `aes_decrypt` function:
version: 1.0
[ClickHouse] SHALL support `iv` with `String` or `FixedString` data types as the optional fourth
parameter to the `aes_decrypt` function that SHALL specify the initialization vector for block modes that require
parameter to the `decrypt` function that SHALL specify the initialization vector for block modes that require
it.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.AdditionalAuthenticatedData
version: 1.0
[ClickHouse] SHALL support `aad` with `String` or `FixedString` data types as the optional fifth
parameter to the `aes_decrypt` function that SHALL specify the additional authenticated data
parameter to the `decrypt` function that SHALL specify the additional authenticated data
for block modes that require it.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.ReturnValue
version: 1.0
[ClickHouse] SHALL return the decrypted value of the data
using `String` data type as the result of `aes_decrypt` function.
using `String` data type as the result of `decrypt` function.
#### RQ.SRS008.AES.Decrypt.Function.Key.Length.InvalidLengthError
version: 1.0
[ClickHouse] SHALL return an error if the `key` length is not exact for the `aes_decrypt` function for a given block mode.
[ClickHouse] SHALL return an error if the `key` length is not exact for the `decrypt` function for a given block mode.
#### RQ.SRS008.AES.Decrypt.Function.InitializationVector.Length.InvalidLengthError
version: 1.0
[ClickHouse] SHALL return an error if the `iv` is speficified and the length is not exact for the `aes_decrypt` function for a given block mode.
[ClickHouse] SHALL return an error if the `iv` is speficified and the length is not exact for the `decrypt` function for a given block mode.
#### RQ.SRS008.AES.Decrypt.Function.InitializationVector.NotValidForMode
version: 1.0
[ClickHouse] SHALL return an error if the `iv` is specified for the `aes_decrypt` function
[ClickHouse] SHALL return an error if the `iv` is specified for the `decrypt` function
for a mode that does not need it.
#### RQ.SRS008.AES.Decrypt.Function.AdditionalAuthenticationData.NotValidForMode
version: 1.0
[ClickHouse] SHALL return an error if the `aad` is specified for the `aes_decrypt` function
[ClickHouse] SHALL return an error if the `aad` is specified for the `decrypt` function
for a mode that does not need it.
#### RQ.SRS008.AES.Decrypt.Function.AdditionalAuthenticationData.Length
version: 1.0
[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `aes_decrypt` function.
[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `decrypt` function.
#### RQ.SRS008.AES.Decrypt.Function.NonGCMMode.KeyAndInitializationVector.Length
version: 1.0
[ClickHouse] SHALL return an error when the `aes_decrypt` function is called with the following parameter values
[ClickHouse] SHALL return an error when the `decrypt` function is called with the following parameter values
when using non-GCM modes
* `aes-128-ecb` mode and `key` is not 16 bytes or `iv` or `aad` is specified
@ -573,12 +561,12 @@ when using non-GCM modes
#### RQ.SRS008.AES.Decrypt.Function.GCMMode.KeyAndInitializationVector.Length
version: 1.0
[ClickHouse] SHALL return an error when the `aes_decrypt` function is called with the following parameter values
[ClickHouse] SHALL return an error when the `decrypt` function is called with the following parameter values
when using GCM modes
* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified or is less than 8 bytes
* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified or is less than 8 bytes
* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified or is less than 8 bytes
* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified
* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified
* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified
### MySQL Specific Functions
@ -593,7 +581,7 @@ version: 1.0
[ClickHouse] SHALL support the following syntax for the `aes_encrypt_mysql` function
```sql
aes_encrypt_mysql(plaintext, key, mode, [iv])
aes_encrypt_mysql(mode, plaintext, key, [iv])
```
#### RQ.SRS008.AES.MySQL.Encrypt.Function.Parameters.PlainText
@ -621,7 +609,7 @@ version: 1.0
of the `aes_encrypt_mysql` function where
the `key_length` SHALL specifies the length of the key and SHALL accept
`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption
mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB]. For example, `aes-256-ofb`.
mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB]. For example, `aes-256-ofb`.
#### RQ.SRS008.AES.MySQL.Encrypt.Function.Parameters.Mode.Value.Invalid
version: 1.0
@ -642,12 +630,6 @@ of the `aes_encrypt_mysql` function:
* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key
* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key
* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key
* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key
* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key
* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key
* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key
* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key
* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key
* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key
@ -763,7 +745,7 @@ version: 1.0
[ClickHouse] SHALL support the following syntax for the `aes_decrypt_mysql` function
```sql
aes_decrypt_mysql(ciphertext, key, mode, [iv])
aes_decrypt_mysql(mode, ciphertext, key, [iv])
```
#### RQ.SRS008.AES.MySQL.Decrypt.Function.Parameters.CipherText
@ -791,7 +773,7 @@ version: 1.0
of the `aes_decrypt_mysql` function where
the `key_length` SHALL specifies the length of the key and SHALL accept
`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption
mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB]. For example, `aes-256-ofb`.
mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB]. For example, `aes-256-ofb`.
#### RQ.SRS008.AES.MySQL.Decrypt.Function.Parameters.Mode.Value.Invalid
version: 1.0
@ -812,12 +794,6 @@ of the `aes_decrypt_mysql` function:
* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key
* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key
* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key
* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key
* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key
* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key
* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key
* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key
* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key
* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key
@ -942,8 +918,6 @@ version: 1.0
[CBC]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_block_chaining_(CBC)
[ECB]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Electronic_codebook_(ECB)
[CFB]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_feedback_(CFB)
[CFB1]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_feedback_(CFB)
[CFB8]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_feedback_(CFB)
[CFB128]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_feedback_(CFB)
[OFB]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Output_feedback_(OFB)
[GDPR]: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation

254
tests/testflows/aes_encryption/requirements/requirements.py
View File

@ -310,7 +310,7 @@ RQ_SRS008_AES_Encrypt_Function = Requirement(
type=None,
uid=None,
description=(
'[ClickHouse] SHALL support `aes_encrypt` function to encrypt data using [AES].\n'
'[ClickHouse] SHALL support `encrypt` function to encrypt data using [AES].\n'
'\n'
),
link=None,
@ -325,10 +325,10 @@ RQ_SRS008_AES_Encrypt_Function_Syntax = Requirement(
type=None,
uid=None,
description=(
'[ClickHouse] SHALL support the following syntax for the `aes_encrypt` function\n'
'[ClickHouse] SHALL support the following syntax for the `encrypt` function\n'
'\n'
'```sql\n'
'aes_encrypt(plaintext, key, mode, [iv, aad])\n'
'encrypt(mode, plaintext, key, [iv, aad])\n'
'```\n'
'\n'
),
@ -344,7 +344,7 @@ RQ_SRS008_AES_Encrypt_Function_NIST_TestVectors = Requirement(
type=None,
uid=None,
description=(
'[ClickHouse] `aes_encrypt` function output SHALL produce output that matches [NIST test vectors].\n'
'[ClickHouse] `encrypt` function output SHALL produce output that matches [NIST test vectors].\n'
'\n'
),
link=None,
@ -360,7 +360,7 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_PlainText = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support `plaintext` accepting any data type as\n'
'the first parameter to the `aes_encrypt` function that SHALL specify the data to be encrypted.\n'
'the first parameter to the `encrypt` function that SHALL specify the data to be encrypted.\n'
'\n'
),
link=None,
@ -376,7 +376,7 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_Key = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support `key` with `String` or `FixedString` data types\n'
'as the second parameter to the `aes_encrypt` function that SHALL specify the encryption key.\n'
'as the second parameter to the `encrypt` function that SHALL specify the encryption key.\n'
'\n'
),
link=None,
@ -392,7 +392,7 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_Mode = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support `mode` with `String` or `FixedString` data types as the third parameter\n'
'to the `aes_encrypt` function that SHALL specify encryption key length and block encryption mode.\n'
'to the `encrypt` function that SHALL specify encryption key length and block encryption mode.\n'
'\n'
),
link=None,
@ -408,10 +408,10 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_Mode_ValuesFormat = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support values of the form `aes-[key length]-[mode]` for the `mode` parameter\n'
'of the `aes_encrypt` function where\n'
'of the `encrypt` function where\n'
'the `key_length` SHALL specifies the length of the key and SHALL accept\n'
'`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption\n'
'mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB] as well as\n'
'mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB] as well as\n'
'[CTR] and [GCM] as the values. For example, `aes-256-ofb`.\n'
'\n'
),
@ -427,7 +427,7 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_Mode_Value_Invalid = Requirement(
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `aes_encrypt`\n'
'[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `encrypt`\n'
'function is not valid with the exception where such a mode is supported by the underlying\n'
'[OpenSSL] implementation.\n'
'\n'
@ -445,7 +445,7 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_Mode_Values = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support the following [AES] block encryption modes as the value for the `mode` parameter\n'
'of the `aes_encrypt` function:\n'
'of the `encrypt` function:\n'
'\n'
'* `aes-128-ecb` that SHALL use [ECB] block mode encryption with 128 bit key\n'
'* `aes-192-ecb` that SHALL use [ECB] block mode encryption with 192 bit key\n'
@ -453,12 +453,6 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_Mode_Values = Requirement(
'* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key\n'
'* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key\n'
'* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key\n'
'* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key\n'
'* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key\n'
'* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key\n'
'* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key\n'
'* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key\n'
'* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key\n'
'* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key\n'
'* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key\n'
'* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key\n'
@ -492,7 +486,7 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_InitializationVector = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support `iv` with `String` or `FixedString` data types as the optional fourth\n'
'parameter to the `aes_encrypt` function that SHALL specify the initialization vector for block modes that require\n'
'parameter to the `encrypt` function that SHALL specify the initialization vector for block modes that require\n'
'it.\n'
'\n'
),
@ -509,7 +503,7 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_AdditionalAuthenticatedData = Requirem
uid=None,
description=(
'[ClickHouse] SHALL support `aad` with `String` or `FixedString` data types as the optional fifth\n'
'parameter to the `aes_encrypt` function that SHALL specify the additional authenticated data\n'
'parameter to the `encrypt` function that SHALL specify the additional authenticated data\n'
'for block modes that require it.\n'
'\n'
),
@ -526,7 +520,7 @@ RQ_SRS008_AES_Encrypt_Function_Parameters_ReturnValue = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL return the encrypted value of the data\n'
'using `String` data type as the result of `aes_encrypt` function.\n'
'using `String` data type as the result of `encrypt` function.\n'
'\n'
),
link=None,
@ -541,7 +535,7 @@ RQ_SRS008_AES_Encrypt_Function_Key_Length_InvalidLengthError = Requirement(
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the `key` length is not exact for the `aes_encrypt` function for a given block mode.\n'
'[ClickHouse] SHALL return an error if the `key` length is not exact for the `encrypt` function for a given block mode.\n'
'\n'
),
link=None,
@ -556,7 +550,7 @@ RQ_SRS008_AES_Encrypt_Function_InitializationVector_Length_InvalidLengthError =
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the `iv` length is specified and not of the exact size for the `aes_encrypt` function for a given block mode.\n'
'[ClickHouse] SHALL return an error if the `iv` length is specified and not of the exact size for the `encrypt` function for a given block mode.\n'
'\n'
),
link=None,
@ -571,7 +565,7 @@ RQ_SRS008_AES_Encrypt_Function_InitializationVector_NotValidForMode = Requiremen
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the `iv` is specified for the `aes_encrypt` function for a mode that does not need it.\n'
'[ClickHouse] SHALL return an error if the `iv` is specified for the `encrypt` function for a mode that does not need it.\n'
'\n'
),
link=None,
@ -586,7 +580,7 @@ RQ_SRS008_AES_Encrypt_Function_AdditionalAuthenticationData_NotValidForMode = Re
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the `aad` is specified for the `aes_encrypt` function for a mode that does not need it.\n'
'[ClickHouse] SHALL return an error if the `aad` is specified for the `encrypt` function for a mode that does not need it.\n'
'\n'
),
link=None,
@ -601,7 +595,7 @@ RQ_SRS008_AES_Encrypt_Function_AdditionalAuthenticationData_Length = Requirement
type=None,
uid=None,
description=(
'[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `aes_encrypt` function.\n'
'[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `encrypt` function.\n'
'\n'
),
link=None,
@ -616,7 +610,7 @@ RQ_SRS008_AES_Encrypt_Function_NonGCMMode_KeyAndInitializationVector_Length = Re
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error when the `aes_encrypt` function is called with the following parameter values\n'
'[ClickHouse] SHALL return an error when the `encrypt` function is called with the following parameter values\n'
'when using non-GCM modes\n'
'\n'
'* `aes-128-ecb` mode and `key` is not 16 bytes or `iv` or `aad` is specified\n'
@ -654,12 +648,12 @@ RQ_SRS008_AES_Encrypt_Function_GCMMode_KeyAndInitializationVector_Length = Requi
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error when the `aes_encrypt` function is called with the following parameter values\n'
'[ClickHouse] SHALL return an error when the `encrypt` function is called with the following parameter values\n'
'when using GCM modes\n'
'\n'
'* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified or is less than 8 bytes\n'
'* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified or is less than 8 bytes\n'
'* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified or is less than 8 bytes\n'
'* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified\n'
'* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified\n'
'* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified\n'
'\n'
),
link=None,
@ -674,7 +668,7 @@ RQ_SRS008_AES_Decrypt_Function = Requirement(
type=None,
uid=None,
description=(
'[ClickHouse] SHALL support `aes_decrypt` function to decrypt data using [AES].\n'
'[ClickHouse] SHALL support `decrypt` function to decrypt data using [AES].\n'
'\n'
),
link=None,
@ -689,10 +683,10 @@ RQ_SRS008_AES_Decrypt_Function_Syntax = Requirement(
type=None,
uid=None,
description=(
'[ClickHouse] SHALL support the following syntax for the `aes_decrypt` function\n'
'[ClickHouse] SHALL support the following syntax for the `decrypt` function\n'
'\n'
'```sql\n'
'aes_decrypt(ciphertext, key, mode, [iv, aad])\n'
'decrypt(mode, ciphertext, key, [iv, aad])\n'
'```\n'
'\n'
),
@ -709,7 +703,7 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_CipherText = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support `ciphertext` accepting `FixedString` or `String` data types as\n'
'the first parameter to the `aes_decrypt` function that SHALL specify the data to be decrypted.\n'
'the first parameter to the `decrypt` function that SHALL specify the data to be decrypted.\n'
'\n'
),
link=None,
@ -725,7 +719,7 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_Key = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support `key` with `String` or `FixedString` data types\n'
'as the second parameter to the `aes_decrypt` function that SHALL specify the encryption key.\n'
'as the second parameter to the `decrypt` function that SHALL specify the encryption key.\n'
'\n'
),
link=None,
@ -741,7 +735,7 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_Mode = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support `mode` with `String` or `FixedString` data types as the third parameter\n'
'to the `aes_decrypt` function that SHALL specify encryption key length and block encryption mode.\n'
'to the `decrypt` function that SHALL specify encryption key length and block encryption mode.\n'
'\n'
),
link=None,
@ -757,10 +751,10 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_Mode_ValuesFormat = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support values of the form `aes-[key length]-[mode]` for the `mode` parameter\n'
'of the `aes_decrypt` function where\n'
'of the `decrypt` function where\n'
'the `key_length` SHALL specifies the length of the key and SHALL accept\n'
'`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption\n'
'mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB] as well as\n'
'mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB] as well as\n'
'[CTR] and [GCM] as the values. For example, `aes-256-ofb`.\n'
'\n'
),
@ -776,7 +770,7 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_Mode_Value_Invalid = Requirement(
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `aes_decrypt`\n'
'[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `decrypt`\n'
'function is not valid with the exception where such a mode is supported by the underlying\n'
'[OpenSSL] implementation.\n'
'\n'
@ -794,7 +788,7 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_Mode_Values = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support the following [AES] block encryption modes as the value for the `mode` parameter\n'
'of the `aes_decrypt` function:\n'
'of the `decrypt` function:\n'
'\n'
'* `aes-128-ecb` that SHALL use [ECB] block mode encryption with 128 bit key\n'
'* `aes-192-ecb` that SHALL use [ECB] block mode encryption with 192 bit key\n'
@ -802,12 +796,6 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_Mode_Values = Requirement(
'* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key\n'
'* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key\n'
'* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key\n'
'* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key\n'
'* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key\n'
'* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key\n'
'* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key\n'
'* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key\n'
'* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key\n'
'* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key\n'
'* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key\n'
'* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key\n'
@ -841,7 +829,7 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_InitializationVector = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL support `iv` with `String` or `FixedString` data types as the optional fourth\n'
'parameter to the `aes_decrypt` function that SHALL specify the initialization vector for block modes that require\n'
'parameter to the `decrypt` function that SHALL specify the initialization vector for block modes that require\n'
'it.\n'
'\n'
),
@ -858,7 +846,7 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_AdditionalAuthenticatedData = Requirem
uid=None,
description=(
'[ClickHouse] SHALL support `aad` with `String` or `FixedString` data types as the optional fifth\n'
'parameter to the `aes_decrypt` function that SHALL specify the additional authenticated data\n'
'parameter to the `decrypt` function that SHALL specify the additional authenticated data\n'
'for block modes that require it.\n'
'\n'
),
@ -875,7 +863,7 @@ RQ_SRS008_AES_Decrypt_Function_Parameters_ReturnValue = Requirement(
uid=None,
description=(
'[ClickHouse] SHALL return the decrypted value of the data\n'
'using `String` data type as the result of `aes_decrypt` function.\n'
'using `String` data type as the result of `decrypt` function.\n'
'\n'
),
link=None,
@ -890,7 +878,7 @@ RQ_SRS008_AES_Decrypt_Function_Key_Length_InvalidLengthError = Requirement(
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the `key` length is not exact for the `aes_decrypt` function for a given block mode.\n'
'[ClickHouse] SHALL return an error if the `key` length is not exact for the `decrypt` function for a given block mode.\n'
'\n'
),
link=None,
@ -905,7 +893,7 @@ RQ_SRS008_AES_Decrypt_Function_InitializationVector_Length_InvalidLengthError =
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the `iv` is speficified and the length is not exact for the `aes_decrypt` function for a given block mode.\n'
'[ClickHouse] SHALL return an error if the `iv` is speficified and the length is not exact for the `decrypt` function for a given block mode.\n'
'\n'
),
link=None,
@ -920,7 +908,7 @@ RQ_SRS008_AES_Decrypt_Function_InitializationVector_NotValidForMode = Requiremen
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the `iv` is specified for the `aes_decrypt` function\n'
'[ClickHouse] SHALL return an error if the `iv` is specified for the `decrypt` function\n'
'for a mode that does not need it.\n'
'\n'
),
@ -936,7 +924,7 @@ RQ_SRS008_AES_Decrypt_Function_AdditionalAuthenticationData_NotValidForMode = Re
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error if the `aad` is specified for the `aes_decrypt` function\n'
'[ClickHouse] SHALL return an error if the `aad` is specified for the `decrypt` function\n'
'for a mode that does not need it.\n'
'\n'
),
@ -952,7 +940,7 @@ RQ_SRS008_AES_Decrypt_Function_AdditionalAuthenticationData_Length = Requirement
type=None,
uid=None,
description=(
'[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `aes_decrypt` function.\n'
'[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `decrypt` function.\n'
'\n'
),
link=None,
@ -967,7 +955,7 @@ RQ_SRS008_AES_Decrypt_Function_NonGCMMode_KeyAndInitializationVector_Length = Re
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error when the `aes_decrypt` function is called with the following parameter values\n'
'[ClickHouse] SHALL return an error when the `decrypt` function is called with the following parameter values\n'
'when using non-GCM modes\n'
'\n'
'* `aes-128-ecb` mode and `key` is not 16 bytes or `iv` or `aad` is specified\n'
@ -1005,12 +993,12 @@ RQ_SRS008_AES_Decrypt_Function_GCMMode_KeyAndInitializationVector_Length = Requi
type=None,
uid=None,
description=(
'[ClickHouse] SHALL return an error when the `aes_decrypt` function is called with the following parameter values\n'
'[ClickHouse] SHALL return an error when the `decrypt` function is called with the following parameter values\n'
'when using GCM modes\n'
'\n'
'* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified or is less than 8 bytes\n'
'* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified or is less than 8 bytes\n'
'* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified or is less than 8 bytes\n'
'* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified\n'
'* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified\n'
'* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified\n'
'\n'
),
link=None,
@ -1043,7 +1031,7 @@ RQ_SRS008_AES_MySQL_Encrypt_Function_Syntax = Requirement(
'[ClickHouse] SHALL support the following syntax for the `aes_encrypt_mysql` function\n'
'\n'
'```sql\n'
'aes_encrypt_mysql(plaintext, key, mode, [iv])\n'
'aes_encrypt_mysql(mode, plaintext, key, [iv])\n'
'```\n'
'\n'
),
@ -1111,7 +1099,7 @@ RQ_SRS008_AES_MySQL_Encrypt_Function_Parameters_Mode_ValuesFormat = Requirement(
'of the `aes_encrypt_mysql` function where\n'
'the `key_length` SHALL specifies the length of the key and SHALL accept\n'
'`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption\n'
'mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB]. For example, `aes-256-ofb`.\n'
'mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB]. For example, `aes-256-ofb`.\n'
'\n'
),
link=None,
@ -1152,12 +1140,6 @@ RQ_SRS008_AES_MySQL_Encrypt_Function_Parameters_Mode_Values = Requirement(
'* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key\n'
'* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key\n'
'* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key\n'
'* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key\n'
'* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key\n'
'* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key\n'
'* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key\n'
'* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key\n'
'* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key\n'
'* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key\n'
'* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key\n'
'* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key\n'
@ -1393,7 +1375,7 @@ RQ_SRS008_AES_MySQL_Decrypt_Function_Syntax = Requirement(
'[ClickHouse] SHALL support the following syntax for the `aes_decrypt_mysql` function\n'
'\n'
'```sql\n'
'aes_decrypt_mysql(ciphertext, key, mode, [iv])\n'
'aes_decrypt_mysql(mode, ciphertext, key, [iv])\n'
'```\n'
'\n'
),
@ -1461,7 +1443,7 @@ RQ_SRS008_AES_MySQL_Decrypt_Function_Parameters_Mode_ValuesFormat = Requirement(
'of the `aes_decrypt_mysql` function where\n'
'the `key_length` SHALL specifies the length of the key and SHALL accept\n'
'`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption\n'
'mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB]. For example, `aes-256-ofb`.\n'
'mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB]. For example, `aes-256-ofb`.\n'
'\n'
),
link=None,
@ -1502,12 +1484,6 @@ RQ_SRS008_AES_MySQL_Decrypt_Function_Parameters_Mode_Values = Requirement(
'* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key\n'
'* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key\n'
'* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key\n'
'* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key\n'
'* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key\n'
'* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key\n'
'* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key\n'
'* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key\n'
'* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key\n'
'* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key\n'
'* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key\n'
'* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key\n'
@ -2170,54 +2146,54 @@ SHALL be measured.
#### RQ.SRS008.AES.Encrypt.Function
version: 1.0
[ClickHouse] SHALL support `aes_encrypt` function to encrypt data using [AES].
[ClickHouse] SHALL support `encrypt` function to encrypt data using [AES].
#### RQ.SRS008.AES.Encrypt.Function.Syntax
version: 1.0
[ClickHouse] SHALL support the following syntax for the `aes_encrypt` function
[ClickHouse] SHALL support the following syntax for the `encrypt` function
```sql
aes_encrypt(plaintext, key, mode, [iv, aad])
encrypt(mode, plaintext, key, [iv, aad])
```
#### RQ.SRS008.AES.Encrypt.Function.NIST.TestVectors
version: 1.0
[ClickHouse] `aes_encrypt` function output SHALL produce output that matches [NIST test vectors].
[ClickHouse] `encrypt` function output SHALL produce output that matches [NIST test vectors].
#### RQ.SRS008.AES.Encrypt.Function.Parameters.PlainText
version: 1.0
[ClickHouse] SHALL support `plaintext` accepting any data type as
the first parameter to the `aes_encrypt` function that SHALL specify the data to be encrypted.
the first parameter to the `encrypt` function that SHALL specify the data to be encrypted.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.Key
version: 1.0
[ClickHouse] SHALL support `key` with `String` or `FixedString` data types
as the second parameter to the `aes_encrypt` function that SHALL specify the encryption key.
as the second parameter to the `encrypt` function that SHALL specify the encryption key.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.Mode
version: 1.0
[ClickHouse] SHALL support `mode` with `String` or `FixedString` data types as the third parameter
to the `aes_encrypt` function that SHALL specify encryption key length and block encryption mode.
to the `encrypt` function that SHALL specify encryption key length and block encryption mode.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.Mode.ValuesFormat
version: 1.0
[ClickHouse] SHALL support values of the form `aes-[key length]-[mode]` for the `mode` parameter
of the `aes_encrypt` function where
of the `encrypt` function where
the `key_length` SHALL specifies the length of the key and SHALL accept
`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption
mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB] as well as
mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB] as well as
[CTR] and [GCM] as the values. For example, `aes-256-ofb`.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.Mode.Value.Invalid
version: 1.0
[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `aes_encrypt`
[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `encrypt`
function is not valid with the exception where such a mode is supported by the underlying
[OpenSSL] implementation.
@ -2225,7 +2201,7 @@ function is not valid with the exception where such a mode is supported by the u
version: 1.0
[ClickHouse] SHALL support the following [AES] block encryption modes as the value for the `mode` parameter
of the `aes_encrypt` function:
of the `encrypt` function:
* `aes-128-ecb` that SHALL use [ECB] block mode encryption with 128 bit key
* `aes-192-ecb` that SHALL use [ECB] block mode encryption with 192 bit key
@ -2233,12 +2209,6 @@ of the `aes_encrypt` function:
* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key
* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key
* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key
* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key
* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key
* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key
* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key
* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key
* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key
* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key
@ -2262,51 +2232,51 @@ of the `aes_encrypt` function:
version: 1.0
[ClickHouse] SHALL support `iv` with `String` or `FixedString` data types as the optional fourth
parameter to the `aes_encrypt` function that SHALL specify the initialization vector for block modes that require
parameter to the `encrypt` function that SHALL specify the initialization vector for block modes that require
it.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.AdditionalAuthenticatedData
version: 1.0
[ClickHouse] SHALL support `aad` with `String` or `FixedString` data types as the optional fifth
parameter to the `aes_encrypt` function that SHALL specify the additional authenticated data
parameter to the `encrypt` function that SHALL specify the additional authenticated data
for block modes that require it.
#### RQ.SRS008.AES.Encrypt.Function.Parameters.ReturnValue
version: 1.0
[ClickHouse] SHALL return the encrypted value of the data
using `String` data type as the result of `aes_encrypt` function.
using `String` data type as the result of `encrypt` function.
#### RQ.SRS008.AES.Encrypt.Function.Key.Length.InvalidLengthError
version: 1.0
[ClickHouse] SHALL return an error if the `key` length is not exact for the `aes_encrypt` function for a given block mode.
[ClickHouse] SHALL return an error if the `key` length is not exact for the `encrypt` function for a given block mode.
#### RQ.SRS008.AES.Encrypt.Function.InitializationVector.Length.InvalidLengthError
version: 1.0
[ClickHouse] SHALL return an error if the `iv` length is specified and not of the exact size for the `aes_encrypt` function for a given block mode.
[ClickHouse] SHALL return an error if the `iv` length is specified and not of the exact size for the `encrypt` function for a given block mode.
#### RQ.SRS008.AES.Encrypt.Function.InitializationVector.NotValidForMode
version: 1.0
[ClickHouse] SHALL return an error if the `iv` is specified for the `aes_encrypt` function for a mode that does not need it.
[ClickHouse] SHALL return an error if the `iv` is specified for the `encrypt` function for a mode that does not need it.
#### RQ.SRS008.AES.Encrypt.Function.AdditionalAuthenticationData.NotValidForMode
version: 1.0
[ClickHouse] SHALL return an error if the `aad` is specified for the `aes_encrypt` function for a mode that does not need it.
[ClickHouse] SHALL return an error if the `aad` is specified for the `encrypt` function for a mode that does not need it.
#### RQ.SRS008.AES.Encrypt.Function.AdditionalAuthenticationData.Length
version: 1.0
[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `aes_encrypt` function.
[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `encrypt` function.
#### RQ.SRS008.AES.Encrypt.Function.NonGCMMode.KeyAndInitializationVector.Length
version: 1.0
[ClickHouse] SHALL return an error when the `aes_encrypt` function is called with the following parameter values
[ClickHouse] SHALL return an error when the `encrypt` function is called with the following parameter values
when using non-GCM modes
* `aes-128-ecb` mode and `key` is not 16 bytes or `iv` or `aad` is specified
@ -2334,59 +2304,59 @@ when using non-GCM modes
#### RQ.SRS008.AES.Encrypt.Function.GCMMode.KeyAndInitializationVector.Length
version: 1.0
[ClickHouse] SHALL return an error when the `aes_encrypt` function is called with the following parameter values
[ClickHouse] SHALL return an error when the `encrypt` function is called with the following parameter values
when using GCM modes
* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified or is less than 8 bytes
* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified or is less than 8 bytes
* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified or is less than 8 bytes
* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified
* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified
* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified
#### RQ.SRS008.AES.Decrypt.Function
version: 1.0
[ClickHouse] SHALL support `aes_decrypt` function to decrypt data using [AES].
[ClickHouse] SHALL support `decrypt` function to decrypt data using [AES].
#### RQ.SRS008.AES.Decrypt.Function.Syntax
version: 1.0
[ClickHouse] SHALL support the following syntax for the `aes_decrypt` function
[ClickHouse] SHALL support the following syntax for the `decrypt` function
```sql
aes_decrypt(ciphertext, key, mode, [iv, aad])
decrypt(mode, ciphertext, key, [iv, aad])
```
#### RQ.SRS008.AES.Decrypt.Function.Parameters.CipherText
version: 1.0
[ClickHouse] SHALL support `ciphertext` accepting `FixedString` or `String` data types as
the first parameter to the `aes_decrypt` function that SHALL specify the data to be decrypted.
the first parameter to the `decrypt` function that SHALL specify the data to be decrypted.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.Key
version: 1.0
[ClickHouse] SHALL support `key` with `String` or `FixedString` data types
as the second parameter to the `aes_decrypt` function that SHALL specify the encryption key.
as the second parameter to the `decrypt` function that SHALL specify the encryption key.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.Mode
version: 1.0
[ClickHouse] SHALL support `mode` with `String` or `FixedString` data types as the third parameter
to the `aes_decrypt` function that SHALL specify encryption key length and block encryption mode.
to the `decrypt` function that SHALL specify encryption key length and block encryption mode.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.Mode.ValuesFormat
version: 1.0
[ClickHouse] SHALL support values of the form `aes-[key length]-[mode]` for the `mode` parameter
of the `aes_decrypt` function where
of the `decrypt` function where
the `key_length` SHALL specifies the length of the key and SHALL accept
`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption
mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB] as well as
mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB] as well as
[CTR] and [GCM] as the values. For example, `aes-256-ofb`.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.Mode.Value.Invalid
version: 1.0
[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `aes_decrypt`
[ClickHouse] SHALL return an error if the specified value for the `mode` parameter of the `decrypt`
function is not valid with the exception where such a mode is supported by the underlying
[OpenSSL] implementation.
@ -2394,7 +2364,7 @@ function is not valid with the exception where such a mode is supported by the u
version: 1.0
[ClickHouse] SHALL support the following [AES] block encryption modes as the value for the `mode` parameter
of the `aes_decrypt` function:
of the `decrypt` function:
* `aes-128-ecb` that SHALL use [ECB] block mode encryption with 128 bit key
* `aes-192-ecb` that SHALL use [ECB] block mode encryption with 192 bit key
@ -2402,12 +2372,6 @@ of the `aes_decrypt` function:
* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key
* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key
* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key
* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key
* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key
* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key
* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key
* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key
* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key
* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key
@ -2431,53 +2395,53 @@ of the `aes_decrypt` function:
version: 1.0
[ClickHouse] SHALL support `iv` with `String` or `FixedString` data types as the optional fourth
parameter to the `aes_decrypt` function that SHALL specify the initialization vector for block modes that require
parameter to the `decrypt` function that SHALL specify the initialization vector for block modes that require
it.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.AdditionalAuthenticatedData
version: 1.0
[ClickHouse] SHALL support `aad` with `String` or `FixedString` data types as the optional fifth
parameter to the `aes_decrypt` function that SHALL specify the additional authenticated data
parameter to the `decrypt` function that SHALL specify the additional authenticated data
for block modes that require it.
#### RQ.SRS008.AES.Decrypt.Function.Parameters.ReturnValue
version: 1.0
[ClickHouse] SHALL return the decrypted value of the data
using `String` data type as the result of `aes_decrypt` function.
using `String` data type as the result of `decrypt` function.
#### RQ.SRS008.AES.Decrypt.Function.Key.Length.InvalidLengthError
version: 1.0
[ClickHouse] SHALL return an error if the `key` length is not exact for the `aes_decrypt` function for a given block mode.
[ClickHouse] SHALL return an error if the `key` length is not exact for the `decrypt` function for a given block mode.
#### RQ.SRS008.AES.Decrypt.Function.InitializationVector.Length.InvalidLengthError
version: 1.0
[ClickHouse] SHALL return an error if the `iv` is speficified and the length is not exact for the `aes_decrypt` function for a given block mode.
[ClickHouse] SHALL return an error if the `iv` is speficified and the length is not exact for the `decrypt` function for a given block mode.
#### RQ.SRS008.AES.Decrypt.Function.InitializationVector.NotValidForMode
version: 1.0
[ClickHouse] SHALL return an error if the `iv` is specified for the `aes_decrypt` function
[ClickHouse] SHALL return an error if the `iv` is specified for the `decrypt` function
for a mode that does not need it.
#### RQ.SRS008.AES.Decrypt.Function.AdditionalAuthenticationData.NotValidForMode
version: 1.0
[ClickHouse] SHALL return an error if the `aad` is specified for the `aes_decrypt` function
[ClickHouse] SHALL return an error if the `aad` is specified for the `decrypt` function
for a mode that does not need it.
#### RQ.SRS008.AES.Decrypt.Function.AdditionalAuthenticationData.Length
version: 1.0
[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `aes_decrypt` function.
[ClickHouse] SHALL not limit the size of the `aad` parameter passed to the `decrypt` function.
#### RQ.SRS008.AES.Decrypt.Function.NonGCMMode.KeyAndInitializationVector.Length
version: 1.0
[ClickHouse] SHALL return an error when the `aes_decrypt` function is called with the following parameter values
[ClickHouse] SHALL return an error when the `decrypt` function is called with the following parameter values
when using non-GCM modes
* `aes-128-ecb` mode and `key` is not 16 bytes or `iv` or `aad` is specified
@ -2505,12 +2469,12 @@ when using non-GCM modes
#### RQ.SRS008.AES.Decrypt.Function.GCMMode.KeyAndInitializationVector.Length
version: 1.0
[ClickHouse] SHALL return an error when the `aes_decrypt` function is called with the following parameter values
[ClickHouse] SHALL return an error when the `decrypt` function is called with the following parameter values
when using GCM modes
* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified or is less than 8 bytes
* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified or is less than 8 bytes
* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified or is less than 8 bytes
* `aes-128-gcm` mode and `key` is not 16 bytes or `iv` is not specified
* `aes-192-gcm` mode and `key` is not 24 bytes or `iv` is not specified
* `aes-256-gcm` mode and `key` is not 32 bytes or `iv` is not specified
### MySQL Specific Functions
@ -2525,7 +2489,7 @@ version: 1.0
[ClickHouse] SHALL support the following syntax for the `aes_encrypt_mysql` function
```sql
aes_encrypt_mysql(plaintext, key, mode, [iv])
aes_encrypt_mysql(mode, plaintext, key, [iv])
```
#### RQ.SRS008.AES.MySQL.Encrypt.Function.Parameters.PlainText
@ -2553,7 +2517,7 @@ version: 1.0
of the `aes_encrypt_mysql` function where
the `key_length` SHALL specifies the length of the key and SHALL accept
`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption
mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB]. For example, `aes-256-ofb`.
mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB]. For example, `aes-256-ofb`.
#### RQ.SRS008.AES.MySQL.Encrypt.Function.Parameters.Mode.Value.Invalid
version: 1.0
@ -2574,12 +2538,6 @@ of the `aes_encrypt_mysql` function:
* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key
* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key
* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key
* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key
* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key
* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key
* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key
* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key
* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key
* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key
@ -2695,7 +2653,7 @@ version: 1.0
[ClickHouse] SHALL support the following syntax for the `aes_decrypt_mysql` function
```sql
aes_decrypt_mysql(ciphertext, key, mode, [iv])
aes_decrypt_mysql(mode, ciphertext, key, [iv])
```
#### RQ.SRS008.AES.MySQL.Decrypt.Function.Parameters.CipherText
@ -2723,7 +2681,7 @@ version: 1.0
of the `aes_decrypt_mysql` function where
the `key_length` SHALL specifies the length of the key and SHALL accept
`128`, `192`, or `256` as the values and the `mode` SHALL specify the block encryption
mode and SHALL accept [ECB], [CBC], [CFB1], [CFB8], [CFB128], or [OFB]. For example, `aes-256-ofb`.
mode and SHALL accept [ECB], [CBC], [CFB128], or [OFB]. For example, `aes-256-ofb`.
#### RQ.SRS008.AES.MySQL.Decrypt.Function.Parameters.Mode.Value.Invalid
version: 1.0
@ -2744,12 +2702,6 @@ of the `aes_decrypt_mysql` function:
* `aes-128-cbc` that SHALL use [CBC] block mode encryption with 128 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 192 bit key
* `aes-192-cbc` that SHALL use [CBC] block mode encryption with 256 bit key
* `aes-128-cfb1` that SHALL use [CFB1] block mode encryption with 128 bit key
* `aes-192-cfb1` that SHALL use [CFB1] block mode encryption with 192 bit key
* `aes-256-cfb1` that SHALL use [CFB1] block mode encryption with 256 bit key
* `aes-128-cfb8` that SHALL use [CFB8] block mode encryption with 128 bit key
* `aes-192-cfb8` that SHALL use [CFB8] block mode encryption with 192 bit key
* `aes-256-cfb8` that SHALL use [CFB8] block mode encryption with 256 bit key
* `aes-128-cfb128` that SHALL use [CFB128] block mode encryption with 128 bit key
* `aes-192-cfb128` that SHALL use [CFB128] block mode encryption with 192 bit key
* `aes-256-cfb128` that SHALL use [CFB128] block mode encryption with 256 bit key
@ -2874,8 +2826,6 @@ version: 1.0
[CBC]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_block_chaining_(CBC)
[ECB]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Electronic_codebook_(ECB)
[CFB]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_feedback_(CFB)
[CFB1]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_feedback_(CFB)
[CFB8]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_feedback_(CFB)
[CFB128]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Cipher_feedback_(CFB)
[OFB]: https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Output_feedback_(OFB)
[GDPR]: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation

34
tests/testflows/aes_encryption/tests/common.py
View File

@ -11,20 +11,6 @@ modes = [
("'aes-128-cbc'", 16, 16, None),
("'aes-192-cbc'", 24, 16, None),
("'aes-256-cbc'", 32, 16, None),
# cfb1
("'aes-128-cfb1'", 16, None, None),
("'aes-192-cfb1'", 24, None, None),
("'aes-256-cfb1'", 32, None, None),
("'aes-128-cfb1'", 16, 16, None),
("'aes-192-cfb1'", 24, 16, None),
("'aes-256-cfb1'", 32, 16, None),
# cfb8
("'aes-128-cfb8'", 16, None, None),
("'aes-192-cfb8'", 24, None, None),
("'aes-256-cfb8'", 32, None, None),
("'aes-128-cfb8'", 16, 16, None),
("'aes-192-cfb8'", 24, 16, None),
("'aes-256-cfb8'", 32, 16, None),
# cfb128
("'aes-128-cfb128'", 16, None, None),
("'aes-192-cfb128'", 24, None, None),
@ -73,26 +59,6 @@ mysql_modes = [
("'aes-192-cbc'", 32, 32),
("'aes-256-cbc'", 32, 16),
("'aes-256-cbc'", 64, 64),
# cfb1
("'aes-128-cfb1'", 16, None),
("'aes-192-cfb1'", 24, None),
("'aes-256-cfb1'", 32, None),
("'aes-128-cfb1'", 16, 16),
("'aes-128-cfb1'", 24, 24),
("'aes-192-cfb1'", 24, 16),
("'aes-192-cfb1'", 32, 32),
("'aes-256-cfb1'", 32, 16),
("'aes-256-cfb1'", 64, 64),
# cfb8
("'aes-128-cfb8'", 16, None),
("'aes-192-cfb8'", 24, None),
("'aes-256-cfb8'", 32, None),
("'aes-128-cfb8'", 16, 16),
("'aes-128-cfb8'", 24, 24),
("'aes-192-cfb8'", 24, 16),
("'aes-192-cfb8'", 32, 32),
("'aes-256-cfb8'", 32, 16),
("'aes-256-cfb8'", 64, 64),
# cfb128
("'aes-128-cfb128'", 16, None),
("'aes-192-cfb128'", 24, None),

16
tests/testflows/aes_encryption/tests/decrypt.py
View File

@ -121,6 +121,14 @@ def invalid_parameters(self):
message="DB::Exception: AAD can be only set for GCM-mode")
with Example("invalid mode value", requirements=[RQ_SRS008_AES_Decrypt_Function_Parameters_Mode_Value_Invalid("1.0")]):
with When("using unsupported cfb1 mode"):
decrypt(ciphertext=ciphertext, key="'0123456789123456'", mode="'aes-128-cfb1'", exitcode=36,
message="DB::Exception: Invalid mode: aes-128-cfb1")
with When("using unsupported cfb8 mode"):
decrypt(ciphertext=ciphertext, key="'0123456789123456'", mode="'aes-128-cfb8'", exitcode=36,
message="DB::Exception: Invalid mode: aes-128-cfb8")
with When("typo in the block algorithm"):
decrypt(ciphertext=ciphertext, key="'0123456789123456'", mode="'aes-128-eeb'", exitcode=36,
message="DB::Exception: Invalid mode: aes-128-eeb")
@ -161,14 +169,6 @@ def invalid_parameters(self):
("'aes-128-cbc'", 16, 16, None),
("'aes-192-cbc'", 24, 16, None),
("'aes-256-cbc'", 32, 16, None),
# CFB1
("'aes-128-cfb1'", 16, 16, None),
("'aes-192-cfb1'", 24, 16, None),
("'aes-256-cfb1'", 32, 16, None),
# CFB8
("'aes-128-cfb8'", 16, 16, None),
("'aes-192-cfb8'", 24, 16, None),
("'aes-256-cfb8'", 32, 16, None),
# CFB128
("'aes-128-cfb128'", 16, 16, None),
("'aes-192-cfb128'", 24, 16, None),

8
tests/testflows/aes_encryption/tests/decrypt_mysql.py
View File

@ -182,14 +182,6 @@ def invalid_parameters(self):
("'aes-128-cbc'", 16, 16),
("'aes-192-cbc'", 24, 16),
("'aes-256-cbc'", 32, 16),
# CFB1
("'aes-128-cfb1'", 16, 16),
("'aes-192-cfb1'", 24, 16),
("'aes-256-cfb1'", 32, 16),
# CFB8
("'aes-128-cfb8'", 16, 16),
("'aes-192-cfb8'", 24, 16),
("'aes-256-cfb8'", 32, 16),
# CFB128
("'aes-128-cfb128'", 16, 16),
("'aes-192-cfb128'", 24, 16),

18
tests/testflows/aes_encryption/tests/encrypt.py
View File

@ -76,6 +76,14 @@ def invalid_parameters(self):
message="DB::Exception: AAD can be only set for GCM-mode")
with Example("invalid mode value", requirements=[RQ_SRS008_AES_Encrypt_Function_Parameters_Mode_Value_Invalid("1.0")]):
with When("using unsupported cfb1 mode"):
encrypt(plaintext="'hello there'", key="'0123456789123456'", mode="'aes-128-cfb1'", exitcode=36,
message="DB::Exception: Invalid mode: aes-128-cfb1")
with When("using unsupported cfb8 mode"):
encrypt(plaintext="'hello there'", key="'0123456789123456'", mode="'aes-128-cfb8'", exitcode=36,
message="DB::Exception: Invalid mode: aes-128-cfb8")
with When("typo in the block algorithm"):
encrypt(plaintext="'hello there'", key="'0123456789123456'", mode="'aes-128-eeb'", exitcode=36,
message="DB::Exception: Invalid mode: aes-128-eeb")
@ -116,14 +124,6 @@ def invalid_parameters(self):
("'aes-128-cbc'", 16, 16, None),
("'aes-192-cbc'", 24, 16, None),
("'aes-256-cbc'", 32, 16, None),
# CFB1
("'aes-128-cfb1'", 16, 16, None),
("'aes-192-cfb1'", 24, 16, None),
("'aes-256-cfb1'", 32, 16, None),
# CFB8
("'aes-128-cfb8'", 16, 16, None),
("'aes-192-cfb8'", 24, 16, None),
("'aes-256-cfb8'", 32, 16, None),
# CFB128
("'aes-128-cfb128'", 16, 16, None),
("'aes-192-cfb128'", 24, 16, None),
@ -195,7 +195,7 @@ def invalid_key_or_iv_length_for_gcm(self, mode, key_len, iv_len, aad):
if iv_len is not None:
with When(f"iv is too short"):
encrypt(plaintext=plaintext, key=f"'{key[:key_len]}'", iv=f"'{iv[:iv_len-1]}'", mode=mode, exitcode=198, message="DB::Exception:")
encrypt(plaintext=plaintext, key=f"'{key[:key_len]}'", iv=f"'{iv[:iv_len-1]}'", mode=mode, exitcode=0)
else:
with When("iv is not specified"):
encrypt(plaintext=plaintext, key=f"'{key[:key_len]}'", mode=mode, exitcode=36, message="DB::Exception: Invalid IV size")

8
tests/testflows/aes_encryption/tests/encrypt_mysql.py
View File

@ -125,14 +125,6 @@ def invalid_parameters(self):
("'aes-128-cbc'", 16, 16),
("'aes-192-cbc'", 24, 16),
("'aes-256-cbc'", 32, 16),
# CFB1
("'aes-128-cfb1'", 16, 16),
("'aes-192-cfb1'", 24, 16),
("'aes-256-cfb1'", 32, 16),
# CFB8
("'aes-128-cfb8'", 16, 16),
("'aes-192-cfb8'", 24, 16),
("'aes-256-cfb8'", 32, 16),
# CFB128
("'aes-128-cfb128'", 16, 16),
("'aes-192-cfb128'", 24, 16),

624
tests/testflows/aes_encryption/tests/snapshots/encrypt.py.encrypt.snapshot
View File

@ -466,630 +466,6 @@ example_mode_aes_256_cbc_datatype_Enum8_iv_16_aad_None = r"""'FE35EEF14D6AA67AA2
example_mode_aes_256_cbc_datatype_Enum16_iv_16_aad_None = r"""'2D22C6B58140E591BEF7986C7770FF21'"""
example_mode_aes_128_cfb1_datatype_String_iv_None_aad_None = r"""'32'"""
example_mode_aes_128_cfb1_datatype_FixedString_iv_None_aad_None = r"""'32'"""
example_mode_aes_128_cfb1_datatype_UInt8_iv_None_aad_None = r"""'01'"""
example_mode_aes_128_cfb1_datatype_UInt16_iv_None_aad_None = r"""'0173'"""
example_mode_aes_128_cfb1_datatype_UInt32_iv_None_aad_None = r"""'01732E6B'"""
example_mode_aes_128_cfb1_datatype_UInt64_iv_None_aad_None = r"""'01732E6B82FCBDF6'"""
example_mode_aes_128_cfb1_datatype_Int8_iv_None_aad_None = r"""'01'"""
example_mode_aes_128_cfb1_datatype_Int16_iv_None_aad_None = r"""'0173'"""
example_mode_aes_128_cfb1_datatype_Int32_iv_None_aad_None = r"""'01732E6B'"""
example_mode_aes_128_cfb1_datatype_Int64_iv_None_aad_None = r"""'01732E6B82FCBDF6'"""
example_mode_aes_128_cfb1_datatype_Float32_iv_None_aad_None = r"""'0000B9AB'"""
example_mode_aes_128_cfb1_datatype_Float64_iv_None_aad_None = r"""'000000000000FFF6'"""
example_mode_aes_128_cfb1_datatype_Decimal32_iv_None_aad_None = r"""'2E09CA6A'"""
example_mode_aes_128_cfb1_datatype_Decimal64_iv_None_aad_None = r"""'2E09CA6A6DBEE799'"""
example_mode_aes_128_cfb1_datatype_Decimal128_iv_None_aad_None = r"""'2E09CA6A6DBEE79923BA65C6B78FD199'"""
example_mode_aes_128_cfb1_datatype_UUID_iv_None_aad_None = r"""'E590DFB515D3A518F85C66A6A5EC9C6E'"""
example_mode_aes_128_cfb1_datatype_Date_iv_None_aad_None = r"""'42F0'"""
example_mode_aes_128_cfb1_datatype_DateTime_iv_None_aad_None = r"""'5475EC3D'"""
example_mode_aes_128_cfb1_datatype_DateTime64_iv_None_aad_None = r"""'21CDF1128AE44A37'"""
example_mode_aes_128_cfb1_datatype_LowCardinality_iv_None_aad_None = r"""'32'"""
example_mode_aes_128_cfb1_datatype_Array_iv_None_aad_None = r"""'0170'"""
example_mode_aes_128_cfb1_datatype_NULL_iv_None_aad_None = r"""'\\N'"""
example_mode_aes_128_cfb1_datatype_IPv4_iv_None_aad_None = r"""'240A9E43'"""
example_mode_aes_128_cfb1_datatype_IPv6_iv_None_aad_None = r"""'2E642EF4B07D9B1251BE3B3CBDBCC6F6'"""
example_mode_aes_128_cfb1_datatype_Enum8_iv_None_aad_None = r"""'01'"""
example_mode_aes_128_cfb1_datatype_Enum16_iv_None_aad_None = r"""'0173'"""
example_mode_aes_192_cfb1_datatype_String_iv_None_aad_None = r"""'23'"""
example_mode_aes_192_cfb1_datatype_FixedString_iv_None_aad_None = r"""'23'"""
example_mode_aes_192_cfb1_datatype_UInt8_iv_None_aad_None = r"""'01'"""
example_mode_aes_192_cfb1_datatype_UInt16_iv_None_aad_None = r"""'01F9'"""
example_mode_aes_192_cfb1_datatype_UInt32_iv_None_aad_None = r"""'01F92AD3'"""
example_mode_aes_192_cfb1_datatype_UInt64_iv_None_aad_None = r"""'01F92AD38CB10028'"""
example_mode_aes_192_cfb1_datatype_Int8_iv_None_aad_None = r"""'01'"""
example_mode_aes_192_cfb1_datatype_Int16_iv_None_aad_None = r"""'01F9'"""
example_mode_aes_192_cfb1_datatype_Int32_iv_None_aad_None = r"""'01F92AD3'"""
example_mode_aes_192_cfb1_datatype_Int64_iv_None_aad_None = r"""'01F92AD38CB10028'"""
example_mode_aes_192_cfb1_datatype_Float32_iv_None_aad_None = r"""'0000FCAE'"""
example_mode_aes_192_cfb1_datatype_Float64_iv_None_aad_None = r"""'000000000000A79C'"""
example_mode_aes_192_cfb1_datatype_Decimal32_iv_None_aad_None = r"""'3F406C3F'"""
example_mode_aes_192_cfb1_datatype_Decimal64_iv_None_aad_None = r"""'3F406C3F3A41B134'"""
example_mode_aes_192_cfb1_datatype_Decimal128_iv_None_aad_None = r"""'3F406C3F3A41B134310D6B68BEBC5708'"""
example_mode_aes_192_cfb1_datatype_UUID_iv_None_aad_None = r"""'B7F80F1BDCA1C4193E5AB11078FEA213'"""
example_mode_aes_192_cfb1_datatype_Date_iv_None_aad_None = r"""'6FF6'"""
example_mode_aes_192_cfb1_datatype_DateTime_iv_None_aad_None = r"""'7013E555'"""
example_mode_aes_192_cfb1_datatype_DateTime64_iv_None_aad_None = r"""'371AF0291536F5B7'"""
example_mode_aes_192_cfb1_datatype_LowCardinality_iv_None_aad_None = r"""'23'"""
example_mode_aes_192_cfb1_datatype_Array_iv_None_aad_None = r"""'01FA'"""
example_mode_aes_192_cfb1_datatype_NULL_iv_None_aad_None = r"""'\\N'"""
example_mode_aes_192_cfb1_datatype_IPv4_iv_None_aad_None = r"""'33895F70'"""
example_mode_aes_192_cfb1_datatype_IPv6_iv_None_aad_None = r"""'3F24552946522B931290F904186B055A'"""
example_mode_aes_192_cfb1_datatype_Enum8_iv_None_aad_None = r"""'01'"""
example_mode_aes_192_cfb1_datatype_Enum16_iv_None_aad_None = r"""'01F9'"""
example_mode_aes_256_cfb1_datatype_String_iv_None_aad_None = r"""'9E'"""
example_mode_aes_256_cfb1_datatype_FixedString_iv_None_aad_None = r"""'9E'"""
example_mode_aes_256_cfb1_datatype_UInt8_iv_None_aad_None = r"""'B9'"""
example_mode_aes_256_cfb1_datatype_UInt16_iv_None_aad_None = r"""'B9ED'"""
example_mode_aes_256_cfb1_datatype_UInt32_iv_None_aad_None = r"""'B9ED4764'"""
example_mode_aes_256_cfb1_datatype_UInt64_iv_None_aad_None = r"""'B9ED4764E7BF3C1C'"""
example_mode_aes_256_cfb1_datatype_Int8_iv_None_aad_None = r"""'B9'"""
example_mode_aes_256_cfb1_datatype_Int16_iv_None_aad_None = r"""'B9ED'"""
example_mode_aes_256_cfb1_datatype_Int32_iv_None_aad_None = r"""'B9ED4764'"""
example_mode_aes_256_cfb1_datatype_Int64_iv_None_aad_None = r"""'B9ED4764E7BF3C1C'"""
example_mode_aes_256_cfb1_datatype_Float32_iv_None_aad_None = r"""'B85F0E63'"""
example_mode_aes_256_cfb1_datatype_Float64_iv_None_aad_None = r"""'B85FDB5A8FE0C0BB'"""
example_mode_aes_256_cfb1_datatype_Decimal32_iv_None_aad_None = r"""'891B85B3'"""
example_mode_aes_256_cfb1_datatype_Decimal64_iv_None_aad_None = r"""'891B85B3C1BA6EE1'"""
example_mode_aes_256_cfb1_datatype_Decimal128_iv_None_aad_None = r"""'891B85B3C1BA6EE137EF658F618D1F3F'"""
example_mode_aes_256_cfb1_datatype_UUID_iv_None_aad_None = r"""'121B5EE9929417BC1CDBDB390BC93B4A'"""
example_mode_aes_256_cfb1_datatype_Date_iv_None_aad_None = r"""'D40F'"""
example_mode_aes_256_cfb1_datatype_DateTime_iv_None_aad_None = r"""'CF27297C'"""
example_mode_aes_256_cfb1_datatype_DateTime64_iv_None_aad_None = r"""'8773F350CD394D36'"""
example_mode_aes_256_cfb1_datatype_LowCardinality_iv_None_aad_None = r"""'9E'"""
example_mode_aes_256_cfb1_datatype_Array_iv_None_aad_None = r"""'B9EE'"""
example_mode_aes_256_cfb1_datatype_NULL_iv_None_aad_None = r"""'\\N'"""
example_mode_aes_256_cfb1_datatype_IPv4_iv_None_aad_None = r"""'8383FD3C'"""
example_mode_aes_256_cfb1_datatype_IPv6_iv_None_aad_None = r"""'897A84A02FD451D3DDB92FF290BF9B7C'"""
example_mode_aes_256_cfb1_datatype_Enum8_iv_None_aad_None = r"""'B9'"""
example_mode_aes_256_cfb1_datatype_Enum16_iv_None_aad_None = r"""'B9ED'"""
example_mode_aes_128_cfb1_datatype_String_iv_16_aad_None = r"""'37'"""
example_mode_aes_128_cfb1_datatype_FixedString_iv_16_aad_None = r"""'37'"""
example_mode_aes_128_cfb1_datatype_UInt8_iv_16_aad_None = r"""'01'"""
example_mode_aes_128_cfb1_datatype_UInt16_iv_16_aad_None = r"""'0188'"""
example_mode_aes_128_cfb1_datatype_UInt32_iv_16_aad_None = r"""'01882D46'"""
example_mode_aes_128_cfb1_datatype_UInt64_iv_16_aad_None = r"""'01882D46FCCCD695'"""
example_mode_aes_128_cfb1_datatype_Int8_iv_16_aad_None = r"""'01'"""
example_mode_aes_128_cfb1_datatype_Int16_iv_16_aad_None = r"""'0188'"""
example_mode_aes_128_cfb1_datatype_Int32_iv_16_aad_None = r"""'01882D46'"""
example_mode_aes_128_cfb1_datatype_Int64_iv_16_aad_None = r"""'01882D46FCCCD695'"""
example_mode_aes_128_cfb1_datatype_Float32_iv_16_aad_None = r"""'00B931F2'"""
example_mode_aes_128_cfb1_datatype_Float64_iv_16_aad_None = r"""'00B99AAE199C3C93'"""
example_mode_aes_128_cfb1_datatype_Decimal32_iv_16_aad_None = r"""'2D557511'"""
example_mode_aes_128_cfb1_datatype_Decimal64_iv_16_aad_None = r"""'2D557511511F90FB'"""
example_mode_aes_128_cfb1_datatype_Decimal128_iv_16_aad_None = r"""'2D557511511F90FBC464352E8A02FC51'"""
example_mode_aes_128_cfb1_datatype_UUID_iv_16_aad_None = r"""'8AE269086C72AD682EB92ABA6CA58E49'"""
example_mode_aes_128_cfb1_datatype_Date_iv_16_aad_None = r"""'5FC9'"""
example_mode_aes_128_cfb1_datatype_DateTime_iv_16_aad_None = r"""'42970865'"""
example_mode_aes_128_cfb1_datatype_DateTime64_iv_16_aad_None = r"""'20B310A2F7EF8460'"""
example_mode_aes_128_cfb1_datatype_LowCardinality_iv_16_aad_None = r"""'37'"""
example_mode_aes_128_cfb1_datatype_Array_iv_16_aad_None = r"""'018A'"""
example_mode_aes_128_cfb1_datatype_NULL_iv_16_aad_None = r"""'\\N'"""
example_mode_aes_128_cfb1_datatype_IPv4_iv_16_aad_None = r"""'27476DAF'"""
example_mode_aes_128_cfb1_datatype_IPv6_iv_16_aad_None = r"""'2D311FBDC0A5C652AAD863398F94C5C3'"""
example_mode_aes_128_cfb1_datatype_Enum8_iv_16_aad_None = r"""'01'"""
example_mode_aes_128_cfb1_datatype_Enum16_iv_16_aad_None = r"""'0188'"""
example_mode_aes_192_cfb1_datatype_String_iv_16_aad_None = r"""'38'"""
example_mode_aes_192_cfb1_datatype_FixedString_iv_16_aad_None = r"""'38'"""
example_mode_aes_192_cfb1_datatype_UInt8_iv_16_aad_None = r"""'06'"""
example_mode_aes_192_cfb1_datatype_UInt16_iv_16_aad_None = r"""'069E'"""
example_mode_aes_192_cfb1_datatype_UInt32_iv_16_aad_None = r"""'069E2E37'"""
example_mode_aes_192_cfb1_datatype_UInt64_iv_16_aad_None = r"""'069E2E370A6D9872'"""
example_mode_aes_192_cfb1_datatype_Int8_iv_16_aad_None = r"""'06'"""
example_mode_aes_192_cfb1_datatype_Int16_iv_16_aad_None = r"""'069E'"""
example_mode_aes_192_cfb1_datatype_Int32_iv_16_aad_None = r"""'069E2E37'"""
example_mode_aes_192_cfb1_datatype_Int64_iv_16_aad_None = r"""'069E2E370A6D9872'"""
example_mode_aes_192_cfb1_datatype_Float32_iv_16_aad_None = r"""'07955BCF'"""
example_mode_aes_192_cfb1_datatype_Float64_iv_16_aad_None = r"""'0795A57CA222A36E'"""
example_mode_aes_192_cfb1_datatype_Decimal32_iv_16_aad_None = r"""'2A15BB86'"""
example_mode_aes_192_cfb1_datatype_Decimal64_iv_16_aad_None = r"""'2A15BB86FB961E7D'"""
example_mode_aes_192_cfb1_datatype_Decimal128_iv_16_aad_None = r"""'2A15BB86FB961E7D0DD5055987176AF4'"""
example_mode_aes_192_cfb1_datatype_UUID_iv_16_aad_None = r"""'DA2338793C7B9E0F6722E272062F5EA1'"""
example_mode_aes_192_cfb1_datatype_Date_iv_16_aad_None = r"""'4AAB'"""
example_mode_aes_192_cfb1_datatype_DateTime_iv_16_aad_None = r"""'5B6A8EE6'"""
example_mode_aes_192_cfb1_datatype_DateTime64_iv_16_aad_None = r"""'23C4E2A707F73EF4'"""
example_mode_aes_192_cfb1_datatype_LowCardinality_iv_16_aad_None = r"""'38'"""
example_mode_aes_192_cfb1_datatype_Array_iv_16_aad_None = r"""'069C'"""
example_mode_aes_192_cfb1_datatype_NULL_iv_16_aad_None = r"""'\\N'"""
example_mode_aes_192_cfb1_datatype_IPv4_iv_16_aad_None = r"""'2470A839'"""
example_mode_aes_192_cfb1_datatype_IPv6_iv_16_aad_None = r"""'2A712A746781131B2DC4EB92E31C72FA'"""
example_mode_aes_192_cfb1_datatype_Enum8_iv_16_aad_None = r"""'06'"""
example_mode_aes_192_cfb1_datatype_Enum16_iv_16_aad_None = r"""'069E'"""
example_mode_aes_256_cfb1_datatype_String_iv_16_aad_None = r"""'5A'"""
example_mode_aes_256_cfb1_datatype_FixedString_iv_16_aad_None = r"""'5A'"""
example_mode_aes_256_cfb1_datatype_UInt8_iv_16_aad_None = r"""'7E'"""
example_mode_aes_256_cfb1_datatype_UInt16_iv_16_aad_None = r"""'7EA1'"""
example_mode_aes_256_cfb1_datatype_UInt32_iv_16_aad_None = r"""'7EA17214'"""
example_mode_aes_256_cfb1_datatype_UInt64_iv_16_aad_None = r"""'7EA172144C6F5578'"""
example_mode_aes_256_cfb1_datatype_Int8_iv_16_aad_None = r"""'7E'"""
example_mode_aes_256_cfb1_datatype_Int16_iv_16_aad_None = r"""'7EA1'"""
example_mode_aes_256_cfb1_datatype_Int32_iv_16_aad_None = r"""'7EA17214'"""
example_mode_aes_256_cfb1_datatype_Int64_iv_16_aad_None = r"""'7EA172144C6F5578'"""
example_mode_aes_256_cfb1_datatype_Float32_iv_16_aad_None = r"""'7F630BBA'"""
example_mode_aes_256_cfb1_datatype_Float64_iv_16_aad_None = r"""'7F638DFAAA434E6B'"""
example_mode_aes_256_cfb1_datatype_Decimal32_iv_16_aad_None = r"""'4F430FBA'"""
example_mode_aes_256_cfb1_datatype_Decimal64_iv_16_aad_None = r"""'4F430FBAA3AAF884'"""
example_mode_aes_256_cfb1_datatype_Decimal128_iv_16_aad_None = r"""'4F430FBAA3AAF8845DB7BBA7F98F49C4'"""
example_mode_aes_256_cfb1_datatype_UUID_iv_16_aad_None = r"""'B06F4A8C3BF3A8D32D113D0D40397C8F'"""
example_mode_aes_256_cfb1_datatype_Date_iv_16_aad_None = r"""'30CE'"""
example_mode_aes_256_cfb1_datatype_DateTime_iv_16_aad_None = r"""'206545FA'"""
example_mode_aes_256_cfb1_datatype_DateTime64_iv_16_aad_None = r"""'43756F28C68E3D55'"""
example_mode_aes_256_cfb1_datatype_LowCardinality_iv_16_aad_None = r"""'5A'"""
example_mode_aes_256_cfb1_datatype_Array_iv_16_aad_None = r"""'7EA3'"""
example_mode_aes_256_cfb1_datatype_NULL_iv_16_aad_None = r"""'\\N'"""
example_mode_aes_256_cfb1_datatype_IPv4_iv_16_aad_None = r"""'4526FCCF'"""
example_mode_aes_256_cfb1_datatype_IPv6_iv_16_aad_None = r"""'4F23BDAC741DB8767CE6AE24888545A2'"""
example_mode_aes_256_cfb1_datatype_Enum8_iv_16_aad_None = r"""'7E'"""
example_mode_aes_256_cfb1_datatype_Enum16_iv_16_aad_None = r"""'7EA1'"""
example_mode_aes_128_cfb8_datatype_String_iv_None_aad_None = r"""'21'"""
example_mode_aes_128_cfb8_datatype_FixedString_iv_None_aad_None = r"""'21'"""
example_mode_aes_128_cfb8_datatype_UInt8_iv_None_aad_None = r"""'11'"""
example_mode_aes_128_cfb8_datatype_UInt16_iv_None_aad_None = r"""'11FF'"""
example_mode_aes_128_cfb8_datatype_UInt32_iv_None_aad_None = r"""'11FF20C0'"""
example_mode_aes_128_cfb8_datatype_UInt64_iv_None_aad_None = r"""'11FF20C07A65C524'"""
example_mode_aes_128_cfb8_datatype_Int8_iv_None_aad_None = r"""'11'"""
example_mode_aes_128_cfb8_datatype_Int16_iv_None_aad_None = r"""'11FF'"""
example_mode_aes_128_cfb8_datatype_Int32_iv_None_aad_None = r"""'11FF20C0'"""
example_mode_aes_128_cfb8_datatype_Int64_iv_None_aad_None = r"""'11FF20C07A65C524'"""
example_mode_aes_128_cfb8_datatype_Float32_iv_None_aad_None = r"""'10671940'"""
example_mode_aes_128_cfb8_datatype_Float64_iv_None_aad_None = r"""'106799607DBF56DA'"""
example_mode_aes_128_cfb8_datatype_Decimal32_iv_None_aad_None = r"""'30756C94'"""
example_mode_aes_128_cfb8_datatype_Decimal64_iv_None_aad_None = r"""'30756C9417D3C023'"""
example_mode_aes_128_cfb8_datatype_Decimal128_iv_None_aad_None = r"""'30756C9417D3C023705550B7BEF872FF'"""
example_mode_aes_128_cfb8_datatype_UUID_iv_None_aad_None = r"""'F7FE50CF0647659CB0D401B5C0E259D3'"""
example_mode_aes_128_cfb8_datatype_Date_iv_None_aad_None = r"""'46EA'"""
example_mode_aes_128_cfb8_datatype_DateTime_iv_None_aad_None = r"""'5EB4905E'"""
example_mode_aes_128_cfb8_datatype_DateTime64_iv_None_aad_None = r"""'3BB70F8E64D7C6A7'"""
example_mode_aes_128_cfb8_datatype_LowCardinality_iv_None_aad_None = r"""'21'"""
example_mode_aes_128_cfb8_datatype_Array_iv_None_aad_None = r"""'11FD'"""
example_mode_aes_128_cfb8_datatype_NULL_iv_None_aad_None = r"""'\\N'"""
example_mode_aes_128_cfb8_datatype_IPv4_iv_None_aad_None = r"""'3DC2BE9E'"""
example_mode_aes_128_cfb8_datatype_IPv6_iv_None_aad_None = r"""'303ABAC6F4F380D9F077DFC79C82D1A1'"""
example_mode_aes_128_cfb8_datatype_Enum8_iv_None_aad_None = r"""'11'"""
example_mode_aes_128_cfb8_datatype_Enum16_iv_None_aad_None = r"""'11FF'"""
example_mode_aes_192_cfb8_datatype_String_iv_None_aad_None = r"""'36'"""
example_mode_aes_192_cfb8_datatype_FixedString_iv_None_aad_None = r"""'36'"""
example_mode_aes_192_cfb8_datatype_UInt8_iv_None_aad_None = r"""'06'"""
example_mode_aes_192_cfb8_datatype_UInt16_iv_None_aad_None = r"""'0683'"""
example_mode_aes_192_cfb8_datatype_UInt32_iv_None_aad_None = r"""'0683139D'"""
example_mode_aes_192_cfb8_datatype_UInt64_iv_None_aad_None = r"""'0683139D83E2EFAC'"""
example_mode_aes_192_cfb8_datatype_Int8_iv_None_aad_None = r"""'06'"""
example_mode_aes_192_cfb8_datatype_Int16_iv_None_aad_None = r"""'0683'"""
example_mode_aes_192_cfb8_datatype_Int32_iv_None_aad_None = r"""'0683139D'"""
example_mode_aes_192_cfb8_datatype_Int64_iv_None_aad_None = r"""'0683139D83E2EFAC'"""
example_mode_aes_192_cfb8_datatype_Float32_iv_None_aad_None = r"""'07EDB300'"""
example_mode_aes_192_cfb8_datatype_Float64_iv_None_aad_None = r"""'07ED3359B91DEF3B'"""
example_mode_aes_192_cfb8_datatype_Decimal32_iv_None_aad_None = r"""'275947FE'"""
example_mode_aes_192_cfb8_datatype_Decimal64_iv_None_aad_None = r"""'275947FE4B3390EE'"""
example_mode_aes_192_cfb8_datatype_Decimal128_iv_None_aad_None = r"""'275947FE4B3390EE7A2541BC8E2F58D7'"""
example_mode_aes_192_cfb8_datatype_UUID_iv_None_aad_None = r"""'E0C082C032FB8ED756F9345E270A283B'"""
example_mode_aes_192_cfb8_datatype_Date_iv_None_aad_None = r"""'5109'"""
example_mode_aes_192_cfb8_datatype_DateTime_iv_None_aad_None = r"""'49713150'"""
example_mode_aes_192_cfb8_datatype_DateTime64_iv_None_aad_None = r"""'2C10FB4FEC471EF7'"""
example_mode_aes_192_cfb8_datatype_LowCardinality_iv_None_aad_None = r"""'36'"""
example_mode_aes_192_cfb8_datatype_Array_iv_None_aad_None = r"""'0681'"""
example_mode_aes_192_cfb8_datatype_NULL_iv_None_aad_None = r"""'\\N'"""
example_mode_aes_192_cfb8_datatype_IPv4_iv_None_aad_None = r"""'2A41C8F2'"""
example_mode_aes_192_cfb8_datatype_IPv6_iv_None_aad_None = r"""'271682C9379C5A46C68488DC33D0C278'"""
example_mode_aes_192_cfb8_datatype_Enum8_iv_None_aad_None = r"""'06'"""
example_mode_aes_192_cfb8_datatype_Enum16_iv_None_aad_None = r"""'0683'"""
example_mode_aes_256_cfb8_datatype_String_iv_None_aad_None = r"""'81'"""
example_mode_aes_256_cfb8_datatype_FixedString_iv_None_aad_None = r"""'81'"""
example_mode_aes_256_cfb8_datatype_UInt8_iv_None_aad_None = r"""'B1'"""
example_mode_aes_256_cfb8_datatype_UInt16_iv_None_aad_None = r"""'B15F'"""
example_mode_aes_256_cfb8_datatype_UInt32_iv_None_aad_None = r"""'B15FD91F'"""
example_mode_aes_256_cfb8_datatype_UInt64_iv_None_aad_None = r"""'B15FD91F702960CB'"""
example_mode_aes_256_cfb8_datatype_Int8_iv_None_aad_None = r"""'B1'"""
example_mode_aes_256_cfb8_datatype_Int16_iv_None_aad_None = r"""'B15F'"""
example_mode_aes_256_cfb8_datatype_Int32_iv_None_aad_None = r"""'B15FD91F'"""
example_mode_aes_256_cfb8_datatype_Int64_iv_None_aad_None = r"""'B15FD91F702960CB'"""
example_mode_aes_256_cfb8_datatype_Float32_iv_None_aad_None = r"""'B05A05BE'"""
example_mode_aes_256_cfb8_datatype_Float64_iv_None_aad_None = r"""'B05A8510DB2F16A0'"""
example_mode_aes_256_cfb8_datatype_Decimal32_iv_None_aad_None = r"""'906B5777'"""
example_mode_aes_256_cfb8_datatype_Decimal64_iv_None_aad_None = r"""'906B57771CB81F37'"""
example_mode_aes_256_cfb8_datatype_Decimal128_iv_None_aad_None = r"""'906B57771CB81F378D932AE788527DE2'"""
example_mode_aes_256_cfb8_datatype_UUID_iv_None_aad_None = r"""'57FB06BA6F4BA51D7A61D65A7827A18D'"""
example_mode_aes_256_cfb8_datatype_Date_iv_None_aad_None = r"""'E652'"""
example_mode_aes_256_cfb8_datatype_DateTime_iv_None_aad_None = r"""'FEEEADA4'"""
example_mode_aes_256_cfb8_datatype_DateTime64_iv_None_aad_None = r"""'9BB36DEF05FF5975'"""
example_mode_aes_256_cfb8_datatype_LowCardinality_iv_None_aad_None = r"""'81'"""
example_mode_aes_256_cfb8_datatype_Array_iv_None_aad_None = r"""'B15D'"""
example_mode_aes_256_cfb8_datatype_NULL_iv_None_aad_None = r"""'\\N'"""
example_mode_aes_256_cfb8_datatype_IPv4_iv_None_aad_None = r"""'9DC836F3'"""
example_mode_aes_256_cfb8_datatype_IPv6_iv_None_aad_None = r"""'90242F0083C8B0221DF3B5755EC8D99C'"""
example_mode_aes_256_cfb8_datatype_Enum8_iv_None_aad_None = r"""'B1'"""
example_mode_aes_256_cfb8_datatype_Enum16_iv_None_aad_None = r"""'B15F'"""
example_mode_aes_128_cfb8_datatype_String_iv_16_aad_None = r"""'03'"""
example_mode_aes_128_cfb8_datatype_FixedString_iv_16_aad_None = r"""'03'"""
example_mode_aes_128_cfb8_datatype_UInt8_iv_16_aad_None = r"""'33'"""
example_mode_aes_128_cfb8_datatype_UInt16_iv_16_aad_None = r"""'3368'"""
example_mode_aes_128_cfb8_datatype_UInt32_iv_16_aad_None = r"""'3368AB64'"""
example_mode_aes_128_cfb8_datatype_UInt64_iv_16_aad_None = r"""'3368AB6421744B7E'"""
example_mode_aes_128_cfb8_datatype_Int8_iv_16_aad_None = r"""'33'"""
example_mode_aes_128_cfb8_datatype_Int16_iv_16_aad_None = r"""'3368'"""
example_mode_aes_128_cfb8_datatype_Int32_iv_16_aad_None = r"""'3368AB64'"""
example_mode_aes_128_cfb8_datatype_Int64_iv_16_aad_None = r"""'3368AB6421744B7E'"""
example_mode_aes_128_cfb8_datatype_Float32_iv_16_aad_None = r"""'3232B23D'"""
example_mode_aes_128_cfb8_datatype_Float64_iv_16_aad_None = r"""'323232323232C2A6'"""
example_mode_aes_128_cfb8_datatype_Decimal32_iv_16_aad_None = r"""'12ABA873'"""
example_mode_aes_128_cfb8_datatype_Decimal64_iv_16_aad_None = r"""'12ABA873E2E24473'"""
example_mode_aes_128_cfb8_datatype_Decimal128_iv_16_aad_None = r"""'12ABA873E2E24473166434D82270A19C'"""
example_mode_aes_128_cfb8_datatype_UUID_iv_16_aad_None = r"""'D529D970A38CCB794F856E4458D0E2D4'"""
example_mode_aes_128_cfb8_datatype_Date_iv_16_aad_None = r"""'6445'"""
example_mode_aes_128_cfb8_datatype_DateTime_iv_16_aad_None = r"""'7CBF2FDA'"""
example_mode_aes_128_cfb8_datatype_DateTime64_iv_16_aad_None = r"""'191C7B5A063F562D'"""
example_mode_aes_128_cfb8_datatype_LowCardinality_iv_16_aad_None = r"""'03'"""
example_mode_aes_128_cfb8_datatype_Array_iv_16_aad_None = r"""'336A'"""
example_mode_aes_128_cfb8_datatype_NULL_iv_16_aad_None = r"""'\\N'"""
example_mode_aes_128_cfb8_datatype_IPv4_iv_16_aad_None = r"""'1F0A367A'"""
example_mode_aes_128_cfb8_datatype_IPv6_iv_16_aad_None = r"""'12E4B19D97DC9F2C61A671C51B1201D2'"""
example_mode_aes_128_cfb8_datatype_Enum8_iv_16_aad_None = r"""'33'"""
example_mode_aes_128_cfb8_datatype_Enum16_iv_16_aad_None = r"""'3368'"""
example_mode_aes_192_cfb8_datatype_String_iv_16_aad_None = r"""'59'"""
example_mode_aes_192_cfb8_datatype_FixedString_iv_16_aad_None = r"""'59'"""
example_mode_aes_192_cfb8_datatype_UInt8_iv_16_aad_None = r"""'69'"""
example_mode_aes_192_cfb8_datatype_UInt16_iv_16_aad_None = r"""'6924'"""
example_mode_aes_192_cfb8_datatype_UInt32_iv_16_aad_None = r"""'6924A086'"""
example_mode_aes_192_cfb8_datatype_UInt64_iv_16_aad_None = r"""'6924A086F8F61C3C'"""
example_mode_aes_192_cfb8_datatype_Int8_iv_16_aad_None = r"""'69'"""
example_mode_aes_192_cfb8_datatype_Int16_iv_16_aad_None = r"""'6924'"""
example_mode_aes_192_cfb8_datatype_Int32_iv_16_aad_None = r"""'6924A086'"""
example_mode_aes_192_cfb8_datatype_Int64_iv_16_aad_None = r"""'6924A086F8F61C3C'"""
example_mode_aes_192_cfb8_datatype_Float32_iv_16_aad_None = r"""'6861DF7A'"""
example_mode_aes_192_cfb8_datatype_Float64_iv_16_aad_None = r"""'68615FBC184B8D50'"""
example_mode_aes_192_cfb8_datatype_Decimal32_iv_16_aad_None = r"""'48041B5C'"""
example_mode_aes_192_cfb8_datatype_Decimal64_iv_16_aad_None = r"""'48041B5C6BEF70DD'"""
example_mode_aes_192_cfb8_datatype_Decimal128_iv_16_aad_None = r"""'48041B5C6BEF70DD4CDABC1FC8C2C684'"""
example_mode_aes_192_cfb8_datatype_UUID_iv_16_aad_None = r"""'8FF1142976A9808C0F475A3D2A34D06D'"""
example_mode_aes_192_cfb8_datatype_Date_iv_16_aad_None = r"""'3E6D'"""
example_mode_aes_192_cfb8_datatype_DateTime_iv_16_aad_None = r"""'269AFDC7'"""
example_mode_aes_192_cfb8_datatype_DateTime64_iv_16_aad_None = r"""'4350703E05F43A50'"""
example_mode_aes_192_cfb8_datatype_LowCardinality_iv_16_aad_None = r"""'59'"""
example_mode_aes_192_cfb8_datatype_Array_iv_16_aad_None = r"""'6926'"""
example_mode_aes_192_cfb8_datatype_NULL_iv_16_aad_None = r"""'\\N'"""
example_mode_aes_192_cfb8_datatype_IPv4_iv_16_aad_None = r"""'45979A4C'"""
example_mode_aes_192_cfb8_datatype_IPv6_iv_16_aad_None = r"""'484BFA49756D837181B7EE03EBCF2B79'"""
example_mode_aes_192_cfb8_datatype_Enum8_iv_16_aad_None = r"""'69'"""
example_mode_aes_192_cfb8_datatype_Enum16_iv_16_aad_None = r"""'6924'"""
example_mode_aes_256_cfb8_datatype_String_iv_16_aad_None = r"""'58'"""
example_mode_aes_256_cfb8_datatype_FixedString_iv_16_aad_None = r"""'58'"""
example_mode_aes_256_cfb8_datatype_UInt8_iv_16_aad_None = r"""'68'"""
example_mode_aes_256_cfb8_datatype_UInt16_iv_16_aad_None = r"""'682C'"""
example_mode_aes_256_cfb8_datatype_UInt32_iv_16_aad_None = r"""'682CE0A9'"""
example_mode_aes_256_cfb8_datatype_UInt64_iv_16_aad_None = r"""'682CE0A9FFAF55AE'"""
example_mode_aes_256_cfb8_datatype_Int8_iv_16_aad_None = r"""'68'"""
example_mode_aes_256_cfb8_datatype_Int16_iv_16_aad_None = r"""'682C'"""
example_mode_aes_256_cfb8_datatype_Int32_iv_16_aad_None = r"""'682CE0A9'"""
example_mode_aes_256_cfb8_datatype_Int64_iv_16_aad_None = r"""'682CE0A9FFAF55AE'"""
example_mode_aes_256_cfb8_datatype_Float32_iv_16_aad_None = r"""'69B127F9'"""
example_mode_aes_256_cfb8_datatype_Float64_iv_16_aad_None = r"""'69B1A72CB81A0FFF'"""
example_mode_aes_256_cfb8_datatype_Decimal32_iv_16_aad_None = r"""'49378750'"""
example_mode_aes_256_cfb8_datatype_Decimal64_iv_16_aad_None = r"""'493787505DFF5606'"""
example_mode_aes_256_cfb8_datatype_Decimal128_iv_16_aad_None = r"""'493787505DFF5606774649C631E6E0E7'"""
example_mode_aes_256_cfb8_datatype_UUID_iv_16_aad_None = r"""'8E09A60AA21565C888B2D92942896930'"""
example_mode_aes_256_cfb8_datatype_Date_iv_16_aad_None = r"""'3FF1'"""
example_mode_aes_256_cfb8_datatype_DateTime_iv_16_aad_None = r"""'274E13D8'"""
example_mode_aes_256_cfb8_datatype_DateTime64_iv_16_aad_None = r"""'4211DFF611769F37'"""
example_mode_aes_256_cfb8_datatype_LowCardinality_iv_16_aad_None = r"""'58'"""
example_mode_aes_256_cfb8_datatype_Array_iv_16_aad_None = r"""'682E'"""
example_mode_aes_256_cfb8_datatype_NULL_iv_16_aad_None = r"""'\\N'"""
example_mode_aes_256_cfb8_datatype_IPv4_iv_16_aad_None = r"""'442DB771'"""
example_mode_aes_256_cfb8_datatype_IPv6_iv_16_aad_None = r"""'4978AF3EED91F4AD14F7C326CCD96804'"""
example_mode_aes_256_cfb8_datatype_Enum8_iv_16_aad_None = r"""'68'"""
example_mode_aes_256_cfb8_datatype_Enum16_iv_16_aad_None = r"""'682C'"""
example_mode_aes_128_cfb128_datatype_String_iv_None_aad_None = r"""'21'"""
example_mode_aes_128_cfb128_datatype_FixedString_iv_None_aad_None = r"""'21'"""

1080
tests/testflows/aes_encryption/tests/snapshots/encrypt_mysql.py.encrypt_mysql.snapshot
View File

File diff suppressed because it is too large Load Diff