Methods, systems, and computer readable media for utilizing predetermined encryption keys in a test simulation environment
Methods, systems, and computer readable media for utilizing predetermined encryption keys in a test simulation environment are disclosed. In one embodiment, a method includes generating, prior to an initiation of an Internet protocol security (IPsec) test session, a private key and a public key at a traffic emulation device and storing the private key and the public key in a local storage associated with the traffic emulation device. The method further includes retrieving, from the local storage, the private key and the public key upon the initiation of the IPsec test session between the traffic emulation device and a device under test (DUT) and generating a shared secret key utilizing the retrieved private key and a DUT public key received from the DUT.
1. A method for utilizing predetermined key exchange data in a test simulation environment, the method comprising:
prior to an initiation of a first Internet protocol security (IPsec) test session, provisioning a device under test (DUT) with a first key exchange number that is known by both the DUT and a traffic emulation device configured to conduct the first IPsec test session;
generating, prior to the initiation of the first IPsec test session, a private key and a public key at the traffic emulation device, wherein the public key is generated by the traffic emulation device using a second key exchange number;
storing the private key and the public key in a local storage associated with the traffic emulation device, wherein the stored private key and the public key are mapped to the second exchange key number in the local storage;
retrieving, by the traffic emulation device from the local storage, the second exchange key number, the private key and the public key upon the initiation of the first IPsec test session between the traffic emulation device and the DUT;
providing the second exchange key number and the public key to the DUT, wherein the DUT utilizes the second exchange key number and the previously provisioned first exchange key number to generate a DUT public key;
generating, by the traffic emulation device, a shared secret key utilizing the retrieved private key and the DUT public key generated by and received from the DUT;
utilizing, by both the traffic emulation device and the DUT, the first shared secret key to exchange tunnel request and tunnel response messages to establish the first IPsec test session;
retrieving, by the traffic emulation device after the first IPsec test session is established, the private key and the public key associated with the first IPsec test session from the local memory upon an initiation of a second IPsec test session between the traffic emulation device and the DUT; and
generating a second shared secret key for the second IPsec test session by utilizing the retrieved private key associated with the first IPsec test session and a second DUT public key generated by and received from the DUT by the traffic emulation device after the first IPsec test session is established.
2. The method of claim 1 comprising determining, prior to generating the public key, at least one key exchange number.
3. The method of claim 2 wherein generating the public key includes deriving the public key using the at least one key exchange number.
4. The method of claim 3 comprising sending the public key and the at least one key exchange number to the DUT.
5. The method of claim 1 comprising receiving the DUT public key from the DUT upon the initiation of the first IPsec test session.
6. The method of claim 1 wherein the first IPsec test session is conducted between the traffic emulation device and the DUT at a network layer.
7. The method of claim 1 wherein the traffic emulation device functions as either a client entity or a server entity.
8. The method of claim 1 wherein the public key is generated using the private key and the at least one key exchange number.
9. The method of claim 1 wherein each of the private key, the public key, and the shared secret key is generated utilizing a Diffie-Hellman method.
10. The method of claim 1 wherein the DUT includes at least one of: a firewall device, a router device, and a serving gateway (SGW), a packet data network gateway (PGW).
11. A system for utilizing predetermined encryption keys data in a test simulation environment, the system comprising:
a device under test (DUT) configured to generate a DUT public key and to be subjected to an Internet protocol security (IPsec) test session; and
a traffic emulation device configured to provision, prior to an initiation of a first Internet protocol security (IPsec) test session, the DUT with a first key exchange number that is known by both the DUT and the traffic emulation device, to generate, prior to the initiation of the first IPsec test session with the DUT, a private key and a public key, wherein the public key is generated by the traffic emulation device using a second key exchange number, to store the private key and the public key in a local storage, wherein the private key and the stored public key are mapped to the second exchange key number in the local storage, to retrieve the second exchange key number, the private key and the public key from the local storage upon the initiation of the first IPsec test session, to provide the second exchange key number and the public key to the DUT, wherein the DUT utilizes the second exchange key number and the previously provisioned first exchange key number to generate a DUT public key, to generate a shared secret key utilizing the retrieved private key and the DUT public key generated by and received from the DUT, to utilize the first shared secret key to exchange tunnel request and tunnel response messages to establish the first IPsec test session with the DUT, to retrieve after the first IPsec test session is established, the private key and the public key associated with the first IPsec test session from the local memory upon an initiation of a second IPsec test session between the traffic emulation device and the DUT, and to generate a second shared secret key for the second IPsec test session by utilizing the retrieved private key associated with the first IPsec test session and a second DUT public key generated by and received from the DUT by the traffic emulation device after the first IPsec test session is established.
12. The system of claim 11 wherein the traffic emulation device is further configured to determine, prior to generating the public key, at least one key exchange number.
13. The system of claim 12 wherein the traffic emulation device is further configured to derive the public key using the at least one key exchange number.
14. The system of claim 13 wherein the traffic emulation device is further configured to send the public key and the at least one key exchange number to the DUT.
15. The system of claim 11 wherein the traffic emulation device is further configured to receive the DUT public key from the DUT upon the initiation of the first IPsec test session.
16. The system of claim 11 wherein the first IPsec test session is conducted between the traffic emulation device and the DUT at a network layer.
17. The system of claim 11 wherein the traffic emulation device functions as either a client entity or a server entity.
18. The system of claim 11 wherein the public key is generated using the private key and the at least one key exchange number.
19. The system of claim 11 wherein each of the private key, the public key, and the shared secret key is generated utilizing a Diffie-Hellman method.
20. The system of claim 11 wherein the DUT includes at least one of: a firewall device, a router device, and a serving gateway (SGW), a packet data network gateway (PGW).
21. A non-transitory computer readable medium having stored thereon executable instructions that when executed by the processor of a computer control the computer to perform steps comprising:
prior to an initiation of a first Internet protocol security (IPsec) test session, provisioning a device under test (DUT) with a first key exchange number that is known by both the DUT and a traffic emulation device configured to conduct the first IPsec test session;
generating, prior to the initiation of the first IPsec test session, a private key and a public key at the traffic emulation device, wherein the public key is generated by the traffic emulation device using a second key exchange number;
storing the private key and the public key in a local storage associated with the traffic emulation device, wherein the stored private key and the public key are mapped to the second exchange key number in the local storage;
retrieving, by the traffic emulation device from the local storage, the second exchange key number, the private key and the public key upon the initiation of the first IPsec test session between the traffic emulation device and the DUT;
providing the second exchange key number and the public key to the DUT, wherein the DUT utilizes the second exchange key number and the previously provisioned first exchange key number to generate a DUT public key;
generating, by the traffic emulation device, a shared secret key utilizing the retrieved private key and the DUT public key generated by and received from the DUT;
utilizing, by both the traffic emulation device and the DUT, the first shared secret key to exchange tunnel request and tunnel response messages to establish the first IPsec test session;
retrieving, by the traffic emulation device after the first IPsec test session is established, the private key and the public key associated with the first IPsec test session from the local memory upon an initiation of a second IPsec test session between the traffic emulation device and the DUT; and
generating a second shared secret key for the second IPsec test session by utilizing the retrieved private key associated with the first IPsec test session and a second DUT public key generated by and received from the DUT by the traffic emulation device after the first IPsec test session is established.