armor62_encrypt_test.go

// Copyright 2015 Keybase, Inc. All rights reserved. Use of
// this source code is governed by the included BSD license.

package saltpack

import (
	"io"
	"strings"
	"testing"

	"github.com/keybase/saltpack/encoding/basex"
	"github.com/stretchr/testify/require"
)

func encryptArmor62RandomData(t *testing.T, version Version, sz int) ([]byte, string) {
	msg := randomMsg(t, sz)
	err := csprngRead(msg)
	require.NoError(t, err)
	sndr := newBoxKey(t)
	receivers := []BoxPublicKey{newBoxKey(t).GetPublicKey()}

	ciphertext, err := EncryptArmor62Seal(version, msg, sndr, receivers, ourBrand)
	require.NoError(t, err)
	return msg, ciphertext
}

func testEncryptArmor62(t *testing.T, version Version) {
	plaintext, ciphertext := encryptArmor62RandomData(t, version, 1024)
	_, plaintext2, brand, err := Dearmor62DecryptOpen(SingleVersionValidator(version), ciphertext, kr)
	require.NoError(t, err)
	require.Equal(t, plaintext, plaintext2)
	brandCheck(t, brand)
}

func testDearmor62DecryptSlowReader(t *testing.T, version Version) {
	sz := 1024*16 + 3
	msg := randomMsg(t, sz)
	err := csprngRead(msg)
	require.NoError(t, err)
	sndr := newBoxKey(t)
	receivers := []BoxPublicKey{newBoxKey(t).GetPublicKey()}

	ciphertext, err := EncryptArmor62Seal(version, msg, sndr, receivers, ourBrand)
	require.NoError(t, err)

	_, dec, brand, err := NewDearmor62DecryptStream(SingleVersionValidator(version), &slowReader{[]byte(ciphertext)}, kr)
	require.NoError(t, err)
	brandCheck(t, brand)

	plaintext, err := io.ReadAll(dec)
	require.NoError(t, err)

	require.Equal(t, msg, plaintext)
}

func testNewlineInFrame(t *testing.T, version Version) {
	plaintext, ciphertext := encryptArmor62RandomData(t, version, 1024)

	//newline space space tab space
	ss := []string{"\n\n>   ", ciphertext[0:10], "\n  	 ", ciphertext[11:]}
	ciphertext = strings.Join(ss, "")

	_, plaintext2, brand, err := Dearmor62DecryptOpen(SingleVersionValidator(version), ciphertext, kr)
	require.NoError(t, err)
	require.Equal(t, plaintext, plaintext2)
	brandCheck(t, brand)
}

func testBadArmor62(t *testing.T, version Version) {
	_, ciphertext := encryptArmor62RandomData(t, version, 24)
	bad1 := ciphertext[0:2] + "䁕" + ciphertext[2:]
	_, _, _, err := Dearmor62DecryptOpen(SingleVersionValidator(version), bad1, kr)
	require.IsType(t, ErrBadFrame{}, err)
	_, _, _, err = Armor62Open(bad1)
	require.IsType(t, ErrBadFrame{}, err)

	bad2 := ciphertext[0:1] + "z" + ciphertext[2:]
	_, _, _, err = Dearmor62DecryptOpen(SingleVersionValidator(version), bad2, kr)
	require.IsType(t, ErrBadFrame{}, err)

	l := len(ciphertext)
	bad3 := ciphertext[0:(l-8)] + "z" + ciphertext[(l-7):]
	_, _, _, err = Dearmor62DecryptOpen(SingleVersionValidator(version), bad3, kr)
	requireErrContains(t, err, (ErrBadFrame{}).Error())

	bad4 := ciphertext + "䁕"
	_, _, _, err = Dearmor62DecryptOpen(SingleVersionValidator(version), bad4, kr)
	requireErrSuffix(t, err, ErrTrailingGarbage.Error())

	bad5 := ciphertext[0:(l-8)] + "䁕" + ciphertext[(l-7):]
	_, _, _, err = Armor62Open(bad5)
	require.IsType(t, ErrBadFrame{}, err)
	half := l >> 1
	bad6 := ciphertext[0:half] + "䁕" + ciphertext[(half+1):]
	_, _, _, err = Armor62Open(bad6)
	require.IsType(t, basex.CorruptInputError(0), err)
}

func TestArmor62Encrypt(t *testing.T) {
	tests := []func(*testing.T, Version){
		testEncryptArmor62,
		testDearmor62DecryptSlowReader,
		testNewlineInFrame,
		testBadArmor62,
	}
	runTestsOverVersions(t, "test", tests)
}