7407b89b8d
Remove banned imports (fmt, strings, os, errors, path/filepath) across all production and test files, replace with core.* primitives, coreio.ReadStream, and coreerr.E. Upgrade dappco.re/go/core v0.5.0 → v0.7.0 for core.PathBase and core.Is. Fix isRepoScoped to exclude pr.* capabilities (enforcement is at the forge layer, not the policy engine). Add Good/Bad/Ugly test coverage to all packages missing the mandatory three-category naming convention. Co-Authored-By: Virgil <virgil@lethean.io>
111 lines
2.6 KiB
Go
111 lines
2.6 KiB
Go
package chachapoly
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"testing"
|
|
|
|
coreerr "dappco.re/go/core/log"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
// mockReader is a reader that always returns an error.
|
|
type mockReader struct{}
|
|
|
|
func (r *mockReader) Read(p []byte) (n int, err error) {
|
|
return 0, coreerr.E("chachapoly.mockReader.Read", "read error", nil)
|
|
}
|
|
|
|
func TestEncryptDecrypt_Good(t *testing.T) {
|
|
key := make([]byte, 32)
|
|
for i := range key {
|
|
key[i] = 1
|
|
}
|
|
|
|
plaintext := []byte("Hello, world!")
|
|
ciphertext, err := Encrypt(plaintext, key)
|
|
assert.NoError(t, err)
|
|
|
|
decrypted, err := Decrypt(ciphertext, key)
|
|
assert.NoError(t, err)
|
|
|
|
assert.Equal(t, plaintext, decrypted)
|
|
}
|
|
|
|
func TestEncryptDecrypt_Good_EmptyPlaintext(t *testing.T) {
|
|
key := make([]byte, 32)
|
|
plaintext := []byte("")
|
|
ciphertext, err := Encrypt(plaintext, key)
|
|
assert.NoError(t, err)
|
|
|
|
decrypted, err := Decrypt(ciphertext, key)
|
|
assert.NoError(t, err)
|
|
|
|
assert.Equal(t, plaintext, decrypted)
|
|
}
|
|
|
|
func TestEncryptDecrypt_Good_CiphertextDiffersFromPlaintext(t *testing.T) {
|
|
key := make([]byte, 32)
|
|
plaintext := []byte("Hello, world!")
|
|
ciphertext, err := Encrypt(plaintext, key)
|
|
assert.NoError(t, err)
|
|
assert.NotEqual(t, plaintext, ciphertext)
|
|
}
|
|
|
|
func TestEncryptDecrypt_Bad_WrongKey(t *testing.T) {
|
|
key1 := make([]byte, 32)
|
|
key2 := make([]byte, 32)
|
|
key2[0] = 1 // Different key
|
|
|
|
plaintext := []byte("secret")
|
|
ciphertext, err := Encrypt(plaintext, key1)
|
|
assert.NoError(t, err)
|
|
|
|
_, err = Decrypt(ciphertext, key2)
|
|
assert.Error(t, err) // Should fail authentication
|
|
}
|
|
|
|
func TestEncryptDecrypt_Bad_TamperedCiphertext(t *testing.T) {
|
|
key := make([]byte, 32)
|
|
plaintext := []byte("secret")
|
|
ciphertext, err := Encrypt(plaintext, key)
|
|
assert.NoError(t, err)
|
|
|
|
// Tamper with the ciphertext
|
|
ciphertext[0] ^= 0xff
|
|
|
|
_, err = Decrypt(ciphertext, key)
|
|
assert.Error(t, err)
|
|
}
|
|
|
|
func TestEncryptDecrypt_Bad_InvalidKeySize(t *testing.T) {
|
|
key := make([]byte, 16) // Wrong size
|
|
plaintext := []byte("test")
|
|
_, err := Encrypt(plaintext, key)
|
|
assert.Error(t, err)
|
|
|
|
_, err = Decrypt([]byte("test"), key)
|
|
assert.Error(t, err)
|
|
}
|
|
|
|
func TestEncryptDecrypt_Ugly_NonceError(t *testing.T) {
|
|
key := make([]byte, 32)
|
|
plaintext := []byte("test")
|
|
|
|
// Replace the rand.Reader with our mock reader
|
|
oldReader := rand.Reader
|
|
rand.Reader = &mockReader{}
|
|
defer func() { rand.Reader = oldReader }()
|
|
|
|
_, err := Encrypt(plaintext, key)
|
|
assert.Error(t, err)
|
|
}
|
|
|
|
func TestDecrypt_Ugly_ShortCiphertext(t *testing.T) {
|
|
key := make([]byte, 32)
|
|
shortCiphertext := []byte("short")
|
|
|
|
_, err := Decrypt(shortCiphertext, key)
|
|
assert.Error(t, err)
|
|
assert.Contains(t, err.Error(), "too short")
|
|
}
|