03c9188d79
* ci: consolidate duplicate workflows and merge CodeQL configs Remove 17 duplicate workflow files that were split copies of the combined originals. Each family (CI, CodeQL, Coverage, PR Build, Alpha Release) had the same job duplicated across separate push/pull_request/schedule/manual trigger files. Merge codeql.yml and codescan.yml into a single codeql.yml with a language matrix covering go, javascript-typescript, python, and actions — matching the previous default setup coverage. Remaining workflows (one per family): - ci.yml (push + PR + manual) - codeql.yml (push + PR + schedule, all languages) - coverage.yml (push + PR + manual) - alpha-release.yml (push + manual) - pr-build.yml (PR + manual) - release.yml (tag push) - agent-verify.yml, auto-label.yml, auto-project.yml Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * feat: add collect, config, crypt, plugin packages and fix all lint issues Add four new infrastructure packages with CLI commands: - pkg/config: layered configuration (defaults → file → env → flags) - pkg/crypt: crypto primitives (Argon2id, AES-GCM, ChaCha20, HMAC, checksums) - pkg/plugin: plugin system with GitHub-based install/update/remove - pkg/collect: collection subsystem (GitHub, BitcoinTalk, market, papers, excavate) Fix all golangci-lint issues across the entire codebase (~100 errcheck, staticcheck SA1012/SA1019/ST1005, unused, ineffassign fixes) so that `core go qa` passes with 0 issues. Closes #167, #168, #170, #250, #251, #252, #253, #254, #255, #256 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
56 lines
1.4 KiB
Go
56 lines
1.4 KiB
Go
package crypt
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestDeriveKey_Good(t *testing.T) {
|
|
passphrase := []byte("test-passphrase")
|
|
salt := []byte("1234567890123456") // 16 bytes
|
|
|
|
key1 := DeriveKey(passphrase, salt, 32)
|
|
key2 := DeriveKey(passphrase, salt, 32)
|
|
|
|
assert.Len(t, key1, 32)
|
|
assert.Equal(t, key1, key2, "same inputs should produce same output")
|
|
|
|
// Different passphrase should produce different key
|
|
key3 := DeriveKey([]byte("different-passphrase"), salt, 32)
|
|
assert.NotEqual(t, key1, key3)
|
|
}
|
|
|
|
func TestDeriveKeyScrypt_Good(t *testing.T) {
|
|
passphrase := []byte("test-passphrase")
|
|
salt := []byte("1234567890123456")
|
|
|
|
key, err := DeriveKeyScrypt(passphrase, salt, 32)
|
|
assert.NoError(t, err)
|
|
assert.Len(t, key, 32)
|
|
|
|
// Deterministic
|
|
key2, err := DeriveKeyScrypt(passphrase, salt, 32)
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, key, key2)
|
|
}
|
|
|
|
func TestHKDF_Good(t *testing.T) {
|
|
secret := []byte("input-keying-material")
|
|
salt := []byte("optional-salt")
|
|
info := []byte("context-info")
|
|
|
|
key1, err := HKDF(secret, salt, info, 32)
|
|
assert.NoError(t, err)
|
|
assert.Len(t, key1, 32)
|
|
|
|
// Deterministic
|
|
key2, err := HKDF(secret, salt, info, 32)
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, key1, key2)
|
|
|
|
// Different info should produce different key
|
|
key3, err := HKDF(secret, salt, []byte("different-info"), 32)
|
|
assert.NoError(t, err)
|
|
assert.NotEqual(t, key1, key3)
|
|
}
|