fdba718306
Some checks failed
Validate authentication / Validate authentication (push) Failing after 1s
71 lines
2.2 KiB
Rust
71 lines
2.2 KiB
Rust
use super::*;
|
|
use crate::opaque::OpaqueExportKey;
|
|
|
|
#[test]
|
|
fn envelope_authenticates_key_identity_nonce_and_ciphertext() {
|
|
let key = OpaqueExportKey::new(vec![0x77; 64]);
|
|
let wrong_key = OpaqueExportKey::new(vec![0x88; 64]);
|
|
let binding = CredentialBindingV1 {
|
|
principal: "omega-key:example#7",
|
|
iota_id: 11,
|
|
account_public_key_sha256: &[0x11; 32],
|
|
};
|
|
let plaintext = b"canonical credential bytes\0";
|
|
let envelope = encrypt(&key, &binding, plaintext).unwrap();
|
|
assert_eq!(
|
|
decrypt(&key, &binding, &envelope).unwrap().as_slice(),
|
|
plaintext
|
|
);
|
|
assert_ne!(envelope, encrypt(&key, &binding, plaintext).unwrap());
|
|
assert!(matches!(
|
|
decrypt(&wrong_key, &binding, &envelope),
|
|
Err(CredentialError::Authentication)
|
|
));
|
|
for changed in [
|
|
CredentialBindingV1 {
|
|
principal: "omega-key:example#8",
|
|
..binding
|
|
},
|
|
CredentialBindingV1 {
|
|
iota_id: 12,
|
|
..binding
|
|
},
|
|
CredentialBindingV1 {
|
|
account_public_key_sha256: &[0x22; 32],
|
|
..binding
|
|
},
|
|
] {
|
|
assert!(matches!(
|
|
decrypt(&key, &changed, &envelope),
|
|
Err(CredentialError::Authentication)
|
|
));
|
|
}
|
|
for offset in [10, 34, envelope.len() - 1] {
|
|
let mut changed = envelope.clone();
|
|
changed[offset] ^= 1;
|
|
assert!(matches!(
|
|
decrypt(&key, &binding, &changed),
|
|
Err(CredentialError::Authentication)
|
|
));
|
|
}
|
|
for length in 0..50 {
|
|
assert!(matches!(
|
|
decrypt(&key, &binding, &envelope[..length]),
|
|
Err(CredentialError::InvalidEnvelope)
|
|
));
|
|
}
|
|
let mut changed = envelope.clone();
|
|
changed[0] ^= 1;
|
|
assert!(matches!(
|
|
decrypt(&key, &binding, &changed),
|
|
Err(CredentialError::InvalidEnvelope)
|
|
));
|
|
changed = envelope.clone();
|
|
changed[9] = 2;
|
|
assert!(matches!(
|
|
decrypt(&key, &binding, &changed),
|
|
Err(CredentialError::UnsupportedVersion(2))
|
|
));
|
|
let empty = encrypt(&key, &binding, b"").unwrap();
|
|
assert!(decrypt(&key, &binding, &empty).unwrap().is_empty());
|
|
}
|