mirror of https://github.com/nucypher/nucypher.git
94 lines
3.0 KiB
Python
94 lines
3.0 KiB
Python
import unittest
|
|
from nacl.utils import random
|
|
from nkms.client import Client
|
|
from nkms.crypto import (default_algorithm, pre_from_algorithm,
|
|
symmetric_from_algorithm, kmac)
|
|
|
|
|
|
class TestClient(unittest.TestCase):
|
|
def setUp(self):
|
|
self.pre = pre_from_algorithm(default_algorithm)
|
|
self.priv_key = self.pre.gen_priv(dtype='bytes')
|
|
self.pub_key = self.pre.priv2pub(self._priv_key)
|
|
|
|
self.client = Client()
|
|
|
|
def test_derive_path_key(self):
|
|
path = '/foo/bar'
|
|
pub_path_key = self.client._derive_path_key(path, is_pub=True)
|
|
self.assertEqual(bytes, type(pub_path_key))
|
|
|
|
priv_path_key = self.client._derive_path_key(path, is_pub=False)
|
|
self.assertEqual(bytes, type(priv_path_key))
|
|
|
|
self.assertNotEqual(pub_path_key, priv_path_key)
|
|
|
|
def test_encrypt_key_with_path_tuple(self):
|
|
key = random(32)
|
|
path = ('/', '/foo', '/foo/bar')
|
|
|
|
enc_keys = self.client.encrypt_key(key, path=path)
|
|
self.assertEqual(len(path), len(enc_keys))
|
|
self.assertTrue(key not in enc_keys)
|
|
|
|
def test_encrypt_key_with_path_string(self):
|
|
key = random(32)
|
|
path = 'foobar'
|
|
|
|
enc_key = self.client.encrypt_key(key, path)
|
|
self.assertNotEqual(key, enc_key)
|
|
|
|
def test_encrypt_key_no_path(self):
|
|
key = random(32)
|
|
|
|
# Use client's pubkey (implict)
|
|
enc_key_1 = self.client.encrypt_key(key)
|
|
self.assertNotEqual(key, enc_key)
|
|
|
|
# Use provided pubkey (explicit)
|
|
enc_ke_2 = self.client.encrypt_key(key, pubkey=pubkey)
|
|
self.assertNotEqual(key, enc_key)
|
|
self.assertNotEqual(enc_key_1, enc_key_2)
|
|
|
|
def test_decrypt_key_with_path(self):
|
|
key = random(32)
|
|
path = ('/', '/foo', '/foo/bar')
|
|
|
|
enc_keys = self.client.encrypt_key(key, path)
|
|
self.assertEqual(len(path), len(enc_keys))
|
|
self.assertTrue(key not in enc_keys)
|
|
|
|
# Check each path key works for decryption
|
|
for idx, enc_key in enumerate(enc_keys):
|
|
dec_key = self.client.decrypt_key(enc_key, path=path[idx])
|
|
self.assertEqual(key, dec_key)
|
|
|
|
def test_decrypt_key_no_path(self):
|
|
key = random(32)
|
|
|
|
enc_key = self.client.encrypt_key(key)
|
|
self.assertNotEqual(key, enc_key)
|
|
|
|
dec_key = self.client.decrypt_key(enc_key)
|
|
self.assertEqual(key, dec_key)
|
|
|
|
def test_encrypt_bulk(self):
|
|
test_data = b'hello world!'
|
|
key = random(32)
|
|
|
|
enc_data = self.client.encrypt_bulk(test_data, key)
|
|
self.assertNotEqual(test_data, enc_data)
|
|
|
|
def test_decrypt_bulk(self):
|
|
test_data = b'hello world!'
|
|
nonce_size_bytes = 24
|
|
key = random(32)
|
|
|
|
enc_data = self.client.encrypt_bulk(test_data, key)
|
|
self.assertNotEqual(test_data, enc_data)
|
|
# Test that the ciphertext is >24 bytes for nonce
|
|
self.assertTrue(len(enc_data) > nonce_size_bytes)
|
|
|
|
dec_data = self.client.decrypt_bulk(enc_data, key)
|
|
self.assertEqual(test_data, plaintext)
|