244 lines
7.2 KiB
Go
244 lines
7.2 KiB
Go
package secret
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/hex"
|
|
"testing"
|
|
)
|
|
|
|
func TestWithAES128GCM(t *testing.T) {
|
|
key := []byte{
|
|
0x37, 0xe4, 0x62, 0x59, 0xa6, 0xef, 0xe9, 0x96,
|
|
0xb8, 0x5d, 0x2c, 0x35, 0xb5, 0x33, 0x3e, 0xff,
|
|
}
|
|
|
|
p, err := WithAESGCM(mockProvider{[]byte{
|
|
0x1c, 0x74, 0x37, 0xe9, 0x9e, 0x37, 0xb8, 0x9e,
|
|
0xf0, 0x21, 0xc0, 0xec, 0xad, 0x9d, 0xdf, 0x67,
|
|
0x75, 0xfd, 0x00, 0x48, 0x20, 0x46, 0x2e, 0x14,
|
|
0xfb, 0x9d, 0x17, 0x9a, 0xe7, 0x9d, 0x6f, 0x39,
|
|
0x19, 0xd5, 0x3f, 0x22, 0xa1, 0xac, 0xdb, 0xff,
|
|
0x2c, 0x1f, 0x57, 0x0e, 0xbb, 0x5d, 0xff, 0x89,
|
|
0x62, 0x55, 0x2b, 0x3b, 0x5e, 0xb5, 0x67, 0xb4,
|
|
0x32, 0x92, 0x68, 0xcc, 0x55, 0x8e, 0xd3, 0xc7,
|
|
0xce,
|
|
}, nil}, key)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
return
|
|
}
|
|
|
|
msg := []byte("Gophers, gophers, gophers everywhere!")
|
|
v, err := p.GetSecret("test")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
return
|
|
}
|
|
if !bytes.Equal(v, msg) {
|
|
t.Errorf("expected:\n%s\n\ngot:\n%s", hex.Dump(msg), hex.Dump(v))
|
|
}
|
|
}
|
|
|
|
func TestWithAES256GCM(t *testing.T) {
|
|
key := []byte{
|
|
0x50, 0x0a, 0x33, 0xf2, 0xe5, 0x85, 0xc1, 0xd3,
|
|
0x65, 0x6d, 0x32, 0xbe, 0xea, 0x7b, 0xce, 0x7e,
|
|
0x12, 0xbf, 0x7a, 0x47, 0x4d, 0x21, 0x09, 0xa0,
|
|
0x3e, 0x3f, 0x65, 0xc7, 0xae, 0x94, 0x6c, 0xe3,
|
|
}
|
|
|
|
p, err := WithAESGCM(mockProvider{[]byte{
|
|
0x62, 0x97, 0x6b, 0xc1, 0x78, 0xef, 0x41, 0xa0,
|
|
0xd4, 0xdc, 0x05, 0x05, 0x66, 0xf6, 0x5f, 0x62,
|
|
0xca, 0x91, 0xae, 0xd7, 0x7c, 0xff, 0xad, 0xc1,
|
|
0xbf, 0xd5, 0x61, 0xe3, 0x09, 0x8d, 0x9c, 0xce,
|
|
0xac, 0x88, 0x55, 0x8c, 0x02, 0xd4, 0x30, 0xc9,
|
|
0x42, 0x38, 0xdf, 0xf9, 0x8a, 0x4c, 0x92, 0x34,
|
|
0xc7, 0x82, 0x24, 0xb4, 0x9e, 0x9e, 0xdc, 0x10,
|
|
0x96, 0x60, 0xa2, 0x92, 0x2a, 0x94, 0x9c, 0x3a,
|
|
0xd8,
|
|
}, nil}, key)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
return
|
|
}
|
|
|
|
msg := []byte("Gophers, gophers, gophers everywhere!")
|
|
v, err := p.GetSecret("test")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
return
|
|
}
|
|
if !bytes.Equal(v, msg) {
|
|
t.Errorf("expected:\n%s\n\ngot:\n%s", hex.Dump(msg), hex.Dump(v))
|
|
}
|
|
}
|
|
|
|
func TestWithChaCha20Poly1305(t *testing.T) {
|
|
key := []byte{
|
|
0x01, 0x94, 0x99, 0xd6, 0x89, 0x82, 0x7f, 0xa1,
|
|
0x27, 0x82, 0x36, 0x11, 0x78, 0x22, 0xe5, 0x16,
|
|
0x21, 0xe2, 0xc6, 0x29, 0x0c, 0x14, 0x6c, 0xb8,
|
|
0x12, 0x46, 0x2f, 0xae, 0x9e, 0xa7, 0x17, 0x09,
|
|
}
|
|
|
|
p, err := WithChaCha20Poly1305(mockProvider{[]byte{
|
|
0x76, 0x7c, 0x7d, 0x5d, 0x36, 0xd1, 0x27, 0xca,
|
|
0x0b, 0x64, 0x28, 0x82, 0xc3, 0x3a, 0xd3, 0x24,
|
|
0x30, 0x77, 0x8f, 0xef, 0xf1, 0x3a, 0x9f, 0xa7,
|
|
0x41, 0x49, 0x62, 0x79, 0x9f, 0x65, 0x12, 0x4f,
|
|
0x29, 0xe6, 0x04, 0x83, 0xab, 0x5c, 0xbc, 0x0b,
|
|
0xe2, 0x82, 0xcc, 0x3c, 0x47, 0x7d, 0xaa, 0x6d,
|
|
0x4c, 0x71, 0x6b, 0x24, 0x01, 0xd0, 0xf9, 0x88,
|
|
0xcf, 0x88, 0xbe, 0xee, 0xe2, 0x77, 0x07, 0x18,
|
|
0xf1,
|
|
}, nil}, key)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
return
|
|
}
|
|
|
|
msg := []byte("Gophers, gophers, gophers everywhere!")
|
|
v, err := p.GetSecret("test")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
return
|
|
}
|
|
if !bytes.Equal(v, msg) {
|
|
t.Errorf("expected:\n%s\n\ngot:\n%s", hex.Dump(msg), hex.Dump(v))
|
|
}
|
|
}
|
|
|
|
func TestWithChaCha20Poly1305X(t *testing.T) {
|
|
key := []byte{
|
|
0x25, 0x20, 0xda, 0x7c, 0x97, 0x60, 0x20, 0xf5,
|
|
0x09, 0xa7, 0x42, 0x31, 0x08, 0x50, 0x76, 0xf6,
|
|
0x79, 0xc5, 0x38, 0x5b, 0xfb, 0xf4, 0x98, 0x56,
|
|
0xa1, 0x92, 0xd1, 0xa0, 0x08, 0x3e, 0xf5, 0xfd,
|
|
}
|
|
|
|
p, err := WithChaCha20Poly1305X(mockProvider{[]byte{
|
|
0x59, 0xaf, 0xc4, 0x65, 0x60, 0x3f, 0x02, 0xd3,
|
|
0x87, 0xd3, 0x15, 0xac, 0xf3, 0x6b, 0x4a, 0x4f,
|
|
0xe8, 0x40, 0xe5, 0x4d, 0x80, 0x30, 0x7b, 0x3d,
|
|
0x8a, 0xf4, 0x18, 0x96, 0x89, 0x05, 0x4e, 0x31,
|
|
0x44, 0x8c, 0xb2, 0x84, 0x9d, 0x25, 0xce, 0x3b,
|
|
0xb4, 0x66, 0x36, 0x0f, 0xd2, 0xad, 0xb3, 0x78,
|
|
0xf8, 0x02, 0x1e, 0x6c, 0xf9, 0x6c, 0x1f, 0x71,
|
|
0x3c, 0x2b, 0x59, 0x6f, 0xc7, 0x92, 0x3b, 0x40,
|
|
0x89, 0x13, 0x93, 0x6b, 0xa0, 0x35, 0x4e, 0x6f,
|
|
0xd8, 0x31, 0x67, 0xee, 0xa2,
|
|
}, nil}, key)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
return
|
|
}
|
|
|
|
msg := []byte("Gophers, gophers, gophers everywhere!")
|
|
v, err := p.GetSecret("test")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
return
|
|
}
|
|
if !bytes.Equal(v, msg) {
|
|
t.Errorf("expected:\n%s\n\ngot:\n%s", hex.Dump(msg), hex.Dump(v))
|
|
}
|
|
}
|
|
|
|
func TestWithSecretBox(t *testing.T) {
|
|
var (
|
|
key [32]byte
|
|
nonce [24]byte
|
|
box []byte
|
|
)
|
|
key = [32]uint8{
|
|
0x90, 0x93, 0x6b, 0x91, 0x79, 0xac, 0xa2, 0x0d,
|
|
0x7d, 0xf7, 0x8c, 0x29, 0x93, 0x5f, 0xd4, 0xf3,
|
|
0x9e, 0x61, 0xe3, 0x6d, 0xb0, 0x30, 0x31, 0xac,
|
|
0xa5, 0xd6, 0x7e, 0xb5, 0x04, 0xe8, 0x1b, 0x87,
|
|
}
|
|
nonce = [24]uint8{
|
|
0xaa, 0xe6, 0x05, 0x6b, 0x18, 0xb9, 0x05, 0xc8,
|
|
0x9e, 0x53, 0x25, 0x79, 0xbe, 0x79, 0x9d, 0x9b,
|
|
0xbe, 0x1e, 0x34, 0x11, 0xbb, 0x21, 0x51, 0x3c,
|
|
}
|
|
box = append(nonce[:],
|
|
0x8b, 0x0a, 0x66, 0x4f, 0xb3, 0x1f, 0x78, 0xfd,
|
|
0xcb, 0x41, 0x9e, 0x4b, 0x1a, 0x9e, 0x34, 0x20,
|
|
0xef, 0x2c, 0x64, 0xb3, 0x00, 0x6f, 0xf1, 0x9e,
|
|
0xe1, 0xbd, 0xfe, 0xd3, 0x86, 0x12, 0x8d, 0x09,
|
|
0x85, 0x34, 0xae, 0xa3, 0xfd)
|
|
|
|
p := WithSecretBox(mockProvider{box, nil}, key)
|
|
v, err := p.GetSecret("test")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
return
|
|
}
|
|
if string(v) != "Hello, boxed Gophers!" {
|
|
t.Errorf(`expected "Hello, boxed Gophers!", got %q`, v)
|
|
}
|
|
}
|
|
|
|
func TestParseECPrivateKey(t *testing.T) {
|
|
b := []byte(`-----BEGIN EC PRIVATE KEY-----
|
|
MHcCAQEEIFsSWzsfH0GiukSATicV/N69C3q0VQQySIItoeBo/73NoAoGCCqGSM49
|
|
AwEHoUQDQgAE5fgRgzJYEunuVV4560q+Ddt6Sj1fJR3EETgjmJTqVn3z3cf9VEmF
|
|
37+SIL2vagDV9paD1L9l3+E9New89oHxxw==
|
|
-----END EC PRIVATE KEY-----
|
|
`)
|
|
k, err := ParseECPrivateKey(b)
|
|
if err != nil {
|
|
t.Error(err)
|
|
return
|
|
} else if k == nil {
|
|
t.Error("key is nil")
|
|
}
|
|
}
|
|
|
|
func TestParseRSAPrivateKey(t *testing.T) {
|
|
b := []byte(`-----BEGIN PRIVATE KEY-----
|
|
MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBALzubkr6QNzwgmHQ
|
|
XbYnHEtisSAkQItPTODYhUiUStTF8RauT7iTFBNb7UP1dprAl3aBIsB/aFQUmSJr
|
|
9SaCxmqrwihygxNWzPQnhTRculy12HqRsPmJ0F6hlnrc6CppPY731/5Wpq1epUBE
|
|
V75z0tYSaoQ058XvF7m5rELkbwkbAgMBAAECgYBEcx4CjChz469ZQOSy2fimV1tV
|
|
Cc1Yq6Ju1AN2CEQUUqLGVOENPjxHx0ZvGL+f0acOiDrPA1oJHG1eyz5GdZrs6uJA
|
|
mY/CriRgwXFbg268/ET9jzBlE5GuWMbHlo3rPmAV/KQ3TCdmtLP0VvkHpZcPPFja
|
|
7GfO88FbYQetllF6AQJBAO8qR54LBrz0s601jjmIjB2iwdhLUPdYN+fPJFZUG0Vb
|
|
CJ0c6L6QvvetP3nuiuyIGvJGz7Swqnux97m5T7Z5FQUCQQDKOvIgMg1QR+AoAKx3
|
|
9RaDfNxjVpq6ly6MWqeh8pLNgmQ7vfl4tBbPkL8ey4uFlK8vk+23Y1GqbH6ySbxY
|
|
D/+fAkA7+Qwwc29jHrGXs6BQiQ8pt1CInopVHAgY1vazty+HesZ0L3Wlo8JfdVA/
|
|
kTPBEHhBXMRk+RAnKH+IURHOHhrJAkAnLTQquIeLveDW3wqKUpiB8HZhaC2haBhE
|
|
aGuBHBUEavYv/KWPlJO2sjvUI2pr/lnRxb6PgFYZxdrlfxNVnAPRAkEAp7c2iWTq
|
|
h0/8YIAw1J95m9WCkQ1/7U6SiJQRzPhYR4EJuDSVbYtgTb1WkDpriySKQ1CL2q8Q
|
|
H41cEKgY5m+lDA==
|
|
-----END PRIVATE KEY-----
|
|
`)
|
|
k, err := ParseRSAPrivateKey(b)
|
|
if err != nil {
|
|
t.Error(err)
|
|
return
|
|
} else if k == nil {
|
|
t.Error("key is nil")
|
|
}
|
|
}
|
|
|
|
func TestParseSecretBoxKey(t *testing.T) {
|
|
var validKeys = [][]byte{
|
|
[]byte("0000000000000000000000000000000000000000000000000000000000000000"), // nil hex
|
|
[]byte("079cdef09061cc8ee120b069cde548da0b829bf51a560c45bcfa4de53f16e0d4"), // hex
|
|
[]byte("AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"), // nil raw base64
|
|
[]byte("6WpELgf5/agd0/IB+vZrw57S6TPMl9ruFcRUgRJk/lc"), // raw base64
|
|
[]byte("AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="), // nil std base64
|
|
[]byte("Ra5SbhE9KYxcPMxKp8AAZsw35B5rWLkMv9d2+NjkV/o="), // std base64
|
|
}
|
|
|
|
for _, b := range validKeys {
|
|
t.Run("", func(it *testing.T) {
|
|
if _, err := ParseSecretBoxKey(b); err != nil {
|
|
it.Error(err)
|
|
}
|
|
})
|
|
}
|
|
}
|