mirror of
https://github.com/nais/wonderwall.git
synced 2026-08-19 19:16:14 +00:00
Trong Huu Nguyen
c56625d842
Satisfies errcheck. Errors that carry no actionable information are ignored explicitly: writes to an already-committed response, and closing a fully read response body or file. Test fixture setup asserts with require.NoError instead, since a failure there means the fixture itself is broken.
69 lines
1.4 KiB
Go
69 lines
1.4 KiB
Go
package crypto_test
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/nais/wonderwall/internal/crypto"
|
|
)
|
|
|
|
var (
|
|
plaintext = []byte("foo bar, this is a very nice plaintext")
|
|
key = make([]byte, 32)
|
|
)
|
|
|
|
const (
|
|
// Run this many iterations to make sure the IV is not re-used
|
|
ivIterations = 50000
|
|
)
|
|
|
|
// Generate a new encryption key on every test run.
|
|
func init() {
|
|
_, err := rand.Read(key)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
}
|
|
|
|
// Test that encryption with a 256-bit key works,
|
|
// and that the ciphertext differs from one message to the next.
|
|
func TestEncrypt(t *testing.T) {
|
|
var cur, prev []byte
|
|
var err error
|
|
|
|
crypter := crypto.NewCrypter(key)
|
|
|
|
for i := ivIterations; i != 0; i-- {
|
|
cur, err = crypter.Encrypt(plaintext)
|
|
assert.Nil(t, err)
|
|
assert.NotNil(t, cur)
|
|
assert.NotEqual(t, prev, cur, "IV re-used")
|
|
prev = make([]byte, len(cur))
|
|
copy(prev, cur)
|
|
}
|
|
}
|
|
|
|
// Test that encrypted messages can be decrypted.
|
|
func TestDecrypt(t *testing.T) {
|
|
crypter := crypto.NewCrypter(key)
|
|
|
|
ciphertext, err := crypter.Encrypt(plaintext)
|
|
assert.Nil(t, err)
|
|
|
|
decrypted, err := crypter.Decrypt(ciphertext)
|
|
assert.Nil(t, err)
|
|
assert.Equal(t, plaintext, decrypted)
|
|
}
|
|
|
|
func BenchmarkEncrypt(b *testing.B) {
|
|
crypter := crypto.NewCrypter(key)
|
|
|
|
for n := 0; n < b.N; n++ {
|
|
_, err := crypter.Encrypt(plaintext)
|
|
require.NoError(b, err)
|
|
}
|
|
}
|