78 lines
2.0 KiB
Go
78 lines
2.0 KiB
Go
package main
|
|
|
|
import (
|
|
"encoding/hex"
|
|
"encoding/json"
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
func TestPBKDF2SHA256Vector(t *testing.T) {
|
|
got := hex.EncodeToString(pbkdf2SHA256([]byte("password"), []byte("salt"), 2, 32))
|
|
const want = "ae4d0c95af6b46d32d0adff928f06dd02a303f8ef3c251dfd6e2d85a95474c43"
|
|
if got != want {
|
|
t.Fatalf("pbkdf2 mismatch: got %s want %s", got, want)
|
|
}
|
|
}
|
|
|
|
func TestBrowserIdentityExportImportRoundTrip(t *testing.T) {
|
|
id, _, err := generateIdentity()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
path := filepath.Join(t.TempDir(), "identity-export.json")
|
|
if err := exportBrowserIdentity(path, "correct horse battery staple", id); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
b, err := os.ReadFile(path)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
var enc encryptedIdentity
|
|
if err := json.Unmarshal(b, &enc); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if enc.Format != "neuralhunt-identity-export" || enc.ClientID == "" || enc.Iterations != identityKDFIterations || enc.Cipher != "AES-256-GCM" {
|
|
t.Fatalf("missing portable export metadata: %#v", enc)
|
|
}
|
|
got, err := readIdentityImport(path, "correct horse battery staple")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if got.PublicJWK.X != id.PublicJWK.X || got.PublicJWK.Y != id.PublicJWK.Y || got.PrivateJWK.D != id.PrivateJWK.D {
|
|
t.Fatal("identity changed during export/import")
|
|
}
|
|
if _, err := os.Stat(path); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
|
|
func TestIdentityExportRejectsWeakPassphrase(t *testing.T) {
|
|
id, _, err := generateIdentity()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := exportBrowserIdentity(filepath.Join(t.TempDir(), "weak.json"), "too-short", id); err == nil {
|
|
t.Fatal("expected short export passphrase to be rejected")
|
|
}
|
|
}
|
|
|
|
func TestRawIdentityImport(t *testing.T) {
|
|
id, _, err := generateIdentity()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
path := filepath.Join(t.TempDir(), "identity.json")
|
|
if err := saveIdentity(path, id); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
got, err := readIdentityImport(path, "")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if got.PrivateJWK.D != id.PrivateJWK.D {
|
|
t.Fatal("raw identity import mismatch")
|
|
}
|
|
}
|