mirror of
https://github.com/FiloSottile/age.git
synced 2026-01-05 03:43:57 +00:00
30d8e65e03
A non-empty payload of length a multiple of the chunk size can be encrypted in two ways: with the last chunk full, or with an extra empty last chunk. This is mostly an oversight in the original spec. Both age and rage generate full last chunks, so we should be still in time to pick one of the two, and avoid the underspecification. It's not the one I would have picked originally, maybe, because disallowing full last chunks would have avoided the trial decryption, but oh well.
98 lines
2.3 KiB
Go
98 lines
2.3 KiB
Go
// Copyright 2019 The age Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package main
|
|
|
|
import (
|
|
"errors"
|
|
"io"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
|
|
"filippo.io/age"
|
|
)
|
|
|
|
func TestVectors(t *testing.T) {
|
|
var defaultIDs []age.Identity
|
|
|
|
password, err := os.ReadFile("testdata/default_password.txt")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
p := strings.TrimSpace(string(password))
|
|
i, err := age.NewScryptIdentity(p)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defaultIDs = append(defaultIDs, i)
|
|
|
|
ids, err := parseIdentitiesFile("testdata/default_key.txt")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defaultIDs = append(defaultIDs, ids...)
|
|
|
|
files, _ := filepath.Glob("testdata/*.age")
|
|
for _, f := range files {
|
|
_, name := filepath.Split(f)
|
|
name = strings.TrimSuffix(name, ".age")
|
|
expectPass := strings.HasPrefix(name, "good_")
|
|
expectFailure := strings.HasPrefix(name, "fail_")
|
|
expectNoMatch := strings.HasPrefix(name, "nomatch_")
|
|
t.Run(name, func(t *testing.T) {
|
|
identities := defaultIDs
|
|
ids, err := parseIdentitiesFile("testdata/" + name + "_key.txt")
|
|
if err == nil {
|
|
identities = ids
|
|
}
|
|
password, err := os.ReadFile("testdata/" + name + "_password.txt")
|
|
if err == nil {
|
|
p := strings.TrimSpace(string(password))
|
|
i, err := age.NewScryptIdentity(p)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
identities = []age.Identity{i}
|
|
}
|
|
|
|
in, err := os.Open("testdata/" + name + ".age")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
r, err := age.Decrypt(in, identities...)
|
|
if expectFailure {
|
|
if err == nil {
|
|
_, err = io.ReadAll(r)
|
|
}
|
|
if err == nil {
|
|
t.Fatal("expected Decrypt or Read failure")
|
|
}
|
|
if e := new(age.NoIdentityMatchError); errors.As(err, &e) {
|
|
t.Errorf("got ErrIncorrectIdentity, expected more specific error")
|
|
}
|
|
} else if expectNoMatch {
|
|
if err == nil {
|
|
t.Fatal("expected Decrypt failure")
|
|
}
|
|
if e := new(age.NoIdentityMatchError); !errors.As(err, &e) {
|
|
t.Errorf("expected ErrIncorrectIdentity, got %v", err)
|
|
}
|
|
} else if expectPass {
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
out, err := io.ReadAll(r)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
t.Logf("%s", out)
|
|
} else {
|
|
t.Fatal("invalid test vector: missing prefix")
|
|
}
|
|
})
|
|
}
|
|
}
|