mirror of
https://github.com/FiloSottile/age.git
synced 2026-01-05 03:43:57 +00:00
7665b87dc2
The io/ioutil package has been deprecated as of Go 1.16, see https://golang.org/doc/go1.16#ioutil. This commit replaces the existing io/ioutil functions with their new definitions in io and os packages. Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
131 lines
3.4 KiB
Go
131 lines
3.4 KiB
Go
// Copyright 2019 The age Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package armor_test
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/rand"
|
|
"encoding/pem"
|
|
"fmt"
|
|
"io"
|
|
"log"
|
|
"strings"
|
|
"testing"
|
|
|
|
"filippo.io/age"
|
|
"filippo.io/age/armor"
|
|
"filippo.io/age/internal/format"
|
|
)
|
|
|
|
func ExampleNewWriter() {
|
|
publicKey := "age1cy0su9fwf3gf9mw868g5yut09p6nytfmmnktexz2ya5uqg9vl9sss4euqm"
|
|
recipient, err := age.ParseX25519Recipient(publicKey)
|
|
if err != nil {
|
|
log.Fatalf("Failed to parse public key %q: %v", publicKey, err)
|
|
}
|
|
|
|
buf := &bytes.Buffer{}
|
|
armorWriter := armor.NewWriter(buf)
|
|
|
|
w, err := age.Encrypt(armorWriter, recipient)
|
|
if err != nil {
|
|
log.Fatalf("Failed to create encrypted file: %v", err)
|
|
}
|
|
if _, err := io.WriteString(w, "Black lives matter."); err != nil {
|
|
log.Fatalf("Failed to write to encrypted file: %v", err)
|
|
}
|
|
if err := w.Close(); err != nil {
|
|
log.Fatalf("Failed to close encrypted file: %v", err)
|
|
}
|
|
|
|
if err := armorWriter.Close(); err != nil {
|
|
log.Fatalf("Failed to close armor: %v", err)
|
|
}
|
|
|
|
fmt.Printf("%s[...]", buf.Bytes()[:35])
|
|
// Output:
|
|
// -----BEGIN AGE ENCRYPTED FILE-----
|
|
// [...]
|
|
}
|
|
|
|
var privateKey = "AGE-SECRET-KEY-184JMZMVQH3E6U0PSL869004Y3U2NYV7R30EU99CSEDNPH02YUVFSZW44VU"
|
|
|
|
func ExampleNewReader() {
|
|
fileContents := `-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4YWdhZHZ0WG1PZldDT1hD
|
|
K3RPRzFkUlJnWlFBQlUwemtjeXFRMFp6V1VFCnRzZFV3a3Vkd1dSUWw2eEtrRkVv
|
|
SHcvZnp6Q3lqLy9HMkM4ZjUyUGdDZjQKLS0tIDlpVUpuVUQ5YUJyUENFZ0lNSTB2
|
|
ekUvS3E5WjVUN0F5ZWR1ejhpeU5rZUUKsvPGYt7vf0o1kyJ1eVFMz1e4JnYYk1y1
|
|
kB/RRusYjn+KVJ+KTioxj0THtzZPXcjFKuQ1
|
|
-----END AGE ENCRYPTED FILE-----`
|
|
|
|
// DO NOT hardcode the private key. Store it in a secret storage solution,
|
|
// on disk if the local machine is trusted, or have the user provide it.
|
|
identity, err := age.ParseX25519Identity(privateKey)
|
|
if err != nil {
|
|
log.Fatalf("Failed to parse private key %q: %v", privateKey, err)
|
|
}
|
|
|
|
out := &bytes.Buffer{}
|
|
f := strings.NewReader(fileContents)
|
|
armorReader := armor.NewReader(f)
|
|
|
|
r, err := age.Decrypt(armorReader, identity)
|
|
if err != nil {
|
|
log.Fatalf("Failed to open encrypted file: %v", err)
|
|
}
|
|
if _, err := io.Copy(out, r); err != nil {
|
|
log.Fatalf("Failed to read encrypted file: %v", err)
|
|
}
|
|
|
|
fmt.Printf("File contents: %q\n", out.Bytes())
|
|
// Output:
|
|
// File contents: "Black lives matter."
|
|
}
|
|
|
|
func TestArmor(t *testing.T) {
|
|
t.Run("PartialLine", func(t *testing.T) { testArmor(t, 611) })
|
|
t.Run("FullLine", func(t *testing.T) { testArmor(t, 10*format.BytesPerLine) })
|
|
}
|
|
|
|
func testArmor(t *testing.T, size int) {
|
|
buf := &bytes.Buffer{}
|
|
w := armor.NewWriter(buf)
|
|
plain := make([]byte, size)
|
|
rand.Read(plain)
|
|
if _, err := w.Write(plain); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := w.Close(); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
block, _ := pem.Decode(buf.Bytes())
|
|
if block == nil {
|
|
t.Fatal("PEM decoding failed")
|
|
}
|
|
if len(block.Headers) != 0 {
|
|
t.Error("unexpected headers")
|
|
}
|
|
if block.Type != "AGE ENCRYPTED FILE" {
|
|
t.Errorf("unexpected type %q", block.Type)
|
|
}
|
|
if !bytes.Equal(block.Bytes, plain) {
|
|
t.Error("PEM decoded value doesn't match")
|
|
}
|
|
if !bytes.Equal(buf.Bytes(), pem.EncodeToMemory(block)) {
|
|
t.Error("PEM re-encoded value doesn't match")
|
|
}
|
|
|
|
r := armor.NewReader(buf)
|
|
out, err := io.ReadAll(r)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if !bytes.Equal(out, plain) {
|
|
t.Error("decoded value doesn't match")
|
|
}
|
|
}
|