mirrors/kitty
1
0
Fork 0
mirror of https://github.com/kovidgoyal/kitty synced 2026-07-20 15:35:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add tests for AES256GCM

Browse Source
This commit is contained in:
Kovid Goyal
2022-08-05 13:50:03 +05:30
parent 384eba6cd4
commit a7b7fb560a
2 changed files with 43 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
kitty_tests/crypto.py
View File

@@ -2,13 +2,17 @@
# License: GPLv3 Copyright: 2022, Kovid Goyal <kovid at kovidgoyal.net>
import os
from . import BaseTest
class TestCrypto(BaseTest):
def test_elliptic_curve_data_exchange(self):
from kitty.fast_data_types import EllipticCurveKey
from kitty.fast_data_types import (
AES256GCMDecrypt, AES256GCMEncrypt, CryptoError, EllipticCurveKey
)
alice = EllipticCurveKey()
bob = EllipticCurveKey()
alice_secret = alice.derive_secret(bob.public)
@@ -16,3 +20,31 @@ class TestCrypto(BaseTest):
self.assertEqual(len(alice_secret), 32)
self.assertEqual(len(bob_secret), 32)
self.assertEqual(alice_secret, bob_secret)
auth_data = os.urandom(213)
plaintext = os.urandom(1011)
e = AES256GCMEncrypt(alice_secret)
e.add_authenticated_but_unencrypted_data(auth_data)
ciphertext = e.add_data_to_be_encrypted(plaintext, True)
d = AES256GCMDecrypt(bob_secret, e.iv, e.tag)
d.add_data_to_be_authenticated_but_not_decrypted(auth_data)
q = d.add_data_to_be_decrypted(ciphertext, True)
self.ae(q, plaintext)
def corrupt_data(data):
b = bytearray(data)
b[0] = (b[0] + 13) % 256
return bytes(b)
d = AES256GCMDecrypt(bob_secret, e.iv, corrupt_data(e.tag))
d.add_data_to_be_authenticated_but_not_decrypted(auth_data)
self.assertRaises(CryptoError, d.add_data_to_be_decrypted, ciphertext, True)
d = AES256GCMDecrypt(bob_secret, e.iv, e.tag)
d.add_data_to_be_authenticated_but_not_decrypted(corrupt_data(auth_data))
self.assertRaises(CryptoError, d.add_data_to_be_decrypted, ciphertext, True)
d = AES256GCMDecrypt(bob_secret, e.iv, e.tag)
d.add_data_to_be_authenticated_but_not_decrypted(auth_data)
self.assertRaises(CryptoError, d.add_data_to_be_decrypted, corrupt_data(ciphertext), True)