-
Notifications
You must be signed in to change notification settings - Fork 31
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #1440 from atsign-foundation/1417-uptake-pubkeyhas…
…h-changes feat: Uptake public key hash changes
- Loading branch information
Showing
11 changed files
with
249 additions
and
20 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
170 changes: 170 additions & 0 deletions
170
packages/at_client/test/encryption_decryption_test.dart
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,170 @@ | ||
| import 'dart:io'; | ||
|
|
||
| import 'package:at_chops/at_chops.dart'; | ||
| import 'package:at_client/at_client.dart'; | ||
| import 'package:at_client/src/decryption_service/shared_key_decryption.dart'; | ||
| import 'package:at_client/src/encryption_service/shared_key_encryption.dart'; | ||
| import 'package:at_commons/at_builders.dart'; | ||
| import 'package:mocktail/mocktail.dart'; | ||
| import 'package:test/test.dart'; | ||
|
|
||
| class MockRemoteSecondary extends Mock implements RemoteSecondary {} | ||
|
|
||
| void main() { | ||
| String currentAtSign = '@alice'; | ||
| String namespace = 'unit.test'; | ||
|
|
||
| MockRemoteSecondary mockRemoteSecondary = MockRemoteSecondary(); | ||
|
|
||
| late AtChops atChops; | ||
| late AtClient atClient; | ||
|
|
||
| setUp(() async { | ||
| AtClientPreference atClientPreference = AtClientPreference() | ||
| ..isLocalStoreRequired = true | ||
| ..hiveStoragePath = 'test/unit_test_storage/hive' | ||
| ..commitLogPath = 'test/unit_test_storage/commit'; | ||
|
|
||
| AtEncryptionKeyPair atEncryptionKeyPair = | ||
| AtChopsUtil.generateAtEncryptionKeyPair(); | ||
| AtPkamKeyPair atPkamKeyPair = AtChopsUtil.generateAtPkamKeyPair(); | ||
| AtChopsKeys atChopsKeys = | ||
| AtChopsKeys.create(atEncryptionKeyPair, atPkamKeyPair); | ||
| atChopsKeys.selfEncryptionKey = | ||
| AtChopsUtil.generateSymmetricKey(EncryptionKeyType.aes256); | ||
| atChops = AtChopsImpl(atChopsKeys); | ||
|
|
||
| atClient = await AtClientImpl.create( | ||
| currentAtSign, namespace, atClientPreference, | ||
| remoteSecondary: mockRemoteSecondary, atChops: atChops); | ||
|
|
||
| // During decryption, fetches the encryption public key from local keystore. | ||
| // So, store the encryption public key into local secondary keystore. | ||
| await atClient.getLocalSecondary()?.putValue( | ||
| 'public:publickey$currentAtSign', | ||
| atEncryptionKeyPair.atPublicKey.publicKey); | ||
| }); | ||
|
|
||
| tearDownAll(() { | ||
| Directory('test/unit_test_storage').deleteSync(recursive: true); | ||
| }); | ||
|
|
||
| group('A group of tests related to encryption and decryption of shared keys', | ||
| () { | ||
| test( | ||
| 'A test to verify encryption and decryption of shared key is successful - with publicKeyHash', | ||
| () async { | ||
| registerFallbackValue(LLookupVerbBuilder()); | ||
| AtKey sharedKey = | ||
| (AtKey.shared('email', namespace: namespace, sharedBy: currentAtSign) | ||
| ..sharedWith('@bob')) | ||
| .build(); | ||
| String value = '[email protected]'; | ||
|
|
||
| when(() => mockRemoteSecondary | ||
| .executeVerb(any(that: EncryptedSharedKeyMatcher()))) | ||
| .thenAnswer((_) => Future.value('data:null')); | ||
|
|
||
| // Returns encryption public key of sharedWith atSign. | ||
| // For unit test, reusing the current AtSign encryptionPublicKey. | ||
| when(() => mockRemoteSecondary | ||
| .executeVerb(any(that: EncryptionPublicKeyMatcher()))) | ||
| .thenAnswer((_) => Future.value( | ||
| atChops.atChopsKeys.atEncryptionKeyPair?.atPublicKey.publicKey)); | ||
|
|
||
| // Encryption | ||
| SharedKeyEncryption sharedKeyEncryption = SharedKeyEncryption(atClient); | ||
| String encryptedValue = | ||
| await sharedKeyEncryption.encrypt(sharedKey, value); | ||
| expect(sharedKey.metadata.pubKeyHash?.hash.isNotEmpty, true); | ||
| expect(sharedKey.metadata.pubKeyHash?.hashingAlgo, 'sha512'); | ||
| expect(sharedKey.metadata.sharedKeyEnc?.isNotEmpty, true); | ||
| expect(sharedKey.metadata.pubKeyCS?.isNotEmpty, true); | ||
|
|
||
| // Explicitly setting pubKeyCS to null, so that pubKeyHash will only be used | ||
| // during decryption. | ||
| sharedKey.metadata.pubKeyCS = null; | ||
| expect(sharedKey.metadata.pubKeyCS, null); | ||
|
|
||
| // Decryption | ||
| SharedKeyDecryption sharedKeyDecryption = SharedKeyDecryption(atClient); | ||
| String decryptedValue = | ||
| await sharedKeyDecryption.decrypt(sharedKey, encryptedValue); | ||
| expect(decryptedValue, value); | ||
| }); | ||
|
|
||
| test('A test to verify exception is thrown when publicKeyHash mismatch', | ||
| () async { | ||
| registerFallbackValue(LLookupVerbBuilder()); | ||
| AtKey sharedKey = | ||
| (AtKey.shared('email', namespace: namespace, sharedBy: currentAtSign) | ||
| ..sharedWith('@bob')) | ||
| .build(); | ||
| String value = '[email protected]'; | ||
|
|
||
| when(() => mockRemoteSecondary | ||
| .executeVerb(any(that: EncryptedSharedKeyMatcher()))) | ||
| .thenAnswer((_) => Future.value('data:null')); | ||
|
|
||
| // Returns encryption public key of sharedWith atSign. | ||
| // For unit test, reusing the current AtSign encryptionPublicKey. | ||
| when(() => mockRemoteSecondary | ||
| .executeVerb(any(that: EncryptionPublicKeyMatcher()))) | ||
| .thenAnswer((_) => Future.value( | ||
| atChops.atChopsKeys.atEncryptionKeyPair?.atPublicKey.publicKey)); | ||
|
|
||
| // Encryption | ||
| SharedKeyEncryption sharedKeyEncryption = SharedKeyEncryption(atClient); | ||
| String encryptedValue = | ||
| await sharedKeyEncryption.encrypt(sharedKey, value); | ||
| expect(sharedKey.metadata.pubKeyHash?.hash.isNotEmpty, true); | ||
| expect(sharedKey.metadata.pubKeyHash?.hashingAlgo, 'sha512'); | ||
| expect(sharedKey.metadata.sharedKeyEnc?.isNotEmpty, true); | ||
| expect(sharedKey.metadata.pubKeyCS?.isNotEmpty, true); | ||
|
|
||
| // Explicitly setting pubKeyCS to null, so that pubKeyHash will only be used | ||
| // during decryption. | ||
| sharedKey.metadata.pubKeyCS = null; | ||
| expect(sharedKey.metadata.pubKeyCS, null); | ||
| // Explicity changing the publicKeyHash value to mimic change in publicKeyHash | ||
| // value. | ||
| sharedKey.metadata.pubKeyHash = | ||
| PublicKeyHash('dummy_hash_value', HashingAlgoType.sha512.name); | ||
|
|
||
| // Decryption | ||
| SharedKeyDecryption sharedKeyDecryption = SharedKeyDecryption(atClient); | ||
| expect( | ||
| () async => | ||
| await sharedKeyDecryption.decrypt(sharedKey, encryptedValue), | ||
| throwsA(predicate((dynamic e) => | ||
| e is AtPublicKeyChangeException && | ||
| e.message == | ||
| 'Public key has changed. Cannot decrypt shared key ${sharedKey.toString()}'))); | ||
| }); | ||
| }); | ||
| } | ||
|
|
||
| class EncryptedSharedKeyMatcher extends Matcher { | ||
| @override | ||
| Description describe(Description description) { | ||
| return description; | ||
| } | ||
|
|
||
| @override | ||
| bool matches(item, Map matchState) { | ||
| return item.atKey.key.startsWith(AtConstants.atEncryptionSharedKey); | ||
| } | ||
| } | ||
|
|
||
| class EncryptionPublicKeyMatcher extends Matcher { | ||
| @override | ||
| Description describe(Description description) { | ||
| // TODO: implement describe | ||
| throw UnimplementedError(); | ||
| } | ||
|
|
||
| @override | ||
| bool matches(item, Map matchState) { | ||
| return item.atKey.key.startsWith('publickey'); | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.