github.com/bcnmy/go-ethereum@v1.10.27/signer/storage/aes_gcm_storage_test.go (about)

     1  // Copyright 2018 The go-ethereum Authors
     2  // This file is part of the go-ethereum library.
     3  //
     4  // The go-ethereum library is free software: you can redistribute it and/or modify
     5  // it under the terms of the GNU Lesser General Public License as published by
     6  // the Free Software Foundation, either version 3 of the License, or
     7  // (at your option) any later version.
     8  //
     9  // The go-ethereum library is distributed in the hope that it will be useful,
    10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
    11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    12  // GNU Lesser General Public License for more details.
    13  //
    14  // You should have received a copy of the GNU Lesser General Public License
    15  // along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>.
    16  
    17  package storage
    18  
    19  import (
    20  	"bytes"
    21  	"encoding/json"
    22  	"fmt"
    23  	"os"
    24  	"testing"
    25  
    26  	"github.com/ethereum/go-ethereum/common"
    27  	"github.com/ethereum/go-ethereum/log"
    28  	"github.com/mattn/go-colorable"
    29  )
    30  
    31  func TestEncryption(t *testing.T) {
    32  	//	key := []byte("AES256Key-32Characters1234567890")
    33  	//	plaintext := []byte(value)
    34  	key := []byte("AES256Key-32Characters1234567890")
    35  	plaintext := []byte("exampleplaintext")
    36  
    37  	c, iv, err := encrypt(key, plaintext, nil)
    38  	if err != nil {
    39  		t.Fatal(err)
    40  	}
    41  	t.Logf("Ciphertext %x, nonce %x\n", c, iv)
    42  
    43  	p, err := decrypt(key, iv, c, nil)
    44  	if err != nil {
    45  		t.Fatal(err)
    46  	}
    47  	t.Logf("Plaintext %v\n", string(p))
    48  	if !bytes.Equal(plaintext, p) {
    49  		t.Errorf("Failed: expected plaintext recovery, got %v expected %v", string(plaintext), string(p))
    50  	}
    51  }
    52  
    53  func TestFileStorage(t *testing.T) {
    54  	a := map[string]storedCredential{
    55  		"secret": {
    56  			Iv:         common.Hex2Bytes("cdb30036279601aeee60f16b"),
    57  			CipherText: common.Hex2Bytes("f311ac49859d7260c2c464c28ffac122daf6be801d3cfd3edcbde7e00c9ff74f"),
    58  		},
    59  		"secret2": {
    60  			Iv:         common.Hex2Bytes("afb8a7579bf971db9f8ceeed"),
    61  			CipherText: common.Hex2Bytes("2df87baf86b5073ef1f03e3cc738de75b511400f5465bb0ddeacf47ae4dc267d"),
    62  		},
    63  	}
    64  	d := t.TempDir()
    65  	stored := &AESEncryptedStorage{
    66  		filename: fmt.Sprintf("%v/vault.json", d),
    67  		key:      []byte("AES256Key-32Characters1234567890"),
    68  	}
    69  	stored.writeEncryptedStorage(a)
    70  	read := &AESEncryptedStorage{
    71  		filename: fmt.Sprintf("%v/vault.json", d),
    72  		key:      []byte("AES256Key-32Characters1234567890"),
    73  	}
    74  	creds, err := read.readEncryptedStorage()
    75  	if err != nil {
    76  		t.Fatal(err)
    77  	}
    78  	for k, v := range a {
    79  		if v2, exist := creds[k]; !exist {
    80  			t.Errorf("Missing entry %v", k)
    81  		} else {
    82  			if !bytes.Equal(v.CipherText, v2.CipherText) {
    83  				t.Errorf("Wrong ciphertext, expected %x got %x", v.CipherText, v2.CipherText)
    84  			}
    85  			if !bytes.Equal(v.Iv, v2.Iv) {
    86  				t.Errorf("Wrong iv")
    87  			}
    88  		}
    89  	}
    90  }
    91  func TestEnd2End(t *testing.T) {
    92  	log.Root().SetHandler(log.LvlFilterHandler(log.Lvl(3), log.StreamHandler(colorable.NewColorableStderr(), log.TerminalFormat(true))))
    93  
    94  	d := t.TempDir()
    95  
    96  	s1 := &AESEncryptedStorage{
    97  		filename: fmt.Sprintf("%v/vault.json", d),
    98  		key:      []byte("AES256Key-32Characters1234567890"),
    99  	}
   100  	s2 := &AESEncryptedStorage{
   101  		filename: fmt.Sprintf("%v/vault.json", d),
   102  		key:      []byte("AES256Key-32Characters1234567890"),
   103  	}
   104  
   105  	s1.Put("bazonk", "foobar")
   106  	if v, err := s2.Get("bazonk"); v != "foobar" || err != nil {
   107  		t.Errorf("Expected bazonk->foobar (nil error), got '%v' (%v error)", v, err)
   108  	}
   109  }
   110  
   111  func TestSwappedKeys(t *testing.T) {
   112  	// It should not be possible to swap the keys/values, so that
   113  	// K1:V1, K2:V2 can be swapped into K1:V2, K2:V1
   114  	log.Root().SetHandler(log.LvlFilterHandler(log.Lvl(3), log.StreamHandler(colorable.NewColorableStderr(), log.TerminalFormat(true))))
   115  
   116  	d := t.TempDir()
   117  
   118  	s1 := &AESEncryptedStorage{
   119  		filename: fmt.Sprintf("%v/vault.json", d),
   120  		key:      []byte("AES256Key-32Characters1234567890"),
   121  	}
   122  	s1.Put("k1", "v1")
   123  	s1.Put("k2", "v2")
   124  	// Now make a modified copy
   125  
   126  	creds := make(map[string]storedCredential)
   127  	raw, err := os.ReadFile(s1.filename)
   128  	if err != nil {
   129  		t.Fatal(err)
   130  	}
   131  	if err = json.Unmarshal(raw, &creds); err != nil {
   132  		t.Fatal(err)
   133  	}
   134  	swap := func() {
   135  		// Turn it into K1:V2, K2:V2
   136  		v1, v2 := creds["k1"], creds["k2"]
   137  		creds["k2"], creds["k1"] = v1, v2
   138  		raw, err = json.Marshal(creds)
   139  		if err != nil {
   140  			t.Fatal(err)
   141  		}
   142  		if err = os.WriteFile(s1.filename, raw, 0600); err != nil {
   143  			t.Fatal(err)
   144  		}
   145  	}
   146  	swap()
   147  	if v, _ := s1.Get("k1"); v != "" {
   148  		t.Errorf("swapped value should return empty")
   149  	}
   150  	swap()
   151  	if v, _ := s1.Get("k1"); v != "v1" {
   152  		t.Errorf("double-swapped value should work fine")
   153  	}
   154  }