github.com/bearnetworkchain/go-bearnetwork@v1.10.19-0.20220604150648-d63890c2e42b/signer/storage/aes_gcm_storage_test.go (about)

     1  // Copyright 2018 The go-ethereum Authors
     2  // This file is part of the go-ethereum library.
     3  //
     4  // The go-ethereum library is free software: you can redistribute it and/or modify
     5  // it under the terms of the GNU Lesser General Public License as published by
     6  // the Free Software Foundation, either version 3 of the License, or
     7  // (at your option) any later version.
     8  //
     9  // The go-ethereum library is distributed in the hope that it will be useful,
    10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
    11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    12  // GNU Lesser General Public License for more details.
    13  //
    14  // You should have received a copy of the GNU Lesser General Public License
    15  // along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>.
    16  
    17  package storage
    18  
    19  import (
    20  	"bytes"
    21  	"encoding/json"
    22  	"fmt"
    23  	"os"
    24  	"testing"
    25  
    26  	"github.com/bearnetworkchain/go-bearnetwork/common"
    27  	"github.com/bearnetworkchain/go-bearnetwork/log"
    28  	"github.com/mattn/go-colorable"
    29  )
    30  
    31  func TestEncryption(t *testing.T) {
    32  	//	key := []byte("AES256Key-32Characters1234567890")
    33  	//	plaintext := []byte(value)
    34  	key := []byte("AES256Key-32Characters1234567890")
    35  	plaintext := []byte("exampleplaintext")
    36  
    37  	c, iv, err := encrypt(key, plaintext, nil)
    38  	if err != nil {
    39  		t.Fatal(err)
    40  	}
    41  	t.Logf("Ciphertext %x, nonce %x\n", c, iv)
    42  
    43  	p, err := decrypt(key, iv, c, nil)
    44  	if err != nil {
    45  		t.Fatal(err)
    46  	}
    47  	t.Logf("Plaintext %v\n", string(p))
    48  	if !bytes.Equal(plaintext, p) {
    49  		t.Errorf("Failed: expected plaintext recovery, got %v expected %v", string(plaintext), string(p))
    50  	}
    51  }
    52  
    53  func TestFileStorage(t *testing.T) {
    54  
    55  	a := map[string]storedCredential{
    56  		"secret": {
    57  			Iv:         common.Hex2Bytes("cdb30036279601aeee60f16b"),
    58  			CipherText: common.Hex2Bytes("f311ac49859d7260c2c464c28ffac122daf6be801d3cfd3edcbde7e00c9ff74f"),
    59  		},
    60  		"secret2": {
    61  			Iv:         common.Hex2Bytes("afb8a7579bf971db9f8ceeed"),
    62  			CipherText: common.Hex2Bytes("2df87baf86b5073ef1f03e3cc738de75b511400f5465bb0ddeacf47ae4dc267d"),
    63  		},
    64  	}
    65  	d := t.TempDir()
    66  	stored := &AESEncryptedStorage{
    67  		filename: fmt.Sprintf("%v/vault.json", d),
    68  		key:      []byte("AES256Key-32Characters1234567890"),
    69  	}
    70  	stored.writeEncryptedStorage(a)
    71  	read := &AESEncryptedStorage{
    72  		filename: fmt.Sprintf("%v/vault.json", d),
    73  		key:      []byte("AES256Key-32Characters1234567890"),
    74  	}
    75  	creds, err := read.readEncryptedStorage()
    76  	if err != nil {
    77  		t.Fatal(err)
    78  	}
    79  	for k, v := range a {
    80  		if v2, exist := creds[k]; !exist {
    81  			t.Errorf("Missing entry %v", k)
    82  		} else {
    83  			if !bytes.Equal(v.CipherText, v2.CipherText) {
    84  				t.Errorf("Wrong ciphertext, expected %x got %x", v.CipherText, v2.CipherText)
    85  			}
    86  			if !bytes.Equal(v.Iv, v2.Iv) {
    87  				t.Errorf("Wrong iv")
    88  			}
    89  		}
    90  	}
    91  }
    92  func TestEnd2End(t *testing.T) {
    93  	log.Root().SetHandler(log.LvlFilterHandler(log.Lvl(3), log.StreamHandler(colorable.NewColorableStderr(), log.TerminalFormat(true))))
    94  
    95  	d := t.TempDir()
    96  
    97  	s1 := &AESEncryptedStorage{
    98  		filename: fmt.Sprintf("%v/vault.json", d),
    99  		key:      []byte("AES256Key-32Characters1234567890"),
   100  	}
   101  	s2 := &AESEncryptedStorage{
   102  		filename: fmt.Sprintf("%v/vault.json", d),
   103  		key:      []byte("AES256Key-32Characters1234567890"),
   104  	}
   105  
   106  	s1.Put("bazonk", "foobar")
   107  	if v, err := s2.Get("bazonk"); v != "foobar" || err != nil {
   108  		t.Errorf("Expected bazonk->foobar (nil error), got '%v' (%v error)", v, err)
   109  	}
   110  }
   111  
   112  func TestSwappedKeys(t *testing.T) {
   113  	// It should not be possible to swap the keys/values, so that
   114  	// K1:V1, K2:V2 can be swapped into K1:V2, K2:V1
   115  	log.Root().SetHandler(log.LvlFilterHandler(log.Lvl(3), log.StreamHandler(colorable.NewColorableStderr(), log.TerminalFormat(true))))
   116  
   117  	d := t.TempDir()
   118  
   119  	s1 := &AESEncryptedStorage{
   120  		filename: fmt.Sprintf("%v/vault.json", d),
   121  		key:      []byte("AES256Key-32Characters1234567890"),
   122  	}
   123  	s1.Put("k1", "v1")
   124  	s1.Put("k2", "v2")
   125  	// Now make a modified copy
   126  
   127  	creds := make(map[string]storedCredential)
   128  	raw, err := os.ReadFile(s1.filename)
   129  	if err != nil {
   130  		t.Fatal(err)
   131  	}
   132  	if err = json.Unmarshal(raw, &creds); err != nil {
   133  		t.Fatal(err)
   134  	}
   135  	swap := func() {
   136  		// Turn it into K1:V2, K2:V2
   137  		v1, v2 := creds["k1"], creds["k2"]
   138  		creds["k2"], creds["k1"] = v1, v2
   139  		raw, err = json.Marshal(creds)
   140  		if err != nil {
   141  			t.Fatal(err)
   142  		}
   143  		if err = os.WriteFile(s1.filename, raw, 0600); err != nil {
   144  			t.Fatal(err)
   145  		}
   146  	}
   147  	swap()
   148  	if v, _ := s1.Get("k1"); v != "" {
   149  		t.Errorf("swapped value should return empty")
   150  	}
   151  	swap()
   152  	if v, _ := s1.Get("k1"); v != "v1" {
   153  		t.Errorf("double-swapped value should work fine")
   154  	}
   155  }