@nfen/webcrypto-ts/src/aes/__tests__/aes_gcm.test.ts

Enforced Webcrypto wrapper

import * as Random from "../../random.js";
import * as AES from "../index.js";

describe("AES_GCM", () => {
    describe("Original", () => {
        let iv: Uint8Array,
            proxiedKey: AES.AesGcmProxiedCryptoKey,
            key: AES.AesGcmCryptoKey;
        const text = "brown fox fox fox fox fox fox fox fox fox";
        beforeEach(async () => {
            iv = await Random.IV.generate();
            proxiedKey = await AES.AES_GCM.generateKey({ length: 256 });
            key = proxiedKey.self;
        });
        it("should encrypt and decrypt", async () => {
            const ciphertextBytes = await AES.AES_GCM.encrypt(
                { iv },
                key,
                new TextEncoder().encode(text)
            );
            const plaintextBytes = await AES.AES_GCM.decrypt(
                { iv },
                key,
                ciphertextBytes
            );
            expect(new TextDecoder().decode(plaintextBytes)).toEqual(text);
        });
        it("should import and export keys", async () => {
            const ciphertextBytes = await AES.AES_GCM.encrypt(
                { iv },
                key,
                new TextEncoder().encode(text)
            );

            const jwk = await AES.AES_GCM.exportKey("jwk", key);
            const importedKey = await AES.AES_GCM.importKey("jwk", jwk, {
                length: 256,
            });

            const plaintextBytes = await AES.AES_GCM.decrypt(
                { iv },
                importedKey.self,
                ciphertextBytes
            );
            expect(new TextDecoder().decode(plaintextBytes)).toEqual(text);
        });
        it("should wrap and unwrap keys", async () => {
            const kek = await AES.AES_GCM.generateKey({ length: 256 }, true, [
                "wrapKey",
                "unwrapKey",
            ]);
            const dek = await AES.AES_GCM.generateKey({
                length: 256,
            });

            const ciphertextBytes = await AES.AES_GCM.encrypt(
                { iv },
                dek.self,
                new TextEncoder().encode(text)
            );

            const wrappedKey = await AES.AES_GCM.wrapKey(
                "raw",
                dek.self,
                kek.self,
                {
                    iv,
                }
            );
            const unwrappedkey = (await AES.AES_GCM.unwrapKey(
                "raw",
                wrappedKey,
                { name: AES.Alg.Mode.AES_GCM },
                kek.self,
                { iv }
            )) as AES.AesGcmCryptoKey;

            const plaintextBytes = await AES.AES_GCM.decrypt(
                { iv },
                unwrappedkey,
                ciphertextBytes
            );
            expect(new TextDecoder().decode(plaintextBytes)).toEqual(text);
        });
    });
    describe("Proxied", () => {
        let iv: Uint8Array, key: AES.AesGcmProxiedCryptoKey;
        const text = "brown fox fox fox fox fox fox fox fox fox";
        beforeEach(async () => {
            iv = await Random.IV.generate();
            key = await AES.AES_GCM.generateKey({ length: 256 });
        });
        it("should encrypt and decrypt", async () => {
            const ciphertextBytes = await key.encrypt(
                { iv },
                new TextEncoder().encode(text)
            );
            const plaintextBytes = await key.decrypt({ iv }, ciphertextBytes);
            expect(new TextDecoder().decode(plaintextBytes)).toEqual(text);
        });
        it("should import and export keys", async () => {
            const ciphertextBytes = await key.encrypt(
                { iv },
                new TextEncoder().encode(text)
            );

            const jwk = await key.exportKey("jwk");
            const importedKey = await AES.AES_GCM.importKey("jwk", jwk, {
                length: 256,
            });

            const plaintextBytes = await importedKey.decrypt(
                { iv },
                ciphertextBytes
            );
            expect(new TextDecoder().decode(plaintextBytes)).toEqual(text);
        });
        it("should wrap and unwrap keys", async () => {
            const kek = await AES.AES_GCM.generateKey({ length: 256 }, true, [
                "wrapKey",
                "unwrapKey",
            ]);
            const dek = await AES.AES_GCM.generateKey({
                length: 256,
            });

            const ciphertextBytes = await dek.encrypt(
                { iv },
                new TextEncoder().encode(text)
            );

            const wrappedKey = await kek.wrapKey("raw", dek.self, {
                iv,
            });
            const unwrappedKey = (await kek.unwrapKey(
                "raw",
                wrappedKey,
                { name: AES.Alg.Mode.AES_GCM },
                { iv }
            )) as AES.AesGcmCryptoKey;

            const plaintextBytes = await AES.AES_GCM.decrypt(
                { iv },
                unwrappedKey,
                ciphertextBytes
            );
            expect(new TextDecoder().decode(plaintextBytes)).toEqual(text);
        });
    });
});