ara-crypto/test/unbox.js

Cryptographic functions used in Ara modules

const isBuffer = require('is-buffer')
/* eslint-disable camelcase */
const {
  crypto_secretbox_NONCEBYTES,
  crypto_secretbox_MACBYTES,
} = require('sodium-universal')

const { unbox, createUnboxStream } = require('../unbox')
const { box, createBoxStream } = require('../box')
const { randomBytes } = require('../random-bytes')
const test = require('./helpers/runner')

test.cb('unbox(opts) is a function', (t) => {
  t.true('function' === typeof unbox)
  t.end()
})

test.cb('unbox(opts) throws on bad input', (t) => {
  t.throws(() => unbox(), { instanceOf: TypeError })
  t.throws(() => unbox(null), { instanceOf: TypeError })
  t.throws(() => unbox(true), { instanceOf: TypeError })
  t.throws(() => unbox(123), { instanceOf: TypeError })
  t.throws(() => unbox('string'), { instanceOf: TypeError })
  t.throws(() => unbox({ secret: null }), { instanceOf: TypeError })
  t.throws(() => unbox({ key: null }), { instanceOf: TypeError })

  t.end()
})

test.cb('unbox(opts) basic with key', (t) => {
  const buffer = Buffer.from('hello')
  const nonce = randomBytes(24)
  const key = Buffer.alloc(32)

  key.fill('key')

  const boxed = box(buffer, { nonce, key })
  const unboxed = unbox(boxed, { nonce, key })

  t.true(isBuffer(unboxed))
  t.true(0 == Buffer.compare(buffer, unboxed))

  t.end()
})

test.cb('unbox(opts) basic with secret', (t) => {
  const buffer = Buffer.from('hello')
  const nonce = randomBytes(24)
  const key = Buffer.alloc(32)

  key.fill('key')

  const secret = Buffer.concat([ key, nonce ])
  const boxed = box(buffer, { secret })
  const unboxed = unbox(boxed, { secret })

  t.true(isBuffer(unboxed))
  t.true(0 == Buffer.compare(buffer, unboxed))

  t.end()
})

test.cb('createUnboxStream(opts) is a function', (t) => {
  t.true('function' === typeof createUnboxStream)
  t.end()
})

test.cb('createUnboxStream(opts) throws on bad input', (t) => {
  t.throws(() => createUnboxStream(null), { instanceOf: TypeError })
  t.throws(() => createUnboxStream(true), { instanceOf: TypeError })
  t.throws(() => createUnboxStream(123), { instanceOf: TypeError })
  t.throws(() => createUnboxStream(), { instanceOf: TypeError })

  t.end()
})

test.cb('createUnboxStream(opts) that unboxes piped input', (t) => {
  const key = Buffer.alloc(32)
  const nonce = randomBytes(crypto_secretbox_NONCEBYTES)
  const buffer = Buffer.alloc(2 * 64)
  const chunks = []

  key.fill('hello')
  buffer.fill('hello')

  const boxer = createBoxStream({ key, nonce })
  const unboxer = createUnboxStream({ key, nonce })

  unboxer.on('data', ondata)
  unboxer.on('end', onend)

  boxer.pipe(unboxer)
  boxer.write(buffer)
  boxer.end()

  function ondata(chunk) {
    chunks.push(chunk)
  }

  function onend() {
    t.true(0 === Buffer.compare(Buffer.concat(chunks), buffer))
    t.end()
  }
})

test.cb('createUnboxStream(opts) that unboxes boxed written input', (t) => {
  const key = Buffer.alloc(32)
  const nonce = randomBytes(crypto_secretbox_NONCEBYTES)
  const buffer = Buffer.from('hello')

  key.fill('hello')
  buffer.fill('hello')

  const boxed = box(buffer, { key, nonce })
  const unboxer = createUnboxStream({ key, nonce })

  unboxer.on('data', ondata)
  unboxer.on('end', onend)

  unboxer.write(boxed.slice(0, 2 + (2 * crypto_secretbox_MACBYTES)))
  unboxer.write(boxed.slice(2 + (2 * crypto_secretbox_MACBYTES)))
  unboxer.end()

  function ondata(chunk) {
    t.true(0 === Buffer.compare(chunk, buffer))
  }

  function onend() {
    t.end()
  }
})