blockstack/tests/unitTests/lib/unitTestsEncryption.js

The Blockstack Javascript library for authentication, identity, and storage.

'use strict';

Object.defineProperty(exports, "__esModule", {
  value: true
});
exports.runEncryptionTests = runEncryptionTests;

var _tape = require('tape-promise/tape');

var _tape2 = _interopRequireDefault(_tape);

var _elliptic = require('elliptic');

var _elliptic2 = _interopRequireDefault(_elliptic);

var _encryption = require('../../../lib/encryption');

function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }

function runEncryptionTests() {
  var privateKey = 'a5c61c6ca7b3e7e55edee68566aeab22e4da26baa285c7bd10e8d2218aa3b229';
  var publicKey = '027d28f9951ce46538951e3697c62588a87f1f1f295de4a14fdd4c780fc52cfe69';

  (0, _tape2.default)('encrypt-to-decrypt works', function (t) {
    t.plan(2);

    var testString = 'all work and no play makes jack a dull boy';
    var cipherObj = (0, _encryption.encryptECIES)(publicKey, testString);
    var deciphered = (0, _encryption.decryptECIES)(privateKey, cipherObj);
    t.equal(deciphered, testString, 'Decrypted ciphertext does not match expected plaintext');

    var testBuffer = new Buffer(testString);
    cipherObj = (0, _encryption.encryptECIES)(publicKey, testBuffer);
    deciphered = (0, _encryption.decryptECIES)(privateKey, cipherObj);
    t.equal(deciphered.toString('hex'), testBuffer.toString('hex'), 'Decrypted cipherbuffer does not match expected plainbuffer');
  });

  (0, _tape2.default)('encrypt-to-decrypt fails on bad mac', function (t) {
    t.plan(1);

    var testString = 'all work and no play makes jack a dull boy';
    var cipherObj = (0, _encryption.encryptECIES)(publicKey, testString);
    var evilString = 'some work and some play makes jack a dull boy';
    var evilObj = (0, _encryption.encryptECIES)(publicKey, evilString);

    cipherObj.cipherText = evilObj.cipherText;

    try {
      (0, _encryption.decryptECIES)(privateKey, cipherObj);
      t.true(false, 'Decryption should have failed when ciphertext modified');
    } catch (e) {
      t.true(true, 'Decryption correctly fails when ciphertext modified');
    }
  });

  (0, _tape2.default)('sign-to-verify-works', function (t) {
    t.plan(2);

    var testString = 'all work and no play makes jack a dull boy';
    var sigObj = (0, _encryption.signECDSA)(privateKey, testString);
    t.true((0, _encryption.verifyECDSA)(testString, sigObj.publicKey, sigObj.signature), 'String content should be verified');

    var testBuffer = new Buffer(testString);
    sigObj = (0, _encryption.signECDSA)(privateKey, testBuffer);
    t.true((0, _encryption.verifyECDSA)(testBuffer, sigObj.publicKey, sigObj.signature), 'String buffer should be verified');
  });

  (0, _tape2.default)('sign-to-verify-fails', function (t) {
    t.plan(3);

    var testString = 'all work and no play makes jack a dull boy';
    var failString = 'I should fail';

    var sigObj = (0, _encryption.signECDSA)(privateKey, testString);
    t.false((0, _encryption.verifyECDSA)(failString, sigObj.publicKey, sigObj.signature), 'String content should not be verified');

    var testBuffer = Buffer.from(testString);
    sigObj = (0, _encryption.signECDSA)(privateKey, testBuffer);
    t.false((0, _encryption.verifyECDSA)(Buffer.from(failString), sigObj.publicKey, sigObj.signature), 'Buffer content should not be verified');

    var badPK = '0288580b020800f421d746f738b221d384f098e911b81939d8c94df89e74cba776';
    sigObj = (0, _encryption.signECDSA)(privateKey, testBuffer);
    t.false((0, _encryption.verifyECDSA)(Buffer.from(failString), badPK, sigObj.signature), 'Buffer content should not be verified');
  });

  (0, _tape2.default)('bn-padded-to-64-bytes', function (t) {
    t.plan(1);
    var ecurve = new _elliptic2.default.ec('secp256k1');

    var evilHexes = ['ba40f85b152bea8c3812da187bcfcfb0dc6e15f9e27cb073633b1c787b19472f', 'e346010f923f768138152d0bad063999ff1da5361a81e6e6f9106241692a0076'];
    var results = evilHexes.map(function (hex) {
      var ephemeralSK = ecurve.keyFromPrivate(hex);
      var ephemeralPK = ephemeralSK.getPublic();
      var sharedSecret = ephemeralSK.derive(ephemeralPK);
      return (0, _encryption.getHexFromBN)(sharedSecret).length === 64;
    });

    t.true(results.every(function (x) {
      return x;
    }), 'Evil hexes must all generate 64-len hex strings');
  });

  (0, _tape2.default)('encryptMnemonic & decryptMnemonic', function (t) {
    t.plan(4);

    var rawPhrase = 'march eager husband pilot waste rely exclude taste ' + 'twist donkey actress scene';
    var rawPassword = 'testtest';

    var preEncryptedPhrase = '7573f4f51089ba7ce2b95542552b7504de7305398637733' + '0579649dfbc9e664073ba614fac180d3dc237b21eba57f9aee5702ba819fe17a0752c4dc7' + '94884c9e75eb60da875f778bbc1aaca1bd373ea3';

    var legacyPhrase = 'vivid oxygen neutral wheat find thumb cigar wheel ' + 'board kiwi portion business';
    var legacyPassword = 'supersecret';
    var legacyEncrypted = '1c94d7de0000000304d583f007c71e6e5fef354c046e8c64b1' + 'adebd6904dcb007a1222f07313643873455ab2a3ab3819e99d518cc7d33c18bde02494aa' + '74efc35a8970b2007b2fc715f6067cee27f5c92d020b1806b0444994aab80050a6732131' + 'd2947a51bacb3952fb9286124b3c2b3196ff7edce66dee0dbd9eb59558e0044bddb3a78f' + '48a66cf8d78bb46bb472bd2d5ec420c831fc384293252459524ee2d668869f33c586a944' + '67d0ce8671260f4cc2e87140c873b6ca79fb86c6d77d134d7beb2018845a9e71e6c7ecde' + 'dacd8a676f1f873c5f9c708cc6070642d44d2505aa9cdba26c50ad6f8d3e547fb0cba710' + 'a7f7be54ff7ea7e98a809ddee5ef85f6f259b3a17a8d8dbaac618b80fe266a1e63ec19e4' + '76bee9177b51894ee';

    // Test encryption -> decryption. Can't be done with hard-coded values
    // due to random salt.
    // TODO: Use generators to allow for inserting the same salt for testing?
    (0, _encryption.encryptMnemonic)(rawPhrase, rawPassword).then(function (encoded) {
      return (0, _encryption.decryptMnemonic)(encoded.toString('hex'), rawPassword);
    }, function (err) {
      t.fail('Should encrypt mnemonic phrase, instead errored: ' + err);
    }).then(function (decoded) {
      t.true(decoded.toString() === rawPhrase, 'Should encrypt & decrypt a phrase correctly');
    }, function (err) {
      t.fail('Should decrypt encrypted phrase, instead errored: ' + err);
    });

    // Test valid input (No salt, so it's the same every time)
    (0, _encryption.decryptMnemonic)(legacyEncrypted, legacyPassword).then(function (decoded) {
      t.true(decoded.toString() === legacyPhrase, 'Should decrypt legacy encrypted phrase');
    }, function (err) {
      t.fail('Should decrypt legacy encrypted phrase, instead errored: ' + err);
    });

    // Invalid inputs
    (0, _encryption.encryptMnemonic)('not a mnemonic phrase', 'password').then(function () {
      t.fail('Should have thrown on invalid mnemonic input');
    }, function () {
      t.pass('Should throw on invalid mnemonic input');
    });

    (0, _encryption.decryptMnemonic)(preEncryptedPhrase, 'incorrect password').then(function () {
      t.fail('Should have thrown on incorrect password for decryption');
    }, function () {
      t.pass('Should throw on incorrect password');
    });
  });
}