ts-mls/dist/test/test-vectors/welcome.test.js

[](https://github.com/LukaJCB/ts-mls/actions/workflows/ci.yml) [](https://badge.fury.io/js/ts-mls) [![Coverage Status](https://co

import { getCiphersuiteFromId, getCiphersuiteImpl } from "../../src/crypto/ciphersuite";
import { hexToBytes } from "@noble/ciphers/utils";
import json from "../../test_vectors/welcome.json";
import { decodeMlsMessage } from "../../src/message";
import { makeKeyPackageRef } from "../../src/keyPackage";
import { constantTimeEqual } from "../../src/util/constantTimeCompare";
import { verifyGroupInfoConfirmationTag, verifyGroupInfoSignature } from "../../src/groupInfo";
import { decryptGroupInfo, decryptGroupSecrets } from "../../src/welcome";
for (const [index, x] of json.entries()) {
    test(`welcome test vectors ${index}`, async () => {
        const impl = await getCiphersuiteImpl(getCiphersuiteFromId(x.cipher_suite));
        await testWelcome(x.init_priv, x.key_package, x.signer_pub, x.welcome, impl);
    });
}
async function testWelcome(init_priv, key_package, signer_pub, welcome, impl) {
    const x = decodeMlsMessage(hexToBytes(welcome), 0);
    if (x === undefined || x[0].wireformat !== "mls_welcome")
        throw new Error("Couldn't decode to welcome");
    const w = x[0].welcome;
    const y = decodeMlsMessage(hexToBytes(key_package), 0);
    if (y === undefined || y[0].wireformat !== "mls_key_package")
        throw new Error("Couldn't decode to key package");
    const keyPackageRef = await makeKeyPackageRef(y[0].keyPackage, impl.hash);
    const secret = w.secrets.find((s) => constantTimeEqual(s.newMember, keyPackageRef));
    if (secret === undefined)
        throw new Error("No matching secret found");
    const privKey = await impl.hpke.importPrivateKey(hexToBytes(init_priv));
    const groupSecrets = await decryptGroupSecrets(privKey, keyPackageRef, w, impl.hpke);
    if (groupSecrets === undefined)
        throw new Error("Could not decrypt group secrets");
    const pskSecret = new Uint8Array(impl.kdf.size);
    const gi = await decryptGroupInfo(w, groupSecrets.joinerSecret, pskSecret, impl);
    if (gi === undefined)
        throw new Error("Could not decrypt group info");
    const tagOk = await verifyGroupInfoConfirmationTag(gi, groupSecrets.joinerSecret, pskSecret, impl);
    expect(tagOk).toBe(true);
    const signatureOk = await verifyGroupInfoSignature(gi, hexToBytes(signer_pub), impl.signature);
    expect(signatureOk).toBe(true);
}
//# sourceMappingURL=welcome.test.js.map