CryptoTests.swift

/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

import UIKit
import Shared
import Storage
@testable import Sync

import XCTest

class CryptoTests: XCTestCase {
    let hmacB16 = "b1e6c18ac30deb70236bc0d65a46f7a4dce3b8b0e02cf92182b914e3afa5eebc"
    let ivB64 = "GX8L37AAb2FZJMzIoXlX8w=="

    let hmacKey = Bytes.decodeBase64("MMntEfutgLTc8FlTLQFms8/xMPmCldqPlq/QQXEjx70=")!
    let encKey = Bytes.decodeBase64("9K/wLdXdw+nrTtXo4ZpECyHFNr4d7aYHqeg3KW9+m6Q=")!

    let invalidB64 = "NMsdnRulLwQsVcwxKW9XwaUe7ouJk5~~~~~~~~~~~~~~~"

    let ciphertextB64 = "NMsdnRulLwQsVcwxKW9XwaUe7ouJk5Wn80QhbD80l0HEcZGCynh45qIbeYBik0lgcHbKmlIxTJNwU+OeqipN+/j7MqhjKOGIlvbpiPQQLC6/ffF2vbzL0nzMUuSyvaQzyGGkSYM2xUFt06aNivoQTvU2GgGmUK6MvadoY38hhW2LCMkoZcNfgCqJ26lO1O0sEO6zHsk3IVz6vsKiJ2Hq6VCo7hu123wNegmujHWQSGyf8JeudZjKzfi0OFRRvvm4QAKyBWf0MgrW1F8SFDnVfkq8amCB7NhdwhgLWbN+21NitNwWYknoEWe1m6hmGZDgDT32uxzWxCV8QqqrpH/ZggViEr9uMgoy4lYaWqP7G5WKvvechc62aqnsNEYhH26A5QgzmlNyvB+KPFvPsYzxDnSCjOoRSLx7GG86wT59QZw="

    let cleartextB64 = "eyJpZCI6IjVxUnNnWFdSSlpYciIsImhpc3RVcmkiOiJmaWxlOi8vL1VzZXJzL2phc29uL0xpYnJhcnkvQXBwbGljYXRpb24lMjBTdXBwb3J0L0ZpcmVmb3gvUHJvZmlsZXMva3NnZDd3cGsuTG9jYWxTeW5jU2VydmVyL3dlYXZlL2xvZ3MvIiwidGl0bGUiOiJJbmRleCBvZiBmaWxlOi8vL1VzZXJzL2phc29uL0xpYnJhcnkvQXBwbGljYXRpb24gU3VwcG9ydC9GaXJlZm94L1Byb2ZpbGVzL2tzZ2Q3d3BrLkxvY2FsU3luY1NlcnZlci93ZWF2ZS9sb2dzLyIsInZpc2l0cyI6W3siZGF0ZSI6MTMxOTE0OTAxMjM3MjQyNSwidHlwZSI6MX1dfQ=="

    override func setUp() {
        super.setUp()
        // Put setup code here. This method is called before the invocation of each test method in the class.
    }

    override func tearDown() {
        // Put teardown code here. This method is called after the invocation of each test method in the class.
        super.tearDown()
    }

    func testHMAC() {
        let keyBundle = KeyBundle(encKey: encKey, hmacKey: hmacKey)
        // HMAC is computed against the Base64 ciphertext.
        let ciphertextRaw: Data = dataFromBase64(b64: ciphertextB64)
        XCTAssertNotNil(ciphertextRaw)
        XCTAssertEqual(hmacB16, keyBundle.hmacString(ciphertextRaw))
    }

    func dataFromBase64(b64: String) -> Data {
        return Bytes.dataFromBase64(b64)!
    }

    func testDecrypt() {
        let keyBundle = KeyBundle(encKey: encKey, hmacKey: hmacKey)
        // Decryption is done against raw bytes.
        let ciphertext = Bytes.decodeBase64(ciphertextB64)!
        let iv = Bytes.decodeBase64(ivB64)!
        let s = keyBundle.decrypt(ciphertext, iv: iv)
        let cleartext = NSString(data: Bytes.decodeBase64(cleartextB64)!,
                                 encoding: String.Encoding.utf8.rawValue)
        XCTAssertTrue(cleartext!.isEqual(to: s!))
    }

    func testBadBase64() {
        XCTAssertNil(Bytes.decodeBase64(invalidB64))
    }

    func testEncrypt() {
        let keyBundle = KeyBundle(encKey: encKey, hmacKey: hmacKey)
        let cleartext = Bytes.decodeBase64(cleartextB64)!

        // With specified IV.
        let iv = Bytes.decodeBase64(ivB64)!
        if let (b, ivOut) = keyBundle.encrypt(cleartext, iv: iv) {
            // The output IV should be the input.
            XCTAssertEqual(ivOut, iv)
            XCTAssertEqual(b, Bytes.decodeBase64(ciphertextB64)!)
        } else {
            XCTFail("Encrypt failed.")
        }

        // With a random IV.
        if let (b, ivOut) = keyBundle.encrypt(cleartext) {
            // The output IV should be different.
            // TODO: check that it's not empty!
            XCTAssertNotEqual(ivOut, iv)

            // The result will not match the ciphertext for which a different IV was used.
            XCTAssertNotEqual(b, Bytes.decodeBase64(ciphertextB64)!)
        } else {
            XCTFail("Encrypt failed.")
        }
    }
}