<?php
namespace ParagonIE\CipherSweet\Tests;
use ParagonIE\CipherSweet\Backend\FIPSCrypto;
use ParagonIE\CipherSweet\Backend\ModernCrypto;
use ParagonIE\CipherSweet\CipherSweet;
use ParagonIE\CipherSweet\Contract\BackendInterface;
use ParagonIE\CipherSweet\KeyProvider\ArrayProvider;
use ParagonIE\ConstantTime\Hex;
use PHPUnit\Framework\TestCase;
/**
* Class CipherSweetTest
* @package ParagonIE\CipherSweet\Tests
*/
class CipherSweetTest extends TestCase
{
public function testDefaultBackend()
{
$this->assertInstanceOf(
BackendInterface::class,
CipherSweet::getDefaultBackend()
);
}
/**
* @throws \ParagonIE\CipherSweet\Exception\ArrayKeyException
* @throws \ParagonIE\CipherSweet\Exception\CryptoOperationException
*/
public function testBasicAPI()
{
$fips = new FIPSCrypto();
$nacl = new ModernCrypto();
$random = \random_bytes(32);
$fipsEngine = new CipherSweet(
new ArrayProvider(
$fips,
[
ArrayProvider::INDEX_SYMMETRIC_KEY => $random
]
)
);
$naclEngine = new CipherSweet(
new ArrayProvider(
$nacl,
[
ArrayProvider::INDEX_SYMMETRIC_KEY => $random
]
)
);
$this->assertInstanceOf(FIPSCrypto::class, $fipsEngine->getBackend());
$this->assertInstanceOf(ModernCrypto::class, $naclEngine->getBackend());
foreach ([$fipsEngine, $naclEngine] as $e) {
$this->assertNotEquals(
Hex::encode($e->getBlindIndexRootKey('foo', 'bar')->getRawKey()),
Hex::encode($e->getFieldSymmetricKey('foo', 'bar')->getRawKey()),
'Domain separation did not prevent a collision?' .
"\n" . 'Class: ' . \get_class($e) . "\n" . 'Random: ' . Hex::encode($random)
);
$this->assertNotEquals(
Hex::encode($e->getFieldSymmetricKey('foo', 'bar')->getRawKey()),
Hex::encode($e->getFieldSymmetricKey('foo', 'baz')->getRawKey()),
'Assertion that bar !== baz failed (getFieldSymmetricKey collision?)' .
"\n" . 'Class: ' . \get_class($e) . "\n" . 'Random: ' . Hex::encode($random)
);
$this->assertNotEquals(
Hex::encode($e->getBlindIndexRootKey('foo', 'bar')->getRawKey()),
Hex::encode($e->getBlindIndexRootKey('foo', 'baz')->getRawKey()),
'Assertion that bar !== baz failed (getBlindIndexRootKey collision?)' .
"\n" . 'Class: ' . \get_class($e) . "\n" . 'Random: ' . Hex::encode($random)
);
try {
$this->assertNotEquals(
Hex::encode($e->getIndexTypeColumn('foo', 'bar', 'baz')),
Hex::encode($e->getIndexTypeColumn('test', '1234', 'quux'))
);
} catch (\Exception $ex) {
\trigger_error(
'getIndexTypeColumn collision:' .
"\n" . 'Class: ' . \get_class($e) . "\n" . 'Random: ' . Hex::encode($random),
E_USER_WARNING
);
// Collision chance of 1 in 4 billion
$this->assertNotEquals(
Hex::encode($e->getIndexTypeColumn('fon', 'baq', 'bay')),
Hex::encode($e->getIndexTypeColumn('tesu', '1235', 'quuy')),
'getIndexTypeColumn collision:' .
"\n" . 'Class: ' . \get_class($e) . "\n" . 'Random: ' . Hex::encode($random)
);
}
}
}
}
|
Download
