lysann/passforios-gopenpgp
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update session key decryption to not allow SED packets (#255)

Browse source
This commit is contained in:
Lukas Burkhalter 2023-10-27 12:10:17 +02:00 • committed by GitHub
parent 0eace5479a
commit da4cecfea5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 137 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

36
crypto/sessionkey_test.go
View file

@ -408,3 +408,39 @@ func TestAEADDataPacketDecryption(t *testing.T) {
assert.Exactly(t, "hello world\n", decrypted.GetString())
}
func TestSEDDecryption(t *testing.T) {
pgpMessageData, err := ioutil.ReadFile("testdata/sed_message")
if err != nil {
t.Fatal("Expected no error when reading message data, got:", err)
}
pgpMessage, err := NewPGPMessageFromArmored(string(pgpMessageData))
if err != nil {
t.Fatal("Expected no error when creating message, got:", err)
}
split, err := pgpMessage.SplitMessage()
if err != nil {
t.Fatal("Expected no error when splitting, got:", err)
}
privateKey, err := NewKeyFromArmored(readTestFile("sed_key", false))
if err != nil {
t.Fatal("Expected no error when unarmoring key, got:", err)
}
kR, err := NewKeyRing(privateKey)
if err != nil {
t.Fatal("Expected no error when creating the keyring, got:", err)
}
defer kR.ClearPrivateParams()
sessionKey, err := kR.DecryptSessionKey(split.GetBinaryKeyPacket())
if err != nil {
t.Fatal("Expected no error when decrypting session key, got:", err)
}
_, err = sessionKey.Decrypt(split.GetBinaryDataPacket())
if err == nil {
t.Fatal("sed packets without authentication should not be allowed", err)
}
}