e65ed17b41
* Refactor library, remove duplicates * Rebuild structure to use Messages and Signature models * Use PGPSplitMessage * Remove signature model * Various fixes * Add helpers with tests * Fixes, add some docs, add tests * Add attachment helpers * Add helpers Symmetric encryption * Edit docs + examples * Rename kr to keyRing * Various fixes for documentation * Edit JSON handling functions, add decrypt keyring via token * Add proposal changes doc * Fix CI * Drop *Message functions, join CleartextMessage and BinaryMessage * Change canonicalization and trimming only to text signatures * Add cleartextsignature, detach signature from message model, move helpers * Documentation, remove optional parameters * Move verification to separate model * Don't return message in VerifyDetached * Update table of contents in readme * Appease golint * Run go fmt * Rename Encrypt/DecryptMessageWithPassword to ..WithToken These functions shouldn't be used with user-provided passwords, as they don't do any key-stretching. * Change key generation usernames
90 lines
2.6 KiB
Go
90 lines
2.6 KiB
Go
package crypto
|
|
|
|
import (
|
|
"regexp"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/ProtonMail/gopenpgp/constants"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
const signedPlainText = "Signed message\n"
|
|
const testTime = 1557754627 // 2019-05-13T13:37:07+00:00
|
|
|
|
var signingKeyRing *KeyRing
|
|
var textSignature, binSignature *PGPSignature
|
|
var message *PlainMessage
|
|
var signatureTest = regexp.MustCompile("(?s)^-----BEGIN PGP SIGNATURE-----.*-----END PGP SIGNATURE-----$")
|
|
var signedMessageTest = regexp.MustCompile(
|
|
"(?s)^-----BEGIN PGP SIGNED MESSAGE-----.*-----BEGIN PGP SIGNATURE-----.*-----END PGP SIGNATURE-----$")
|
|
|
|
func TestSignTextDetached(t *testing.T) {
|
|
var err error
|
|
|
|
signingKeyRing, err = ReadArmoredKeyRing(strings.NewReader(readTestFile("keyring_privateKey", false)))
|
|
if err != nil {
|
|
t.Fatal("Cannot read private key:", err)
|
|
}
|
|
|
|
// Password defined in keyring_test
|
|
err = signingKeyRing.UnlockWithPassphrase(testMailboxPassword)
|
|
if err != nil {
|
|
t.Fatal("Cannot decrypt private key:", err)
|
|
}
|
|
|
|
message = NewPlainMessageFromString(signedPlainText)
|
|
textSignature, err = signingKeyRing.SignDetached(message)
|
|
if err != nil {
|
|
t.Fatal("Cannot generate signature:", err)
|
|
}
|
|
|
|
armoredSignature, err := textSignature.GetArmored()
|
|
if err != nil {
|
|
t.Fatal("Cannot armor signature:", err)
|
|
}
|
|
|
|
assert.Regexp(t, signatureTest, armoredSignature)
|
|
}
|
|
|
|
func TestVerifyTextDetachedSig(t *testing.T) {
|
|
signedMessage, err := signingKeyRing.VerifyDetached(message, textSignature, testTime)
|
|
if err != nil {
|
|
t.Fatal("Cannot verify plaintext signature:", err)
|
|
}
|
|
|
|
assert.Exactly(t, constants.SIGNATURE_OK, signedMessage.GetVerification())
|
|
}
|
|
|
|
func TestVerifyTextDetachedSigWrong(t *testing.T) {
|
|
fakeMessage := NewPlainMessageFromString("wrong text")
|
|
signedMessage, err := signingKeyRing.VerifyDetached(fakeMessage, textSignature, testTime)
|
|
|
|
assert.EqualError(t, err, "gopenpgp: signer is empty")
|
|
assert.Exactly(t, constants.SIGNATURE_FAILED, signedMessage.GetVerification())
|
|
}
|
|
|
|
func TestSignBinDetached(t *testing.T) {
|
|
var err error
|
|
|
|
binSignature, err = signingKeyRing.SignDetached(NewPlainMessage([]byte(signedPlainText)))
|
|
if err != nil {
|
|
t.Fatal("Cannot generate signature:", err)
|
|
}
|
|
|
|
armoredSignature, err := binSignature.GetArmored()
|
|
if err != nil {
|
|
t.Fatal("Cannot armor signature:", err)
|
|
}
|
|
|
|
assert.Regexp(t, signatureTest, armoredSignature)
|
|
}
|
|
|
|
func TestVerifyBinDetachedSig(t *testing.T) {
|
|
signedMessage, err := signingKeyRing.VerifyDetached(message, binSignature, testTime)
|
|
if err != nil {
|
|
t.Fatal("Cannot verify binary signature:", err)
|
|
}
|
|
|
|
assert.Exactly(t, constants.SIGNATURE_OK, signedMessage.GetVerification())
|
|
}
|