test: add comprehensive tests for Marmot Phase 2 components
38 test cases covering: - ChaCha20Poly1305: RFC 8439 §2.8.2 test vector, round-trip, tamper detection, wrong key, invalid nonce/key length, large messages - GroupEventEncryption: round-trip, empty/large messages, format validation, random nonce uniqueness, tamper detection, integration with GroupEvent.build() - CommitOrdering: deterministic winner selection (lowest created_at, smallest id tiebreak), comparator sorting, EpochCommitTracker lifecycle (add/resolve/clear) - KeyPackageUtils: validation (encoding, content, ref), selection policy (prefer non-last-resort, newest), migration kind detection - MarmotFilters: all filter builders produce correct kinds, tags, authors, since parameters; no empty filters https://claude.ai/code/session_01Ee5wmBAXwN46AJYUGYA9RQ
This commit is contained in:
@@ -0,0 +1,185 @@
|
||||
/*
|
||||
* Copyright (c) 2025 Vitor Pamplona
|
||||
*
|
||||
* Permission is hereby granted, free of charge, to any person obtaining a copy of
|
||||
* this software and associated documentation files (the "Software"), to deal in
|
||||
* the Software without restriction, including without limitation the rights to use,
|
||||
* copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
|
||||
* Software, and to permit persons to whom the Software is furnished to do so,
|
||||
* subject to the following conditions:
|
||||
*
|
||||
* The above copyright notice and this permission notice shall be included in all
|
||||
* copies or substantial portions of the Software.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
|
||||
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
|
||||
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
|
||||
* AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
* WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
*/
|
||||
package com.vitorpamplona.quartz.marmot
|
||||
|
||||
import com.vitorpamplona.quartz.marmot.mip03GroupMessages.CommitOrdering
|
||||
import com.vitorpamplona.quartz.marmot.mip03GroupMessages.GroupEvent
|
||||
import kotlin.test.Test
|
||||
import kotlin.test.assertEquals
|
||||
import kotlin.test.assertFalse
|
||||
import kotlin.test.assertNull
|
||||
import kotlin.test.assertTrue
|
||||
|
||||
/**
|
||||
* Tests for deterministic commit conflict resolution (MIP-03).
|
||||
*/
|
||||
class CommitOrderingTest {
|
||||
private val groupId = "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789"
|
||||
|
||||
private fun makeGroupEvent(
|
||||
id: String,
|
||||
createdAt: Long,
|
||||
): GroupEvent =
|
||||
GroupEvent(
|
||||
id = id.padEnd(64, '0'),
|
||||
pubKey = "a".repeat(64),
|
||||
createdAt = createdAt,
|
||||
tags = arrayOf(arrayOf("h", groupId)),
|
||||
content = "encrypted",
|
||||
sig = "s".repeat(128),
|
||||
)
|
||||
|
||||
// ===== selectWinner =====
|
||||
|
||||
@Test
|
||||
fun testSelectWinner_EmptyList() {
|
||||
assertNull(CommitOrdering.selectWinner(emptyList()))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectWinner_SingleCommit() {
|
||||
val commit = makeGroupEvent("aaa", 1000)
|
||||
assertEquals(commit, CommitOrdering.selectWinner(listOf(commit)))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectWinner_LowestTimestampWins() {
|
||||
val early = makeGroupEvent("bbb", 1000)
|
||||
val late = makeGroupEvent("aaa", 2000)
|
||||
|
||||
// Early wins even though its id is "larger"
|
||||
assertEquals(early, CommitOrdering.selectWinner(listOf(late, early)))
|
||||
assertEquals(early, CommitOrdering.selectWinner(listOf(early, late)))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectWinner_SameTimestamp_SmallestIdWins() {
|
||||
val smallId = makeGroupEvent("111", 1000) // id starts with 1
|
||||
val largeId = makeGroupEvent("fff", 1000) // id starts with f
|
||||
|
||||
assertEquals(smallId, CommitOrdering.selectWinner(listOf(largeId, smallId)))
|
||||
assertEquals(smallId, CommitOrdering.selectWinner(listOf(smallId, largeId)))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectWinner_ThreeCompetitors() {
|
||||
val a = makeGroupEvent("ccc", 1000)
|
||||
val b = makeGroupEvent("aaa", 1000) // Same timestamp, smallest id
|
||||
val c = makeGroupEvent("bbb", 999) // Earliest timestamp
|
||||
|
||||
// c wins (earliest timestamp)
|
||||
assertEquals(c, CommitOrdering.selectWinner(listOf(a, b, c)))
|
||||
}
|
||||
|
||||
// ===== isWinner =====
|
||||
|
||||
@Test
|
||||
fun testIsWinner() {
|
||||
val winner = makeGroupEvent("aaa", 999)
|
||||
val loser = makeGroupEvent("bbb", 1000)
|
||||
val competitors = listOf(winner, loser)
|
||||
|
||||
assertTrue(CommitOrdering.isWinner(winner, competitors))
|
||||
assertFalse(CommitOrdering.isWinner(loser, competitors))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testIsWinner_EmptyCompetitors() {
|
||||
val commit = makeGroupEvent("aaa", 1000)
|
||||
assertFalse(CommitOrdering.isWinner(commit, emptyList()))
|
||||
}
|
||||
|
||||
// ===== comparator ordering =====
|
||||
|
||||
@Test
|
||||
fun testComparatorSortsCorrectly() {
|
||||
val events =
|
||||
listOf(
|
||||
makeGroupEvent("ccc", 3000),
|
||||
makeGroupEvent("aaa", 1000),
|
||||
makeGroupEvent("bbb", 1000),
|
||||
makeGroupEvent("ddd", 2000),
|
||||
)
|
||||
|
||||
val sorted = events.sortedWith(CommitOrdering.comparator)
|
||||
|
||||
// 1. aaa@1000 (lowest timestamp, then smallest id)
|
||||
// 2. bbb@1000 (same timestamp, next id)
|
||||
// 3. ddd@2000
|
||||
// 4. ccc@3000
|
||||
assertEquals("aaa", sorted[0].id.take(3))
|
||||
assertEquals("bbb", sorted[1].id.take(3))
|
||||
assertEquals("ddd", sorted[2].id.take(3))
|
||||
assertEquals("ccc", sorted[3].id.take(3))
|
||||
}
|
||||
|
||||
// ===== EpochCommitTracker =====
|
||||
|
||||
@Test
|
||||
fun testEpochCommitTracker_Basic() {
|
||||
val tracker = CommitOrdering.EpochCommitTracker()
|
||||
val epoch1Commit1 = makeGroupEvent("bbb", 1000)
|
||||
val epoch1Commit2 = makeGroupEvent("aaa", 1001)
|
||||
|
||||
tracker.addCommit(1L, epoch1Commit1)
|
||||
tracker.addCommit(1L, epoch1Commit2)
|
||||
|
||||
assertEquals(2, tracker.pendingForEpoch(1L).size)
|
||||
assertEquals(0, tracker.pendingForEpoch(2L).size)
|
||||
|
||||
// Resolve: epoch1Commit1 wins (earlier timestamp)
|
||||
val winner = tracker.resolve(1L)
|
||||
assertEquals(epoch1Commit1, winner)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testEpochCommitTracker_MultipleEpochs() {
|
||||
val tracker = CommitOrdering.EpochCommitTracker()
|
||||
val e1 = makeGroupEvent("aaa", 1000)
|
||||
val e2 = makeGroupEvent("bbb", 2000)
|
||||
|
||||
tracker.addCommit(1L, e1)
|
||||
tracker.addCommit(2L, e2)
|
||||
|
||||
assertEquals(setOf(1L, 2L), tracker.pendingEpochs())
|
||||
|
||||
tracker.clearEpoch(1L)
|
||||
assertEquals(setOf(2L), tracker.pendingEpochs())
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testEpochCommitTracker_ClearAll() {
|
||||
val tracker = CommitOrdering.EpochCommitTracker()
|
||||
tracker.addCommit(1L, makeGroupEvent("aaa", 1000))
|
||||
tracker.addCommit(2L, makeGroupEvent("bbb", 2000))
|
||||
|
||||
tracker.clear()
|
||||
|
||||
assertTrue(tracker.pendingEpochs().isEmpty())
|
||||
assertNull(tracker.resolve(1L))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testEpochCommitTracker_ResolveEmpty() {
|
||||
val tracker = CommitOrdering.EpochCommitTracker()
|
||||
assertNull(tracker.resolve(999L))
|
||||
}
|
||||
}
|
||||
+162
@@ -0,0 +1,162 @@
|
||||
/*
|
||||
* Copyright (c) 2025 Vitor Pamplona
|
||||
*
|
||||
* Permission is hereby granted, free of charge, to any person obtaining a copy of
|
||||
* this software and associated documentation files (the "Software"), to deal in
|
||||
* the Software without restriction, including without limitation the rights to use,
|
||||
* copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
|
||||
* Software, and to permit persons to whom the Software is furnished to do so,
|
||||
* subject to the following conditions:
|
||||
*
|
||||
* The above copyright notice and this permission notice shall be included in all
|
||||
* copies or substantial portions of the Software.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
|
||||
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
|
||||
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
|
||||
* AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
* WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
*/
|
||||
package com.vitorpamplona.quartz.marmot
|
||||
|
||||
import com.vitorpamplona.quartz.marmot.mip03GroupMessages.GroupEvent
|
||||
import com.vitorpamplona.quartz.marmot.mip03GroupMessages.GroupEventEncryption
|
||||
import com.vitorpamplona.quartz.nip01Core.core.hexToByteArray
|
||||
import kotlin.io.encoding.Base64
|
||||
import kotlin.io.encoding.ExperimentalEncodingApi
|
||||
import kotlin.test.Test
|
||||
import kotlin.test.assertContentEquals
|
||||
import kotlin.test.assertEquals
|
||||
import kotlin.test.assertFailsWith
|
||||
import kotlin.test.assertTrue
|
||||
|
||||
/**
|
||||
* Tests for Marmot GroupEvent encryption/decryption (MIP-03).
|
||||
*/
|
||||
class GroupEventEncryptionTest {
|
||||
private fun hex(s: String): ByteArray = s.replace(" ", "").hexToByteArray()
|
||||
|
||||
// Simulate a 32-byte MLS exporter-derived key
|
||||
private val testGroupKey = hex("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
|
||||
@Test
|
||||
fun testRoundTrip() {
|
||||
val mlsMessage = "Hello MLS Group!".encodeToByteArray()
|
||||
|
||||
val encrypted = GroupEventEncryption.encrypt(mlsMessage, testGroupKey)
|
||||
val decrypted = GroupEventEncryption.decrypt(encrypted, testGroupKey)
|
||||
|
||||
assertContentEquals(mlsMessage, decrypted)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testRoundTrip_EmptyMessage() {
|
||||
val mlsMessage = ByteArray(0)
|
||||
|
||||
val encrypted = GroupEventEncryption.encrypt(mlsMessage, testGroupKey)
|
||||
val decrypted = GroupEventEncryption.decrypt(encrypted, testGroupKey)
|
||||
|
||||
assertContentEquals(mlsMessage, decrypted)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testRoundTrip_LargeMessage() {
|
||||
// Simulate a large MLS commit message
|
||||
val mlsMessage = ByteArray(4096) { (it % 256).toByte() }
|
||||
|
||||
val encrypted = GroupEventEncryption.encrypt(mlsMessage, testGroupKey)
|
||||
val decrypted = GroupEventEncryption.decrypt(encrypted, testGroupKey)
|
||||
|
||||
assertContentEquals(mlsMessage, decrypted)
|
||||
}
|
||||
|
||||
@OptIn(ExperimentalEncodingApi::class)
|
||||
@Test
|
||||
fun testEncryptedFormat() {
|
||||
val mlsMessage = "test content".encodeToByteArray()
|
||||
|
||||
val encryptedBase64 = GroupEventEncryption.encrypt(mlsMessage, testGroupKey)
|
||||
val decoded = Base64.decode(encryptedBase64)
|
||||
|
||||
// Should be: nonce(12) + ciphertext(messageLen) + tag(16)
|
||||
val expectedSize = GroupEvent.NONCE_LENGTH + mlsMessage.size + GroupEvent.AUTH_TAG_LENGTH
|
||||
assertEquals(expectedSize, decoded.size)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testDifferentEncryptionsProduceDifferentCiphertext() {
|
||||
val mlsMessage = "same plaintext".encodeToByteArray()
|
||||
|
||||
val encrypted1 = GroupEventEncryption.encrypt(mlsMessage, testGroupKey)
|
||||
val encrypted2 = GroupEventEncryption.encrypt(mlsMessage, testGroupKey)
|
||||
|
||||
// Each encryption uses a random nonce, so outputs must differ
|
||||
assertTrue(encrypted1 != encrypted2)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testWrongKeyFails() {
|
||||
val mlsMessage = "secret message".encodeToByteArray()
|
||||
val wrongKey = hex("ff0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
|
||||
val encrypted = GroupEventEncryption.encrypt(mlsMessage, testGroupKey)
|
||||
|
||||
assertFailsWith<IllegalStateException> {
|
||||
GroupEventEncryption.decrypt(encrypted, wrongKey)
|
||||
}
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testInvalidKeyLength() {
|
||||
val mlsMessage = "test".encodeToByteArray()
|
||||
val shortKey = ByteArray(16)
|
||||
|
||||
assertFailsWith<IllegalArgumentException> {
|
||||
GroupEventEncryption.encrypt(mlsMessage, shortKey)
|
||||
}
|
||||
}
|
||||
|
||||
@OptIn(ExperimentalEncodingApi::class)
|
||||
@Test
|
||||
fun testTruncatedPayloadFails() {
|
||||
val tooShort = Base64.encode(ByteArray(10)) // Less than MIN_CONTENT_LENGTH
|
||||
|
||||
assertFailsWith<IllegalArgumentException> {
|
||||
GroupEventEncryption.decrypt(tooShort, testGroupKey)
|
||||
}
|
||||
}
|
||||
|
||||
@OptIn(ExperimentalEncodingApi::class)
|
||||
@Test
|
||||
fun testTamperedContentFails() {
|
||||
val mlsMessage = "tamper test".encodeToByteArray()
|
||||
|
||||
val encryptedBase64 = GroupEventEncryption.encrypt(mlsMessage, testGroupKey)
|
||||
val decoded = Base64.decode(encryptedBase64)
|
||||
|
||||
// Tamper with a ciphertext byte (after the 12-byte nonce)
|
||||
decoded[GroupEvent.NONCE_LENGTH] = (decoded[GroupEvent.NONCE_LENGTH].toInt() xor 0xFF).toByte()
|
||||
val tamperedBase64 = Base64.encode(decoded)
|
||||
|
||||
assertFailsWith<IllegalStateException> {
|
||||
GroupEventEncryption.decrypt(tamperedBase64, testGroupKey)
|
||||
}
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testIntegrationWithGroupEventBuild() {
|
||||
val mlsMessage = "MLS application message".encodeToByteArray()
|
||||
val groupId = "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789"
|
||||
|
||||
val encryptedContent = GroupEventEncryption.encrypt(mlsMessage, testGroupKey)
|
||||
val groupEvent = GroupEvent.build(encryptedContent, groupId)
|
||||
|
||||
assertEquals(GroupEvent.KIND, groupEvent.kind)
|
||||
assertEquals(encryptedContent, groupEvent.content)
|
||||
|
||||
// Decrypt from the event content
|
||||
val decrypted = GroupEventEncryption.decrypt(groupEvent.content, testGroupKey)
|
||||
assertContentEquals(mlsMessage, decrypted)
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,218 @@
|
||||
/*
|
||||
* Copyright (c) 2025 Vitor Pamplona
|
||||
*
|
||||
* Permission is hereby granted, free of charge, to any person obtaining a copy of
|
||||
* this software and associated documentation files (the "Software"), to deal in
|
||||
* the Software without restriction, including without limitation the rights to use,
|
||||
* copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
|
||||
* Software, and to permit persons to whom the Software is furnished to do so,
|
||||
* subject to the following conditions:
|
||||
*
|
||||
* The above copyright notice and this permission notice shall be included in all
|
||||
* copies or substantial portions of the Software.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
|
||||
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
|
||||
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
|
||||
* AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
* WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
*/
|
||||
package com.vitorpamplona.quartz.marmot
|
||||
|
||||
import com.vitorpamplona.quartz.marmot.mip00KeyPackages.KeyPackageEvent
|
||||
import com.vitorpamplona.quartz.marmot.mip00KeyPackages.KeyPackageUtils
|
||||
import com.vitorpamplona.quartz.nip01Core.core.Event
|
||||
import kotlin.test.Test
|
||||
import kotlin.test.assertEquals
|
||||
import kotlin.test.assertFalse
|
||||
import kotlin.test.assertNotNull
|
||||
import kotlin.test.assertNull
|
||||
import kotlin.test.assertTrue
|
||||
|
||||
/**
|
||||
* Tests for KeyPackage lifecycle helpers (MIP-00).
|
||||
*/
|
||||
class KeyPackageUtilsTest {
|
||||
private val testPubKey = "a".repeat(64)
|
||||
private val testRef = "b".repeat(64)
|
||||
|
||||
private fun makeKeyPackageEvent(
|
||||
dTag: String = "0",
|
||||
createdAt: Long = 1000,
|
||||
encoding: String = "base64",
|
||||
ciphersuite: String = "0x0001",
|
||||
keyPackageRef: String = testRef,
|
||||
content: String = "dGVzdA==", // base64("test")
|
||||
): KeyPackageEvent =
|
||||
KeyPackageEvent(
|
||||
id = "e".repeat(64),
|
||||
pubKey = testPubKey,
|
||||
createdAt = createdAt,
|
||||
tags =
|
||||
arrayOf(
|
||||
arrayOf("d", dTag),
|
||||
arrayOf("encoding", encoding),
|
||||
arrayOf("mls_ciphersuite", ciphersuite),
|
||||
arrayOf("i", keyPackageRef),
|
||||
arrayOf("mls_protocol_version", "1.0"),
|
||||
arrayOf("mls_extensions", "0xf2ee", "0x000a"),
|
||||
arrayOf("mls_proposals", "0x000a"),
|
||||
arrayOf("relays", "wss://relay.example.com"),
|
||||
),
|
||||
content = content,
|
||||
sig = "s".repeat(128),
|
||||
)
|
||||
|
||||
// ===== isValid =====
|
||||
|
||||
@Test
|
||||
fun testIsValid_ValidKeyPackage() {
|
||||
val kp = makeKeyPackageEvent()
|
||||
assertTrue(KeyPackageUtils.isValid(kp))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testIsValid_WrongEncoding() {
|
||||
val kp = makeKeyPackageEvent(encoding = "raw")
|
||||
assertFalse(KeyPackageUtils.isValid(kp))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testIsValid_EmptyContent() {
|
||||
val kp = makeKeyPackageEvent(content = "")
|
||||
assertFalse(KeyPackageUtils.isValid(kp))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testIsValid_MissingRef() {
|
||||
val kp = makeKeyPackageEvent(keyPackageRef = "")
|
||||
assertFalse(KeyPackageUtils.isValid(kp))
|
||||
}
|
||||
|
||||
// ===== selectBest =====
|
||||
|
||||
@Test
|
||||
fun testSelectBest_EmptyList() {
|
||||
assertNull(KeyPackageUtils.selectBest(emptyList()))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectBest_SingleValid() {
|
||||
val kp = makeKeyPackageEvent()
|
||||
assertEquals(kp, KeyPackageUtils.selectBest(listOf(kp)))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectBest_PrefersNewest() {
|
||||
val old = makeKeyPackageEvent(dTag = "0", createdAt = 1000)
|
||||
val newer = makeKeyPackageEvent(dTag = "1", createdAt = 2000)
|
||||
|
||||
val best = KeyPackageUtils.selectBest(listOf(old, newer))
|
||||
assertNotNull(best)
|
||||
assertEquals(2000, best.createdAt)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectBest_PrefersNonLastResort() {
|
||||
val lastResort = makeKeyPackageEvent(dTag = "lr", createdAt = 3000)
|
||||
val regular = makeKeyPackageEvent(dTag = "0", createdAt = 1000)
|
||||
|
||||
// Even though lastResort is newer, regular is preferred
|
||||
val best = KeyPackageUtils.selectBest(listOf(lastResort, regular), lastResortDTag = "lr")
|
||||
assertNotNull(best)
|
||||
assertEquals("0", best.dTag())
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectBest_FallsBackToLastResort() {
|
||||
val lastResort = makeKeyPackageEvent(dTag = "lr", createdAt = 3000)
|
||||
|
||||
// Only last-resort available
|
||||
val best = KeyPackageUtils.selectBest(listOf(lastResort), lastResortDTag = "lr")
|
||||
assertNotNull(best)
|
||||
assertEquals("lr", best.dTag())
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectBest_FiltersOutInvalid() {
|
||||
val invalid = makeKeyPackageEvent(dTag = "0", encoding = "raw")
|
||||
val valid = makeKeyPackageEvent(dTag = "1", createdAt = 500)
|
||||
|
||||
val best = KeyPackageUtils.selectBest(listOf(invalid, valid))
|
||||
assertNotNull(best)
|
||||
assertEquals("1", best.dTag())
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testSelectBest_AllInvalid() {
|
||||
val invalid1 = makeKeyPackageEvent(encoding = "raw")
|
||||
val invalid2 = makeKeyPackageEvent(content = "")
|
||||
|
||||
assertNull(KeyPackageUtils.selectBest(listOf(invalid1, invalid2)))
|
||||
}
|
||||
|
||||
// ===== buildRotation =====
|
||||
|
||||
@Test
|
||||
fun testBuildRotation() {
|
||||
val template =
|
||||
KeyPackageUtils.buildRotation(
|
||||
newKeyPackageBase64 = "bmV3IGtleXBhY2thZ2U=",
|
||||
dTagSlot = "0",
|
||||
newKeyPackageRef = testRef,
|
||||
relays = emptyList(),
|
||||
)
|
||||
|
||||
assertEquals(KeyPackageEvent.KIND, template.kind)
|
||||
assertEquals("bmV3IGtleXBhY2thZ2U=", template.content)
|
||||
}
|
||||
|
||||
// ===== migration helpers =====
|
||||
|
||||
@Test
|
||||
fun testIsKeyPackageKind() {
|
||||
val addressable =
|
||||
Event(
|
||||
id = "e".repeat(64),
|
||||
pubKey = testPubKey,
|
||||
createdAt = 1000,
|
||||
kind = 30443,
|
||||
tags = emptyArray(),
|
||||
content = "",
|
||||
sig = "",
|
||||
)
|
||||
val legacy =
|
||||
Event(
|
||||
id = "e".repeat(64),
|
||||
pubKey = testPubKey,
|
||||
createdAt = 1000,
|
||||
kind = 443,
|
||||
tags = emptyArray(),
|
||||
content = "",
|
||||
sig = "",
|
||||
)
|
||||
val other =
|
||||
Event(
|
||||
id = "e".repeat(64),
|
||||
pubKey = testPubKey,
|
||||
createdAt = 1000,
|
||||
kind = 1,
|
||||
tags = emptyArray(),
|
||||
content = "",
|
||||
sig = "",
|
||||
)
|
||||
|
||||
assertTrue(KeyPackageUtils.isKeyPackageKind(addressable))
|
||||
assertTrue(KeyPackageUtils.isKeyPackageKind(legacy))
|
||||
assertFalse(KeyPackageUtils.isKeyPackageKind(other))
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testMigrationKinds() {
|
||||
val kinds = KeyPackageUtils.migrationKinds()
|
||||
assertTrue(kinds.contains(30443))
|
||||
assertTrue(kinds.contains(443))
|
||||
assertEquals(2, kinds.size)
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,142 @@
|
||||
/*
|
||||
* Copyright (c) 2025 Vitor Pamplona
|
||||
*
|
||||
* Permission is hereby granted, free of charge, to any person obtaining a copy of
|
||||
* this software and associated documentation files (the "Software"), to deal in
|
||||
* the Software without restriction, including without limitation the rights to use,
|
||||
* copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
|
||||
* Software, and to permit persons to whom the Software is furnished to do so,
|
||||
* subject to the following conditions:
|
||||
*
|
||||
* The above copyright notice and this permission notice shall be included in all
|
||||
* copies or substantial portions of the Software.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
|
||||
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
|
||||
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
|
||||
* AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
* WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
*/
|
||||
package com.vitorpamplona.quartz.marmot
|
||||
|
||||
import com.vitorpamplona.quartz.marmot.mip00KeyPackages.KeyPackageEvent
|
||||
import com.vitorpamplona.quartz.marmot.mip03GroupMessages.GroupEvent
|
||||
import com.vitorpamplona.quartz.nip59Giftwrap.wraps.GiftWrapEvent
|
||||
import kotlin.test.Test
|
||||
import kotlin.test.assertEquals
|
||||
import kotlin.test.assertNotNull
|
||||
import kotlin.test.assertNull
|
||||
import kotlin.test.assertTrue
|
||||
|
||||
/**
|
||||
* Tests for Marmot relay subscription filter builders.
|
||||
*/
|
||||
class MarmotFiltersTest {
|
||||
private val testPubKey = "a".repeat(64)
|
||||
private val testGroupId = "b".repeat(64)
|
||||
private val testRef = "c".repeat(64)
|
||||
|
||||
@Test
|
||||
fun testKeyPackagesByAuthor() {
|
||||
val filter = MarmotFilters.keyPackagesByAuthor(testPubKey)
|
||||
|
||||
assertEquals(listOf(KeyPackageEvent.KIND), filter.kinds)
|
||||
assertEquals(listOf(testPubKey), filter.authors)
|
||||
assertNull(filter.tags)
|
||||
assertNull(filter.since)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testKeyPackagesByAuthors() {
|
||||
val pubkeys = listOf("a".repeat(64), "b".repeat(64))
|
||||
val filter = MarmotFilters.keyPackagesByAuthors(pubkeys)
|
||||
|
||||
assertEquals(listOf(KeyPackageEvent.KIND), filter.kinds)
|
||||
assertEquals(pubkeys, filter.authors)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testKeyPackageByRef() {
|
||||
val filter = MarmotFilters.keyPackageByRef(testRef)
|
||||
|
||||
assertEquals(listOf(KeyPackageEvent.KIND), filter.kinds)
|
||||
assertNull(filter.authors)
|
||||
val tags = filter.tags
|
||||
assertNotNull(tags)
|
||||
assertEquals(listOf(testRef), tags["i"])
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testGroupEventsByGroupId() {
|
||||
val filter = MarmotFilters.groupEventsByGroupId(testGroupId)
|
||||
|
||||
assertEquals(listOf(GroupEvent.KIND), filter.kinds)
|
||||
val tags = filter.tags
|
||||
assertNotNull(tags)
|
||||
assertEquals(listOf(testGroupId), tags["h"])
|
||||
assertNull(filter.since)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testGroupEventsByGroupIdSince() {
|
||||
val since = 1700000000L
|
||||
val filter = MarmotFilters.groupEventsByGroupIdSince(testGroupId, since)
|
||||
|
||||
assertEquals(listOf(GroupEvent.KIND), filter.kinds)
|
||||
val tags = filter.tags
|
||||
assertNotNull(tags)
|
||||
assertEquals(listOf(testGroupId), tags["h"])
|
||||
assertEquals(since, filter.since)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testGiftWrapsForUser() {
|
||||
val filter = MarmotFilters.giftWrapsForUser(testPubKey)
|
||||
|
||||
assertEquals(listOf(GiftWrapEvent.KIND), filter.kinds)
|
||||
val tags = filter.tags
|
||||
assertNotNull(tags)
|
||||
assertEquals(listOf(testPubKey), tags["p"])
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testGiftWrapsForUserSince() {
|
||||
val since = 1700000000L
|
||||
val filter = MarmotFilters.giftWrapsForUserSince(testPubKey, since)
|
||||
|
||||
assertEquals(listOf(GiftWrapEvent.KIND), filter.kinds)
|
||||
val tags = filter.tags
|
||||
assertNotNull(tags)
|
||||
assertEquals(listOf(testPubKey), tags["p"])
|
||||
assertEquals(since, filter.since)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testKeyPackagesMigration() {
|
||||
val filter = MarmotFilters.keyPackagesMigration(testPubKey)
|
||||
|
||||
val kinds = filter.kinds
|
||||
assertNotNull(kinds)
|
||||
assertTrue(kinds.contains(KeyPackageEvent.KIND))
|
||||
assertTrue(kinds.contains(443))
|
||||
assertEquals(listOf(testPubKey), filter.authors)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testFiltersAreNotEmpty() {
|
||||
// None of the filter builders should produce empty filters
|
||||
val filters =
|
||||
listOf(
|
||||
MarmotFilters.keyPackagesByAuthor(testPubKey),
|
||||
MarmotFilters.keyPackageByRef(testRef),
|
||||
MarmotFilters.groupEventsByGroupId(testGroupId),
|
||||
MarmotFilters.giftWrapsForUser(testPubKey),
|
||||
MarmotFilters.keyPackagesMigration(testPubKey),
|
||||
)
|
||||
|
||||
filters.forEach { filter ->
|
||||
assertTrue(!filter.isEmpty(), "Filter should not be empty: $filter")
|
||||
}
|
||||
}
|
||||
}
|
||||
+214
@@ -0,0 +1,214 @@
|
||||
/*
|
||||
* Copyright (c) 2025 Vitor Pamplona
|
||||
*
|
||||
* Permission is hereby granted, free of charge, to any person obtaining a copy of
|
||||
* this software and associated documentation files (the "Software"), to deal in
|
||||
* the Software without restriction, including without limitation the rights to use,
|
||||
* copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
|
||||
* Software, and to permit persons to whom the Software is furnished to do so,
|
||||
* subject to the following conditions:
|
||||
*
|
||||
* The above copyright notice and this permission notice shall be included in all
|
||||
* copies or substantial portions of the Software.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
|
||||
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
|
||||
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
|
||||
* AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
* WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
*/
|
||||
package com.vitorpamplona.quartz.nip44Encryption.crypto
|
||||
|
||||
import com.vitorpamplona.quartz.nip01Core.core.hexToByteArray
|
||||
import kotlin.test.Test
|
||||
import kotlin.test.assertContentEquals
|
||||
import kotlin.test.assertEquals
|
||||
import kotlin.test.assertFailsWith
|
||||
|
||||
/**
|
||||
* Tests for standard ChaCha20-Poly1305 AEAD (RFC 8439) with 12-byte nonces.
|
||||
* Includes the official RFC 8439 §2.8.2 test vector and round-trip tests.
|
||||
*/
|
||||
class ChaCha20Poly1305Test {
|
||||
private fun hex(s: String): ByteArray = s.replace(" ", "").hexToByteArray()
|
||||
|
||||
// ===== RFC 8439 §2.8.2: AEAD_CHACHA20_POLY1305 Test Vector =====
|
||||
@Test
|
||||
fun testEncrypt_RFC8439() {
|
||||
val key = hex("808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f")
|
||||
val nonce = hex("070000004041424344454647")
|
||||
val ad = hex("50515253c0c1c2c3c4c5c6c7")
|
||||
val plaintext =
|
||||
"Ladies and Gentlemen of the class of '99: If I could offer you only one tip for the future, sunscreen would be it."
|
||||
.encodeToByteArray()
|
||||
|
||||
val result = ChaCha20Poly1305.encrypt(plaintext, ad, nonce, key)
|
||||
|
||||
val expectedCiphertext =
|
||||
hex(
|
||||
"d31a8d34648e60db7b86afbc53ef7ec2" +
|
||||
"a4aded51296e08fea9e2b5a736ee62d6" +
|
||||
"3dbea45e8ca9671282fafb69da92728b" +
|
||||
"1a71de0a9e060b2905d6a5b67ecd3b36" +
|
||||
"92ddbd7f2d778b8c9803aee328091b58" +
|
||||
"fab324e4fad675945585808b4831d7bc" +
|
||||
"3ff4def08e4b7a9de576d26586cec64b" +
|
||||
"6116",
|
||||
)
|
||||
val expectedTag = hex("1ae10b594f09e26a7e902ecbd0600691")
|
||||
|
||||
val ciphertext = result.copyOfRange(0, result.size - 16)
|
||||
val tag = result.copyOfRange(result.size - 16, result.size)
|
||||
|
||||
assertContentEquals(expectedCiphertext, ciphertext)
|
||||
assertContentEquals(expectedTag, tag)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testDecrypt_RFC8439() {
|
||||
val key = hex("808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f")
|
||||
val nonce = hex("070000004041424344454647")
|
||||
val ad = hex("50515253c0c1c2c3c4c5c6c7")
|
||||
val ciphertextWithTag =
|
||||
hex(
|
||||
"d31a8d34648e60db7b86afbc53ef7ec2" +
|
||||
"a4aded51296e08fea9e2b5a736ee62d6" +
|
||||
"3dbea45e8ca9671282fafb69da92728b" +
|
||||
"1a71de0a9e060b2905d6a5b67ecd3b36" +
|
||||
"92ddbd7f2d778b8c9803aee328091b58" +
|
||||
"fab324e4fad675945585808b4831d7bc" +
|
||||
"3ff4def08e4b7a9de576d26586cec64b" +
|
||||
"6116" +
|
||||
"1ae10b594f09e26a7e902ecbd0600691",
|
||||
)
|
||||
|
||||
val plaintext = ChaCha20Poly1305.decrypt(ciphertextWithTag, ad, nonce, key)
|
||||
|
||||
val expected =
|
||||
"Ladies and Gentlemen of the class of '99: If I could offer you only one tip for the future, sunscreen would be it."
|
||||
assertEquals(expected, plaintext.decodeToString())
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testRoundTrip() {
|
||||
val key = hex("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
val nonce = hex("000000000000004a00000000")
|
||||
val ad = hex("feedfacedeadbeef")
|
||||
val plaintext = "Hello, Nostr! Round-trip test with 12-byte nonce.".encodeToByteArray()
|
||||
|
||||
val encrypted = ChaCha20Poly1305.encrypt(plaintext, ad, nonce, key)
|
||||
val decrypted = ChaCha20Poly1305.decrypt(encrypted, ad, nonce, key)
|
||||
|
||||
assertContentEquals(plaintext, decrypted)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testRoundTrip_EmptyAD() {
|
||||
val key = hex("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
val nonce = hex("000102030405060708090a0b")
|
||||
val ad = ByteArray(0)
|
||||
val plaintext = "Empty AAD test - used by Marmot GroupEvents".encodeToByteArray()
|
||||
|
||||
val encrypted = ChaCha20Poly1305.encrypt(plaintext, ad, nonce, key)
|
||||
val decrypted = ChaCha20Poly1305.decrypt(encrypted, ad, nonce, key)
|
||||
|
||||
assertContentEquals(plaintext, decrypted)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testRoundTrip_EmptyPlaintext() {
|
||||
val key = hex("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
val nonce = hex("000102030405060708090a0b")
|
||||
val ad = ByteArray(0)
|
||||
val plaintext = ByteArray(0)
|
||||
|
||||
val encrypted = ChaCha20Poly1305.encrypt(plaintext, ad, nonce, key)
|
||||
assertEquals(16, encrypted.size) // Just the 16-byte tag
|
||||
val decrypted = ChaCha20Poly1305.decrypt(encrypted, ad, nonce, key)
|
||||
assertContentEquals(plaintext, decrypted)
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testTamperedCiphertext() {
|
||||
val key = hex("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
val nonce = hex("000102030405060708090a0b")
|
||||
val ad = ByteArray(0)
|
||||
val plaintext = "Tamper detection test".encodeToByteArray()
|
||||
|
||||
val encrypted = ChaCha20Poly1305.encrypt(plaintext, ad, nonce, key)
|
||||
encrypted[0] = (encrypted[0].toInt() xor 1).toByte()
|
||||
|
||||
assertFailsWith<IllegalStateException> {
|
||||
ChaCha20Poly1305.decrypt(encrypted, ad, nonce, key)
|
||||
}
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testTamperedTag() {
|
||||
val key = hex("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
val nonce = hex("000102030405060708090a0b")
|
||||
val ad = ByteArray(0)
|
||||
val plaintext = "Tag tamper test".encodeToByteArray()
|
||||
|
||||
val encrypted = ChaCha20Poly1305.encrypt(plaintext, ad, nonce, key)
|
||||
// Flip a bit in the last byte (part of the tag)
|
||||
encrypted[encrypted.size - 1] = (encrypted[encrypted.size - 1].toInt() xor 1).toByte()
|
||||
|
||||
assertFailsWith<IllegalStateException> {
|
||||
ChaCha20Poly1305.decrypt(encrypted, ad, nonce, key)
|
||||
}
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testWrongKey() {
|
||||
val key1 = hex("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
val key2 = hex("ff0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
val nonce = hex("000102030405060708090a0b")
|
||||
val ad = ByteArray(0)
|
||||
val plaintext = "Wrong key test".encodeToByteArray()
|
||||
|
||||
val encrypted = ChaCha20Poly1305.encrypt(plaintext, ad, nonce, key1)
|
||||
|
||||
assertFailsWith<IllegalStateException> {
|
||||
ChaCha20Poly1305.decrypt(encrypted, ad, nonce, key2)
|
||||
}
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testInvalidNonceLength() {
|
||||
val key = hex("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
val badNonce = hex("0102030405060708") // 8 bytes instead of 12
|
||||
val plaintext = "test".encodeToByteArray()
|
||||
|
||||
assertFailsWith<IllegalArgumentException> {
|
||||
ChaCha20Poly1305.encrypt(plaintext, ByteArray(0), badNonce, key)
|
||||
}
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testInvalidKeyLength() {
|
||||
val badKey = hex("0102030405060708090a0b0c0d0e0f10") // 16 bytes instead of 32
|
||||
val nonce = hex("000102030405060708090a0b")
|
||||
val plaintext = "test".encodeToByteArray()
|
||||
|
||||
assertFailsWith<IllegalArgumentException> {
|
||||
ChaCha20Poly1305.encrypt(plaintext, ByteArray(0), nonce, badKey)
|
||||
}
|
||||
}
|
||||
|
||||
@Test
|
||||
fun testLargeMessage() {
|
||||
val key = hex("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
|
||||
val nonce = hex("000102030405060708090a0b")
|
||||
val ad = ByteArray(0)
|
||||
// Test with a message larger than a single ChaCha20 block (64 bytes)
|
||||
val plaintext = ByteArray(1000) { (it % 256).toByte() }
|
||||
|
||||
val encrypted = ChaCha20Poly1305.encrypt(plaintext, ad, nonce, key)
|
||||
assertEquals(1000 + 16, encrypted.size)
|
||||
val decrypted = ChaCha20Poly1305.decrypt(encrypted, ad, nonce, key)
|
||||
|
||||
assertContentEquals(plaintext, decrypted)
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user