age-crypto 0.2.0

A safe, ergonomic Rust wrapper around the age encryption library with strong typing, comprehensive error handling, and passphrase support.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108

use age::secrecy::ExposeSecret;
use age_crypto::{decrypt, encrypt};
fn generate_test_keys() -> (age::x25519::Identity, String) {
    let id = age::x25519::Identity::generate();
    let recipient = id.to_public().to_string();
    (id, recipient)
}
#[test]
fn test_encrypt_success() {
    let plaintext = b"Hello, Age!";
    let (_id, recipient) = generate_test_keys();
    let result = encrypt(plaintext, &[&recipient]);
    assert!(result.is_ok());
    let encrypted = result.unwrap();
    assert!(!encrypted.is_empty());
    assert_eq!(encrypted.len(), encrypted.as_bytes().len());
}
#[test]
fn test_encrypt_and_decrypt() {
    let plaintext = b"Secret message";
    let (id, recipient) = generate_test_keys();
    let encrypted = encrypt(plaintext, &[&recipient]).unwrap();
    let secret_key = id.to_string();
    let decrypted = decrypt(encrypted.as_bytes(), secret_key.expose_secret()).unwrap();
    assert_eq!(decrypted, plaintext);
}
#[test]
fn test_encrypt_multiple_recipients() {
    let plaintext = b"For multiple eyes";
    let (id1, rec1) = generate_test_keys();
    let (id2, rec2) = generate_test_keys();
    let encrypted = encrypt(plaintext, &[&rec1, &rec2]).unwrap();
    let decrypted1 = decrypt(encrypted.as_bytes(), id1.to_string().expose_secret()).unwrap();
    assert_eq!(decrypted1, plaintext);
    let decrypted2 = decrypt(encrypted.as_bytes(), id2.to_string().expose_secret()).unwrap();
    assert_eq!(decrypted2, plaintext);
}
#[test]
fn test_encrypt_no_recipients_error() {
    let plaintext = b"test";
    let result = encrypt(plaintext, &[]);
    assert!(result.is_err());
    let err = result.unwrap_err();
    assert!(matches!(
        err,
        age_crypto::Error::Encrypt(age_crypto::EncryptError::NoRecipients)
    ));
    assert_eq!(err.to_string(), "Encrypt error: No recipients provided");
}
#[test]
fn test_encrypt_invalid_recipient() {
    let plaintext = b"test";
    let invalid_recipient = "invalid_key";
    let result = encrypt(plaintext, &[invalid_recipient]);
    assert!(result.is_err());
    let err = result.unwrap_err();
    assert!(matches!(
        err,
        age_crypto::Error::Encrypt(age_crypto::EncryptError::InvalidRecipient { .. })
    ));
    assert!(err.to_string().contains("Invalid recipient"));
}
#[test]
fn test_encrypt_empty_plaintext() {
    let plaintext = b"";
    let (id, recipient) = generate_test_keys();
    let encrypted = encrypt(plaintext, &[&recipient]).unwrap();
    assert!(!encrypted.is_empty());
    let decrypted = decrypt(encrypted.as_bytes(), id.to_string().expose_secret()).unwrap();
    assert_eq!(decrypted, b"");
}
#[test]
fn test_encrypt_large_plaintext() {
    let plaintext = vec![0x42; 1024 * 1024];
    let (id, recipient) = generate_test_keys();
    let encrypted = encrypt(&plaintext, &[&recipient]).unwrap();
    let decrypted = decrypt(encrypted.as_bytes(), id.to_string().expose_secret()).unwrap();
    assert_eq!(decrypted, plaintext);
}
#[test]
fn test_encrypt_unicode_plaintext() {
    let plaintext = "Hello δΈ–η•Œ πŸ¦€".as_bytes();
    let (id, recipient) = generate_test_keys();
    let encrypted = encrypt(plaintext, &[&recipient]).unwrap();
    let decrypted = decrypt(encrypted.as_bytes(), id.to_string().expose_secret()).unwrap();
    assert_eq!(decrypted, plaintext);
}
#[test]
fn test_encrypt_multiple_recipients_one_invalid() {
    let plaintext = b"test";
    let (_id, valid_rec) = generate_test_keys();
    let invalid_rec = "not_a_valid_key";
    let result = encrypt(plaintext, &[&valid_rec, invalid_rec]);
    assert!(result.is_err());
    let err = result.unwrap_err();
    assert!(matches!(
        err,
        age_crypto::Error::Encrypt(age_crypto::EncryptError::InvalidRecipient { .. })
    ));
}
#[test]
fn test_encrypt_with_duplicate_recipients() {
    let plaintext = b"test";
    let (id, recipient) = generate_test_keys();
    let encrypted = encrypt(plaintext, &[&recipient, &recipient]).unwrap();
    let decrypted = decrypt(encrypted.as_bytes(), id.to_string().expose_secret()).unwrap();
    assert_eq!(decrypted, plaintext);
}