beaconcrypt 0.3.3

Cryptographic transport for C2 channels
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96

from beaconcrypt import BeaconCryptBeacon, BeaconCryptServer


def register_beacon(
    server: BeaconCryptServer,
    beacon: BeaconCryptBeacon,
) -> bytes | None:
    message = bytes(0xFF * 32)
    phase_1 = beacon.generate_registration()
    assert phase_1 is not None
    reg_out = server.register_beacon(phase_1, message)
    assert reg_out is not None
    phase2 = beacon.process_initial_message(reg_out.serialized())
    assert phase2 is not None
    assert phase2 == message
    return phase2


def test_encrypt_to_multiple():
    server = BeaconCryptServer(0, None)
    server_pk = server.id_pk()
    b1 = BeaconCryptBeacon(0, server_pk)
    b2 = BeaconCryptBeacon(0, server_pk)
    message = bytes(0x1 * 32)

    b1_initial = register_beacon(server, b1)
    b2_initial = register_beacon(server, b2)
    assert b2_initial == b1_initial

    b1_m1 = server.encrypt_to_beacon(message, 1)
    b2_m1 = server.encrypt_to_beacon(message, 2)
    assert b1_m1 is not None and b2_m1 is not None and b1_m1 != b2_m1


def test_encrypt_multiple():
    server = BeaconCryptServer(0, None)
    server_pk = server.id_pk()
    b1 = BeaconCryptBeacon(0, server_pk)
    message = bytes(0x1 * 32)

    _ = register_beacon(server, b1)

    b1_m1 = server.encrypt_to_beacon(message, 1)
    b1_m2 = server.encrypt_to_beacon(message, 1)
    assert b1_m1 is not None and b1_m2 is not None and b1_m1 != b1_m2


def test_decrypt_multiple():
    server = BeaconCryptServer(0, None)
    server_pk = server.id_pk()
    beacon = BeaconCryptBeacon(0, server_pk)
    message = bytes(0x1 * 32)

    _ = register_beacon(server, beacon)
    m1 = server.encrypt_to_beacon(message, 1)
    m2 = server.encrypt_to_beacon(message, 1)
    assert m1 != m2

    plain1 = beacon.decrypt_server_message(m1)
    plain2 = beacon.decrypt_server_message(m2)
    assert plain2 is not None and plain1 is not None
    assert plain2 == plain1 == message


def test_decrypt_multiple_signed():
    server = BeaconCryptServer(0, None)
    server_pk = server.id_pk()
    beacon = BeaconCryptBeacon(0, server_pk)
    message = bytes(0x1 * 32)

    _ = register_beacon(server, beacon)
    m1 = server.encrypt_to_beacon_signed(message, 1)
    m2 = server.encrypt_to_beacon_signed(message, 1)
    assert m1 != m2

    plain1 = beacon.decrypt_server_message_signed(m1)
    plain2 = beacon.decrypt_server_message_signed(m2)
    assert plain2 is not None and plain1 is not None
    assert plain2 == plain1 == message


def test_decrypt_catch_up():
    server = BeaconCryptServer(0, None)
    server_pk = server.id_pk()
    beacon = BeaconCryptBeacon(0, server_pk)
    message = bytes(0x1 * 32)

    _ = register_beacon(server, beacon)
    m1 = server.encrypt_to_beacon(message, 1)
    m2 = server.encrypt_to_beacon(message, 1)
    assert m1 != m2

    plain2 = beacon.decrypt_server_message(m2)
    plain1 = beacon.decrypt_server_message(m1)
    assert plain2 is not None and plain1 is not None
    assert plain2 == plain1 == message