cipherstash-client 0.34.1-alpha.1

use crate::zerokms::EncryptPayload;

use super::errors::TypeParseError;
use chrono::{DateTime, Datelike, NaiveDate, TimeZone, Utc};
use rust_decimal::Decimal;
use zeroize::Zeroize;
use zerokms_protocol::{
    cipherstash_config::{operator::Operator, ColumnConfig, ColumnType},
    Context,
};

mod from_conversion;
mod to_conversion;

pub use from_conversion::TryFromPlaintext;

const VERSION: u8 = 1;

const BIGINT_TYPE: u8 = 1;
const BOOLEAN_TYPE: u8 = 2;
const DECIMAL_TYPE: u8 = 3;
const FLOAT_TYPE: u8 = 4;
const INT_TYPE: u8 = 5;
const SMALLINT_TYPE: u8 = 6;
const TIMESTAMP_TYPE: u8 = 7;
const UTF8STR_TYPE: u8 = 8;
const NAIVE_DATE_TYPE: u8 = 9;
const BIGUINT_TYPE: u8 = 10;
const JSONB_TYPE: u8 = 11;

const NULL_FLAGS_MASK: u8 = 0b10000000;
const VARIANT_FLAGS_MASK: u8 = NULL_FLAGS_MASK ^ 0b11111111;

/// Convenience type that represents a `Param` which will be mapped using `config`.
/// `config` will always be present but `operator` may be `None` in this case.
#[derive(Debug)]
pub struct PlaintextTarget {
    pub plaintext: Plaintext,
    pub config: ColumnConfig,
    pub operator: Option<Operator>,
    pub context: Vec<Context>,
}

impl PlaintextTarget {
    pub fn new(plaintext: impl Into<Plaintext>, config: ColumnConfig) -> Self {
        Self {
            plaintext: plaintext.into(),
            config,
            operator: None,
            context: Default::default(),
        }
    }

    pub fn new_with_operator(
        plaintext: impl Into<Plaintext>,
        config: ColumnConfig,
        operator: Option<Operator>,
    ) -> Self {
        Self {
            plaintext: plaintext.into(),
            config,
            operator,
            context: Default::default(),
        }
    }

    /// Convert the Plaintext into a byte array and attach the descriptor to it.
    pub fn payload(&self) -> BytesWithDescriptor {
        BytesWithDescriptor {
            bytes: self.plaintext.to_vec(),
            descriptor: self.config.name.clone(),
        }
    }

    pub fn config(&self) -> &ColumnConfig {
        &self.config
    }

    pub fn with_context(mut self, context: Context) -> Self {
        self.context.push(context);
        self
    }
}

pub struct BytesWithDescriptor {
    pub bytes: Vec<u8>,
    pub descriptor: String,
}

impl From<&PlaintextTarget> for BytesWithDescriptor {
    fn from(value: &PlaintextTarget) -> Self {
        value.payload()
    }
}

impl From<PlaintextTarget> for BytesWithDescriptor {
    fn from(value: PlaintextTarget) -> Self {
        value.payload()
    }
}

impl From<(&Plaintext, &str)> for BytesWithDescriptor {
    fn from(value: (&Plaintext, &str)) -> Self {
        BytesWithDescriptor {
            bytes: value.0.to_vec(),
            descriptor: value.1.into(),
        }
    }
}

impl From<(Plaintext, String)> for BytesWithDescriptor {
    fn from(value: (Plaintext, String)) -> Self {
        BytesWithDescriptor {
            bytes: value.0.to_vec(),
            descriptor: value.1,
        }
    }
}

impl<'a> From<&'a BytesWithDescriptor> for EncryptPayload<'a> {
    fn from(BytesWithDescriptor { bytes, descriptor }: &'a BytesWithDescriptor) -> Self {
        Self::new_with_descriptor(bytes, descriptor)
    }
}

#[derive(Debug, PartialEq, Clone)]
pub enum Plaintext {
    BigInt(Option<i64>),
    BigUInt(Option<u64>),
    Boolean(Option<bool>),
    Decimal(Option<Decimal>),
    Float(Option<f64>),
    Int(Option<i32>),
    NaiveDate(Option<NaiveDate>),
    SmallInt(Option<i16>),
    Timestamp(Option<DateTime<Utc>>),
    Utf8Str(Option<String>),
    // Option isn't needed here since serde_json::Value::Null is already a null value
    // but it's used to make the API consistent with the other variants
    JsonB(Option<serde_json::Value>),
}

impl Plaintext {
    pub fn type_name(&self) -> &'static str {
        const BIG_INT: &str = "BigInt";
        const BIG_UINT: &str = "BigUInt";
        const BOOLEAN: &str = "Boolean";
        const DECIMAL: &str = "Decimal";
        const FLOAT: &str = "Float";
        const INT: &str = "Int";
        const NAIVE_DATE: &str = "NaiveDate";
        const SMALL_INT: &str = "SmallInt";
        const TIMESTAMP: &str = "Timestamp";
        const UTF8_STR: &str = "Utf8Str";
        const JSONB: &str = "JsonB";

        match self {
            Plaintext::BigInt(_) => BIG_INT,
            Plaintext::BigUInt(_) => BIG_UINT,
            Plaintext::Boolean(_) => BOOLEAN,
            Plaintext::Decimal(_) => DECIMAL,
            Plaintext::Float(_) => FLOAT,
            Plaintext::Int(_) => INT,
            Plaintext::NaiveDate(_) => NAIVE_DATE,
            Plaintext::SmallInt(_) => SMALL_INT,
            Plaintext::Timestamp(_) => TIMESTAMP,
            Plaintext::Utf8Str(_) => UTF8_STR,
            Plaintext::JsonB(_) => JSONB,
        }
    }
}

/// Lifted directly from the `zeroize` crate.
///
/// This method is used to make sure the compiler will correctly order operations so that
/// non-zeroes don't get read when something is being zeroized.
#[inline(always)]
fn atomic_fence() {
    std::sync::atomic::compiler_fence(std::sync::atomic::Ordering::SeqCst);
}

impl Zeroize for Plaintext {
    /// Securely zeroize sensitive plaintext data.
    ///
    /// # Safety considerations
    ///
    /// Different variants require different zeroization strategies:
    ///
    /// - **Stack-allocated Copy types** (Timestamp, NaiveDate, Decimal): These types have no
    ///   Drop impl and are entirely stack-allocated. We use `write_volatile` to ensure the
    ///   compiler cannot optimize away the zeroing, then write None. This is safe because
    ///   Copy types cannot implement Drop.
    ///
    /// - **Primitive types with Zeroize impls** (BigInt, Boolean, Float, etc.): Delegate to
    ///   their existing Zeroize implementations.
    ///
    /// - **Heap-allocated types** (JsonB): MUST use `take()` to properly transfer ownership
    ///   and trigger Drop. Using `write_volatile` on types with heap allocations would bypass
    ///   the destructor, causing memory leaks. The serde_json::Value inside JsonB contains
    ///   BTreeMap allocations that must be freed.
    fn zeroize(&mut self) {
        match self {
            // Stack-allocated Copy types: use volatile writes to zero memory.
            // These types have no Drop impl, so write_volatile is safe and ensures
            // the compiler cannot optimize away the security-critical zeroing.
            Self::Timestamp(x) => unsafe {
                std::ptr::write_volatile(x, std::mem::zeroed());
                std::ptr::write_volatile(x, None);
                atomic_fence();
            },

            Self::NaiveDate(x) => unsafe {
                std::ptr::write_volatile(x, std::mem::zeroed());
                std::ptr::write_volatile(x, None);
                atomic_fence();
            },

            Self::Decimal(x) => unsafe {
                std::ptr::write_volatile(x, std::mem::zeroed());
                std::ptr::write_volatile(x, None);
                atomic_fence();
            },

            // Primitive types: delegate to their existing Zeroize impls
            Self::BigInt(x) => x.zeroize(),
            Self::BigUInt(x) => x.zeroize(),
            Self::Boolean(x) => x.zeroize(),
            Self::Float(x) => x.zeroize(),
            Self::Int(x) => x.zeroize(),
            Self::SmallInt(x) => x.zeroize(),
            Self::Utf8Str(x) => x.zeroize(),

            // Heap-allocated type: MUST use take() to properly free memory.
            // serde_json::Value contains BTreeMap which has heap allocations.
            // Using write_volatile here would bypass Drop and leak memory.
            Self::JsonB(x) => {
                if let Some(mut val) = x.take() {
                    zeroize_jsonb(Some(&mut val));
                    // val is dropped here, properly freeing all heap allocations
                }
            }
        }
    }
}

impl Drop for Plaintext {
    // ZeroizeOnDrop only works when all branches implement Zeroize.
    // Since we manually implement Zeroize it's easier to just zerize on drop manually.
    fn drop(&mut self) {
        self.zeroize();
    }
}

// Recursively zeroize all values in a JSONB object
fn zeroize_jsonb(value: Option<&mut serde_json::Value>) {
    match value {
        Some(serde_json::Value::Object(obj)) => {
            for (_, v) in obj.iter_mut() {
                zeroize_jsonb(Some(v));
            }
        }
        Some(serde_json::Value::Array(arr)) => {
            for v in arr.iter_mut() {
                zeroize_jsonb(Some(v));
            }
        }
        Some(serde_json::Value::String(s)) => s.zeroize(),
        Some(serde_json::Value::Bool(b)) => b.zeroize(),

        // serde_json is incompatible with zeroize, so explicitly set the value to 0;
        // is not optimised away by the compiler on arm, but ymmv
        Some(serde_json::Value::Number(n)) => {
            *n = serde_json::Number::from_f64(0.0).unwrap();
        }

        // Nothing to Zeroize
        None | Some(serde_json::Value::Null) => {}
    }
}

impl Plaintext {
    pub fn new<T: Into<Plaintext>>(value: T) -> Self {
        value.into()
    }

    /// Convert the `Plaintext` into a `serde_json::Value`.
    /// This is somewhat of a temporary measure until Vitamin C is integrated.
    pub fn clone_as_json(&self) -> Option<serde_json::Value> {
        // FIXME: Use vitamin_c::protected::map to avoid cloning
        match self {
            Self::JsonB(val) => val.clone(),
            _ => None,
        }
    }

    pub fn null_for_column_type(column_type: ColumnType) -> Self {
        match column_type {
            ColumnType::BigInt => Self::BigInt(None),
            ColumnType::BigUInt => Self::BigUInt(None),
            ColumnType::Boolean => Self::Boolean(None),
            ColumnType::Date => Self::NaiveDate(None),
            ColumnType::Decimal => Self::Decimal(None),
            ColumnType::Float => Self::Float(None),
            ColumnType::Int => Self::Int(None),
            ColumnType::SmallInt => Self::SmallInt(None),
            ColumnType::Timestamp => Self::Timestamp(None),
            ColumnType::Utf8Str => Self::Utf8Str(None),
            ColumnType::JsonB => Self::JsonB(None),
        }
    }

    /// Version s the first byte
    /// The type variant is the 2nd byte
    pub fn to_vec(&self) -> Vec<u8> {
        let mut out: Vec<u8> = vec![VERSION, self.flags()];
        // Append
        match self {
            Self::BigInt(Some(value)) => out.append(&mut value.to_be_bytes().to_vec()),
            Self::BigUInt(Some(value)) => out.append(&mut value.to_be_bytes().to_vec()),
            Self::Boolean(Some(value)) => out.push(u8::from(*value)),
            Self::Decimal(Some(value)) => out.append(&mut value.serialize().to_vec()),
            Self::Float(Some(value)) => out.append(&mut value.to_be_bytes().to_vec()),
            Self::Int(Some(value)) => out.append(&mut value.to_be_bytes().to_vec()),
            Self::NaiveDate(Some(value)) => {
                out.append(&mut value.num_days_from_ce().to_be_bytes().to_vec())
            }
            Self::SmallInt(Some(value)) => out.append(&mut value.to_be_bytes().to_vec()),
            Self::Timestamp(Some(value)) => {
                out.append(&mut value.timestamp_millis().to_be_bytes().to_vec())
            }
            Self::Utf8Str(Some(value)) => out.append(&mut value.as_bytes().to_vec()),
            Self::JsonB(Some(value)) => out.append(&mut value.to_string().as_bytes().to_vec()),
            _ => {}
        }

        out
    }

    pub fn from_slice(data: &[u8]) -> Result<Self, TypeParseError> {
        // Don't care about version right now
        let _version = data.first().ok_or(TypeParseError(
            "Invalid byte array: missing version".to_string(),
        ))?;
        let flags = *data.get(1).ok_or(TypeParseError(
            "Invalid byte array: missing flags".to_string(),
        ))?;

        let is_null: bool = flags & NULL_FLAGS_MASK == NULL_FLAGS_MASK;
        let variant: u8 = flags & VARIANT_FLAGS_MASK;
        let bytes = &data[2..];

        match is_null {
            true => match variant {
                BIGINT_TYPE => Ok(Self::BigInt(None)),
                BIGUINT_TYPE => Ok(Self::BigUInt(None)),
                BOOLEAN_TYPE => Ok(Self::Boolean(None)),
                DECIMAL_TYPE => Ok(Self::Decimal(None)),
                FLOAT_TYPE => Ok(Self::Float(None)),
                INT_TYPE => Ok(Self::Int(None)),
                NAIVE_DATE_TYPE => Ok(Self::NaiveDate(None)),
                SMALLINT_TYPE => Ok(Self::SmallInt(None)),
                TIMESTAMP_TYPE => Ok(Self::Timestamp(None)),
                UTF8STR_TYPE => Ok(Self::Utf8Str(None)),
                JSONB_TYPE => Ok(Self::JsonB(None)),
                _ => Err(TypeParseError(format!("Unknown variant code `{variant}`"))),
            },
            false => match variant {
                BIGINT_TYPE => {
                    let val = i64::from_be_bytes(
                        bytes
                            .try_into()
                            .map_err(|_| TypeParseError::make(bytes, variant))?,
                    );
                    Ok(Self::BigInt(Some(val)))
                }
                BIGUINT_TYPE => {
                    let val = u64::from_be_bytes(
                        bytes
                            .try_into()
                            .map_err(|_| TypeParseError::make(bytes, variant))?,
                    );
                    Ok(Self::BigUInt(Some(val)))
                }
                BOOLEAN_TYPE => {
                    if bytes.len() != 1 || bytes[0] > 1 {
                        return Err(TypeParseError::make(bytes, variant));
                    }
                    Ok(Self::Boolean(Some(bytes[0] == 1)))
                }
                DECIMAL_TYPE => Ok(Self::Decimal(Some(Decimal::deserialize(
                    bytes
                        .try_into()
                        .map_err(|_| TypeParseError::make(bytes, variant))?,
                )))),
                FLOAT_TYPE => Ok(Self::Float(Some(f64::from_be_bytes(
                    bytes
                        .try_into()
                        .map_err(|_| TypeParseError::make(bytes, variant))?,
                )))),
                INT_TYPE => Ok(Self::Int(Some(i32::from_be_bytes(
                    bytes
                        .try_into()
                        .map_err(|_| TypeParseError::make(bytes, variant))?,
                )))),
                NAIVE_DATE_TYPE => Ok(Self::NaiveDate(Some(
                    NaiveDate::from_num_days_from_ce_opt(i32::from_be_bytes(
                        bytes
                            .try_into()
                            .map_err(|_| TypeParseError::make(bytes, variant))?,
                    ))
                    .ok_or(TypeParseError::make(bytes, variant))?,
                ))),
                SMALLINT_TYPE => Ok(Self::SmallInt(Some(i16::from_be_bytes(
                    bytes
                        .try_into()
                        .map_err(|_| TypeParseError::make(bytes, variant))?,
                )))),
                TIMESTAMP_TYPE => Ok(Self::Timestamp(Some(
                    Utc.timestamp_millis_opt(i64::from_be_bytes(
                        bytes
                            .try_into()
                            .map_err(|_| TypeParseError::make(bytes, variant))?,
                    ))
                    .single()
                    .ok_or(TypeParseError::make(bytes, variant))?,
                ))),
                UTF8STR_TYPE => Ok(Self::Utf8Str(Some(
                    String::from_utf8_lossy(bytes).to_string(),
                ))),
                JSONB_TYPE => Ok(Self::JsonB(Some(
                    serde_json::from_slice(bytes)
                        .map_err(|_| TypeParseError::make(bytes, variant))?,
                ))),
                _ => Err(TypeParseError(format!("Unknown variant code `{variant}`"))),
            },
        }
    }

    pub fn flags(&self) -> u8 {
        match self {
            Self::BigInt(Some(_)) => BIGINT_TYPE,
            Self::BigUInt(Some(_)) => BIGUINT_TYPE,
            Self::Boolean(Some(_)) => BOOLEAN_TYPE,
            Self::Decimal(Some(_)) => DECIMAL_TYPE,
            Self::Float(Some(_)) => FLOAT_TYPE,
            Self::Int(Some(_)) => INT_TYPE,
            Self::NaiveDate(Some(_)) => NAIVE_DATE_TYPE,
            Self::SmallInt(Some(_)) => SMALLINT_TYPE,
            Self::Timestamp(Some(_)) => TIMESTAMP_TYPE,
            Self::Utf8Str(Some(_)) => UTF8STR_TYPE,
            Self::JsonB(Some(_)) => JSONB_TYPE,

            Self::BigInt(None) => NULL_FLAGS_MASK | BIGINT_TYPE,
            Self::BigUInt(None) => NULL_FLAGS_MASK | BIGUINT_TYPE,
            Self::Boolean(None) => NULL_FLAGS_MASK | BOOLEAN_TYPE,
            Self::Decimal(None) => NULL_FLAGS_MASK | DECIMAL_TYPE,
            Self::Float(None) => NULL_FLAGS_MASK | FLOAT_TYPE,
            Self::Int(None) => NULL_FLAGS_MASK | INT_TYPE,
            Self::NaiveDate(None) => NULL_FLAGS_MASK | NAIVE_DATE_TYPE,
            Self::SmallInt(None) => NULL_FLAGS_MASK | SMALLINT_TYPE,
            Self::Timestamp(None) => NULL_FLAGS_MASK | TIMESTAMP_TYPE,
            Self::Utf8Str(None) => NULL_FLAGS_MASK | UTF8STR_TYPE,
            Self::JsonB(None) => NULL_FLAGS_MASK | JSONB_TYPE,
        }
    }

    pub fn is_null(&self) -> bool {
        self.flags() & NULL_FLAGS_MASK == NULL_FLAGS_MASK
    }

    pub fn variant_name(variant: u8) -> &'static str {
        let variant: u8 = variant & VARIANT_FLAGS_MASK;

        match variant {
            BIGINT_TYPE => "bigint",
            BOOLEAN_TYPE => "boolean",
            DECIMAL_TYPE => "decimal",
            FLOAT_TYPE => "float",
            INT_TYPE => "int",
            NAIVE_DATE_TYPE => "naivedate",
            SMALLINT_TYPE => "smallint",
            TIMESTAMP_TYPE => "timestamp",
            UTF8STR_TYPE => "utf8str",
            BIGUINT_TYPE => "biguint",
            JSONB_TYPE => "jsonb",
            _ => "unknown",
        }
    }
}

// Trait that defines the `None` or `Null` `Plaintext` variant of the implementing type.
pub trait PlaintextNullVariant {
    /// Returns Self's corresponding `Plaintext` variant with None
    fn null() -> Plaintext;
}

macro_rules! impl_null_variant {
    ($($ty:ty => $variant:ident),*) => {
        $(
            impl PlaintextNullVariant for $ty {
                fn null() -> Plaintext {
                    Plaintext::$variant(None)
                }
            }
        )*
    };
}

impl_null_variant! {
    String => Utf8Str,
    bool => Boolean,
    i64 => BigInt,
    u64 => BigUInt,
    i32 => Int,
    i16 => SmallInt,
    f64 => Float,
    Decimal => Decimal,
    NaiveDate => NaiveDate,
    DateTime<Utc> => Timestamp,
    // Should really map to `JsonB::Null` but we'll capture this in the Plaintext refactor
    serde_json::Value => JsonB
}

impl PlaintextNullVariant for &str {
    fn null() -> Plaintext {
        Plaintext::Utf8Str(None)
    }
}

/// Blanket implementation for `Option<T>` where
/// `T` implements `PlaintextNullVariant`.
impl<T> PlaintextNullVariant for Option<T>
where
    T: PlaintextNullVariant,
{
    fn null() -> Plaintext {
        T::null()
    }
}

impl PartialEq<str> for Plaintext {
    fn eq(&self, other: &str) -> bool {
        if let Self::Utf8Str(Some(s)) = self {
            s == other
        } else {
            false
        }
    }
}

impl PartialEq<String> for Plaintext {
    fn eq(&self, other: &String) -> bool {
        if let Self::Utf8Str(Some(s)) = self {
            s == other
        } else {
            false
        }
    }
}

impl PartialEq<Option<String>> for Plaintext {
    fn eq(&self, other: &Option<String>) -> bool {
        match (self, other) {
            (Self::Utf8Str(Some(s)), Some(other)) => s == other,
            (Self::Utf8Str(None), None) => true,
            _ => false,
        }
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use rust_decimal_macros::dec;
    use std::f64::consts::PI;

    // TODO: These tests could be property tests

    #[test]
    fn test_round_trip_bigint() -> Result<(), Box<dyn std::error::Error>> {
        let result = Plaintext::from_slice(&Plaintext::BigInt(Some(1234567)).to_vec())?;
        assert!(matches!(result, Plaintext::BigInt(Some(1234567))));

        Ok(())
    }

    #[test]
    fn test_round_trip_boolean() -> Result<(), Box<dyn std::error::Error>> {
        let result = Plaintext::from_slice(&Plaintext::Boolean(Some(true)).to_vec())?;
        assert!(matches!(result, Plaintext::Boolean(Some(true))));
        let result = Plaintext::from_slice(&Plaintext::Boolean(Some(false)).to_vec())?;
        assert!(matches!(result, Plaintext::Boolean(Some(false))));

        Ok(())
    }

    #[test]
    fn test_round_trip_decimal() -> Result<(), Box<dyn std::error::Error>> {
        let result =
            Plaintext::from_slice(&Plaintext::Decimal(Some(dec!(999888777.123))).to_vec())?;
        assert!(matches!(result, Plaintext::Decimal(val) if val == Some(dec!(999888777.123))));

        Ok(())
    }

    #[test]
    fn test_round_trip_float() -> Result<(), Box<dyn std::error::Error>> {
        let result = Plaintext::from_slice(&Plaintext::Float(Some(PI)).to_vec())?;
        assert!(matches!(result, Plaintext::Float(v) if v == Some(PI)));

        Ok(())
    }

    #[test]
    fn test_round_trip_int() -> Result<(), Box<dyn std::error::Error>> {
        let result = Plaintext::from_slice(&Plaintext::Int(Some(-34567)).to_vec())?;
        assert!(matches!(result, Plaintext::Int(Some(-34567))));

        Ok(())
    }

    #[test]
    fn test_round_trip_naive_date() -> Result<(), Box<dyn std::error::Error>> {
        let date = NaiveDate::from_ymd_opt(2023, 2, 3).unwrap();
        let result = Plaintext::from_slice(&Plaintext::NaiveDate(Some(date)).to_vec())?;
        assert!(matches!(result, Plaintext::NaiveDate(val) if val == Some(date)));

        Ok(())
    }

    #[test]
    fn test_round_trip_smallint() -> Result<(), Box<dyn std::error::Error>> {
        let result = Plaintext::from_slice(&Plaintext::SmallInt(Some(299)).to_vec())?;
        assert!(matches!(result, Plaintext::SmallInt(Some(299))));

        Ok(())
    }

    #[test]
    fn test_round_trip_timestamp() -> Result<(), Box<dyn std::error::Error>> {
        let ts: DateTime<Utc> = "2021-05-12 15:30:10Z".parse().expect("Timestamp to parse");
        let result = Plaintext::from_slice(&Plaintext::Timestamp(Some(ts)).to_vec())?;
        assert!(matches!(result, Plaintext::Timestamp(val) if val == Some(ts)));

        Ok(())
    }

    #[test]
    fn test_round_trip_utf8str() -> Result<(), Box<dyn std::error::Error>> {
        let result =
            Plaintext::from_slice(&Plaintext::Utf8Str(Some("John Doe".to_string())).to_vec())?;
        assert!(
            matches!(result, Plaintext::Utf8Str(ref val) if val == &Some("John Doe".to_string()))
        );

        Ok(())
    }

    #[test]
    fn test_zeroize_should_not_panic() {
        let mut x = Plaintext::from(false);
        x.zeroize();
        assert_eq!(x, Plaintext::Boolean(None));

        let mut x = Plaintext::from(10_i16);
        x.zeroize();
        assert_eq!(x, Plaintext::SmallInt(None));

        let mut x = Plaintext::from(10_i32);
        x.zeroize();
        assert_eq!(x, Plaintext::Int(None));

        let mut x = Plaintext::from(10_i64);
        x.zeroize();
        assert_eq!(x, Plaintext::BigInt(None));

        let mut x = Plaintext::from(10_f64);
        x.zeroize();
        assert_eq!(x, Plaintext::Float(None));

        let mut x = Plaintext::from(DateTime::<Utc>::MAX_UTC);
        x.zeroize();
        assert_eq!(x, Plaintext::Timestamp(None));

        let mut x = Plaintext::from(NaiveDate::MAX);
        x.zeroize();
        assert_eq!(x, Plaintext::NaiveDate(None));

        let mut x = Plaintext::from("Hello!");
        x.zeroize();
        assert_eq!(x, Plaintext::Utf8Str(None));

        let mut x = serde_json::from_str::<serde_json::Value>("{\"hello\": \"world\", \"n\": 42}")
            .map(Plaintext::new)
            .unwrap();
        x.zeroize();
        assert_eq!(x, Plaintext::JsonB(None));
    }
}