dotsec 0.1.0

a lightweight CLI tool for locally managing secrets
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

use anyhow::Result;
use dotsec::encryption::{ChaCha20Poly1305Encryption, Encryption};

#[test]
fn test_round_trip() -> Result<()> {
    let encryptor = ChaCha20Poly1305Encryption::new()?;

    let input = b"Ashby Santoso";

    let encrypted_input = encryptor.encrypt(input)?;
    let decrypted_input = encryptor.decrypt(&encrypted_input)?;

    assert_eq!(input.to_vec(), decrypted_input);
    Ok(())
}

#[test]
fn test_different_inputs() -> Result<()> {
    let encryptor = ChaCha20Poly1305Encryption::new()?;

    let input_a = b"Jenks";
    let input_b = b"Kizzy";

    assert_ne!(input_a, input_b); // for sanity

    let encrypted_a = encryptor.encrypt(input_a)?;
    let encrypted_b = encryptor.encrypt(input_b)?;

    let decrypted_a = encryptor.decrypt(&encrypted_a)?;
    let decrypted_b = encryptor.decrypt(&encrypted_b)?;

    assert_ne!(decrypted_a, decrypted_b);
    Ok(())
}

#[test]
fn test_same_input_encrypted_twice() -> Result<()> {
    let encryptor = ChaCha20Poly1305Encryption::new()?;

    let input = b"Rosemary";

    let first = encryptor.encrypt(input)?;
    let second = encryptor.encrypt(input)?;

    // first and second are encrypted with different nonces, so they should be different
    assert_ne!(first, second);

    let decrypted_first = encryptor.decrypt(&first)?;
    let decrypted_second = encryptor.decrypt(&second)?;

    assert_eq!(decrypted_first, decrypted_second);
    Ok(())
}

#[test]
fn test_decryption_fails_with_wrong_ciphertext() -> Result<()> {
    let encryptor = ChaCha20Poly1305Encryption::new()?;

    let input = b"Dr Chef";

    let mut ciphertext = encryptor.encrypt(input)?;
    ciphertext[0] ^= 0xFF;

    assert!(encryptor.decrypt(&ciphertext).is_err());

    Ok(())
}

#[test]
fn test_decrypting_garbage_fails() -> Result<()> {
    let encryptor = ChaCha20Poly1305Encryption::new()?;

    let garbage = [0u8; 5];
    assert!(encryptor.decrypt(&garbage).is_err());

    Ok(())
}

#[test]
fn test_empty_input() -> Result<()> {
    let encryptor = ChaCha20Poly1305Encryption::new()?;

    let input = b"";

    let ciphertext = encryptor.encrypt(input)?;
    let output = encryptor.decrypt(&ciphertext)?;

    assert_eq!(output, b"");
    Ok(())
}