1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
// Copyright 2015 MaidSafe.net limited.
//
// This SAFE Network Software is licensed to you under (1) the MaidSafe.net Commercial License,
// version 1.0 or later, or (2) The General Public License (GPL), version 3, depending on which
// licence you accepted on initial access to the Software (the "Licences").
//
// By contributing code to the SAFE Network Software, or to this project generally, you agree to be
// bound by the terms of the MaidSafe Contributor Agreement, version 1.0.  This, along with the
// Licenses can be found in the root directory of this project at LICENSE, COPYING and CONTRIBUTOR.
//
// Unless required by applicable law or agreed to in writing, the SAFE Network Software distributed
// under the GPL Licence is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
// KIND, either express or implied.
//
// Please review the Licences for the specific language governing permissions and limitations
// relating to use of the SAFE Network Software.

use maidsafe_utilities::serialisation::serialise;
use rust_sodium::crypto::sign::{self, PublicKey, SecretKey, Signature};
use std::collections::BTreeSet;
use std::fmt::{self, Debug, Formatter};
use xor_name::XorName;
use data::DataIdentifier;
use error::RoutingError;
use append_types::{AppendedData, AppendWrapper, Filter};

/// Maximum allowed size for a public appendable data to grow to
pub const MAX_PUB_APPENDABLE_DATA_SIZE_IN_BYTES: usize = 102400;

/// Public appendable data.
///
/// These types may be stored unsigned with previous and current owner keys
/// set to the same keys. Updates require a signature to validate.
///
/// Data can be appended by any key that is not excluded by the filter.
// TODO: Deduplicate the logic shared with `PrivAppendableData` and `StructuredData`.
#[derive(Hash, Eq, PartialEq, PartialOrd, Ord, Clone, RustcDecodable, RustcEncodable)]
pub struct PubAppendableData {
    /// The name of this data chunk.
    pub name: XorName,
    /// The version, i.e. the number of times this has been updated by a `Post` request.
    pub version: u64,
    /// The keys of the current owners that have the right to modify this data.
    pub current_owner_keys: Vec<PublicKey>,
    /// The keys of the owners of the chunk's previous version.
    pub previous_owner_keys: Vec<PublicKey>,
    /// The filter defining who is allowed to append items.
    pub filter: Filter,
    /// A collection of previously deleted data items.
    pub deleted_data: BTreeSet<AppendedData>,
    /// The signatures of the above fields by the previous owners, confirming the last update.
    pub previous_owner_signatures: Vec<Signature>,
    /// The collection of appended data items. These are not signed by the owners, as they change
    /// even between `Post`s.
    pub data: BTreeSet<AppendedData>,
}

impl PubAppendableData {
    /// Creates a new `PubAppendableData` signed with `signing_key`.
    pub fn new(name: XorName,
               version: u64,
               current_owner_keys: Vec<PublicKey>,
               previous_owner_keys: Vec<PublicKey>,
               deleted_data: BTreeSet<AppendedData>,
               filter: Filter,
               signing_key: Option<&SecretKey>)
               -> Result<PubAppendableData, RoutingError> {

        let mut pub_appendable_data = PubAppendableData {
            name: name,
            version: version,
            current_owner_keys: current_owner_keys,
            previous_owner_keys: previous_owner_keys,
            filter: filter,
            deleted_data: deleted_data,
            previous_owner_signatures: vec![],
            data: BTreeSet::new(),
        };

        if let Some(key) = signing_key {
            let _ = try!(pub_appendable_data.add_signature(key));
        }
        Ok(pub_appendable_data)
    }

    /// Updates this data item with the given updated version if the update is valid, otherwise
    /// returns an error.
    ///
    /// This allows types to be created and `previous_owner_signatures` added one by one.
    /// To transfer ownership, the current owner signs over the data; the previous owners field
    /// must have the previous owners of `version - 1` as the current owners of that last version.
    ///
    /// The `data` will contain the union of the data items, _excluding_ the `deleted_data` as
    /// given in the update.
    pub fn update_with_other(&mut self, other: PubAppendableData) -> Result<(), RoutingError> {
        try!(self.validate_self_against_successor(&other));

        self.name = other.name;
        self.version = other.version;
        self.previous_owner_keys = other.previous_owner_keys;
        self.current_owner_keys = other.current_owner_keys;
        self.filter = other.filter;
        self.deleted_data = other.deleted_data;
        self.previous_owner_signatures = other.previous_owner_signatures;
        self.data.extend(other.data);
        for ad in &self.deleted_data {
            let _ = self.data.remove(ad);
        }
        Ok(())
    }

    /// Inserts the given data item, or returns `false` if it cannot be added because it has
    /// recently been deleted.
    pub fn append(&mut self, appended_data: AppendedData) -> bool {
        if match self.filter {
            Filter::WhiteList(ref white_list) => !white_list.contains(&appended_data.sign_key),
            Filter::BlackList(ref black_list) => black_list.contains(&appended_data.sign_key),
        } || self.deleted_data.contains(&appended_data) {
            return false;
        }
        let _ = self.data.insert(appended_data);
        true
    }

    /// Inserts the given wrapper item, or returns `false` if cannot
    pub fn apply_wrapper(&mut self, wrapper: AppendWrapper) -> bool {
        if !wrapper.verify_signature() || &self.version != wrapper.version() {
            return false;
        }
        match wrapper.pub_appended_data() {
            None => false,
            Some(pub_appended_data) => self.append(pub_appended_data.clone()),
        }
    }

    /// Returns the name.
    pub fn name(&self) -> &XorName {
        &self.name
    }

    /// Returns `DataIdentifier` for this data element.
    pub fn identifier(&self) -> DataIdentifier {
        DataIdentifier::PubAppendable(self.name)
    }

    /// Verifies that `other` is a valid update for `self`; returns an error otherwise.
    ///
    /// An update is valid if it doesn't change the name, increases the version by 1 and is signed
    /// by (more than 50% of) the owners.
    ///
    /// In case of an ownership transfer, the `previous_owner_keys` in `other` must match the
    /// `current_owner_keys` in `self`.
    pub fn validate_self_against_successor(&self,
                                           other: &PubAppendableData)
                                           -> Result<(), RoutingError> {
        let owner_keys_to_match = if other.previous_owner_keys.is_empty() {
            &other.current_owner_keys
        } else {
            &other.previous_owner_keys
        };

        if other.name != self.name || other.version != self.version + 1 ||
           *owner_keys_to_match != self.current_owner_keys {
            return Err(RoutingError::UnknownMessageType);
        }
        other.verify_previous_owner_signatures(owner_keys_to_match)
    }

    /// Confirms *unique and valid* owner_signatures are more than 50% of total owners.
    fn verify_previous_owner_signatures(&self,
                                        owner_keys: &[PublicKey])
                                        -> Result<(), RoutingError> {
        // Refuse any duplicate previous_owner_signatures (people can have many owner keys)
        // Any duplicates invalidates this type.
        for (i, sig) in self.previous_owner_signatures.iter().enumerate() {
            for sig_check in &self.previous_owner_signatures[..i] {
                if sig == sig_check {
                    return Err(RoutingError::DuplicateSignatures);
                }
            }
        }

        // Refuse when not enough previous_owner_signatures found
        if self.previous_owner_signatures.len() < (owner_keys.len() + 1) / 2 {
            return Err(RoutingError::NotEnoughSignatures);
        }

        let data = try!(self.data_to_sign());
        // Count valid previous_owner_signatures and refuse if quantity is not enough

        let check_all_keys = |&sig| {
            owner_keys.iter()
                .any(|pub_key| sign::verify_detached(&sig, &data, pub_key))
        };

        if self.previous_owner_signatures
            .iter()
            .filter(|&sig| check_all_keys(sig))
            .count() < (owner_keys.len() / 2 + owner_keys.len() % 2) {
            return Err(RoutingError::NotEnoughSignatures);
        }
        Ok(())
    }

    fn data_to_sign(&self) -> Result<Vec<u8>, RoutingError> {
        // Seems overkill to use serialisation here, but done to ensure cross platform signature
        // handling is OK
        let sd = SerialisablePubAppendableData {
            name: self.name,
            previous_owner_keys: &self.previous_owner_keys,
            current_owner_keys: &self.current_owner_keys,
            version: self.version.to_string().as_bytes().to_vec(),
            filter: &self.filter,
            deleted_data: &self.deleted_data,
        };

        serialise(&sd).map_err(From::from)
    }

    /// Adds a signature with the given `secret_key` to the `previous_owner_signatures` and returns
    /// the number of signatures that are still required. If more than 50% of the previous owners
    /// have signed, 0 is returned and validation is complete.
    pub fn add_signature(&mut self, secret_key: &SecretKey) -> Result<usize, RoutingError> {
        let data = try!(self.data_to_sign());
        let sig = sign::sign_detached(&data, secret_key);
        self.previous_owner_signatures.push(sig);
        let owner_keys = if self.previous_owner_keys.is_empty() {
            &self.current_owner_keys
        } else {
            &self.previous_owner_keys
        };
        Ok(((owner_keys.len() / 2) + 1).saturating_sub(self.previous_owner_signatures.len()))
    }

    /// Overwrite any existing signatures with the new signatures provided.
    pub fn replace_signatures(&mut self, new_signatures: Vec<Signature>) {
        self.previous_owner_signatures = new_signatures;
    }

    /// Get the data
    pub fn get_data(&self) -> &BTreeSet<AppendedData> {
        &self.data
    }

    /// Get the previous owner keys
    pub fn get_previous_owner_keys(&self) -> &Vec<PublicKey> {
        &self.previous_owner_keys
    }

    /// Get the version
    pub fn get_version(&self) -> u64 {
        self.version
    }

    /// Get the current owner keys
    pub fn get_owner_keys(&self) -> &Vec<PublicKey> {
        &self.current_owner_keys
    }

    /// Get previous owner signatures
    pub fn get_previous_owner_signatures(&self) -> &Vec<Signature> {
        &self.previous_owner_signatures
    }
}

impl Debug for PubAppendableData {
    fn fmt(&self, formatter: &mut Formatter) -> fmt::Result {
        let previous_owner_keys: Vec<String> = self.previous_owner_keys
            .iter()
            .map(|pub_key| ::utils::format_binary_array(&pub_key.0))
            .collect();
        let current_owner_keys: Vec<String> = self.current_owner_keys
            .iter()
            .map(|pub_key| ::utils::format_binary_array(&pub_key.0))
            .collect();
        let previous_owner_signatures: Vec<String> = self.previous_owner_signatures
            .iter()
            .map(|signature| ::utils::format_binary_array(&signature.0[..]))
            .collect();
        write!(formatter,
               "PubAppendableData {{ name: {}, previous_owner_keys: {:?}, \
                version: {}, current_owner_keys: {:?}, previous_owner_signatures: {:?} }}",
               self.name(),
               previous_owner_keys,
               self.version,
               current_owner_keys,
               previous_owner_signatures)
        // TODO(afck): Print `data` and `deleted_data`.
    }
}

#[derive(RustcEncodable)]
struct SerialisablePubAppendableData<'a> {
    name: XorName,
    previous_owner_keys: &'a [PublicKey],
    current_owner_keys: &'a [PublicKey],
    version: Vec<u8>,
    filter: &'a Filter,
    deleted_data: &'a BTreeSet<AppendedData>,
}

#[cfg(test)]
mod test {
    extern crate rand;
    use super::*;

    use rust_sodium::crypto::sign;
    use xor_name::XorName;
    use append_types::{AppendedData, AppendWrapper, Filter};
    use data::DataIdentifier;
    use std::collections::BTreeSet;

    #[test]
    fn single_owner() {
        let keys = sign::gen_keypair();
        let owner_keys = vec![keys.0];

        match PubAppendableData::new(rand::random(),
                                     0,
                                     owner_keys.clone(),
                                     vec![],
                                     BTreeSet::new(),
                                     Filter::white_list(None),
                                     Some(&keys.1)) {
            Ok(pub_appendable_data) => {
                assert_eq!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).ok(),
                           Some(()))
            }
            Err(error) => panic!("Error: {:?}", error),
        }
    }

    #[test]
    #[should_panic(expected = "assertion failed")]
    fn single_owner_unsigned() {
        let keys = sign::gen_keypair();
        let owner_keys = vec![keys.0];

        match PubAppendableData::new(rand::random(),
                                     0,
                                     vec![],
                                     owner_keys.clone(),
                                     BTreeSet::new(),
                                     Filter::white_list(None),
                                     None) {
            Ok(pub_appendable_data) => {
                assert_eq!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).ok(),
                           Some(()))
            }
            Err(error) => panic!("Error: {:?}", error),
        }
    }

    #[test]
    #[should_panic(expected = "assertion failed")]
    fn single_owner_other_signing_key() {
        let keys = sign::gen_keypair();
        let owner_keys = vec![keys.0];
        let other_keys = sign::gen_keypair();

        match PubAppendableData::new(rand::random(),
                                     0,
                                     owner_keys.clone(),
                                     vec![],
                                     BTreeSet::new(),
                                     Filter::white_list(None),
                                     Some(&other_keys.1)) {
            Ok(pub_appendable_data) => {
                assert_eq!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).ok(),
                           Some(()))
            }
            Err(error) => panic!("Error: {:?}", error),
        }
    }

    #[test]
    #[should_panic(expected = "assertion failed")]
    fn single_owner_other_signature() {
        let keys = sign::gen_keypair();
        let owner_keys = vec![keys.0];
        let other_keys = sign::gen_keypair();

        match PubAppendableData::new(rand::random(),
                                     0,
                                     vec![],
                                     owner_keys.clone(),
                                     BTreeSet::new(),
                                     Filter::white_list(None),
                                     None) {
            Ok(mut pub_appendable_data) => {
                assert_eq!(pub_appendable_data.add_signature(&other_keys.1).ok(),
                           Some(0));
                assert_eq!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).ok(),
                           Some(()))
            }
            Err(error) => panic!("Error: {:?}", error),
        }
    }

    #[test]
    fn three_owners() {
        let keys1 = sign::gen_keypair();
        let keys2 = sign::gen_keypair();
        let keys3 = sign::gen_keypair();

        let owner_keys = vec![keys1.0, keys2.0, keys3.0];

        match PubAppendableData::new(rand::random(),
                                     0,
                                     owner_keys.clone(),
                                     vec![],
                                     BTreeSet::new(),
                                     Filter::white_list(None),
                                     None) {
            Ok(mut pub_appendable_data) => {
                // After one signature, one more is required to reach majority.
                assert_eq!(unwrap!(pub_appendable_data.add_signature(&keys1.1)), 1);
                assert!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).is_err());
                // Two out of three is enough.
                assert_eq!(unwrap!(pub_appendable_data.add_signature(&keys2.1)), 0);
                assert!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).is_ok());
                // Three out of three is also fine.
                assert_eq!(unwrap!(pub_appendable_data.add_signature(&keys3.1)), 0);
                assert!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).is_ok());
            }
            Err(error) => panic!("Error: {:?}", error),
        }
    }

    #[test]
    fn four_owners() {
        let keys1 = sign::gen_keypair();
        let keys2 = sign::gen_keypair();
        let keys3 = sign::gen_keypair();
        let keys4 = sign::gen_keypair();

        let owner_keys = vec![keys1.0, keys2.0, keys3.0, keys4.0];

        match PubAppendableData::new(rand::random(),
                                     0,
                                     owner_keys.clone(),
                                     vec![],
                                     BTreeSet::new(),
                                     Filter::white_list(None),
                                     Some(&keys1.1)) {
            Ok(mut pub_appendable_data) => {
                // Two signatures are not enough because they don't have a strict majority.
                assert_eq!(unwrap!(pub_appendable_data.add_signature(&keys2.1)), 1);
                assert!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).is_ok());
                // Three out of four is enough.
                assert_eq!(unwrap!(pub_appendable_data.add_signature(&keys3.1)), 0);
                assert!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).is_ok());
                // Four out of four is also fine.
                assert_eq!(unwrap!(pub_appendable_data.add_signature(&keys4.1)), 0);
                assert!(pub_appendable_data.verify_previous_owner_signatures(&owner_keys).is_ok());
            }
            Err(error) => panic!("Error: {:?}", error),
        }
    }

    #[test]
    fn transfer_owners() {
        let keys1 = sign::gen_keypair();
        let keys2 = sign::gen_keypair();
        let keys3 = sign::gen_keypair();
        let new_owner = sign::gen_keypair();

        let identifier: XorName = rand::random();

        // Owned by keys1 keys2 and keys3
        match PubAppendableData::new(identifier,
                                     0,
                                     vec![keys1.0, keys2.0, keys3.0],
                                     vec![],
                                     BTreeSet::new(),
                                     Filter::white_list(None),
                                     Some(&keys1.1)) {
            Ok(mut orig_pub_appendable_data) => {
                assert_eq!(orig_pub_appendable_data.add_signature(&keys2.1).ok(),
                           Some(0));
                // Transfer ownership and update to new owner
                match PubAppendableData::new(identifier,
                                             1,
                                             vec![new_owner.0],
                                             vec![keys1.0, keys2.0, keys3.0],
                                             BTreeSet::new(),
                                             Filter::white_list(None),
                                             Some(&keys1.1)) {
                    Ok(mut new_pub_appendable_data) => {
                        assert_eq!(new_pub_appendable_data.add_signature(&keys2.1).ok(),
                                   Some(0));
                        match orig_pub_appendable_data.update_with_other(new_pub_appendable_data) {
                            Ok(()) => (),
                            Err(e) => panic!("Error {:?}", e),
                        }
                        // transfer ownership back to keys1 only
                        match PubAppendableData::new(identifier,
                                                     2,
                                                     vec![keys1.0],
                                                     vec![new_owner.0],
                                                     BTreeSet::new(),
                                                     Filter::white_list(None),
                                                     Some(&new_owner.1)) {
                            Ok(another_new_pub_appendable_data) => {
                                match orig_pub_appendable_data.update_with_other(
                                        another_new_pub_appendable_data) {
                                    Ok(()) => (),
                                    Err(e) => panic!("Error {:?}", e),
                                }
                            }
                            Err(error) => panic!("Error: {:?}", error),
                        }
                    }
                    Err(error) => panic!("Error: {:?}", error),
                }
            }
            Err(error) => panic!("Error: {:?}", error),
        }
    }

    #[test]
    fn transfer_owner_attack() {
        let keys1 = sign::gen_keypair();
        let keys2 = sign::gen_keypair();
        let keys3 = sign::gen_keypair();
        let new_owner = sign::gen_keypair();
        let attacker = sign::gen_keypair();

        let name: XorName = rand::random();
        let owner_keys = vec![keys1.0, keys2.0, keys3.0];
        let attacker_keys = vec![keys1.0, keys2.0, keys3.0, attacker.0];

        let mut orig_pub_appendable_data = unwrap!(PubAppendableData::new(name,
                                                                         0,
                                                                         owner_keys.clone(),
                                                                         vec![],
                                                                         BTreeSet::new(),
                                                                         Filter::white_list(None),
                                                                         Some(&keys1.1)));
        assert_eq!(orig_pub_appendable_data.add_signature(&keys2.1).ok(),
                   Some(0));

        let mut new_pub_appendable_data = unwrap!(PubAppendableData::new(name,
                                                                         1,
                                                                         vec![new_owner.0],
                                                                         owner_keys.clone(),
                                                                         BTreeSet::new(),
                                                                         Filter::white_list(None),
                                                                         Some(&keys1.1)));
        assert_eq!(new_pub_appendable_data.add_signature(&attacker.1).ok(),
                   Some(0));

        assert!(new_pub_appendable_data.verify_previous_owner_signatures(&owner_keys).is_err());
        assert!(new_pub_appendable_data.verify_previous_owner_signatures(&attacker_keys).is_ok());
        // Shall throw error of NotEnoughSignatures
        assert!(orig_pub_appendable_data.update_with_other(new_pub_appendable_data.clone())
            .is_err());

        assert_eq!(new_pub_appendable_data.add_signature(&attacker.1).ok(),
                   Some(0));
        // Shall throw error of DuplicateSignatures
        assert!(new_pub_appendable_data.verify_previous_owner_signatures(&attacker_keys).is_err());
    }

    #[test]
    fn update_with_wrong_info() {
        let keys1 = sign::gen_keypair();
        let keys2 = sign::gen_keypair();
        let keys3 = sign::gen_keypair();
        let new_owner = sign::gen_keypair();

        let name: XorName = rand::random();
        let owner_keys = vec![keys1.0, keys2.0, keys3.0];

        let mut orig_pub_appendable_data = unwrap!(PubAppendableData::new(name,
                                                                         0,
                                                                         owner_keys.clone(),
                                                                         vec![],
                                                                         BTreeSet::new(),
                                                                         Filter::white_list(None),
                                                                         Some(&keys1.1)));
        assert_eq!(orig_pub_appendable_data.add_signature(&keys2.1).ok(),
                   Some(0));

        // Update with wrong version
        let mut wrong_version = unwrap!(PubAppendableData::new(name,
                                                               2,
                                                               vec![new_owner.0],
                                                               owner_keys.clone(),
                                                               BTreeSet::new(),
                                                               Filter::white_list(None),
                                                               Some(&keys1.1)));
        assert_eq!(wrong_version.add_signature(&keys2.1).ok(), Some(0));
        // Shall throw error of UnknownMessageType
        assert!(orig_pub_appendable_data.update_with_other(wrong_version).is_err());

        // Update with owner_keys in different order
        let mut wrong_order = unwrap!(PubAppendableData::new(name,
                                                             1,
                                                             vec![new_owner.0],
                                                             vec![keys3.0, keys2.0, keys1.0],
                                                             BTreeSet::new(),
                                                             Filter::white_list(None),
                                                             Some(&keys1.1)));
        assert_eq!(wrong_order.add_signature(&keys2.1).ok(), Some(0));
        // Shall throw error of UnknownMessageType
        assert!(orig_pub_appendable_data.update_with_other(wrong_order).is_err());

        // Update with wrong name
        let mut wrong_name = unwrap!(PubAppendableData::new(rand::random(),
                                                            1,
                                                            vec![new_owner.0],
                                                            owner_keys.clone(),
                                                            BTreeSet::new(),
                                                            Filter::white_list(None),
                                                            Some(&keys1.1)));
        assert_eq!(wrong_name.add_signature(&keys2.1).ok(), Some(0));
        // Shall throw error of UnknownMessageType
        assert!(orig_pub_appendable_data.update_with_other(wrong_name).is_err());
    }

    #[test]
    fn appending_with_white_list() {
        let keys = sign::gen_keypair();
        let owner_keys = vec![keys.0];

        let black_key = sign::gen_keypair();
        let white_key = sign::gen_keypair();

        let mut pub_appendable_data = unwrap!(PubAppendableData::new(rand::random(),
                                           0,
                                           owner_keys.clone(),
                                           vec![],
                                           BTreeSet::new(),
                                           Filter::white_list(vec![white_key.0]),
                                           Some(&keys.1)));

        let pointer = DataIdentifier::Structured(rand::random(), 10000);
        let black_appended_data = unwrap!(AppendedData::new(pointer, black_key.0, &black_key.1));
        let white_appended_data = unwrap!(AppendedData::new(pointer, white_key.0, &white_key.1));

        assert!(!pub_appendable_data.append(black_appended_data));
        assert!(pub_appendable_data.append(white_appended_data));
    }

    #[test]
    fn appending_with_black_list() {
        let keys = sign::gen_keypair();
        let owner_keys = vec![keys.0];

        let black_key = sign::gen_keypair();
        let white_key = sign::gen_keypair();

        let mut pub_appendable_data = unwrap!(PubAppendableData::new(rand::random(),
                                           0,
                                           owner_keys.clone(),
                                           vec![],
                                           BTreeSet::new(),
                                           Filter::black_list(vec![black_key.0]),
                                           Some(&keys.1)));

        let pointer = DataIdentifier::Structured(rand::random(), 10000);
        let black_appended_data = unwrap!(AppendedData::new(pointer, black_key.0, &black_key.1));
        let white_appended_data = unwrap!(AppendedData::new(pointer, white_key.0, &white_key.1));

        assert!(!pub_appendable_data.append(black_appended_data));
        assert!(pub_appendable_data.append(white_appended_data));
    }

    #[test]
    fn apply_wrapper() {
        let keys = sign::gen_keypair();
        let name: XorName = rand::random();

        let mut pub_appendable_data = unwrap!(PubAppendableData::new(name,
                                                                     0,
                                                                     vec![keys.0],
                                                                     vec![],
                                                                     BTreeSet::new(),
                                                                     Filter::black_list(None),
                                                                     Some(&keys.1)));
        let pointer = DataIdentifier::Structured(rand::random(), 10000);
        let appended_data = unwrap!(AppendedData::new(pointer, keys.0, &keys.1));

        // apply correct wrapper
        let append_wrapper = AppendWrapper::new_pub(name, appended_data.clone(), 0);
        assert!(pub_appendable_data.apply_wrapper(append_wrapper));

        // apply wrapper with incorrect version
        let append_wrapper = AppendWrapper::new_pub(name, appended_data, 1);
        assert!(!pub_appendable_data.apply_wrapper(append_wrapper));
    }
}