/* * Copyright 2018 Scytl Secure Electronic Voting SA * * All rights reserved * * See our extended copyright notice in *file 'Copyright.txt' which is part of this source code package */ /* jshint node:true */ 'use strict'; var digitalEnvelope = require('../lib/index'); var cryptoPolicy = require('scytl-cryptopolicy'); var asymmetric = require('scytl-asymmetric'); var symmetric = require('scytl-symmetric'); var codec = require('scytl-codec'); describe('The digital envelope module should be able to ...', function() { var PUBLIC_KEY_PEMS = [ '-----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglypZU45bnf2opnRI+Y51VqouBpvDT33xIB/OtbwKzwVpi+JrjBFtfk33tE9t/dSRs79CK94HRhCWcOiLa2qWPrjeZ9SBiEyScrhIvRZVBF41zBgwQNuRvJCsKmAqlZaFNJDZxEP4repmlBn1CfVFmfrXmOKqwP5F7l9ZtucveRzsfmF1yVPFkW8TMuB3YqMiyymyqHlS8ujCsu5I8tpgPbwuxdMOY94fNhSXrYkY8IuX1g1zdq/Z1jluOaR/UqK4UpnbuJaH/F0VgDNiWh6cTD0DFGEk0b70i5wU4Q3L/S6XZQRvSuADoCbhwBKuFL5pW5n865oLVb5S3wuVdWaGwIDAQAB-----END PUBLIC KEY-----', '-----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngCJ2RYh3XOvghmAi2MT26/fx4Hx8gYkYS2zaf9c2H8Qns1hnIHO8pIlHze/stUmNzim6nlytbJLQHmVDu64Pf9dn1ClAW2caKqUo4ofjnOzDd6RocQByjTsvZ1nOcG5BMYtOWGua+QIVFrxvxZgL6T3ShQ+9J3/1LiQDUmWj0kMoct6vRJuNkJxVFegtIEqYZYTTFI1+Y25k040NFu0e9IDwDXQA63EqKL3DjrgxdjOY+KXu4zU6DUcL4VcKaTMs1+pDfU6bSOtrecuasKkEmNE9fuy9WejFqNGqlrNVCeYmOOnNXvI0vCdH1bw4/CpqddxvGZOStczF8vGJVcMVQIDAQAB-----END PUBLIC KEY-----' ]; var PRIVATE_KEY_PEMS = [ '-----BEGIN RSA PRIVATE KEY-----MIIEowIBAAKCAQEAglypZU45bnf2opnRI+Y51VqouBpvDT33xIB/OtbwKzwVpi+JrjBFtfk33tE9t/dSRs79CK94HRhCWcOiLa2qWPrjeZ9SBiEyScrhIvRZVBF41zBgwQNuRvJCsKmAqlZaFNJDZxEP4repmlBn1CfVFmfrXmOKqwP5F7l9ZtucveRzsfmF1yVPFkW8TMuB3YqMiyymyqHlS8ujCsu5I8tpgPbwuxdMOY94fNhSXrYkY8IuX1g1zdq/Z1jluOaR/UqK4UpnbuJaH/F0VgDNiWh6cTD0DFGEk0b70i5wU4Q3L/S6XZQRvSuADoCbhwBKuFL5pW5n865oLVb5S3wuVdWaGwIDAQABAoIBAC/tn34Wf3kE9BGeGc1oFLVDaqqdVVz5/oEpeR2J7q0GnzMFYUpAhzC7WvY52cYsUPyll1Q9Jx0TUTmteo/uvKWQQFfz4nVMeS+2PoXabolBDzuWlsv/1eiRo0FOYHa/3siu8YcQN9X0DpAkpbfTmT1uoZOHZ3EuucMmOFu7vGn38Grw8bSxpR0uvTtnb8ygC+aB51y38RMyhzQQanrM8FMeAfDAy6IB0Yo7b0c50Cxa6Ax4nqn9LXyGakr5WeAMkgTIOA/GId9SZD4e5eRpq+628pOeR4O9datFltgl6r1+A4ii2VrJsDqeatGtODlX6KRKqwFHoGIa2TjgSZLuorECgYEAxeSZDOOgFsI5mB7RkRzZaQ9znJ15sgdyZiAFZAOUah4hSGdAXNAnZTlrdacduXEu3EfkpuPToX7xZSv5FRYwfBwMwCLeytlGLPjQzWejZGbo4+KqgzWb9fECDYVtDPlJ/+yLih9nt67BHweJKxYydl18rVigdVyy22X86NijSykCgYEAqKPUrXZAo+TJvmTw4tgsibJgvXBYBhmsej8mGNQw+Nyp2gV28sgm61ifIeXKS8teq+MFwGA6cHQedbsCqhMHokdhESZmlbWxhSFLihQcewBxwvrBwbaxI23yXRzwMewznZFL032PpcbqrmwFmcSSEZ3nmbvTH6ShqLW+pzDNp6MCgYBQLzdgxJ7qedqSa/JohTMG4e7rh9d2rpPJE7J7ewPZF8pOpx+qO+Gqn2COdJ+Ts2vUcAETKn9nEaPIZc/wnmQY9dioxbhWo0FPGaaphBPtq9Ez/XUv4zoFppk5V1X/isdUPsmvttf00oeIBiqrXbwmv+yz5JRn2Z7TTXjz9Ev+OQKBgQCUuoCMRzl1EgcXIqEL/0kwW6BUEqufHa9u1Ri9Vw6lvL8T6DPipMEmWK9nzuid9gtVns/ovTVtDgv7GuabplLaPQePf4WDzY11c0rSyS/hDyBFrK+LL5uEOqhAlJAGB2HyOj1clWVF+GvrTpuV5LZKUS/79pmZU7G7QCaX/0Ow7wKBgC/kDH7cmWQnWvvJ5izrx/7PogQVPOLELeUIGLu/hjsSdDKiFCxCUZ948+9NuG+DnpXDWzw//r8mPBRRGGsqFws5Aipp7yjQ3kRDCCzGelPCVhHyfmKqA+8ewXPulKS3/wIyHIvaXmsuAtTfurHtpRyzjKmCBK1Y6WQ3trIXvo7s-----END RSA PRIVATE KEY-----', '-----BEGIN RSA PRIVATE KEY-----MIIEogIBAAKCAQEAngCJ2RYh3XOvghmAi2MT26/fx4Hx8gYkYS2zaf9c2H8Qns1hnIHO8pIlHze/stUmNzim6nlytbJLQHmVDu64Pf9dn1ClAW2caKqUo4ofjnOzDd6RocQByjTsvZ1nOcG5BMYtOWGua+QIVFrxvxZgL6T3ShQ+9J3/1LiQDUmWj0kMoct6vRJuNkJxVFegtIEqYZYTTFI1+Y25k040NFu0e9IDwDXQA63EqKL3DjrgxdjOY+KXu4zU6DUcL4VcKaTMs1+pDfU6bSOtrecuasKkEmNE9fuy9WejFqNGqlrNVCeYmOOnNXvI0vCdH1bw4/CpqddxvGZOStczF8vGJVcMVQIDAQABAoIBAB/MEfHLP3N2pZp0EWd7v/JVOZ7H6u3/CHE6JkItrvyuzaR3xq4dfY1ZlfjrWjveI3u3fffwCwK/598I2NORfSiU7L10GFDqQzDZK2KiGGmtpRokcYBxlr6f2gjq1WxNLTPlwhIrM1PpJzf6uW3wTdkoxM92tZi691JS9kKGTbN1+LWIITWk6sC3n4Atu8LI19/zSfrl16/1iYSF7n9ylz2tyqQAyBEQXgrMRrg3KkPU83P5CwdIdDFyb4pwZ75U8OXuOfhcv0ilGIH62t2d9eVaFw0RKSf4QOYAdcVPAA75m+RzTSM7jDX4OGiPsoa1iWS4fqcdPfchFQSnJhhrL2ECgYEA8VV9JMYKE4qRY/srxhKnsVXhAVX8WkOjBT+VQSEBtI9ay5wld1JYLjWnCfaScXUQhFTXrR1f4JDAQ1K2MYwJ8FF1whW6WR0FvUi6IZX9C+pNfN4YtbVOYg4P8PhLF4hnV8UyqFCYN4Apw3JadS0kKK370eIhz1g+307pwu47h00CgYEAp5qhAi0HdB/aleb/GHGBr//xDHwm87mKyi6BKhiNP5phM7gnoyItIoxT2ArUgYC9lrrt0hi4wZsCxixLciWjGw9rFBY0Z23ie59cRyY9TlV3WTNFLkIl7nBB5PJaJAu7scXx/R4Ozgc0brX4mXs1ZORzlDbRKNFYNnsGkRKhZSkCgYA55vT7mbhZL+nqPx0ljNxHI/+0PlkpnwjB/Ztl4PFzzOFP8MrcchlOHPlS3qIMLrYjyedlVaLnUlOO0417HcpUqnbCdkwbjWcPHx/pZv8rmK+2weLT1ghUZmNUwX3iy4tf96RL1epvhoR+rDUf4BDI4dWFaegKw3VyRpC3gEkwEQKBgCaCXtAzLG1ADGc45g/ltJiNxALMW97QGNWPjdnwPjQI8qCBhYn0Bk7T00fmZSFERUtms9H8ICdLyH1kHAmkIC/NgRriZzQEiW9CFF+8p4ViGcQDBbg1NqXsYReLn658i6mzA4DW8Svhd+igIviQ2JnP68Z4OeKZBx2tcrrOfwrRAoGAGyXTcOvhr+5ayXkQ36VAr2YcAUs2SeN0HwmYBP2ErCgd/KXri7RwWXqEQtvpvAOGJq/tXyc7P5BnBhlqQtUm9WX7kqTy/dIS+pJP0UMm02N9U+b02G0auPmBKM35LXO4YGhZep1Vig+MLycR8OSe0cd4gzk52u3Th9I3e0bV9Fw=-----END RSA PRIVATE KEY-----' ]; var DATA = 'Ox2fUJq1gAbX'; var envelopeService_; var envelopeGenerator_; var envelopeOpener_; var data_; beforeAll(function() { envelopeService_ = digitalEnvelope.newService(); data_ = codec.utf8Encode(DATA); }); beforeEach(function() { envelopeGenerator_ = envelopeService_.newGenerator().init( PUBLIC_KEY_PEMS[0], PUBLIC_KEY_PEMS[1]); envelopeOpener_ = envelopeService_.newOpener().init(PRIVATE_KEY_PEMS[0]); }); describe('create a digital envelope service that should be able to ..', function() { describe('create a digital envelope generator/opener pair that should be able to', function() { it('generate a digital envelope with a single public key and open the envelope with the corresponding private key', function() { var envelope = envelopeGenerator_.init(PUBLIC_KEY_PEMS[0]).generate(data_); var retrievedData = envelopeOpener_.open(envelope); expect(retrievedData).toEqual(data_); }); it('generate a digital envelope with multiple public keys and open the envelope with any corresponding private key', function() { var envelope = envelopeGenerator_.generate(data_); var retrievedData; for (var i = 0; i < PRIVATE_KEY_PEMS.length; i++) { retrievedData = envelopeOpener_.init(PRIVATE_KEY_PEMS[i]).open(envelope); expect(retrievedData).toEqual(data_); } }); it('generate and open a digital envelope, using a provided cryptographic policy', function() { var policy = cryptoPolicy.newInstance(); policy.digitalEnvelope.symmetric.mac.hashAlgorithm = cryptoPolicy.options.digitalEnvelope.symmetric.mac.hashAlgorithm .SHA512_224; var envelopeService = digitalEnvelope.newService({policy: policy}); var envelopeGenerator = envelopeService.newGenerator().init(PUBLIC_KEY_PEMS[0]); var envelopeOpener = envelopeService.newOpener().init(PRIVATE_KEY_PEMS[0]); var envelope = envelopeGenerator.generate(data_); var mac = envelope.mac; expect(mac.length).toBe(28); var retrievedData = envelopeOpener.open(envelope); expect(retrievedData).toEqual(data_); }); it('generate and open a digital envelope, using a provided symmetric cryptography service', function() { var envelopeService = digitalEnvelope.newService( {symmetricCryptographyService: symmetric.newService()}); var envelopeGenerator = envelopeService.newGenerator().init(PUBLIC_KEY_PEMS[0]); var envelopeOpener = envelopeService.newOpener().init(PRIVATE_KEY_PEMS[0]); var envelope = envelopeGenerator.generate(data_); var retrievedData = envelopeOpener.open(envelope); expect(retrievedData).toEqual(data_); }); it('generate and open a digital envelope, using a provided asymmetric cryptography service', function() { var envelopeService = digitalEnvelope.newService( {asymmetricCryptographyService: asymmetric.newService()}); var envelopeGenerator = envelopeService.newGenerator().init(PUBLIC_KEY_PEMS[0]); var envelopeOpener = envelopeService.newOpener().init(PRIVATE_KEY_PEMS[0]); var envelope = envelopeGenerator.generate(data_); var retrievedData = envelopeOpener.open(envelope); expect(retrievedData).toEqual(data_); }); it('open a digital envelope, generated with a single public key, that was recreated by the service from its components', function() { var envelope = envelopeGenerator_.init(PUBLIC_KEY_PEMS[0]).generate(data_); var newEnvelope = envelopeService_.newEnvelope( envelope.encryptedData, envelope.mac, envelope.encryptedSecretKeyPairs); var retrievedData = envelopeOpener_.open(newEnvelope); expect(retrievedData).toEqual(data_); }); it('open a digital envelope, generated with multiple public keys, that was recreated by the service from its components', function() { var envelope = envelopeGenerator_.generate(data_); var newEnvelope = envelopeService_.newEnvelope( envelope.encryptedData, envelope.mac, envelope.encryptedSecretKeyPairs); var retrievedData = envelopeOpener_.open(newEnvelope); for (var i = 0; i < PRIVATE_KEY_PEMS.length; i++) { retrievedData = envelopeOpener_.init(PRIVATE_KEY_PEMS[i]).open(newEnvelope); expect(retrievedData).toEqual(data_); } }); it('open a digital envelope, generated with a single public key, that was serialized and deserialized', function() { var envelope = envelopeGenerator_.init(PUBLIC_KEY_PEMS[0]).generate(data_); var envelopeJson = envelope.toJson(); var envelopeFromJson = envelopeService_.newEnvelope(envelopeJson); var retrievedData = envelopeOpener_.open(envelopeFromJson); expect(retrievedData).toEqual(data_); }); it('open a digital envelope, generated with a multiple public keys, that was serialized and deserialized', function() { var envelope = envelopeGenerator_.generate(data_); var envelopeJson = envelope.toJson(); var envelopeFromJson = envelopeService_.newEnvelope(envelopeJson); var retrievedData; for (var i = 0; i < PRIVATE_KEY_PEMS.length; i++) { retrievedData = envelopeOpener_.init(PRIVATE_KEY_PEMS[i]) .open(envelopeFromJson); expect(retrievedData).toEqual(data_); } }); it('throw an error when generating a digital envelope before the generator has been initialized with a public key', function() { var envelopeGenerator = envelopeService_.newGenerator(); expect(function() { envelopeGenerator.generate(data_); }).toThrow(); }); it('throw an error when opening a digital envelope before the opener has been initialized with a private key', function() { var envelope = envelopeGenerator_.generate(data_); var envelopeOpener = envelopeService_.newOpener(); expect(function() { envelopeOpener.open(envelope); }).toThrow(); }); it('throw an error when opening a digital envelope with the wrong private key', function() { var envelope = envelopeGenerator_.init(PUBLIC_KEY_PEMS[0]).generate(data_); expect(function() { envelopeOpener_.init(PRIVATE_KEY_PEMS[1]).open(envelope); }).toThrow(); }); it('throw an error when opening a corrupted digital envelope', function() { var envelope = envelopeGenerator_.generate(data_); var envelopeJson = envelope.toJson(); var corruptedEnvelopeJson = envelopeJson.replace( '\"encryptedDataBase64\":\"', '\"encryptedDataBase64\":\"0'); var corruptedEnvelope = envelopeService_.newEnvelope(corruptedEnvelopeJson); expect(function() { envelopeOpener_.open(corruptedEnvelope); }).toThrow(); }); }); }); });