define(function(require) { 'use strict'; var PGP = require('js/crypto/pgp'), openpgp = require('openpgp'), expect = chai.expect; describe('PGP Crypto Api unit tests', function() { this.timeout(20000); var pgp, user = 'whiteout.test@t-online.de', passphrase = 'asdf', keySize = 512, keyId = 'F6F60E9B42CDFF4C', pubkey = '-----BEGIN PGP PUBLIC KEY BLOCK-----\r\n' + 'Version: OpenPGP.js v0.7.2\r\n' + 'Comment: Whiteout Mail - https://whiteout.io\r\n' + '\r\n' + 'xk0EUlhMvAEB/2MZtCUOAYvyLFjDp3OBMGn3Ev8FwjzyPbIF0JUw+L7y2XR5\r\n' + 'RVGvbK88unV3cU/1tOYdNsXI6pSp/Ztjyv7vbBUAEQEAAc0pV2hpdGVvdXQg\r\n' + 'VXNlciA8d2hpdGVvdXQudGVzdEB0LW9ubGluZS5kZT7CXAQQAQgAEAUCUlhM\r\n' + 'vQkQ9vYOm0LN/0wAAAW4Af9C+kYW1AvNWmivdtr0M0iYCUjM9DNOQH1fcvXq\r\n' + 'IiN602mWrkd8jcEzLsW5IUNzVPLhrFIuKyBDTpLnC07Loce1\r\n' + '=6XMW\r\n' + '-----END PGP PUBLIC KEY BLOCK-----\r\n\r\n', privkey = '-----BEGIN PGP PRIVATE KEY BLOCK-----\r\n' + 'Version: OpenPGP.js v0.7.2\r\n' + 'Comment: Whiteout Mail - https://whiteout.io\r\n' + '\r\n' + 'xcBeBFJYTLwBAf9jGbQlDgGL8ixYw6dzgTBp9xL/BcI88j2yBdCVMPi+8tl0\r\n' + 'eUVRr2yvPLp1d3FP9bTmHTbFyOqUqf2bY8r+72wVABEBAAH+AwMIhNB4ivtv\r\n' + 'Y2xg6VeMcjjHxZayESHACV+nQx5Tx6ev6xzIF1Qh72fNPDppLhFSFOuTTMsU\r\n' + 'kTN4c+BVYt29spH+cA1jcDAxQ2ULrNAXo+hheOqhpedTs8aCbcLFkJAS16hk\r\n' + 'YSk4OnJgp/z24rVju1SHRSFbgundPzmNgXeX9e8IkviGhhQ11Wc5YwVkx03t\r\n' + 'Z3MdDMF0jyhopbPIoBdyJB0dhvBh98w3JmwpYh9wjUA9MBHD1tvHpRmSZ3BM\r\n' + 'UCmATn2ZLWBRWiYqFbgDnL1GM80pV2hpdGVvdXQgVXNlciA8d2hpdGVvdXQu\r\n' + 'dGVzdEB0LW9ubGluZS5kZT7CXAQQAQgAEAUCUlhMvQkQ9vYOm0LN/0wAAAW4\r\n' + 'Af9C+kYW1AvNWmivdtr0M0iYCUjM9DNOQH1fcvXqIiN602mWrkd8jcEzLsW5\r\n' + 'IUNzVPLhrFIuKyBDTpLnC07Loce1\r\n' + '=ULta\r\n' + '-----END PGP PRIVATE KEY BLOCK-----\r\n'; beforeEach(function() { pgp = new PGP(); }); afterEach(function() {}); describe('Generate key pair', function() { it('should fail', function(done) { pgp.generateKeys({ emailAddress: 'whiteout.test@t-onlinede', keySize: keySize, passphrase: passphrase }, function(err, keys) { expect(err).to.exist; expect(keys).to.not.exist; done(); }); }); it('should fail', function(done) { pgp.generateKeys({ emailAddress: 'whiteout.testt-online.de', keySize: keySize, passphrase: passphrase }, function(err, keys) { expect(err).to.exist; expect(keys).to.not.exist; done(); }); }); it('should work with passphrase', function(done) { pgp.generateKeys({ emailAddress: user, keySize: keySize, passphrase: passphrase }, function(err, keys) { expect(err).to.not.exist; expect(keys.keyId).to.exist; expect(keys.privateKeyArmored).to.exist; expect(keys.publicKeyArmored).to.exist; // test encrypt/decrypt pgp.importKeys({ passphrase: passphrase, privateKeyArmored: keys.privateKeyArmored, publicKeyArmored: keys.publicKeyArmored }, function(err) { expect(err).to.not.exist; pgp.encrypt('secret', [keys.publicKeyArmored], function(err, ct) { expect(err).to.not.exist; expect(ct).to.exist; pgp.decrypt(ct, keys.publicKeyArmored, function(err, pt, signValid) { expect(err).to.not.exist; expect(pt).to.equal('secret'); expect(signValid).to.be.true; done(); }); }); }); }); }); it('should work without passphrase', function(done) { pgp.generateKeys({ emailAddress: user, keySize: keySize, passphrase: '' }, function(err, keys) { expect(err).to.not.exist; expect(keys.keyId).to.exist; expect(keys.privateKeyArmored).to.exist; expect(keys.publicKeyArmored).to.exist; // test encrypt/decrypt pgp.importKeys({ passphrase: undefined, privateKeyArmored: keys.privateKeyArmored, publicKeyArmored: keys.publicKeyArmored }, function(err) { expect(err).to.not.exist; pgp.encrypt('secret', [keys.publicKeyArmored], function(err, ct) { expect(err).to.not.exist; expect(ct).to.exist; pgp.decrypt(ct, keys.publicKeyArmored, function(err, pt, signValid) { expect(err).to.not.exist; expect(pt).to.equal('secret'); expect(signValid).to.be.true; done(); }); }); }); }); }); }); describe('Import/Export key pair', function() { it('should fail', function(done) { pgp.importKeys({ passphrase: 'asd', privateKeyArmored: privkey, publicKeyArmored: pubkey }, function(err) { expect(err).to.exist; expect(err.message).to.equal('Incorrect passphrase!'); pgp.exportKeys(function(err, keys) { expect(err).to.exist; expect(keys).to.not.exist; done(); }); }); }); it('should work', function(done) { pgp.importKeys({ passphrase: passphrase, privateKeyArmored: privkey, publicKeyArmored: pubkey }, function(err) { expect(err).to.not.exist; pgp.exportKeys(function(err, keys) { expect(err).to.not.exist; expect(keys.keyId).to.equal(keyId); expect(keys.privateKeyArmored.replace(/\r/g, '')).to.equal(privkey.replace(/\r/g, '')); expect(keys.publicKeyArmored.replace(/\r/g, '')).to.equal(pubkey.replace(/\r/g, '')); done(); }); }); }); }); describe('Change passphrase of private key', function() { it('should work with new passphrase', function(done) { pgp.changePassphrase({ privateKeyArmored: privkey, oldPassphrase: passphrase, newPassphrase: 'yxcv' }, function(err, reEncryptedKey) { expect(err).to.not.exist; expect(reEncryptedKey).to.exist; pgp.importKeys({ passphrase: 'yxcv', privateKeyArmored: reEncryptedKey, publicKeyArmored: pubkey }, function(err) { expect(err).to.not.exist; done(); }); }); }); it('should work with empty passphrase', function(done) { pgp.changePassphrase({ privateKeyArmored: privkey, oldPassphrase: passphrase, newPassphrase: undefined }, function(err, reEncryptedKey) { expect(err).to.not.exist; expect(reEncryptedKey).to.exist; pgp.importKeys({ passphrase: undefined, privateKeyArmored: reEncryptedKey, publicKeyArmored: pubkey }, function(err) { expect(err).to.not.exist; done(); }); }); }); it('should fail when passphrases are equal', function(done) { pgp.changePassphrase({ privateKeyArmored: privkey, oldPassphrase: passphrase, newPassphrase: passphrase }, function(err, reEncryptedKey) { expect(err).to.exist; expect(reEncryptedKey).to.not.exist; done(); }); }); it('should fail when old passphrase is incorrect', function(done) { pgp.changePassphrase({ privateKeyArmored: privkey, oldPassphrase: 'asd', newPassphrase: 'yxcv' }, function(err, reEncryptedKey) { expect(err).to.exist; expect(reEncryptedKey).to.not.exist; done(); }); }); }); describe('Encrypt/Sign/Decrypt/Verify', function() { var message = 'asdfs\n\nThursday, Nov 21, 2013 7:38 PM asdf@example.com wrote:\n' + '> asdf\n' + '> \n' + '> Thursday, Nov 21, 2013 7:32 PM asdf@example.com wrote:\n' + '> > secret 3'; var wrongPubkey = '-----BEGIN PGP PUBLIC KEY BLOCK-----\r\nVersion: OpenPGP.js v.1.20131116\r\nComment: Whiteout Mail - http://whiteout.io\r\n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\r\nNvE45V/hS1PbZcfPVoUjE2qc1Ix1\r\n=7Wpe\r\n-----END PGP PUBLIC KEY BLOCK-----'; beforeEach(function(done) { pgp.importKeys({ passphrase: passphrase, privateKeyArmored: privkey, publicKeyArmored: pubkey }, function(err) { expect(err).to.not.exist; done(); }); }); describe('Get KeyId', function() { it('should work without param', function() { var keyId = pgp.getKeyId(); expect(keyId).to.equal('F6F60E9B42CDFF4C'); }); it('should work with param', function() { var keyId = pgp.getKeyId(pubkey); expect(keyId).to.equal('F6F60E9B42CDFF4C'); }); }); describe('Get Fingerprint', function() { it('should work without param', function() { var fingerprint = pgp.getFingerprint(); expect(fingerprint).to.equal('5856CEF789C3A307E8A1B976F6F60E9B42CDFF4C'); }); it('should work with param', function() { var fingerprint = pgp.getFingerprint(pubkey); expect(fingerprint).to.equal('5856CEF789C3A307E8A1B976F6F60E9B42CDFF4C'); }); }); describe('getKeyParams', function() { it('should work with param', function() { var params = pgp.getKeyParams(pubkey); expect(params.fingerprint).to.equal('5856CEF789C3A307E8A1B976F6F60E9B42CDFF4C'); expect(params._id).to.equal("F6F60E9B42CDFF4C"); expect(params.bitSize).to.equal(keySize); expect(params.userId).to.equal("whiteout.test@t-online.de"); expect(params.userIds[0].name).to.equal("Whiteout User"); expect(params.userIds[0].emailAddress).to.equal("whiteout.test@t-online.de"); expect(params.algorithm).to.equal("rsa_encrypt_sign"); }); it('should work without param', function() { var params = pgp.getKeyParams(); expect(params.fingerprint).to.equal('5856CEF789C3A307E8A1B976F6F60E9B42CDFF4C'); expect(params._id).to.equal("F6F60E9B42CDFF4C"); expect(params.bitSize).to.equal(keySize); expect(params.userId).to.equal("whiteout.test@t-online.de"); expect(params.userIds[0].name).to.equal("Whiteout User"); expect(params.userIds[0].emailAddress).to.equal("whiteout.test@t-online.de"); expect(params.algorithm).to.equal("rsa_encrypt_sign"); }); }); describe('extractPublicKey', function() { it('should work', function() { var pk = pgp.extractPublicKey(privkey); expect(pk).to.exist; expect(pk).to.contain('-----BEGIN PGP PUBLIC KEY BLOCK-----'); }); }); describe('Encrypt and sign', function() { it('should fail', function(done) { var input = null; pgp.encrypt(input, [pubkey], function(err, ct) { expect(err).to.exist; expect(ct).to.not.exist; done(); }); }); it('should work', function(done) { pgp.encrypt(message, [pubkey], function(err, ct) { expect(err).to.not.exist; expect(ct).to.exist; done(); }); }); it('should encrypt to myself if public keys are empty', function(done) { pgp.encrypt(message, undefined, function(err, ct) { expect(err).to.not.exist; expect(ct).to.exist; done(); }); }); }); describe('Decrypt and verify', function() { var ciphertext; beforeEach(function(done) { pgp.encrypt(message, [pubkey], function(err, ct) { expect(err).to.not.exist; expect(ct).to.exist; ciphertext = ct; done(); }); }); it('should fail', function(done) { var input = 'asdfa\rsdf'; pgp.decrypt(input, pubkey, function(err, pt) { expect(err).to.exist; expect(pt).to.not.exist; done(); }); }); it('should work', function(done) { pgp.decrypt(ciphertext, pubkey, function(err, pt, signValid) { expect(err).to.not.exist; expect(pt).to.equal(message); expect(signValid).to.be.true; done(); }); }); it('should work without signature', function(done) { var ct = openpgp.encryptMessage([pgp._publicKey], message); pgp.decrypt(ct, undefined, function(err, pt, signValid) { expect(err).to.not.exist; expect(pt).to.equal(message); expect(signValid).to.be.undefined; done(); }); }); it('should fail to verify if public keys are empty', function(done) { // setup another public key so that signature verification fails pgp._publicKey = openpgp.key.readArmored(wrongPubkey).keys[0]; pgp.decrypt(ciphertext, undefined, function(err, pt, signValid) { expect(err).to.not.exist; expect(pt).to.equal(message); expect(signValid).to.be.null; done(); }); }); it('should decrypt but signValid should be null for wrong public key', function(done) { pgp.decrypt(ciphertext, wrongPubkey, function(err, pt, signValid) { expect(err).to.not.exist; expect(pt).to.equal(message); expect(signValid).to.be.null; done(); }); }); }); describe('Verify clearsigned message', function() { var clearsigned; beforeEach(function() { clearsigned = openpgp.signClearMessage(pgp._privateKey, 'this is a clearsigned message'); }); it('should work', function(done) { pgp.verifyClearSignedMessage(clearsigned, pubkey, function(err, signaturesValid) { expect(err).to.not.exist; expect(signaturesValid).to.be.true; done(); }); }); it('should fail', function(done) { pgp.verifyClearSignedMessage(clearsigned.replace('clearsigned', 'invalid'), pubkey, function(err, signaturesValid) { expect(err).to.not.exist; expect(signaturesValid).to.be.false; done(); }); }); it('should be null for wrong public key', function(done) { pgp.verifyClearSignedMessage(clearsigned, wrongPubkey, function(err, signaturesValid) { expect(err).to.not.exist; expect(signaturesValid).to.be.null; done(); }); }); }); describe('Verify detached signature', function() { var signedMessage, signature; beforeEach(function() { signedMessage = 'this is a signed message'; var clearsigned = openpgp.signClearMessage(pgp._privateKey, signedMessage); var signatureHeader = '-----BEGIN PGP SIGNATURE-----'; signature = signatureHeader + clearsigned.split(signatureHeader).pop(); }); it('should work', function(done) { pgp.verifySignedMessage(signedMessage, signature, pubkey, function(err, signaturesValid) { expect(err).to.not.exist; expect(signaturesValid).to.be.true; done(); }); }); it('should fail', function(done) { pgp.verifySignedMessage(signedMessage.replace('signed', 'invalid'), signature, pubkey, function(err, signaturesValid) { expect(err).to.not.exist; expect(signaturesValid).to.be.false; done(); }); }); it('should be null for wrong public key', function(done) { pgp.verifySignedMessage(signedMessage, signature, wrongPubkey, function(err, signaturesValid) { expect(err).to.not.exist; expect(signaturesValid).to.be.null; done(); }); }); }); }); }); });