Stowage/tutanota
2
0
Fork 0
mirror of https://github.com/tutao/tutanota.git synced 2025-12-08 06:09:50 +00:00
Code Issues Projects Releases Packages Wiki Activity
tutanota/test/api/crypto/CryptoFacadeTest.js

650 lines
31 KiB
JavaScript
Raw Normal View History

imported new tutanota client
2017-08-15 13:54:22 +02:00
//@flow
import o from "ospec/ospec.js"
cleaner rsa key conversion, #601
2018-10-23 10:57:55 +02:00
import {aes128Decrypt, aes128Encrypt, aes128RandomKey, ENABLE_MAC, IV_BYTE_LENGTH} from "../../../src/api/worker/crypto/Aes"
imported new tutanota client
2017-08-15 13:54:22 +02:00
import {random} from "../../../src/api/worker/crypto/Randomizer"
Add test cases for decompression
2019-08-21 15:12:04 +02:00
import {
base64ToUint8Array,
hexToUint8Array,
stringToUtf8Uint8Array,
uint8ArrayToBase64,
utf8Uint8ArrayToString
} from "../../../src/api/common/utils/Encoding"
imported new tutanota client
2017-08-15 13:54:22 +02:00
import {
decryptAndMapToInstance,
cleaner rsa key conversion, #601
2018-10-23 10:57:55 +02:00
decryptKey,
decryptRsaKey,
imported new tutanota client
2017-08-15 13:54:22 +02:00
decryptValue,
cleaner rsa key conversion, #601
2018-10-23 10:57:55 +02:00
encryptAndMapToLiteral,
encryptKey,
imported new tutanota client
2017-08-15 13:54:22 +02:00
encryptRsaKey,
cleaner rsa key conversion, #601
2018-10-23 10:57:55 +02:00
encryptValue,
resolveSessionKey
imported new tutanota client
2017-08-15 13:54:22 +02:00
} from "../../../src/api/worker/crypto/CryptoFacade"
import {ProgrammingError} from "../../../src/api/common/error/ProgrammingError"
import {Cardinality, ValueType} from "../../../src/api/common/EntityConstants"
cleaner rsa key conversion, #601
2018-10-23 10:57:55 +02:00
import {BucketPermissionType, PermissionType} from "../../../src/api/common/TutanotaConstants"
imported new tutanota client
2017-08-15 13:54:22 +02:00
import {hexToPrivateKey, hexToPublicKey, rsaEncrypt} from "../../../src/api/worker/crypto/Rsa"
import * as Mail from "../../../src/api/entities/tutanota/Mail"
import {isSameTypeRef} from "../../../src/api/common/EntityFunctions"
import * as Contact from "../../../src/api/entities/tutanota/Contact"
import * as UserIdReturn from "../../../src/api/entities/sys/UserIdReturn"
import {createUserIdReturn} from "../../../src/api/entities/sys/UserIdReturn"
import {createPermission} from "../../../src/api/entities/sys/Permission"
import {createBucket} from "../../../src/api/entities/sys/Bucket"
import {createGroup} from "../../../src/api/entities/sys/Group"
import {createKeyPair} from "../../../src/api/entities/sys/KeyPair"
import {createBucketPermission} from "../../../src/api/entities/sys/BucketPermission"
import {createUser} from "../../../src/api/entities/sys/User"
import {createGroupMembership} from "../../../src/api/entities/sys/GroupMembership"
import {createContactAddress} from "../../../src/api/entities/tutanota/ContactAddress"
import {MailAddressTypeRef} from "../../../src/api/entities/tutanota/MailAddress"
cleaner rsa key conversion, #601
2018-10-23 10:57:55 +02:00
import {mockAttribute, unmockAttribute} from "../TestUtils"
imported new tutanota client
2017-08-15 13:54:22 +02:00
import {restClient} from "../../../src/api/worker/rest/RestClient"
import {bitArrayToUint8Array} from "../../../src/api/worker/crypto/CryptoUtils"
splitted SearchFacade and refactored worker to use locator
2017-11-23 13:30:17 +01:00
import {locator} from "../../../src/api/worker/WorkerLocator"
import {LoginFacade} from "../../../src/api/worker/facades/LoginFacade"
imported new tutanota client
2017-08-15 13:54:22 +02:00
o.spec("crypto facade", function () {
let rsaPrivateHexKey = "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"
let rsaPublicHexKey = "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"
splitted SearchFacade and refactored worker to use locator
2017-11-23 13:30:17 +01:00
o.before(function () {
add second factor check for recover login, #233
2018-11-02 15:33:34 +01:00
locator.login = new LoginFacade((null: any))
splitted SearchFacade and refactored worker to use locator
2017-11-23 13:30:17 +01:00
})
imported new tutanota client
2017-08-15 13:54:22 +02:00
o.afterEach(function () {
splitted SearchFacade and refactored worker to use locator
2017-11-23 13:30:17 +01:00
locator.login.reset()
imported new tutanota client
2017-08-15 13:54:22 +02:00
})
o("encrypt / decrypt key", function () {
let gk = [3957386659, 354339016, 3786337319, 3366334248]
let sk = [3229306880, 2716953871, 4072167920, 3901332676]
let encryptedKey = encryptKey(gk, sk)
o(Array.from(encryptedKey)).deepEquals(Array.from(base64ToUint8Array("O3cyw7uo5DMm655aQiw0Xw==")))
o(decryptKey(gk, encryptedKey)).deepEquals(sk)
})
o("encrypt / decrypt private rsa key", function () {
let gk = [3957386659, 354339016, 3786337319, 3366334248]
let privateKey = hexToPrivateKey(rsaPrivateHexKey)
let iv = base64ToUint8Array("OhpFcbl6oPjsn3WwhYFnOg==")
var encryptedPrivateKey = encryptRsaKey(gk, privateKey, iv);
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
o(uint8ArrayToBase64(encryptedPrivateKey))
.equals("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")
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(decryptRsaKey(gk, encryptedPrivateKey)).deepEquals(privateKey)
})
function createValueType(type, encrypted, cardinality): ModelValue {
return {
"name": "test",
"id": 426,
"since": 6,
"type": type,
"cardinality": cardinality,
"final": true,
"encrypted": encrypted
}
}
o.spec("decrypt value", function () {
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
o("decrypt string / number value without mac", () => {
let sk = aes128RandomKey()
let value = "this is a string value"
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, false))
o(decryptValue(createValueType(ValueType.String, true, Cardinality.One), encryptedValue, sk)).equals(value)
value = "516546"
encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, false))
o(decryptValue(createValueType(ValueType.String, true, Cardinality.One), encryptedValue, sk)).equals(value)
})
o("decrypt string / number value with mac", () => {
imported new tutanota client
2017-08-15 13:54:22 +02:00
let sk = aes128RandomKey()
let value = "this is a string value"
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, true))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(decryptValue(createValueType(ValueType.String, true, Cardinality.One), encryptedValue, sk)).equals(value)
value = "516546"
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, true))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(decryptValue(createValueType(ValueType.String, true, Cardinality.One), encryptedValue, sk)).equals(value)
})
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
o("decrypt boolean value without mac", () => {
imported new tutanota client
2017-08-15 13:54:22 +02:00
let valueType: ModelValue = createValueType(ValueType.Boolean, true, Cardinality.One)
let sk = aes128RandomKey()
let value = "0"
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, false))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(decryptValue(valueType, encryptedValue, sk)).equals(false)
value = "1"
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, false))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(decryptValue(valueType, encryptedValue, sk)).equals(true)
value = "32498"
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, false))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(decryptValue(valueType, encryptedValue, sk)).equals(true)
})
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
o("decrypt boolean value with mac", () => {
let valueType: ModelValue = createValueType(ValueType.Boolean, true, Cardinality.One)
let sk = aes128RandomKey()
let value = "0"
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, true))
o(decryptValue(valueType, encryptedValue, sk)).equals(false)
value = "1"
encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, true))
o(decryptValue(valueType, encryptedValue, sk)).equals(true)
value = "32498"
encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, true))
o(decryptValue(valueType, encryptedValue, sk)).equals(true)
})
o("decrypt date value without mac", () => {
let valueType: ModelValue = createValueType(ValueType.Date, true, Cardinality.One)
let sk = aes128RandomKey()
let value = new Date().getTime().toString()
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, false))
o(decryptValue(valueType, encryptedValue, sk)).deepEquals(new Date(parseInt(value)))
})
o("decrypt date value with mac", () => {
imported new tutanota client
2017-08-15 13:54:22 +02:00
let valueType: ModelValue = createValueType(ValueType.Date, true, Cardinality.One)
let sk = aes128RandomKey()
let value = new Date().getTime().toString()
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), random.generateRandomData(IV_BYTE_LENGTH), true, true))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(decryptValue(valueType, encryptedValue, sk)).deepEquals(new Date(parseInt(value)))
})
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
o("decrypt bytes value without mac", () => {
let valueType: ModelValue = createValueType(ValueType.Bytes, true, Cardinality.One)
let sk = aes128RandomKey()
let value = random.generateRandomData(5)
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, value, random.generateRandomData(IV_BYTE_LENGTH), true, false))
let decryptedValue = decryptValue(valueType, encryptedValue, sk)
o(decryptedValue instanceof Uint8Array).equals(true)
o(Array.from(decryptedValue)).deepEquals(Array.from(value))
})
o("decrypt bytes value with mac", () => {
imported new tutanota client
2017-08-15 13:54:22 +02:00
let valueType: ModelValue = createValueType(ValueType.Bytes, true, Cardinality.One)
let sk = aes128RandomKey()
let value = random.generateRandomData(5)
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, value, random.generateRandomData(IV_BYTE_LENGTH), true, true))
imported new tutanota client
2017-08-15 13:54:22 +02:00
let decryptedValue = decryptValue(valueType, encryptedValue, sk)
o(decryptedValue instanceof Uint8Array).equals(true)
o(Array.from(decryptedValue)).deepEquals(Array.from(value))
})
Add test cases for decompression
2019-08-21 15:12:04 +02:00
o("decrypt compressedString", () => {
let valueType: ModelValue = createValueType(ValueType.CompressedString, true, Cardinality.One)
let sk = aes128RandomKey()
let value = base64ToUint8Array("eJwrSS0uAQAEXQHB")
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, value, random.generateRandomData(IV_BYTE_LENGTH), true, true))
let decryptedValue = decryptValue(valueType, encryptedValue, sk)
o(typeof decryptedValue === "string").equals(true)
o(decryptedValue).equals("test")
})
o("decrypt empty compressedString", () => {
let valueType: ModelValue = createValueType(ValueType.CompressedString, true, Cardinality.One)
let sk = aes128RandomKey()
let encryptedValue = uint8ArrayToBase64(aes128Encrypt(sk, new Uint8Array([]), random.generateRandomData(IV_BYTE_LENGTH), true, true))
let decryptedValue = decryptValue(valueType, encryptedValue, sk)
o(typeof decryptedValue === "string").equals(true)
o(decryptedValue).equals("")
})
imported new tutanota client
2017-08-15 13:54:22 +02:00
o("do not decrypt null values", () => {
let sk = aes128RandomKey()
o(decryptValue(createValueType(ValueType.String, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
o(decryptValue(createValueType(ValueType.Date, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
o(decryptValue(createValueType(ValueType.Bytes, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
o(decryptValue(createValueType(ValueType.Boolean, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
o(decryptValue(createValueType(ValueType.Number, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
})
o("throw error on ONE null values (String)", testErrorOnNull(ValueType.String))
o("throw error on ONE null values (Date)", testErrorOnNull(ValueType.Date))
o("throw error on ONE null values (Bytes)", testErrorOnNull(ValueType.Bytes))
o("throw error on ONE null values (Boolean)", testErrorOnNull(ValueType.Boolean))
o("throw error on ONE null values (Number)", testErrorOnNull(ValueType.Number))
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
imported new tutanota client
2017-08-15 13:54:22 +02:00
function testErrorOnNull(type) {
return (done) => {
let sk = aes128RandomKey()
try {
o(decryptValue(createValueType(type, true, Cardinality.One), null, sk)).equals(null)
} catch (e) {
o(e instanceof ProgrammingError).equals(true)
o(e.message).equals('Value test with cardinality ONE can not be null')
done()
}
}
}
o("convert unencrypted Date to JS type", function () {
let value = new Date().getTime().toString()
o(decryptValue(createValueType(ValueType.Date, false, Cardinality.One), value, null)).deepEquals(new Date(parseInt(value)))
})
o("convert unencrypted Bytes to JS type", function () {
let valueBytes = random.generateRandomData(15)
let value = uint8ArrayToBase64(valueBytes)
Add test cases for decompression
2019-08-21 15:12:04 +02:00
o(Array.from(decryptValue(createValueType(ValueType.Bytes, false, Cardinality.One), value, null)))
.deepEquals(Array.from(valueBytes))
imported new tutanota client
2017-08-15 13:54:22 +02:00
})
o("convert unencrypted Boolean to JS type", function () {
let value = "0"
o(decryptValue(createValueType(ValueType.Boolean, false, Cardinality.One), value, null)).equals(false)
value = "1"
o(decryptValue(createValueType(ValueType.Boolean, false, Cardinality.One), value, null)).equals(true)
})
o("convert unencrypted Number to JS type", function () {
let value = ""
o(decryptValue(createValueType(ValueType.Number, false, Cardinality.One), value, null)).equals("0")
value = "0"
o(decryptValue(createValueType(ValueType.Number, false, Cardinality.One), value, null)).equals("0")
value = "1"
o(decryptValue(createValueType(ValueType.Number, false, Cardinality.One), value, null)).equals("1")
})
Add test cases for decompression
2019-08-21 15:12:04 +02:00
o("convert unencrypted compressedString to JS type", function () {
let value = ""
o(decryptValue(createValueType(ValueType.CompressedString, false, Cardinality.One), value, null)).equals("")
value = "eJwrSS0uAQAEXQHB"
o(decryptValue(createValueType(ValueType.CompressedString, false, Cardinality.One), value, null)).equals("test")
})
imported new tutanota client
2017-08-15 13:54:22 +02:00
})
o.spec("encryptValue", function () {
o("encrypt string / number value", () => {
var valueType = createValueType(ValueType.String, true, Cardinality.One)
let sk = aes128RandomKey()
let value = "this is a string value"
let encryptedValue = encryptValue(valueType, value, sk)
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
let expected = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value), base64ToUint8Array(encryptedValue)
.slice(ENABLE_MAC ? 1 : 0, ENABLE_MAC ? 17 : 16), true, ENABLE_MAC))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(encryptedValue).deepEquals(expected)
o(decryptValue(valueType, encryptedValue, sk)).equals(value)
})
o("encrypt boolean value", () => {
let valueType: ModelValue = createValueType(ValueType.Boolean, true, Cardinality.One)
let sk = aes128RandomKey()
let value = false
let encryptedValue = encryptValue(valueType, value, sk)
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
let expected = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value ? "1" : "0"), base64ToUint8Array(encryptedValue)
.slice(ENABLE_MAC ? 1 : 0, ENABLE_MAC ? 17 : 16), true, ENABLE_MAC))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(encryptedValue).equals(expected)
o(decryptValue(valueType, encryptedValue, sk)).equals(false)
value = true
encryptedValue = encryptValue(valueType, value, sk)
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
expected = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value ? "1" : "0"), base64ToUint8Array(encryptedValue)
.slice(ENABLE_MAC ? 1 : 0, ENABLE_MAC ? 17 : 16), true, ENABLE_MAC))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(encryptedValue).equals(expected)
o(decryptValue(valueType, encryptedValue, sk)).equals(true)
})
o("encrypt date value", () => {
let valueType: ModelValue = createValueType(ValueType.Date, true, Cardinality.One)
let sk = aes128RandomKey()
let value = new Date()
let encryptedValue = encryptValue(valueType, value, sk)
Add test cases for decompression
2019-08-21 15:12:04 +02:00
let expected = uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(value.getTime()
.toString()), base64ToUint8Array(encryptedValue)
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
.slice(ENABLE_MAC ? 1 : 0, ENABLE_MAC ? 17 : 16), true, ENABLE_MAC))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(decryptValue(valueType, encryptedValue, sk)).deepEquals(value)
})
o("encrypt bytes value", () => {
let valueType: ModelValue = createValueType(ValueType.Bytes, true, Cardinality.One)
let sk = aes128RandomKey()
let value = random.generateRandomData(5)
let encryptedValue = encryptValue(valueType, value, sk)
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
let expected = uint8ArrayToBase64(aes128Encrypt(sk, value, base64ToUint8Array(encryptedValue)
.slice(ENABLE_MAC ? 1 : 0, ENABLE_MAC ? 17 : 16), true, ENABLE_MAC))
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(encryptedValue).equals(expected)
o(Array.from(decryptValue(valueType, encryptedValue, sk))).deepEquals(Array.from(value))
})
o("do not encrypt null values", () => {
let sk = aes128RandomKey()
o(encryptValue(createValueType(ValueType.String, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
o(encryptValue(createValueType(ValueType.Date, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
o(encryptValue(createValueType(ValueType.Bytes, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
o(encryptValue(createValueType(ValueType.Boolean, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
o(encryptValue(createValueType(ValueType.Number, true, Cardinality.ZeroOrOne), null, sk)).equals(null)
})
o("accept null _id and _permissions value during encryption", () => {
let vt = {
"name": "_id",
"id": 426,
"since": 6,
"type": ValueType.GeneratedId,
"cardinality": Cardinality.One,
"final": true,
"encrypted": false
}
o(encryptValue(vt, null, null)).equals(null)
vt.name = '_permissions'
o(encryptValue(vt, null, null)).equals(null)
})
o("throw error on ONE null values (enc String)", testErrorOnNull(ValueType.String))
o("throw error on ONE null values (enc Date)", testErrorOnNull(ValueType.Date))
o("throw error on ONE null values (enc Bytes)", testErrorOnNull(ValueType.Bytes))
o("throw error on ONE null values (enc Boolean)", testErrorOnNull(ValueType.Boolean))
o("throw error on ONE null values (enc Number)", testErrorOnNull(ValueType.Number))
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
imported new tutanota client
2017-08-15 13:54:22 +02:00
function testErrorOnNull(type) {
return (done) => {
let sk = aes128RandomKey()
try {
o(encryptValue(createValueType(type, true, Cardinality.One), null, sk)).equals(null)
} catch (e) {
o(e instanceof ProgrammingError).equals(true)
o(e.message).equals('Value test with cardinality ONE can not be null')
done()
}
}
}
o("convert unencrypted Date to DB type", function () {
let value = new Date()
o(encryptValue(createValueType(ValueType.Date, false, Cardinality.One), value, null)).deepEquals(value.getTime().toString())
})
o("convert unencrypted Bytes to DB type", function () {
let valueBytes = random.generateRandomData(15)
Add test cases for decompression
2019-08-21 15:12:04 +02:00
o(encryptValue(createValueType(ValueType.Bytes, false, Cardinality.One), valueBytes, null))
.deepEquals(uint8ArrayToBase64(valueBytes))
imported new tutanota client
2017-08-15 13:54:22 +02:00
})
o("convert unencrypted Boolean to DB type", function () {
let value = false
o(encryptValue(createValueType(ValueType.Boolean, false, Cardinality.One), value, null)).equals("0")
value = true
o(encryptValue(createValueType(ValueType.Boolean, false, Cardinality.One), value, null)).equals("1")
})
o("convert unencrypted Number to DB type", function () {
let value = "0"
o(encryptValue(createValueType(ValueType.Number, false, Cardinality.One), value, null)).equals("0")
value = "1"
o(encryptValue(createValueType(ValueType.Number, false, Cardinality.One), value, null)).equals("1")
})
})
function createMailLiteral(gk, sk, subject, confidential, senderName, recipientName) {
let mail = {
_format: "0",
_area: "0",
_owner: "ownerId",
_ownerGroup: "ownerGroupId",
_ownerEncSessionKey: encryptKey(gk, sk),
_id: "mailId",
_permissions: "permissionListId",
receivedDate: new Date(1470039025474).getTime().toString(),
sentDate: new Date(1470039021474).getTime().toString(),
state: "",
trashed: false,
unread: true,
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
subject: uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(subject), random.generateRandomData(IV_BYTE_LENGTH), true, ENABLE_MAC)),
imported new tutanota client
2017-08-15 13:54:22 +02:00
replyType: "",
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
confidential: uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(confidential ? "1" : "0"), random.generateRandomData(IV_BYTE_LENGTH), true, ENABLE_MAC)),
imported new tutanota client
2017-08-15 13:54:22 +02:00
sender: {
_id: "senderId",
address: "hello@tutao.de",
sto580: Support for MAC for AES
2017-09-25 16:22:38 +02:00
name: uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(senderName), random.generateRandomData(IV_BYTE_LENGTH), true, ENABLE_MAC))
imported new tutanota client
2017-08-15 13:54:22 +02:00
},
bccRecipients: [],
ccRecipients: [],
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
toRecipients: [
{
_id: "recipientId",
address: "support@yahoo.com",
name: uint8ArrayToBase64(aes128Encrypt(sk, stringToUtf8Uint8Array(recipientName), random.generateRandomData(IV_BYTE_LENGTH), true, ENABLE_MAC))
}
],
imported new tutanota client
2017-08-15 13:54:22 +02:00
replyTos: []
}
return mail;
}
fixed test cases
2017-12-18 18:55:04 +01:00
o("decrypt instance", function (done, timeout) {
timeout(1000)
imported new tutanota client
2017-08-15 13:54:22 +02:00
let subject = "this is our subject"
let confidential = true
let senderName = "TutanotaTeam"
let recipientName = "Yahoo"
let gk = aes128RandomKey()
let sk = aes128RandomKey()
let mail = createMailLiteral(gk, sk, subject, confidential, senderName, recipientName)
decryptAndMapToInstance(Mail._TypeModel, mail, sk).then(decrypted => {
o(isSameTypeRef(decrypted._type, Mail.MailTypeRef)).equals(true)
o(decrypted.receivedDate.getTime()).equals(1470039025474)
o(decrypted.sentDate.getTime()).equals(1470039021474)
o(decrypted.confidential).equals(confidential)
o(decrypted.subject).equals(subject)
o(decrypted.replyType).equals("0")
// aggregates
cleaner rsa key conversion, #601
2018-10-23 10:57:55 +02:00
o(isSameTypeRef(decrypted.sender._type, MailAddressTypeRef)).equals(true)
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(decrypted.sender.name).equals(senderName)
o(decrypted.sender.address).equals("hello@tutao.de")
o(decrypted.toRecipients[0].name).equals(recipientName)
o(decrypted.toRecipients[0].address).equals("support@yahoo.com")
done()
})
})
o("encrypt instance", function (done) {
let sk = aes128RandomKey()
let address = createContactAddress()
address.type = "0"
address.address = "Entenhausen"
address.customTypeName = "0"
let contact = Contact.createContact()
contact._area = "0"
contact._owner = "123"
contact.title = "Dr."
contact.firstName = "Max"
contact.lastName = "Meier"
contact.comment = "what?"
contact.company = "WIW"
contact.autoTransmitPassword = "stop bugging me!"
contact.addresses = [address]
encryptAndMapToLiteral(Contact._TypeModel, contact, sk).then(result => {
o(result._format).equals("0")
o(result._ownerGroup).equals(null)
o(result._ownerEncSessionKey).equals(null)
o(utf8Uint8ArrayToString(aes128Decrypt(sk, base64ToUint8Array(result.addresses[0].type)))).equals(contact.addresses[0].type)
Add test cases for decompression
2019-08-21 15:12:04 +02:00
o(utf8Uint8ArrayToString(aes128Decrypt(sk, base64ToUint8Array(result.addresses[0].address))))
.equals(contact.addresses[0].address)
o(utf8Uint8ArrayToString(aes128Decrypt(sk, base64ToUint8Array(result.addresses[0].customTypeName))))
.equals(contact.addresses[0].customTypeName)
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(utf8Uint8ArrayToString(aes128Decrypt(sk, base64ToUint8Array(result.title)))).equals(contact.title)
o(utf8Uint8ArrayToString(aes128Decrypt(sk, base64ToUint8Array(result.firstName)))).equals(contact.firstName)
o(utf8Uint8ArrayToString(aes128Decrypt(sk, base64ToUint8Array(result.lastName)))).equals(contact.lastName)
o(utf8Uint8ArrayToString(aes128Decrypt(sk, base64ToUint8Array(result.comment)))).equals(contact.comment)
o(utf8Uint8ArrayToString(aes128Decrypt(sk, base64ToUint8Array(result.company)))).equals(contact.company)
Add test cases for decompression
2019-08-21 15:12:04 +02:00
o(utf8Uint8ArrayToString(aes128Decrypt(sk, base64ToUint8Array(result.autoTransmitPassword))))
.equals(contact.autoTransmitPassword)
imported new tutanota client
2017-08-15 13:54:22 +02:00
done()
})
})
o("map unencrypted to instance", function (done) {
let userIdLiteral = {"_format": "0", "userId": "KOBqO7a----0"}
decryptAndMapToInstance(UserIdReturn._TypeModel, userIdLiteral).then(userIdReturn => {
o(userIdReturn._format).equals("0")
o(userIdReturn.userId).equals("KOBqO7a----0")
done()
})
})
o("map unencrypted to DB literal", function (done) {
let userIdReturn = createUserIdReturn()
userIdReturn._format = "0"
userIdReturn.userId = "KOBqO7a----0"
let userIdLiteral = {"_format": "0", "userId": "KOBqO7a----0"}
encryptAndMapToLiteral(UserIdReturn._TypeModel, userIdReturn, null).then(result => {
o(result).deepEquals(userIdLiteral)
done()
})
})
o("resolve session key: unencrypted instance", function (done) {
let userIdLiteral = {"_format": "0", "userId": "KOBqO7a----0"}
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
resolveSessionKey(UserIdReturn._TypeModel, userIdLiteral, ({}: any)).then(sessionKey => {
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(sessionKey).equals(null)
done()
})
})
o("resolve session key: _ownerEncSessionKey instance", function (done) {
let subject = "this is our subject"
let confidential = true
let senderName = "TutanotaTeam"
let recipientName = "Yahoo"
let gk = aes128RandomKey()
let sk = aes128RandomKey()
splitted SearchFacade and refactored worker to use locator
2017-11-23 13:30:17 +01:00
locator.login.groupKeys = {ownerGroupId: gk}
locator.login._user = createUser()
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
locator.login._user.userGroup = ({group: 'ownerGroupId'}: any)
imported new tutanota client
2017-08-15 13:54:22 +02:00
let mail = createMailLiteral(gk, sk, subject, confidential, senderName, recipientName)
updated flow and fixed errors
2017-09-22 10:57:52 +02:00
resolveSessionKey(Mail._TypeModel, mail, null).then(sessionKey => {
imported new tutanota client
2017-08-15 13:54:22 +02:00
o(sessionKey).deepEquals(sk)
}).then(done)
})
o("resolve session key: public key decryption of session key", function (done) {
let subject = "this is our subject"
let confidential = true
let senderName = "TutanotaTeam"
let recipientName = "Yahoo"
let gk = aes128RandomKey()
let sk = aes128RandomKey()
let bk = aes128RandomKey()
let privateKey = hexToPrivateKey(rsaPrivateHexKey)
let publicKey = hexToPublicKey(rsaPublicHexKey)
let keyPair = createKeyPair()
keyPair._id = "keyPairId"
keyPair.symEncPrivKey = encryptRsaKey(gk, privateKey)
keyPair.pubKey = hexToUint8Array(rsaPublicHexKey)
let userGroup = createGroup()
userGroup._id = "userGroupId"
userGroup.keys = [keyPair]
let mail = createMailLiteral(gk, sk, subject, confidential, senderName, recipientName)
mail._ownerEncSessionKey = null
let bucket = createBucket()
bucket.bucketPermissions = "bucketPermissionListId"
let permission = createPermission()
permission.bucketEncSessionKey = encryptKey(bk, sk)
permission._id = ["permissionListId", "permissionId"]
permission.bucket = bucket
permission.type = PermissionType.Public
permission._ownerGroup = userGroup._id
rsaEncrypt(publicKey, bitArrayToUint8Array(bk)).then(pubEncBucketKey => {
let bucketPermission = createBucketPermission()
bucketPermission.pubEncBucketKey = pubEncBucketKey
bucketPermission.type = BucketPermissionType.Public
bucketPermission._id = ["bucketPermissionListId", "bucketPermissionId"]
bucketPermission._ownerGroup = userGroup._id
bucketPermission.group = userGroup._id
let mem = createGroupMembership()
mem.group = userGroup._id
splitted SearchFacade and refactored worker to use locator
2017-11-23 13:30:17 +01:00
locator.login._user = createUser()
locator.login._user.userGroup = mem
locator.login.groupKeys['userGroupId'] = gk
imported new tutanota client
2017-08-15 13:54:22 +02:00
let loaders = {
loadBucketPermissions: function (listId) {
o(listId).equals(bucketPermission._id[0])
return Promise.resolve([bucketPermission])
},
loadPermissions: function (listId) {
o(listId).equals(permission._id[0])
return Promise.resolve([permission])
},
loadGroup: function (groupId) {
o(groupId).equals(userGroup._id)
return Promise.resolve(userGroup)
}
}
// mock the invocation of UpdatePermissionKeyService
let updateMock = mockAttribute(restClient, restClient.request, () => Promise.resolve())
resolveSessionKey(Mail._TypeModel, mail, loaders).then(sessionKey => {
o(sessionKey).deepEquals(sk)
allow view and update of recovery code, show recovery code on signup, #233
2018-10-30 16:43:45 +01:00
o((restClient.request: any).callCount).equals(1)
imported new tutanota client
2017-08-15 13:54:22 +02:00
done()
}).finally(() => unmockAttribute(updateMock))
})
})
o("decryption errors should be written to _errors field", function (done) {
let subject = "this is our subject"
let confidential = true
let senderName = "TutanotaTeam"
let recipientName = "Yahoo"
let gk = aes128RandomKey()
let sk = aes128RandomKey()
let bk = aes128RandomKey()
let mail = createMailLiteral(gk, sk, subject, confidential, senderName, recipientName)
mail.subject = 'asdf'
decryptAndMapToInstance(Mail._TypeModel, mail, sk).then(instance => {
o(typeof instance._errors["subject"]).equals("string")
done()
})
})
Add test cases for decompression
2019-08-21 15:12:04 +02:00
})
Reference in a new issue Copy permalink