encryption_test.go

package thirdparty

import (
	"crypto/ed25519"
	"testing"

	"github.com/mr-tron/base58"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"
	"golang.org/x/crypto/nacl/box"

	"github.com/code-payments/code-server/pkg/code/common"
)

func TestNaclBox_Ed25519ToCurve25519_PrivateKey(t *testing.T) {
	account, err := common.NewAccountFromPrivateKeyString("4vXZTu7W8FKV2cNB7t2MTp8KXrWpJRCodzUPoyPy1MWZiZQqVVXUrycCdoagzPN6YE9w9pyTbZVzVw9iLDUT7adR")
	require.NoError(t, err)

	curve25519PrivateKey := ed25519ToCurve25519PrivateKey(account)
	assert.Equal(t, "F197LA9gxNFgu6bwmHFuBJWU4yuA3wRsBDky9twjeoJr", base58.Encode(curve25519PrivateKey[:]))
}

func TestNaclBox_Ed25519ToCurve25519_PublicKey(t *testing.T) {
	account, err := common.NewAccountFromPublicKeyString("GV6Aow3jPRXFQiC36EGc1BabhFVY1mEwKPEuwZorGh3R")
	require.NoError(t, err)

	curve25519PublicKey := ed25519ToCurve25519PublicKey(account)
	assert.Equal(t, "37asXhXd7c8vUNCxHHxAMMrAGPCpYrAtJ8L1fvu4rxzU", base58.Encode(curve25519PublicKey[:]))
}

func TestNaclBox_SharedKey(t *testing.T) {
	// Public key: eMTkrsg1acVKyk8jp4b6JQM3TK2fSxwaZV3gZqCmxsp
	account1, err := common.NewAccountFromPrivateKeyString("2fJLfaTREkNBiDbB26dL4syDozhCEf2pNMorXvBf7593yC59d1kDFsXAA9cN63Bb5MDUgSeU5AhsfS2aTZQHoNyU")
	require.NoError(t, err)

	// Public key: J1uvrtrg42Yw3zA7v7VK1wBahW8XkTLxqsnKksZab9wS
	account2, err := common.NewAccountFromPrivateKeyString("3GKRCGo814rSVa6XkFARZGq13Rb7DSGwF2c6SSRSzMfyQ3wuDAPoELzhsvH6r5A1PFACpFuesDaRHUEoL1PFAxRa")
	require.NoError(t, err)

	curve25519PrivateKey1 := ed25519ToCurve25519PrivateKey(account1)
	curve25519PublicKey1 := ed25519ToCurve25519PublicKey(account1)

	curve25519PrivateKey2 := ed25519ToCurve25519PrivateKey(account2)
	curve25519PublicKey2 := ed25519ToCurve25519PublicKey(account2)

	var shared [32]byte
	box.Precompute(&shared, &curve25519PublicKey1, &curve25519PrivateKey2)
	assert.Equal(t, "GC1cihUsj3rBqqdzBmWkEejWuv6p3scxPqCEwUBUUdQq", base58.Encode(shared[:]))

	box.Precompute(&shared, &curve25519PublicKey2, &curve25519PrivateKey1)
	assert.Equal(t, "GC1cihUsj3rBqqdzBmWkEejWuv6p3scxPqCEwUBUUdQq", base58.Encode(shared[:]))
}

func TestNaclBox_RoundTrip(t *testing.T) {
	plaintextMessage := "super secret message"

	// Public key: 3hpSY5ibVa87dDLJhLdVAy7QVso2Edhr28ZEJmpDF7UQ
	sender, err := common.NewAccountFromPrivateKeyString("2tKSW5f1dag1pGzDSsM9yo32KSMNcTkBAvXEfZ1u2pcqkmo8oYcbtsnA8m9YVd8EUzVJeU5mvjFKjPQF2m4Xifg8")
	require.NoError(t, err)

	// Public key: 6Hsb5k8UjjsowqXgRBr1BR3EKFPeYjA8Nn9prYDU24v6
	receiver, err := common.NewAccountFromPrivateKeyString("38EyWg6Eay5bhcZR465FD2agT2bf7BhyWNJJ64ypfdQGTb6mHU3an2f8pvWapSrE3j3hEFu1h7HYoa6eykAHUBJr")
	require.NoError(t, err)

	var nonce naclBoxNonce
	decodedNonce, err := base58.Decode("Jc1X8GdaMmcRDRKiAaMZSRBDLZAFuf9xq")
	require.NoError(t, err)
	require.Len(t, decodedNonce, len(nonce))
	copy(nonce[:], decodedNonce)

	expectedEncryptedValue := "2eXsYDo1gcuYc1Nw7uUGZmJZrj2vu33TnrXve62HwzhyTggjjz"
	actualEncryptedValue := encryptMessageUsingNaclBoxWithProvidedNonce(sender, receiver, plaintextMessage, nonce)
	assert.Equal(t, expectedEncryptedValue, base58.Encode(actualEncryptedValue))

	decryptedValue, err := decryptMessageUsingNaclBox(sender, receiver, actualEncryptedValue, nonce)
	require.NoError(t, err)
	assert.Equal(t, plaintextMessage, decryptedValue)
}

// Transaction: 3Bq7yAtxkTMPRq26mooL6vnBueD77rP3o8VaZfviWA8iJJb24SXnpLNEMqa116CJXpP3Tvbo9T257Y7U7W5R5bQn
func TestNaclBox_DecryptRealBlockchainMessage(t *testing.T) {
	sender, err := common.NewAccountFromPublicKeyString("McS32C1q6Rv1odkEoR5g1xtFBN7TdbkLFvGeyvQtzLF")
	require.NoError(t, err)

	seed, err := base58.Decode("CADTR1JPf4KzQ9fuYJMRaaWbfshB8qSb38RpFzC8mtjq")
	require.NoError(t, err)
	receiver, err := common.NewAccountFromPrivateKeyBytes(ed25519.NewKeyFromSeed(seed))
	require.NoError(t, err)

	var nonce naclBoxNonce
	decodedNonce, err := base58.Decode("PjgJtLTPZmHGCqJ6Sj1X4ZN8wVbinW4nU")
	require.NoError(t, err)
	require.Len(t, decodedNonce, len(nonce))
	copy(nonce[:], decodedNonce)

	encryptedValue, err := base58.Decode("2BRs8n3fqqDUXVjEdup3d5zoxFALbvs6KcKnMCgpoJ6iafXjikwqbjnbehyha")
	require.NoError(t, err)

	expectedDecryptedValue := "Blockchain messaging is 🔥"
	decryptedValue, err := decryptMessageUsingNaclBox(sender, receiver, encryptedValue, nonce)
	require.NoError(t, err)
	assert.Equal(t, expectedDecryptedValue, decryptedValue)
}