Reticulum-Go/pkg/cryptography/aes_test.go

package cryptography

import (
	"bytes"
	"crypto/aes"
	"crypto/cipher"
	"crypto/rand"
	"fmt"
	"testing"
)

func TestGenerateAES256Key(t *testing.T) {
	key, err := GenerateAES256Key()
	if err != nil {
		t.Fatalf("GenerateAES256Key failed: %v", err)
	}
	if len(key) != AES256KeySize {
		t.Errorf("Expected key size %d, got %d", AES256KeySize, len(key))
	}
}

func TestAES256CBCEncryptionDecryption(t *testing.T) {
	key, err := GenerateAES256Key()
	if err != nil {
		t.Fatalf("Failed to generate AES-256 key: %v", err)
	}

	testCases := []struct {
		name      string
		plaintext []byte
	}{
		{"ShortMessage", []byte("Hello")},
		{"BlockSizeMessage", []byte("This is 16 bytes")},
		{"LongMessage", []byte("This is a longer message that spans multiple AES blocks and tests the padding.")},
		{"EmptyMessage", []byte("")},
		{"SingleByte", []byte("A")},
		{"ExactlyTwoBlocks", []byte("This is exactly 32 bytes long!!!")},
	}

	for _, tc := range testCases {
		t.Run(tc.name, func(t *testing.T) {
			ciphertext, err := EncryptAES256CBC(key, tc.plaintext)
			if err != nil {
				t.Fatalf("EncryptAES256CBC failed: %v", err)
			}

			decrypted, err := DecryptAES256CBC(key, ciphertext)
			if err != nil {
				t.Fatalf("DecryptAES256CBC failed: %v", err)
			}

			if !bytes.Equal(tc.plaintext, decrypted) {
				t.Errorf("Decrypted text does not match original plaintext.\nGot:  %q (%x)\nWant: %q (%x)",
					decrypted, decrypted, tc.plaintext, tc.plaintext)
			}
		})
	}
}

func TestAES256CBC_InvalidKeySize(t *testing.T) {
	plaintext := []byte("test message")

	invalidKeys := [][]byte{
		make([]byte, 16), // AES-128
		make([]byte, 24), // AES-192
		make([]byte, 15), // Too short
		make([]byte, 33), // Too long
		nil,              // Nil key
	}

	for i, key := range invalidKeys {
		t.Run(fmt.Sprintf("InvalidKey_%d", i), func(t *testing.T) {
			_, err := EncryptAES256CBC(key, plaintext)
			if err == nil {
				t.Error("EncryptAES256CBC should have failed with invalid key size")
			}

			// Test with some dummy ciphertext
			dummyCiphertext := make([]byte, 32) // Just enough for IV + one block
			rand.Read(dummyCiphertext)
			_, err = DecryptAES256CBC(key, dummyCiphertext)
			if err == nil {
				t.Error("DecryptAES256CBC should have failed with invalid key size")
			}
		})
	}
}

func TestDecryptAES256CBCErrorCases(t *testing.T) {
	key, err := GenerateAES256Key()
	if err != nil {
		t.Fatalf("Failed to generate key: %v", err)
	}

	t.Run("CiphertextTooShort", func(t *testing.T) {
		shortCiphertext := []byte{0x01, 0x02, 0x03} // Less than AES block size
		_, err := DecryptAES256CBC(key, shortCiphertext)
		if err == nil {
			t.Error("DecryptAES256CBC should have failed for ciphertext shorter than block size")
		}
	})

	t.Run("CiphertextNotMultipleOfBlockSize", func(t *testing.T) {
		iv := make([]byte, aes.BlockSize)
		rand.Read(iv)
		invalidCiphertext := append(iv, []byte{0x01, 0x02, 0x03}...) // IV + data not multiple of block size
		_, err := DecryptAES256CBC(key, invalidCiphertext)
		if err == nil {
			t.Error("DecryptAES256CBC should have failed for ciphertext not multiple of block size")
		}
	})

	t.Run("InvalidPadding", func(t *testing.T) {
		// Create a valid ciphertext first
		plaintext := []byte("valid data")
		ciphertext, err := EncryptAES256CBC(key, plaintext)
		if err != nil {
			t.Fatalf("Failed to create test ciphertext: %v", err)
		}

		// Corrupt the byte that XORs with the last padding byte.
		// In CBC, P[i] = D(C[i]) ^ C[i-1].
		// The last byte of plaintext P[len-1] depends on C[len-1] and C[len-1-BlockSize].
		// If we modify C[len-1-BlockSize], we flip the bits of P[len-1] predictably.
		// If we modify C[len-1] (the last byte of ciphertext), we scramble the whole block D(C[len-1]),
		// which might accidentally result in valid padding (e.g. 0x01).
		// So we corrupt the IV (or previous block) corresponding to the last byte.
		corruptedCiphertext := make([]byte, len(ciphertext))
		copy(corruptedCiphertext, ciphertext)
		corruptedCiphertext[len(ciphertext)-aes.BlockSize-1] ^= 0xFF

		_, err = DecryptAES256CBC(key, corruptedCiphertext)
		if err == nil {
			t.Error("DecryptAES256CBC should have failed for corrupted padding")
		}
	})

	t.Run("EmptyPlaintextAfterDecryption", func(t *testing.T) {
		// This creates a ciphertext that decrypts to just padding
		key, _ := GenerateAES256Key()
		iv := make([]byte, aes.BlockSize)
		// A block of padding bytes
		paddedBlock := bytes.Repeat([]byte{byte(aes.BlockSize)}, aes.BlockSize)

		block, _ := aes.NewCipher(key)
		mode := cipher.NewCBCEncrypter(block, iv)
		ciphertext := make([]byte, len(paddedBlock))
		mode.CryptBlocks(ciphertext, paddedBlock)

		// Prepend IV
		fullCiphertext := append(iv, ciphertext...)

		// This should decrypt to an empty slice, which is valid
		decrypted, err := DecryptAES256CBC(key, fullCiphertext)
		if err != nil {
			t.Errorf("DecryptAES256CBC failed for empty plaintext case: %v", err)
		}
		if len(decrypted) != 0 {
			t.Errorf("Expected empty plaintext, got %q", decrypted)
		}
	})
}

func TestConstants(t *testing.T) {
	if AES256KeySize != 32 {
		t.Errorf("AES256KeySize should be 32, got %d", AES256KeySize)
	}
}

func BenchmarkAES256CBC(b *testing.B) {
	key, err := GenerateAES256Key()
	if err != nil {
		b.Fatalf("Failed to generate key: %v", err)
	}

	data := make([]byte, 1024) // 1KB of data
	rand.Read(data)

	b.Run("Encrypt", func(b *testing.B) {
		b.ResetTimer()
		for i := 0; i < b.N; i++ {
			_, err := EncryptAES256CBC(key, data)
			if err != nil {
				b.Fatal(err)
			}
		}
	})

	ciphertext, _ := EncryptAES256CBC(key, data)
	b.Run("Decrypt", func(b *testing.B) {
		b.ResetTimer()
		for i := 0; i < b.N; i++ {
			_, err := DecryptAES256CBC(key, ciphertext)
			if err != nil {
				b.Fatal(err)
			}
		}
	})
}