Skip to content

Commit

Permalink
test: add signal encryption test
Browse files Browse the repository at this point in the history
  • Loading branch information
braginini committed Jun 3, 2021
1 parent 45697a0 commit 9b327ea
Show file tree
Hide file tree
Showing 3 changed files with 62 additions and 5 deletions.
17 changes: 17 additions & 0 deletions .github/workflows/golang-test.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
on: [push, pull_request]
name: Test
jobs:
test:
strategy:
matrix:
go-version: [1.16.x]
runs-on: ubuntu-latest
steps:
- name: Install Go
uses: actions/setup-go@v2
with:
go-version: ${{ matrix.go-version }}
- name: Checkout code
uses: actions/checkout@v2
- name: Test
run: go test ./...
10 changes: 5 additions & 5 deletions signal/encryption.go
Original file line number Diff line number Diff line change
Expand Up @@ -14,24 +14,24 @@ import (
// Wireguard keys are used for encryption

// Encrypt encrypts a message using local Wireguard private key and remote peer's public key.
func Encrypt(msg []byte, peersPublicKey wgtypes.Key, privateKey wgtypes.Key) ([]byte, error) {
func Encrypt(msg []byte, peerPublicKey wgtypes.Key, privateKey wgtypes.Key) ([]byte, error) {
nonce, err := genNonce()
if err != nil {
return nil, err
}
return box.Seal(nonce[:], msg, nonce, toByte32(peersPublicKey), toByte32(privateKey)), nil
return box.Seal(nonce[:], msg, nonce, toByte32(peerPublicKey), toByte32(privateKey)), nil
}

// Decrypt decrypts a message that has been encrypted by the remote peer using Wireguard private key and remote peer's public key.
func Decrypt(encryptedMsg []byte, peersPublicKey wgtypes.Key, privateKey wgtypes.Key) ([]byte, error) {
func Decrypt(encryptedMsg []byte, peerPublicKey wgtypes.Key, privateKey wgtypes.Key) ([]byte, error) {
nonce, err := genNonce()
if err != nil {
return nil, err
}
copy(nonce[:], encryptedMsg[:24])
opened, ok := box.Open(nil, encryptedMsg[24:], nonce, toByte32(peersPublicKey), toByte32(privateKey))
opened, ok := box.Open(nil, encryptedMsg[24:], nonce, toByte32(peerPublicKey), toByte32(privateKey))
if !ok {
return nil, fmt.Errorf("failed to decrypt message from peer %s", peersPublicKey.String())
return nil, fmt.Errorf("failed to decrypt message from peer %s", peerPublicKey.String())
}

return opened, nil
Expand Down
40 changes: 40 additions & 0 deletions signal/encryption_test.go
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
package signal

import (
"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
"testing"
)

func TestEncryptDecrypt(t *testing.T) {
strMsg := "message to encrypt"
bytesMsg := []byte(strMsg)

peerAKey, err := wgtypes.GenerateKey()
if err != nil {
t.Error()
return
}

peerBKey, err := wgtypes.GenerateKey()
if err != nil {
t.Error()
return
}

encryptedMessage, err := Encrypt(bytesMsg, peerBKey.PublicKey(), peerAKey)
if err != nil {
t.Error(err)
return
}

decryptedMessage, err := Decrypt(encryptedMessage, peerAKey.PublicKey(), peerBKey)
if err != nil {
t.Error(err)
return
}

if string(decryptedMessage) != strMsg {
t.Error()
}

}

0 comments on commit 9b327ea

Please sign in to comment.