jstink 1.0.0

package/tests/ciphertexts.test.js

@@ -0,0 +1,41 @@
+const ciphertexts = require('../src/ciphertexts');
+const fs = require('fs');
+
+describe('ciphertexts', () => {
+
+    it('should parse encrypted data', () => {
+        const encrypted = fs.readFileSync('./tests/encrypted.dat');
+        const {keyId, iv, ciphertext, tag} = ciphertexts.parse(encrypted);
+        expect(keyId).toEqual('1902300492');
+        expect(iv).toEqual(Buffer.from([
+            102, 74, 139, 63, 237, 243, 193, 181, 128, 93, 61, 165
+        ]));
+        expect(ciphertext).toEqual(Buffer.from([
+            96, 225, 81, 27, 80, 6, 153, 127, 14, 150, 85, 211
+        ]));
+        expect(tag).toEqual(Buffer.from([
+            73, 196, 242, 175, 124, 206, 144, 15, 144, 25, 232, 101, 110, 198, 29, 132
+        ]));
+    });
+
+    it('should create encrypted data in Tink format', () => {
+        const keyId = '1902300492';
+        const iv = Buffer.from([
+            102, 74, 139, 63, 237, 243, 193, 181, 128, 93, 61, 165
+        ]);
+        const ciphertext = Buffer.from([
+            96, 225, 81, 27, 80, 6, 153, 127, 14, 150, 85, 211
+        ]);
+        const tag = Buffer.from([
+            73, 196, 242, 175, 124, 206, 144, 15, 144, 25, 232, 101, 110, 198, 29, 132
+        ]);
+        const encrypted = ciphertexts.create({keyId, iv, ciphertext, tag});
+        expect(encrypted).toEqual(Buffer.from([
+            1, // version
+            113, 98, 205, 76, // key id as 4-byte BE int
+            102, 74, 139, 63, 237, 243, 193, 181, 128, 93, 61, 165, // iv
+            96, 225, 81, 27, 80, 6, 153, 127, 14, 150, 85, 211, // ciphertext
+            73, 196, 242, 175, 124, 206, 144, 15, 144, 25, 232, 101, 110, 198, 29, 132 // tag
+        ]));
+    });
+});

package/tests/encrypted.dat

@@ -0,0 +1 @@
+
qb�LfJ�?�����]=�`�QP��U�I��|ΐ��en��

package/tests/index.test.js

@@ -0,0 +1,44 @@
+const { Aead } = require('../src/index');
+const fs = require('fs');
+
+
+jest.mock('@aws-sdk/client-kms', () => {
+    const fs = require('fs');
+    const protobuf = fs.readFileSync('./tests/keyset.protobuf');
+
+    const originalModule = jest.requireActual("@aws-sdk/client-kms");
+    return {
+        ...originalModule,
+        KMSClient: jest.fn(() => ({
+            send: jest.fn().mockImplementation((command) => {
+            if (command instanceof originalModule.DecryptCommand) {
+                // Mocked response for the decrypt command
+                return Promise.resolve({
+                    Plaintext: protobuf
+                });
+            }
+            throw new Error("Unmocked command");
+            })
+        }))
+    };
+});
+
+describe('jstink', () => {
+    it('should encrypt and decrypt', async () => {
+        const keyset = JSON.parse(fs.readFileSync('tests/keyset.json'));
+        const aead = new Aead(keyset);
+
+        const ciphertext = await aead.encrypt('Hello World!', 'customer-id1');
+        const plaintext = await aead.decrypt(ciphertext, 'customer-id1');
+        expect(plaintext).toBe('Hello World!');
+    });
+
+    it('should decrypt', async () => {
+        const keyset = JSON.parse(fs.readFileSync('tests/keyset.json'));
+        const aead = new Aead(keyset);
+        const ciphertext = fs.readFileSync('tests/encrypted.dat');
+        const plaintext = await aead.decrypt(ciphertext, 'customer-id1');
+        expect(plaintext).toBe('Hello World!');
+    });
+
+});

package/tests/keyset.json

@@ -0,0 +1 @@
+{"encryptedKeyset":"AQICAHg+l9t3jKGYAMIaeoH1wGK7KN9UlgWeOQ1DoXOs4LzszgF+cueWYZwVrb4D/31p25f/AAAAzzCBzAYJKoZIhvcNAQcGoIG+MIG7AgEAMIG1BgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDPvymtKGRuYjG6v7aAIBEICBhzaswiK7Z1VYBP1J86qS9Ooahr/W21Azj6FyKAR13KeM7n7fUNt4Z1KuzA7U3aGJmYU58ACqNnXEwTmeb7PuUV3HrePL64HqIsgfJhV4n7dDa84a6hmLf/TAdDxDVgQRhkPvMqQA1Yw8E0qo9YUFux1nJWoEKIRIod1ZsjA5TIHHaPsYQTNDGg==","keysetInfo":{"primaryKeyId":1902300492,"keyInfo":[{"typeUrl":"type.googleapis.com/google.crypto.tink.AesGcmKey","status":"ENABLED","keyId":1902300492,"outputPrefixType":"TINK"}]}}

package/tests/keysets.test.js

@@ -0,0 +1,17 @@
+const keysets = require('../src/keysets');
+const fs = require('fs');
+
+describe('keysets', () => {
+    it('should parse keyset from protobuf', () => {
+        const protobuf = fs.readFileSync('./tests/keyset.protobuf');
+        const keyset = keysets.create(protobuf);
+        const testKeyId = '1902300492';
+
+        expect(keyset).toHaveProperty(testKeyId);
+        expect(keyset[testKeyId]).toEqual(new Uint8Array([
+            66, 178, 69, 234, 142, 47, 134, 16, 40, 116, 14, 29, 11, 66, 208,
+            227, 3, 218, 151, 211, 193, 210, 42, 252, 234, 12, 0, 23, 82, 14,
+            200, 24,
+        ]));
+    });
+});