zkxw/backend/tests/test_api_crypto.py

import unittest


from app.core import api_crypto


class ApiCryptoTests(unittest.TestCase):
    def test_derive_key_is_stable_for_same_input(self):
        key1 = api_crypto.derive_key(
            fixed_secret="fixed-secret",
            user_id="u1",
            ts=1714300000000,
            nonce="nonce-1",
        )
        key2 = api_crypto.derive_key(
            fixed_secret="fixed-secret",
            user_id="u1",
            ts=1714300000000,
            nonce="nonce-1",
        )
        self.assertEqual(key1, key2)
        self.assertEqual(len(key1), 32)

    def test_encrypt_decrypt_roundtrip(self):
        key = api_crypto.derive_key(
            fixed_secret="fixed-secret",
            user_id="u1",
            ts=1714300000000,
            nonce="nonce-1",
        )
        payload = {"a": 1, "b": "x"}
        cipher = api_crypto.encrypt_json(payload, key)
        plain = api_crypto.decrypt_json(cipher, key)
        self.assertEqual(plain, payload)

    def test_encrypt_decrypt_roundtrip_cbc(self):
        key = api_crypto.derive_key(
            fixed_secret="fixed-secret",
            user_id="u1",
            ts=1714300000000,
            nonce="nonce-2",
        )
        payload = {"list": [1, 2, 3], "ok": True}
        cipher = api_crypto.encrypt_json(payload, key, alg="cbc")
        plain = api_crypto.decrypt_json(cipher, key, alg="cbc")
        self.assertEqual(plain, payload)


if __name__ == "__main__":
    unittest.main()