privatebin-mirror/tst/FormatV2Test.php

<?php declare(strict_types=1);

use PHPUnit\Framework\TestCase;
use PrivateBin\FormatV2;

class FormatV2Test extends TestCase
{
    public function testFormatV2ValidatorValidatesCorrectly()
    {
        $paste = Helper::getPastePost();
        $comment = Helper::getCommentPost();
        $this->assertTrue(FormatV2::isValid($paste), 'valid format');
        $this->assertTrue(FormatV2::isValid($comment, true), 'valid format');

        $paste['adata'][0][0] = '$';
        $this->assertFalse(FormatV2::isValid($paste), 'invalid base64 encoding of iv');

        $paste = Helper::getPastePost();
        $paste['adata'][0][1] = '$';
        $this->assertFalse(FormatV2::isValid($paste), 'invalid base64 encoding of salt');

        $paste = Helper::getPastePost();
        $paste['adata'][] = 0;
        $this->assertFalse(FormatV2::isValid($paste), 'invalid extra adata entry');

        $paste = Helper::getPastePost();
        $paste['adata'][] = 0;
        $this->assertFalse(FormatV2::isValid($paste), 'invalid extra adata entry');

        $paste = Helper::getPastePost();
        $paste['ct'] = '$';
        $this->assertFalse(FormatV2::isValid($paste), 'invalid base64 encoding of ct');

        $paste = Helper::getPastePost();
        $paste['ct'] = 'bm9kYXRhbm9kYXRhbm9kYXRhbm9kYXRhbm9kYXRhCg==';
        $this->assertFalse(FormatV2::isValid($paste), 'low ct entropy');

        $paste = Helper::getPastePost();
        $paste['adata'][0][0] = 'MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=';
        $this->assertFalse(FormatV2::isValid($paste), 'iv too long');

        $paste = Helper::getPastePost();
        $paste['adata'][0][1] = 'MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=';
        $this->assertFalse(FormatV2::isValid($paste), 'salt too long');

        $paste = Helper::getPastePost();
        $paste['foo'] = 'bar';
        $this->assertFalse(FormatV2::isValid($paste), 'invalid additional key');
        unset($paste['meta']);
        $this->assertFalse(FormatV2::isValid($paste), 'invalid missing key');

        $paste = Helper::getPastePost();
        $paste['v'] = 0.9;
        $this->assertFalse(FormatV2::isValid($paste), 'unsupported version');

        $paste = Helper::getPastePost();
        $paste['adata'][0][2] = 1000;
        $this->assertFalse(FormatV2::isValid($paste), 'not enough iterations');

        $paste = Helper::getPastePost();
        $paste['adata'][0][3] = 127;
        $this->assertFalse(FormatV2::isValid($paste), 'invalid key size');

        $paste = Helper::getPastePost();
        $paste['adata'][0][4] = 63;
        $this->assertFalse(FormatV2::isValid($paste), 'invalid tag length');

        $paste = Helper::getPastePost();
        $paste['adata'][0][5] = '!#@';
        $this->assertFalse(FormatV2::isValid($paste), 'invalid algorithm');

        $paste = Helper::getPastePost();
        $paste['adata'][0][6] = '!#@';
        $this->assertFalse(FormatV2::isValid($paste), 'invalid mode');

        $paste = Helper::getPastePost();
        $paste['adata'][0][7] = '!#@';
        $this->assertFalse(FormatV2::isValid($paste), 'invalid compression');

        $paste = Helper::getPaste();
        $this->assertFalse(FormatV2::isValid($paste), 'invalid meta key');
    }

    public function testFormatV2ValidatorRejectsMalformedTypes()
    {
        // malformed input must yield "false" (Invalid data) rather than a
        // fatal type error under strict_types
        $paste = Helper::getPastePost();
        $paste['v'] = 'abc';
        $this->assertFalse(FormatV2::isValid($paste), 'non-numeric version');

        $paste = Helper::getPastePost();
        $paste['v'] = [];
        $this->assertFalse(FormatV2::isValid($paste), 'array version');

        $paste = Helper::getPastePost();
        $paste['ct'] = ['not', 'a', 'string'];
        $this->assertFalse(FormatV2::isValid($paste), 'non-string ciphertext');

        $paste = Helper::getPastePost();
        $paste['meta'] = 'not-an-array';
        $this->assertFalse(FormatV2::isValid($paste), 'non-array meta');

        $paste = Helper::getPastePost();
        $paste['adata'][0] = 'not-an-array';
        $this->assertFalse(FormatV2::isValid($paste), 'non-array cipher parameters');

        $paste = Helper::getPastePost();
        $paste['adata'][0] = [];
        $this->assertFalse(FormatV2::isValid($paste), 'empty cipher parameters');

        $paste = Helper::getPastePost();
        $paste['adata'][0][0] = [];
        $this->assertFalse(FormatV2::isValid($paste), 'non-string iv');

        $comment = Helper::getCommentPost();
        $comment['ct'] = 42;
        $this->assertFalse(FormatV2::isValid($comment, true), 'non-string comment ciphertext');

        $comment = Helper::getCommentPost();
        $comment['adata'][] = $comment['pasteid'];
        $comment['adata'][] = $comment['parentid'];
        $this->assertTrue(FormatV2::isValid($comment, true), 'comment with authenticated IDs');

        $comment = Helper::getCommentPost();
        $comment['adata'][] = $comment['pasteid'];
        $this->assertFalse(FormatV2::isValid($comment, true), 'comment with incomplete authenticated IDs');

        $comment = Helper::getCommentPost();
        $comment['adata'][] = $comment['pasteid'];
        $comment['adata'][] = $comment['parentid'];
        $comment['adata'][] = $comment['parentid'];
        $this->assertFalse(FormatV2::isValid($comment, true), 'comment with too many cipher parameters');

        $comment = Helper::getCommentPost();
        $comment['adata'][] = '1111111111111111';
        $comment['adata'][] = $comment['parentid'];
        $this->assertFalse(FormatV2::isValid($comment, true), 'comment with mismatched document ID');

        $comment = Helper::getCommentPost();
        $comment['adata'][] = $comment['pasteid'];
        $comment['adata'][] = '1111111111111111';
        $this->assertFalse(FormatV2::isValid($comment, true), 'comment with mismatched parent ID');

        $comment = Helper::getCommentPost();
        $comment['adata'][] = $comment['pasteid'];
        $comment['adata'][] = [];
        $this->assertFalse(FormatV2::isValid($comment, true), 'comment with non-string parent ID');
    }
}